From fb244d5b6aaaf8dca7b4495f65badbb0ed5186b4 Mon Sep 17 00:00:00 2001 From: John Poland Date: Tue, 10 Mar 2026 20:33:24 -0400 Subject: [PATCH] frazer/frazer-4507-1.cfg Tue Mar 10 08:33:24 PM EDT 2026 --- configs/frazer/frazer-4507-1.cfg | 31 ++++++++++++++++++++++++++++--- 1 file changed, 28 insertions(+), 3 deletions(-) diff --git a/configs/frazer/frazer-4507-1.cfg b/configs/frazer/frazer-4507-1.cfg index 036517f..e5ba32d 100644 --- a/configs/frazer/frazer-4507-1.cfg +++ b/configs/frazer/frazer-4507-1.cfg @@ -1,9 +1,9 @@ Building configuration... -Current configuration : 37407 bytes +Current configuration : 38237 bytes ! -! Last configuration change at 21:08:49 EDT Wed Aug 13 2025 by jpoland.oa -! NVRAM config last updated at 23:19:20 EDT Wed Aug 13 2025 by jpoland.oa +! Last configuration change at 11:50:38 EDT Tue Mar 10 2026 by estein66.admin +! NVRAM config last updated at 11:50:39 EDT Tue Mar 10 2026 by estein66.admin ! version 15.2 no service pad @@ -116,6 +116,20 @@ archive path bootflash: maximum 5 file privilege 10 +object-group network day-enterprise-servers + description day-enterprise-servers + host 10.1.230.11 + host 10.1.40.108 +! +object-group network dns-servers + description Internal-DNS-Servers + host 10.1.40.10 + host 10.1.48.11 +! +object-group network ntp-servers + host 10.1.40.154 + host 10.1.48.103 +! ! spanning-tree mode rapid-pvst spanning-tree loopguard default @@ -1115,6 +1129,7 @@ interface Vlan107 ! interface Vlan230 ip address 10.25.230.1 255.255.255.224 + ip access-group hvac in ! interface Vlan504 description to Ring #4 CCF Service #S200290 @@ -1216,6 +1231,16 @@ ip access-list extended AutoQos-4.0-ACL-Transactional-Data permit udp any any eq 1575 permit tcp any any eq 1630 permit udp any any eq 1630 +ip access-list extended hvac + permit ip 10.25.230.0 0.0.0.31 object-group day-enterprise-servers + permit udp 10.25.230.0 0.0.0.31 object-group dns-servers eq domain + permit udp 10.25.230.0 0.0.0.31 object-group ntp-servers eq ntp + permit icmp 10.25.230.0 0.0.0.31 host 10.25.230.1 + permit icmp host 10.25.230.1 10.25.230.0 0.0.0.31 + deny ip any 10.0.0.0 0.255.255.255 + deny ip any 192.168.0.0 0.0.255.255 + deny ip any 172.16.0.0 0.15.255.255 + permit tcp 10.25.230.0 0.0.0.31 any eq 587 log-input ip access-list extended users deny ip any 192.168.0.0 0.0.255.255 permit ip any any