Routerboard as CPE

Hi, I am wondering if someone has an example lockdown configuration for using a routerboard (750GL or alike) in a customer premise environment (FTTH and similar)?

Features that should work is the following (and probably some I forgot):

  • ARP snooping/protection and limiting
  • DHCP snooping/protection, block and contain offers going the wrong way
  • Loop protection
  • Storm control
  • Automatic interface SNMP trap and shutdown port for X minutes

Anyone?

:question: