! Note: ACL Name is the name of the ACL as it is applied to the router. ! If there is a postfix -IN or -OUT, leave it off of the ACL NAME here and show it in the ! syntax below as -IN and -OUT are just the directioal components of a single SEC_ACL instance. ! ! Only one ACL is allowed per CCR request as different ACLs may have different owners or risks. ! ACL NAME (CCR): SEC_StorageBox ! Note: Please use exactly the syntax below. Device,Interface,Direction rsgct2-gss01-6509,apac.nsroot.net,interface GigabitEthernet1/45,IN rsgct2-gss02-6509,apac.nsroot.net,interface GigabitEthernet1/45,IN ! Note: Apply ACL details below. Use postfix to note direction even if only one direction. ! XXXXX= CCR ID Number ! .Y = CCR Version Number ! Both MUST exist in the remark statement BEFORE your ACL lines to be added. ! ! The remark statment must match EXACTLY. Variations without the version number or otherwise will cause your RFC to be rejected. ! For CT2 ========================================== ========================================== ! [command_start] ip access-list extended SEC_StorageBox ! no deny ip any any log remark**SEC_StorageBox update CCR#XXXXXX_Y permit tcp host 163.37.197.251 host 10.91.253.104 eq 7778 permit tcp host 163.37.197.252 host 10.91.253.104 eq 7778 permit tcp host 163.37.197.253 host 10.91.253.104 eq 7778 permit tcp host 163.37.197.251 host 129.14.42.164 eq 7778 permit tcp host 163.37.197.252 host 129.14.42.164 eq 7778 permit tcp host 163.37.197.253 host 129.14.42.164 eq 7778 permit tcp host 163.37.197.251 host 163.36.253.193 eq 7778 permit tcp host 163.37.197.252 host 163.36.253.193 eq 7778 permit tcp host 163.37.197.253 host 163.36.253.193 eq 7778 permit tcp host 163.37.197.251 host 169.179.108.69 eq 7778 permit tcp host 163.37.197.252 host 169.179.108.69 eq 7778 permit tcp host 163.37.197.253 host 169.179.108.69 eq 7778 permit tcp host 163.37.197.251 host 169.179.151.34 eq 7778 permit tcp host 163.37.197.252 host 169.179.151.34 eq 7778 permit tcp host 163.37.197.253 host 169.179.151.34 eq 7778 permit tcp host 163.37.197.251 host 150.110.186.78 eq 25 permit tcp host 163.37.197.252 host 150.110.186.78 eq 25 permit tcp host 163.37.197.253 host 150.110.186.78 eq 25 permit tcp host 163.37.197.251 host 163.36.6.225 eq 389 permit tcp host 163.37.197.252 host 163.36.6.225 eq 389 permit tcp host 163.37.197.253 host 163.36.6.225 eq 389 permit tcp host 163.37.197.251 host 163.36.6.226 eq 389 permit tcp host 163.37.197.252 host 163.36.6.226 eq 389 permit tcp host 163.37.197.253 host 163.36.6.226 eq 389 permit tcp host 163.37.197.251 host 163.36.6.225 eq 636 permit tcp host 163.37.197.252 host 163.36.6.225 eq 636 permit tcp host 163.37.197.253 host 163.36.6.225 eq 636 permit tcp host 163.37.197.251 host 163.36.6.226 eq 636 permit tcp host 163.37.197.252 host 163.36.6.226 eq 636 permit tcp host 163.37.197.253 host 163.36.6.226 eq 636 permit udp host 163.37.197.251 host 169.173.44.19 eq 162 permit udp host 163.37.197.252 host 169.173.44.19 eq 162 permit udp host 163.37.197.253 host 169.173.44.19 eq 162 permit udp host 163.37.197.251 host 169.179.108.95 eq 162 permit udp host 163.37.197.252 host 169.179.108.95 eq 162 permit udp host 163.37.197.253 host 169.179.108.95 eq 162 permit udp host 163.37.197.251 host 169.185.236.73 eq 162 permit udp host 163.37.197.252 host 169.185.236.73 eq 162 permit udp host 163.37.197.253 host 169.185.236.73 eq 162 permit tcp host 163.37.197.251 host 169.179.108.69 eq 25000 permit tcp host 163.37.197.252 host 169.179.108.69 eq 25000 permit tcp host 163.37.197.253 host 169.179.108.69 eq 25000 permit tcp host 163.37.197.251 host 169.179.151.34 eq 25000 permit tcp host 163.37.197.252 host 169.179.151.34 eq 25000 permit tcp host 163.37.197.253 host 169.179.151.34 eq 25000 permit tcp host 163.37.197.251 host 192.193.215.65 eq 123 permit tcp host 163.37.197.252 host 192.193.215.65 eq 123 permit tcp host 163.37.197.253 host 192.193.215.65 eq 123 permit tcp host 163.37.197.251 host 192.193.215.69 eq 123 permit tcp host 163.37.197.252 host 192.193.215.69 eq 123 permit tcp host 163.37.197.253 host 192.193.215.69 eq 123 permit udp host 163.37.197.251 host 192.193.215.65 eq 123 permit udp host 163.37.197.252 host 192.193.215.65 eq 123 permit udp host 163.37.197.253 host 192.193.215.65 eq 123 permit udp host 163.37.197.251 host 192.193.215.69 eq 123 permit udp host 163.37.197.252 host 192.193.215.69 eq 123 permit udp host 163.37.197.253 host 192.193.215.69 eq 123 permit tcp host 163.37.197.251 host 192.193.215.65 eq 53 permit tcp host 163.37.197.252 host 192.193.215.65 eq 53 permit tcp host 163.37.197.253 host 192.193.215.65 eq 53 permit tcp host 163.37.197.251 host 192.193.215.69 eq 53 permit tcp host 163.37.197.252 host 192.193.215.69 eq 53 permit tcp host 163.37.197.253 host 192.193.215.69 eq 53 permit udp host 163.37.197.251 host 192.193.215.65 eq 53 permit udp host 163.37.197.252 host 192.193.215.65 eq 53 permit udp host 163.37.197.253 host 192.193.215.65 eq 53 permit udp host 163.37.197.251 host 192.193.215.69 eq 53 permit udp host 163.37.197.252 host 192.193.215.69 eq 53 permit udp host 163.37.197.253 host 192.193.215.69 eq 53 ! ! deny ip any any log ! ! !!#End of file