[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Wed Apr 20 00:03:14 CDT 2011
Index: configs/core13.okc.onenet.net
===================================================================
retrieving revision 1.1011
diff -u -4 -r1.1011 core13.okc.onenet.net
@@ -1866,9 +1866,8 @@
!
interface Multilink29
description Stuart Schools - T1 -MU29
ip address 156.110.90.41 255.255.255.252
- mls qos trust dscp
ppp multilink
no ppp multilink fragmentation
multilink-group 29
!
Index: configs/core3.okc-m120.onenet.net
===================================================================
retrieving revision 1.207
diff -u -4 -r1.207 core3.okc-m120.onenet.net
@@ -1,30 +1,29 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE3-M120-RE0> show system commit
+ # 2011-04-19 23:10:02 CDT by von via cli commit confirmed, rollback in 10mins synchronize
+ # 2011-04-19 23:04:09 CDT by von via cli commit synchronize
+ # 2011-04-19 23:03:13 CDT by von via cli commit confirmed, rollback in 10mins synchronize
+ # 2011-04-19 23:01:50 CDT by von via cli commit synchronize
# 2011-04-19 23:00:01 CDT by von via cli commit confirmed, rollback in 10mins synchronize
# 2011-04-19 22:56:21 CDT by von via cli commit confirmed, rollback in 10mins synchronize
- # 2011-04-19 22:53:02 CDT by von via cli commit synchronize
- # 2011-04-19 22:51:23 CDT by von via cli commit confirmed, rollback in 10mins synchronize
- # 2011-04-19 22:10:01 CDT by admin via cli commit synchronize
- # 2011-04-19 22:08:36 CDT by von via cli commit synchronize
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis clocks
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 3 days, 2 hours, 23 minutes, 2 seconds
+ # Selected for : 3 days, 3 hours, 22 minutes, 16 seconds
# Selected since : 2011-04-16 20:37:51 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 3 days, 2 hours, 25 minutes, 37 seconds
+ # Selected for : 3 days, 3 hours, 24 minutes, 51 seconds
# Selected since : 2011-04-16 20:35:16 CDT
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -101,9 +100,8 @@
# Rear Bottom Tray Fan 6 OK
# Rear Bottom Tray Fan 7 OK
# Rear Bottom Tray Fan 8 OK
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis firmware
# Part Type Version
# FPC 0 ROM Juniper ROM Monitor Version 8.0b1
@@ -130,9 +128,8 @@
# O/S Version 10.4R2.6 by builder on 2011-02-06 2
# FEB 5 ROM Juniper ROM Monitor Version 8.0b1
# O/S Version 10.4R2.6 by builder on 2011-02-06 2
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis fpc detail
# Slot 0 information:
# State Online
@@ -152,9 +149,8 @@
# Slot 5 information:
# State Online
# Total CPU DRAM 128 MB
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis hardware
# Hardware inventory:
# Item Version Part number Serial number Description
@@ -208,9 +204,8 @@
# Fan Tray 1 Front Bottom Fan Tray
# Fan Tray 2 Rear Top Fan Tray
# Fan Tray 3 Rear Bottom Fan Tray
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis hardware models
# Hardware inventory:
# Item Version Part number Serial number FRU model number
@@ -251,9 +246,8 @@
# Fan Tray 1 FFANTRAY-M120-S
# Fan Tray 2 RFANTRAY-M120-S
# Fan Tray 3 RFANTRAY-M120-S
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis routing-engine
# Routing Engine status:
# Slot 0:
@@ -273,16 +267,15 @@
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis ssb
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis feb
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
- # 0 Online 33 5 0 512 21 59
- # 1 Online 32 5 0 512 21 59
- # 2 Online 30 6 0 512 21 59
- # 3 Online 34 79 0 512 21 59
+ # 0 Online 33 1 0 512 21 59
+ # 1 Online 33 1 0 512 21 59
+ # 2 Online 31 1 0 512 21 59
+ # 3 Online 34 1 0 512 21 59
# 4 Online 31 1 0 512 9 59
# 5 Online 30 1 0 512 9 59
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show system boot-messages
# Copyright (c) 1996-2011, Juniper Networks, Inc.
# All rights reserved.
@@ -352,9 +345,8 @@
# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
# Trying to mount root from ufs:/dev/ad0s1a
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show version
# Hostname: OKC-CORE3-M120-RE0
# Model: m120
@@ -380,9 +372,8 @@
# JUNOS Runtime Software Suite [10.4R2.6]
# JUNOS Routing Software Suite [10.4R2.6]
# JUNOS Web Management [10.4R2.6]
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> file list /var/tmp detail
#
# /var/tmp:
@@ -418,16 +409,14 @@
# -rw-r--r-- 1 root field 0 Dec 8 21:31 tracelogs_jperf
# -rw-r--r-- 1 root field 0 Dec 8 21:31 tracelogs_sem
# drwxrwxrwT 2 root wheel 512 Apr 13 13:56 vi.recover/
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show system uptime
# System booted: 2011-04-16 20:36 CDT
# Protocols started: 2011-04-16 20:37 CDT
- # Last configured: 2011-04-19 23:00 CDT by von
+ # Last configured: 2011-04-19 23:10 CDT by von
#
- # # commit confirmed will be rolled back in 9 minutes
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show interface terse
#Interface Admin Link
#xe-0/0/0 up up
@@ -464,8 +453,9 @@
#ct3-2/2/1 up down
#t3-2/2/1 up down
#ct3-2/2/2 up down
#t3-2/2/2 up down
+ #t3-2/2/2.0 up down
#ct3-2/2/3 up up
#t3-2/2/3 up up
#t3-2/2/3.0 up up
#coc12-2/3/0 up down
@@ -828,18 +818,21 @@
#t1-2/3/0:12:25 up down
#t1-2/3/0:12:26 up down
#t1-2/3/0:12:27 up down
#t1-2/3/0:12:28 up down
- #ct3-3/0/0 up down
- #t3-3/0/0 up down
+ #ct3-3/0/0 up up
+ #t3-3/0/0 up up
+ #t3-3/0/0.0 up up
#ct3-3/0/1 up down
#t3-3/0/1 up down
- #ct3-3/0/2 up down
- #t3-3/0/2 up down
+ #ct3-3/0/2 up up
+ #t3-3/0/2 up up
+ #t3-3/0/2.0 up up
#ct3-3/0/3 up down
#t3-3/0/3 up down
- #ct3-3/1/0 up down
- #t3-3/1/0 up down
+ #ct3-3/1/0 up up
+ #t3-3/1/0 up up
+ #t3-3/1/0.0 up up
#ct3-3/1/1 up down
#t3-3/1/1 up down
#ct3-3/1/2 up down
#t3-3/1/2 up down
@@ -848,10 +841,11 @@
#ct3-3/2/0 up down
#t3-3/2/0 up down
#ct3-3/2/1 up down
#t3-3/2/1 up down
- #ct3-3/2/2 up down
- #t3-3/2/2 up down
+ #ct3-3/2/2 up up
+ #t3-3/2/2 up up
+ #t3-3/2/2.0 up up
#ct3-3/2/3 up down
#t3-3/2/3 up down
#coc12-3/3/0 up down
#coc1-3/3/0:1 up down
@@ -1215,10 +1209,11 @@
#t1-3/3/0:12:27 up down
#t1-3/3/0:12:28 up down
#ct3-4/0/0 up down
#t3-4/0/0 up down
- #ct3-4/0/1 up down
- #t3-4/0/1 up down
+ #ct3-4/0/1 up up
+ #t3-4/0/1 up up
+ #t3-4/0/1.0 up up
#ct3-4/0/2 up down
#t3-4/0/2 up down
#ct3-4/0/3 up down
#t3-4/0/3 up down
@@ -1257,11 +1252,10 @@
#pimd up up
#pime up up
#pp0 up up
#tap up up
- ## commit confirmed
# grnoc-mon at OKC-CORE3-M120-RE0> show configuration
- ## Last commit: 2011-04-19 23:00:01 CDT by von
+ ## Last commit: 2011-04-19 23:10:02 CDT by von
version 10.4R2.6;
groups {
re0 {
system {
@@ -1647,14 +1641,23 @@
ct3-2/2/2 {
clocking external;
no-partition interface-type t3;
}
- inactive: t3-2/2/2 {
- description OneNetHub-UNASSIGNED;
+ t3-2/2/2 {
+ description OneNetHub-Muskogee-T3-CIR0003635;
clocking external;
encapsulation cisco-hdlc;
t3-options {
- cbit-parity;
+ no-cbit-parity;
+ }
+ unit 0 {
+ family inet {
+ filter {
+ input FLOW-INFO;
+ }
+ address 164.58.245.65/30;
+ }
+ family mpls;
}
}
ct3-2/2/3 {
clocking external;
@@ -1768,9 +1771,9 @@
ct3-3/0/0 {
clocking external;
no-partition interface-type t3;
}
- inactive: t3-3/0/0 {
+ t3-3/0/0 {
description OneNetHub-Altus-T3-CIR0001038;
clocking external;
encapsulation cisco-hdlc;
t3-options {
@@ -1801,9 +1804,9 @@
ct3-3/0/2 {
clocking external;
no-partition interface-type t3;
}
- inactive: t3-3/0/2 {
+ t3-3/0/2 {
description OneNetHub-Goodwell-T3-CIR0000799;
clocking external;
encapsulation cisco-hdlc;
t3-options {
@@ -1834,9 +1837,9 @@
ct3-3/1/0 {
clocking external;
no-partition interface-type t3;
}
- inactive: t3-3/1/0 {
+ t3-3/1/0 {
description OneNetHub-Durant-2ndT3-CIR0003775;
clocking external;
encapsulation cisco-hdlc;
t3-options {
@@ -1915,9 +1918,9 @@
ct3-3/2/2 {
clocking external;
no-partition interface-type t3;
}
- inactive: t3-3/2/2 {
+ t3-3/2/2 {
description OneNetHub-Durant-1stT3-CIR0001882;
clocking external;
encapsulation cisco-hdlc;
t3-options {
@@ -2048,9 +2051,9 @@
ct3-4/0/1 {
clocking external;
no-partition interface-type t3;
}
- inactive: t3-4/0/1 {
+ t3-4/0/1 {
description OneNetHub-WarnerT3-CIR0001042;
clocking external;
encapsulation cisco-hdlc;
t3-options {
@@ -2584,6 +2587,5 @@
}
}
}
}
- # commit confirmed will be rolled back in 9 minutes
{master}
Index: configs/core3.tul-m120.onenet.net
===================================================================
retrieving revision 1.208
diff -u -4 -r1.208 core3.tul-m120.onenet.net
@@ -12,17 +12,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 3 days, 2 hours, 6 seconds
+ # Selected for : 3 days, 3 hours, 6 seconds
# Selected since : 2011-04-16 21:00:00 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 3 days, 2 hours, 2 minutes, 35 seconds
+ # Selected for : 3 days, 3 hours, 2 minutes, 35 seconds
# Selected since : 2011-04-16 20:57:31 CDT
#
# {master}
# grnoc-mon at TULSA-CORE-3-M120-RE0> show chassis environment
@@ -224,12 +224,12 @@
# grnoc-mon at TULSA-CORE-3-M120-RE0> show chassis feb
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Online 34 1 0 512 20 59
- # 1 Online 33 1 0 512 20 59
+ # 1 Online 34 1 0 512 20 59
# 2 Online 31 1 0 512 21 59
- # 3 Online 35 2 0 512 21 59
- # 4 Online 32 1 0 512 9 59
+ # 3 Online 35 1 0 512 21 59
+ # 4 Online 33 1 0 512 9 59
# 5 Empty
#
# {master}
# grnoc-mon at TULSA-CORE-3-M120-RE0> show system boot-messages
Index: configs/core6.okc.onenet.net
===================================================================
retrieving revision 1.99
diff -u -4 -r1.99 core6.okc.onenet.net
@@ -69,11 +69,8 @@
!
!NAME: "Gi5/1", DESCR: "1000BaseSX"
!PID: FTRJ-8519-7D-CSC , VID: , SN: FNS0826A2DP
!
- !NAME: "Gi5/2", DESCR: "1000BaseZX"
- !PID: FTRJ1519P1BCL-CS , VID: , SN: FNS0814R2H3
- !
!NAME: "6", DESCR: "WS-SUP720-BASE 2 ports Supervisor Engine 720 Rev. 3.1"
!PID: WS-SUP720-BASE , VID: , SN: SAD083109KG
!
!NAME: "msfc sub-module of 6", DESCR: "WS-SUP720 MSFC3 Daughterboard Rev. 2.3"
@@ -384,26 +381,8 @@
!
!NAME: "Gigabit Port Container 5/2", DESCR: "Gigabit Port Container"
!PID: , VID: , SN:
!
- !NAME: "Gi5/2", DESCR: "1000BaseZX"
- !PID: FTRJ1519P1BCL-CS , VID: , SN: FNS0814R2H3
- !
- !NAME: "Gi5/2 Module Temperature Sensor", DESCR: "GigabitEthernet5/2 Module Temperature Sensor"
- !PID: , VID: , SN:
- !
- !NAME: "Gi5/2 Supply Voltage Sensor", DESCR: "GigabitEthernet5/2 Supply Voltage Sensor"
- !PID: , VID: , SN:
- !
- !NAME: "Gi5/2 Bias Current Sensor", DESCR: "GigabitEthernet5/2 Bias Current Sensor"
- !PID: , VID: , SN:
- !
- !NAME: "Gi5/2 Transmit Power Sensor", DESCR: "GigabitEthernet5/2 Transmit Power Sensor"
- !PID: , VID: , SN:
- !
- !NAME: "Gi5/2 Receive Power Sensor", DESCR: "GigabitEthernet5/2 Receive Power Sensor"
- !PID: , VID: , SN:
- !
!NAME: "module 5 power-output-fail Sensor", DESCR: "Supervisor module 5 power-output-fail Sensor"
!PID: , VID: , SN:
!
!NAME: "module 5 insufficient cooling Sensor", DESCR: "Supervisor module 5 insufficient cooling Sensor"
Index: configs/hub.alt.onenet.net
===================================================================
retrieving revision 1.1057
diff -u -4 -r1.1057 hub.alt.onenet.net
@@ -1,28 +1,27 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at ALTUS-M120-RE0> show system commit
+ # 2011-04-19 23:07:01 CDT by jeremyt via cli commit confirmed, rollback in 2mins synchronize
# 2011-04-08 15:46:08 CDT by todd via cli commit synchronize
# 2011-04-08 15:45:08 CDT by todd via cli commit synchronize
# 2011-04-08 15:38:39 CDT by todd via cli commit synchronize
# 2011-04-08 15:18:23 CDT by root via other
# 2011-04-08 15:16:04 CDT by joe via cli commit confirmed, rollback in 2mins synchronize
- # 2011-04-08 09:15:23 CDT by root via other
- # Synchronization with remote Routing Engine
# grnoc-mon at ALTUS-M120-RE0> show chassis clocks
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 11 days, 13 hours, 45 minutes, 8 seconds
+ # Selected for : 11 days, 14 hours, 45 minutes, 9 seconds
# Selected since : 2011-04-08 09:15:02 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 11 days, 13 hours, 44 minutes, 51 seconds
+ # Selected for : 11 days, 14 hours, 44 minutes, 52 seconds
# Selected since : 2011-04-08 09:15:19 CDT
#
# {master}
# grnoc-mon at ALTUS-M120-RE0> show chassis environment
@@ -186,10 +185,10 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 33 2 0 512 9 59
- # 3 Online 36 2 0 512 9 59
+ # 2 Online 32 2 0 512 9 59
+ # 3 Online 35 1 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
@@ -322,9 +321,9 @@
# {master}
# grnoc-mon at ALTUS-M120-RE0> show system uptime
# System booted: 2011-04-08 09:13 CDT
# Protocols started: 2011-04-08 09:14 CDT
- # Last configured: 2011-04-08 15:46 CDT by todd
+ # Last configured: 2011-04-19 23:07 CDT by jeremyt
#
# {master}
# grnoc-mon at ALTUS-M120-RE0> show interface terse
#Interface Admin Link
@@ -441,9 +440,9 @@
#pime up up
#pp0 up up
#tap up up
# grnoc-mon at ALTUS-M120-RE0> show configuration
- ## Last commit: 2011-04-08 15:46:08 CDT by todd
+ ## Last commit: 2011-04-19 23:07:01 CDT by jeremyt
version 10.4R2.6;
groups {
re0 {
system {
@@ -625,8 +624,9 @@
input FLOW-INFO;
}
address 164.58.244.6/30;
}
+ family mpls;
}
}
ct3-2/0/2 {
description M120-HUB-CUSTOMERS;
@@ -1027,8 +1027,12 @@
router-id 164.58.199.26;
autonomous-system 5078;
}
protocols {
+ mpls {
+ interface t3-2/0/0.0;
+ interface lo0.0;
+ }
bgp {
path-selection cisco-non-deterministic;
log-updown;
family inet {
@@ -1036,21 +1040,41 @@
}
family inet6 {
unicast;
}
- group IBGP-OKCCore-RR {
+ group CORE-RR {
type internal;
- description IBGP-OKCCore-RR1-Local-AS5078;
- neighbor 164.58.10.26 {
- description IBGP-Peer-to-OKC-RR1;
- local-address 164.58.199.26;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
- peer-as 5078;
+ local-address 164.58.199.26;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
}
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216;
+ neighbor 164.58.199.226;
}
}
ospf {
export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ reference-bandwidth 100g;
area 0.0.0.0 {
interface t3-2/0/0.0;
interface fxp0.0 {
disable;
@@ -1058,8 +1082,13 @@
interface lo0.0;
interface t3-2/0/1.0;
}
}
+ ldp {
+ preference 255;
+ interface t3-2/0/0.0;
+ interface lo0.0;
+ }
}
policy-options {
policy-statement LOAD-BALANCE {
then {
@@ -1075,14 +1104,20 @@
}
accept;
}
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
policy-statement REDISTRIBUTE-STATICS {
term 1 {
from protocol static;
then accept;
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
}
class-of-service {
classifiers {
@@ -1138,8 +1173,26 @@
}
}
firewall {
family inet {
+ filter FLOW-INFO {
+ term ALL_FLOW {
+ from {
+ source-address {
+ 0.0.0.0/0;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then sample;
+ }
+ term REJECT_ALL {
+ then {
+ reject;
+ }
+ }
+ }
filter PROTECT-RE {
term SERVICES {
from {
source-address {
@@ -1150,24 +1203,30 @@
164.58.244.0/23;
164.58.253.0/24;
64.207.244.14/32;
66.129.224.37/32;
+ 164.58.15.0/24;
}
protocol tcp;
destination-port [ ssh http ];
}
then accept;
}
term OSPF-ALLOW {
from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
protocol ospf;
}
then accept;
}
- term IBGP-allow {
+ term IBGP-ALLOW {
from {
source-address {
- 164.58.10.26/32;
+ 164.58.199.216/32;
+ 164.58.199.226/32;
}
protocol tcp;
port 179;
}
@@ -1175,15 +1234,15 @@
}
term ICMP-ALLOW {
from {
protocol icmp;
- icmp-type [ echo-reply unreachable time-exceeded echo-request ];
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
}
then accept;
}
term SERVICES-OUTBOUND {
from {
- source-port [ domain ntp ];
+ source-port [ domain ntp ssh ];
}
then accept;
}
term RADIUS {
@@ -1217,31 +1276,42 @@
port [ snmp snmptrap ];
}
then accept;
}
- term DENY_ALL {
- then {
- log;
- syslog;
- discard;
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ port ldp;
}
}
- }
- filter FLOW-INFO {
- term ALL_FLOW {
+ term PIM-ALLOW {
from {
source-address {
- 0.0.0.0/0;
+ 164.58.199.0/24;
+ 164.58.0.0/16;
}
- destination-address {
- 0.0.0.0/0;
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
}
+ protocol udp;
+ port [ 3784 3785 ];
}
- then sample;
+ then accept;
}
- term REJECT_ALL {
+ term DENY_ALL {
then {
- reject;
+ log;
+ syslog;
+ discard;
}
}
}
}
Index: configs/hub.alv.onenet.net
===================================================================
retrieving revision 1.984
diff -u -4 -r1.984 hub.alv.onenet.net
@@ -12,17 +12,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 4 days, 2 hours, 23 minutes, 3 seconds
+ # Selected for : 4 days, 3 hours, 23 minutes, 4 seconds
# Selected since : 2011-04-15 20:37:07 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 4 days, 2 hours, 23 minutes, 38 seconds
+ # Selected for : 4 days, 3 hours, 23 minutes, 39 seconds
# Selected since : 2011-04-15 20:36:32 CDT
#
# {master}
# grnoc-mon at ALVA-M120-RE0> show chassis environment
@@ -186,10 +186,10 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 27 1 0 512 9 59
- # 3 Online 30 2 0 512 9 59
+ # 2 Online 28 2 0 512 9 59
+ # 3 Online 31 2 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.bar.onenet.net
===================================================================
retrieving revision 1.1286
diff -u -4 -r1.1286 hub.bar.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 53 days, 7 hours, 56 minutes, 12 seconds
+ # Selected for : 53 days, 8 hours, 56 minutes, 12 seconds
# Selected since : 2011-02-25 14:03:59 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 53 days, 7 hours, 56 minutes, 2 seconds
+ # Selected for : 53 days, 8 hours, 56 minutes, 2 seconds
# Selected since : 2011-02-25 14:04:09 CST
#
# {master}
# grnoc-mon at BARTLESVILLE-M120-RE0> show chassis environment
@@ -185,10 +185,10 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 28 2 0 512 10 59
- # 3 Online 30 2 0 512 10 59
+ # 2 Online 25 2 0 512 10 59
+ # 3 Online 29 2 0 512 10 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.chi.onenet.net
===================================================================
retrieving revision 1.1540
diff -u -4 -r1.1540 hub.chi.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 64 days, 5 hours, 12 minutes, 54 seconds
+ # Selected for : 64 days, 6 hours, 12 minutes, 53 seconds
# Selected since : 2011-02-14 16:47:18 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 64 days, 5 hours, 12 minutes, 42 seconds
+ # Selected for : 64 days, 6 hours, 12 minutes, 41 seconds
# Selected since : 2011-02-14 16:47:30 CST
#
# {master}
# grnoc-mon at CHICKASHA-M120-RE0> show chassis environment
@@ -183,9 +183,9 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 26 2 0 512 9 59
+ # 2 Online 26 1 0 512 9 59
# 3 Online 29 1 0 512 9 59
# 4 Empty
# 5 Empty
#
Index: configs/hub.cla.onenet.net
===================================================================
retrieving revision 1.993
diff -u -4 -r1.993 hub.cla.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 50 days, 4 hours, 36 minutes, 52 seconds
+ # Selected for : 50 days, 5 hours, 36 minutes, 52 seconds
# Selected since : 2011-02-28 17:23:19 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 50 days, 4 hours, 36 minutes, 43 seconds
+ # Selected for : 50 days, 5 hours, 36 minutes, 43 seconds
# Selected since : 2011-02-28 17:23:28 CST
#
# {master}
# grnoc-mon at CLAREMORE-M120-RE0> show chassis environment
Index: configs/hub.dunc.onenet.net
===================================================================
retrieving revision 1.910
diff -u -4 -r1.910 hub.dunc.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 40 days, 10 hours, 11 minutes, 25 seconds
+ # Selected for : 40 days, 11 hours, 11 minutes, 25 seconds
# Selected since : 2011-03-10 11:48:46 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 40 days, 10 hours, 11 minutes, 13 seconds
+ # Selected for : 40 days, 11 hours, 11 minutes, 13 seconds
# Selected since : 2011-03-10 11:48:58 CST
#
# {master}
# grnoc-mon at DUNCAN-M120-RE0> show chassis environment
@@ -186,9 +186,9 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 27 2 0 512 9 59
+ # 2 Online 27 1 0 512 9 59
# 3 Online 31 2 0 512 9 59
# 4 Empty
# 5 Empty
#
Index: configs/hub.dur.onenet.net
===================================================================
retrieving revision 1.1201
diff -u -4 -r1.1201 hub.dur.onenet.net
@@ -1,27 +1,27 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at DURANT-M120-RE0> show system commit
+ # 2011-04-19 23:28:03 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
# 2011-03-31 16:08:29 CDT by jeremyt via cli commit synchronize
# 2011-03-31 15:44:03 CDT by von via cli commit synchronize
# 2011-03-31 15:28:36 CDT by von via cli commit synchronize
# 2011-03-31 12:30:24 CDT by von via cli commit synchronize
# 2011-03-31 12:26:51 CDT by von via cli commit synchronize
- # 2011-03-24 11:52:12 CDT by joe via cli commit synchronize
# grnoc-mon at DURANT-M120-RE0> show chassis clocks
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 61 days, 3 hours, 45 minutes, 27 seconds
+ # Selected for : 61 days, 4 hours, 45 minutes, 28 seconds
# Selected since : 2011-02-17 18:14:44 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 61 days, 3 hours, 45 minutes, 57 seconds
+ # Selected for : 61 days, 4 hours, 45 minutes, 58 seconds
# Selected since : 2011-02-17 18:14:14 CST
#
# {master}
# grnoc-mon at DURANT-M120-RE0> show chassis environment
@@ -319,9 +319,9 @@
# {master}
# grnoc-mon at DURANT-M120-RE0> show system uptime
# System booted: 2011-02-17 18:09 CST
# Protocols started: 2011-02-17 18:11 CST
- # Last configured: 2011-03-31 16:08 CDT by jeremyt
+ # Last configured: 2011-04-19 23:28 CDT by jeremyt
#
# {master}
# grnoc-mon at DURANT-M120-RE0> show interface terse
#Interface Admin Link
@@ -496,9 +496,9 @@
#pime up up
#pp0 up up
#tap up up
# grnoc-mon at DURANT-M120-RE0> show configuration
- ## Last commit: 2011-03-31 16:08:29 CDT by jeremyt
+ ## Last commit: 2011-04-19 23:28:03 CDT by jeremyt
version 10.4R2.6;
groups {
re0 {
system {
@@ -680,8 +680,9 @@
input FLOW-INFO;
}
address 164.58.244.34/30;
}
+ family mpls;
}
}
ct3-2/0/1 {
clocking external;
@@ -700,8 +701,9 @@
input FLOW-INFO;
}
address 164.58.245.138/30;
}
+ family mpls;
}
}
ct3-2/0/2 {
description M120-HUB-CUSTOMERS;
@@ -1574,12 +1576,17 @@
}
router-id 164.58.199.14;
autonomous-system 5078;
forwarding-table {
- export LOAD-BALANCE-TRAFFIC;
+ export [ LOAD-BALANCE-TRAFFIC LOAD-BALANCE ];
}
}
protocols {
+ mpls {
+ interface t3-2/0/0.0;
+ interface t3-2/0/1.0;
+ interface lo0.0;
+ }
bgp {
path-selection cisco-non-deterministic;
log-updown;
family inet {
@@ -1587,21 +1594,41 @@
}
family inet6 {
unicast;
}
- group IBGP-OKCCore-RR {
+ group CORE-RR {
type internal;
- description IBGP-OKCCore-RR1-Local-AS5078;
- neighbor 164.58.10.26 {
- description IBGP-Peer-to-OKC-RR1;
- local-address 164.58.199.14;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
- peer-as 5078;
+ local-address 164.58.199.14;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
}
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216;
+ neighbor 164.58.199.226;
}
}
ospf {
export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ reference-bandwidth 100g;
area 0.0.0.0 {
interface t3-2/0/0.0;
interface t3-2/0/1.0;
interface fxp0.0 {
@@ -1609,10 +1636,21 @@
}
interface lo0.0;
}
}
+ ldp {
+ preference 255;
+ interface t3-2/0/0.0;
+ interface t3-2/0/1.0;
+ interface lo0.0;
+ }
}
policy-options {
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
policy-statement LOAD-BALANCE-TRAFFIC {
then {
load-balance per-packet;
}
@@ -1626,14 +1664,20 @@
}
accept;
}
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
policy-statement REDISTRIBUTE-STATICS {
term 1 {
from protocol static;
then accept;
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
}
class-of-service {
classifiers {
@@ -1717,8 +1761,26 @@
}
}
firewall {
family inet {
+ filter FLOW-INFO {
+ term ALL_FLOW {
+ from {
+ source-address {
+ 0.0.0.0/0;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then sample;
+ }
+ term REJECT_ALL {
+ then {
+ reject;
+ }
+ }
+ }
filter PROTECT-RE {
term SERVICES {
from {
source-address {
@@ -1729,24 +1791,30 @@
164.58.244.0/23;
164.58.253.0/24;
64.207.244.14/32;
66.129.224.37/32;
+ 164.58.15.0/24;
}
protocol tcp;
destination-port [ ssh http ];
}
then accept;
}
term OSPF-ALLOW {
from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
protocol ospf;
}
then accept;
}
- term IBGP-allow {
+ term IBGP-ALLOW {
from {
source-address {
- 164.58.10.26/32;
+ 164.58.199.216/32;
+ 164.58.199.226/32;
}
protocol tcp;
port 179;
}
@@ -1754,15 +1822,15 @@
}
term ICMP-ALLOW {
from {
protocol icmp;
- icmp-type [ echo-reply unreachable time-exceeded echo-request ];
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
}
then accept;
}
term SERVICES-OUTBOUND {
from {
- source-port [ domain ntp ];
+ source-port [ domain ntp ssh ];
}
then accept;
}
term RADIUS {
@@ -1796,31 +1864,42 @@
port [ snmp snmptrap ];
}
then accept;
}
- term DENY_ALL {
- then {
- log;
- syslog;
- discard;
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ port ldp;
}
}
- }
- filter FLOW-INFO {
- term ALL_FLOW {
+ term PIM-ALLOW {
from {
source-address {
- 0.0.0.0/0;
+ 164.58.199.0/24;
+ 164.58.0.0/16;
}
- destination-address {
- 0.0.0.0/0;
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
}
+ protocol udp;
+ port [ 3784 3785 ];
}
- then sample;
+ then accept;
}
- term REJECT_ALL {
+ term DENY_ALL {
then {
- reject;
+ log;
+ syslog;
+ discard;
}
}
}
}
Index: configs/hub.elr.onenet.net
===================================================================
retrieving revision 1.1525
diff -u -4 -r1.1525 hub.elr.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 56 days, 5 hours, 26 minutes, 25 seconds
+ # Selected for : 56 days, 6 hours, 26 minutes, 24 seconds
# Selected since : 2011-02-22 16:33:48 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 56 days, 5 hours, 26 minutes, 14 seconds
+ # Selected for : 56 days, 6 hours, 26 minutes, 13 seconds
# Selected since : 2011-02-22 16:33:59 CST
#
# {master}
# grnoc-mon at EL-RENO-M120-RE0> show chassis environment
@@ -185,10 +185,10 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 27 1 0 512 9 59
- # 3 Online 31 2 0 512 9 59
+ # 2 Online 30 1 0 512 9 59
+ # 3 Online 33 2 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.end.onenet.net
===================================================================
retrieving revision 1.880
diff -u -4 -r1.880 hub.end.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 35 days, 3 hours, 24 minutes, 31 seconds
+ # Selected for : 35 days, 4 hours, 24 minutes, 31 seconds
# Selected since : 2011-03-15 19:35:42 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 35 days, 3 hours, 24 minutes, 21 seconds
+ # Selected for : 35 days, 4 hours, 24 minutes, 21 seconds
# Selected since : 2011-03-15 19:35:52 CDT
#
# {master}
# grnoc-mon at ENID-M120-RE0> show chassis environment
@@ -185,9 +185,9 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 40 2 0 512 9 59
+ # 2 Online 40 1 0 512 9 59
# 3 Online 43 1 0 512 9 59
# 4 Empty
# 5 Empty
#
Index: configs/hub.goo.onenet.net
===================================================================
retrieving revision 1.1128
diff -u -4 -r1.1128 hub.goo.onenet.net
@@ -1,7 +1,8 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at GOODWELL-M120-RE0> show system commit
+ # 2011-04-19 23:20:55 CDT by todd via cli commit confirmed, rollback in 1mins synchronize
# 2011-04-15 12:01:22 CDT by root via other
# Synchronization with remote Routing Engine
# 2011-04-15 11:52:11 CDT by root via other
# Synchronization with remote Routing Engine
@@ -9,23 +10,22 @@
# Synchronization with remote Routing Engine
# 2011-04-06 08:42:40 CDT by todd via cli commit synchronize
# 2011-04-03 19:33:41 CDT by root via other
# Synchronization with remote Routing Engine
- # 2011-03-23 13:19:27 CDT by admin via cli commit synchronize
# grnoc-mon at GOODWELL-M120-RE0> show chassis clocks
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 4 days, 10 hours, 59 minutes, 13 seconds
+ # Selected for : 4 days, 11 hours, 59 minutes, 13 seconds
# Selected since : 2011-04-15 12:01:00 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 4 days, 10 hours, 59 minutes, 21 seconds
+ # Selected for : 4 days, 11 hours, 59 minutes, 21 seconds
# Selected since : 2011-04-15 12:00:52 CDT
#
# {master}
# grnoc-mon at GOODWELL-M120-RE0> show chassis environment
@@ -189,9 +189,9 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 28 2 0 512 9 59
+ # 2 Online 29 1 0 512 9 59
# 3 Online 32 1 0 512 9 59
# 4 Empty
# 5 Empty
#
@@ -325,9 +325,9 @@
# {master}
# grnoc-mon at GOODWELL-M120-RE0> show system uptime
# System booted: 2011-04-15 11:59 CDT
# Protocols started: 2011-04-15 12:00 CDT
- # Last configured: 2011-04-15 12:01 CDT by root
+ # Last configured: 2011-04-19 23:20 CDT by todd
#
# {master}
# grnoc-mon at GOODWELL-M120-RE0> show interface terse
#Interface Admin Link
@@ -439,9 +439,9 @@
#pime up up
#pp0 up up
#tap up up
# grnoc-mon at GOODWELL-M120-RE0> show configuration
- ## Last commit: 2011-04-15 12:01:22 CDT by root
+ ## Last commit: 2011-04-19 23:20:55 CDT by todd
version 10.4R2.6;
groups {
re0 {
system {
@@ -624,8 +624,9 @@
output OKC-TAX;
}
address 164.58.244.50/30;
}
+ family mpls;
}
}
inactive: ct3-2/0/1 {
clocking external;
@@ -983,8 +984,12 @@
router-id 164.58.199.62;
autonomous-system 5078;
}
protocols {
+ mpls {
+ interface t3-2/0/0.0;
+ interface lo0.0;
+ }
bgp {
path-selection cisco-non-deterministic;
log-updown;
family inet {
@@ -992,29 +997,54 @@
}
family inet6 {
unicast;
}
- group IBGP-OKCCore-RR {
+ group CORE-RR {
type internal;
- description IBGP-OKCCore-RR1-Local-AS5078;
- neighbor 164.58.10.26 {
- description IBGP-Peer-to-OKC-RR1;
- local-address 164.58.199.62;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
- peer-as 5078;
+ local-address 164.58.199.235;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
}
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216;
+ neighbor 164.58.199.226;
}
}
ospf {
export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ reference-bandwidth 100g;
area 0.0.0.0 {
interface t3-2/0/0.0;
interface fxp0.0 {
disable;
}
interface lo0.0;
}
}
+ ldp {
+ preference 255;
+ interface t3-2/0/0.0;
+ interface lo0.0;
+ }
}
policy-options {
policy-statement LOAD-BALANCE {
then {
@@ -1030,14 +1060,20 @@
}
accept;
}
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
policy-statement REDISTRIBUTE-STATICS {
term 1 {
from protocol static;
then accept;
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
}
class-of-service {
classifiers {
@@ -1093,8 +1129,48 @@
}
}
firewall {
family inet {
+ filter FLOW-INFO {
+ term ALL_FLOW {
+ from {
+ source-address {
+ 0.0.0.0/0;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then sample;
+ }
+ term REJECT_ALL {
+ then {
+ reject;
+ }
+ }
+ }
+ filter OKC-TAX {
+ term 1 {
+ from {
+ source-address {
+ 164.58.0.176/30;
+ 164.58.0.228/30;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then {
+ count OK-TAX-COUNTER;
+ log;
+ forwarding-class video;
+ accept;
+ }
+ }
+ term 2 {
+ then accept;
+ }
+ }
filter PROTECT-RE {
term SERVICES {
from {
source-address {
@@ -1105,24 +1181,30 @@
164.58.244.0/23;
164.58.253.0/24;
64.207.244.14/32;
66.129.224.37/32;
+ 164.58.15.0/24;
}
protocol tcp;
destination-port [ ssh http ];
}
then accept;
}
term OSPF-ALLOW {
from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
protocol ospf;
}
then accept;
}
- term IBGP-allow {
+ term IBGP-ALLOW {
from {
source-address {
- 164.58.10.26/32;
+ 164.58.199.216/32;
+ 164.58.199.226/32;
}
protocol tcp;
port 179;
}
@@ -1130,15 +1212,15 @@
}
term ICMP-ALLOW {
from {
protocol icmp;
- icmp-type [ echo-reply unreachable time-exceeded echo-request ];
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
}
then accept;
}
term SERVICES-OUTBOUND {
from {
- source-port [ domain ntp ];
+ source-port [ domain ntp ssh ];
}
then accept;
}
term RADIUS {
@@ -1172,55 +1254,44 @@
port [ snmp snmptrap ];
}
then accept;
}
- term DENY_ALL {
- then {
- log;
- syslog;
- discard;
- }
- }
- }
- filter FLOW-INFO {
- term ALL_FLOW {
+ term LDP-ALLOW {
from {
source-address {
- 0.0.0.0/0;
- }
- destination-address {
- 0.0.0.0/0;
+ 164.58.199.0/24;
+ 164.58.0.0/16;
}
+ port ldp;
}
- then sample;
}
- term REJECT_ALL {
- then {
- reject;
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
}
+ then accept;
}
- }
- filter OKC-TAX {
- term 1 {
+ term BFD-ALLOW {
from {
source-address {
- 164.58.0.176/30;
- 164.58.0.228/30;
- }
- destination-address {
- 0.0.0.0/0;
+ 164.58.0.0/16;
}
+ protocol udp;
+ port [ 3784 3785 ];
}
+ then accept;
+ }
+ term DENY_ALL {
then {
- count OK-TAX-COUNTER;
log;
- forwarding-class video;
- accept;
+ syslog;
+ discard;
}
}
- term 2 {
- then accept;
- }
}
}
policer COMMODITY-pOLICER {
if-exceeding {
Index: configs/hub.ida.onenet.net
===================================================================
retrieving revision 1.1735
diff -u -4 -r1.1735 hub.ida.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 62 days, 1 hour, 26 minutes, 59 seconds
+ # Selected for : 62 days, 2 hours, 26 minutes, 51 seconds
# Selected since : 2011-02-16 20:33:21 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 62 days, 1 hour, 27 minutes, 8 seconds
+ # Selected for : 62 days, 2 hours, 27 minutes
# Selected since : 2011-02-16 20:33:12 CST
#
# {master}
# grnoc-mon at IDABEL-M120-RE0> show chassis environment
@@ -183,9 +183,9 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 30 2 0 512 9 59
+ # 2 Online 29 1 0 512 9 59
# 3 Online 33 1 0 512 9 59
# 4 Empty
# 5 Empty
#
Index: configs/hub.lawm120.onenet.net
===================================================================
retrieving revision 1.1188
diff -u -4 -r1.1188 hub.lawm120.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 55 days, 1 hour, 22 minutes, 44 seconds
+ # Selected for : 55 days, 2 hours, 22 minutes, 43 seconds
# Selected since : 2011-02-23 20:37:32 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 55 days, 1 hour, 22 minutes, 32 seconds
+ # Selected for : 55 days, 2 hours, 22 minutes, 31 seconds
# Selected since : 2011-02-23 20:37:44 CST
#
# {master}
# grnoc-mon at LAWTON-M120-RE0> show chassis environment
@@ -184,9 +184,9 @@
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
# 2 Online 25 2 0 512 21 59
- # 3 Online 28 1 0 512 21 59
+ # 3 Online 28 2 0 512 21 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.mca.onenet.net
===================================================================
retrieving revision 1.2348
diff -u -4 -r1.2348 hub.mca.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 63 days, 3 hours, 8 minutes, 26 seconds
+ # Selected for : 63 days, 4 hours, 8 minutes, 22 seconds
# Selected since : 2011-02-15 18:51:54 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 63 days, 3 hours, 8 minutes, 14 seconds
+ # Selected for : 63 days, 4 hours, 8 minutes, 10 seconds
# Selected since : 2011-02-15 18:52:06 CST
#
# {master}
# grnoc-mon at MCALESTER-M120-RE0> show chassis environment
Index: configs/hub.mia.onenet.net
===================================================================
retrieving revision 1.947
diff -u -4 -r1.947 hub.mia.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 50 days, 7 hours, 50 minutes, 5 seconds
+ # Selected for : 50 days, 8 hours, 50 minutes, 5 seconds
# Selected since : 2011-02-28 14:10:11 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 50 days, 7 hours, 49 minutes, 53 seconds
+ # Selected for : 50 days, 8 hours, 49 minutes, 53 seconds
# Selected since : 2011-02-28 14:10:23 CST
#
# {master}
# grnoc-mon at MIAMI-M120-RE0> show chassis environment
@@ -187,9 +187,9 @@
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
# 2 Online 35 2 0 512 21 59
- # 3 Online 38 2 0 512 21 59
+ # 3 Online 38 1 0 512 21 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.mus.onenet.net
===================================================================
retrieving revision 1.1088
diff -u -4 -r1.1088 hub.mus.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 43 days, 8 hours, 46 minutes, 17 seconds
+ # Selected for : 43 days, 9 hours, 46 minutes, 16 seconds
# Selected since : 2011-03-07 13:14:00 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 43 days, 8 hours, 46 minutes, 4 seconds
+ # Selected for : 43 days, 9 hours, 46 minutes, 3 seconds
# Selected since : 2011-03-07 13:14:13 CST
#
# {master}
# grnoc-mon at MUSKOGEE-M120-RE0> show chassis environment
@@ -188,9 +188,9 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 32 2 0 512 9 59
+ # 2 Online 32 1 0 512 9 59
# 3 Online 35 2 0 512 9 59
# 4 Empty
# 5 Empty
#
Index: configs/hub.okm.onenet.net
===================================================================
retrieving revision 1.1234
diff -u -4 -r1.1234 hub.okm.onenet.net
@@ -12,17 +12,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 28 days, 12 hours, 17 minutes, 9 seconds
+ # Selected for : 28 days, 13 hours, 17 minutes, 9 seconds
# Selected since : 2011-03-22 10:43:09 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 28 days, 12 hours, 17 minutes, 15 seconds
+ # Selected for : 28 days, 13 hours, 17 minutes, 15 seconds
# Selected since : 2011-03-22 10:43:03 CDT
#
# {master}
# grnoc-mon at OKMULGEE-M120-RE0> show chassis environment
@@ -187,10 +187,10 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 28 2 0 512 9 59
- # 3 Online 30 2 0 512 9 59
+ # 2 Online 26 2 0 512 9 59
+ # 3 Online 29 2 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.pot.onenet.net
===================================================================
retrieving revision 1.1767
diff -u -4 -r1.1767 hub.pot.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 62 days, 2 hours, 33 minutes, 38 seconds
+ # Selected for : 62 days, 3 hours, 33 minutes, 38 seconds
# Selected since : 2011-02-16 19:26:40 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 62 days, 2 hours, 33 minutes, 26 seconds
+ # Selected for : 62 days, 3 hours, 33 minutes, 26 seconds
# Selected since : 2011-02-16 19:26:52 CST
#
# {master}
# grnoc-mon at POTEAU-M120-RE0> show chassis environment
@@ -185,9 +185,9 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 31 2 0 512 9 59
+ # 2 Online 31 1 0 512 9 59
# 3 Online 34 2 0 512 9 59
# 4 Empty
# 5 Empty
#
Index: configs/hub.sal.onenet.net
===================================================================
retrieving revision 1.1349
diff -u -4 -r1.1349 hub.sal.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 3 days, 8 hours, 27 minutes, 8 seconds
+ # Selected for : 3 days, 9 hours, 27 minutes, 9 seconds
# Selected since : 2011-04-16 14:33:10 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 3 days, 8 hours, 27 minutes, 14 seconds
+ # Selected for : 3 days, 9 hours, 27 minutes, 15 seconds
# Selected since : 2011-04-16 14:33:04 CDT
#
# {master}
# grnoc-mon at SALLISAW-M120-RE0> show chassis environment
@@ -187,9 +187,9 @@
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
# 2 Online 30 2 0 512 9 59
- # 3 Online 33 2 0 512 9 59
+ # 3 Online 33 1 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.say.onenet.net
===================================================================
retrieving revision 1.2383
diff -u -4 -r1.2383 hub.say.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 49 days, 10 hours, 20 minutes, 42 seconds
+ # Selected for : 49 days, 11 hours, 20 minutes, 40 seconds
# Selected since : 2011-03-01 11:39:39 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 49 days, 10 hours, 20 minutes, 31 seconds
+ # Selected for : 49 days, 11 hours, 20 minutes, 29 seconds
# Selected since : 2011-03-01 11:39:50 CST
#
# {master}
# grnoc-mon at SAYRE-M120-RE0> show chassis environment
@@ -186,9 +186,9 @@
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
# 2 Online 29 1 0 512 9 59
- # 3 Online 32 1 0 512 9 59
+ # 3 Online 33 2 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.sem.onenet.net
===================================================================
retrieving revision 1.1832
diff -u -4 -r1.1832 hub.sem.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 68 days, 3 hours, 55 minutes, 19 seconds
+ # Selected for : 68 days, 4 hours, 55 minutes, 19 seconds
# Selected since : 2011-02-10 18:05:00 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 68 days, 3 hours, 55 minutes, 9 seconds
+ # Selected for : 68 days, 4 hours, 55 minutes, 9 seconds
# Selected since : 2011-02-10 18:05:10 CST
#
# {master}
# grnoc-mon at SEMINOLE-M120-RE0> show chassis environment
@@ -183,10 +183,10 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 30 1 0 512 9 59
- # 3 Online 34 2 0 512 9 59
+ # 2 Online 31 1 0 512 9 59
+ # 3 Online 34 1 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.tah.onenet.net
===================================================================
retrieving revision 1.1071
diff -u -4 -r1.1071 hub.tah.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 41 days, 2 hours, 2 minutes, 13 seconds
+ # Selected for : 41 days, 3 hours, 2 minutes, 12 seconds
# Selected since : 2011-03-09 19:58:07 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 41 days, 2 hours, 2 minutes, 4 seconds
+ # Selected for : 41 days, 3 hours, 2 minutes, 3 seconds
# Selected since : 2011-03-09 19:58:16 CST
#
# {master}
# grnoc-mon at TAHLEQUAH-M120-RE0> show chassis environment
@@ -205,10 +205,10 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 32 1 0 512 9 59
- # 3 Online 37 2 0 512 9 59
+ # 2 Online 33 2 0 512 9 59
+ # 3 Online 37 1 0 512 9 59
# 4 Online 34 1 0 512 9 59
# 5 Empty
#
# {master}
Index: configs/hub.tis.onenet.net
===================================================================
retrieving revision 1.1558
diff -u -4 -r1.1558 hub.tis.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 3 days, 17 hours, 42 minutes, 47 seconds
+ # Selected for : 3 days, 18 hours, 42 minutes, 45 seconds
# Selected since : 2011-04-16 05:17:34 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 3 days, 17 hours, 43 minutes, 14 seconds
+ # Selected for : 3 days, 18 hours, 43 minutes, 12 seconds
# Selected since : 2011-04-16 05:17:07 CDT
#
# {master}
# grnoc-mon at TISHOMINGO-M120-RE0> show chassis environment
@@ -184,9 +184,9 @@
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
# 2 Online 28 1 0 512 9 59
- # 3 Online 31 2 0 512 9 59
+ # 3 Online 31 1 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.ton.onenet.net
===================================================================
retrieving revision 1.918
diff -u -4 -r1.918 hub.ton.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 42 days, 7 hours, 16 minutes, 39 seconds
+ # Selected for : 42 days, 8 hours, 16 minutes, 37 seconds
# Selected since : 2011-03-08 14:43:42 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 42 days, 7 hours, 16 minutes, 28 seconds
+ # Selected for : 42 days, 8 hours, 16 minutes, 26 seconds
# Selected since : 2011-03-08 14:43:53 CST
#
# {master}
# grnoc-mon at TONKAWA-M120-RE0> show chassis environment
@@ -207,9 +207,9 @@
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
# 2 Online 37 2 0 512 9 59
- # 3 Online 40 1 0 512 9 59
+ # 3 Online 40 2 0 512 9 59
# 4 Online 38 1 0 512 9 59
# 5 Empty
#
# {master}
Index: configs/hub.war.onenet.net
===================================================================
retrieving revision 1.997
diff -u -4 -r1.997 hub.war.onenet.net
@@ -1,27 +1,27 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at WARNER-M120-RE0> show system commit
+ # 2011-04-19 23:30:36 CDT by todd via cli commit confirmed, rollback in 1mins synchronize
# 2011-03-25 08:16:52 CDT by joe via cli commit synchronize
# 2011-03-23 14:58:24 CDT by todd via cli commit synchronize
# 2011-03-23 14:51:53 CDT by todd via cli commit synchronize
# 2011-03-23 14:49:41 CDT by todd via cli commit synchronize
# 2011-03-23 14:45:40 CDT by todd via cli commit synchronize
- # 2011-03-23 13:52:07 CDT by todd via cli commit synchronize
# grnoc-mon at WARNER-M120-RE0> show chassis clocks
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 43 days, 1 hour, 43 minutes, 41 seconds
+ # Selected for : 43 days, 4 hours, 43 minutes, 39 seconds
# Selected since : 2011-03-07 18:16:40 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 43 days, 1 hour, 43 minutes, 28 seconds
+ # Selected for : 43 days, 4 hours, 43 minutes, 26 seconds
# Selected since : 2011-03-07 18:16:53 CST
#
# {master}
# grnoc-mon at WARNER-M120-RE0> show chassis environment
@@ -185,10 +185,10 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 29 1 0 512 9 59
- # 3 Online 32 1 0 512 9 59
+ # 2 Online 30 1 0 512 9 59
+ # 3 Online 33 1 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
@@ -320,9 +320,9 @@
# {master}
# grnoc-mon at WARNER-M120-RE0> show system uptime
# System booted: 2011-03-07 18:18 CST
# Protocols started: 2011-03-07 18:19 CST
- # Last configured: 2011-03-25 08:16 CDT by joe
+ # Last configured: 2011-04-19 23:30 CDT by todd
#
# {master}
# grnoc-mon at WARNER-M120-RE0> show interface terse
#Interface Admin Link
@@ -429,9 +429,9 @@
#pime up up
#pp0 up up
#tap up up
# grnoc-mon at WARNER-M120-RE0> show configuration
- ## Last commit: 2011-03-25 08:16:52 CDT by joe
+ ## Last commit: 2011-04-19 23:30:36 CDT by todd
version 10.4R2.6;
groups {
re0 {
system {
@@ -613,8 +613,9 @@
input FLOW-INFO;
}
address 164.58.244.110/30;
}
+ family mpls;
}
}
inactive: ct3-2/0/1 {
clocking external;
@@ -1350,8 +1351,12 @@
router-id 164.58.199.106;
autonomous-system 5078;
}
protocols {
+ mpls {
+ interface t3-2/0/0.0;
+ interface lo0.0;
+ }
bgp {
path-selection cisco-non-deterministic;
log-updown;
family inet {
@@ -1359,21 +1364,41 @@
}
family inet6 {
unicast;
}
- group IBGP-OKCCore-RR {
+ group CORE-RR {
type internal;
- description IBGP-OKCCore-RR1-Local-AS5078;
- neighbor 164.58.10.26 {
- description IBGP-Peer-to-OKC-RR1;
- local-address 164.58.199.106;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
- peer-as 5078;
+ local-address 164.58.199.235;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
}
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216;
+ neighbor 164.58.199.226;
}
}
ospf {
export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ reference-bandwidth 100g;
area 0.0.0.0 {
interface t3-2/0/0.0;
interface fxp0.0 {
disable;
@@ -1381,8 +1406,13 @@
interface lo0.0;
interface fe-3/0/0.0;
}
}
+ ldp {
+ preference 255;
+ interface t3-2/0/0.0;
+ interface lo0.0;
+ }
}
policy-options {
policy-statement LOAD-BALANCE {
then {
@@ -1398,14 +1428,20 @@
}
accept;
}
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
policy-statement REDISTRIBUTE-STATICS {
term 1 {
from protocol static;
then accept;
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
}
class-of-service {
classifiers {
@@ -1461,8 +1497,26 @@
}
}
firewall {
family inet {
+ filter FLOW-INFO {
+ term ALL_FLOW {
+ from {
+ source-address {
+ 0.0.0.0/0;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then sample;
+ }
+ term REJECT_ALL {
+ then {
+ reject;
+ }
+ }
+ }
filter PROTECT-RE {
term SERVICES {
from {
source-address {
@@ -1473,24 +1527,30 @@
164.58.244.0/23;
164.58.253.0/24;
64.207.244.14/32;
66.129.224.37/32;
+ 164.58.15.0/24;
}
protocol tcp;
destination-port [ ssh http ];
}
then accept;
}
term OSPF-ALLOW {
from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
protocol ospf;
}
then accept;
}
- term IBGP-allow {
+ term IBGP-ALLOW {
from {
source-address {
- 164.58.10.26/32;
+ 164.58.199.216/32;
+ 164.58.199.226/32;
}
protocol tcp;
port 179;
}
@@ -1498,15 +1558,15 @@
}
term ICMP-ALLOW {
from {
protocol icmp;
- icmp-type [ echo-reply unreachable time-exceeded echo-request ];
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
}
then accept;
}
term SERVICES-OUTBOUND {
from {
- source-port [ domain ntp ];
+ source-port [ domain ntp ssh ];
}
then accept;
}
term RADIUS {
@@ -1540,31 +1600,42 @@
port [ snmp snmptrap ];
}
then accept;
}
- term DENY_ALL {
- then {
- log;
- syslog;
- discard;
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ port ldp;
}
}
- }
- filter FLOW-INFO {
- term ALL_FLOW {
+ term PIM-ALLOW {
from {
source-address {
- 0.0.0.0/0;
+ 164.58.199.0/24;
+ 164.58.0.0/16;
}
- destination-address {
- 0.0.0.0/0;
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
}
+ protocol udp;
+ port [ 3784 3785 ];
}
- then sample;
+ then accept;
}
- term REJECT_ALL {
+ term DENY_ALL {
then {
- reject;
+ log;
+ syslog;
+ discard;
}
}
}
}
Index: configs/hub.wea.onenet.net
===================================================================
retrieving revision 1.847
diff -u -4 -r1.847 hub.wea.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 49 days, 6 hours, 44 minutes, 28 seconds
+ # Selected for : 49 days, 7 hours, 44 minutes, 25 seconds
# Selected since : 2011-03-01 15:15:55 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 49 days, 6 hours, 44 minutes, 17 seconds
+ # Selected for : 49 days, 7 hours, 44 minutes, 14 seconds
# Selected since : 2011-03-01 15:16:06 CST
#
# {master}
# grnoc-mon at WEATHERFORD-M120-RE0> show chassis environment
@@ -187,9 +187,9 @@
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
# 2 Online 31 1 0 512 9 59
- # 3 Online 34 1 0 512 9 59
+ # 3 Online 34 2 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
Index: configs/hub.wil.onenet.net
===================================================================
retrieving revision 1.1633
diff -u -4 -r1.1633 hub.wil.onenet.net
@@ -1,27 +1,27 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at WILBURTON-M120-RE0> show system commit
+ # 2011-04-19 23:07:40 CDT by todd via cli commit synchronize
+ # 2011-04-19 23:04:20 CDT by todd via cli commit confirmed, rollback in 1mins synchronize
# 2011-04-18 09:41:27 CDT by todd via cli commit synchronize
# 2011-04-18 09:40:32 CDT by todd via cli commit confirmed, rollback in 1mins synchronize
# 2011-04-05 11:49:55 CDT by joe via cli commit synchronize
# 2011-04-05 10:33:36 CDT by todd via cli commit synchronize
- # 2011-04-04 16:44:08 CDT by bobby via cli commit synchronize
- # 2011-04-04 16:43:48 CDT by bobby via cli commit confirmed, rollback in 1mins synchronize
# grnoc-mon at WILBURTON-M120-RE0> show chassis clocks
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 61 days, 8 hours, 50 minutes, 54 seconds
+ # Selected for : 61 days, 9 hours, 50 minutes, 51 seconds
# Selected since : 2011-02-17 13:09:29 CST
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 61 days, 8 hours, 50 minutes, 41 seconds
+ # Selected for : 61 days, 9 hours, 50 minutes, 38 seconds
# Selected since : 2011-02-17 13:09:42 CST
#
# {master}
# grnoc-mon at WILBURTON-M120-RE0> show chassis environment
@@ -185,9 +185,9 @@
# Temp CPU Utilization (%) Memory Utilization (%)
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
- # 2 Online 36 1 0 512 9 59
+ # 2 Online 37 2 0 512 9 59
# 3 Online 40 2 0 512 9 59
# 4 Empty
# 5 Empty
#
@@ -320,9 +320,9 @@
# {master}
# grnoc-mon at WILBURTON-M120-RE0> show system uptime
# System booted: 2011-02-17 13:07 CST
# Protocols started: 2011-02-17 13:08 CST
- # Last configured: 2011-04-18 09:41 CDT by todd
+ # Last configured: 2011-04-19 23:07 CDT by todd
#
# {master}
# grnoc-mon at WILBURTON-M120-RE0> show interface terse
#Interface Admin Link
@@ -491,9 +491,9 @@
#pime up up
#pp0 up up
#tap up up
# grnoc-mon at WILBURTON-M120-RE0> show configuration
- ## Last commit: 2011-04-18 09:41:27 CDT by todd
+ ## Last commit: 2011-04-19 23:07:40 CDT by todd
version 10.4R2.6;
groups {
re0 {
system {
@@ -675,8 +675,9 @@
input FLOW-INFO;
}
address 164.58.244.118/30;
}
+ family mpls;
}
}
inactive: ct3-2/0/1 {
clocking external;
@@ -1415,8 +1416,12 @@
router-id 164.58.199.98;
autonomous-system 5078;
}
protocols {
+ mpls {
+ interface t3-2/0/0.0;
+ interface lo0.0;
+ }
bgp {
path-selection cisco-non-deterministic;
log-updown;
family inet {
@@ -1424,29 +1429,54 @@
}
family inet6 {
unicast;
}
- group IBGP-OKCCore-RR {
+ group CORE-RR {
type internal;
- description IBGP-OKCCore-RR1-Local-AS5078;
- neighbor 164.58.10.25 {
- description IBGP-Peer-to-OKC-RR1;
- local-address 164.58.199.98;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
- peer-as 5078;
+ local-address 164.58.199.98;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
}
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216;
+ neighbor 164.58.199.226;
}
}
ospf {
export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ reference-bandwidth 100g;
area 0.0.0.0 {
interface t3-2/0/0.0;
interface fxp0.0 {
disable;
}
interface lo0.0;
}
}
+ ldp {
+ preference 255;
+ interface t3-2/0/0.0;
+ interface lo0.0;
+ }
}
policy-options {
policy-statement LOAD-BALANCE {
then {
@@ -1462,14 +1492,20 @@
}
accept;
}
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
policy-statement REDISTRIBUTE-STATICS {
term 1 {
from protocol static;
then accept;
}
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
}
}
class-of-service {
classifiers {
@@ -1525,8 +1561,26 @@
}
}
firewall {
family inet {
+ filter FLOW-INFO {
+ term ALL_FLOW {
+ from {
+ source-address {
+ 0.0.0.0/0;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then sample;
+ }
+ term REJECT_ALL {
+ then {
+ reject;
+ }
+ }
+ }
filter PROTECT-RE {
term SERVICES {
from {
source-address {
@@ -1537,24 +1591,30 @@
164.58.244.0/23;
164.58.253.0/24;
64.207.244.14/32;
66.129.224.37/32;
+ 164.58.15.0/24;
}
protocol tcp;
destination-port [ ssh http ];
}
then accept;
}
term OSPF-ALLOW {
from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
protocol ospf;
}
then accept;
}
- term IBGP-allow {
+ term IBGP-ALLOW {
from {
source-address {
- 164.58.10.25/32;
+ 164.58.199.216/32;
+ 164.58.199.226/32;
}
protocol tcp;
port 179;
}
@@ -1562,15 +1622,15 @@
}
term ICMP-ALLOW {
from {
protocol icmp;
- icmp-type [ echo-reply unreachable time-exceeded echo-request ];
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
}
then accept;
}
term SERVICES-OUTBOUND {
from {
- source-port [ domain ntp ];
+ source-port [ domain ntp ssh ];
}
then accept;
}
term RADIUS {
@@ -1604,31 +1664,42 @@
port [ snmp snmptrap ];
}
then accept;
}
- term DENY_ALL {
- then {
- log;
- syslog;
- discard;
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ port ldp;
}
}
- }
- filter FLOW-INFO {
- term ALL_FLOW {
+ term PIM-ALLOW {
from {
source-address {
- 0.0.0.0/0;
+ 164.58.199.0/24;
+ 164.58.0.0/16;
}
- destination-address {
- 0.0.0.0/0;
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
}
+ protocol udp;
+ port [ 3784 3785 ];
}
- then sample;
+ then accept;
}
- term REJECT_ALL {
+ term DENY_ALL {
then {
- reject;
+ log;
+ syslog;
+ discard;
}
}
}
}
Index: configs/hub.woo.onenet.net
===================================================================
retrieving revision 1.914
diff -u -4 -r1.914 hub.woo.onenet.net
@@ -11,17 +11,17 @@
# Clock Synchronization Status :
# Clock module on CB 0
# Current state : master
# Current clock state : internal
- # Selected for : 36 days, 4 hours, 38 minutes, 54 seconds
+ # Selected for : 36 days, 5 hours, 38 minutes, 53 seconds
# Selected since : 2011-03-14 18:21:29 CDT
# Deviation (in ppm) : +0.00
# Last deviation (in ppm): +0.00
# Clock Synchronization Status :
# Clock module on CB 1
# Current state : backup
# Current clock state : locked to master CB
- # Selected for : 36 days, 4 hours, 38 minutes, 43 seconds
+ # Selected for : 36 days, 5 hours, 38 minutes, 42 seconds
# Selected since : 2011-03-14 18:21:40 CDT
#
# {master}
# grnoc-mon at WOODWARD-M120-RE0> show chassis environment
@@ -186,9 +186,9 @@
# Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
# 0 Empty
# 1 Empty
# 2 Online 41 1 0 512 9 59
- # 3 Online 45 1 0 512 9 59
+ # 3 Online 45 2 0 512 9 59
# 4 Empty
# 5 Empty
#
# {master}
More information about the Nocrancid
mailing list