[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Sat May 14 22:00:39 CDT 2011
Index: core1.sti-mx960.onenet.net
===================================================================
--- core1.sti-mx960.onenet.net (revision 11266)
+++ core1.sti-mx960.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at STILLWATER-MX960-RE0> show system commit
+# 2011-05-14 21:52:53 CDT by von via cli commit confirmed, rollback in 2mins synchronize
+# 2011-05-14 21:15:00 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
# 2011-05-13 16:08:45 CDT by von via cli commit synchronize
# 2011-05-13 16:08:36 CDT by von via cli commit confirmed, rollback in 1mins synchronize
# 2011-05-13 15:50:45 CDT by von via cli commit confirmed, rollback in 1mins synchronize
# 2011-05-13 15:40:02 CDT by von via cli commit confirmed, rollback in 1mins synchronize
-# 2011-05-13 15:31:53 CDT by von via cli commit confirmed, rollback in 1mins synchronize
-# 2011-05-13 12:36:22 CDT by admin via netconf commit synchronize
# grnoc-mon at STILLWATER-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -146,9 +146,20 @@
# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
# Xcvr 0 REV 03 740-031585 FA437391014D XFP-10G-T-DWDM-ZR
# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-014279 A7H026T XFP-10G-LR
# MIC 1 REV 23 750-028392 YV0352 3D 20x 1GE(LAN) SFP
# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A475240 SFP-T
+# Xcvr 1 REV 02 740-013111 A475228 SFP-T
+# Xcvr 2 REV 02 740-013111 A475917 SFP-T
+# Xcvr 3 REV 02 740-013111 A475220 SFP-T
# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-011612 9ZT702500730 SFP-LH
+# Xcvr 1 REV 01 740-011614 PJ70ZDP SFP-LX10
+# Xcvr 2 REV 01 740-011614 PJ62FKD SFP-LX10
+# Xcvr 3 REV 01 740-011614 PJ62GFF SFP-LX10
+# Xcvr 4 REV 01 740-011614 PJ70Z8H SFP-LX10
+# Xcvr 5 REV 01 740-011614 PJ712FX SFP-LX10
# QXM 0 REV 05 711-028408 YV9745 MPC QXM
# QXM 1 REV 05 711-028408 YV9774 MPC QXM
# FPC 1 REV 15 750-031088 YZ0158 MPC Type 2 3D Q
@@ -336,7 +347,7 @@
# grnoc-mon at STILLWATER-MX960-RE0> show system uptime
# System booted: 2011-03-24 17:25 CDT
# Protocols started: 2011-04-05 03:27 CDT
-# Last configured: 2011-05-13 16:08 CDT by von
+# Last configured: 2011-05-14 21:52 CDT by von
#
# {master}
# grnoc-mon at STILLWATER-MX960-RE0> show interface terse
@@ -406,7 +417,7 @@
#pp0 up up
#tap up up
# grnoc-mon at STILLWATER-MX960-RE0> show configuration
-## Last commit: 2011-05-13 16:08:45 CDT by von
+## Last commit: 2011-05-14 21:52:53 CDT by von
version 10.4R3.4;
groups {
re0 {
@@ -829,6 +840,19 @@
neighbor 164.58.199.216;
neighbor 164.58.199.226;
}
+ group CUSTOMER-EBGP {
+ type external;
+ family inet {
+ any;
+ }
+ neighbor 164.58.10.70 {
+ description OSU-STILLWATER-eBGP-PEER;
+ import EBGP-OSU-IMPORT;
+# authentication-key <removed>;
+ remove-private;
+ peer-as 65500;
+ }
+ }
}
ospf {
reference-bandwidth 100g;
@@ -865,6 +889,27 @@
}
}
policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement EBGP-OSU-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:65500;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-OSU-IMPORT-PREFIX {
+ term prefixes {
+ from {
+ route-filter 139.78.0.0/16 exact;
+ route-filter 192.31.83.0/25 exact;
+ route-filter 192.198.4.0/22 exact;
+ }
+ }
+ }
policy-statement LOAD-BALANCE {
then {
load-balance per-packet;
@@ -887,6 +932,7 @@
then accept;
}
}
+ community 5078:65500 members 5078:65500;
}
class-of-service {
classifiers {
@@ -943,6 +989,24 @@
}
firewall {
family inet {
+ filter FLOW-INFO {
+ term ALL_FLOW {
+ from {
+ source-address {
+ 0.0.0.0/0;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then sample;
+ }
+ term REJECT_ALL {
+ then {
+ reject;
+ }
+ }
+ }
filter PROTECT-RE {
term SERVICES {
from {
@@ -966,14 +1030,25 @@
from {
source-address {
164.58.199.0/24;
- 164.58.15.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
}
protocol ospf;
}
then accept;
}
- term IBGP-allow {
+ term EBGP-ALLOW {
from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
source-address {
164.58.199.216/32;
164.58.199.226/32;
@@ -992,7 +1067,7 @@
}
term SERVICES-OUTBOUND {
from {
- source-port [ domain ntp ssh ];
+ source-port [ domain ntp ssh syslog ];
}
then accept;
}
@@ -1032,7 +1107,7 @@
from {
source-address {
164.58.199.0/24;
- 164.58.15.0/24;
+ 164.58.0.0/16;
}
port ldp;
}
@@ -1041,7 +1116,7 @@
from {
source-address {
164.58.199.0/24;
- 164.58.15.0/24;
+ 164.58.0.0/16;
}
protocol pim;
}
@@ -1050,13 +1125,20 @@
term BFD-ALLOW {
from {
source-address {
- 164.58.15.0/24;
+ 164.58.0.0/16;
}
protocol udp;
port [ 3784 3785 ];
}
then accept;
}
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
term DENY_ALL {
then {
log;
@@ -1065,24 +1147,6 @@
}
}
}
- filter FLOW-INFO {
- term ALL_FLOW {
- from {
- source-address {
- 0.0.0.0/0;
- }
- destination-address {
- 0.0.0.0/0;
- }
- }
- then sample;
- }
- term REJECT_ALL {
- then {
- reject;
- }
- }
- }
}
}
routing-instances {
Index: hub.chi.onenet.net
===================================================================
--- hub.chi.onenet.net (revision 11303)
+++ hub.chi.onenet.net (working copy)
@@ -306,7 +306,7 @@
#t3-2/0/1.0 up up
#ct3-2/0/2 up up
#t1-2/0/2:1 up up
-#t1-2/0/2:2 up up
+#t1-2/0/2:2 up down
#t1-2/0/2:3 up up
#t1-2/0/2:3.0 up up
#t1-2/0/2:4 up up
More information about the Nocrancid
mailing list