scsd/scsd-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

beard/beard-mdf-4507.cfg Thu Mar 12 08:32:44 PM EDT 2026

Browse Source
This commit is contained in:
John Poland 2026-03-12 20:32:44 -04:00
parent 57f42961e1
commit a9b0919196
1 changed files with 35 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
configs/beard/beard-mdf-4507.cfg
View File

@ -1,8 +1,9 @@
Building configuration...
Current configuration : 18230 bytes
Current configuration : 19240 bytes
!
! Last configuration change at 04:59:56 EDT Mon Oct 20 2025
! Last configuration change at 09:18:09 EDT Thu Mar 12 2026 by estein66.admin
! NVRAM config last updated at 09:18:11 EDT Thu Mar 12 2026 by estein66.admin
!
version 15.2
no service pad
@ -116,6 +117,20 @@ archive
path bootflash:
maximum 5
file privilege 10
object-group network day-enterprise-servers
description day-enterprise-servers
host 10.1.230.11
host 10.1.40.108
!
object-group network dns-servers
description Internal-DNS-Servers
host 10.1.40.10
host 10.1.48.11
!
object-group network ntp-servers
host 10.1.40.154
host 10.1.48.103
!
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
@ -177,6 +192,9 @@ vlan 70
vlan 72
name Access-Control
!
vlan 230
name HVAC
!
vlan 233
name City-CGRs
!
@ -595,6 +613,11 @@ interface Vlan107
ip helper-address 10.21.48.20
shutdown
!
interface Vlan230
ip address 10.48.230.1 255.255.255.224
ip access-group hvac in
shutdown
!
interface Vlan233
ip address 10.48.233.1 255.255.255.0
!
@ -700,6 +723,16 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data
permit udp any any eq 1575
permit tcp any any eq 1630
permit udp any any eq 1630
ip access-list extended hvac
permit ip 10.48.230.0 0.0.0.31 object-group day-enterprise-servers
permit udp 10.48.230.0 0.0.0.31 object-group dns-servers eq domain
permit udp 10.48.230.0 0.0.0.31 object-group ntp-servers eq ntp
permit icmp 10.48.230.0 0.0.0.31 host 10.48.230.1
permit icmp host 10.48.230.1 10.48.230.0 0.0.0.31
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255
deny ip any 172.16.0.0 0.15.255.255
permit tcp 10.48.230.0 0.0.0.31 any eq 587 log-input
ip access-list extended users
deny ip any 192.168.0.0 0.0.255.255
permit ip any any