[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed May 18 14:40:47 CDT 2011


Index: core1.okc-mx960.onenet.net
===================================================================
--- core1.okc-mx960.onenet.net	(revision 11459)
+++ core1.okc-mx960.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE1-MX960-RE0> show system commit 
+#   2011-05-18 14:16:18 CDT by cjensen via cli commit synchronize
+#   2011-05-18 14:12:57 CDT by cjensen via cli commit synchronize
 #   2011-05-17 14:04:14 CDT by todd via cli commit synchronize
 #   2011-05-17 09:44:55 CDT by von via cli commit synchronize
 #   2011-05-17 09:44:36 CDT by von via cli commit confirmed, rollback in 1mins synchronize
 #   2011-05-17 09:40:15 CDT by von via cli commit confirmed, rollback in 1mins synchronize
-#   2011-05-16 21:19:05 CDT by jeremyt via cli commit synchronize
-#   2011-05-16 21:11:05 CDT by jeremyt via cli commit at
 # grnoc-mon at OKC-CORE1-MX960-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -343,7 +343,7 @@
 # grnoc-mon at OKC-CORE1-MX960-RE0> show system uptime 
 # System booted: 2011-03-25 14:25 CDT 
 # Protocols started: 2011-03-25 14:26 CDT 
-# Last configured: 2011-05-17 14:04 CDT  by todd
+# Last configured: 2011-05-18 14:16 CDT  by cjensen
 # 
 # {master}
 # grnoc-mon at OKC-CORE1-MX960-RE0> show interface terse 
@@ -429,7 +429,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE1-MX960-RE0> show configuration 
-## Last commit: 2011-05-17 14:04:14 CDT by todd
+## Last commit: 2011-05-18 14:16:18 CDT by cjensen
 version 10.4R3.4;
 groups {
     re0 {
@@ -602,7 +602,7 @@
         vlan-tagging;
         mtu 9192;
         unit 36 {
-            description OKC-CORE1-to-OKC-CORE3-M120;
+            description OKC-CORE1-to-OKC-CORE3-M120-CIR4468;
             vlan-id 36;
             family inet {
                 mtu 9000;
@@ -615,7 +615,7 @@
         }
     }
     xe-0/1/0 {
-        description LINK-TO-RP3-DATACENTER-EC1;
+        description LINK-TO-RP3-DATACENTER-EC1-CIR4479;
         vlan-tagging;
         mtu 9174;
         encapsulation flexible-ethernet-services;
@@ -731,7 +731,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 40 {
-            description OKC-CORE1-to-OKC-CORE4-MX480;
+            description OKC-CORE1-to-OKC-CORE4-MX480-CIR4464;
             vlan-id 40;
             family inet {
                 mtu 9000;
@@ -745,7 +745,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 44 {
-            description OKC-CORE1-to-OKC-CORE5-MX480;
+            description OKC-CORE1-to-OKC-CORE5-MX480-CIR4466;
             vlan-id 44;
             family inet {
                 mtu 9000;

Index: core2-okc-mx960.onenet.net
===================================================================
--- core2-okc-mx960.onenet.net	(revision 11410)
+++ core2-okc-mx960.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE2-MX960-RE0> show system commit 
+#   2011-05-18 14:37:10 CDT by cjensen via cli commit synchronize
 #   2011-05-16 21:19:43 CDT by jeremyt via cli commit synchronize
 #   2011-05-16 21:11:05 CDT by jeremyt via cli commit at
 #   2011-05-16 13:00:44 CDT by jeremyt via cli commit synchronize
 #   2011-05-16 08:14:55 CDT by jed via cli commit synchronize
 #   2011-05-13 12:36:21 CDT by admin via netconf commit synchronize
-#   2011-05-13 12:36:15 CDT by admin via cli commit synchronize
 # grnoc-mon at OKC-CORE2-MX960-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -344,7 +344,7 @@
 # grnoc-mon at OKC-CORE2-MX960-RE0> show system uptime 
 # System booted: 2011-03-27 16:16 CDT 
 # Protocols started: 2011-03-27 16:17 CDT 
-# Last configured: 2011-05-16 21:19 CDT  by jeremyt
+# Last configured: 2011-05-18 14:37 CDT  by cjensen
 # 
 # {master}
 # grnoc-mon at OKC-CORE2-MX960-RE0> show interface terse 
@@ -431,7 +431,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE2-MX960-RE0> show configuration 
-## Last commit: 2011-05-16 21:19:43 CDT by jeremyt
+## Last commit: 2011-05-18 14:37:10 CDT by cjensen
 version 10.4R3.4;
 groups {
     re0 {
@@ -600,7 +600,7 @@
         vlan-tagging;
         mtu 9192;
         unit 52 {
-            description OKC-CORE2-to-OKC-CORE3-M120;
+            description OKC-CORE2-to-OKC-CORE3-M120CIR4469;
             vlan-id 52;
             family inet {
                 mtu 9000;
@@ -613,7 +613,7 @@
         }
     }
     xe-0/1/0 {
-        description LINK-TO-RP3-DATACENTER-EC2;
+        description LINK-TO-RP3-DATACENTER-EC2-CIR4481;
         vlan-tagging;
         mtu 9174;
         encapsulation flexible-ethernet-services;
@@ -798,7 +798,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 56 {
-            description OKC-CORE2-to-OKC-CORE4-MX480;
+            description OKC-CORE2-to-OKC-CORE4-MX480-CIR4467;
             vlan-id 56;
             family inet {
                 mtu 9000;
@@ -812,7 +812,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 60 {
-            description OKC-CORE2-to-OKC-CORE5-MX480;
+            description OKC-CORE2-to-OKC-CORE5-MX480-CIR4470;
             vlan-id 60;
             family inet {
                 mtu 9000;

Index: core4.tul-mx480.onenet.net
===================================================================
--- core4.tul-mx480.onenet.net	(revision 11513)
+++ core4.tul-mx480.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TULSA-CORE4-MX480-RE0> show system commit 
+#   2011-05-18 14:27:00 CDT by joe via cli commit synchronize
 #   2011-05-18 11:12:40 CDT by todd via cli commit synchronize
 #   2011-05-18 11:08:13 CDT by todd via cli commit synchronize
 #   2011-05-18 10:32:51 CDT by todd via cli commit confirmed, rollback in 1mins synchronize
 #   2011-05-13 14:25:06 CDT by jeremyt via cli commit synchronize
 #   2011-05-13 12:36:32 CDT by admin via netconf commit synchronize
-#   2011-05-13 12:36:16 CDT by admin via cli commit synchronize
 # grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -319,7 +319,7 @@
 # grnoc-mon at TULSA-CORE4-MX480-RE0> show system uptime 
 # System booted: 2011-03-24 15:24 CDT 
 # Protocols started: 2011-03-24 15:25 CDT 
-# Last configured: 2011-05-18 11:12 CDT  by todd
+# Last configured: 2011-05-18 14:27 CDT  by joe
 # 
 # {master}
 # grnoc-mon at TULSA-CORE4-MX480-RE0> show interface terse 
@@ -362,6 +362,7 @@
 #ge-0/3/2 up up
 #ge-0/3/2.101 up up
 #ge-0/3/2.105 up up
+#ge-0/3/2.109 up up
 #ge-0/3/2.32767 up up
 #ge-0/3/3 up down
 #ge-0/3/4 up down
@@ -420,7 +421,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at TULSA-CORE4-MX480-RE0> show configuration 
-## Last commit: 2011-05-18 11:12:40 CDT by todd
+## Last commit: 2011-05-18 14:27:00 CDT by joe
 version 10.4R3.4;
 groups {
     re0 {
@@ -729,6 +730,13 @@
                 address 164.58.14.145/30;
             }
         }
+        unit 109 {
+            description OSU-IT-CIR0004414;
+            vlan-id 109;
+            family inet {
+                address 164.58.69.9/30;
+            }
+        }
     }
     inactive: ge-0/3/3 {
         description USER-DEFINE;

Index: core4-mx480.onenet.net
===================================================================
--- core4-mx480.onenet.net	(revision 11468)
+++ core4-mx480.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE4-MX480-RE0> show system commit 
+#   2011-05-18 14:18:05 CDT by cjensen via cli commit synchronize
+#   2011-05-18 14:07:11 CDT by cjensen via cli commit synchronize
 #   2011-05-13 12:36:27 CDT by admin via netconf commit synchronize
 #   2011-05-13 12:36:17 CDT by admin via cli commit synchronize
 #   2011-05-12 10:07:04 CDT by jeremyt via cli commit synchronize
 #   2011-05-09 13:33:59 CDT by jeremyt via cli commit confirmed, rollback in 2mins synchronize
-#   2011-05-04 15:00:48 CDT by todd via cli commit confirmed, rollback in 1mins synchronize
-#   2011-05-04 13:23:53 CDT by von via cli commit synchronize
 # grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -331,7 +331,7 @@
 # grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime 
 # System booted: 2011-04-16 22:11 CDT 
 # Protocols started: 2011-04-16 22:12 CDT 
-# Last configured: 2011-05-13 12:36 CDT  by admin
+# Last configured: 2011-05-18 14:18 CDT  by cjensen
 # 
 # {master}
 # grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse 
@@ -414,8 +414,8 @@
 #ge-0/3/4.0 up up
 #ge-0/3/5 up up
 #ge-0/3/5.0 up up
-#ge-0/3/6 up up
-#ge-0/3/6.0 up up
+#ge-0/3/6 up down
+#ge-0/3/6.0 up down
 #ge-0/3/7 up up
 #ge-0/3/7.0 up up
 #ge-0/3/8 up up
@@ -456,7 +456,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE4-MX480-RE0> show configuration 
-## Last commit: 2011-05-13 12:36:27 CDT by admin
+## Last commit: 2011-05-18 14:18:05 CDT by cjensen
 version 10.4R3.4;
 groups {
     re0 {
@@ -607,7 +607,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 40 {
-            description OKC-CORE4-MX480-to-OKC-CORE1-MX960;
+            description OKC-CORE4-MX480-to-OKC-CORE1-MX960-CIR4464;
             vlan-id 40;
             family inet {
                 mtu 9000;
@@ -621,7 +621,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 72 {
-            description OKC-CORE4-MX480-to-OKC-CORE5-MX480;
+            description OKC-CORE4-MX480-to-OKC-CORE5-MX480-CIR4465;
             vlan-id 72;
             family inet {
                 mtu 9000;
@@ -631,7 +631,7 @@
         }
     }
     xe-0/1/1 {
-        description QWEST-10GIG-DALLAS-CIR-ETH10000-15710007;
+        description QWEST-10GIG-DALLAS-CIR-ETH10000-15710007-CIR4478;
         unit 0 {
             family inet {
                 address 65.115.192.18/30;
@@ -1052,7 +1052,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 56 {
-            description OKC-CORE4-MX480-to-OKC-CORE2-MX960;
+            description OKC-CORE4-MX480-to-OKC-CORE2-MX960-CIR4467;
             vlan-id 56;
             family inet {
                 mtu 9000;

Index: hub.ada.onenet.net
===================================================================
--- hub.ada.onenet.net	(revision 11515)
+++ hub.ada.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ADA-M120-RE0> show system commit 
+#   2011-05-18 14:38:52 CDT by jeremyt via cli commit synchronize
+#   2011-05-18 14:38:08 CDT by jeremyt via cli commit synchronize
+#   2011-05-18 14:35:57 CDT by jeremyt via cli commit synchronize
+#   2011-05-18 14:32:17 CDT by jeremyt via cli commit confirmed, rollback in 5mins synchronize
 #   2011-05-18 11:27:15 CDT by jeremyt via cli commit confirmed, rollback in 2mins synchronize
 #   2011-05-13 12:36:23 CDT by admin via netconf commit synchronize
-#   2011-05-13 12:36:15 CDT by admin via cli commit synchronize
-#   2011-05-05 23:06:41 CDT by jed via cli commit synchronize
-#   2011-05-03 09:20:27 CDT by jeremyt via cli commit synchronize
-#   2011-04-21 11:21:01 CDT by smclean via cli commit synchronize
 # grnoc-mon at ADA-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -299,7 +299,7 @@
 # grnoc-mon at ADA-M120-RE0> show system uptime 
 # System booted: 2011-02-24 21:08 CST 
 # Protocols started: 2011-02-24 21:11 CST 
-# Last configured: 2011-05-18 11:27 CDT  by jeremyt
+# Last configured: 2011-05-18 14:38 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at ADA-M120-RE0> show interface terse 
@@ -479,7 +479,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at ADA-M120-RE0> show configuration 
-## Last commit: 2011-05-18 11:27:15 CDT by jeremyt
+## Last commit: 2011-05-18 14:38:52 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {

Index: core.ptc.onenet.net
===================================================================
--- core.ptc.onenet.net	(revision 11527)
+++ core.ptc.onenet.net	(working copy)
@@ -457,7 +457,7 @@
 !BootFlash: Configuration register is 0x2102
 !BootFlash: Standby is not present.
 !
-! Last configuration change at 14:21:47 extende Tue May 17 2011 by todd
+! Last configuration change at 14:02:42 extende Wed May 18 2011 by todd
 ! NVRAM config last updated at 00:34:19 extende Sun Apr 17 2011 by todd
 !
 config-register 0x2102
@@ -631,6 +631,7 @@
  switchport
  switchport access vlan 560
  no ip address
+ shutdown
 !
 interface GigabitEthernet6/1
  description Cisco-to-Juniper-PTC-MX480
@@ -669,6 +670,7 @@
  ip address 172.23.6.81 255.255.255.248 secondary
  ip address 164.58.207.225 255.255.255.224
  no ip redirects
+ shutdown
 !
 router ospf 1
  router-id 164.58.10.134

Index: core5.okc-mx480.onenet.net
===================================================================
--- core5.okc-mx480.onenet.net	(revision 11411)
+++ core5.okc-mx480.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system commit 
+#   2011-05-18 14:33:19 CDT by cjensen via cli commit synchronize
 #   2011-05-16 21:10:22 CDT by von via cli commit synchronize
 #   2011-05-16 21:06:09 CDT by von via cli commit synchronize
 #   2011-05-16 20:55:51 CDT by von via cli commit synchronize
 #   2011-05-16 20:51:01 CDT by von via cli commit synchronize
 #   2011-05-16 20:44:10 CDT by von via cli commit synchronize
-#   2011-05-16 15:30:57 CDT by joe via cli commit synchronize
 # grnoc-mon at OKC-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -340,7 +340,7 @@
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system uptime 
 # System booted: 2011-03-27 16:32 CDT 
 # Protocols started: 2011-03-27 16:33 CDT 
-# Last configured: 2011-05-16 21:10 CDT  by von
+# Last configured: 2011-05-18 14:33 CDT  by cjensen
 # 
 # {master}
 # grnoc-mon at OKC-CORE5-MX480-RE0> show interface terse 
@@ -472,7 +472,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE5-MX480-RE0> show configuration 
-## Last commit: 2011-05-16 21:10:22 CDT by von
+## Last commit: 2011-05-18 14:33:19 CDT by cjensen
 version 10.4R3.4;
 groups {
     re0 {
@@ -631,7 +631,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 44 {
-            description OKC-CORE5-MX480-to-OKC-CORE1-MX960;
+            description OKC-CORE5-MX480-to-OKC-CORE1-MX960-CIR4466;
             vlan-id 44;
             family inet {
                 mtu 9000;
@@ -645,7 +645,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 72 {
-            description OKC-CORE5-MX480-to-OKC-CORE4-MX480;
+            description OKC-CORE5-MX480-to-OKC-CORE4-MX480-CIR4465;
             vlan-id 72;
             family inet {
                 mtu 9000;
@@ -932,7 +932,7 @@
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 60 {
-            description OKC-CORE5-MX480-to-OKC-CORE2-MX960;
+            description OKC-CORE5-MX480-to-OKC-CORE2-MX960-CIR4470;
             vlan-id 60;
             family inet {
                 mtu 9000;
@@ -942,7 +942,7 @@
         }
     }
     xe-1/1/1 {
-        description AKAMAI;
+        description AKAMAI-CIR4480;
         unit 0 {
             family inet {
                 address 164.58.129.129/26;

Index: core3.okc-m120.onenet.net
===================================================================
--- core3.okc-m120.onenet.net	(revision 11523)
+++ core3.okc-m120.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE3-M120-RE0> show system commit 
+#   2011-05-18 14:29:27 CDT by cjensen via cli commit synchronize
+#   2011-05-18 14:26:22 CDT by admin via cli commit synchronize
+#   2011-05-18 14:25:17 CDT by admin via cli commit confirmed, rollback in 3mins synchronize
 #   2011-05-18 12:48:36 CDT by admin via cli commit synchronize
 #   2011-05-18 09:57:55 CDT by smclean via cli commit synchronize
 #   2011-05-17 13:11:25 CDT by jeremyt via cli commit synchronize
-#   2011-05-17 12:52:17 CDT by jeremyt via cli commit synchronize
-#   2011-05-17 12:35:04 CDT by joe via cli commit synchronize
-#   2011-05-17 11:52:08 CDT by von via cli commit confirmed, rollback in 1mins synchronize
 # grnoc-mon at OKC-CORE3-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -386,7 +386,7 @@
 # grnoc-mon at OKC-CORE3-M120-RE0> show system uptime 
 # System booted: 2011-04-16 20:36 CDT 
 # Protocols started: 2011-04-16 20:37 CDT 
-# Last configured: 2011-05-18 12:48 CDT  by admin
+# Last configured: 2011-05-18 14:29 CDT  by cjensen
 # 
 # {master}
 # grnoc-mon at OKC-CORE3-M120-RE0> show interface terse 
@@ -2157,7 +2157,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE3-M120-RE0> show configuration 
-## Last commit: 2011-05-18 12:48:36 CDT by admin
+## Last commit: 2011-05-18 14:29:27 CDT by cjensen
 version 10.4R2.6;
 groups {
     re0 {
@@ -2347,11 +2347,11 @@
 }
 interfaces {
     xe-0/0/0 {
-        description OKC-CORE3-M120-to-OKC-CORE1-MX960;
+        description OKC-CORE3-M120-to-OKC-CORE1-MX960-CIR4468;
         vlan-tagging;
         mtu 9192;
         unit 36 {
-            description OKC-CORE3-M120-to-OKC-CORE1-MX960;
+            description OKC-CORE3-M120-to-OKC-CORE1-MX960-CIR4468;
             vlan-id 36;
             family inet {
                 mtu 9000;
@@ -2364,7 +2364,7 @@
         vlan-tagging;
         mtu 9192;
         unit 52 {
-            description OKC-CORE3-M120-to-OKC-CORE2-MX960;
+            description OKC-CORE3-M120-to-OKC-CORE2-MX960-CIR4469;
             vlan-id 52;
             family inet {
                 mtu 9000;
@@ -11101,6 +11101,9 @@
         204.87.86.35/32;
         204.87.86.36/32;
     }
+    prefix-list EBGP-IPV4-NEIGHBORS {
+        156.110.25.66/32;
+    }
     policy-statement EBGP-OECU-IMPORT {
         term STEP-1 {
             then {
@@ -11233,6 +11236,24 @@
 }
 firewall {
     family inet {
+        filter FLOW-INFO {
+            term ALL_FLOW {
+                from {
+                    source-address {
+                        0.0.0.0/0;
+                    }
+                    destination-address {
+                        0.0.0.0/0;
+                    }
+                }
+                then sample;
+            }
+            term REJECT_ALL {
+                then {
+                    reject;
+                }
+            }
+        }
         filter PROTECT-RE {
             term SERVICES {
                 from {
@@ -11245,7 +11266,6 @@
                         164.58.253.0/24;
                         64.207.244.14/32;
                         66.129.224.37/32;
-                        164.58.0.0/16;
                         164.58.15.0/24;
                     }
                     protocol tcp;
@@ -11258,19 +11278,23 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     protocol ospf;
                 }
                 then accept;
             }
-            term EGP-allow {
+            term EBGP-ALLOW {
                 from {
-                    source-address {
-                        156.110.25.66/32;
+                    prefix-list {
+                        EBGP-IPV4-NEIGHBORS;
                     }
+                    protocol tcp;
+                    port 179;
                 }
+                then accept;
             }
-            term IBGP-allow {
+            term IBGP-ALLOW {
                 from {
                     source-address {
                         164.58.199.216/32;
@@ -11290,7 +11314,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh ];
+                    source-port [ domain ntp ssh syslog ftp ];
                 }
                 then accept;
             }
@@ -11317,7 +11341,6 @@
             term SNMP-ALLOW {
                 from {
                     source-address {
-                        164.58.25.0/32;
                         164.58.253.0/24;
                         156.110.31.0/27;
                         156.110.31.32/28;
@@ -11332,6 +11355,7 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     port ldp;
                 }
@@ -11356,6 +11380,13 @@
                 }
                 then accept;
             }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
             term DENY_ALL {
                 then {
                     log;
@@ -11364,24 +11395,6 @@
                 }
             }
         }
-        filter FLOW-INFO {
-            term ALL_FLOW {
-                from {
-                    source-address {
-                        0.0.0.0/0;
-                    }
-                    destination-address {
-                        0.0.0.0/0;
-                    }
-                }
-                then sample;
-            }
-            term REJECT_ALL {
-                then {
-                    reject;
-                }
-            }
-        }
     }
     policer PANHANDLE-POL {
         if-exceeding {


More information about the Nocrancid mailing list