danforth/danforth-mdf-4507.cfg Wed Apr 1 08:32:41 PM EDT 2026

This commit is contained in:
John Poland 2026-04-01 20:32:43 -04:00
parent aee5b1df1f
commit 611b97d7a5

View File

@ -1,8 +1,8 @@
Building configuration... Building configuration...
Current configuration : 33695 bytes Current configuration : 33501 bytes
! !
! Last configuration change at 07:41:44 EDT Tue Mar 31 2026 by jpoland.oa ! Last configuration change at 11:33:42 EDT Wed Apr 1 2026 by jkafta72.admin
! NVRAM config last updated at 07:41:44 EDT Tue Mar 31 2026 by jpoland.oa ! NVRAM config last updated at 07:41:44 EDT Tue Mar 31 2026 by jpoland.oa
! !
version 15.2 version 15.2
@ -999,6 +999,7 @@ interface Vlan35
! !
interface Vlan40 interface Vlan40
ip address 10.21.40.1 255.255.255.0 ip address 10.21.40.1 255.255.255.0
ip access-group hvac-acl in
no ip redirects no ip redirects
ip pim sparse-mode ip pim sparse-mode
! !
@ -1198,16 +1199,14 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data
permit udp any any eq 1575 permit udp any any eq 1575
permit tcp any any eq 1630 permit tcp any any eq 1630
permit udp any any eq 1630 permit udp any any eq 1630
ip access-list extended hvac ip access-list extended hvac-acl
permit ip 10.21.230.0 0.0.0.31 object-group day-enterprise-servers permit ip any host 10.1.230.11
permit udp 10.21.230.0 0.0.0.31 object-group dns-servers eq domain permit ip any host 10.1.40.108
permit udp 10.21.230.0 0.0.0.31 object-group ntp-servers eq ntp permit udp any any eq domain
permit icmp 10.21.230.0 0.0.0.31 host 10.21.230.1 deny ip any 10.0.0.0 0.0.0.255
permit icmp host 10.21.230.1 10.21.230.0 0.0.0.31
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255 deny ip any 192.168.0.0 0.0.255.255
deny ip any 172.16.0.0 0.15.255.255 deny ip any 172.16.0.0 0.15.255.255
permit tcp 10.21.230.0 0.0.0.31 any eq 587 log-input permit tcp any any eq 587 log count
ip access-list extended users ip access-list extended users
deny ip any 192.168.0.0 0.0.255.255 deny ip any 192.168.0.0 0.0.255.255
permit ip any any permit ip any any