access-list
 acl-profile cpu l3 control-plane-protection
  priority 0
  access-list-entry 10
   description PERMIT_SSH_TO_EQUIPMENT
   match source-ipv4-address 10.255.254.0/23
   match destination-port ssh
   action permit
  !
  access-list-entry 20
   description PERMIT_SSH_FROM_EQUIPMENT
   match source-port ssh
   action permit
  !
  access-list-entry 21
   description PERMIT_SSH_IPv6_TO_EQUIPMENT
   match source-ipv6-address 2001:c0a8:ff23::/64
   match destination-port ssh
   action permit
  !
  access-list-entry 31
   description PERMIT_NETCONF_PROTOCOL
   match source-ipv4-address 10.255.254.0/24
   match destination-port 830
   action permit
  !
  access-list-entry 40
   description PERMIT_TACACS_PROTOCOL
   match source-port 49
   action permit
  !
  access-list-entry 41
   description PERMIT_RADIUS_AUTHENTICATION
   match source-port 1812
   action permit
  !
  access-list-entry 42
   description PERMIT_RADIUS_AUTHORIZATION
   match source-port 1813
   action permit
  !
  access-list-entry 60
   description PERMIT_ARP_PROTOCOL
   match ethertype arp
   action permit
  !
  access-list-entry 70
   description PERMIT_ICMPv4_PROTOCOL
   match ip-protocol icmp
   action permit
  !
  access-list-entry 80
   description PERMIT_ICMPv6_PROTOCOL
   match ip-protocol ipv6-icmp
   action permit
  !
  access-list-entry 90
   description PERMIT_SLOW_PROTOCOLS
   match ethertype 0x8809
   action permit
  !
  access-list-entry 100
   description PERMIT_xSTP_PROTOCOL
   match ethertype 0x4242
   action permit
  !
  access-list-entry 110
   description PERMIT_EAPS_PROTOCOL
   match ethertype 0xaaaa
   action permit
  !
  access-list-entry 130
   description PERMIT_DESTINATION_BFD_PROTOCOL
   match destination-port 3784
   action permit
  !
  access-list-entry 131
   description PERMIT_SOURCE_BFD_PROTOCOL
   match source-port 3784
   action permit
  !
  access-list-entry 140
   description PERMIT_OSPF_PROTOCOL
   match ip-protocol 89
   action permit
  !
  access-list-entry 160
   description PERMIT_DESTINATION_LDP_PROTOCOL
   match destination-port 646
   action permit
  !
  access-list-entry 161
   description PERMIT_SOURCE_LDP_PROTOCOL
   match source-port 646
   action permit
  !
  access-list-entry 170
   description PERMIT_RSVP_PROTOCOL
   match ip-protocol 46
   action permit
  !
  access-list-entry 180
   description PERMIT_TTL_1_PACKET
   match ttl 1
   action permit
  !
  access-list-entry 190
   description PERMIT_CONTROL_PACKETS_TWAMP_PROTOCOL
   match destination-port 862
   action permit
  !
  access-list-entry 191
   description PERMIT_CONTROL_PACKETS_TWAMP_PROTOCOL
   match source-port 862
   action permit
  !
  access-list-entry 192
   description PERMIT_DATA_PACKETS_TWAMP_PROTOCOL
   match destination-ipv4-address 172.30.1.3/32
   match source-ipv4-address 172.30.1.2/32
   action permit
  !
  access-list-entry 200
   description PERMIT_TFTP_PACKETS_FROM_SERVER
   match source-ipv4-address 100.76.180.180/32
   action permit
  !
  access-list-entry 210
   description PERMIT_OAM_CFM_PROTOCOLS
   match ethertype 0x8902
   action permit
  !
  access-list-entry 220
   description PERMIT_PPPoE_PROTOCOL
   match ethertype pppoed
   action permit
  !
  access-list-entry 230
   description PERMIT_DHCPv4_SERVER_PROTOCOL
   match destination-port 67
   action permit
  !
  access-list-entry 231
   description PERMIT_DHCPv4_CLIENT_PROTOCOL
   match destination-port 68
   action permit
  !
  access-list-entry 240
   description PERMIT_DHCPv6_PROTOCOL
   match destination-port 547
   action permit
  !
  access-list-entry 250
   description PERMIT_MCLAG_PROTOCOL
   match destination-port 30012
   action permit
  !
  access-list-entry 251
   description PERMIT_MCLAG_PROTOCOL
   match source-port 30012
   action permit
  !
  access-list-entry 260
   description PERMIT_VRRP_PROTOCOL
   match ip-protocol 112
   action permit
  !
************************
  access-list-entry 261
   description DENY_ALL-PROTOCOLS-TO-CLIS
   match destination-ipv4-address 45.235.162.203/32
   action deny
  !
************************
  access-list-entry 280
   description PERMIT_SNMP_PROTOCOL
   match destination-port snmp
   action permit
  !
  access-list-entry 281
   description PERMIT_LLDP_PROTOCOL
   match ethertype 0x88cc
   action permit
  !
  access-list-entry 282
   description PERMIT_DESTINATION_BGP_PROTOCOL
   match destination-port 179
   action permit
  !
  access-list-entry 283
   description PERMIT_SOURCE_BGP_PROTOCOL
   match source-port 179
   action permit
  !
  access-list-entry 284
   description PERMIT_NTP_PROTOCOL
   match destination-port ntp
   action permit
  !
  access-list-entry 1023
   description DENY_ANY_TRAFFIC
   action deny
  !
 !