diff --git a/configs/noc/noc-a6300-sw1.cfg b/configs/noc/noc-a6300-sw1.cfg index 4dc21f7..88719bc 100644 --- a/configs/noc/noc-a6300-sw1.cfg +++ b/configs/noc/noc-a6300-sw1.cfg @@ -71,11 +71,14 @@ vsf member 3 type jl659a link 1 3/1/49 link 2 3/1/50 -access-list ip hvac - 10 permit tcp 10.1.230.12 10.1.230.11 - 20 permit icmp 10.1.230.12 10.1.230.11 log count - 30 permit tcp 10.1.230.12 10.1.40.108 - 40 permit icmp 10.1.230.12 10.1.40.108 log count +access-list ip hvac-acl + 10 permit any any 10.1.230.11 + 20 permit any any 10.1.40.108 + 30 permit udp any any eq dns + 40 deny any any 10.0.0.0/255.0.0.0 + 50 deny any any 192.168.0.0/255.255.0.0 + 60 deny any any 172.16.0.0/255.240.0.0 + 70 permit tcp any any eq 587 log count dhcpv4-snooping client track ip vlan 1 @@ -1461,7 +1464,7 @@ interface 2/1/2 spanning-tree root-guard spanning-tree tcn-guard loop-protect - apply access-list ip hvac in + apply access-list ip hvac-acl in port-access onboarding-method concurrent enable client track ip enable client track ip update-interval 120