From 795baf4a9e1f7ac659609df3f7943cd38ee353e6 Mon Sep 17 00:00:00 2001 From: John Poland Date: Tue, 10 Mar 2026 20:33:25 -0400 Subject: [PATCH] webster/webster-4507-1.cfg Tue Mar 10 08:33:24 PM EDT 2026 --- configs/webster/webster-4507-1.cfg | 33 ++++++++++++++++++++++++------ 1 file changed, 27 insertions(+), 6 deletions(-) diff --git a/configs/webster/webster-4507-1.cfg b/configs/webster/webster-4507-1.cfg index 6d1f406..321f4be 100644 --- a/configs/webster/webster-4507-1.cfg +++ b/configs/webster/webster-4507-1.cfg @@ -1,9 +1,9 @@ Building configuration... -Current configuration : 37980 bytes +Current configuration : 38662 bytes ! -! Last configuration change at 19:41:10 EDT Thu Sep 18 2025 by estein66.admin -! NVRAM config last updated at 19:41:11 EDT Thu Sep 18 2025 by estein66.admin +! Last configuration change at 14:06:38 EDT Tue Mar 10 2026 by estein66.admin +! NVRAM config last updated at 14:06:51 EDT Tue Mar 10 2026 by estein66.admin ! version 15.2 no service pad @@ -141,6 +141,20 @@ archive path bootflash: maximum 5 file privilege 10 +object-group network day-enterprise-servers + description day-enterprise-servers + host 10.1.230.11 + host 10.1.40.108 +! +object-group network dns-servers + description Internal-DNS-Servers + host 10.1.40.10 + host 10.1.48.11 +! +object-group network ntp-servers + host 10.1.40.154 + host 10.1.48.103 +! ! spanning-tree mode rapid-pvst spanning-tree loopguard default @@ -1160,6 +1174,7 @@ interface Vlan107 ! interface Vlan230 ip address 10.51.230.1 255.255.255.224 + ip access-group hvac in ! interface Vlan233 ip address 10.51.233.1 255.255.255.0 @@ -1265,9 +1280,15 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data permit tcp any any eq 1630 permit udp any any eq 1630 ip access-list extended hvac - permit ip host 10.1.230.11 host 10.51.230.11 - permit ip host 10.51.230.11 host 10.1.230.11 - deny ip any any + permit ip 10.51.230.0 0.0.0.31 object-group day-enterprise-servers + permit udp 10.51.230.0 0.0.0.31 object-group dns-servers eq domain + permit udp 10.51.230.0 0.0.0.31 object-group ntp-servers eq ntp + permit icmp 10.51.230.0 0.0.0.31 host 10.51.230.1 + permit icmp host 10.51.230.1 10.51.230.0 0.0.0.31 + deny ip any 10.0.0.0 0.255.255.255 + deny ip any 192.168.0.0 0.0.255.255 + deny ip any 172.16.0.0 0.15.255.255 + permit tcp 10.51.230.0 0.0.0.31 any eq 587 log-input ip access-list extended users deny ip any 192.168.0.0 0.0.255.255 permit ip any any