[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Tue Apr 23 19:00:51 CDT 2013


Index: core1.nor-mx480.onenet.net
===================================================================
--- core1.nor-mx480.onenet.net	(revision 59593)
+++ core1.nor-mx480.onenet.net	(working copy)
@@ -1,13 +1,13 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at NORMAN1-MX480-RE0> show system commit 
+#   2013-04-23 18:03:27 CDT by josh via cli commit synchronize
+#   2013-04-23 18:01:16 CDT by josh via cli commit synchronize
 #   2013-04-23 16:16:04 CDT by josh via cli commit synchronize
 #   2013-04-22 15:18:05 CDT by rnordmark via cli commit synchronize
 #   2013-04-21 02:00:32 CDT by jeremyt via synchronize
 #   2013-04-21 01:57:40 CDT by root via other
 #     Synchronization with remote Routing Engine
-#   2013-04-21 01:56:00 CDT by root via other
-#   2013-04-21 00:39:59 CDT by admin via cli commit synchronize
 # grnoc-mon at NORMAN1-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -310,7 +310,7 @@
 # grnoc-mon at NORMAN1-MX480-RE0> show system uptime 
 # System booted: 2013-04-21 01:54 CDT 
 # Protocols started: 2013-04-21 01:59 CDT 
-# Last configured: 2013-04-23 16:16 CDT  by josh
+# Last configured: 2013-04-23 18:03 CDT  by josh
 # 
 # {master}
 # grnoc-mon at NORMAN1-MX480-RE0> show interface terse 
@@ -423,7 +423,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at NORMAN1-MX480-RE0> show configuration 
-## Last commit: 2013-04-23 16:16:04 CDT by josh
+## Last commit: 2013-04-23 18:03:27 CDT by josh
 version 11.4R7.5;
 groups {
     re0 {
@@ -606,6 +606,9 @@
                 mtu 9000;
                 address 164.58.15.202/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::b/127;
+            }
             family mpls;
         }
     }
@@ -1069,6 +1072,18 @@
             }
         }
     }
+    ospf3 {
+        area 0.0.0.0 {
+            interface xe-0/0/0.200 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+        }
+    }
     ldp {
         preference 255;
         track-igp-metric;
@@ -1355,6 +1370,23 @@
         }
     }
 }
+security {
+    ipsec {
+        security-association OneNet-OSPF3-AUTH {
+            mode transport;
+            manual {
+                direction bidirectional {
+                    protocol ah;
+                    spi 256;
+                    authentication {
+                        algorithm hmac-md5-96;
+                        key ascii-text "$9$jfqfQB1EleM24UiHqTQO1IclvLx-dw2GDFn/9u07NdVgakqP"; ## SECRET-DATA
+                    }
+                }
+            }
+        }
+    }
+}
 firewall {
     family inet {
         filter PROTECT-RE {

Index: core1.okc-mx960.onenet.net
===================================================================
--- core1.okc-mx960.onenet.net	(revision 59642)
+++ core1.okc-mx960.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE1-MX960-RE0> show system commit 
-#   2013-04-23 17:58:14 CDT by rnordmark via cli commit synchronize
-#   2013-04-23 17:50:04 CDT by rnordmark via cli commit synchronize
-#   2013-04-23 17:39:06 CDT by rnordmark via cli commit synchronize
-#   2013-04-23 17:36:37 CDT by rnordmark via cli commit synchronize
-#   2013-04-23 17:33:59 CDT by rnordmark via cli commit synchronize
-#   2013-04-23 17:31:38 CDT by rnordmark via cli commit synchronize
+#   2013-04-23 18:43:10 CDT by rnordmark via cli commit synchronize
+#   2013-04-23 18:42:48 CDT by rnordmark via cli commit synchronize
+#   2013-04-23 18:40:39 CDT by rnordmark via cli commit synchronize
+#   2013-04-23 18:40:02 CDT by rnordmark via cli commit synchronize
+#   2013-04-23 18:31:29 CDT by rnordmark via cli commit synchronize
+#   2013-04-23 18:30:26 CDT by rnordmark via cli commit synchronize
 # grnoc-mon at OKC-CORE1-MX960-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -432,7 +432,7 @@
 # grnoc-mon at OKC-CORE1-MX960-RE0> show system uptime 
 # System booted: 2013-04-13 23:52 CDT 
 # Protocols started: 2013-04-13 23:53 CDT 
-# Last configured: 2013-04-23 17:58 CDT  by rnordmark
+# Last configured: 2013-04-23 18:43 CDT  by rnordmark
 # 
 # {master}
 # grnoc-mon at OKC-CORE1-MX960-RE0> show interface terse 
@@ -629,7 +629,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE1-MX960-RE0> show configuration 
-## Last commit: 2013-04-23 17:58:14 CDT by rnordmark
+## Last commit: 2013-04-23 18:43:10 CDT by rnordmark
 version 11.4R7.5;
 groups {
     re0 {
@@ -1121,6 +1121,9 @@
                 mtu 9000;
                 address 164.58.5.97/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::c/127;
+            }
             family mpls;
         }
         unit 3 {
@@ -1161,6 +1164,9 @@
                 mtu 9000;
                 address 164.58.246.89/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::e/127;
+            }
             family mpls;
         }
     }
@@ -1189,6 +1195,9 @@
                 mtu 9000;
                 address 164.58.246.117/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::10/127;
+            }
             family mpls;
         }
     }
@@ -1263,6 +1272,9 @@
                 mtu 9000;
                 address 164.58.245.117/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::14/127;
+            }
             family mpls;
         }
     }
@@ -1277,6 +1289,9 @@
                 mtu 9000;
                 address 164.58.246.53/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::12/127;
+            }
             family mpls;
         }
     }
@@ -1770,8 +1785,22 @@
                 }
             }
             interface irb.920;
-            interface xe-3/3/1.69;
-            interface xe-3/3/0.70;
+            interface xe-3/3/1.69 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+            interface xe-3/3/0.70 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
             interface xe-1/1/0.69 {
                 link-protection;
                 ipsec-sa OneNet-OSPF3-AUTH;
@@ -1781,6 +1810,38 @@
                 }
             }
             interface lo0.0;
+            interface xe-1/1/1.200 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+            interface xe-1/3/0.1 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+            interface xe-2/0/0.69 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+            interface xe-2/1/0.69 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
         }
     }
     ldp {

Index: core1.okccc-mx480.onenet.net
===================================================================
--- core1.okccc-mx480.onenet.net	(revision 59640)
+++ core1.okccc-mx480.onenet.net	(working copy)
@@ -1,14 +1,13 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKCCC-MX960-RE0> show system commit 
+#   2013-04-23 18:22:15 CDT by josh via cli commit synchronize
+#   2013-04-23 18:20:08 CDT by josh via cli commit synchronize
 #   2013-04-23 16:16:28 CDT by rnordmark via cli commit synchronize
 #   2013-04-21 00:02:17 CDT by rnordmark via synchronize
 #   2013-04-21 00:00:24 CDT by root via other
 #     Synchronization with remote Routing Engine
 #   2013-04-21 00:00:10 CDT by rnordmark via cli commit synchronize
-#   2013-04-20 23:57:06 CDT by root via other
-#     Synchronization with remote Routing Engine
-#   2013-04-21 00:02:15 CDT by root via other
 # grnoc-mon at OKCCC-MX960-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -385,7 +384,7 @@
 # grnoc-mon at OKCCC-MX960-RE0> show system uptime 
 # System booted: 2013-04-21 00:01 CDT 
 # Protocols started: 2013-04-21 00:05 CDT 
-# Last configured: 2013-04-23 16:16 CDT  by rnordmark
+# Last configured: 2013-04-23 18:22 CDT  by josh
 # 
 # {master}
 # grnoc-mon at OKCCC-MX960-RE0> show interface terse 
@@ -513,7 +512,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKCCC-MX960-RE0> show configuration 
-## Last commit: 2013-04-23 16:16:28 CDT by rnordmark
+## Last commit: 2013-04-23 18:22:15 CDT by josh
 version 11.4R7.5;
 groups {
     re0 {
@@ -889,6 +888,9 @@
                 mtu 9000;
                 address 164.58.246.90/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::f/127;
+            }
             family mpls;
         }
     }
@@ -1181,6 +1183,19 @@
             }
         }
     }
+    ospf3 {
+        area 0.0.0.0 {
+            interface xe-1/1/1.69 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+            interface lo0.0;
+        }
+    }
     ldp {
         preference 255;
         track-igp-metric;
@@ -1364,6 +1379,23 @@
         }
     }
 }
+security {
+    ipsec {
+        security-association OneNet-OSPF3-AUTH {
+            mode transport;
+            manual {
+                direction bidirectional {
+                    protocol ah;
+                    spi 256;
+                    authentication {
+                        algorithm hmac-md5-96;
+                        key ascii-text "$9$sK4ZD3n90OILxbY24UDFn6A01hSleMLVwik.mQzyreKXNg4J"; ## SECRET-DATA
+                    }
+                }
+            }
+        }
+    }
+}
 firewall {
     family inet {
         filter PROTECT-RE {

Index: core1.sti-mx960.onenet.net
===================================================================
--- core1.sti-mx960.onenet.net	(revision 59599)
+++ core1.sti-mx960.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at STILLWATER-MX960-RE0> show system commit 
+#   2013-04-23 18:29:18 CDT by josh via cli commit synchronize
+#   2013-04-23 18:27:20 CDT by josh via cli commit synchronize
+#   2013-04-23 18:26:06 CDT by josh via cli commit synchronize
 #   2013-04-23 16:47:32 CDT by josh via cli commit synchronize
 #   2013-04-22 17:27:17 CDT by joel via cli commit synchronize
 #   2013-03-26 14:06:23 CDT by cjensen via cli commit synchronize
-#   2013-03-11 17:04:03 CDT by joel via cli commit synchronize
-#   2013-03-04 10:57:50 CST by joel via cli commit synchronize
-#   2013-03-04 10:53:54 CST by joel via cli commit synchronize
 # grnoc-mon at STILLWATER-MX960-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -379,7 +379,7 @@
 # grnoc-mon at STILLWATER-MX960-RE0> show system uptime 
 # System booted: 2011-12-01 23:46 CST 
 # Protocols started: 2011-12-01 23:55 CST 
-# Last configured: 2013-04-23 16:47 CDT  by josh
+# Last configured: 2013-04-23 18:29 CDT  by josh
 # 
 # {master}
 # grnoc-mon at STILLWATER-MX960-RE0> show interface terse 
@@ -507,7 +507,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at STILLWATER-MX960-RE0> show configuration 
-## Last commit: 2013-04-23 16:47:32 CDT by josh
+## Last commit: 2013-04-23 18:29:18 CDT by josh
 version 10.4R6.5;
 groups {
     re0 {
@@ -956,7 +956,7 @@
         }
     }
     xe-2/1/0 {
-        description "CORE 10GE to core1.okc xe-2/1/0 | OneNet-OKC-STI-XE-xxxx";
+        description "CORE 10GE to core1.okc xe-2/1/0 | OneNet-OKC-STI-XE-5041";
         vlan-tagging;
         mtu 9192;
         encapsulation flexible-ethernet-services;
@@ -966,6 +966,9 @@
                 mtu 9000;
                 address 164.58.246.118/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::11/127;
+            }
             family mpls;
         }
     }
@@ -1280,6 +1283,15 @@
             interface xe-0/0/0.236;
             interface ge-0/3/1.0;
             interface ge-0/3/0.0;
+            interface xe-2/1/0.69 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+            interface lo0.0;
         }
     }
     ldp {
@@ -1490,6 +1502,23 @@
         }
     }
 }
+security {
+    ipsec {
+        security-association OneNet-OSPF3-AUTH {
+            mode transport;
+            manual {
+                direction bidirectional {
+                    protocol ah;
+                    spi 256;
+                    authentication {
+                        algorithm hmac-md5-96;
+                        key ascii-text "$9$CDMqu1Ex7d2ga5Q/AtuREX7Nb2oGDHkm569cyle8LjikqTFpuB"; ## SECRET-DATA
+                    }
+                }
+            }
+        }
+    }
+}
 firewall {
     family inet {
         filter FLOW-INFO {

Index: hub.say-mx480.onenet.net
===================================================================
--- hub.say-mx480.onenet.net	(revision 59635)
+++ hub.say-mx480.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at SAYRE-MX480-RE0> show system commit 
+#   2013-04-23 18:33:01 CDT by josh via cli commit synchronize
+#   2013-04-23 18:31:19 CDT by josh via cli commit synchronize
 #   2013-04-23 16:33:01 CDT by josh via cli commit synchronize
 #   2013-04-18 13:21:57 CDT by josh via cli commit synchronize
 #   2013-03-13 11:43:46 CDT by joel via cli commit synchronize
 #   2013-03-13 11:07:49 CDT by joel via cli commit synchronize
-#   2013-03-13 11:02:26 CDT by joel via cli commit synchronize
-#   2013-03-13 10:17:26 CDT by joel via cli commit synchronize
 # grnoc-mon at SAYRE-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -235,7 +235,7 @@
 # grnoc-mon at SAYRE-MX480-RE0> show system uptime 
 # System booted: 2012-08-01 12:29 CDT 
 # Protocols started: 2012-08-01 12:30 CDT 
-# Last configured: 2013-04-23 16:33 CDT  by josh
+# Last configured: 2013-04-23 18:33 CDT  by josh
 # 
 # {master}
 # grnoc-mon at SAYRE-MX480-RE0> show interface terse 
@@ -302,7 +302,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at SAYRE-MX480-RE0> show configuration 
-## Last commit: 2013-04-23 16:33:01 CDT by josh
+## Last commit: 2013-04-23 18:33:01 CDT by josh
 version 11.4R4.4;
 groups {
     re0 {
@@ -478,6 +478,9 @@
                 mtu 9000;
                 address 164.58.246.54/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::12/127;
+            }
             family mpls;
         }
     }
@@ -662,8 +665,16 @@
     }
     ospf3 {
         area 0.0.0.0 {
-            interface xe-0/0/0.69;
+            interface xe-0/0/0.69 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
             interface ge-0/2/9.0;
+            interface lo0.0;
         }
     }
     ldp {
@@ -801,6 +812,23 @@
         }
     }
 }
+security {
+    ipsec {
+        security-association OneNet-OSPF3-AUTH {
+            mode transport;
+            manual {
+                direction bidirectional {
+                    protocol ah;
+                    spi 256;
+                    authentication {
+                        algorithm hmac-md5-96;
+                        key ascii-text "$9$i.5z1IheKWgoDHk.QzBIRSeMX7dVsgUj369C0ON-Vb4Jq.f"; ## SECRET-DATA
+                    }
+                }
+            }
+        }
+    }
+}
 firewall {
     family inet {
         filter PROTECT-RE {

Index: core3.okc-m120.onenet.net
===================================================================
--- core3.okc-m120.onenet.net	(revision 59650)
+++ core3.okc-m120.onenet.net	(working copy)
@@ -395,8 +395,8 @@
 #ct3-2/0/3 up up
 #t3-2/0/3 up up
 #t3-2/0/3.0 up up
-#ct3-2/1/0 down up
-#t3-2/1/0 down down
+#ct3-2/1/0 down down
+#t3-2/1/0 down up
 #ct3-2/1/1 up up
 #t3-2/1/1 up up
 #t3-2/1/1.0 up up
@@ -1363,8 +1363,8 @@
 #t1-3/3/0:8:13.0 up up
 #t1-3/3/0:8:14 up up
 #t1-3/3/0:8:14.0 up up
-#t1-3/3/0:8:15 up up
-#t1-3/3/0:8:15.0 up up
+#t1-3/3/0:8:15 up down
+#t1-3/3/0:8:15.0 up down
 #t1-3/3/0:8:16 up up
 #t1-3/3/0:8:16.0 up up
 #t1-3/3/0:8:17 up up
@@ -10291,7 +10291,6 @@
 # 172.23.1.22      t1-3/3/0:7:14.0        Full      10.199.2.119
 # 172.23.5.74      t1-3/3/0:7:19.0        Full      10.199.2.43
 # 172.23.4.74      t1-3/3/0:7:23.0        Full      10.199.2.122
-# 172.23.2.26      t1-3/3/0:8:15.0        Full      10.199.2.91
 # 172.23.3.106     t1-3/3/0:8:3.0         Full      10.199.2.31
 # 172.23.3.42      t1-4/0/1:23.0          Full      10.199.2.35
 # 172.23.3.30      t1-4/0/1:26.0          Full      10.199.2.32

Index: omes-mx480-0
===================================================================
--- omes-mx480-0	(revision 59629)
+++ omes-mx480-0	(working copy)
@@ -1,13 +1,13 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MX480_OMES_DC_0-RE0> show system commit 
+#   2013-04-23 18:12:42 CDT by josh via cli commit synchronize
+#   2013-04-23 18:09:57 CDT by josh via cli commit synchronize
 #   2013-04-23 16:15:35 CDT by rnordmark via cli commit synchronize
 #   2013-04-13 09:55:03 CDT by rnordmark via cli commit synchronize
 #   2013-02-07 16:50:05 CST by jeremyt via cli commit synchronize
 #   2013-02-05 15:03:12 CST by admin via netconf commit synchronize
 #     %changeType:inband%moduleName:Platform.setSnmpTrapTarget%crId:541881%
-#   2013-02-05 15:01:28 CST by admin via netconf commit synchronize
-#   2013-01-22 20:02:58 CST by jeremyt via cli commit synchronize
 # grnoc-mon at MX480_OMES_DC_0-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -280,7 +280,7 @@
 # grnoc-mon at MX480_OMES_DC_0-RE0> show system uptime 
 # System booted: 2013-01-05 17:10 CST 
 # Protocols started: 2013-01-05 17:12 CST 
-# Last configured: 2013-04-23 16:15 CDT  by rnordmark
+# Last configured: 2013-04-23 18:12 CDT  by josh
 # 
 # {master}
 # grnoc-mon at MX480_OMES_DC_0-RE0> show interface terse 
@@ -394,7 +394,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at MX480_OMES_DC_0-RE0> show configuration 
-## Last commit: 2013-04-23 16:15:35 CDT by rnordmark
+## Last commit: 2013-04-23 18:12:42 CDT by josh
 version 11.4R6.5;
 groups {
     re0 {

Index: omes-mx480-1
===================================================================
--- omes-mx480-1	(revision 59637)
+++ omes-mx480-1	(working copy)
@@ -1,13 +1,13 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MX480_OMES_DC_1-RE0> show system commit 
+#   2013-04-23 18:16:06 CDT by josh via cli commit synchronize
+#   2013-04-23 18:14:10 CDT by josh via cli commit synchronize
 #   2013-04-23 16:15:09 CDT by rnordmark via cli commit synchronize
 #   2013-04-13 09:55:08 CDT by rnordmark via cli commit synchronize
 #   2013-02-07 16:50:12 CST by jeremyt via cli commit synchronize
 #   2013-02-05 15:03:11 CST by admin via netconf commit synchronize
 #     %changeType:inband%moduleName:Platform.setSnmpTrapTarget%crId:541871%
-#   2013-02-05 15:01:27 CST by admin via netconf commit synchronize
-#   2013-01-22 20:03:06 CST by jeremyt via cli commit synchronize
 # grnoc-mon at MX480_OMES_DC_1-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -278,7 +278,7 @@
 # grnoc-mon at MX480_OMES_DC_1-RE0> show system uptime 
 # System booted: 2013-01-05 17:10 CST 
 # Protocols started: 2013-01-05 17:11 CST 
-# Last configured: 2013-04-23 16:15 CDT  by rnordmark
+# Last configured: 2013-04-23 18:16 CDT  by josh
 # 
 # {master}
 # grnoc-mon at MX480_OMES_DC_1-RE0> show interface terse 
@@ -388,7 +388,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at MX480_OMES_DC_1-RE0> show configuration 
-## Last commit: 2013-04-23 16:15:09 CDT by rnordmark
+## Last commit: 2013-04-23 18:16:06 CDT by josh
 version 11.4R6.5;
 groups {
     re0 {
@@ -579,6 +579,9 @@
                 mtu 9000;
                 address 164.58.5.98/30;
             }
+            family inet6 {
+                address 2610:1d8:1000::d/127;
+            }
             family mpls;
         }
         unit 2 {
@@ -884,6 +887,19 @@
             }
         }
     }
+    ospf3 {
+        area 0.0.0.0 {
+            interface xe-0/0/0.1 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+            interface lo0.0;
+        }
+    }
     ldp {
         preference 255;
         track-igp-metric;
@@ -1047,6 +1063,23 @@
     }
     community MX480_OMES_DC_2 members 5078:191;
 }
+security {
+    ipsec {
+        security-association OneNet-OSPF3-AUTH {
+            mode transport;
+            manual {
+                direction bidirectional {
+                    protocol ah;
+                    spi 256;
+                    authentication {
+                        algorithm hmac-md5-96;
+                        key ascii-text "$9$vwrLNVjiqTQ3RheMWLdVDiHmTF/CpuBRlKwYg4GUAtu0ES8L7"; ## SECRET-DATA
+                    }
+                }
+            }
+        }
+    }
+}
 firewall {
     family inet {
         filter PROTECT-RE {



More information about the Nocrancid mailing list