diff --git a/configs/edsmith/edsmith-4507-1.cfg b/configs/edsmith/edsmith-4507-1.cfg index 3056333..a250671 100644 --- a/configs/edsmith/edsmith-4507-1.cfg +++ b/configs/edsmith/edsmith-4507-1.cfg @@ -1,9 +1,9 @@ Building configuration... -Current configuration : 35745 bytes +Current configuration : 36637 bytes ! -! Last configuration change at 19:38:52 EDT Thu Sep 18 2025 by jkafta72.admin -! NVRAM config last updated at 19:38:59 EDT Thu Sep 18 2025 by jkafta72.admin +! Last configuration change at 09:15:21 EDT Thu Mar 12 2026 by estein66.admin +! NVRAM config last updated at 09:15:22 EDT Thu Mar 12 2026 by estein66.admin ! version 15.2 no service pad @@ -116,6 +116,20 @@ archive path bootflash: maximum 5 file privilege 10 +object-group network day-enterprise-servers + description day-enterprise-servers + host 10.1.230.11 + host 10.1.40.108 +! +object-group network dns-servers + description Internal-DNS-Servers + host 10.1.40.10 + host 10.1.48.11 +! +object-group network ntp-servers + host 10.1.40.154 + host 10.1.48.103 +! ! spanning-tree mode rapid-pvst spanning-tree loopguard default @@ -1043,6 +1057,11 @@ interface Vlan72 no ip redirects ip pim sparse-mode ! +interface Vlan230 + ip address 10.45.230.1 255.255.255.224 + ip access-group hvac in + shutdown +! interface Vlan233 ip address 10.45.233.1 255.255.255.0 ! @@ -1147,6 +1166,16 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data permit udp any any eq 1575 permit tcp any any eq 1630 permit udp any any eq 1630 +ip access-list extended hvac + permit ip 10.45.230.0 0.0.0.31 object-group day-enterprise-servers + permit udp 10.45.230.0 0.0.0.31 object-group dns-servers eq domain + permit udp 10.45.230.0 0.0.0.31 object-group ntp-servers eq ntp + permit icmp 10.45.230.0 0.0.0.31 host 10.45.230.1 + permit icmp host 10.45.230.1 10.45.230.0 0.0.0.31 + deny ip any 10.0.0.0 0.255.255.255 + deny ip any 192.168.0.0 0.0.255.255 + deny ip any 172.16.0.0 0.15.255.255 + permit tcp 10.45.230.0 0.0.0.31 any eq 587 log-input ! logging trap notifications logging origin-id hostname