; J4850A Configuration Editor; Created on release #E.10.60 hostname "iLabsNACCore" max-vlans 16 mirror-port B1 ip access-list extended "corporate-in" permit tcp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit udp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit ip 45.200.11.83 0.0.0.0 45.200.1.82 0.0.0.0 permit ip 45.200.11.63 0.0.0.0 45.200.0.0 0.0.255.255 permit ip 0.0.0.0 255.255.255.255 45.200.2.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.3.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.4.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.11.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.16.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.17.0 0.0.0.255 permit ip 45.200.17.0 0.0.0.255 45.200.11.0 0.0.0.255 permit ip 45.200.11.0 0.0.255.255 45.200.1.90 0.0.0.0 permit ip 45.200.11.0 0.0.0.255 45.200.1.93 0.0.0.0 permit ip 45.200.11.0 0.0.0.255 45.200.1.88 0.0.0.0 permit ip 45.200.11.0 0.0.0.255 45.200.1.78 0.0.0.0 deny ip 0.0.0.0 255.255.255.255 45.0.0.0 0.255.255.255 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "phone-in" permit tcp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit udp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit ip 0.0.0.0 255.255.255.255 45.200.4.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.14.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.210.0.0 0.0.255.255 deny ip 0.0.0.0 255.255.255.255 45.0.0.0 0.255.255.255 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "guest-in" permit tcp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit udp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit ip 0.0.0.0 255.255.255.255 45.200.3.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.4.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.12.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.16.0 0.0.0.255 permit ip 45.200.12.0 0.0.0.255 45.200.1.93 0.0.0.0 permit ip 45.200.12.0 0.0.0.255 45.200.1.90 0.0.0.0 deny ip 0.0.0.0 255.255.255.255 45.0.0.0 0.255.255.255 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "quarantine-in" permit tcp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit udp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit tcp 0.0.0.0 255.255.255.255 45.200.1.88 0.0.0.0 eq 80 permit ip 0.0.0.0 255.255.255.255 45.200.4.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.13.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.1.90 0.0.0.0 deny ip 0.0.0.0 255.255.255.255 45.0.0.0 0.255.255.255 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "resources-in" permit tcp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit udp 0.0.0.0 255.255.255.255 45.200.1.2 0.0.0.0 eq 53 permit ip 0.0.0.0 255.255.255.255 45.200.3.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.11.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.12.0 0.0.0.255 permit ip 0.0.0.0 255.255.255.255 45.200.1.90 0.0.0.0 permit ip 45.0.16.100 0.0.0.0 45.0.12.72 0.0.0.0 permit ip 45.0.16.101 0.0.0.0 45.0.12.72 0.0.0.0 permit ip 45.0.16.102 0.0.0.0 45.0.12.72 0.0.0.0 permit ip 45.0.16.103 0.0.0.0 45.0.12.72 0.0.0.0 deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 exit ip access-list extended "test" exit module 1 type J4820A module 2 type J4907A module 3 type J4820B ip routing snmp-server community "public" vlan 1 name "DEFAULT_VLAN" untagged B1-B2,B4,B7-B9,B11,B15-B16 ip address dhcp-bootp no untagged A1-A24,B3,B5-B6,B10,B12-B14,C1-C24 exit vlan 11 name "corporate" untagged B5-B6 ip address 45.200.11.1 255.255.255.0 ip helper-address 45.200.1.2 ip helper-address 45.200.1.75 tagged A1-A24 ip access-group "corporate-in" in exit vlan 12 name "guest" ip address 45.200.12.1 255.255.255.0 ip helper-address 45.200.1.2 ip helper-address 45.200.1.75 tagged A1-A24 ip access-group "guest-in" in exit vlan 13 name "quarantine" ip address 45.200.13.1 255.255.255.0 ip helper-address 45.200.1.2 ip helper-address 45.200.1.75 tagged A1-A24 ip access-group "quarantine-in" in exit vlan 14 name "phone" ip address 45.200.14.1 255.255.255.0 ip helper-address 45.200.1.2 ip helper-address 45.200.1.75 tagged A1-A24 ip access-group "phone-in" in exit vlan 15 name "reg.CCA" untagged B12 no ip address tagged A1-A24 exit vlan 16 name "resources" ip address 45.200.16.1 255.255.255.0 ip helper-address 45.200.1.2 ip helper-address 45.200.1.75 tagged A1-A24 ip access-group "resources-in" in exit vlan 17 name "reg.Juniper" untagged B13 no ip address ip helper-address 45.200.1.2 tagged A1-A24 exit vlan 18 name "cap.LockDown" ip address 45.200.18.1 255.255.255.0 tagged A1-A24 exit vlan 19 name "cap.Sentri" ip address 45.200.19.1 255.255.255.0 tagged A1-A24 exit vlan 1000 name "management" untagged B3,B10,C1-C24 ip address 45.200.1.3 255.255.255.0 ip helper-address 45.200.1.2 ip helper-address 45.200.1.75 tagged A1-A24 exit vlan 1010 name "internal" ip address 45.200.2.1 255.255.255.0 tagged A1-A24 exit vlan 1020 name "support" untagged B14 ip address 45.200.3.1 255.255.255.0 tagged A1-A24 exit vlan 1030 name "internet" ip address 45.200.4.1 255.255.255.0 tagged A1-A24 exit interface A1-A5,C1,C12,C22 monitor exit ip route 0.0.0.0 0.0.0.0 45.200.1.1 ip route 45.200.15.0 255.255.255.0 45.200.11.83 ip route 45.200.17.0 255.255.255.0 45.200.11.63 ip route 45.200.21.0 255.255.255.0 45.200.1.64 password manager password operator