From de871e52759dc8d03d41f06b5a37458c2878f81a Mon Sep 17 00:00:00 2001 From: John Poland Date: Thu, 2 Apr 2026 20:32:38 -0400 Subject: [PATCH] salem_h/salem_h-4507-1.cfg Thu Apr 2 08:32:37 PM EDT 2026 --- configs/salem_h/salem_h-4507-1.cfg | 22 ++++++++++------------ 1 file changed, 10 insertions(+), 12 deletions(-) diff --git a/configs/salem_h/salem_h-4507-1.cfg b/configs/salem_h/salem_h-4507-1.cfg index a65170f..bfffb55 100644 --- a/configs/salem_h/salem_h-4507-1.cfg +++ b/configs/salem_h/salem_h-4507-1.cfg @@ -1,9 +1,9 @@ Building configuration... -Current configuration : 34320 bytes +Current configuration : 34104 bytes ! -! Last configuration change at 07:42:30 EDT Tue Mar 31 2026 by jpoland.oa -! NVRAM config last updated at 07:42:31 EDT Tue Mar 31 2026 by jpoland.oa +! Last configuration change at 08:29:40 EDT Thu Apr 2 2026 by jkafta72.admin +! NVRAM config last updated at 08:29:27 EDT Thu Apr 2 2026 by jkafta72.admin ! version 15.2 no service pad @@ -1057,7 +1057,7 @@ interface Vlan107 ! interface Vlan230 ip address 10.30.230.1 255.255.255.224 - ip access-group hvac in + ip access-group hvac-acl in ! interface Vlan233 ip address 10.30.233.1 255.255.255.0 @@ -1165,16 +1165,14 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data permit udp any any eq 1575 permit tcp any any eq 1630 permit udp any any eq 1630 -ip access-list extended hvac - permit ip 10.30.230.0 0.0.0.31 object-group day-enterprise-servers - permit udp 10.30.230.0 0.0.0.31 object-group dns-servers eq domain - permit udp 10.30.230.0 0.0.0.31 object-group ntp-servers eq ntp - permit icmp 10.30.230.0 0.0.0.31 host 10.30.230.1 - permit icmp host 10.30.230.1 10.30.230.0 0.0.0.31 - deny ip any 10.0.0.0 0.255.255.255 +ip access-list extended hvac-acl + permit ip any host 10.1.230.11 + permit ip any host 10.1.40.108 + permit udp any any eq domain + deny ip any 10.0.0.0 0.0.0.255 deny ip any 192.168.0.0 0.0.255.255 deny ip any 172.16.0.0 0.15.255.255 - permit tcp 10.30.230.0 0.0.0.31 any eq 587 log-input + permit tcp any any eq 587 log count ip access-list extended users deny ip any 192.168.0.0 0.0.255.255 permit ip any any