diff --git a/configs/nottingham/nottingham-mdf-4507.cfg b/configs/nottingham/nottingham-mdf-4507.cfg
index 03ee6de..d6c706c 100644
--- a/configs/nottingham/nottingham-mdf-4507.cfg
+++ b/configs/nottingham/nottingham-mdf-4507.cfg
@@ -1,9 +1,9 @@
 Building configuration...
 
-Current configuration : 38333 bytes
+Current configuration : 39238 bytes
 !
-! Last configuration change at 19:43:29 EDT Thu Sep 18 2025 by jkafta72.admin
-! NVRAM config last updated at 19:43:29 EDT Thu Sep 18 2025 by jkafta72.admin
+! Last configuration change at 14:37:20 EDT Tue Mar 10 2026 by estein66.admin
+! NVRAM config last updated at 14:38:57 EDT Tue Mar 10 2026 by estein66.admin
 !
 version 15.2
 no service pad
@@ -118,6 +118,20 @@ archive
  path bootflash:
  maximum 5
 file privilege 10
+object-group network day-enterprise-servers 
+ description day-enterprise-servers
+ host 10.1.230.11
+ host 10.1.40.108
+!
+object-group network dns-servers 
+ description Internal-DNS-Servers
+ host 10.1.40.10
+ host 10.1.48.11
+!
+object-group network ntp-servers 
+ host 10.1.40.154
+ host 10.1.48.103
+!
 !
 spanning-tree mode rapid-pvst
 spanning-tree loopguard default
@@ -179,6 +193,9 @@ vlan 70
 vlan 72
  name access-control
 !
+vlan 230
+ name HVAC
+!
 vlan 251
  name native stub
 !
@@ -1325,6 +1342,11 @@ interface Vlan107
  ip helper-address 10.21.48.20 
  shutdown
 !
+interface Vlan230
+ ip address 10.4.230.1 255.255.255.224
+ ip access-group hvac in
+ shutdown
+!
 interface Vlan506
  description to Ring #6 CCF Service #S200286
  ip address 10.250.206.4 255.255.255.0
@@ -1440,6 +1462,16 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data
  permit udp any any eq 1630
 ip access-list extended BadCamera
  deny   ip host 10.4.70.41 any
+ip access-list extended hvac
+ permit ip 10.4.230.0 0.0.0.31 object-group day-enterprise-servers
+ permit udp 10.4.230.0 0.0.0.31 object-group dns-servers eq domain
+ permit udp 10.4.230.0 0.0.0.31 object-group ntp-servers eq ntp
+ permit icmp 10.4.230.0 0.0.0.31 host 10.4.230.1
+ permit icmp host 10.4.230.1 10.4.230.0 0.0.0.31
+ deny   ip any 10.0.0.0 0.255.255.255
+ deny   ip any 192.168.0.0 0.0.255.255
+ deny   ip any 172.16.0.0 0.15.255.255
+ permit tcp 10.4.230.0 0.0.0.31 any eq 587 log-input
 ip access-list extended users
  deny   ip any 192.168.0.0 0.0.255.255
  permit ip any any