========================================== ========================================== ! ! ip access-list extended SEC_StorageBox permit tcp 163.37.197.0 0.0.0.255 eq 5414 any gt 1023 established permit udp host 163.37.197.11 eq ntp 192.193.215.0 0.0.0.255 eq ntp permit udp host 163.37.197.12 eq ntp 192.193.215.0 0.0.0.255 eq ntp permit tcp host 163.37.197.11 eq telnet any gt 1023 established permit tcp host 163.37.197.12 eq telnet any gt 1023 established permit tcp host 163.37.197.11 eq www any gt 1023 established permit tcp host 163.37.197.12 eq www any gt 1023 established permit tcp host 163.37.197.11 eq 443 any gt 1023 established permit tcp host 163.37.197.12 eq 443 any gt 1023 established permit tcp host 163.37.197.11 eq 22 any gt 1023 established permit ip host 163.37.197.11 194.41.64.0 0.0.15.255 remark ----Primary:Johnson, Yip, Timothy Tse remark ----Secondary:Anicete, Oliver Calanno [CCC-OT_IT], Eric Yeo remark ----BISO:Francis Lee permit ip host 163.37.197.12 194.41.64.0 0.0.15.255 permit tcp host 163.37.197.12 eq 22 any gt 1023 established permit icmp host 163.37.197.11 any echo-reply permit icmp host 163.37.197.12 any echo-reply permit udp host 163.37.197.11 any eq domain permit udp host 163.37.197.12 any eq domain permit udp host 163.37.197.11 eq snmp any gt 1023 permit udp host 163.37.197.12 eq snmp any gt 1023 permit udp host 163.37.197.11 gt 1023 host 169.178.254.81 eq snmptrap permit udp host 163.37.197.12 gt 1023 host 169.178.254.81 eq snmptrap permit udp host 163.37.197.11 gt 1023 host 169.181.38.81 eq snmptrap permit udp host 163.37.197.12 gt 1023 host 169.181.38.81 eq snmptrap permit tcp host 163.37.197.11 gt 1023 host 163.37.134.19 eq tacacs permit tcp host 163.37.197.12 gt 1023 host 163.37.134.19 eq tacacs permit tcp host 163.37.197.11 gt 1023 host 169.178.96.144 eq tacacs permit tcp host 163.37.197.12 gt 1023 host 169.178.96.144 eq tacacs permit ip host 163.37.197.11 host 163.37.141.140 permit ip host 163.37.197.11 host 129.14.26.30 permit ip any host 163.36.253.204 permit ip any host 129.14.42.170 permit ip any host 169.180.245.147 permit ip host 163.37.197.12 host 163.37.141.140 permit ip host 163.37.197.12 host 129.14.26.30 permit tcp host 163.37.197.11 gt 1023 host 169.178.254.75 eq ftp permit tcp host 163.37.197.12 gt 1023 host 169.178.254.75 eq ftp permit tcp host 163.37.197.11 gt 1023 host 169.178.254.75 eq ftp-data permit tcp host 163.37.197.12 gt 1023 host 169.178.254.75 eq ftp-data permit tcp host 163.37.197.11 gt 1023 host 169.181.38.75 eq ftp permit tcp host 163.37.197.12 gt 1023 host 169.181.38.75 eq ftp permit tcp host 163.37.197.11 gt 1023 host 169.181.38.75 eq ftp-data permit tcp host 163.37.197.12 gt 1023 host 169.181.38.75 eq ftp-data permit udp host 163.37.197.11 host 169.178.254.75 permit udp host 163.37.197.12 host 169.178.254.75 permit udp host 163.37.197.11 host 169.181.38.75 permit udp host 163.37.197.12 host 169.181.38.75 permit udp host 163.37.197.3 host 224.0.0.2 eq 1985 permit udp host 163.37.197.4 host 224.0.0.2 eq 1985 permit ospf any any permit udp 163.37.197.0 0.0.0.255 host 163.36.1.127 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 163.36.32.129 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 163.36.1.130 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 163.36.32.132 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 169.175.160.71 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 169.175.162.64 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 169.175.161.62 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 169.175.163.41 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.53.34 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.41.54 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.127 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.32.129 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.130 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.32.132 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.175.160.71 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.175.162.64 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.175.161.62 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.175.163.41 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.53.48 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.53.49 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.41.53 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.189.81 gt 1023 remark ---- Browser Java Applet ----- permit tcp host 163.37.197.37 eq www host 163.37.189.81 permit tcp host 163.37.197.37 eq www host 163.37.41.53 permit tcp host 163.37.197.37 eq www host 163.37.53.48 permit tcp host 163.37.197.37 eq www host 163.37.53.49 permit tcp host 163.37.197.37 eq www host 129.14.14.10 permit tcp host 163.37.197.38 eq www host 163.37.189.81 permit tcp host 163.37.197.38 eq www host 163.37.41.53 permit tcp host 163.37.197.38 eq www host 163.37.53.48 permit tcp host 163.37.197.38 eq www host 163.37.53.49 permit tcp host 163.37.197.38 eq www host 129.14.14.10 remark ---- Applet Communication Basic Communications ---- permit udp host 163.37.197.37 eq snmp host 163.37.189.81 permit udp host 163.37.197.37 eq snmp host 163.37.41.53 permit udp host 163.37.197.37 eq snmp host 163.37.53.48 permit udp host 163.37.197.37 eq snmp host 163.37.53.49 permit udp host 163.37.197.37 eq snmp host 129.14.14.10 permit udp host 163.37.197.38 eq snmp host 163.37.189.81 permit udp host 163.37.197.38 eq snmp host 163.37.41.53 permit udp host 163.37.197.38 eq snmp host 163.37.53.48 permit udp host 163.37.197.38 eq snmp host 163.37.53.49 permit udp host 163.37.197.38 eq snmp host 129.14.14.10 remark ---- Switch message log communication (iFCP) ----- permit udp host 163.37.197.37 eq 37009 host 163.37.189.81 permit udp host 163.37.197.37 eq 37009 host 163.37.41.53 permit udp host 163.37.197.37 eq 37009 host 163.37.53.48 permit udp host 163.37.197.37 eq 37009 host 163.37.53.49 permit udp host 163.37.197.37 eq 37009 host 129.14.14.10 permit udp host 163.37.197.38 eq 37009 host 163.37.189.81 permit udp host 163.37.197.38 eq 37009 host 163.37.41.53 permit udp host 163.37.197.38 eq 37009 host 163.37.53.48 permit udp host 163.37.197.38 eq 37009 host 163.37.53.49 permit udp host 163.37.197.38 eq 37009 host 129.14.14.10 remark ---- iFCP/mFCP ping results communication (iFCP) ----- permit udp host 163.37.197.37 eq 37010 host 163.37.189.81 permit udp host 163.37.197.37 eq 37010 host 163.37.41.53 permit udp host 163.37.197.37 eq 37010 host 163.37.53.48 permit udp host 163.37.197.37 eq 37010 host 163.37.53.49 permit udp host 163.37.197.37 eq 37010 host 129.14.14.10 permit udp host 163.37.197.38 eq 37010 host 163.37.189.81 permit udp host 163.37.197.38 eq 37010 host 163.37.41.53 permit udp host 163.37.197.38 eq 37010 host 163.37.53.48 permit udp host 163.37.197.38 eq 37010 host 163.37.53.49 permit udp host 163.37.197.38 eq 37010 host 129.14.14.10 remark ---- FTP Control ----- permit tcp host 163.37.197.37 host 163.37.189.81 eq ftp-data permit tcp host 163.37.197.37 host 163.37.41.53 eq ftp-data permit tcp host 163.37.197.37 host 163.37.53.48 eq ftp-data permit tcp host 163.37.197.37 host 163.37.53.49 eq ftp-data permit tcp host 163.37.197.37 host 129.14.14.10 eq ftp-data permit tcp host 163.37.197.38 host 163.37.189.81 eq ftp-data permit tcp host 163.37.197.38 host 163.37.41.53 eq ftp-data permit tcp host 163.37.197.38 host 163.37.53.48 eq ftp-data permit tcp host 163.37.197.38 host 163.37.53.49 eq ftp-data permit tcp host 163.37.197.38 host 129.14.14.10 eq ftp-data remark ---- FTP Data ----- permit tcp host 163.37.197.37 host 163.37.189.81 eq ftp permit tcp host 163.37.197.37 host 163.37.41.53 eq ftp permit tcp host 163.37.197.37 host 163.37.53.48 eq ftp permit tcp host 163.37.197.37 host 163.37.53.49 eq ftp permit tcp host 163.37.197.37 host 129.14.14.10 eq ftp permit tcp host 163.37.197.38 host 163.37.189.81 eq ftp permit tcp host 163.37.197.38 host 163.37.41.53 eq ftp permit tcp host 163.37.197.38 host 163.37.53.48 eq ftp permit tcp host 163.37.197.38 host 163.37.53.49 eq ftp permit tcp host 163.37.197.38 host 129.14.14.10 eq ftp remark ---- TFTP ----- permit udp host 163.37.197.37 host 163.37.189.81 eq tftp permit udp host 163.37.197.37 host 163.37.41.53 eq tftp permit udp host 163.37.197.37 host 163.37.53.48 eq tftp permit udp host 163.37.197.37 host 163.37.53.49 eq tftp permit udp host 163.37.197.37 host 129.14.14.10 eq tftp permit udp host 163.37.197.38 host 163.37.189.81 eq tftp permit udp host 163.37.197.38 host 163.37.41.53 eq tftp permit udp host 163.37.197.38 host 163.37.53.48 eq tftp permit udp host 163.37.197.38 host 163.37.53.49 eq tftp permit udp host 163.37.197.38 host 129.14.14.10 eq tftp remark ---- SNTP ----- permit udp host 163.37.197.37 host 163.37.189.81 eq ntp permit udp host 163.37.197.38 host 163.37.189.81 eq ntp remark ---- Switch message log communication -1 (iFCP) ----- permit udp host 163.37.197.37 host 163.37.189.81 eq 37009 permit udp host 163.37.197.37 host 163.37.41.53 eq 37009 permit udp host 163.37.197.37 host 163.37.53.48 eq 37009 permit udp host 163.37.197.37 host 163.37.53.49 eq 37009 permit udp host 163.37.197.37 host 129.14.14.10 eq 37009 permit udp host 163.37.197.38 host 163.37.189.81 eq 37009 permit udp host 163.37.197.38 host 163.37.41.53 eq 37009 permit udp host 163.37.197.38 host 163.37.53.48 eq 37009 permit udp host 163.37.197.38 host 163.37.53.49 eq 37009 permit udp host 163.37.197.38 host 129.14.14.10 eq 37009 remark ---- Ping reply from GRN ----- permit icmp 163.37.197.0 0.0.0.255 any echo-reply permit tcp 163.37.197.0 0.0.0.255 host 163.37.238.14 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.238.64 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.241.115 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.241.20 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.61.47 gt 1023 remark ---- HTTP access to IBM Tape Backup System ----- permit tcp 163.37.197.0 0.0.0.255 eq www host 169.178.197.66 gt 1023 permit tcp 163.37.197.0 0.0.0.255 eq 443 host 169.178.197.66 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.51 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.178.140.30 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.189.48 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.229.42 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.51 eq ftp-data permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.51 eq ftp permit tcp 163.37.197.0 0.0.0.255 host 169.178.140.30 eq ftp-data permit tcp 163.37.197.0 0.0.0.255 host 169.178.140.30 eq ftp remark ---New ASPAC TFTP SYSLOG servers--- remark ----Primary:Krishnakumar Pazhore remark ----Secondary:Surendra, Babu remark ----BISO:Not available permit tcp host 163.37.197.11 gt 1023 host 163.37.141.190 eq ftp permit tcp host 163.37.197.11 gt 1023 host 129.14.26.45 eq ftp permit tcp host 163.37.197.12 gt 1023 host 163.37.141.190 eq ftp permit tcp host 163.37.197.12 gt 1023 host 129.14.26.45 eq ftp permit tcp host 163.37.197.11 gt 1023 host 163.37.141.190 eq ftp-data permit tcp host 163.37.197.11 gt 1023 host 129.14.26.45 eq ftp-data permit tcp host 163.37.197.12 gt 1023 host 163.37.141.190 eq ftp-data permit tcp host 163.37.197.12 gt 1023 host 129.14.26.45 eq ftp-data permit udp host 163.37.197.11 host 163.37.141.190 permit udp host 163.37.197.11 host 129.14.26.45 permit udp host 163.37.197.11 host 163.37.141.192 permit udp host 163.37.197.11 host 129.14.26.47 permit udp host 163.37.197.12 host 163.37.141.190 permit udp host 163.37.197.12 host 129.14.26.45 permit udp host 163.37.197.12 host 163.37.141.192 permit udp host 163.37.197.12 host 129.14.26.47 remark ***Encryption IBM Virtual Engine/VE (Virtual Tape Backup in Mainframe) remark *** requestor of IBM VE : Dichoso, Maria [CCC-OT_IT] remark *** IBM VE TCP 51001/EKM ; TCP 51002/EKM ssl *** remark *** IBM VE to host ST04 169.165.212.21 *** permit tcp host 163.37.197.42 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.43 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.44 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.45 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.47 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.48 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.156 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.157 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.158 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.159 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.161 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.162 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.42 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.43 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.44 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.45 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.47 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.48 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.156 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.157 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.158 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.159 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.161 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.162 host 169.165.212.21 eq 51002 remark *** IBM VE to host ST05 169.165.212.77 *** permit tcp host 163.37.197.42 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.43 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.44 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.45 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.47 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.48 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.156 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.157 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.158 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.159 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.161 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.162 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.42 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.43 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.44 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.45 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.47 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.48 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.156 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.157 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.158 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.159 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.161 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.162 host 169.165.212.77 eq 51002 remark *** IBM VE to host ST06 169.165.221.61 *** permit tcp host 163.37.197.42 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.43 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.44 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.45 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.47 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.48 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.156 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.157 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.158 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.159 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.161 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.162 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.42 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.43 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.44 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.45 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.47 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.48 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.156 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.157 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.158 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.159 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.161 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.162 host 169.165.221.61 eq 51002 remark *** IBM VE to host ST07 169.165.221.69 *** permit tcp host 163.37.197.42 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.43 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.44 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.45 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.47 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.48 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.156 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.157 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.161 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.162 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.158 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.159 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.42 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.43 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.44 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.45 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.47 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.48 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.156 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.157 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.158 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.159 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.161 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.162 host 169.165.221.69 eq 51002 permit tcp 163.37.197.0 0.0.0.255 host 163.37.136.121 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq snmp permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq snmptrap permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq syslog permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq ntp permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq domain permit tcp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq domain permit tcp 163.37.197.40 0.0.0.7 host 163.36.73.48 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.73.48 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.73.48 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.73.48 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.73.48 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.73.48 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.73.49 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.73.49 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.73.49 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.73.49 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.73.49 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.73.49 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.66.48 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.66.48 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.66.48 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.66.48 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.66.48 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.66.48 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.66.49 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.66.49 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.66.49 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.66.49 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.66.49 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.66.49 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.72.48 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.72.48 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.72.48 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.72.48 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.72.48 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.72.48 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.72.49 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.72.49 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.72.49 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.72.49 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.72.49 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.72.49 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.64.48 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.64.48 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.64.48 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.64.48 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.64.48 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.64.48 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.64.49 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.64.49 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.64.49 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.64.49 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.64.49 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.64.49 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 192.193.215.65 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 192.193.215.65 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 192.193.215.65 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 192.193.215.65 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 192.193.215.65 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 192.193.215.65 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 192.193.215.69 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 192.193.215.69 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 192.193.215.69 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 192.193.215.69 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 192.193.215.69 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 192.193.215.69 eq 51002 remark ----Primary:Timothy Tse remark ----Secondary:Eric Yeo remark ----BISO:Francis Lee remark Primary Owner/Reviewer Name : Krishnakumar Pazhore (+65 6426-2474) remark Secondary Owner/ Reviewer Name: Surendra, Babu remark Hr Business Department : APPC -Storage remark Hr Business Unit : APPC remark ACL Owners BISO Name : Gregory Sim 65-6426-2873 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.58 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq snmp permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq snmptrap permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq syslog permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq ntp permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq domain permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq domain remark ----Primary: Krishnakumar, Pazhore [CCC-OT_IT] +6565252474 remark ----Secondary: Surendra, Babu [CCC-OT_IT] +6565952906 remark ----Hr Business Department : CTI remark ----Hr Business Unit : AP Regional Storage Operations Support remark ----BISO: Lee, Joseph CP remark ----Access between storage frames and SAN secure servers permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.122 eq www permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.122 eq 443 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.122 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.123 eq www permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.123 eq 443 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.123 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.82 eq www permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.82 eq 443 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.82 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.127 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.128 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.36.122 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.36.123 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 150.110.179.107 eq smtp remark ---- Storage for E2k7 ----- permit icmp any any echo permit icmp any any echo-reply permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq www permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 443 permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 2162 permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 2163 permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 13456 permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 60020 permit tcp 163.37.197.0 0.0.0.255 host 163.36.145.92 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 129.14.11.20 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.82 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.110 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.122 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.123 eq 3682 permit udp 163.37.197.0 0.0.0.255 any eq domain remark **SEC-ACL update to open port 8080 between 163.37.197.174 and proxy IP using ACL CCR#82397_Y permit tcp 163.37.197.0 0.0.0.255 host 192.193.160.21 eq 8080 permit tcp 163.37.197.0 0.0.0.255 host 192.193.160.51 eq 8080 remark **SEC-ACL update to open port 8080 between 163.37.197.174 and proxy IP using ACL CCR#82397.2 permit tcp 163.37.197.0 0.0.0.255 host 192.193.164.21 eq 8080 permit tcp 163.37.197.0 0.0.0.255 host 192.193.164.51 eq 8080 deny ip any any ========================================== ========================================== ip access-list extended SEC_StorageBox permit tcp 163.37.197.0 0.0.0.255 eq 5414 any gt 1023 established permit udp host 163.37.197.11 eq ntp 192.193.215.0 0.0.0.255 eq ntp permit udp host 163.37.197.12 eq ntp 192.193.215.0 0.0.0.255 eq ntp permit tcp host 163.37.197.11 eq telnet any gt 1023 established permit tcp host 163.37.197.12 eq telnet any gt 1023 established permit tcp host 163.37.197.11 eq www any gt 1023 established permit tcp host 163.37.197.12 eq www any gt 1023 established permit tcp host 163.37.197.11 eq 443 any gt 1023 established permit tcp host 163.37.197.12 eq 443 any gt 1023 established permit tcp host 163.37.197.11 eq 22 any gt 1023 established permit ip host 163.37.197.11 194.41.64.0 0.0.15.255 remark ----Primary:Johnson, Yip, Timothy Tse remark ----Secondary:Anicete, Oliver Calanno [CCC-OT_IT], Eric Yeo remark ----BISO:Francis Lee permit ip host 163.37.197.12 194.41.64.0 0.0.15.255 permit tcp host 163.37.197.12 eq 22 any gt 1023 established permit icmp host 163.37.197.11 any echo-reply permit icmp host 163.37.197.12 any echo-reply permit udp host 163.37.197.11 any eq domain permit udp host 163.37.197.12 any eq domain permit udp host 163.37.197.11 eq snmp any gt 1023 permit udp host 163.37.197.12 eq snmp any gt 1023 permit udp host 163.37.197.11 gt 1023 host 169.178.254.81 eq snmptrap permit udp host 163.37.197.12 gt 1023 host 169.178.254.81 eq snmptrap permit udp host 163.37.197.11 gt 1023 host 169.181.38.81 eq snmptrap permit udp host 163.37.197.12 gt 1023 host 169.181.38.81 eq snmptrap permit tcp host 163.37.197.11 gt 1023 host 163.37.134.19 eq tacacs permit tcp host 163.37.197.12 gt 1023 host 163.37.134.19 eq tacacs permit tcp host 163.37.197.11 gt 1023 host 169.178.96.144 eq tacacs permit tcp host 163.37.197.12 gt 1023 host 169.178.96.144 eq tacacs permit ip host 163.37.197.11 host 163.37.141.140 permit ip host 163.37.197.11 host 129.14.26.30 permit ip any host 163.36.253.204 permit ip any host 129.14.42.170 permit ip any host 169.180.245.147 permit ip host 163.37.197.12 host 163.37.141.140 permit ip host 163.37.197.12 host 129.14.26.30 permit tcp host 163.37.197.11 gt 1023 host 169.178.254.75 eq ftp permit tcp host 163.37.197.12 gt 1023 host 169.178.254.75 eq ftp permit tcp host 163.37.197.11 gt 1023 host 169.178.254.75 eq ftp-data permit tcp host 163.37.197.12 gt 1023 host 169.178.254.75 eq ftp-data permit tcp host 163.37.197.11 gt 1023 host 169.181.38.75 eq ftp permit tcp host 163.37.197.12 gt 1023 host 169.181.38.75 eq ftp permit tcp host 163.37.197.11 gt 1023 host 169.181.38.75 eq ftp-data permit tcp host 163.37.197.12 gt 1023 host 169.181.38.75 eq ftp-data permit udp host 163.37.197.11 host 169.178.254.75 permit udp host 163.37.197.12 host 169.178.254.75 permit udp host 163.37.197.11 host 169.181.38.75 permit udp host 163.37.197.12 host 169.181.38.75 permit udp host 163.37.197.3 host 224.0.0.2 eq 1985 permit udp host 163.37.197.4 host 224.0.0.2 eq 1985 permit ospf any any permit udp 163.37.197.0 0.0.0.255 host 163.36.1.127 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 163.36.32.129 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 163.36.1.130 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 163.36.32.132 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 169.175.160.71 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 169.175.162.64 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 169.175.161.62 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 169.175.163.41 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.53.34 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.41.54 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.127 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.32.129 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.130 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.32.132 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.175.160.71 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.175.162.64 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.175.161.62 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.175.163.41 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.53.48 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.53.49 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.41.53 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.189.81 gt 1023 remark ---- Browser Java Applet ----- permit tcp host 163.37.197.37 eq www host 163.37.189.81 permit tcp host 163.37.197.37 eq www host 163.37.41.53 permit tcp host 163.37.197.37 eq www host 163.37.53.48 permit tcp host 163.37.197.37 eq www host 163.37.53.49 permit tcp host 163.37.197.37 eq www host 129.14.14.10 permit tcp host 163.37.197.38 eq www host 163.37.189.81 permit tcp host 163.37.197.38 eq www host 163.37.41.53 permit tcp host 163.37.197.38 eq www host 163.37.53.48 permit tcp host 163.37.197.38 eq www host 163.37.53.49 permit tcp host 163.37.197.38 eq www host 129.14.14.10 remark ---- Applet Communication Basic Communications ---- permit udp host 163.37.197.37 eq snmp host 163.37.189.81 permit udp host 163.37.197.37 eq snmp host 163.37.41.53 permit udp host 163.37.197.37 eq snmp host 163.37.53.48 permit udp host 163.37.197.37 eq snmp host 163.37.53.49 permit udp host 163.37.197.37 eq snmp host 129.14.14.10 permit udp host 163.37.197.38 eq snmp host 163.37.189.81 permit udp host 163.37.197.38 eq snmp host 163.37.41.53 permit udp host 163.37.197.38 eq snmp host 163.37.53.48 permit udp host 163.37.197.38 eq snmp host 163.37.53.49 permit udp host 163.37.197.38 eq snmp host 129.14.14.10 remark ---- Switch message log communication (iFCP) ----- permit udp host 163.37.197.37 eq 37009 host 163.37.189.81 permit udp host 163.37.197.37 eq 37009 host 163.37.41.53 permit udp host 163.37.197.37 eq 37009 host 163.37.53.48 permit udp host 163.37.197.37 eq 37009 host 163.37.53.49 permit udp host 163.37.197.37 eq 37009 host 129.14.14.10 permit udp host 163.37.197.38 eq 37009 host 163.37.189.81 permit udp host 163.37.197.38 eq 37009 host 163.37.41.53 permit udp host 163.37.197.38 eq 37009 host 163.37.53.48 permit udp host 163.37.197.38 eq 37009 host 163.37.53.49 permit udp host 163.37.197.38 eq 37009 host 129.14.14.10 remark ---- iFCP/mFCP ping results communication (iFCP) ----- permit udp host 163.37.197.37 eq 37010 host 163.37.189.81 permit udp host 163.37.197.37 eq 37010 host 163.37.41.53 permit udp host 163.37.197.37 eq 37010 host 163.37.53.48 permit udp host 163.37.197.37 eq 37010 host 163.37.53.49 permit udp host 163.37.197.37 eq 37010 host 129.14.14.10 permit udp host 163.37.197.38 eq 37010 host 163.37.189.81 permit udp host 163.37.197.38 eq 37010 host 163.37.41.53 permit udp host 163.37.197.38 eq 37010 host 163.37.53.48 permit udp host 163.37.197.38 eq 37010 host 163.37.53.49 permit udp host 163.37.197.38 eq 37010 host 129.14.14.10 remark ---- FTP Control ----- permit tcp host 163.37.197.37 host 163.37.189.81 eq ftp-data permit tcp host 163.37.197.37 host 163.37.41.53 eq ftp-data permit tcp host 163.37.197.37 host 163.37.53.48 eq ftp-data permit tcp host 163.37.197.37 host 163.37.53.49 eq ftp-data permit tcp host 163.37.197.37 host 129.14.14.10 eq ftp-data permit tcp host 163.37.197.38 host 163.37.189.81 eq ftp-data permit tcp host 163.37.197.38 host 163.37.41.53 eq ftp-data permit tcp host 163.37.197.38 host 163.37.53.48 eq ftp-data permit tcp host 163.37.197.38 host 163.37.53.49 eq ftp-data permit tcp host 163.37.197.38 host 129.14.14.10 eq ftp-data remark ---- FTP Data ----- permit tcp host 163.37.197.37 host 163.37.189.81 eq ftp permit tcp host 163.37.197.37 host 163.37.41.53 eq ftp permit tcp host 163.37.197.37 host 163.37.53.48 eq ftp permit tcp host 163.37.197.37 host 163.37.53.49 eq ftp permit tcp host 163.37.197.37 host 129.14.14.10 eq ftp permit tcp host 163.37.197.38 host 163.37.189.81 eq ftp permit tcp host 163.37.197.38 host 163.37.41.53 eq ftp permit tcp host 163.37.197.38 host 163.37.53.48 eq ftp permit tcp host 163.37.197.38 host 163.37.53.49 eq ftp permit tcp host 163.37.197.38 host 129.14.14.10 eq ftp remark ---- TFTP ----- permit udp host 163.37.197.37 host 163.37.189.81 eq tftp permit udp host 163.37.197.37 host 163.37.41.53 eq tftp permit udp host 163.37.197.37 host 163.37.53.48 eq tftp permit udp host 163.37.197.37 host 163.37.53.49 eq tftp permit udp host 163.37.197.37 host 129.14.14.10 eq tftp permit udp host 163.37.197.38 host 163.37.189.81 eq tftp permit udp host 163.37.197.38 host 163.37.41.53 eq tftp permit udp host 163.37.197.38 host 163.37.53.48 eq tftp permit udp host 163.37.197.38 host 163.37.53.49 eq tftp permit udp host 163.37.197.38 host 129.14.14.10 eq tftp remark ---- SNTP ----- permit udp host 163.37.197.37 host 163.37.189.81 eq ntp permit udp host 163.37.197.38 host 163.37.189.81 eq ntp remark ---- Switch message log communication -1 (iFCP) ----- permit udp host 163.37.197.37 host 163.37.189.81 eq 37009 permit udp host 163.37.197.37 host 163.37.41.53 eq 37009 permit udp host 163.37.197.37 host 163.37.53.48 eq 37009 permit udp host 163.37.197.37 host 163.37.53.49 eq 37009 permit udp host 163.37.197.37 host 129.14.14.10 eq 37009 permit udp host 163.37.197.38 host 163.37.189.81 eq 37009 permit udp host 163.37.197.38 host 163.37.41.53 eq 37009 permit udp host 163.37.197.38 host 163.37.53.48 eq 37009 permit udp host 163.37.197.38 host 163.37.53.49 eq 37009 permit udp host 163.37.197.38 host 129.14.14.10 eq 37009 remark ---- Ping reply from GRN ----- permit icmp 163.37.197.0 0.0.0.255 any echo-reply permit tcp 163.37.197.0 0.0.0.255 host 163.37.238.14 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.238.64 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.241.115 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.241.20 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.61.47 gt 1023 remark ---- HTTP access to IBM Tape Backup System ----- permit tcp 163.37.197.0 0.0.0.255 eq www host 169.178.197.66 gt 1023 permit tcp 163.37.197.0 0.0.0.255 eq 443 host 169.178.197.66 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.51 eq ftp-data permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.51 eq ftp permit tcp 163.37.197.0 0.0.0.255 host 169.178.140.30 eq ftp-data permit tcp 163.37.197.0 0.0.0.255 host 169.178.140.30 eq ftp permit tcp 163.37.197.0 0.0.0.255 host 163.36.1.51 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 169.178.140.30 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.189.48 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.37.229.42 gt 1023 remark ----Primary:Krishnakumar Pazhore remark ----Secondary:Surendra, Babu remark ----BISO:Not available remark ---New ASPAC TFTP SYSLOG servers--- permit tcp host 163.37.197.11 gt 1023 host 163.37.141.190 eq ftp permit tcp host 163.37.197.11 gt 1023 host 129.14.26.45 eq ftp permit tcp host 163.37.197.12 gt 1023 host 163.37.141.190 eq ftp permit tcp host 163.37.197.12 gt 1023 host 129.14.26.45 eq ftp permit tcp host 163.37.197.11 gt 1023 host 163.37.141.190 eq ftp-data permit tcp host 163.37.197.11 gt 1023 host 129.14.26.45 eq ftp-data permit tcp host 163.37.197.12 gt 1023 host 163.37.141.190 eq ftp-data permit tcp host 163.37.197.12 gt 1023 host 129.14.26.45 eq ftp-data permit udp host 163.37.197.11 host 163.37.141.190 permit udp host 163.37.197.11 host 129.14.26.45 permit udp host 163.37.197.11 host 163.37.141.192 permit udp host 163.37.197.11 host 129.14.26.47 permit udp host 163.37.197.12 host 163.37.141.190 permit udp host 163.37.197.12 host 129.14.26.45 permit udp host 163.37.197.12 host 163.37.141.192 permit udp host 163.37.197.12 host 129.14.26.47 remark ***Encryption IBM Virtual Engine/VE (Virtual Tape Backup in Mainframe) remark *** requestor of IBM VE : Dichoso, Maria [CCC-OT_IT] remark *** IBM VE TCP 51001/EKM ; TCP 51002/EKM ssl *** remark *** IBM VE to host ST04 169.165.212.21 *** permit tcp host 163.37.197.42 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.43 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.44 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.45 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.47 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.48 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.156 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.157 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.158 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.159 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.161 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.162 host 169.165.212.21 eq 51001 permit tcp host 163.37.197.42 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.43 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.44 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.45 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.47 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.48 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.156 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.157 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.158 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.159 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.161 host 169.165.212.21 eq 51002 permit tcp host 163.37.197.162 host 169.165.212.21 eq 51002 remark *** IBM VE to host ST05 169.165.212.77 *** permit tcp host 163.37.197.42 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.43 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.44 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.45 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.47 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.48 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.156 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.157 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.158 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.159 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.161 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.162 host 169.165.212.77 eq 51001 permit tcp host 163.37.197.42 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.43 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.44 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.45 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.47 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.48 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.156 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.157 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.158 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.159 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.161 host 169.165.212.77 eq 51002 permit tcp host 163.37.197.162 host 169.165.212.77 eq 51002 remark *** IBM VE to host ST06 169.165.221.61 *** permit tcp host 163.37.197.42 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.43 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.44 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.45 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.47 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.48 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.156 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.157 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.158 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.159 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.161 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.162 host 169.165.221.61 eq 51001 permit tcp host 163.37.197.42 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.43 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.44 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.45 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.47 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.48 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.156 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.157 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.158 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.159 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.161 host 169.165.221.61 eq 51002 permit tcp host 163.37.197.162 host 169.165.221.61 eq 51002 remark *** IBM VE to host ST07 169.165.221.69 *** permit tcp host 163.37.197.42 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.43 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.44 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.45 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.47 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.48 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.156 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.157 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.161 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.162 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.158 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.159 host 169.165.221.69 eq 51001 permit tcp host 163.37.197.42 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.43 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.44 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.45 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.47 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.48 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.156 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.157 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.158 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.159 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.161 host 169.165.221.69 eq 51002 permit tcp host 163.37.197.162 host 169.165.221.69 eq 51002 permit tcp 163.37.197.0 0.0.0.255 host 163.37.136.121 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq snmp permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq snmptrap permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq syslog permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq ntp permit udp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq domain permit tcp 163.37.197.0 0.0.0.255 host 163.37.136.121 eq domain permit tcp 163.37.197.40 0.0.0.7 host 163.36.73.48 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.73.48 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.73.48 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.73.48 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.73.48 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.73.48 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.73.49 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.73.49 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.73.49 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.73.49 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.73.49 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.73.49 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.66.48 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.66.48 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.66.48 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.66.48 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.66.48 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.66.48 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.66.49 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.66.49 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.66.49 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.66.49 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.66.49 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.66.49 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.72.48 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.72.48 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.72.48 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.72.48 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.72.48 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.72.48 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.72.49 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.72.49 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.72.49 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.72.49 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.72.49 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.72.49 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.64.48 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.64.48 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.64.48 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.64.48 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.64.48 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.64.48 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 163.36.64.49 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 163.36.64.49 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 163.36.64.49 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 163.36.64.49 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 163.36.64.49 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 163.36.64.49 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 192.193.215.65 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 192.193.215.65 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 192.193.215.65 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 192.193.215.65 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 192.193.215.65 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 192.193.215.65 eq 51002 permit tcp 163.37.197.40 0.0.0.7 host 192.193.215.69 eq 51001 permit tcp 163.37.197.156 0.0.0.3 host 192.193.215.69 eq 51001 permit tcp 163.37.197.160 0.0.0.3 host 192.193.215.69 eq 51001 permit tcp 163.37.197.40 0.0.0.7 host 192.193.215.69 eq 51002 permit tcp 163.37.197.156 0.0.0.3 host 192.193.215.69 eq 51002 permit tcp 163.37.197.160 0.0.0.3 host 192.193.215.69 eq 51002 remark ----Primary:Timothy Tse remark ----Secondary:Eric Yeo remark ----BISO:Francis Lee remark Primary Owner/Reviewer Name : Krishnakumar Pazhore (+65 6426-2474) remark Secondary Owner/ Reviewer Name: Surendra, Babu remark Hr Business Department : APPC -Storage remark Hr Business Unit : APPC remark ACL Owners BISO Name : Gregory Sim 65-6426-2873 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.58 gt 1023 permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq snmp permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq snmptrap permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq syslog permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq ntp permit udp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq domain permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.58 eq domain remark ----Primary: Krishnakumar, Pazhore [CCC-OT_IT] +6565252474 remark ----Secondary: Surendra, Babu [CCC-OT_IT] +6565952906 remark ----Hr Business Department : CTI remark ----Hr Business Unit : AP Regional Storage Operations Support remark ----BISO: Lee, Joseph CP remark ----Access between storage frames and SAN secure servers permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.122 eq www permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.122 eq 443 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.122 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.123 eq www permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.123 eq 443 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.123 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.82 eq www permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.82 eq 443 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.82 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.127 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.128 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.36.122 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 163.36.36.123 gt 1023 permit tcp 163.37.197.0 0.0.0.255 host 150.110.179.107 eq smtp remark ---- Storage for E2k7 ----- permit icmp any any echo permit icmp any any echo-reply permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq www permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 443 permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 2162 permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 2163 permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 13456 permit tcp 163.37.197.0 0.0.0.255 163.36.178.0 0.0.0.255 eq 60020 permit tcp 163.37.197.0 0.0.0.255 host 163.36.145.92 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 129.14.11.20 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.82 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 129.14.42.110 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.122 eq 3682 permit tcp 163.37.197.0 0.0.0.255 host 163.36.253.123 eq 3682 permit udp 163.37.197.0 0.0.0.255 any eq domain remark **SEC-ACL update to open port 8080 between 163.37.197.174 and proxy IP using ACL CCR#82397_Y permit tcp 163.37.197.0 0.0.0.255 host 192.193.160.21 eq 8080 permit tcp 163.37.197.0 0.0.0.255 host 192.193.160.51 eq 8080 remark **SEC-ACL update to open port 8080 between 163.37.197.174 and proxy IP using ACL CCR#82397.2 permit tcp 163.37.197.0 0.0.0.255 host 192.193.164.21 eq 8080 permit tcp 163.37.197.0 0.0.0.255 host 192.193.164.51 eq 8080 deny ip any any