[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Tue Apr 23 18:00:57 CDT 2013
Index: core1.okc-mx960.onenet.net
===================================================================
--- core1.okc-mx960.onenet.net (revision 59583)
+++ core1.okc-mx960.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE1-MX960-RE0> show system commit
-# 2013-04-23 15:38:28 CDT by rnordmark via cli commit synchronize
-# 2013-04-23 13:28:22 CDT by jeremyt via cli commit synchronize
-# 2013-04-22 15:56:02 CDT by joel via cli commit synchronize
-# 2013-04-22 13:09:05 CDT by joel via cli commit synchronize
-# 2013-04-18 09:36:50 CDT by rnordmark via cli commit synchronize
-# 2013-04-14 01:31:51 CDT by jeremyt via cli commit synchronize
+# 2013-04-23 17:58:14 CDT by rnordmark via cli commit synchronize
+# 2013-04-23 17:50:04 CDT by rnordmark via cli commit synchronize
+# 2013-04-23 17:39:06 CDT by rnordmark via cli commit synchronize
+# 2013-04-23 17:36:37 CDT by rnordmark via cli commit synchronize
+# 2013-04-23 17:33:59 CDT by rnordmark via cli commit synchronize
+# 2013-04-23 17:31:38 CDT by rnordmark via cli commit synchronize
# grnoc-mon at OKC-CORE1-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -432,7 +432,7 @@
# grnoc-mon at OKC-CORE1-MX960-RE0> show system uptime
# System booted: 2013-04-13 23:52 CDT
# Protocols started: 2013-04-13 23:53 CDT
-# Last configured: 2013-04-23 15:38 CDT by rnordmark
+# Last configured: 2013-04-23 17:58 CDT by rnordmark
#
# {master}
# grnoc-mon at OKC-CORE1-MX960-RE0> show interface terse
@@ -629,7 +629,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE1-MX960-RE0> show configuration
-## Last commit: 2013-04-23 15:38:28 CDT by rnordmark
+## Last commit: 2013-04-23 17:58:14 CDT by rnordmark
version 11.4R7.5;
groups {
re0 {
@@ -806,7 +806,7 @@
flag all;
}
xe-0/0/0 {
- description "CORE 10GE to core1.okc ??? ";
+ description "CORE 10GE to core2.okc xe-0/0/0 | OneNet-OKC-OKC-XE-4448";
vlan-tagging;
mtu 9192;
encapsulation flexible-ethernet-services;
@@ -1066,6 +1066,9 @@
}
address 164.58.15.201/30;
}
+ family inet6 {
+ address 2610:1d8:1000::a/127;
+ }
family mpls;
}
}
@@ -1717,13 +1720,55 @@
ospf3 {
export REDISTRIBUTE-STATICS;
area 0.0.0.0 {
- interface xe-0/1/1.68;
- interface xe-0/0/0.32;
- interface xe-1/0/0.40;
+ interface xe-0/1/1.68 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/0.32 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/0.40 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
interface xe-1/0/0.44;
- interface xe-0/0/1.36;
- interface ge-0/2/0.48;
- interface xe-1/0/1.44;
+ interface xe-0/0/1.36 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.48 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/1.44 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
interface irb.920;
interface xe-3/3/1.69;
interface xe-3/3/0.70;
@@ -2134,7 +2179,7 @@
spi 256;
authentication {
algorithm hmac-md5-96;
- key ascii-text "$9$j-qfQB1EleM24UiHqTQO1IclvLx-dw2GDFn/9u07NdVgakqP"; ## SECRET-DATA
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
}
}
}
Index: core6.okc-m7i.onenet.net
===================================================================
--- core6.okc-m7i.onenet.net (revision 58307)
+++ core6.okc-m7i.onenet.net (working copy)
@@ -1,13 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at ROUTE-REFLECTOR-OKC-M7i> show system commit
+# 2013-04-23 17:43:13 CDT by josh via cli
+# 2013-04-23 17:40:29 CDT by rnordmark via cli
# 2013-04-14 01:20:23 CDT by root via other
# 2013-02-19 15:21:35 CST by jeremyt via cli
# 2013-02-19 12:10:23 CST by jeremyt via cli
# 2013-02-07 16:51:26 CST by jeremyt via cli
-# 2013-02-05 15:03:10 CST by admin via netconf
-# %changeType:inband%moduleName:Platform.setSnmpTrapTarget%crId:541890%
-# 2013-02-05 15:01:26 CST by admin via netconf
# grnoc-mon at ROUTE-REFLECTOR-OKC-M7i> show chassis environment
# Class Item Status Measurement
# Power Power Supply 0 OK
@@ -192,7 +191,7 @@
# grnoc-mon at ROUTE-REFLECTOR-OKC-M7i> show system uptime
# System booted: 2013-04-14 01:19 CDT
# Protocols started: 2013-04-14 01:20 CDT
-# Last configured: 2013-04-14 01:20 CDT by root
+# Last configured: 2013-04-23 17:43 CDT by josh
#
# grnoc-mon at ROUTE-REFLECTOR-OKC-M7i> show interface terse
#Interface Admin Link
@@ -236,7 +235,7 @@
#pime up up
#tap up up
# grnoc-mon at ROUTE-REFLECTOR-OKC-M7i> show configuration
-## Last commit: 2013-04-14 01:20:23 CDT by root
+## Last commit: 2013-04-23 17:43:13 CDT by josh
version 11.4R7.5;
groups {
re0 {
@@ -858,8 +857,16 @@
}
ospf3 {
area 0.0.0.0 {
- interface ge-1/3/0.48;
+ interface ge-1/3/0.48 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
interface ge-0/0/0.64;
+ interface lo0.0;
}
}
ldp {
@@ -1082,6 +1089,23 @@
}
}
}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$c6mlMLoaGkqPp0ESyl8L4aJDkmTzn6CpRhxNdV2gF36/uBrlv"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
firewall {
family inet {
filter PROTECT-RE {
Index: core1.tul-mx960.onenet.net
===================================================================
--- core1.tul-mx960.onenet.net (revision 59531)
+++ core1.tul-mx960.onenet.net (working copy)
@@ -1,13 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE1-MX960-RE0> show system commit
+# 2013-04-23 17:50:35 CDT by rnordmark via cli commit synchronize
# 2013-04-18 10:04:13 CDT by joe via cli commit synchronize
# 2013-03-22 15:22:46 CDT by joel via cli commit synchronize
# 2013-03-22 12:03:13 CDT by joel via cli commit synchronize
# 2013-02-22 14:02:37 CST by jeremyt via cli commit synchronize
# 2013-02-07 16:51:32 CST by jeremyt via cli commit synchronize
-# 2013-02-05 15:03:16 CST by admin via netconf commit synchronize
-# %changeType:inband%moduleName:Platform.setSnmpTrapTarget%crId:541904%
# grnoc-mon at TULSA-CORE1-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -387,7 +386,7 @@
# grnoc-mon at TULSA-CORE1-MX960-RE0> show system uptime
# System booted: 2011-11-29 23:30 CST
# Protocols started: 2011-11-29 23:33 CST
-# Last configured: 2013-04-18 10:04 CDT by joe
+# Last configured: 2013-04-23 17:50 CDT by rnordmark
#
# {master}
# grnoc-mon at TULSA-CORE1-MX960-RE0> show interface terse
@@ -509,7 +508,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE1-MX960-RE0> show configuration
-## Last commit: 2013-04-18 10:04:13 CDT by joe
+## Last commit: 2013-04-23 17:50:35 CDT by rnordmark
version 10.4R6.5;
groups {
re0 {
@@ -1348,7 +1347,14 @@
}
ospf3 {
area 0.0.0.0 {
- interface xe-0/1/1.68;
+ interface xe-0/1/1.68 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
interface ae0.112;
interface ge-0/2/0.120;
interface ae2.0;
@@ -1562,6 +1568,23 @@
}
}
}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$j8qfQB1EleM24UiHqTQO1IclvLx-dw2GDFn/9u07NdVgakqP"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
firewall {
family inet {
filter FLOW-INFO {
Index: core5.okc-mx480.onenet.net
===================================================================
--- core5.okc-mx480.onenet.net (revision 59434)
+++ core5.okc-mx480.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE5-MX480-RE0> show system commit
+# 2013-04-23 17:42:41 CDT by josh via cli commit synchronize
+# 2013-04-23 17:36:04 CDT by rnordmark via cli commit synchronize
# 2013-04-22 17:40:10 CDT by joel via cli commit synchronize
# 2013-04-22 13:36:12 CDT by joe via cli commit synchronize
# 2013-04-22 13:31:40 CDT by joe via cli commit synchronize
# 2013-04-22 13:28:55 CDT by joe via cli commit synchronize
-# 2013-04-19 08:44:07 CDT by joe via cli commit synchronize
-# 2013-04-16 09:42:14 CDT by joe via cli commit synchronize
# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -359,7 +359,7 @@
# grnoc-mon at OKC-CORE5-MX480-RE0> show system uptime
# System booted: 2013-04-14 00:44 CDT
# Protocols started: 2013-04-14 00:45 CDT
-# Last configured: 2013-04-22 17:40 CDT by joel
+# Last configured: 2013-04-23 17:42 CDT by josh
#
# {master}
# grnoc-mon at OKC-CORE5-MX480-RE0> show interface terse
@@ -518,7 +518,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE5-MX480-RE0> show configuration
-## Last commit: 2013-04-22 17:40:10 CDT by joel
+## Last commit: 2013-04-23 17:42:41 CDT by josh
version 11.4R7.5;
groups {
re0 {
@@ -1544,8 +1544,16 @@
ospf3 {
area 0.0.0.0 {
interface xe-0/1/0.72;
- interface xe-0/0/0.44;
+ interface xe-0/0/0.44 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
interface xe-1/0/0.60;
+ interface lo0.0;
}
}
ldp {
@@ -1969,6 +1977,23 @@
}
}
}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$qfznEhyMWXaZH.mf3nRhclMLNdwsgaik/Ctp1IVbsYJUPfQ"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
firewall {
family inet {
filter PROTECT-RE {
Index: core2-okc-mx960.onenet.net
===================================================================
--- core2-okc-mx960.onenet.net (revision 59240)
+++ core2-okc-mx960.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE2-MX960-RE0> show system commit
+# 2013-04-23 17:40:22 CDT by josh via cli commit synchronize
+# 2013-04-23 17:28:56 CDT by rnordmark via cli commit synchronize
# 2013-04-14 01:31:46 CDT by jeremyt via cli commit synchronize
# 2013-04-13 23:39:15 CDT by admin via cli commit synchronize
# 2013-04-13 23:43:16 CDT by root via cli commit synchronize
# 2013-04-13 22:27:11 CDT by rnordmark via cli commit synchronize
-# 2013-04-13 09:55:29 CDT by rnordmark via cli commit synchronize
-# 2013-03-28 13:28:36 CDT by jeremyt via cli commit synchronize
# grnoc-mon at OKC-CORE2-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -390,7 +390,7 @@
# grnoc-mon at OKC-CORE2-MX960-RE0> show system uptime
# System booted: 2013-04-13 23:28 CDT
# Protocols started: 2013-04-13 23:31 CDT
-# Last configured: 2013-04-14 01:31 CDT by jeremyt
+# Last configured: 2013-04-23 17:40 CDT by josh
#
# {master}
# grnoc-mon at OKC-CORE2-MX960-RE0> show interface terse
@@ -542,7 +542,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE2-MX960-RE0> show configuration
-## Last commit: 2013-04-14 01:31:46 CDT by jeremyt
+## Last commit: 2013-04-23 17:40:22 CDT by josh
version 11.4R7.5;
groups {
re0 {
@@ -1507,7 +1507,14 @@
}
ospf3 {
area 0.0.0.0 {
- interface xe-0/0/0.32;
+ interface xe-0/0/0.32 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
interface xe-0/1/0.196;
interface xe-1/0/1.60;
interface xe-1/0/0.56;
@@ -1516,6 +1523,7 @@
interface xe-1/2/0.156;
interface xe-0/0/1.52;
interface ge-0/2/0.64;
+ interface lo0.0;
}
}
ldp {
@@ -1947,6 +1955,23 @@
}
}
}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$oNGiqCAuRES-VgaJGkq9AtORclKW8x-24mfTQ6/vM8LdwZGj"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
firewall {
family inet {
filter WEB-FILTER {
Index: core4.tul-mx480.onenet.net
===================================================================
--- core4.tul-mx480.onenet.net (revision 59526)
+++ core4.tul-mx480.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE4-MX480-RE0> show system commit
+# 2013-04-23 17:42:08 CDT by josh via cli commit synchronize
# 2013-04-22 17:31:43 CDT by joel via cli commit synchronize
# 2013-04-15 14:11:06 CDT by joel via cli commit synchronize
# 2013-04-15 11:40:51 CDT by jeremyt via cli commit synchronize
# 2013-04-10 15:38:34 CDT by joe via cli commit synchronize
# 2013-04-09 16:12:16 CDT by jeremyt via cli commit synchronize
-# 2013-04-09 15:56:49 CDT by jeremyt via cli commit synchronize
# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -311,7 +311,7 @@
# grnoc-mon at TULSA-CORE4-MX480-RE0> show system uptime
# System booted: 2011-11-30 00:15 CST
# Protocols started: 2011-11-30 00:19 CST
-# Last configured: 2013-04-22 17:31 CDT by joel
+# Last configured: 2013-04-23 17:42 CDT by josh
#
# {master}
# grnoc-mon at TULSA-CORE4-MX480-RE0> show interface terse
@@ -468,7 +468,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE4-MX480-RE0> show configuration
-## Last commit: 2013-04-22 17:31:43 CDT by joel
+## Last commit: 2013-04-23 17:42:08 CDT by josh
version 10.4R6.5;
groups {
re0 {
@@ -1714,6 +1714,7 @@
interface xe-1/0/0.132;
interface xe-0/1/1.148;
inactive: interface ae0.112;
+ interface lo0.0;
}
}
ldp {
Index: core4-mx480.onenet.net
===================================================================
--- core4-mx480.onenet.net (revision 59408)
+++ core4-mx480.onenet.net (working copy)
@@ -1,13 +1,13 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE4-MX480-RE0> show system commit
+# 2013-04-23 17:34:40 CDT by rnordmark via cli commit synchronize
# 2013-04-22 13:44:51 CDT by joe via cli commit synchronize
# 2013-04-15 11:38:59 CDT by jeremyt via cli commit synchronize
# 2013-04-14 00:59:09 CDT by root via other
# Synchronization with remote Routing Engine
# 2013-04-14 00:58:42 CDT by root via other
# 2013-04-13 22:30:44 CDT by rnordmark via cli commit synchronize
-# 2013-04-13 09:54:04 CDT by rnordmark via cli commit synchronize
# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -353,7 +353,7 @@
# grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime
# System booted: 2013-04-14 01:08 CDT
# Protocols started: 2013-04-14 01:10 CDT
-# Last configured: 2013-04-22 13:44 CDT by joe
+# Last configured: 2013-04-23 17:34 CDT by rnordmark
#
# grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse
#Interface Admin Link
@@ -544,7 +544,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE4-MX480-RE0> show configuration
-## Last commit: 2013-04-22 13:44:51 CDT by joe
+## Last commit: 2013-04-23 17:34:40 CDT by rnordmark
version 11.4R7.5;
groups {
re0 {
@@ -2004,7 +2004,14 @@
ospf3 {
export IPV6-EXPORT-FROM-BGPV6-TO-OSPFV3;
area 0.0.0.0 {
- interface xe-0/0/0.40;
+ interface xe-0/0/0.40 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
interface xe-0/1/0.72;
interface xe-0/0/1.201;
interface xe-1/0/1.56;
@@ -2616,6 +2623,23 @@
}
}
}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$wpgJUF3/u018XVsYgGUz3nCuBEcrlv8dbjHq.TQSyleL72ga"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
firewall {
family inet {
filter FLOW-INFO {
Index: core3.okc-m120.onenet.net
===================================================================
--- core3.okc-m120.onenet.net (revision 59617)
+++ core3.okc-m120.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE3-M120-RE0> show system commit
+# 2013-04-23 17:41:18 CDT by josh via cli commit synchronize
+# 2013-04-23 17:31:30 CDT by rnordmark via cli commit synchronize
# 2013-04-23 15:16:03 CDT by joe via cli commit synchronize
# 2013-04-23 13:54:01 CDT by joel via cli commit synchronize
# 2013-04-23 12:42:24 CDT by joe via cli commit synchronize
# 2013-04-23 10:27:27 CDT by joe via cli commit synchronize
-# 2013-04-23 10:26:21 CDT by joe via cli commit synchronize
-# 2013-04-23 10:25:07 CDT by joe via cli commit synchronize
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -366,7 +366,7 @@
# grnoc-mon at OKC-CORE3-M120-RE0> show system uptime
# System booted: 2013-04-14 00:17 CDT
# Protocols started: 2013-04-14 00:30 CDT
-# Last configured: 2013-04-23 15:16 CDT by joe
+# Last configured: 2013-04-23 17:41 CDT by josh
#
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show interface terse
@@ -396,7 +396,7 @@
#t3-2/0/3 up up
#t3-2/0/3.0 up up
#ct3-2/1/0 down up
-#t3-2/1/0 down up
+#t3-2/1/0 down down
#ct3-2/1/1 up up
#t3-2/1/1 up up
#t3-2/1/1.0 up up
@@ -433,8 +433,8 @@
#t1-2/3/0:1:6.0 up up
#t1-2/3/0:1:7 up up
#t1-2/3/0:1:7.0 up up
-#t1-2/3/0:1:8 up down
-#t1-2/3/0:1:8.0 up down
+#t1-2/3/0:1:8 up up
+#t1-2/3/0:1:8.0 up up
#t1-2/3/0:1:9 up up
#t1-2/3/0:1:9.0 up up
#t1-2/3/0:1:10 up down
@@ -2046,7 +2046,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE3-M120-RE0> show configuration
-## Last commit: 2013-04-23 15:16:03 CDT by joe
+## Last commit: 2013-04-23 17:41:18 CDT by josh
version 11.4R7.5;
groups {
re0 {
@@ -9349,8 +9349,16 @@
}
ospf3 {
area 0.0.0.0 {
- interface xe-0/0/0.36;
+ interface xe-0/0/0.36 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
interface xe-1/0/0.52;
+ interface lo0.0;
}
}
ldp {
@@ -9813,6 +9821,23 @@
}
}
}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$O5QDRSlbw2ZGjn/uB1RrlVws4ZDk.f5znp0KM8L-dmP5T6CIRc"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
firewall {
family inet {
filter FLOW-INFO {
Index: hub.wea.onenet.net
===================================================================
--- hub.wea.onenet.net (revision 59631)
+++ hub.wea.onenet.net (working copy)
@@ -276,8 +276,8 @@
#Interface Admin Link
#ct3-2/0/0 up up
#t3-2/0/0 down up
-#ct3-2/0/1 down up
-#t3-2/0/1 down up
+#ct3-2/0/1 down down
+#t3-2/0/1 down down
#ct3-2/0/2 up up
#t1-2/0/2:1 down down
#t1-2/0/2:2 down down
More information about the Nocrancid
mailing list