nottingham/nottingham-mdf-4507.cfg Tue Mar 10 08:33:24 PM EDT 2026
This commit is contained in:
parent
fb244d5b6a
commit
adae93dca5
@ -1,9 +1,9 @@
|
||||
Building configuration...
|
||||
|
||||
Current configuration : 38333 bytes
|
||||
Current configuration : 39238 bytes
|
||||
!
|
||||
! Last configuration change at 19:43:29 EDT Thu Sep 18 2025 by jkafta72.admin
|
||||
! NVRAM config last updated at 19:43:29 EDT Thu Sep 18 2025 by jkafta72.admin
|
||||
! Last configuration change at 14:37:20 EDT Tue Mar 10 2026 by estein66.admin
|
||||
! NVRAM config last updated at 14:38:57 EDT Tue Mar 10 2026 by estein66.admin
|
||||
!
|
||||
version 15.2
|
||||
no service pad
|
||||
@ -118,6 +118,20 @@ archive
|
||||
path bootflash:
|
||||
maximum 5
|
||||
file privilege 10
|
||||
object-group network day-enterprise-servers
|
||||
description day-enterprise-servers
|
||||
host 10.1.230.11
|
||||
host 10.1.40.108
|
||||
!
|
||||
object-group network dns-servers
|
||||
description Internal-DNS-Servers
|
||||
host 10.1.40.10
|
||||
host 10.1.48.11
|
||||
!
|
||||
object-group network ntp-servers
|
||||
host 10.1.40.154
|
||||
host 10.1.48.103
|
||||
!
|
||||
!
|
||||
spanning-tree mode rapid-pvst
|
||||
spanning-tree loopguard default
|
||||
@ -179,6 +193,9 @@ vlan 70
|
||||
vlan 72
|
||||
name access-control
|
||||
!
|
||||
vlan 230
|
||||
name HVAC
|
||||
!
|
||||
vlan 251
|
||||
name native stub
|
||||
!
|
||||
@ -1325,6 +1342,11 @@ interface Vlan107
|
||||
ip helper-address 10.21.48.20
|
||||
shutdown
|
||||
!
|
||||
interface Vlan230
|
||||
ip address 10.4.230.1 255.255.255.224
|
||||
ip access-group hvac in
|
||||
shutdown
|
||||
!
|
||||
interface Vlan506
|
||||
description to Ring #6 CCF Service #S200286
|
||||
ip address 10.250.206.4 255.255.255.0
|
||||
@ -1440,6 +1462,16 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data
|
||||
permit udp any any eq 1630
|
||||
ip access-list extended BadCamera
|
||||
deny ip host 10.4.70.41 any
|
||||
ip access-list extended hvac
|
||||
permit ip 10.4.230.0 0.0.0.31 object-group day-enterprise-servers
|
||||
permit udp 10.4.230.0 0.0.0.31 object-group dns-servers eq domain
|
||||
permit udp 10.4.230.0 0.0.0.31 object-group ntp-servers eq ntp
|
||||
permit icmp 10.4.230.0 0.0.0.31 host 10.4.230.1
|
||||
permit icmp host 10.4.230.1 10.4.230.0 0.0.0.31
|
||||
deny ip any 10.0.0.0 0.255.255.255
|
||||
deny ip any 192.168.0.0 0.0.255.255
|
||||
deny ip any 172.16.0.0 0.15.255.255
|
||||
permit tcp 10.4.230.0 0.0.0.31 any eq 587 log-input
|
||||
ip access-list extended users
|
||||
deny ip any 192.168.0.0 0.0.255.255
|
||||
permit ip any any
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user