vanduyn/vanduyn-mdf-a8360-sw2.cfg Thu Apr 2 08:32:37 PM EDT 2026

This commit is contained in:
John Poland 2026-04-02 20:32:37 -04:00
parent 3a0a1dc40b
commit 277055c70d

View File

@ -138,15 +138,13 @@ access-list ip Image-acl
158 permit tcp any clearpass_servers group clearpass_tcp_ports
160 deny any any any
access-list ip hvac-acl
10 permit any 10.49.230.0/255.255.255.224 day-enterprise-servers
20 permit udp 10.49.230.0/255.255.255.224 dns-servers eq dns
30 permit udp 10.49.230.0/255.255.255.224 ntp-servers eq ntp
40 permit icmp 10.49.230.0/255.255.255.252 10.49.230.0/255.255.255.224
50 permit icmp 10.49.230.0/255.255.255.224 10.49.230.0/255.255.255.252
60 deny any any 10.0.0.0/255.0.0.0
70 deny any any 192.168.0.0/255.255.0.0
80 deny any any 172.16.0.0/255.240.0.0
90 permit tcp 10.49.230.0/255.255.255.224 any eq 587 log count
10 permit any any 10.1.230.11
20 permit any any 10.1.40.108
30 permit udp any any eq dns
40 deny any any 10.0.0.0/255.0.0.0
50 deny any any 192.168.0.0/255.255.0.0
60 deny any any 172.16.0.0/255.240.0.0
70 permit tcp any any eq 587 log count
access-list ip users-acl
10 deny any any 192.168.0.0/255.255.0.0
20 permit any any any
@ -458,6 +456,7 @@ interface vlan 230
ip helper-address 10.1.40.20
ip helper-address 10.21.48.20
ip ospf 1 area 0.0.0.202
apply access-list ip hvac-acl routed-in
ip igmp enable
ip pim-sparse enable
interface vlan 233