Compare commits

..

12 Commits

12 changed files with 540 additions and 513 deletions

View File

@ -1,9 +1,9 @@
Building configuration...
Current configuration : 31509 bytes
Current configuration : 31822 bytes
!
! Last configuration change at 07:41:31 EDT Tue Mar 31 2026 by jpoland.oa
! NVRAM config last updated at 07:41:31 EDT Tue Mar 31 2026 by jpoland.oa
! Last configuration change at 16:29:48 EDT Tue Mar 31 2026 by jkafta72.admin
! NVRAM config last updated at 15:59:46 EDT Tue Mar 31 2026 by jkafta72.admin
!
version 15.2
no service pad
@ -846,6 +846,7 @@ interface Vlan35
!
interface Vlan40
ip address 10.16.40.1 255.255.255.0
ip access-group hvac-acl in
no ip redirects
ip pim sparse-mode
!
@ -1068,6 +1069,14 @@ ip access-list extended hvac
deny ip any 192.168.0.0 0.0.255.255
deny ip any 172.16.0.0 0.15.255.255
permit tcp 10.16.230.0 0.0.0.31 any eq 587 log-input
ip access-list extended hvac-acl
permit ip any host 10.1.230.11
permit ip any host 10.1.40.108
permit udp any any eq domain
deny ip any 10.0.0.0 0.0.0.255
deny ip any 192.168.0.0 0.0.255.255
deny ip any 172.16.0.0 0.15.255.255
permit tcp any any eq 587 log count
ip access-list extended users
deny ip any 192.168.0.0 0.0.255.255
permit ip any any

File diff suppressed because it is too large Load Diff

View File

@ -680,9 +680,10 @@ config system custom-language
end
config system admin
edit "admin"
set trusthost1 10.1.6.0 255.255.255.255
set trusthost1 10.1.6.0 255.255.255.0
set trusthost2 10.1.40.0 255.255.255.0
set trusthost3 10.1.48.55 255.255.255.255
set trusthost4 10.14.50.140 255.255.255.255
set accprofile "super_admin"
set vdom "root"
set password ENC *HIDDEN*
@ -692,6 +693,7 @@ config system admin
set trusthost2 10.1.40.0 255.255.255.0
set trusthost3 10.1.48.0 255.255.255.0
set trusthost4 10.14.50.140 255.255.255.255
set trusthost5 10.14.0.0 255.255.248.0
set accprofile "super_admin"
set vdom "root" "scsd"
set password ENC *HIDDEN*

View File

@ -18,6 +18,7 @@ banner motd #
! !
! IF YOU ARE NOT AUTHORIZED TO BE HERE DISCONNECT NOW! !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#
lldp management-address vlan 10
user admin group administrators password ciphertext AQBapYgiO7i1bC2908gtqmXf0OCYGasbhNBBcjX2XZxZZvhdYgAAABrhQbDzTTmjk4P8iGMOOobyXfBuwOUlPQImz3QD206V3PKoX57EAlldYfooLhP1hM4MHNM6Z+o+WJRmpiXXGk4DnS+fa98GBtfjhh3dni4knpTmPnq4gml9L4q2H2k+idmg
clock timezone america/new_york
loop-protect re-enable-timer 30
@ -7628,6 +7629,11 @@ ip route 0.0.0.0/0 192.168.2.1
mirror session 1
destination tunnel 10.41.30.149 source 192.168.41.11
source interface 6/1/31 both
mirror session 2
destination tunnel 10.1.6.126 source 192.168.114.8
source interface 6/1/9 both
source interface 6/1/24 both
enable
ip dns domain-name scsd.ad
ip dns server-address 10.1.40.10
ip dns server-address 10.21.48.10

View File

@ -18,6 +18,7 @@ banner motd #
! !
! IF YOU ARE NOT AUTHORIZED TO BE HERE DISCONNECT NOW! !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#
lldp management-address vlan 10
user admin group administrators password ciphertext AQBapbkg0Zn6AHfBwLq2Kwvb9hmpPmJSOmTjIoPizIZ3NMN4YgAAACRQxdcyyjUpg8uMP28dKxQ6sTqtoqrA4TUvFuaD4F6cM1er5Tg3tcq4tX6eN6lNp0fETdy8wzMG13gsefEyDxvs178lHQQ/rVVk0OJW5NkqkBPQDRNHh8dt1csrTVBd4mlF
clock timezone america/new_york
loop-protect re-enable-timer 30

View File

@ -18,6 +18,7 @@ banner motd #
! !
! IF YOU ARE NOT AUTHORIZED TO BE HERE DISCONNECT NOW! !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#
lldp management-address vlan 10
user admin group administrators password ciphertext AQBapezz/OmdNJm9mX8rVGSNN4PJjZXylqq8av6nZ6sPV6AAYgAAAIY0XvJdeUIlAxyIXhcFFL4jV1b2vUKbysdjabF0O9LWu6rOGbCeBCGWOKBc0upI8JpCZ4LYmYKSybIXdeaff778BwOCiRI/tLMxeGsY5TpUFSGKnqjNreCiyD47QjIoc60M
clock timezone america/new_york
loop-protect re-enable-timer 30

View File

@ -18,6 +18,7 @@ banner motd #
! !
! IF YOU ARE NOT AUTHORIZED TO BE HERE DISCONNECT NOW! !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#
lldp management-address vlan 10
user admin group administrators password ciphertext AQBapeMFiMZC3L6lE2uMobVcz1V9cNlpjwqF0hY0CMlSy5GQYgAAAAES1syr9muzd2ich4YcX9Y5J6uv3yMKV/lJSQNctp17BIJnN8ZKgO/aYgayf4Q6zyzCXcc3ulzjPN3p2opAdThLt9q2LhF+TQ+Wgqk6A1K5RcCsjevPOE7tH75PkXr4qq3D
clock timezone america/new_york
loop-protect re-enable-timer 30

View File

@ -1,6 +1,6 @@
Current configuration:
!
!Version ArubaOS-CX LL.10.13.1110
!Version ArubaOS-CX LL.10.13.1161
!export-password: default
hostname itc-mdf-a8360-sw1
banner motd #
@ -88,6 +88,15 @@ object-group port sccm_udp_ports
70 eq microsoft-ds
90 eq isakmp
140 gt 1022
access-list ip HVAC
10 permit any any 10.1.230.11
20 permit any any 10.1.40.108
30 permit udp any 10.1.40.10 eq dns
40 permit udp any 10.1.48.11 eq dns
50 deny any any 10.0.0.0/255.0.0.0
60 deny any any 192.168.0.0/255.255.0.0
70 deny any any 172.16.0.0/255.240.0.0
80 permit tcp any any eq 587 log count
access-list ip Image-acl
10 comment DC_UDP_PORTS_IN
10 permit udp dom_cont group dc_udp_ports any

View File

@ -1,6 +1,6 @@
Current configuration:
!
!Version ArubaOS-CX LL.10.13.1110
!Version ArubaOS-CX LL.10.13.1161
!export-password: default
hostname itc-mdf-a8360-sw2
banner motd #
@ -89,6 +89,15 @@ object-group port sccm_udp_ports
70 eq microsoft-ds
90 eq isakmp
140 gt 1022
access-list ip HVAC
10 permit any any 10.1.230.11
20 permit any any 10.1.40.108
30 permit udp any 10.1.40.10 eq dns
40 permit udp any 10.1.48.11 eq dns
50 deny any any 10.0.0.0/255.0.0.0
60 deny any any 192.168.0.0/255.255.0.0
70 deny any any 172.16.0.0/255.240.0.0
80 permit tcp any any eq 587 log count
access-list ip Image-acl
10 comment DC_UDP_PORTS_IN
10 permit udp dom_cont group dc_udp_ports any

View File

@ -71,11 +71,14 @@ vsf member 3
type jl659a
link 1 3/1/49
link 2 3/1/50
access-list ip hvac
10 permit tcp 10.1.230.12 10.1.230.11
20 permit icmp 10.1.230.12 10.1.230.11 log count
30 permit tcp 10.1.230.12 10.1.40.108
40 permit icmp 10.1.230.12 10.1.40.108 log count
access-list ip hvac-acl
10 permit any any 10.1.230.11
20 permit any any 10.1.40.108
30 permit udp any any eq dns
40 deny any any 10.0.0.0/255.0.0.0
50 deny any any 192.168.0.0/255.255.0.0
60 deny any any 172.16.0.0/255.240.0.0
70 permit tcp any any eq 587 log count
dhcpv4-snooping
client track ip
vlan 1
@ -1461,7 +1464,7 @@ interface 2/1/2
spanning-tree root-guard
spanning-tree tcn-guard
loop-protect
apply access-list ip hvac in
apply access-list ip hvac-acl in
port-access onboarding-method concurrent enable
client track ip enable
client track ip update-interval 120

View File

@ -9285,30 +9285,16 @@ interface 7/1/35
client track ip update-interval 120
power-over-ethernet pre-std-detect
interface 7/1/36
description Auto
description -TO Galaxy phone-
no shutdown
no routing
vlan access 168
vlan access 70
spanning-tree bpdu-guard
spanning-tree port-type admin-edge
spanning-tree root-guard
spanning-tree tcn-guard
loop-protect
port-access onboarding-method concurrent enable
aaa authentication port-access allow-cdp-bpdu
aaa authentication port-access allow-lldp-bpdu
aaa authentication port-access client-limit 3
aaa authentication port-access dot1x authenticator
cached-reauth
cached-reauth-period 86400
reauth
enable
aaa authentication port-access mac-auth
cached-reauth
cached-reauth-period 86400
quiet-period 30
reauth
enable
client track ip enable
client track ip update-interval 120
power-over-ethernet pre-std-detect

View File

@ -1,9 +1,9 @@
Building configuration...
Current configuration : 36271 bytes
Current configuration : 36279 bytes
!
! Last configuration change at 07:41:25 EDT Tue Mar 31 2026 by jpoland.oa
! NVRAM config last updated at 07:41:25 EDT Tue Mar 31 2026 by jpoland.oa
! Last configuration change at 09:47:46 EDT Tue Mar 31 2026 by tmarri81.admin
! NVRAM config last updated at 09:47:49 EDT Tue Mar 31 2026 by tmarri81.admin
!
version 15.2
no service pad