# clear all acls
delete access_profile all

# [4] dhcp requests from client
create access_profile profile_id 4 profile_name ALLOW_DHCP ip destination_ip_mask 255.255.255.255 udp src_port_mask 0xFFFF dst_port_mask 0xFFFF

# [5] broadcast deny
create access_profile profile_id 5 profile_name DENY_BROADCAST ip destination_ip_mask 255.255.255.255

# [6] macs to allow (broadcast + dns + dhcp + http + pppoe + gw)
create access_profile profile_id 6 profile_name ALLOW_MAC ethernet source_mac FF-FF-FF-FF-FF-FF

# [7] macs to deny (all)
create access_profile profile_id 7 profile_name DENY_MAC ethernet source_mac 00-00-00-00-00-00

# [8] arp to allow (dns + dhcp + http + gw)
create access_profile profile_id 8 profile_name ALLOW_ARP packet_content_mask offset_chunk_1 3 0x0000FFFF offset_chunk_2 5 0x0000FFFF offset_chunk_3 10 0xFFFFFFFF

# [9] arp to deny (all)
create access_profile profile_id 9 profile_name DENY_ARP ethernet destination_mac FF-FF-FF-FF-FF-FF ethernet_type

# configure acls
......
......

# filters
config filter netbios 1-28 state disable
config filter extensive_netbios 1-28 state disable
config filter RPC_portmapper 1-28 state disable
config filter dhcp_server ports 1-27 state enable
config arp_spoofing_prevention add gateway_ip 10.9.0.1 gateway_mac 00-11-0B-xx-xx-xx ports 1-27
config arp_spoofing_prevention add gateway_ip 10.9.1.1 gateway_mac 00-11-0B-xx-xx-xx ports 1-27
config arp_spoofing_prevention add gateway_ip 10.9.3.254 gateway_mac 00-00-5E-xx-xx-xx ports 1-27
config traffic_segmentation 1-27 forward_list 28

DES-3528:admin#show access_profile
Command: show access_profile

Access Profile Table

Total User Set Rule Entries : 16
Total Used HW Entries       : 25
Total Available HW Entries  : 1767