[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Tue May 24 16:00:38 CDT 2011
Index: core1.okccc-mx480.onenet.net
===================================================================
--- core1.okccc-mx480.onenet.net (revision 11442)
+++ core1.okccc-mx480.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKCCC-MX960-RE0> show system commit
+# 2011-05-24 15:02:21 CDT by jeremyt via cli commit confirmed, rollback in 3mins synchronize
# 2011-05-17 11:40:47 CDT by von via cli commit confirmed, rollback in 1mins synchronize
# 2011-05-16 11:08:06 CDT by cjensen via cli commit synchronize
# 2011-05-13 13:16:36 CDT by jed via cli commit synchronize
# 2011-05-13 12:36:22 CDT by admin via netconf commit synchronize
# 2011-05-13 12:36:14 CDT by admin via cli commit synchronize
-# 2011-05-13 11:53:41 CDT by jed via cli commit synchronize
# grnoc-mon at OKCCC-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -344,7 +344,7 @@
# grnoc-mon at OKCCC-MX960-RE0> show system uptime
# System booted: 2011-03-27 20:14 CDT
# Protocols started: 2011-04-05 14:57 CDT
-# Last configured: 2011-05-17 11:40 CDT by von
+# Last configured: 2011-05-24 15:02 CDT by jeremyt
#
# {master}
# grnoc-mon at OKCCC-MX960-RE0> show interface terse
@@ -415,7 +415,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKCCC-MX960-RE0> show configuration
-## Last commit: 2011-05-17 11:40:47 CDT by von
+## Last commit: 2011-05-24 15:02:21 CDT by jeremyt
version 10.4R3.4;
groups {
re0 {
@@ -822,6 +822,7 @@
}
}
policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
policy-statement LOAD-BALANCE {
then {
load-balance per-packet;
@@ -900,6 +901,24 @@
}
firewall {
family inet {
+ filter FLOW-INFO {
+ term ALL_FLOW {
+ from {
+ source-address {
+ 0.0.0.0/0;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then sample;
+ }
+ term REJECT_ALL {
+ then {
+ reject;
+ }
+ }
+ }
filter PROTECT-RE {
term SERVICES {
from {
@@ -923,14 +942,25 @@
from {
source-address {
164.58.199.0/24;
- 164.58.15.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
}
protocol ospf;
}
then accept;
}
- term IBGP-allow {
+ term EBGP-ALLOW {
from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
source-address {
164.58.199.216/32;
164.58.199.226/32;
@@ -949,7 +979,7 @@
}
term SERVICES-OUTBOUND {
from {
- source-port [ domain ntp ssh ];
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
}
then accept;
}
@@ -967,6 +997,7 @@
from {
source-address {
164.58.10.1/32;
+ 164.58.199.0/24;
}
protocol udp;
port ntp;
@@ -989,7 +1020,8 @@
from {
source-address {
164.58.199.0/24;
- 164.58.15.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
}
port ldp;
}
@@ -998,7 +1030,7 @@
from {
source-address {
164.58.199.0/24;
- 164.58.15.0/24;
+ 164.58.0.0/16;
}
protocol pim;
}
@@ -1007,13 +1039,20 @@
term BFD-ALLOW {
from {
source-address {
- 164.58.15.0/24;
+ 164.58.0.0/16;
}
protocol udp;
port [ 3784 3785 ];
}
then accept;
}
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
term DENY_ALL {
then {
log;
@@ -1022,24 +1061,6 @@
}
}
}
- filter FLOW-INFO {
- term ALL_FLOW {
- from {
- source-address {
- 0.0.0.0/0;
- }
- destination-address {
- 0.0.0.0/0;
- }
- }
- then sample;
- }
- term REJECT_ALL {
- then {
- reject;
- }
- }
- }
}
}
inactive: services {
Index: hub.bar.onenet.net
===================================================================
--- hub.bar.onenet.net (revision 11933)
+++ hub.bar.onenet.net (working copy)
@@ -361,8 +361,8 @@
#t1-2/0/3:11.0 up up
#t1-2/0/3:12 up up
#t1-2/0/3:12.0 up up
-#t1-2/0/3:13 up up
-#t1-2/0/3:13.0 up up
+#t1-2/0/3:13 up down
+#t1-2/0/3:13.0 up down
#t1-2/0/3:14 up up
#t1-2/0/3:14.0 up up
#t1-2/0/3:15 up down
Index: hub.elr.onenet.net
===================================================================
--- hub.elr.onenet.net (revision 11945)
+++ hub.elr.onenet.net (working copy)
@@ -321,8 +321,8 @@
#t1-2/0/2:10.0 up up
#t1-2/0/2:11 up down
#t1-2/0/2:11.0 up down
-#t1-2/0/2:12 up up
-#t1-2/0/2:12.0 up up
+#t1-2/0/2:12 up down
+#t1-2/0/2:12.0 up down
#t1-2/0/2:13 up up
#t1-2/0/2:13.0 up up
#t1-2/0/2:14 up down
Index: hub.ard.onenet.net
===================================================================
--- hub.ard.onenet.net (revision 12036)
+++ hub.ard.onenet.net (working copy)
@@ -362,8 +362,8 @@
#t1-2/0/3:4.0 up down
#t1-2/0/3:5 up up
#t1-2/0/3:5.0 up up
-#t1-2/0/3:6 up down
-#t1-2/0/3:6.0 up down
+#t1-2/0/3:6 up up
+#t1-2/0/3:6.0 up up
#t1-2/0/3:7 up up
#t1-2/0/3:7.0 up up
#t1-2/0/3:8 up up
Index: hub.wea.onenet.net
===================================================================
--- hub.wea.onenet.net (revision 11967)
+++ hub.wea.onenet.net (working copy)
@@ -313,8 +313,8 @@
#t1-2/0/2:4 up down
#t1-2/0/2:5 up down
#t1-2/0/2:6 up down
-#t1-2/0/2:7 up up
-#t1-2/0/2:7.0 up up
+#t1-2/0/2:7 up down
+#t1-2/0/2:7.0 up down
#t1-2/0/2:8 up down
#t1-2/0/2:9 up down
#t1-2/0/2:10 up down
Index: core3.okc-m120.onenet.net
===================================================================
--- core3.okc-m120.onenet.net (revision 12034)
+++ core3.okc-m120.onenet.net (working copy)
@@ -1287,8 +1287,8 @@
#t1-3/3/0:5:14.0 up up
#t1-3/3/0:5:15 up up
#t1-3/3/0:5:15.0 up up
-#t1-3/3/0:5:16 up up
-#t1-3/3/0:5:16.0 up up
+#t1-3/3/0:5:16 up down
+#t1-3/3/0:5:16.0 up down
#t1-3/3/0:5:17 up up
#t1-3/3/0:5:17.0 up up
#t1-3/3/0:5:18 up down
@@ -1500,8 +1500,8 @@
#t1-3/3/0:9:16.0 up up
#t1-3/3/0:9:17 up up
#t1-3/3/0:9:17.0 up up
-#t1-3/3/0:9:18 up up
-#t1-3/3/0:9:18.0 up up
+#t1-3/3/0:9:18 up down
+#t1-3/3/0:9:18.0 up down
#t1-3/3/0:9:19 up up
#t1-3/3/0:9:19.0 up up
#t1-3/3/0:9:20 up up
Index: opt3.sti.onenet.net
===================================================================
--- opt3.sti.onenet.net (revision 11358)
+++ opt3.sti.onenet.net (working copy)
@@ -2,10 +2,7 @@
<opt>
<part description="ONS15454" hw_version="A0" part_id="ONS15454" part_num="800-19857-05" serial_number="SMA07500621" slot="BP" vendor_id="Cisco">
<part name="SLOT-1" description="DS3-12E" hw_version="C0" part_id="DS3-12E" part_num="800-23515-01" serial_number="SAG07477TTB" slot="SLOT-1" vendor_id="Cisco"></part>
- <part name="SLOT-2" description="ML1000-2" hw_version="B0" part_id="ML1000-2" part_num="800-19623-01" serial_number="SAG07467R9Z" slot="SLOT-2" vendor_id="Cisco">
- <interface name="FAC-2-0" abbr_name="FAC-2-0" admin_state="down" spanning_tree_metric="" description="Stillwater1 g5/1" type="FAC" monitoring_state="no-monitor"></interface>
- <interface name="FAC-2-1" abbr_name="FAC-2-1" admin_state="down" spanning_tree_metric="" description="Stillwater1 g4/5" type="FAC" monitoring_state="no-monitor"></interface>
- </part>
+ <part name="SLOT-2" description="ML1000-2" hw_version="B0" part_id="ML1000-2" part_num="800-19623-01" serial_number="SAG07467R9Z" slot="SLOT-2" vendor_id="Cisco"></part>
<part name="SLOT-3" description="DS3N-12E" hw_version="C0" part_id="DS3N-12E" part_num="800-23516-01" serial_number="SAG07497X6X" slot="SLOT-3" vendor_id="Cisco"></part>
<part name="SLOT-6" description="OC-192SR/STM-64IO" hw_version="D0" part_id="OC-192SR/STM-64IO" part_num="800-09258-01" serial_number="CNH080900B4" slot="SLOT-6" vendor_id="Cisco">
<interface name="FAC-6-1" abbr_name="FAC-6-1" admin_state="up" spanning_tree_metric="" description="" type="FAC" monitoring_state="monitor"></interface>
@@ -17,10 +14,7 @@
<part name="SLOT-12" description="OC-192SR/STM-64IO" hw_version="D0" part_id="OC-192SR/STM-64IO" part_num="800-09258-01" serial_number="CNH080900B7" slot="SLOT-12" vendor_id="Cisco">
<interface name="FAC-12-1" abbr_name="FAC-12-1" admin_state="up" spanning_tree_metric="" description="" type="FAC" monitoring_state="monitor"></interface>
</part>
- <part name="SLOT-16" description="ML1000-2" hw_version="B0" part_id="ML1000-2" part_num="800-19623-01" serial_number="SAG07467RD5" slot="SLOT-16" vendor_id="Cisco">
- <interface name="FAC-16-0" abbr_name="FAC-16-0" admin_state="down" spanning_tree_metric="" description="Stillwater1 g6/1" type="FAC" monitoring_state="no-monitor"></interface>
- <interface name="FAC-16-1" abbr_name="FAC-16-1" admin_state="down" spanning_tree_metric="" description="Stillwater1 g4/6" type="FAC" monitoring_state="no-monitor"></interface>
- </part>
+ <part name="SLOT-16" description="ML1000-2" hw_version="B0" part_id="ML1000-2" part_num="800-19623-01" serial_number="SAG07467RD5" slot="SLOT-16" vendor_id="Cisco"></part>
<part name="AIP" description="AIP" hw_version="A1" part_id="AIP" part_num="73-7665-01" serial_number="SMA07445606" slot="AIP" vendor_id="Cisco"></part>
<part name="FAN-1" description="FTA" hw_version="A0" part_id="FTA" part_num="800-21448-03" serial_number="SMA07521211" slot="FAN-1" vendor_id="Cisco"></part>
</part>
More information about the Nocrancid
mailing list