<filter name='demofilter'>
  <filterref filter='no-mac-spoofing'/>
  <filterref filter='no-mac-broadcast'/>
  <filterref filter='allow-arp'/>
  <filterref filter='allow-ipv4'/>
  <filterref filter='allow-dhcp'>
    <parameter name='DHCPSERVER' value='10.3.2.1'/>
  </filterref>
  <filterref filter='no-other-l2-traffic'/>
</filter>
