Running configuration: ; J8698A Configuration Editor; Created on release #K.13.51 hostname "Kraviz_BB" ip access-list extended "admin" 10 deny ip 192.168.3.0 0.0.0.255 0.0.0.0 255.255.255.255 20 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 200 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "dmz1" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 20 deny ip 192.168.3.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 200 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "printers" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 20 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 200 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "ltsp" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 190 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "stores" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 200 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "management" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 20 deny ip 192.168.3.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "business" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "customer" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "warehouse_ap" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "warehouse" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "operation" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "purchase" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "export" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "finance" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "is" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 230 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 exit ip access-list extended "salary" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "hr" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "it" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 20 deny ip 192.168.3.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 220 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 230 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "ap" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 210 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "iscsi" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 20 deny ip 192.168.3.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 220 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "security" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 200 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "wifi4guest" 10 deny ip 192.168.2.0 0.0.0.255 0.0.0.0 255.255.255.255 20 deny ip 192.168.3.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.102.0 0.0.0.255 0.0.0.0 255.255.255.255 50 deny ip 192.168.103.0 0.0.0.255 0.0.0.0 255.255.255.255 60 deny ip 192.168.104.0 0.0.0.255 0.0.0.0 255.255.255.255 70 deny ip 192.168.105.0 0.0.0.255 0.0.0.0 255.255.255.255 80 deny ip 192.168.106.0 0.0.0.255 0.0.0.0 255.255.255.255 90 deny ip 192.168.107.0 0.0.0.255 0.0.0.0 255.255.255.255 100 deny ip 192.168.108.0 0.0.0.255 0.0.0.0 255.255.255.255 110 deny ip 192.168.109.0 0.0.0.255 0.0.0.0 255.255.255.255 120 deny ip 192.168.110.0 0.0.0.255 0.0.0.0 255.255.255.255 130 deny ip 192.168.111.0 0.0.0.255 0.0.0.0 255.255.255.255 140 deny ip 192.168.112.0 0.0.0.255 0.0.0.0 255.255.255.255 150 deny ip 192.168.113.0 0.0.0.255 0.0.0.0 255.255.255.255 160 deny ip 192.168.114.0 0.0.0.255 0.0.0.0 255.255.255.255 170 deny ip 192.168.115.0 0.0.0.255 0.0.0.0 255.255.255.255 180 deny ip 192.168.117.0 0.0.0.255 0.0.0.0 255.255.255.255 190 deny ip 192.168.118.0 0.0.0.255 0.0.0.0 255.255.255.255 200 deny ip 192.168.120.0 0.0.0.255 0.0.0.0 255.255.255.255 210 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list connection-rate-filter "manegment" exit ip access-list extended "servers" 10 deny ip 192.168.101.0 0.0.0.255 0.0.0.0 255.255.255.255 30 deny ip 192.168.119.0 0.0.0.255 0.0.0.0 255.255.255.255 40 deny ip 192.168.121.0 0.0.0.255 0.0.0.0 255.255.255.255 50 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit module 1 type J8702A module 2 type J8705A module 3 type J8702A module 4 type J8702A module 5 type J8702A module 6 type J8702A module 7 type J8702A module 8 type J8702A ip routing snmp-server community "public" Unrestricted snmp-server host 192.168.101.2 "public" vlan 1 name "DEFAULT_VLAN" untagged A3-A23,B1-B24,C1-C24,D1-D24,E1-E24,F1-F24,G1-G24,H1-H24 no untagged A1-A2,A24 no ip address exit vlan 2 name "administrative" ip address 192.168.2.254 255.255.255.0 ip access-group "admin" out exit vlan 3 name "servers1" untagged A2 ip address 192.168.3.254 255.255.255.0 ip access-group "servers" out exit vlan 100 name "dmz1" ip address 192.168.101.254 255.255.255.0 ip access-group "dmz1" out exit vlan 101 name "printers" ip address 192.168.102.254 255.255.255.0 ip access-group "printers" out exit vlan 102 name "LTSP" ip address 192.168.103.254 255.255.255.0 ip access-group "ltsp" out exit vlan 103 name "stores_management" ip address 192.168.104.254 255.255.255.0 ip access-group "stores" out exit vlan 104 name "management" untagged A24 ip address 192.168.105.254 255.255.255.0 ip access-group "manegment" out exit vlan 105 name "business" ip address 192.168.106.254 255.255.255.0 ip access-group "business" out exit vlan 106 name "customer_service" ip address 192.168.107.254 255.255.255.0 ip access-group "customer" out exit vlan 107 name "warehouse-AP" ip address 192.168.108.254 255.255.255.0 ip access-group "warehouse_ap" out exit vlan 108 name "warehouse" ip address 192.168.109.254 255.255.255.0 ip access-group "warehouse" out exit vlan 109 name "operation" ip address 192.168.110.254 255.255.255.0 ip access-group "operation" out exit vlan 110 name "purchase" ip address 192.168.111.254 255.255.255.0 ip access-group "purchase" out exit vlan 111 name "export" ip address 192.168.112.254 255.255.255.0 ip access-group "export" out exit vlan 112 name "finance" ip address 192.168.113.254 255.255.255.0 ip access-group "finance" out exit vlan 113 name "salary" ip address 192.168.114.254 255.255.255.0 ip access-group "salary" out exit vlan 114 name "HR" ip address 192.168.115.254 255.255.255.0 ip access-group "hr" out exit vlan 115 name "IT" ip address 192.168.116.254 255.255.255.0 ip access-group "it" in exit vlan 116 name "IS" ip address 192.168.117.254 255.255.255.0 ip access-group "is" out exit vlan 117 name "AP" ip address 192.168.118.254 255.255.255.0 ip access-group "ap" out exit vlan 118 name "ISCSI" ip address 192.168.119.254 255.255.255.0 ip access-group "iscsi" out exit vlan 119 name "security" ip address 192.168.120.254 255.255.255.0 ip access-group "security" out exit vlan 120 name "Wifi4Guest" untagged A1 ip address 192.168.121.254 255.255.255.0 ip access-group "wifi4guest" out exit