#
# profile_id 1
# разрешаем ARP
#
# profile_id 2
# запрещаем ненужные МАС-и
#
# profile_id 3
# разрешаем DHCP запросы
# запрещаем DHCP ответы на юзерских портах
# разрешаем менеджер точек
# разрешаем менеджер свичей
#
# profile_id 4
# запрещаем всевозможные бродкасты
#
# profile_id 5
# разрешаем нужные протоколы
#
# profile_id 6
# разрешаем dst TCP порты
#
# profile_id 7
# разрешаем dst UDP порты
#
# profile_id 8
# разрешаем src TCP порты
#
# profile_id 9
# запрещаем весь возможный траффик
#

delete access_profile profile_id 1
create access_profile ethernet ethernet_type profile_id 1
config access_profile profile_id 1 add access_id 1 ethernet ethernet_type 0x806 port 1-26 permit

delete access_profile profile_id 2
create access_profile ethernet source_mac ff-ff-ff-ff-ff-ff profile_id 2
#config access_profile profile_id 2 add access_id 1 ethernet source_mac 00-00-00-00-00-00 port 2-26 deny

delete access_profile profile_id 3
create access_profile ip udp src_port_mask 0xffff profile_id 3
config access_profile profile_id 3 add access_id  1 ip udp src_port    68 port 2-26 permit priority 7
config access_profile profile_id 3 add access_id 26 ip udp src_port    67 port 2-26 deny
config access_profile profile_id 3 add access_id 51 ip udp src_port 64512 port 2-26 permit priority 7
config access_profile profile_id 3 add access_id 76 ip udp src_port 64515 port 2-26 permit priority 7

delete access_profile profile_id 4
create access_profile ethernet destination_mac ff-ff-ff-ff-ff-ff profile_id 4
config access_profile profile_id 4 add access_id 1 ethernet destination_mac ff-ff-ff-ff-ff-ff port 2-26 deny

delete access_profile profile_id 5
create access_profile ip protocol_id_mask 0xff profile_id 5
config access_profile profile_id 5 add access_id  1 ip protocol_id  1 port 2-26 permit priority 7 replace_priority replace_dscp_with 63
config access_profile profile_id 5 add access_id 26 ip protocol_id 47 port 2-26 permit priority 7 replace_priority replace_dscp_with 63

delete access_profile profile_id 6
create access_profile ip tcp dst_port_mask 0xffff profile_id 6
config access_profile profile_id 6 add access_id   1 ip tcp dst_port   20 port 2-26 permit
config access_profile profile_id 6 add access_id  26 ip tcp dst_port   21 port 2-26 permit
config access_profile profile_id 6 add access_id  51 ip tcp dst_port   80 port 2-26 permit
config access_profile profile_id 6 add access_id  76 ip tcp dst_port  443 port 2-26 permit
config access_profile profile_id 6 add access_id 101 ip tcp dst_port 1723 port 2-26 permit priority 7 replace_priority replace_dscp_with 63

delete access_profile profile_id 7
create access_profile ip udp dst_port_mask 0xffff profile_id 7
config access_profile profile_id 7 add access_id   1 ip udp dst_port    53 port 2-26 permit priority 7 replace_priority
config access_profile profile_id 7 add access_id  26 ip udp dst_port    69 port 2-26 permit priority 7 replace_priority
config access_profile profile_id 7 add access_id  51 ip udp dst_port   123 port 2-26 permit
config access_profile profile_id 7 add access_id  76 ip udp dst_port   162 port 2-26 permit priority 7
config access_profile profile_id 7 add access_id 101 ip udp dst_port 27015 port 2-26 permit
config access_profile profile_id 7 add access_id 126 ip udp dst_port 27016 port 2-26 permit

delete access_profile profile_id 8
create access_profile ip tcp src_port_mask 0xffff profile_id 8
config access_profile profile_id 8 add access_id  1 ip tcp src_port 23 port 2-26 permit priority 7
config access_profile profile_id 8 add access_id 26 ip tcp src_port 80 port 2-26 permit priority 7

delete access_profile profile_id 9
create access_profile ethernet source_mac 00-00-00-00-00-00 profile_id 9
config access_profile profile_id 9 add access_id 1 ethernet source_mac 00-00-00-00-00-00 port 2-26 deny