corcoran/corcoran-mdf-4507.cfg Mon Mar 9 08:32:36 PM EDT 2026

This commit is contained in:
John Poland 2026-03-09 20:32:37 -04:00
parent 2c6ceae105
commit 5befe24235

View File

@ -1,9 +1,9 @@
Building configuration... Building configuration...
Current configuration : 32633 bytes Current configuration : 33447 bytes
! !
! Last configuration change at 14:08:58 EST Fri Mar 6 2026 by estein66.admin ! Last configuration change at 08:19:58 EDT Mon Mar 9 2026 by estein66.admin
! NVRAM config last updated at 14:09:28 EST Fri Mar 6 2026 by estein66.admin ! NVRAM config last updated at 08:26:47 EDT Mon Mar 9 2026 by estein66.admin
! !
version 15.2 version 15.2
no service pad no service pad
@ -115,6 +115,20 @@ archive
path bootflash: path bootflash:
maximum 5 maximum 5
file privilege 10 file privilege 10
object-group network day-enterprise-servers
description day-enterprise-servers
host 10.1.230.11
host 10.1.40.108
!
object-group network dns-servers
description Internal-DNS-Servers
host 10.1.40.10
host 10.1.48.11
!
object-group network ntp-servers
host 10.1.40.154
host 10.1.48.103
!
! !
spanning-tree mode rapid-pvst spanning-tree mode rapid-pvst
spanning-tree loopguard default spanning-tree loopguard default
@ -975,6 +989,7 @@ interface Vlan107
! !
interface Vlan230 interface Vlan230
ip address 10.7.230.1 255.255.255.224 ip address 10.7.230.1 255.255.255.224
ip access-group hvac in
! !
interface Vlan501 interface Vlan501
description to Ring #1 CCF Service #S200279 description to Ring #1 CCF Service #S200279
@ -1076,6 +1091,16 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data
ip access-list extended dhcpcap ip access-list extended dhcpcap
permit udp host 10.1.40.20 any permit udp host 10.1.40.20 any
permit udp host 10.21.48.20 any permit udp host 10.21.48.20 any
ip access-list extended hvac
permit ip 10.7.230.0 0.0.0.31 object-group day-enterprise-servers
permit udp 10.7.230.0 0.0.0.31 object-group dns-servers eq domain
permit udp 10.7.230.0 0.0.0.31 object-group ntp-servers eq ntp
permit icmp 10.7.230.0 0.0.0.31 host 10.7.230.1
permit icmp host 10.7.230.1 10.7.230.0 0.0.0.31
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255
deny ip any 172.16.0.0 0.15.255.255
permit tcp 10.7.230.0 0.0.0.31 any eq 587 log-input
ip access-list extended users ip access-list extended users
deny ip any 192.168.0.0 0.0.255.255 deny ip any 192.168.0.0 0.0.255.255
permit ip any any permit ip any any