interface Vlan1 description Transit_User_VLAN ip address 10.104.64.2 255.255.255.0 ip access-group 1 in ip helper-address 10.104.39.21 ip helper-address 10.104.120.21 vrrp 1 ip 10.104.64.1 ! interface Vlan2 description Internet_only_Vlan ip address 192.168.50.254 255.255.255.0 vrrp 2 ip 192.168.50.254 ! interface Vlan9 description SG-WAN-VLAN ip address 10.104.99.1 255.255.255.0 ip access-group 119 in vrrp 9 ip 10.104.99.1 ! interface Vlan32 description TECH-SAC_VLAN no ip address ! interface Vlan33 description Intranet_only_vlan ip address 192.168.116.251 255.255.255.0 vrrp 33 ip 192.168.116.254 ! interface Vlan41 description EETS_VLAN ip address 192.168.21.6 255.255.255.248 ip access-group 141 in vrrp 41 ip 192.168.21.6 ! interface Vlan43 description Int_Sec_VLAN ip address 192.168.169.251 255.255.255.0 vrrp 43 ip 192.168.169.254 ! interface Vlan44 description PABX_LAN_VLAN ip address 192.168.113.254 255.255.255.0 ip access-group 144 in vrrp 44 ip 192.168.113.254 ! interface Vlan45 description APO ip address 10.103.33.6 255.255.255.0 ip helper-address 10.104.120.21 ip helper-address 10.104.39.21 vrrp 45 ip 10.103.33.5 ! interface Vlan52 description WL-Office ip address 10.104.62.2 255.255.255.0 vrrp 52 ip 10.104.62.1 ! interface Vlan99 description Management_VLAN ip address 192.168.43.251 255.255.252.0 ip access-group 199 in ip helper-address 10.104.120.21 ip helper-address 10.104.39.21 ip ospf 1 area 0 history BPS all vrrp 99 ip 192.168.43.254 ! interface Vlan104 description VOIP-CLIENT ip address 10.104.104.2 255.255.255.0 ip helper-address 10.104.121.104 vrrp 104 ip 10.104.104.1 ! interface Vlan120 description SvrFarm ip address 10.104.120.1 255.255.255.0 vrrp 120 ip 10.104.120.1 ! interface Vlan121 description FW-SW ip address 10.104.121.5 255.255.255.240 vrrp 121 ip 10.104.121.5 ! interface Vlan122 description iSCSI ip address 10.104.122.1 255.255.255.192 vrrp 122 ip 10.104.122.1 ! interface Vlan123 description SvrFarm-NLB ip address 10.104.123.1 255.255.255.0 vrrp 123 ip 10.104.123.1 ! interface Vlan125 description MPLS ip address 10.104.121.20 255.255.255.240 vrrp 125 ip 10.104.121.20 ! interface Vlan1213 description WL-APMGR ip address 10.104.121.34 255.255.255.224 ip helper-address 10.104.120.21 ip helper-address 10.104.39.21 vrrp 213 ip 10.104.121.33 ! interface Vlan1214 description WL-WLC ip address 10.104.121.65 255.255.255.240 vrrp 214 ip 10.104.121.65 ! interface Vlan1215 description VOIP-SVR ip address 10.104.121.98 255.255.255.224 vrrp 215 ip 10.104.121.97 ! router ospf 1 ! ip forward-protocol nd ip http server ip http port 8080 ip http secure-server ip http secure-port 9090 ! ip route 0.0.0.0 0.0.0.0 10.104.121.1 ip route 10.0.0.0 255.0.0.0 10.104.121.17 ip route 10.103.1.0 255.255.255.0 10.104.121.1 ip route 10.103.6.0 255.255.255.0 10.104.121.1 ip route 10.103.11.0 255.255.255.0 10.104.121.1 ip route 10.103.12.0 255.255.255.0 10.104.121.1 ip route 10.103.13.0 255.255.255.0 10.104.121.1 ip route 10.103.18.0 255.255.255.0 10.104.121.1 ip route 10.103.26.0 255.255.255.0 10.104.121.1 ip route 10.103.27.0 255.255.255.0 10.104.121.1 ip route 10.103.32.0 255.255.255.0 10.104.121.1 ip route 10.103.34.0 255.255.255.0 10.104.121.1 ip route 10.103.35.0 255.255.255.0 10.104.121.1 ip route 10.103.43.0 255.255.255.0 10.104.121.1 ip route 10.103.44.0 255.255.255.0 10.104.121.1 ip route 10.103.194.0 255.255.255.0 10.104.121.1 ip route 10.103.195.0 255.255.255.0 10.104.121.1 ip route 10.103.197.0 255.255.255.0 10.104.121.1 ip route 10.103.198.0 255.255.255.0 10.104.121.1 ip route 10.103.200.0 255.255.255.0 10.104.121.1 ip route 10.103.202.0 255.255.255.0 10.104.121.1 ip route 10.103.203.0 255.255.255.0 10.104.121.1 ip route 10.103.204.0 255.255.255.0 10.104.121.1 ip route 10.104.0.0 255.255.0.0 10.104.121.1 ip route 10.104.32.0 255.255.254.0 10.104.99.38 ip route 10.104.35.0 255.255.255.0 10.104.99.35 ip route 10.104.37.0 255.255.255.0 10.104.99.37 ip route 10.104.38.0 255.255.255.0 10.104.99.38 ip route 10.104.39.0 255.255.255.0 10.104.99.39 ip route 10.110.8.0 255.255.255.0 10.104.121.17 ip route 10.110.10.0 255.255.255.0 10.104.121.17 ip route 10.110.12.0 255.255.255.0 10.104.121.17 ip route 10.110.13.0 255.255.255.0 10.104.121.17 ip route 10.110.14.0 255.255.255.0 10.104.121.17 ip route 10.110.15.0 255.255.255.0 10.104.121.17 ip route 10.110.16.0 255.255.255.0 10.104.121.17 ip route 10.110.17.0 255.255.255.0 10.104.121.17 ip route 10.110.19.0 255.255.255.0 10.104.121.17 ip route 192.168.110.0 255.255.255.0 10.104.99.35 ip route 192.200.221.0 255.255.255.0 10.104.99.35 ip route 193.30.192.0 255.255.224.0 10.104.121.17 ip route 193.30.192.187 255.255.255.255 10.104.121.1 ip route 193.30.211.0 255.255.255.0 10.104.121.1 ip route 203.127.150.0 255.255.255.0 10.104.99.38 ! ! access-list 1 deny 192.168.103.19 access-list 1 deny 192.168.1.254 access-list 1 permit any access-list 9 deny 10.104.99.0 0.0.0.255 log access-list 9 permit any access-list 99 permit 192.168.40.0 0.0.3.255 access-list 101 permit ip 192.168.106.0 0.0.0.255 192.168.106.0 0.0.0.255 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.168.50.21 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.200.222.199 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.200.222.37 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.168.50.10 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.200.202.140 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.200.223.5 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.200.223.4 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.200.223.202 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.200.223.203 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.200.223.204 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.168.168.6 access-list 101 permit ip 192.168.106.128 0.0.0.127 host 192.168.168.5 access-list 101 permit ip any host 224.0.0.18 access-list 101 deny icmp host 192.168.100.192 any access-list 101 deny ip 192.168.106.128 0.0.0.127 any access-list 101 permit ip any any access-list 109 permit ip 10.104.32.0 0.0.1.255 host 10.251.127.130 access-list 109 permit ip 10.104.32.0 0.0.1.255 host 10.250.2.92 access-list 109 permit ip 10.104.32.0 0.0.1.255 host 10.110.112.11 access-list 109 permit ip 10.104.32.0 0.0.1.255 host 10.111.128.8 access-list 109 permit ip 10.104.34.0 0.0.0.255 host 10.40.162.8 access-list 109 permit ip 10.104.34.0 0.0.0.255 host 10.251.127.130 access-list 109 permit ip 10.104.34.0 0.0.0.255 host 10.250.2.92 access-list 109 permit ip 10.104.34.0 0.0.0.255 host 10.110.112.11 access-list 109 permit ip 10.104.34.0 0.0.0.255 host 10.111.128.8 access-list 109 permit ip 10.104.32.0 0.0.1.255 10.104.0.0 0.0.127.255 access-list 109 permit ip 10.104.32.0 0.0.1.255 193.30.204.64 0.0.0.63 access-list 109 permit ip 10.104.32.0 0.0.1.255 10.40.161.0 0.0.0.63 access-list 109 permit ip 10.104.32.0 0.0.1.255 10.251.5.0 0.0.0.255 access-list 109 permit ip 10.104.32.0 0.0.1.255 host 10.103.33.21 access-list 109 permit ip 10.104.34.0 0.0.0.255 10.104.0.0 0.0.127.255 access-list 109 permit ip 10.104.34.0 0.0.0.255 193.30.204.64 0.0.0.63 access-list 109 permit ip 10.104.34.0 0.0.0.255 10.40.161.0 0.0.0.63 access-list 109 permit ip 10.104.34.0 0.0.0.255 10.251.5.0 0.0.0.255 access-list 109 permit ip 192.168.112.0 0.0.0.255 10.104.0.0 0.0.127.255 access-list 109 permit ip 10.104.34.0 0.0.0.255 host 10.103.33.21 access-list 109 permit ip 10.104.32.0 0.0.1.255 host 10.40.162.8 access-list 109 permit udp any any eq bootps access-list 109 permit udp any any eq bootpc access-list 109 permit icmp any 10.104.99.0 0.0.0.255 access-list 109 deny ip 10.104.99.0 0.0.0.255 any log access-list 109 deny ip 10.104.32.0 0.0.1.255 10.0.0.0 0.255.255.255 log access-list 109 deny ip 10.104.34.0 0.0.0.255 10.0.0.0 0.255.255.255 log access-list 109 deny ip 192.168.112.0 0.0.0.255 10.0.0.0 0.255.255.255 log access-list 109 deny ip 10.104.32.0 0.0.1.255 193.30.204.0 0.0.0.255 log access-list 109 deny ip 10.104.34.0 0.0.0.255 193.30.204.0 0.0.0.255 log access-list 109 deny ip 192.168.112.0 0.0.0.255 193.30.204.0 0.0.0.255 log access-list 109 permit ip any any access-list 110 permit ip 192.168.8.0 0.0.0.255 192.168.8.0 0.0.0.255 access-list 110 permit udp any host 192.200.202.140 eq domain access-list 110 deny ip any 192.168.0.0 0.0.255.255 access-list 110 deny ip any 192.200.200.0 0.0.0.255 access-list 110 deny ip any 192.200.201.0 0.0.0.255 access-list 110 deny ip any 192.200.202.0 0.0.0.255 access-list 110 deny ip any 192.200.203.0 0.0.0.255 access-list 110 deny ip any 192.200.204.0 0.0.0.255 access-list 110 deny ip any 192.200.205.0 0.0.0.255 access-list 110 deny ip any 192.200.220.0 0.0.0.255 access-list 110 deny ip any 192.200.221.0 0.0.0.255 access-list 110 deny ip any 192.200.222.0 0.0.0.255 access-list 110 deny ip any 192.200.223.0 0.0.0.255 access-list 110 permit ip any any access-list 113 permit udp any eq bootpc any eq bootps access-list 113 permit udp 10.104.121.32 0.0.0.31 host 10.104.121.70 eq 12223 access-list 113 permit udp 10.104.121.32 0.0.0.31 host 10.104.121.70 eq 5246 access-list 113 deny ip any any access-list 119 permit udp any any eq bootps access-list 119 permit udp any any eq bootpc access-list 119 permit icmp any 10.104.99.0 0.0.0.255 access-list 119 deny ip 10.104.99.0 0.0.0.255 any log access-list 119 deny ip 10.104.32.0 0.0.1.255 host 10.250.2.102 log access-list 119 deny ip 10.104.32.0 0.0.1.255 host 10.250.5.70 log access-list 119 deny ip 10.104.32.0 0.0.1.255 host 10.250.5.119 log access-list 119 deny ip 10.104.34.0 0.0.0.255 host 10.250.2.102 log access-list 119 deny ip 10.104.34.0 0.0.0.255 host 10.250.5.70 log access-list 119 deny ip 10.104.34.0 0.0.0.255 host 10.250.5.119 log access-list 119 deny ip 10.104.36.0 0.0.0.255 host 10.250.2.102 log access-list 119 deny ip 10.104.36.0 0.0.0.255 host 10.250.5.70 log access-list 119 deny ip 10.104.36.0 0.0.0.255 host 10.250.5.119 log access-list 119 permit ip any any access-list 120 deny tcp any host 10.104.120.121 eq 443 access-list 120 permit ip host 192.168.104.250 any access-list 120 permit ip any any access-list 141 permit ip any 192.168.103.0 0.0.0.255 access-list 141 permit ip any 192.168.104.0 0.0.0.255 access-list 141 permit ip any 192.200.200.0 0.0.0.255 access-list 141 permit ip any 192.200.201.0 0.0.0.255 access-list 141 permit ip any 192.200.203.0 0.0.0.255 access-list 141 permit ip any 192.200.204.0 0.0.0.255 access-list 141 permit ip any 192.200.205.0 0.0.0.255 access-list 141 permit ip any 192.168.110.0 0.0.0.255 access-list 141 permit ip any 192.168.111.0 0.0.0.255 access-list 141 permit ip any 192.168.112.0 0.0.0.255 access-list 141 permit ip any host 192.168.50.11 access-list 141 permit ip any host 192.168.50.12 access-list 141 permit udp any host 192.200.202.140 eq domain access-list 141 deny ip any host 192.200.202.140 access-list 141 permit ip any 192.200.202.0 0.0.0.255 access-list 141 permit ip any 192.200.221.0 0.0.0.255 access-list 141 permit ip any host 192.168.50.13 access-list 141 permit ip any 192.168.100.0 0.0.0.255 access-list 141 permit ip any host 224.0.0.18 access-list 141 permit ip any 10.104.0.0 0.0.255.255 access-list 143 permit tcp host 192.168.168.21 host 192.168.50.19 eq 636 access-list 143 permit tcp host 192.168.168.21 host 192.168.50.16 eq www access-list 143 permit tcp host 192.168.168.21 host 192.200.202.140 eq www access-list 143 permit udp host 192.168.168.21 host 192.200.202.140 eq domain access-list 143 permit tcp host 192.168.168.21 host 192.168.50.19 eq 443 access-list 143 permit tcp host 192.168.169.250 any access-list 143 permit icmp host 192.168.169.250 any access-list 143 permit tcp host 192.168.168.21 host 192.168.50.10 eq 8000 access-list 144 permit ip host 192.168.113.101 any access-list 144 permit ip host 192.168.113.100 any access-list 144 permit ip host 192.168.113.102 any access-list 144 permit ip any host 224.0.0.18 access-list 144 permit ip host 192.168.113.254 host 224.0.0.18 access-list 199 permit ip 192.168.40.0 0.0.3.255 192.168.40.0 0.0.3.255 access-list 199 permit udp 192.168.40.0 0.0.3.255 host 192.168.50.19 eq ntp access-list 199 permit ip any host 224.0.0.18