Hi, I am wondering if someone has an example lockdown configuration for using a routerboard (750GL or alike) in a customer premise environment (FTTH and similar)?

Features that should work is the following (and probably some I forgot):

- ARP snooping/protection and limiting
- DHCP snooping/protection, block and contain offers going the wrong way
- Loop protection
- Storm control
- Automatic interface SNMP trap and shutdown port for X minutes

Anyone?