diff --git a/configs/meach/meach-mdf-a8360-sw1.cfg b/configs/meach/meach-mdf-a8360-sw1.cfg index 0488166..dfae206 100644 --- a/configs/meach/meach-mdf-a8360-sw1.cfg +++ b/configs/meach/meach-mdf-a8360-sw1.cfg @@ -138,15 +138,13 @@ access-list ip Image-acl 158 permit tcp any clearpass_servers group clearpass_tcp_ports 160 deny any any any access-list ip hvac-acl - 10 permit any 10.37.230.0/255.255.255.224 day-enterprise-servers - 20 permit udp 10.37.230.0/255.255.255.224 dns-servers eq dns - 30 permit udp 10.37.230.0/255.255.255.224 ntp-servers eq ntp - 40 permit icmp 10.37.230.0/255.255.255.252 10.37.230.0/255.255.255.224 - 50 permit icmp 10.37.230.0/255.255.255.224 10.37.230.0/255.255.255.252 - 60 deny any any 10.0.0.0/255.0.0.0 - 70 deny any any 192.168.0.0/255.255.0.0 - 80 deny any any 172.16.0.0/255.240.0.0 - 90 permit tcp 10.37.230.0/255.255.255.224 any eq 587 log count + 10 permit any any 10.1.230.11 + 20 permit any any 10.1.40.108 + 30 permit udp any any eq dns + 40 deny any any 10.0.0.0/255.0.0.0 + 50 deny any any 192.168.0.0/255.255.0.0 + 60 deny any any 172.16.0.0/255.240.0.0 + 70 permit tcp any any eq 587 log count access-list ip users-acl 10 deny any any 192.168.0.0/255.255.0.0 20 permit any any any @@ -437,6 +435,7 @@ interface vlan 230 ip helper-address 10.1.40.20 ip helper-address 10.21.48.20 ip ospf 1 area 0.0.0.201 + apply access-list ip hvac-acl routed-in ip igmp enable ip pim-sparse enable interface vlan 233