[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Mon May 23 17:00:41 CDT 2011


Index: hub.ada.onenet.net
===================================================================
--- hub.ada.onenet.net	(revision 11919)
+++ hub.ada.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ADA-M120-RE0> show system commit 
+#   2011-05-23 16:22:09 CDT by jeremyt via cli commit synchronize
 #   2011-05-19 09:43:44 CDT by jeremyt via cli commit synchronize
 #   2011-05-18 14:50:18 CDT by jeremyt via cli commit confirmed, rollback in 5mins synchronize
 #   2011-05-18 14:39:20 CDT by jeremyt via cli commit synchronize
 #   2011-05-18 14:38:52 CDT by jeremyt via cli commit synchronize
 #   2011-05-18 14:38:08 CDT by jeremyt via cli commit synchronize
-#   2011-05-18 14:35:57 CDT by jeremyt via cli commit synchronize
 # grnoc-mon at ADA-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -299,7 +299,7 @@
 # grnoc-mon at ADA-M120-RE0> show system uptime 
 # System booted: 2011-02-24 21:08 CST 
 # Protocols started: 2011-02-24 21:11 CST 
-# Last configured: 2011-05-19 09:43 CDT  by jeremyt
+# Last configured: 2011-05-23 16:22 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at ADA-M120-RE0> show interface terse 
@@ -479,7 +479,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at ADA-M120-RE0> show configuration 
-## Last commit: 2011-05-19 09:43:44 CDT by jeremyt
+## Last commit: 2011-05-23 16:22:09 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1940,7 +1940,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh syslog ftp ];
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
                 }
                 then accept;
             }

Index: hub.alt.onenet.net
===================================================================
--- hub.alt.onenet.net	(revision 11660)
+++ hub.alt.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ALTUS-M120-RE0> show system commit 
+#   2011-05-23 16:25:34 CDT by jeremyt via cli commit synchronize
+#   2011-05-23 16:25:14 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
 #   2011-05-19 09:43:04 CDT by jeremyt via cli commit synchronize
 #   2011-05-18 17:19:06 CDT by jeremyt via cli commit synchronize
 #   2011-05-13 12:36:23 CDT by admin via netconf commit synchronize
 #   2011-05-13 12:36:15 CDT by admin via cli commit synchronize
-#   2011-05-05 23:06:46 CDT by jed via cli commit synchronize
-#   2011-05-03 09:40:38 CDT by jeremyt via cli commit synchronize
 # grnoc-mon at ALTUS-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -294,7 +294,7 @@
 # grnoc-mon at ALTUS-M120-RE0> show system uptime 
 # System booted: 2011-04-08 09:13 CDT 
 # Protocols started: 2011-04-08 09:14 CDT 
-# Last configured: 2011-05-19 09:43 CDT  by jeremyt
+# Last configured: 2011-05-23 16:25 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at ALTUS-M120-RE0> show interface terse 
@@ -413,7 +413,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at ALTUS-M120-RE0> show configuration 
-## Last commit: 2011-05-19 09:43:04 CDT by jeremyt
+## Last commit: 2011-05-23 16:25:34 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1076,6 +1076,7 @@
     }
 }
 policy-options {
+    prefix-list EBGP-IPV4-NEIGHBORS;
     policy-statement LOAD-BALANCE {
         then {
             load-balance per-packet;
@@ -1230,11 +1231,22 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     protocol ospf;
                 }
                 then accept;
             }
+            term EBGP-ALLOW {
+                from {
+                    prefix-list {
+                        EBGP-IPV4-NEIGHBORS;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
             term IBGP-ALLOW {
                 from {
                     source-address {
@@ -1255,7 +1267,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh ];
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
                 }
                 then accept;
             }
@@ -1273,6 +1285,7 @@
                 from {
                     source-address {
                         164.58.10.1/32;
+                        164.58.199.0/24;
                     }
                     protocol udp;
                     port ntp;
@@ -1296,6 +1309,7 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     port ldp;
                 }
@@ -1320,6 +1334,13 @@
                 }
                 then accept;
             }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
             term DENY_ALL {
                 then {
                     log;

Index: hub.bar.onenet.net
===================================================================
--- hub.bar.onenet.net	(revision 11889)
+++ hub.bar.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at BARTLESVILLE-M120-RE0> show system commit 
+#   2011-05-23 16:44:00 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
 #   2011-05-19 12:35:47 CDT by jeremyt via cli commit synchronize
 #   2011-05-18 08:58:14 CDT by smclean via cli commit synchronize
 #   2011-05-13 12:36:23 CDT by admin via netconf commit synchronize
 #   2011-05-13 12:36:15 CDT by admin via cli commit synchronize
 #   2011-05-10 13:21:29 CDT by smclean via cli commit synchronize
-#   2011-05-05 23:07:04 CDT by jed via cli commit synchronize
 # grnoc-mon at BARTLESVILLE-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -293,7 +293,7 @@
 # grnoc-mon at BARTLESVILLE-M120-RE0> show system uptime 
 # System booted: 2011-02-25 14:01 CST 
 # Protocols started: 2011-02-25 14:02 CST 
-# Last configured: 2011-05-19 12:35 CDT  by jeremyt
+# Last configured: 2011-05-23 16:44 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at BARTLESVILLE-M120-RE0> show interface terse 
@@ -451,7 +451,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at BARTLESVILLE-M120-RE0> show configuration 
-## Last commit: 2011-05-19 12:35:47 CDT by jeremyt
+## Last commit: 2011-05-23 16:44:00 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1276,6 +1276,7 @@
     }
 }
 policy-options {
+    prefix-list EBGP-IPV4-NEIGHBORS;
     policy-statement LOAD-BALANCE {
         then {
             load-balance per-packet;
@@ -1400,6 +1401,39 @@
                 }
             }
         }
+        filter VIDEO {
+            term 1 {
+                from {
+                    source-address {
+                        156.110.211.42/32;
+                    }
+                    destination-address {
+                        0.0.0.0/0;
+                    }
+                }
+                then {
+                    forwarding-class video;
+                    accept;
+                }
+            }
+            term 2 {
+                from {
+                    source-address {
+                        0.0.0.0/0;
+                    }
+                    destination-address {
+                        156.110.211.42/32;
+                    }
+                }
+                then {
+                    forwarding-class video;
+                    accept;
+                }
+            }
+            term 3 {
+                then accept;
+            }
+        }
         filter PROTECT-RE {
             term SERVICES {
                 from {
@@ -1424,11 +1458,22 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     protocol ospf;
                 }
                 then accept;
             }
+            term EBGP-ALLOW {
+                from {
+                    prefix-list {
+                        EBGP-IPV4-NEIGHBORS;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
             term IBGP-ALLOW {
                 from {
                     source-address {
@@ -1449,7 +1494,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh syslog ];
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
                 }
                 then accept;
             }
@@ -1467,6 +1512,7 @@
                 from {
                     source-address {
                         164.58.10.1/32;
+                        164.58.199.0/24;
                     }
                     protocol udp;
                     port ntp;
@@ -1490,6 +1536,7 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     port ldp;
                 }
@@ -1514,6 +1561,13 @@
                 }
                 then accept;
             }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
             term DENY_ALL {
                 then {
                     log;
@@ -1522,39 +1576,6 @@
                 }
             }
         }
-        filter VIDEO {
-            term 1 {
-                from {
-                    source-address {
-                        156.110.211.42/32;
-                    }
-                    destination-address {
-                        0.0.0.0/0;
-                    }
-                }
-                then {
-                    forwarding-class video;
-                    accept;
-                }
-            }
-            term 2 {
-                from {
-                    source-address {
-                        0.0.0.0/0;
-                    }
-                    destination-address {
-                        156.110.211.42/32;
-                    }
-                }
-                then {
-                    forwarding-class video;
-                    accept;
-                }
-            }
-            term 3 {
-                then accept;
-            }
-        }
     }
 }
 {master}

Index: hub.ard.onenet.net
===================================================================
--- hub.ard.onenet.net	(revision 11908)
+++ hub.ard.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ARDMORE-M120-RE0> show system commit 
+#   2011-05-23 16:30:50 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
 #   2011-05-19 12:33:59 CDT by jeremyt via cli commit synchronize
 #   2011-05-13 12:36:27 CDT by admin via netconf commit synchronize
 #   2011-05-13 12:36:18 CDT by admin via cli commit synchronize
 #   2011-05-10 11:35:04 CDT by jed via cli commit synchronize
 #   2011-05-05 23:06:58 CDT by jed via cli commit synchronize
-#   2011-04-20 09:46:19 CDT by von via cli commit synchronize
 # grnoc-mon at ARDMORE-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -297,7 +297,7 @@
 # grnoc-mon at ARDMORE-M120-RE0> show system uptime 
 # System booted: 2011-02-24 19:05 CST 
 # Protocols started: 2011-02-24 19:07 CST 
-# Last configured: 2011-05-19 12:33 CDT  by jeremyt
+# Last configured: 2011-05-23 16:30 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at ARDMORE-M120-RE0> show interface terse 
@@ -362,8 +362,8 @@
 #t1-2/0/3:4.0 up up
 #t1-2/0/3:5 up up
 #t1-2/0/3:5.0 up up
-#t1-2/0/3:6 up down
-#t1-2/0/3:6.0 up down
+#t1-2/0/3:6 up up
+#t1-2/0/3:6.0 up up
 #t1-2/0/3:7 up up
 #t1-2/0/3:7.0 up up
 #t1-2/0/3:8 up up
@@ -466,7 +466,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at ARDMORE-M120-RE0> show configuration 
-## Last commit: 2011-05-19 12:33:59 CDT by jeremyt
+## Last commit: 2011-05-23 16:30:50 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1472,6 +1472,7 @@
     }
 }
 policy-options {
+    prefix-list EBGP-IPV4-NEIGHBORS;
     policy-statement LOAD-BALANCE {
         then {
             load-balance per-packet;
@@ -1642,12 +1643,22 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
-                        156.110.46.130/32;
+                        156.110.0.0/16;
                     }
                     protocol ospf;
                 }
                 then accept;
             }
+            term EBGP-ALLOW {
+                from {
+                    prefix-list {
+                        EBGP-IPV4-NEIGHBORS;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
             term IBGP-ALLOW {
                 from {
                     source-address {
@@ -1668,7 +1679,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh ];
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
                 }
                 then accept;
             }
@@ -1686,6 +1697,7 @@
                 from {
                     source-address {
                         164.58.10.1/32;
+                        164.58.199.0/24;
                     }
                     protocol udp;
                     port ntp;
@@ -1709,6 +1721,7 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     port ldp;
                 }
@@ -1733,6 +1746,13 @@
                 }
                 then accept;
             }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
             term DENY_ALL {
                 then {
                     log;

Index: hub.cla.onenet.net
===================================================================
--- hub.cla.onenet.net	(revision 11920)
+++ hub.cla.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at CLAREMORE-M120-RE0> show system commit 
+#   2011-05-23 16:55:04 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
 #   2011-05-19 12:38:51 CDT by jeremyt via cli commit synchronize
 #   2011-05-13 12:36:22 CDT by admin via netconf commit synchronize
 #   2011-05-13 12:36:16 CDT by admin via cli commit synchronize
 #   2011-05-05 23:07:16 CDT by jed via cli commit synchronize
 #   2011-04-29 01:01:31 CDT by jeremyt via cli commit synchronize
-#   2011-04-29 00:56:29 CDT by jeremyt via cli commit confirmed, rollback in 4mins synchronize
 # grnoc-mon at CLAREMORE-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -291,7 +291,7 @@
 # grnoc-mon at CLAREMORE-M120-RE0> show system uptime 
 # System booted: 2011-02-28 17:22 CST 
 # Protocols started: 2011-02-28 17:23 CST 
-# Last configured: 2011-05-19 12:38 CDT  by jeremyt
+# Last configured: 2011-05-23 16:55 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at CLAREMORE-M120-RE0> show interface terse 
@@ -400,7 +400,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at CLAREMORE-M120-RE0> show configuration 
-## Last commit: 2011-05-19 12:38:51 CDT by jeremyt
+## Last commit: 2011-05-23 16:55:04 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1115,6 +1115,7 @@
     }
 }
 policy-options {
+    prefix-list EBGP-IPV4-NEIGHBORS;
     policy-statement LOAD-BALANCE {
         then {
             load-balance per-packet;
@@ -1271,11 +1272,22 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     protocol ospf;
                 }
                 then accept;
             }
+            term EBGP-ALLOW {
+                from {
+                    prefix-list {
+                        EBGP-IPV4-NEIGHBORS;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
             term IBGP-ALLOW {
                 from {
                     source-address {
@@ -1296,7 +1308,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh syslog ];
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
                 }
                 then accept;
             }
@@ -1314,6 +1326,7 @@
                 from {
                     source-address {
                         164.58.10.1/32;
+                        164.58.199.0/24;
                     }
                     protocol udp;
                     port ntp;
@@ -1337,6 +1350,7 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     port ldp;
                 }
@@ -1361,6 +1375,13 @@
                 }
                 then accept;
             }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
             term DENY_ALL {
                 then {
                     log;

Index: hub.chi.onenet.net
===================================================================
--- hub.chi.onenet.net	(revision 11912)
+++ hub.chi.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at CHICKASHA-M120-RE0> show system commit 
+#   2011-05-23 16:47:21 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
 #   2011-05-19 12:37:24 CDT by jeremyt via cli commit synchronize
 #   2011-05-13 12:36:33 CDT by admin via netconf commit synchronize
 #   2011-05-13 12:36:15 CDT by admin via cli commit synchronize
 #   2011-05-05 23:07:10 CDT by jed via cli commit synchronize
 #   2011-04-22 11:18:24 CDT by todd via cli commit confirmed, rollback in 1mins synchronize
-#   2011-04-20 12:13:03 CDT by admin via cli commit confirmed, rollback in 4mins synchronize
 # grnoc-mon at CHICKASHA-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -293,7 +293,7 @@
 # grnoc-mon at CHICKASHA-M120-RE0> show system uptime 
 # System booted: 2011-02-14 16:46 CST 
 # Protocols started: 2011-02-14 16:47 CST 
-# Last configured: 2011-05-19 12:37 CDT  by jeremyt
+# Last configured: 2011-05-23 16:47 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at CHICKASHA-M120-RE0> show interface terse 
@@ -435,7 +435,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at CHICKASHA-M120-RE0> show configuration 
-## Last commit: 2011-05-19 12:37:24 CDT by jeremyt
+## Last commit: 2011-05-23 16:47:21 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1209,6 +1209,7 @@
     }
 }
 policy-options {
+    prefix-list EBGP-IPV4-NEIGHBORS;
     policy-statement LOAD-BALANCE {
         then {
             load-balance per-packet;
@@ -1372,6 +1373,39 @@
                 then accept;
             }
         }
+        filter USAO-VIDEO {
+            term 1 {
+                from {
+                    source-address {
+                        192.146.206.100/32;
+                    }
+                    destination-address {
+                        0.0.0.0/0;
+                    }
+                }
+                then {
+                    forwarding-class video;
+                    accept;
+                }
+            }
+            term 2 {
+                from {
+                    source-address {
+                        0.0.0.0/0;
+                    }
+                    destination-address {
+                        192.146.206.100/32;
+                    }
+                }
+                then {
+                    forwarding-class video;
+                    accept;
+                }
+            }
+            term 3 {
+                then accept;
+            }
+        }
         filter PROTECT-RE {
             term SERVICES {
                 from {
@@ -1396,11 +1430,22 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     protocol ospf;
                 }
                 then accept;
             }
+            term EBGP-ALLOW {
+                from {
+                    prefix-list {
+                        EBGP-IPV4-NEIGHBORS;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
             term IBGP-ALLOW {
                 from {
                     source-address {
@@ -1421,7 +1466,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh ];
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
                 }
                 then accept;
             }
@@ -1439,6 +1484,7 @@
                 from {
                     source-address {
                         164.58.10.1/32;
+                        164.58.199.0/24;
                     }
                     protocol udp;
                     port ntp;
@@ -1462,6 +1508,7 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     port ldp;
                 }
@@ -1486,6 +1533,13 @@
                 }
                 then accept;
             }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
             term DENY_ALL {
                 then {
                     log;
@@ -1494,39 +1548,6 @@
                 }
             }
         }
-        filter USAO-VIDEO {
-            term 1 {
-                from {
-                    source-address {
-                        192.146.206.100/32;
-                    }
-                    destination-address {
-                        0.0.0.0/0;
-                    }
-                }
-                then {
-                    forwarding-class video;
-                    accept;
-                }
-            }
-            term 2 {
-                from {
-                    source-address {
-                        0.0.0.0/0;
-                    }
-                    destination-address {
-                        192.146.206.100/32;
-                    }
-                }
-                then {
-                    forwarding-class video;
-                    accept;
-                }
-            }
-            term 3 {
-                then accept;
-            }
-        }
     }
 }
 {master}

Index: hub.dunc.onenet.net
===================================================================
--- hub.dunc.onenet.net	(revision 11859)
+++ hub.dunc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at DUNCAN-M120-RE0> show system commit 
+#   2011-05-23 16:58:31 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
 #   2011-05-19 14:56:37 CDT by joe via cli commit synchronize
 #   2011-05-19 14:23:02 CDT by jeremyt via cli commit synchronize
 #   2011-05-19 10:45:51 CDT by joe via cli commit synchronize
 #   2011-05-13 12:36:23 CDT by admin via netconf commit synchronize
 #   2011-05-13 12:36:15 CDT by admin via cli commit synchronize
-#   2011-05-05 23:07:22 CDT by jed via cli commit synchronize
 # grnoc-mon at DUNCAN-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -294,7 +294,7 @@
 # grnoc-mon at DUNCAN-M120-RE0> show system uptime 
 # System booted: 2011-03-10 11:46 CST 
 # Protocols started: 2011-03-10 11:48 CST 
-# Last configured: 2011-05-19 14:56 CDT  by joe
+# Last configured: 2011-05-23 16:58 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at DUNCAN-M120-RE0> show interface terse 
@@ -420,7 +420,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at DUNCAN-M120-RE0> show configuration 
-## Last commit: 2011-05-19 14:56:37 CDT by joe
+## Last commit: 2011-05-23 16:58:31 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1180,6 +1180,7 @@
     }
 }
 policy-options {
+    prefix-list EBGP-IPV4-NEIGHBORS;
     policy-statement LOAD-BALANCE {
         then {
             load-balance per-packet;
@@ -1334,11 +1335,22 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     protocol ospf;
                 }
                 then accept;
             }
+            term EBGP-ALLOW {
+                from {
+                    prefix-list {
+                        EBGP-IPV4-NEIGHBORS;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
             term IBGP-ALLOW {
                 from {
                     source-address {
@@ -1359,7 +1371,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh ];
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
                 }
                 then accept;
             }
@@ -1377,6 +1389,7 @@
                 from {
                     source-address {
                         164.58.10.1/32;
+                        164.58.199.0/24;
                     }
                     protocol udp;
                     port ntp;
@@ -1400,6 +1413,7 @@
                     source-address {
                         164.58.199.0/24;
                         164.58.0.0/16;
+                        156.110.0.0/16;
                     }
                     port ldp;
                 }
@@ -1424,6 +1438,13 @@
                 }
                 then accept;
             }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
             term DENY_ALL {
                 then {
                     log;

Index: hub.elr.onenet.net
===================================================================
--- hub.elr.onenet.net	(revision 11922)
+++ hub.elr.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at EL-RENO-M120-RE0> show system commit 
+#   2011-05-23 16:03:39 CDT by admin via netconf commit synchronize
+#   2011-05-23 16:03:33 CDT by admin via netconf commit synchronize
+#   2011-05-23 16:03:16 CDT by jeremyt via cli commit confirmed, rollback in 1mins synchronize
 #   2011-05-23 15:54:27 CDT by admin via netconf commit synchronize
 #   2011-05-23 15:54:22 CDT by admin via netconf commit synchronize
 #   2011-05-23 15:54:05 CDT by admin via netconf commit synchronize
-#   2011-05-23 15:54:00 CDT by admin via netconf commit synchronize
-#   2011-05-19 14:34:52 CDT by jeremyt via cli commit synchronize
-#   2011-05-13 12:36:24 CDT by admin via netconf commit synchronize
 # grnoc-mon at EL-RENO-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -293,7 +293,7 @@
 # grnoc-mon at EL-RENO-M120-RE0> show system uptime 
 # System booted: 2011-02-22 16:32 CST 
 # Protocols started: 2011-02-22 16:34 CST 
-# Last configured: 2011-05-23 15:54 CDT  by admin
+# Last configured: 2011-05-23 16:03 CDT  by admin
 # 
 # {master}
 # grnoc-mon at EL-RENO-M120-RE0> show interface terse 
@@ -441,7 +441,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at EL-RENO-M120-RE0> show configuration 
-## Last commit: 2011-05-23 15:54:27 CDT by admin
+## Last commit: 2011-05-23 16:03:39 CDT by admin
 version 10.4R2.6;
 groups {
     re0 {
@@ -1056,7 +1056,7 @@
         unit 0 {
             description EL-RENO-M120-Loopback;
             family inet {
-                filter {
+                inactive: filter {
                     input PROTECT-RE;
                 }
                 address 164.58.199.6/32;

Index: hub.ida.onenet.net
===================================================================
--- hub.ida.onenet.net	(revision 11923)
+++ hub.ida.onenet.net	(working copy)
@@ -1,13 +1,13 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at IDABEL-M120-RE0> show system commit 
+#   2011-05-23 16:11:56 CDT by jeremyt via cli commit synchronize
 #   2011-05-19 14:41:33 CDT by jeremyt via cli commit synchronize
 #   2011-05-17 09:38:34 CDT by root via other
 #     Synchronization with remote Routing Engine
 #   2011-05-13 12:36:23 CDT by admin via netconf commit synchronize
 #   2011-05-13 12:36:15 CDT by admin via cli commit synchronize
 #   2011-05-10 13:14:52 CDT by smclean via cli commit synchronize
-#   2011-05-10 13:12:20 CDT by smclean via cli commit synchronize
 # grnoc-mon at IDABEL-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -292,7 +292,7 @@
 # grnoc-mon at IDABEL-M120-RE0> show system uptime 
 # System booted: 2011-05-17 09:36 CDT 
 # Protocols started: 2011-05-17 09:38 CDT 
-# Last configured: 2011-05-19 14:41 CDT  by jeremyt
+# Last configured: 2011-05-23 16:11 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at IDABEL-M120-RE0> show interface terse 
@@ -414,7 +414,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at IDABEL-M120-RE0> show configuration 
-## Last commit: 2011-05-19 14:41:33 CDT by jeremyt
+## Last commit: 2011-05-23 16:11:56 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1439,7 +1439,8 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh ];
+                    protocol tcp;
+                    source-port [ domain ntp ssh 7804 ];
                 }
                 then accept;
             }

Index: hub.alv.onenet.net
===================================================================
--- hub.alv.onenet.net	(revision 11590)
+++ hub.alv.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ALVA-M120-RE0> show system commit 
+#   2011-05-23 16:28:59 CDT by jeremyt via cli commit synchronize
+#   2011-05-23 16:28:23 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
 #   2011-05-19 12:31:32 CDT by jeremyt via cli commit synchronize
 #   2011-05-14 23:56:05 CDT by admin via cli commit synchronize
 #   2011-05-14 22:55:24 CDT by jeremyt via cli commit confirmed, rollback in 5mins synchronize
 #   2011-05-13 12:36:23 CDT by admin via netconf commit synchronize
-#   2011-05-13 12:36:15 CDT by admin via cli commit synchronize
-#   2011-05-06 11:48:31 CDT by joe via cli commit synchronize
 # grnoc-mon at ALVA-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -293,7 +293,7 @@
 # grnoc-mon at ALVA-M120-RE0> show system uptime 
 # System booted: 2011-04-15 20:34 CDT 
 # Protocols started: 2011-04-15 20:36 CDT 
-# Last configured: 2011-05-19 12:31 CDT  by jeremyt
+# Last configured: 2011-05-23 16:28 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at ALVA-M120-RE0> show interface terse 
@@ -397,7 +397,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at ALVA-M120-RE0> show configuration 
-## Last commit: 2011-05-19 12:31:32 CDT by jeremyt
+## Last commit: 2011-05-23 16:28:59 CDT by jeremyt
 version 10.4R2.6;
 groups {
     re0 {
@@ -1081,7 +1081,7 @@
             }
             term SERVICES-OUTBOUND {
                 from {
-                    source-port [ domain ntp ssh syslog ];
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
                 }
                 then accept;
             }
@@ -1099,6 +1099,7 @@
                 from {
                     source-address {
                         164.58.10.1/32;
+                        164.58.199.0/24;
                     }
                     protocol udp;
                     port ntp;

Index: core3.okc-m120.onenet.net
===================================================================
--- core3.okc-m120.onenet.net	(revision 11925)
+++ core3.okc-m120.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE3-M120-RE0> show system commit 
+#   2011-05-23 16:21:58 CDT by bobby via cli commit synchronize
+#   2011-05-23 16:17:33 CDT by bobby via cli commit synchronize
+#   2011-05-23 16:10:58 CDT by smclean via cli commit synchronize
 #   2011-05-19 15:52:21 CDT by smclean via cli commit synchronize
 #   2011-05-19 15:48:32 CDT by smclean via cli commit synchronize
 #   2011-05-19 14:49:35 CDT by joe via cli commit synchronize
-#   2011-05-19 10:48:14 CDT by joe via cli commit synchronize
-#   2011-05-19 10:43:29 CDT by smclean via cli commit synchronize
-#   2011-05-19 10:39:58 CDT by joe via cli commit synchronize
 # grnoc-mon at OKC-CORE3-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -386,7 +386,7 @@
 # grnoc-mon at OKC-CORE3-M120-RE0> show system uptime 
 # System booted: 2011-04-16 20:36 CDT 
 # Protocols started: 2011-04-16 20:37 CDT 
-# Last configured: 2011-05-19 15:52 CDT  by smclean
+# Last configured: 2011-05-23 16:21 CDT  by bobby
 # 
 # {master}
 # grnoc-mon at OKC-CORE3-M120-RE0> show interface terse 
@@ -664,6 +664,7 @@
 #t1-2/3/0:5:14 up up
 #t1-2/3/0:5:14.0 up up
 #t1-2/3/0:5:15 up down
+#t1-2/3/0:5:15.0 up down
 #t1-2/3/0:5:16 up up
 #t1-2/3/0:5:16.0 up up
 #t1-2/3/0:5:17 up down
@@ -981,6 +982,7 @@
 #coc1-2/3/0:12 up up
 #ct3-2/3/0:12 up up
 #t1-2/3/0:12:1 up down
+#t1-2/3/0:12:1.0 up down
 #t1-2/3/0:12:2 up down
 #t1-2/3/0:12:3 up down
 #t1-2/3/0:12:4 up down
@@ -1064,8 +1066,8 @@
 #t1-3/3/0:1:9.0 up up
 #t1-3/3/0:1:10 up up
 #t1-3/3/0:1:10.0 up up
-#t1-3/3/0:1:11 up down
-#t1-3/3/0:1:11.0 up down
+#t1-3/3/0:1:11 up up
+#t1-3/3/0:1:11.0 up up
 #t1-3/3/0:1:12 up up
 #t1-3/3/0:1:12.0 up up
 #t1-3/3/0:1:13 up down
@@ -1315,8 +1317,8 @@
 #t1-3/3/0:6:2.0 up up
 #t1-3/3/0:6:3 up up
 #t1-3/3/0:6:3.0 up up
-#t1-3/3/0:6:4 up up
-#t1-3/3/0:6:4.0 up up
+#t1-3/3/0:6:4 up down
+#t1-3/3/0:6:4.0 up down
 #t1-3/3/0:6:5 up up
 #t1-3/3/0:6:5.0 up up
 #t1-3/3/0:6:6 up up
@@ -1363,8 +1365,8 @@
 #t1-3/3/0:6:26.0 up up
 #t1-3/3/0:6:27 up up
 #t1-3/3/0:6:27.0 up up
-#t1-3/3/0:6:28 up down
-#t1-3/3/0:6:28.0 up down
+#t1-3/3/0:6:28 up up
+#t1-3/3/0:6:28.0 up up
 #coc1-3/3/0:7 up up
 #ct3-3/3/0:7 up up
 #t1-3/3/0:7:1 up down
@@ -1635,8 +1637,8 @@
 #t1-3/3/0:12:15.0 up up
 #t1-3/3/0:12:16 up up
 #t1-3/3/0:12:16.0 up up
-#t1-3/3/0:12:17 up down
-#t1-3/3/0:12:17.0 up down
+#t1-3/3/0:12:17 up up
+#t1-3/3/0:12:17.0 up up
 #t1-3/3/0:12:18 up up
 #t1-3/3/0:12:18.0 up up
 #t1-3/3/0:12:19 up up
@@ -2165,7 +2167,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE3-M120-RE0> show configuration 
-## Last commit: 2011-05-19 15:52:21 CDT by smclean
+## Last commit: 2011-05-23 16:21:58 CDT by bobby
 version 10.4R2.6;
 groups {
     re0 {
@@ -3572,6 +3574,15 @@
             }
         }
     }
+    t1-2/3/0:5:15 {
+        description Bethel-Schools-T1-CIR0004325;
+        encapsulation cisco-hdlc;
+        unit 0 {
+            family inet {
+                address 164.58.3.81/30;
+            }
+        }
+    }
     t1-2/3/0:5:16 {
         description ARNG-Frederick-T1-CIR0004090;
         encapsulation cisco-hdlc;
@@ -4743,6 +4754,15 @@
         }
         partition 1-28 interface-type t1;
     }
+    t1-2/3/0:12:1 {
+        description test-T1;
+        encapsulation cisco-hdlc;
+        unit 0 {
+            family inet {
+                address 10.10.10.1/24;
+            }
+        }
+    }
     t3-2/3/3 {
         unit 0 {
             family inet {

Index: hub.wil.onenet.net
===================================================================
--- hub.wil.onenet.net	(revision 11747)
+++ hub.wil.onenet.net	(working copy)
@@ -328,8 +328,8 @@
 #t1-2/0/2:13.0 up up
 #t1-2/0/2:14 up up
 #t1-2/0/2:14.0 up up
-#t1-2/0/2:15 up down
-#t1-2/0/2:15.0 up down
+#t1-2/0/2:15 up up
+#t1-2/0/2:15.0 up up
 #t1-2/0/2:16 up up
 #t1-2/0/2:16.0 up up
 #t1-2/0/2:17 up up


More information about the Nocrancid mailing list