[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Mon Aug 19 17:02:42 CDT 2013
Index: core.ada.onenet.net
===================================================================
--- core.ada.onenet.net (revision 76419)
+++ core.ada.onenet.net (working copy)
@@ -0,0 +1,1119 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ADA-MX480-RE0> show system commit
+# 2013-08-19 13:22:57 CDT by jeremyt via cli commit synchronize
+# 2013-08-15 14:49:37 CDT by rnordmark via cli commit synchronize
+# 2013-08-14 15:28:07 CDT by josh via cli commit synchronize
+# 2013-08-11 19:24:24 CDT by joel via cli commit synchronize
+# 2013-08-11 19:22:25 CDT by joel via cli commit synchronize
+# 2013-08-11 19:18:49 CDT by joel via cli commit synchronize
+# grnoc-mon at ADA-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at ADA-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at ADA-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at ADA-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11FDDA4AFB MX480
+# Midplane REV 05 710-017414 ACAB5798 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBS1792 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U0AE PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U0JC PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U157 PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U0HK PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012029249 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012028135 RE-S-2000
+# CB 0 REV 14 750-031391 ABBS3889 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBS3880 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 CAAF0868 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 CAAB9791 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6309 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL30FSH XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL30FVM XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV0327 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 B438089 SFP-T
+# Xcvr 1 REV 01 740-011612 C09C54773 SFP-LH
+# Xcvr 2 REV 01 740-031850 PPF3938 SFP-LX10
+# Xcvr 3 REV 01 740-031851 AM1144SW5YX SFP-SX
+# Xcvr 4 REV 01 740-031850 PM243C3 SFP-LX10
+# Xcvr 5 REV 02 740-013111 B436846 SFP-T
+# Xcvr 9 REV 02 740-013111 B436700 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 9 REV 01 740-038291 D174902 SFP-T
+# QXM 0 REV 06 711-028408 CAAC6917 MPC QXM
+# QXM 1 REV 06 711-028408 CAAB9061 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at ADA-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB5798 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBS1792 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U0AE PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U0JC PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U157 PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U0HK PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012029249 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012028135 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBS3889 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBS3880 SCBE-MX-S
+# FPC 0 REV 09 750-038493 CAAF0868 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6309 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV0327 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at ADA-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012029249
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012028135
+#
+# grnoc-mon at ADA-MX480-RE0> show chassis scb
+# grnoc-mon at ADA-MX480-RE0> show chassis sfm detail
+# grnoc-mon at ADA-MX480-RE0> show chassis ssb
+# grnoc-mon at ADA-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:77:45:2d
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at ADA-MX480-RE0> show version
+# Hostname: ADA-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Services [1!
1.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at ADA-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 823600
+# drwxr-xr-x 2 root field 512 Jul 10 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 May 26 04:20 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 install/
+# -rw-r--r-- 1 eng field 421523837 May 25 07:27 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 155 May 26 04:22 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 pics/
+# -r--r--r-- 1 root field 499 May 26 04:11 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jul 10 2012 rtsdb/
+# -rw-r----- 1 root field 534 May 26 04:22 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jul 11 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jul 10 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at ADA-MX480-RE0> show system uptime
+# System booted: 2013-05-26 04:19 CDT
+# Protocols started: 2013-05-26 04:22 CDT
+# Last configured: 2013-08-19 13:22 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at ADA-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.250 up up
+#ge-0/2/1.3900 up up
+#ge-0/2/1.32767 up up
+#ge-0/2/2 up up
+#ge-0/2/2.250 up up
+#ge-0/2/2.3913 up up
+#ge-0/2/2.32767 up up
+#ge-0/2/3 up down
+#ge-0/2/3.250 up down
+#ge-0/2/3.3905 up down
+#ge-0/2/3.32767 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up up
+#ge-0/2/5.0 up up
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up up
+#ge-0/2/9.0 up up
+#ge-0/3/0 up down
+#ge-0/3/1 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up down
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at ADA-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:22:57 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name ADA-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name ADA-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.23;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.okc xe-3/1/0 | OneNet-OKC-ADA-XE-xxxx";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.2/30;
+ }
+ family inet6 {
+ address 2610:1d8:1000::19/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE FE to hub.ada ge-3/2/3 | OneNet-ADA-ADA-FE-5079";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.244.5/30;
+ }
+ family inet6 {
+ address 2610:1d8:100::2/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/1 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.coal ge-0/1/0 | OneNet-ADA-CAICOAL-GE-5205";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.253/30;
+ }
+ }
+ unit 3900 {
+ description "L2 Coal-County-Hospital-Mary-Hurley-GE-VLAN3900-CIR0005206";
+ vlan-id 3900;
+ family inet {
+ address 156.110.50.197/30;
+ }
+ }
+ }
+ ge-0/2/2 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.cleet ge-0/1/0 | OneNet-ADA-CAICLEET-GE-xxxx";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.197/30;
+ }
+ }
+ unit 3913 {
+ description "L2 CLEET-Ada-100Mb-VLAN3913-CIR000xxxx";
+ vlan-id 3913;
+ family inet {
+ address 156.110.130.25/30;
+ }
+ }
+ }
+ ge-0/2/3 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.ato ge-0/1/0 | OneNet-ADA-CAIATO-GE-5217 [ORDERED]";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.237/30;
+ }
+ }
+ unit 3905 {
+ description "L2 Atoka-Memorial-Hospital-100Mb-VLAN3905-CIR0005218";
+ vlan-id 3905;
+ family inet {
+ address 156.110.130.29/30;
+ }
+ }
+ }
+ ge-0/2/5 {
+ description ECU-Ethernet-LAN-Segment-Wireless-Old-segment-CIR0004310;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.35.113/29;
+ }
+ }
+ }
+ ge-0/2/9 {
+ description "Tupelo-Ind-School-Dist-#2-10M-CIR0004908-RICI";
+ speed 10m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ mtu 1500;
+ address 164.58.28.145/29;
+ }
+ }
+ }
+ ge-0/3/4 {
+ description "Hub Appliance [NO-MONITOR]";
+ }
+ ge-0/3/5 {
+ description "Hub Appliance - Camera #2 [NO-MONITOR]";
+ }
+ ge-0/3/6 {
+ description "Hub Appliance - Camera #1 [NO-MONITOR]";
+ }
+ ge-0/3/7 {
+ description "Hub Appliance - UPS System [NO-MONITOR]";
+ }
+ ge-0/3/8 {
+ description "Hub Appliance - DC Power Plant [NO-MONITOR]";
+ }
+ ge-0/3/9 {
+ description "Hub Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.23/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::20/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9023;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.23;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location ADA;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 156.110.35.0/29 next-hop 164.58.28.148;
+ }
+ router-id 164.58.199.23;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.23;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface lo0.0;
+ }
+ lldp {
+ interface ge-0/2/1;
+ interface xe-0/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Ada;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Ada;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at ADA-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.244.6 ge-0/2/0.0 Full 164.58.199.22
+# 164.58.246.1 xe-0/0/0.69 Full 164.58.199.211
+#
+# {master}
Index: core.elr.onenet.net
===================================================================
--- core.elr.onenet.net (revision 76425)
+++ core.elr.onenet.net (working copy)
@@ -0,0 +1,1047 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at EL-RENO-MX480-RE0> show system commit
+# 2013-08-19 13:27:03 CDT by jeremyt via cli commit synchronize
+# 2013-08-16 10:45:40 CDT by rnordmark via cli commit synchronize
+# 2013-08-13 16:39:41 CDT by joe via cli commit synchronize
+# 2013-07-31 09:20:22 CDT by joe via cli commit synchronize
+# 2013-07-08 15:18:25 CDT by joel via cli commit synchronize
+# 2013-06-13 16:21:42 CDT by joel via cli commit synchronize
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11FF6EFAFB MX480
+# Midplane REV 05 710-017414 ACAB5816 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBT7661 Front Panel Display
+# PEM 0 Rev 07 740-029970 QCS1124U1HR PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 07 740-029970 QCS1124U1KA PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 06 740-029970 QCS1106U070 PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 07 740-029970 QCS1124U08L PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012033716 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012033916 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV0749 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV0775 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 ZC9464 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 ZZ6033 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6319 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL40W1K XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL40W1M XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV0365 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AC1108S03TF SFP-SX
+# Xcvr 1 REV 02 740-013111 A476914 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 2 REV 02 740-013111 B436460 SFP-T
+# Xcvr 9 REV 02 740-013111 B436677 SFP-T
+# QXM 0 REV 06 711-028408 ZY7768 MPC QXM
+# QXM 1 REV 06 711-028408 ZY7040 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB5816 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBT7661 CRAFT-MX480-S
+# PEM 0 Rev 07 740-029970 QCS1124U1HR PWR-MX480-2520-AC-S
+# PEM 1 Rev 07 740-029970 QCS1124U1KA PWR-MX480-2520-AC-S
+# PEM 2 Rev 06 740-029970 QCS1106U070 PWR-MX480-2520-AC-S
+# PEM 3 Rev 07 740-029970 QCS1124U08L PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012033716 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012033916 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV0749 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV0775 SCBE-MX-S
+# FPC 0 REV 09 750-038493 ZC9464 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6319 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV0365 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012033716
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012033916
+#
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis scb
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis sfm detail
+# grnoc-mon at EL-RENO-MX480-RE0> show chassis ssb
+# grnoc-mon at EL-RENO-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:79:a2:61
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at EL-RENO-MX480-RE0> show version
+# Hostname: EL-RENO-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Service!
s [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at EL-RENO-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 823600
+# drwxr-xr-x 2 root field 512 Jul 10 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 Apr 20 23:17 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 install/
+# -rw-r--r-- 1 eng field 421523837 Apr 19 14:27 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 155 Apr 20 23:25 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 pics/
+# -r--r--r-- 1 root field 499 Apr 20 23:09 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jul 10 2012 rtsdb/
+# -rw-r----- 1 root field 534 Apr 20 23:28 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jul 11 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jul 10 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at EL-RENO-MX480-RE0> show system uptime
+# System booted: 2013-04-20 23:16 CDT
+# Protocols started: 2013-04-20 23:25 CDT
+# Last configured: 2013-08-19 13:27 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at EL-RENO-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.0 up up
+#ge-0/2/2 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up down
+#ge-0/3/0 up down
+#ge-0/3/1 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at EL-RENO-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:27:03 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name EL-RENO-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name EL-RENO-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.107;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core.hut.elr xe-0/0/1 | OneNet-HUTELR-ELR-XE-4992";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.62/30;
+ }
+ family inet6 {
+ address 2610:1d8:b00::1/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.elr ge-3/2/3 | OneNet-ELR-ELR-GE-5085";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.37/30;
+ }
+ family inet6 {
+ address 2610:1d8:b00::3/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/1 {
+ description "Redlands Community College - Campus LAN-CIR0005138";
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.255.149/30;
+ }
+ }
+ }
+ ge-0/3/4 {
+ description "Hub Appliance [NO-MONITOR]";
+ }
+ ge-0/3/5 {
+ description "Hub Appliance - Camera #2 [NO-MONITOR]";
+ }
+ ge-0/3/6 {
+ description "Hub Appliance - Camera #1 [NO-MONITOR]";
+ }
+ ge-0/3/7 {
+ description "Hub Appliance - UPS System [NO-MONITOR]";
+ }
+ ge-0/3/8 {
+ description "Hub Appliance - DC Power Plant [NO-MONITOR]";
+ }
+ ge-0/3/9 {
+ description "Hub Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.107/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::12/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9107;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.107;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location EL-RENO;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 164.58.136.0/23 next-hop 164.58.255.150;
+ }
+ router-id 164.58.199.107;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ interface ge-0/3/0.69;
+ interface ge-0/3/1.69;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.107;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$r23lWLNdsY4ZdVZjHqzFhSyrMX-Vw2oGLxVYgoGU"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/3/0.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/3/1.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface ge-0/3/0.69;
+ interface ge-0/3/1.69;
+ interface lo0.0;
+ }
+ lldp {
+ interface ge-0/3/0;
+ interface ge-0/3/1;
+ interface xe-0/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Elreno;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Elreno;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at EL-RENO-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.38 ge-0/2/0.0 Full 164.58.199.6
+# 164.58.246.61 xe-0/0/0.69 Full 164.58.199.150
+#
+# {master}
Index: core.chi.onenet.net
===================================================================
--- core.chi.onenet.net (revision 76421)
+++ core.chi.onenet.net (working copy)
@@ -0,0 +1,1087 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at CHICKASHA-MX480-RE0> show system commit
+# 2013-08-19 13:25:29 CDT by jeremyt via cli commit synchronize
+# 2013-08-16 09:52:53 CDT by josh via cli commit synchronize
+# 2013-08-15 16:50:00 CDT by josh via cli commit synchronize
+# 2013-07-03 10:44:00 CDT by rnordmark via cli commit confirmed, rollback in 5mins synchronize
+# 2013-06-17 10:34:51 CDT by joel via cli commit synchronize
+# 2013-06-17 10:14:58 CDT by joel via cli commit synchronize
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11EB53BAFB MX480
+# Midplane REV 05 710-017414 ACAB3438 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBS5724 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U0YK PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U0YR PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U0YD PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U0TW PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012029307 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012028385 RE-S-2000
+# CB 0 REV 14 750-031391 ABBS3884 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBS3827 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 ZC9486 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 ZZ5956 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV2291 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL40W23 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL515A1 XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV0318 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AC1108S03X4 SFP-SX
+# Xcvr 1 REV 01 740-031851 AM1144SW5Z0 SFP-SX
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 9 REV 02 740-013111 B436742 SFP-T
+# QXM 0 REV 06 711-028408 ZY7180 MPC QXM
+# QXM 1 REV 06 711-028408 ZY7191 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB3438 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBS5724 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U0YK PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U0YR PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U0YD PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U0TW PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012029307 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012028385 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBS3884 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBS3827 SCBE-MX-S
+# FPC 0 REV 09 750-038493 ZC9486 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV2291 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV0318 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012029307
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012028385
+#
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis scb
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis sfm detail
+# grnoc-mon at CHICKASHA-MX480-RE0> show chassis ssb
+# grnoc-mon at CHICKASHA-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:77:57:39
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+# WARNING: / was not properly dismounted
+#
+# {master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show version
+# Hostname: CHICKASHA-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Servi!
ces [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at CHICKASHA-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 823644
+# -rwxr-xr-x 1 root field 19318 Jul 11 2012 chickasha.txt*
+# drwxr-xr-x 2 root field 512 Jul 11 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 Aug 13 00:02 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 install/
+# -rw-r--r-- 1 eng field 421523837 May 27 21:21 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 155 Aug 13 00:02 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 pics/
+# -r--r--r-- 1 root field 499 May 28 00:31 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jul 11 2012 rtsdb/
+# -rw-r----- 1 root field 2314 Aug 13 00:03 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jul 11 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jul 11 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show system uptime
+# System booted: 2013-08-13 00:00 CDT
+# Protocols started: 2013-08-13 00:02 CDT
+# Last configured: 2013-08-19 13:25 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.70 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.0 up up
+#ge-0/2/1.32767 up up
+#ge-0/2/2 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 down down
+#ge-0/2/9.70 up down
+#ge-0/2/9.32767 up down
+#ge-0/3/0 up down
+#ge-0/3/1 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up up
+#ge-0/3/9.0 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at CHICKASHA-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:25:29 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name CHICKASHA-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name CHICKASHA-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.83;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core.okccc xe-2/0/1 | OneNet-OKCCC-CHI-XE-15442";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 70 {
+ vlan-id 70;
+ family inet {
+ mtu 9000;
+ address 164.58.246.14/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::5/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.chi ge-3/2/2 | OneNet-CHI-CHI-GE-5082";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.244.73/30;
+ }
+ family inet6 {
+ address 2610:1d8:600::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/1 {
+ description "CORE 1GE to swi1.chi ge-0/1/0 | OneNet-CHI-CHI-GE-XXXX";
+ vlan-tagging;
+ unit 0 {
+ vlan-id 250;
+ family inet {
+ address 156.110.90.165/30;
+ }
+ }
+ }
+ ge-0/2/9 {
+ description "CORE 300Mb to core.law ge-0/2/7 [TEMPORARY CIRCUIT] | OneNet-CHI-LAW-GE-15439 [NO-MONITOR]";
+ disable;
+ vlan-tagging;
+ speed 1g;
+ mtu 9192;
+ link-mode full-duplex;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 70 {
+ vlan-id 70;
+ family inet {
+ mtu 9000;
+ address 164.58.246.145/30;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/3 {
+ description "Hub-Appliance [NO-MONITOR]";
+ }
+ ge-0/3/4 {
+ description "Hub-Appliance - Camera #2 [NO-MONITOR]";
+ }
+ ge-0/3/5 {
+ description "Hub-Appliance - Camera #1 [NO-MONITOR]";
+ }
+ ge-0/3/6 {
+ description "Hub-Appliance - UPS System [NO-MONITOR]";
+ }
+ ge-0/3/7 {
+ description "Hub-Appliance - DC Power Plant [NO-MONITOR]";
+ }
+ ge-0/3/8 {
+ description "Hub-Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ ge-0/3/9 {
+ unit 0 {
+ family inet {
+ address 10.10.124.65/30;
+ }
+ }
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 127.0.0.1/32;
+ address 164.58.199.83/32;
+ }
+ family inet6 {
+ address 2610:1d8::2d/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9083;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.83;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location CHICKASHA;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 164.58.29.160/29 next-hop 156.110.90.166;
+ route 164.58.25.0/28 next-hop 156.110.90.166;
+ }
+ router-id 164.58.199.83;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ interface ge-0/2/9.70;
+ interface xe-0/0/0.70;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.83;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/0.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/2/9.70 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/0.70 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7xNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface ge-0/2/9.70;
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/0.70 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface xe-0/0/0.70;
+ interface ge-0/2/0.0;
+ interface ge-0/2/9.70;
+ interface lo0.0;
+ }
+ lldp {
+ interface ge-0/2/9;
+ interface ge-0/2/1;
+ interface xe-0/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Chickasha;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Chickasha;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at CHICKASHA-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.244.74 ge-0/2/0.0 Full 164.58.199.82
+# 164.58.246.13 xe-0/0/0.70 Full 164.58.199.233
+#
+# {master}
Index: core.ard.onenet.net
===================================================================
--- core.ard.onenet.net (revision 76420)
+++ core.ard.onenet.net (working copy)
@@ -0,0 +1,1042 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ARDMORE-MX480-RE0> show system commit
+# 2013-08-19 13:22:09 CDT by jeremyt via cli commit synchronize
+# 2013-08-15 16:03:30 CDT by rnordmark via cli commit synchronize
+# 2013-08-15 10:12:56 CDT by joe via cli commit synchronize
+# 2013-08-15 10:05:54 CDT by joe via cli commit synchronize
+# 2013-08-15 08:58:47 CDT by joe via cli commit synchronize
+# 2013-08-14 17:03:23 CDT by josh via cli commit synchronize
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11EEB11AFB MX480
+# Midplane REV 05 710-017414 ACAB3455 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBS1765 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U0F3 PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U13V PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U0HT PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U132 PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012027034 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012028078 RE-S-2000
+# CB 0 REV 14 750-031391 ABBS3862 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBS3823 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 ZZ6499 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 CAAE2703 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV1692 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL5158E XFP-10G-LR
+# Xcvr 1 REV 01 740-031833 UL515QN XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# MIC 1 REV 26 750-028392 ABBV4618 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 B437520 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU3F6 SFP-SX
+# Xcvr 9 REV 02 740-013111 B436412 SFP-T
+# QXM 0 REV 06 711-028408 CAAE4828 MPC QXM
+# QXM 1 REV 06 711-028408 CAAE4837 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB3455 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBS1765 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U0F3 PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U13V PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U0HT PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U132 PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012027034 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012028078 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBS3862 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBS3823 SCBE-MX-S
+# FPC 0 REV 09 750-038493 ZZ6499 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV1692 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV4618 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012027034
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012028078
+#
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis scb
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis sfm detail
+# grnoc-mon at ARDMORE-MX480-RE0> show chassis ssb
+# grnoc-mon at ARDMORE-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:76:c2:d5
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at ARDMORE-MX480-RE0> show version
+# Hostname: ARDMORE-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Service!
s [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at ARDMORE-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 1662992
+# drwxr-xr-x 2 root field 512 Jul 10 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 May 26 00:46 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 install/
+# -rw-r--r-- 1 root field 421204768 Jul 10 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 May 25 07:23 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 8404168 Jul 10 2012 jweb-11.4R4.4-signed.tgz
+# -rw-r--r-- 1 root field 155 May 26 00:47 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 pics/
+# -r--r--r-- 1 root field 499 May 26 00:38 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jul 10 2012 rtsdb/
+# -rw-r----- 1 root field 1068 May 26 00:53 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jul 10 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jul 10 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at ARDMORE-MX480-RE0> show system uptime
+# System booted: 2013-05-26 00:45 CDT
+# Protocols started: 2013-05-26 00:46 CDT
+# Last configured: 2013-08-19 13:22 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at ARDMORE-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up down
+#ge-0/3/0 up up
+#ge-0/3/0.182 up up
+#ge-0/3/0.200 up up
+#ge-0/3/0.32767 up up
+#ge-0/3/1 up down
+#ge-0/3/1.0 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at ARDMORE-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:22:09 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name ARDMORE-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name ARDMORE-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.11;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core2.okc xe-2/1/0 | OneNet-OKC-ARD-XE-5007";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.10/30;
+ }
+ family inet6 {
+ address 2610:1d8:1100::17/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.ard ge-3/2/0 | OneNet-ARD-ARD-GE-5081";
+ mtu 9192;
+ unit 0 {
+ bandwidth 1g;
+ family inet {
+ mtu 9000;
+ address 164.58.244.53/30;
+ }
+ family inet6 {
+ address 2610:1d8:400::1/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/0 {
+ description "NNI to INFO - ARD - CIR000xxxx [NO-MONITOR]";
+ vlan-tagging;
+ unit 182 {
+ description "Wilson Public Schools | CIR0005137";
+ vlan-id 182;
+ family inet {
+ address 164.58.8.121/30;
+ }
+ }
+ unit 200 {
+ description "Davis PS 20m | CIR0005309";
+ vlan-id 200;
+ family inet {
+ address 164.58.5.249/30;
+ }
+ }
+ }
+ ge-0/3/1 {
+ description "Ardmore-ISD-19 500M [ORDERED] | CIR0003181";
+ unit 0 {
+ family inet {
+ address 10.10.1.1/30;
+ }
+ }
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.11/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::1e/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9011;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.11;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location ARDMORE;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 164.58.187.224/27 next-hop 164.58.8.122;
+ route 164.58.25.120/29 next-hop 164.58.5.250;
+ }
+ router-id 164.58.199.11;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.11;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$r23lWLNdsY4ZdVZjHqzFhSyrMX-Vw2oGLxVYgoGU"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.0;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface lo0.0;
+ }
+ lldp {
+ interface xe-0/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Ardmore;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Ardmore;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at ARDMORE-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.244.54 ge-0/2/0.0 Full 164.58.199.10
+# 164.58.246.9 xe-0/0/0.69 Full 164.58.199.212
+#
+# {master}
Index: core.dur.onenet.net
===================================================================
--- core.dur.onenet.net (revision 76423)
+++ core.dur.onenet.net (working copy)
@@ -0,0 +1,1105 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at DURANT-MX480-RE0> show system commit
+# 2013-08-19 13:22:24 CDT by jeremyt via cli commit synchronize
+# 2013-08-16 10:18:54 CDT by josh via cli commit synchronize
+# 2013-08-14 16:55:17 CDT by donnie via cli commit synchronize
+# 2013-08-12 11:42:25 CDT by joel via cli commit synchronize
+# 2013-08-08 10:37:12 CDT by joe via cli commit synchronize
+# 2013-08-08 09:12:14 CDT by joe via cli commit synchronize
+# grnoc-mon at DURANT-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at DURANT-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at DURANT-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at DURANT-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN1203B60AFB MX480
+# Midplane REV 05 710-017414 ACAB5821 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBT8414 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U062 PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U121 PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U00Z PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U02W PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012033785 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012033912 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV5457 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV0733 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 ZC9468 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 ZZ5984 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBT3497 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL40W06 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL40W1N XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV0388 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AC1108S0418 SFP-SX
+# Xcvr 2 REV 01 740-031850 PPG5MC9 SFP-LX10
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 1 REV 02 740-013111 B436812 SFP-T
+# Xcvr 2 REV 01 740-031851 AC1108S0417 SFP-SX
+# Xcvr 7 REV 02 740-013111 B436756 SFP-T
+# Xcvr 8 REV 02 740-011613 PJH2FJ5 SFP-SX
+# Xcvr 9 REV 01 740-011613 CXSXA19021 SFP-SX
+# QXM 0 REV 06 711-028408 ZZ4675 MPC QXM
+# QXM 1 REV 06 711-028408 ZZ4676 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at DURANT-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB5821 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBT8414 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U062 PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U121 PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U00Z PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U02W PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012033785 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012033912 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV5457 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV0733 SCBE-MX-S
+# FPC 0 REV 09 750-038493 ZC9468 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBT3497 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV0388 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at DURANT-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012033785
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012033912
+#
+# grnoc-mon at DURANT-MX480-RE0> show chassis scb
+# grnoc-mon at DURANT-MX480-RE0> show chassis sfm detail
+# grnoc-mon at DURANT-MX480-RE0> show chassis ssb
+# grnoc-mon at DURANT-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:79:a5:ae
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at DURANT-MX480-RE0> show version
+# Hostname: DURANT-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Services!
[11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at DURANT-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 839444
+# -rw-r--r-- 1 root field 30 Jun 28 2012 ex.txt
+# drwxr-xr-x 2 root field 512 Jun 28 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 May 26 00:25 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 install/
+# -rw-r--r-- 1 root field 421204768 Jul 10 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 root field 8404168 Jul 10 2012 jweb-11.4R4.4-signed.tgz
+# -rw-r--r-- 1 root field 155 May 26 00:28 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 pics/
+# -r--r--r-- 1 root field 499 May 26 00:14 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jun 28 2012 rtsdb/
+# -rw-r----- 1 root field 534 May 26 00:28 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jun 28 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jun 14 16:15 vi.recover/
+#
+# {master}
+# grnoc-mon at DURANT-MX480-RE0> show system uptime
+# System booted: 2013-05-26 00:24 CDT
+# Protocols started: 2013-05-26 00:27 CDT
+# Last configured: 2013-08-19 13:22 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at DURANT-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 up up
+#ge-0/2/2.250 up up
+#ge-0/2/2.3912 up up
+#ge-0/2/2.32767 up up
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up down
+#ge-0/3/0 up down
+#ge-0/3/1 up up
+#ge-0/3/1.196 up up
+#ge-0/3/1.199 up up
+#ge-0/3/1.32767 up up
+#ge-0/3/2 up up
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up up
+#ge-0/3/8 up up
+#ge-0/3/8.0 up up
+#ge-0/3/9 up up
+#ge-0/3/9.2514 up up
+#ge-0/3/9.32767 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at DURANT-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:22:24 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name DURANT-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name DURANT-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.15;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core2.okc xe-2/1/1 | OneNet-OKC-DUR-XE-5008";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ description "10G Backhaul";
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.22/30;
+ }
+ family inet6 {
+ address 2610:1d8:1100::13/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.dur ge-3/2/3 | OneNet-DUR-DUR-GE-5084";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.244.181/30;
+ }
+ family inet6 {
+ address 2610:1d8:900::2/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/2 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.caidpsdur ge-0/1/0 | OneNet-DUR-CAIDPSDUR-GE-xxxx";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.201/30;
+ }
+ }
+ unit 3912 {
+ description "L2 DPS-Highway-Patrol-Troop-HQ-Durant-100Mb-VLAN3912-CIR000xxxx [ORDERED]";
+ vlan-id 3912;
+ }
+ }
+ ge-0/2/4 {
+ description "Hub Appliance [NO-MONITOR]";
+ }
+ ge-0/2/5 {
+ description "Hub Appliance - Camera #2 [NO-MONITOR]";
+ }
+ ge-0/2/6 {
+ description "Hub Appliance - Camera #1 [NO-MONITOR]";
+ }
+ ge-0/2/7 {
+ description "Hub Appliance - UPS System [NO-MONITOR]";
+ }
+ ge-0/2/8 {
+ description "Hub Appliance - DC Power Plant [NO-MONITOR]";
+ }
+ ge-0/2/9 {
+ description "Hub Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ ge-0/3/1 {
+ description "NNI to INFO CIR000XXXX [NO-MONITOR]";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 196 {
+ description "Choctaw Nation of Oklahoma-100M-CIR0005105";
+ vlan-id 196;
+ family inet {
+ address 156.110.58.133/30;
+ }
+ }
+ unit 199 {
+ description "Rural Enterprises of Ok 10m | CIR0005222";
+ vlan-id 199;
+ family inet {
+ address 156.110.58.25/30;
+ }
+ }
+ }
+ ge-0/3/8 {
+ description Southeastern-OK-State-University-Gig-CIR0002265;
+ unit 0 {
+ family inet {
+ address 164.58.120.254/21;
+ }
+ }
+ }
+ ge-0/3/9 {
+ description "SE L2 Link to Idabel Branch Campus";
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 2514 {
+ encapsulation vlan-ccc;
+ bandwidth 1g;
+ vlan-id-range 1-4000;
+ }
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.15/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::1c/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9015;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.15;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location DURANT;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 164.58.120.0/21 next-hop 164.58.120.100;
+ route 156.110.59.120/29 next-hop 156.110.58.134;
+ route 156.110.59.152/30 next-hop 156.110.58.134;
+ route 164.58.87.64/29 next-hop 156.110.58.134;
+ route 164.58.173.56/29 next-hop 156.110.58.134;
+ route 156.110.59.160/29 next-hop 156.110.58.134;
+ route 164.58.74.248/29 next-hop 156.110.58.134;
+ route 164.58.74.192/27 next-hop 156.110.58.134;
+ route 156.110.59.80/29 next-hop 156.110.58.26;
+ route 164.58.18.16/29 next-hop 156.110.58.26;
+ route 164.58.63.36/30 next-hop 156.110.58.26;
+ route 164.58.163.24/29 next-hop 156.110.58.26;
+ }
+ router-id 164.58.199.15;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.15;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/0.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface xe-2/1/1.69;
+ interface lo0.0;
+ }
+ l2circuit {
+ neighbor 164.58.199.103 {
+ interface ge-0/3/9.2514 {
+ virtual-circuit-id 2514;
+ }
+ }
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface ge-0/2/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Durant;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Durant;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at DURANT-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.244.182 ge-0/2/0.0 Full 164.58.199.14
+# 164.58.246.21 xe-0/0/0.69 Full 164.58.199.212
+#
+# {master}
Index: core.say.onenet.net
===================================================================
--- core.say.onenet.net (revision 76431)
+++ core.say.onenet.net (working copy)
@@ -0,0 +1,1022 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at SAYRE-MX480-RE0> show system commit
+# 2013-08-19 13:23:30 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 09:24:03 CDT by rnordmark via cli commit synchronize
+# 2013-08-19 09:21:21 CDT by rnordmark via cli commit synchronize
+# 2013-07-09 11:23:19 CDT by joel via cli commit synchronize
+# 2013-07-03 09:03:52 CDT by rnordmark via cli commit synchronize
+# 2013-06-13 16:09:38 CDT by joe via cli commit synchronize
+# grnoc-mon at SAYRE-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at SAYRE-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at SAYRE-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at SAYRE-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN1203C28AFB MX480
+# Midplane REV 05 710-017414 ACAB5808 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBT8411 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U04T PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U0CP PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U0A4 PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U0TH PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012033678 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012033638 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV5162 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV0763 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 ZC9521 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 ZZ5965 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6284 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL703X0 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL40NGY XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV0450 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AC1108S041B SFP-SX
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 9 REV 02 740-013111 B436541 SFP-T
+# QXM 0 REV 06 711-028408 ZY7270 MPC QXM
+# QXM 1 REV 06 711-028408 ZY7344 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at SAYRE-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB5808 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBT8411 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U04T PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U0CP PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U0A4 PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U0TH PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012033678 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012033638 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV5162 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV0763 SCBE-MX-S
+# FPC 0 REV 09 750-038493 ZC9521 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6284 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV0450 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at SAYRE-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012033678
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012033638
+#
+# grnoc-mon at SAYRE-MX480-RE0> show chassis scb
+# grnoc-mon at SAYRE-MX480-RE0> show chassis sfm detail
+# grnoc-mon at SAYRE-MX480-RE0> show chassis ssb
+# grnoc-mon at SAYRE-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:79:a3:4d
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at SAYRE-MX480-RE0> show version
+# Hostname: SAYRE-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Services !
[11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at SAYRE-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 824376
+# drwxr-xr-x 2 root field 512 Jul 11 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 May 27 00:55 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 install/
+# -rw-r--r-- 1 eng field 421523837 May 26 20:46 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 155 May 27 00:58 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 pics/
+# -rw-r--r-- 1 root wheel 4475 May 4 23:29 ppe_trap_fpc0_pfe0.core.0
+# -rw-r--r-- 1 root wheel 128837 May 4 23:29 ppe_trap_fpc0_pfe0.core.1
+# -rw-r--r-- 1 root wheel 129481 May 4 23:29 ppe_trap_fpc0_pfe0.core.2
+# -rw-r--r-- 1 root wheel 130152 May 4 23:29 ppe_trap_fpc0_pfe0.core.3
+# -r--r--r-- 1 root field 499 May 27 00:45 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jul 11 2012 rtsdb/
+# -rw-r----- 1 root field 534 May 27 00:58 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jul 11 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jul 11 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at SAYRE-MX480-RE0> show system uptime
+# System booted: 2013-05-27 00:53 CDT
+# Protocols started: 2013-05-27 00:58 CDT
+# Last configured: 2013-08-19 13:23 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at SAYRE-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up down
+#ge-0/3/0 up down
+#ge-0/3/1 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at SAYRE-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:23:30 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name SAYRE-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name SAYRE-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.31;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.okc xe-1/3/1 | OneNet-OKC-SAY-XE-4993";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.54/30;
+ }
+ family inet6 {
+ address 2610:1d8:1000::12/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.say ge-3/2/3 | OneNet-SAY-SAY-GE-5096";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.21/30;
+ }
+ family inet6 {
+ address 2610:1d8:3f00::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/3 {
+ description "Hub-Appliance [NO-MONITOR]";
+ }
+ ge-0/3/4 {
+ description "Hub-Appliance - Camera #2 [NO-MONITOR]";
+ }
+ ge-0/3/5 {
+ description "Hub-Appliance - Camera #1 [NO-MONITOR]";
+ }
+ ge-0/3/6 {
+ description "Hub-Appliance - UPS System [NO-MONITOR]";
+ }
+ ge-0/3/7 {
+ description "Hub-Appliance - DC Power Plant [NO-MONITOR]";
+ }
+ ge-0/3/8 {
+ description "Hub-Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.31/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::29/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9031;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.31;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location SAYRE;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ router-id 164.58.199.31;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.31;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface lo0.0;
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface lo0.0;
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface ge-0/2/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Sayre;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Sayre;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at SAYRE-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.22 ge-0/2/0.0 Full 164.58.199.30
+# 164.58.246.53 xe-0/0/0.69 Full 164.58.199.211
+#
+# {master}
Index: core1.nor.onenet.net
===================================================================
--- core1.nor.onenet.net (revision 76434)
+++ core1.nor.onenet.net (working copy)
@@ -0,0 +1,1697 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at NORMAN1-MX480-RE0> show system commit
+# 2013-08-19 13:33:27 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 08:39:08 CDT by rnordmark via cli commit synchronize
+# 2013-08-19 08:19:50 CDT by rnordmark via cli commit synchronize
+# 2013-08-14 16:49:40 CDT by rnordmark via cli commit synchronize
+# 2013-08-14 08:08:13 CDT by rnordmark via cli commit synchronize
+# 2013-08-09 16:52:22 CDT by joel via cli commit synchronize
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 SF A OK
+# CB 0 SF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 SF A OK
+# CB 1 SF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# FPC 1 Intake OK
+# FPC 1 Exhaust A OK
+# FPC 1 Exhaust B OK
+# FPC 1 QX 0 TSen OK
+# FPC 1 QX 0 Chip OK
+# FPC 1 LU 0 TCAM TSen OK
+# FPC 1 LU 0 TCAM Chip OK
+# FPC 1 LU 0 TSen OK
+# FPC 1 LU 0 Chip OK
+# FPC 1 MQ 0 TSen OK
+# FPC 1 MQ 0 Chip OK
+# FPC 1 QX 1 TSen OK
+# FPC 1 QX 1 Chip OK
+# FPC 1 LU 1 TCAM TSen OK
+# FPC 1 LU 1 TCAM Chip OK
+# FPC 1 LU 1 TSen OK
+# FPC 1 LU 1 Chip OK
+# FPC 1 MQ 1 TSen OK
+# FPC 1 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 1 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN119A6DCAFB MX480 Midplane
+# Midplane REV 05 710-017414 ABAB3181 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBF3477 Front Panel Display
+# PEM 0 Rev 03 740-027736 QCS1021T011 DC 2.4kW Power Entry Module
+# PEM 1 Rev 03 740-027736 QCS1021T0C7 DC 2.4kW Power Entry Module
+# PEM 2 Rev 03 740-027736 QCS1021T0BP DC 2.4kW Power Entry Module
+# PEM 3 Rev 03 740-027736 QCS1021T0F1 DC 2.4kW Power Entry Module
+# Routing Engine 0 REV 15 740-013063 9012009556 RE-S-2000
+# Routing Engine 1 REV 15 740-013063 9012009933 RE-S-2000
+# CB 0 REV 08 710-021523 ABBG4266 MX SCB
+# CB 1 REV 08 710-021523 ABBF6603 MX SCB
+# FPC 0 REV 15 750-031088 YZ0085 MPC Type 2 3D Q
+# CPU REV 06 711-030884 ZA0609 MPC PMB 2G
+# MIC 0 REV 26 750-028387 YT7142 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-031585 FA3695910062 XFP-10G-T-DWDM-ZR
+# Xcvr 1 REV 01 740-031833 T10L07308 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 T10L15671 XFP-10G-LR
+# Xcvr 1 REV 03 740-014289 CC44BQ0EU XFP-10G-SR
+# MIC 1 REV 23 750-028392 YV0249 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A476931 SFP-T
+# Xcvr 1 REV 02 740-013111 A476923 SFP-T
+# Xcvr 2 REV 02 740-013111 A475242 SFP-T
+# Xcvr 3 REV 02 740-013111 A475781 SFP-T
+# Xcvr 4 REV 02 740-013111 A476872 SFP-T
+# Xcvr 5 REV 02 740-013111 A476843 SFP-T
+# Xcvr 6 REV 02 740-013111 A475347 SFP-T
+# Xcvr 7 REV 02 740-013111 A464032 SFP-T
+# Xcvr 8 REV 02 740-013111 A475920 SFP-T
+# Xcvr 9 REV 01 740-011614 PJ70ZGT SFP-LX10
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-011612 9ZT702500717 SFP-LH
+# Xcvr 1 REV 01 740-011614 PJ70Z89 SFP-LX10
+# Xcvr 2 REV 01 740-031851 AM1041SU0BH SFP-SX
+# Xcvr 3 REV 02 740-013111 B436549 SFP-T
+# Xcvr 4 REV 02 740-013111 A475739 SFP-T
+# Xcvr 5 REV 02 740-013111 B438024 SFP-T
+# Xcvr 6 REV 02 740-013111 B436761 SFP-T
+# Xcvr 7 REV 02 740-013111 B436625 SFP-T
+# Xcvr 8 REV 02 740-013111 A464205 SFP-T
+# Xcvr 9 REV 01 740-011614 PJ70Z8W SFP-LX10
+# QXM 0 REV 05 711-028408 YZ8697 MPC QXM
+# QXM 1 REV 05 711-028408 YZ8355 MPC QXM
+# FPC 1 REV 15 750-031088 YZ0064 MPC Type 2 3D Q
+# CPU REV 06 711-030884 ZA0615 MPC PMB 2G
+# MIC 0 REV 25 750-028387 YS1929 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-031585 FA239591003E XFP-10G-T-DWDM-ZR
+# Xcvr 1 REV 01 740-031833 T10L07400 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-031585 FA1842380023 XFP-10G-T-DWDM-ZR
+# Xcvr 1 REV 03 740-031585 FA213859009A XFP-10G-T-DWDM-ZR
+# QXM 0 REV 05 711-028408 YZ8471 MPC QXM
+# QXM 1 REV 05 711-028408 YZ8777 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ABAB3181 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBF3477 CRAFT-MX480-S
+# PEM 0 Rev 03 740-027736 QCS1021T011 PWR-MX480-2400-DC-S
+# PEM 1 Rev 03 740-027736 QCS1021T0C7 PWR-MX480-2400-DC-S
+# PEM 2 Rev 03 740-027736 QCS1021T0BP PWR-MX480-2400-DC-S
+# PEM 3 Rev 03 740-027736 QCS1021T0F1 PWR-MX480-2400-DC-S
+# Routing Engine 0 REV 15 740-013063 9012009556 RE-S-2000-4096-S
+# Routing Engine 1 REV 15 740-013063 9012009933 RE-S-2000-4096-S
+# CB 0 REV 08 710-021523 ABBG4266 SCB-MX960-S
+# CB 1 REV 08 710-021523 ABBF6603 SCB-MX960-S
+# FPC 0 REV 15 750-031088 YZ0085 MX-MPC2-3D-Q
+# MIC 0 REV 26 750-028387 YT7142 MIC-3D-4XGE-XFP
+# MIC 1 REV 23 750-028392 YV0249 MIC-3D-20GE-SFP
+# FPC 1 REV 15 750-031088 YZ0064 MX-MPC2-3D-Q
+# MIC 0 REV 25 750-028387 YS1929 MIC-3D-4XGE-XFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012009556
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012009933
+#
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis scb
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis sfm detail
+# grnoc-mon at NORMAN1-MX480-RE0> show chassis ssb
+# grnoc-mon at NORMAN1-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:8a:94
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at NORMAN1-MX480-RE0> show version
+# Hostname: NORMAN1-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Service!
s [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at NORMAN1-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 5704024
+# -rw-r--r-- 1 root field 30 Dec 3 2010 ex.txt
+# drwxr-xr-x 2 root field 512 Dec 3 2010 gres-tp/
+# -rw-r--r-- 1 root field 4 Apr 21 01:56 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Dec 3 2010 install/
+# -rw-r--r-- 1 root field 348823558 Mar 8 2011 jbundle-10.4R2.6-domestic.tgz
+# -rw-r--r-- 1 root field 349730789 Mar 27 2011 jbundle-10.4R3.4-domestic.tgz
+# -rw-r--r-- 1 root field 350497882 Dec 1 2011 jbundle-10.4R6.5-domestic.tgz
+# -rw-r--r-- 1 root field 355159151 Mar 8 2011 jinstall-10.4R2.6-domestic-signed.tgz
+# -rw-r--r-- 1 admin field 356069136 Mar 27 2011 jinstall-10.4R3.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 356846496 Dec 1 2011 jinstall-10.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Apr 19 14:38 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 0 Dec 3 2010 jperf
+# -rw-r--r-- 1 root field 0 Dec 3 2010 jperf_shmem_sem
+# -rw-r--r-- 1 root field 7829561 Mar 8 2011 jweb-10.4R2.6-signed.tgz
+# -rw-r--r-- 1 admin field 7830840 Mar 27 2011 jweb-10.4R3.4-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 9 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 root field 155 Apr 21 02:00 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Apr 21 01:53 pics/
+# -r--r--r-- 1 root field 499 Apr 21 01:15 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 Dec 13 2011 rdm.taf
+# drwxr-xr-x 2 root field 512 Apr 21 01:56 rtsdb/
+# -rw-r----- 1 root field 712 May 30 11:21 sampled.pkts
+# drwxr-xr-x 3 root field 512 Dec 3 2010 sec-download/
+# -rw-r--r-- 1 root field 0 Dec 3 2010 tracelogs
+# -rw-r--r-- 1 root field 0 Dec 3 2010 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Dec 3 2010 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 May 24 2011 vi.recover/
+#
+# {master}
+# grnoc-mon at NORMAN1-MX480-RE0> show system uptime
+# System booted: 2013-04-21 01:54 CDT
+# Protocols started: 2013-04-21 01:59 CDT
+# Last configured: 2013-08-19 13:33 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at NORMAN1-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.200 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up up
+#xe-0/0/1.0 up up
+#xe-0/1/0 up down
+#xe-0/1/1 up up
+#xe-0/1/1.2520 up up
+#xe-0/1/1.3011 up up
+#xe-0/1/1.32767 up up
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.0 up up
+#ge-0/2/2 up up
+#ge-0/2/2.0 up up
+#ge-0/2/3 up up
+#ge-0/2/3.0 up up
+#ge-0/2/4 up up
+#ge-0/2/4.0 up up
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up up
+#ge-0/2/7.0 up up
+#ge-0/2/8 up up
+#ge-0/2/8.0 up up
+#ge-0/2/9 up up
+#ge-0/2/9.496 up up
+#ge-0/2/9.32767 up up
+#ge-0/3/0 up up
+#ge-0/3/0.0 up up
+#ge-0/3/1 up up
+#ge-0/3/1.2519 up up
+#ge-0/3/1.32767 up up
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/3.2011 up down
+#ge-0/3/3.32767 up down
+#ge-0/3/4 up up
+#ge-0/3/4.2500 up up
+#ge-0/3/4.32767 up up
+#ge-0/3/5 down down
+#ge-0/3/6 down down
+#ge-0/3/7 up up
+#ge-0/3/7.1031 up up
+#ge-0/3/7.32767 up up
+#ge-0/3/8 up up
+#ge-0/3/8.0 up up
+#ge-0/3/9 up up
+#ge-0/3/9.496 up up
+#ge-0/3/9.32767 up up
+#lc-1/0/0 up up
+#lc-1/0/0.32769 up up
+#pfe-1/0/0 up up
+#pfe-1/0/0.16383 up up
+#pfh-1/0/0 up up
+#pfh-1/0/0.16383 up up
+#xe-1/0/0 up up
+#xe-1/0/0.212 up up
+#xe-1/0/0.32767 up up
+#xe-1/0/1 up up
+#xe-1/0/1.208 up up
+#xe-1/0/1.32767 up up
+#xe-1/1/0 up up
+#xe-1/1/0.216 up up
+#xe-1/1/0.32767 up up
+#xe-1/1/1 up up
+#xe-1/1/1.196 up up
+#xe-1/1/1.32767 up up
+#lc-1/2/0 up up
+#lc-1/2/0.32769 up up
+#pfe-1/2/0 up up
+#pfe-1/2/0.16383 up up
+#ae0 up up
+#ae0.496 up up
+#ae0.32767 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 up down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#lsi.0 up up
+#lsi.1049350 up up
+#lsi.1049351 up up
+#lsi.1049352 up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at NORMAN1-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:33:27 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name NORMAN1-MX480-RE0;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name NORMAN1-MX480-RE1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ backup-router 172.25.46.1;
+ time-zone America/Chicago;
+ authentication-order [ password radius ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.230;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1044;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ aggregated-devices {
+ ethernet {
+ device-count 1;
+ }
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+ inactive: network-services all-ethernet;
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.okc xe-1/1/1 | OneNet-OKC-NOR-XE-4451";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ optics-options {
+ wavelength 1540.56;
+ }
+ unit 200 {
+ vlan-id 200;
+ family inet {
+ mtu 9000;
+ address 164.58.15.202/30;
+ }
+ family inet6 {
+ address 2610:1d8:1000::b/127;
+ }
+ family mpls;
+ }
+ }
+ xe-0/0/1 {
+ description UNIVERSITY-of-OKLAHOMA-OU-PRIMARY-LINK-CIR0004320;
+ mtu 9174;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ output;
+ }
+ address 164.58.10.97/30;
+ }
+ }
+ }
+ xe-0/1/0 {
+ description "RESERVED FOR IPERF [ORDERED]";
+ }
+ xe-0/1/1 {
+ description "OU DYNES TO I2 CCC";
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 2520 {
+ description "OU DYNES L2 Link to Tulsa.7";
+ encapsulation vlan-ccc;
+ vlan-id 3010;
+ }
+ unit 3011 {
+ description "OU DYNES L2 Link to Tulsa.7";
+ encapsulation vlan-ccc;
+ vlan-id 3011;
+ }
+ }
+ ge-0/2/0 {
+ description WeatherNewsInc-WNI-CIR0003394;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.99.49/29;
+ }
+ }
+ }
+ ge-0/2/1 {
+ description OU-IT-Vieux-CIR0003080;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.99.65/28;
+ address 156.110.31.65/28;
+ address 156.110.98.41/30;
+ }
+ }
+ }
+ ge-0/2/2 {
+ description OU-IT-AGIO-CIR0004147;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.98.121/30 {
+ primary;
+ }
+ }
+ }
+ }
+ ge-0/2/3 {
+ description OU-IT-ATSC-CIR0003614;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.99.153/29;
+ }
+ }
+ }
+ ge-0/2/4 {
+ description OU-IT-WDT-CIR0003642;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.98.77/30;
+ }
+ }
+ }
+ ge-0/2/7 {
+ description OU-IT-CIR0004063;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.98.113/30;
+ }
+ }
+ }
+ ge-0/2/8 {
+ description CISCO-ACCESS-SERVER;
+ speed 10m;
+ unit 0 {
+ family inet {
+ address 164.58.62.61/30;
+ }
+ }
+ }
+ ge-0/2/9 {
+ description LINK-1of2-NOAA-MPLS-TO-TULSA-CORE5;
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-0/3/0 {
+ description City-of-Norman-CIR0004162;
+ unit 0 {
+ family inet {
+ address 164.58.156.125/30;
+ }
+ }
+ }
+ ge-0/3/1 {
+ description "NOAA TIC CONNECTION 1PP to NC600 (NOAA ROC)";
+ flexible-vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ unit 2519 {
+ description "NOAA L2 Link to Tulsa.5";
+ encapsulation vlan-ccc;
+ bandwidth 1g;
+ vlan-id 615;
+ }
+ }
+ ge-0/3/3 {
+ description "IPERF SERVER MGMT VPLS_2011 [NO-MONITOR]";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation vlan-vpls;
+ unit 2011 {
+ encapsulation vlan-vpls;
+ vlan-id 2011;
+ family vpls;
+ }
+ }
+ ge-0/3/4 {
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 2500 {
+ description VPLS-OU-2500;
+ encapsulation vlan-vpls;
+ vlan-id-range 1-4094;
+ family vpls;
+ }
+ }
+ ge-0/3/5 {
+ disable;
+ }
+ ge-0/3/6 {
+ disable;
+ }
+ ge-0/3/7 {
+ vlan-tagging;
+ speed 100m;
+ mtu 1518;
+ link-mode full-duplex;
+ unit 1031 {
+ vlan-id 1031;
+ family inet {
+ mtu 1500;
+ }
+ }
+ }
+ ge-0/3/8 {
+ description ARGUS-DC-POWER-PLANT;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.98.73/30;
+ }
+ }
+ }
+ ge-0/3/9 {
+ description LINK-2of2-NOAA-MPLS-TO-TULSA-CORE5;
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ xe-1/0/0 {
+ description "CORE 10GE to core.okccc xe-0/0/0 | OneNet-OKCCC-NOR-XE-4462";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ optics-options {
+ wavelength 1540.56;
+ }
+ unit 212 {
+ vlan-id 212;
+ family inet {
+ mtu 9000;
+ address 164.58.15.213/30;
+ }
+ family inet6 {
+ address 2610:1d8:3600::2/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/0/1 {
+ description "CORE 10GE to core2.nor xe-1/0/0 | OneNet-NOR-NOR2-XE-4463";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 208 {
+ vlan-id 208;
+ family inet {
+ mtu 9000;
+ address 164.58.15.209/30;
+ }
+ family inet6 {
+ address 2610:1d8:3600::/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/1/0 {
+ description "CORE 10GE to core.okccc xe-0/1/0 | OneNet-OKCCC-NOR-XE-4705";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ optics-options {
+ wavelength 1531.12;
+ }
+ unit 216 {
+ vlan-id 216;
+ family inet {
+ mtu 9000;
+ address 164.58.15.217/30;
+ }
+ family mpls;
+ }
+ }
+ xe-1/1/1 {
+ description "CORE 10GE to core1.okc xe-1/2/0 | OneNet-OKC-NOR-XE-4704";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ optics-options {
+ wavelength 1531.12;
+ }
+ unit 196 {
+ vlan-id 196;
+ family inet {
+ mtu 9000;
+ address 164.58.15.198/30;
+ }
+ family mpls;
+ }
+ }
+ ae0 {
+ description NOAA-MPLS-TO-TULSA-CORE5;
+ vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ aggregated-ether-options {
+ link-speed 1g;
+ lacp {
+ active;
+ }
+ }
+ unit 496 {
+ encapsulation vlan-ccc;
+ vlan-id 496;
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 127.0.0.1/32;
+ address 164.58.199.230/32;
+ }
+ family inet6 {
+ address 2610:1d8::14/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9190;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ IP-V4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.230;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ location "Norman, OK";
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 164.58.29.152/29 next-hop 164.58.156.126;
+ route 164.58.87.96/28 next-hop 164.58.156.126;
+ route 156.110.99.160/28 next-hop 156.110.98.78;
+ }
+ router-id 164.58.199.230;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface lo0.0;
+ interface xe-0/0/0.200;
+ interface xe-1/0/0.212;
+ interface xe-1/0/1.208;
+ interface xe-1/1/0.216;
+ interface xe-1/1/1.196;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.230;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ export [ NEXT-HOP-SELF REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ }
+ group CUSTOMER-EBGP {
+ type external;
+ family inet {
+ any;
+ }
+ neighbor 164.58.10.98 {
+ description OU-NORMAN-eBGP-PEER;
+ import EBGP-OU-IMPORT;
+# authentication-key <removed>;
+ export DEFAULT-EXPORT;
+ remove-private;
+ peer-as 25776;
+ }
+ neighbor 156.110.98.122 {
+ description AGIO-eBGP-PEER;
+ import EBGP-AGIO-IMPORT;
+ export DEFAULT-ONLY-EXPORT;
+ remove-private;
+ peer-as 32214;
+ }
+ neighbor 156.110.99.50 {
+ description WEATHER-NEWS-INC;
+ import EBGP-WNI-IMPORT;
+ export DEFAULT-ONLY-EXPORT;
+ remove-private;
+ peer-as 30116;
+ }
+ neighbor 156.110.99.51 {
+ description WEATHER-NEWS-INC;
+ import EBGP-WNI-IMPORT;
+ export DEFAULT-ONLY-EXPORT;
+ remove-private;
+ peer-as 30116;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface xe-0/0/0.200 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$ZzGHqfT3n9pTQpBIEKv4aJZi.5QF6CuqmQn/Cu0" start-time "2011-6-23.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/0.212 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$lHbe8X-VY2oGVbGik.F3cyrlWxdbsgaUX7b24aUD" start-time "2011-6-23.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface lo0.0 {
+ link-protection;
+ }
+ interface fxp0.0 {
+ disable;
+ }
+ interface xe-1/0/1.208 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$EBDhlK8X-dwgXxgJGDPfBIRErvLxNVs4KMxdbs4o" start-time "2011-6-23.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/1/0.216 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$lHbe8X-VY2oGVbGik.F3cyrlWxdbsgaUX7b24aUD"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/1/1.196 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$lHbe8X-VY2oGVbGik.F3cyrlWxdbsgaUX7b24aUD"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.200 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ inactive: bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/1.208 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/0.212 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.200;
+ interface xe-1/0/0.212;
+ interface xe-1/0/1.208;
+ interface xe-1/1/0.216;
+ interface xe-1/1/1.196;
+ interface lo0.0;
+ }
+ pim {
+ rp {
+ static {
+ address 164.113.238.210;
+ }
+ }
+ interface xe-0/0/0.200 {
+ mode sparse;
+ version 2;
+ }
+ }
+ l2circuit {
+ inactive: traceoptions {
+ file l2circuit_log size 10m files 5;
+ flag all detail;
+ }
+ neighbor 164.58.199.225 {
+ interface ae0.496 {
+ virtual-circuit-id 496;
+ description NOAA-MPLS-TO-TULSA-CORE5;
+ mtu 9000;
+ }
+ interface ge-0/3/1.2519 {
+ virtual-circuit-id 2519;
+ mtu 9000;
+ }
+ }
+ neighbor 164.58.199.192 {
+ interface xe-0/1/1.2520 {
+ virtual-circuit-id 2520;
+ }
+ interface xe-0/1/1.3011 {
+ virtual-circuit-id 3011;
+ }
+ }
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface xe-1/0/0;
+ interface xe-1/0/1;
+ interface xe-1/1/0;
+ interface xe-1/1/1;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS {
+ 156.110.98.122/32;
+ 156.110.99.50/32;
+ 156.110.99.51/32;
+ 164.58.10.98/32;
+ }
+ policy-statement DEFAULT-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term ACCEPT-ALL-ELSE {
+ then accept;
+ }
+ }
+ policy-statement DEFAULT-ONLY-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AGIO-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:32214;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AGIO-IMPORT-PREFIX {
+ term prefixes {
+ from {
+ route-filter 174.77.146.0/24 exact;
+ }
+ }
+ }
+ policy-statement EBGP-OU-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:25776;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-OU-IMPORT-PREFIX {
+ term prefixes {
+ from {
+ route-filter 129.15.0.0/16 exact;
+ route-filter 129.15.0.0/17 exact;
+ route-filter 129.15.128.0/17 exact;
+ }
+ }
+ }
+ policy-statement EBGP-WNI-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:30116;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-WNI-IMPORT-PREFIX {
+ term prefixes {
+ from {
+ route-filter 192.153.53.0/24 exact;
+ route-filter 206.61.156.0/24 exact;
+ }
+ }
+ }
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement NEXT-HOP-SELF {
+ term 1 {
+ from protocol bgp;
+ then {
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add NORMANCORE1;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add NORMANCORE1;
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ community 5078:25776 members 5078:25776;
+ community 5078:30116 members 5078:30116;
+ community 5078:32214 members 5078:32214;
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community NORMANCORE1 members 5078:230;
+ community NORMANCORE2 members 5078:231;
+ community OKCCCCORE1 members 5078:233;
+ community OKCCORE1 members 5078:211;
+ community OKCCORE2 members 5078:212;
+ community OKCCORE3 members 5078:213;
+ community OKCCORE4 members 5078:214;
+ community OKCCORE5 members 5078:215;
+ community OKCCORE6 members 5078:216;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community PTCCORE1 members 5078:234;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community STILLWATERCORE1 members 5078:232;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community TULSACORE1 members 5078:221;
+ community TULSACORE2 members 5078:222;
+ community TULSACORE3 members 5078:223;
+ community TULSACORE4 members 5078:224;
+ community TULSACORE5 members 5078:225;
+ community TULSACORE6 members 5078:226;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+routing-instances {
+ VPLS-ONENET-IPERF {
+ description ONENET-IPERF-MGMT;
+ instance-type vpls;
+ vlan-id 2011;
+ interface ge-0/3/3.2011;
+ route-distinguisher 164.58.199.230:2011;
+ vrf-target target:5078:2011;
+ protocols {
+ vpls {
+ mac-table-size {
+ 3000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site NORMAN-IPERF {
+ site-identifier 3;
+ }
+ }
+ }
+ }
+ VPLS-OU-2500 {
+ description VPLS-OU-NORMAN1-N2;
+ instance-type vpls;
+ vlan-id all;
+ interface ge-0/3/4.2500;
+ route-distinguisher 164.58.199.230:2501;
+ vrf-target target:5078:2501;
+ protocols {
+ vpls {
+ mac-table-size {
+ 10000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site NORMAN1 {
+ site-identifier 1;
+ interface ge-0/3/4.2500;
+ }
+ }
+ }
+ }
+ VRF-INET6 {
+ instance-type vrf;
+ route-distinguisher 164.58.199.230:6001;
+ vrf-target target:5078:6001;
+ vrf-table-label;
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template IP-V4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at NORMAN1-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.15.201 xe-0/0/0.200 Full 164.58.199.211
+# 164.58.15.214 xe-1/0/0.212 Full 164.58.199.233
+# 164.58.15.210 xe-1/0/1.208 Full 164.58.199.231
+# 164.58.15.218 xe-1/1/0.216 Full 164.58.199.233
+# 164.58.15.197 xe-1/1/1.196 Full 164.58.199.211
+#
+# {master}
Index: core.ponc.onenet.net
===================================================================
--- core.ponc.onenet.net (revision 76429)
+++ core.ponc.onenet.net (working copy)
@@ -0,0 +1,1135 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at PONCA-CITY-MX480-RE0> show system commit
+# 2013-08-19 13:30:44 CDT by jeremyt via cli commit synchronize
+# 2013-08-08 14:35:18 CDT by root via other
+# Synchronization with remote Routing Engine
+# 2013-05-29 22:30:19 CDT by josh via cli commit synchronize
+# 2013-05-29 22:19:49 CDT by root via other
+# Synchronization with remote Routing Engine
+# 2013-05-29 22:19:22 CDT by root via other
+# 2013-05-29 22:04:10 CDT by root via other
+# Synchronization with remote Routing Engine
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 SF A OK
+# CB 0 SF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 SF A OK
+# CB 1 SF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# FPC 1 Intake OK
+# FPC 1 Exhaust A OK
+# FPC 1 Exhaust B OK
+# FPC 1 QX 0 TSen OK
+# FPC 1 QX 0 Chip OK
+# FPC 1 LU 0 TCAM TSen OK
+# FPC 1 LU 0 TCAM Chip OK
+# FPC 1 LU 0 TSen OK
+# FPC 1 LU 0 Chip OK
+# FPC 1 MQ 0 TSen OK
+# FPC 1 MQ 0 Chip OK
+# FPC 1 QX 1 TSen OK
+# FPC 1 QX 1 Chip OK
+# FPC 1 LU 1 TCAM TSen OK
+# FPC 1 LU 1 TCAM Chip OK
+# FPC 1 LU 1 TSen OK
+# FPC 1 LU 1 Chip OK
+# FPC 1 MQ 1 TSen OK
+# FPC 1 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 1 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11B2A20AFB MX480
+# Midplane REV 05 710-017414 ABAB4146 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBG5380 Front Panel Display
+# PEM 0 Rev 06 740-029970 QCS1049U01Y PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 06 740-029970 QCS1049U02W PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 06 740-029970 QCS1049U05N PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 06 740-029970 QCS1049U02E PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 15 740-013063 9012009927 RE-S-2000
+# Routing Engine 1 REV 15 740-013063 9009066394 RE-S-2000
+# CB 0 REV 08 710-021523 ABBF6431 MX SCB
+# CB 1 REV 09 710-021523 ABBG6168 MX SCB
+# FPC 0 REV 15 750-031088 YV3498 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YV3143 MPC PMB 2G
+# MIC 0 REV 24 750-028392 YR8106 3D 20x 1GE(LAN) SFP
+# PIC 0 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-011612 01T702500610 SFP-LH
+# Xcvr 1 REV 01 740-011612 01T702500625 SFP-LH
+# Xcvr 9 REV 01 740-011612 01T702500644 SFP-LH
+# PIC 1 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# QXM 0 REV 05 711-028408 YV9551 MPC QXM
+# QXM 1 REV 05 711-028408 YV9283 MPC QXM
+# FPC 1 REV 15 750-031088 YY9952 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YY8862 MPC PMB 2G
+# MIC 0 REV 23 750-028392 YR9764 3D 20x 1GE(LAN) SFP
+# PIC 0 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A475778 SFP-T
+# Xcvr 1 REV 02 740-013111 A476913 SFP-T
+# PIC 1 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# QXM 0 REV 05 711-028408 YZ8581 MPC QXM
+# QXM 1 REV 05 711-028408 YZ8529 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ABAB4146 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBG5380 CRAFT-MX480-S
+# PEM 0 Rev 06 740-029970 QCS1049U01Y PWR-MX480-2520-AC-S
+# PEM 1 Rev 06 740-029970 QCS1049U02W PWR-MX480-2520-AC-S
+# PEM 2 Rev 06 740-029970 QCS1049U05N PWR-MX480-2520-AC-S
+# PEM 3 Rev 06 740-029970 QCS1049U02E PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 15 740-013063 9012009927 RE-S-2000-4096-S
+# Routing Engine 1 REV 15 740-013063 9009066394 RE-S-2000-4096-S
+# CB 0 REV 08 710-021523 ABBF6431 SCB-MX960-S
+# CB 1 REV 09 710-021523 ABBG6168 SCB-MX960-S
+# FPC 0 REV 15 750-031088 YV3498 MX-MPC2-3D-Q
+# MIC 0 REV 24 750-028392 YR8106 MIC-3D-20GE-SFP
+# FPC 1 REV 15 750-031088 YY9952 MX-MPC2-3D-Q
+# MIC 0 REV 23 750-028392 YR9764 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012009927
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9009066394
+#
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis scb
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis sfm detail
+# grnoc-mon at PONCA-CITY-MX480-RE0> show chassis ssb
+# grnoc-mon at PONCA-CITY-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:88:b8
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+# WARNING: / was not properly dismounted
+#
+# {master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show version
+# Hostname: PONCA-CITY-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Serv!
ices [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at PONCA-CITY-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 3571064
+# -rw-r--r-- 1 root field 18210 Feb 23 2011 MX480_Config_LAWTON_NEW_LAG#2.txt
+# -rw-r--r-- 1 root field 14279 Feb 24 2011 MX480_Config_PONCACITY_complete.txt
+# -rw-r--r-- 1 root field 30 Dec 4 2010 ex.txt
+# drwxr-xr-x 2 root field 512 Dec 4 2010 gres-tp/
+# -rw-r--r-- 1 root field 4 Aug 8 14:35 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Dec 4 2010 install/
+# -r-xr-xr-x 1 root wheel 329257475 Dec 4 2010 jbundle-10.3R1.9-domestic.tgz*
+# -rw-r--r-- 1 root field 348823558 Feb 24 2011 jbundle-10.4R2.6-domestic.tgz
+# -rw-r--r-- 1 root field 355159151 Feb 24 2011 jinstall-10.4R2.6-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 May 29 15:37 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 0 Dec 4 2010 jperf
+# -rw-r--r-- 1 root field 0 Dec 4 2010 jperf_shmem_sem
+# -rw-r--r-- 1 root field 7829561 Feb 24 2011 jweb-10.4R2.6-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 9 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 root field 155 Aug 8 14:35 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 May 29 22:17 pics/
+# -r--r--r-- 1 root field 499 May 29 22:11 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 May 29 22:04 rdm.taf
+# drwxr-xr-x 2 root field 512 May 29 22:19 rtsdb/
+# -rw-r----- 1 root field 890 Feb 24 2011 sampled.pkts
+# drwxr-xr-x 3 root field 512 Dec 4 2010 sec-download/
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 Feb 10 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show system uptime
+# System booted: 2013-08-08 14:33 CDT
+# Protocols started: 2013-08-08 14:35 CDT
+# Last configured: 2013-08-19 13:30 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show interface terse
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#ge-0/0/1 up up
+#ge-0/0/1.0 up up
+#ge-0/0/2 up down
+#ge-0/0/3 up down
+#ge-0/0/4 up down
+#ge-0/0/5 up down
+#ge-0/0/6 up down
+#ge-0/0/7 up down
+#ge-0/0/8 up down
+#ge-0/0/9 up up
+#ge-0/0/9.0 up up
+#ge-0/1/0 up down
+#ge-0/1/1 up down
+#ge-0/1/2 up down
+#ge-0/1/3 up down
+#ge-0/1/4 up down
+#ge-0/1/5 up down
+#ge-0/1/6 up down
+#ge-0/1/7 up down
+#ge-0/1/8 up down
+#ge-0/1/9 up down
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-1/0/0 up up
+#ge-1/0/0.0 up up
+#lc-1/0/0 up up
+#lc-1/0/0.32769 up up
+#pfe-1/0/0 up up
+#pfe-1/0/0.16383 up up
+#pfh-1/0/0 up up
+#pfh-1/0/0.16383 up up
+#ge-1/0/1 up up
+#ge-1/0/1.0 up up
+#ge-1/0/2 up down
+#ge-1/0/3 up down
+#ge-1/0/4 up down
+#ge-1/0/5 up down
+#ge-1/0/6 up down
+#ge-1/0/7 up down
+#ge-1/0/8 up down
+#ge-1/0/9 up down
+#ge-1/1/0 up down
+#ge-1/1/1 up down
+#ge-1/1/2 up down
+#ge-1/1/3 up down
+#ge-1/1/4 up down
+#ge-1/1/5 up down
+#ge-1/1/6 up down
+#ge-1/1/7 up down
+#ge-1/1/8 up down
+#ge-1/1/9 up down
+#lc-1/2/0 up up
+#lc-1/2/0.32769 up up
+#pfe-1/2/0 up up
+#pfe-1/2/0.16383 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 up down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at PONCA-CITY-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:30:44 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name PONCA-CITY-MX480-RE0;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name PONCA-CITY-MX480-RE1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ backup-router 172.25.46.1;
+ time-zone America/Chicago;
+ authentication-order [ password radius ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.186;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1044;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file ospf-nbr {
+ any any;
+ match RPD_OSPF_NBR;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ inactive: sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ inactive: sampling-instance JFLOW-1;
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+ inactive: network-services all-ethernet;
+}
+interfaces {
+ ge-0/0/0 {
+ description "CORE 1GE to hub.ton ge-4/0/0 [DARK FIBER KAMO] | OneNet-TON-PONC-GE-4815";
+ unit 0 {
+ family inet {
+ address 164.58.245.166/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ff92::1/80;
+ }
+ family mpls;
+ }
+ }
+ ge-0/0/1 {
+ description Ponca-City-PS-CIR0004412;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ description Ponca-City-PS-CIR0004412;
+ family inet {
+ address 156.110.26.253/30;
+ }
+ }
+ }
+ ge-0/0/9 {
+ description "CORE 1GE to core.sti ge-0/3/0 | OneNet-STI-PONC-GE-4814";
+ unit 0 {
+ family inet {
+ address 164.58.245.162/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ff91::2/80;
+ }
+ family mpls;
+ }
+ }
+ ge-1/0/0 {
+ description University-Center-at-Ponca-City-Northern-University-CIR0004321;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.126.29/30;
+ }
+ }
+ }
+ ge-1/0/1 {
+ description OSU-University-Multispectral-Laboratory-GE-CIR0004316;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.118.57/30;
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ description PONCA-CITY-M480-Loopback;
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.186/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::36/128;
+ }
+ }
+ }
+}
+inactive: forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1000;
+ }
+ family inet {
+ output {
+ flow-server 164.58.253.210 {
+ port 9993;
+ version-ipfix {
+ template {
+ IP-V4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.186;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ location "Ponca City, OK";
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 156.110.127.24/29 next-hop 156.110.126.30;
+ route 164.58.28.184/29 next-hop 156.110.126.30;
+ route 164.58.148.96/27 next-hop 156.110.118.58;
+ route 164.58.161.24/29 next-hop 156.110.126.30;
+ route 164.58.199.170/32 next-hop 156.110.126.30;
+ route 204.126.191.0/24 next-hop 156.110.126.30;
+ route 164.58.218.64/26 next-hop 156.110.26.254;
+ route 156.110.91.160/27 next-hop 156.110.126.30;
+ }
+ router-id 164.58.199.186;
+ autonomous-system 5078;
+}
+protocols {
+ mpls {
+ interface ge-0/0/0.0;
+ interface lo0.0;
+ interface ge-0/0/9.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.186;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface ge-0/0/0.0 {
+ authentication {
+ md5 7 key "$9$3T7lnApBIcSlMIRMX7-g4TzF3Cu1RhyeWp0RSreW8" start-time "2011-6-15.23:25:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/0/9.0 {
+ authentication {
+ md5 7 key "$9$f536ApB1EypuyKM8VbqmPfF/tuOIhr69u1Rhrl" start-time "2011-6-15.23:25:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface fxp0.0 {
+ disable;
+ }
+ interface lo0.0;
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface ge-0/0/9.0;
+ interface ge-0/0/0.0;
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface ge-0/0/0.0;
+ interface ge-0/0/9.0;
+ interface lo0.0;
+ }
+ lldp {
+ interface ge-0/0/9;
+ interface ge-0/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Ponca-City;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Ponca-City;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-onenet {
+ import default;
+ forwarding-class scavenger-service {
+ loss-priority high code-points cs1;
+ }
+ forwarding-class expedited-forwarding {
+ loss-priority low code-points [ cs3 cs4 ];
+ loss-priority high code-points cs5;
+ }
+ }
+ }
+ drop-profiles {
+ T1-interpolated {
+ interpolate {
+ fill-level [ 50 75 ];
+ drop-probability [ 0 25 ];
+ }
+ }
+ }
+ forwarding-classes {
+ class best-effort queue-num 0;
+ class expedited-forwarding queue-num 2;
+ class assured-forwarding queue-num 1;
+ class network-control queue-num 3;
+ class scavenger-service queue-num 4;
+ }
+ interfaces {
+ lsq-* {
+ unit * {
+ scheduler-map t1-sch-map;
+ classifiers {
+ dscp dscp-onenet;
+ }
+ }
+ }
+ t1-* {
+ scheduler-map t1-sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-onenet;
+ }
+ }
+ }
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-onenet;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class best-effort scheduler best-effort-sch;
+ forwarding-class expedited-forwarding scheduler expedited-forwarding-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ forwarding-class assured-forwarding scheduler assured-forwarding-sch;
+ forwarding-class scavenger-service scheduler scavenger-service-sch;
+ }
+ t1-sch-map {
+ forwarding-class best-effort scheduler best-effort-sch;
+ forwarding-class expedited-forwarding scheduler t1-expedited-forwarding-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ forwarding-class assured-forwarding scheduler t1-assured-forwarding-sch;
+ forwarding-class scavenger-service scheduler scavenger-service-sch;
+ }
+ }
+ schedulers {
+ best-effort-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ drop-profile-map loss-priority any protocol any drop-profile T1-interpolated;
+ }
+ assured-forwarding-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ expedited-forwarding-sch {
+ transmit-rate percent 50;
+ buffer-size percent 25;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ scavenger-service-sch {
+ transmit-rate percent 0;
+ buffer-size percent 0;
+ priority low;
+ }
+ t1-assured-forwarding-sch {
+ transmit-rate percent 90;
+ buffer-size percent 60;
+ priority medium-high;
+ }
+ t1-expedited-forwarding-sch {
+ buffer-size percent 25;
+ priority strict-high;
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ 172.23.0.0/16;
+ 10.199.2.0/24;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ 172.23.0.0/16;
+ 10.199.2.0/24;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+inactive: services {
+ flow-monitoring {
+ version-ipfix {
+ template IP-V4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at PONCA-CITY-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.165 ge-0/0/0.0 Full 164.58.199.70
+# 164.58.245.161 ge-0/0/9.0 Full 164.58.199.232
+#
+# {master}
Index: core.ida.onenet.net
===================================================================
--- core.ida.onenet.net (revision 76427)
+++ core.ida.onenet.net (working copy)
@@ -0,0 +1,1054 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at IDABEL-MX480-RE0> show system commit
+# 2013-08-19 13:26:46 CDT by jeremyt via cli commit synchronize
+# 2013-08-16 11:00:11 CDT by josh via cli commit synchronize
+# 2013-08-14 08:25:06 CDT by rnordmark via cli commit synchronize
+# 2013-08-09 16:58:13 CDT by joel via cli commit synchronize
+# 2013-08-07 14:19:57 CDT by joel via cli commit synchronize
+# 2013-08-07 14:16:55 CDT by rnordmark via cli commit synchronize
+# grnoc-mon at IDABEL-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at IDABEL-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at IDABEL-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at IDABEL-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11F43D1AFB MX480
+# Midplane REV 05 710-017414 ACAB3530 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBS1790 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U10K PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U0JM PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U0YL PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U0YS PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012033851 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012033650 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV0764 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV0767 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 CAAD4999 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 CAAE1064 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6272 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL40W1E XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL40GME XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBS1649 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AC1108S03TC SFP-SX
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A475826 SFP-T
+# Xcvr 1 REV 02 740-013111 A476797 SFP-T
+# Xcvr 9 NON-JNPR CXSXA01005 SFP-SX
+# QXM 0 REV 06 711-028408 CAAE1531 MPC QXM
+# QXM 1 REV 06 711-028408 CAAE1641 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at IDABEL-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB3530 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBS1790 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U10K PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U0JM PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U0YL PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U0YS PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012033851 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012033650 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV0764 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV0767 SCBE-MX-S
+# FPC 0 REV 09 750-038493 CAAD4999 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6272 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBS1649 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at IDABEL-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012033851
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012033650
+#
+# grnoc-mon at IDABEL-MX480-RE0> show chassis scb
+# grnoc-mon at IDABEL-MX480-RE0> show chassis sfm detail
+# grnoc-mon at IDABEL-MX480-RE0> show chassis ssb
+# grnoc-mon at IDABEL-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:79:a3:86
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at IDABEL-MX480-RE0> show version
+# Hostname: IDABEL-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Services!
[11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at IDABEL-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 1662996
+# -rw-r--r-- 1 root field 30 Jun 28 2012 ex.txt
+# drwxr-xr-x 2 root field 512 Jun 28 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 May 26 00:57 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 install/
+# -rw-r--r-- 1 root field 421204768 Jul 10 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 May 25 07:33 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 8404168 Jul 10 2012 jweb-11.4R4.4-signed.tgz
+# -rw-r--r-- 1 root field 155 May 26 01:13 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 pics/
+# -r--r--r-- 1 root field 499 May 26 00:47 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jun 28 2012 rtsdb/
+# -rw-r----- 1 root field 890 May 26 01:13 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jun 28 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jun 28 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at IDABEL-MX480-RE0> show system uptime
+# System booted: 2013-05-26 00:55 CDT
+# Protocols started: 2013-05-26 01:13 CDT
+# Last configured: 2013-08-19 13:26 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at IDABEL-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up down
+#xe-0/0/0.32767 up down
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up down
+#ge-0/3/0 up up
+#ge-0/3/0.0 up up
+#ge-0/3/1 up up
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/3.2011 up down
+#ge-0/3/3.32767 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up up
+#ge-0/3/9.2514 up up
+#ge-0/3/9.32767 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at IDABEL-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:26:46 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name IDABEL-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name IDABEL-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.103;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ inactive: unit 69 {
+ description "10G Backhaul";
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.30/30;
+ }
+ family mpls;
+ }
+ }
+ xe-0/1/1 {
+ description "RESERVED FOR IPERF [ORDERED]";
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.ida ge-3/2/3 | OneNet-IDA-IDA-GE-5087";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.244.189/30;
+ }
+ family inet6 {
+ address 2610:1d8:f00::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/0 {
+ description McCurtain-Memorial-Hospital-DS3-CIR0004872-RICI;
+ speed 100m;
+ mtu 9192;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ mtu 1500;
+ address 156.110.83.97/29;
+ }
+ }
+ }
+ ge-0/3/3 {
+ description "IPERF SERVER MGMT VPLS_2011 [NO-MONITOR]";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation vlan-vpls;
+ unit 2011 {
+ encapsulation vlan-vpls;
+ vlan-id 2011;
+ family vpls;
+ }
+ }
+ ge-0/3/9 {
+ description "SE L2 Link to Durant Branch Campus";
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 2514 {
+ encapsulation vlan-ccc;
+ bandwidth 1g;
+ vlan-id-range 1-4000;
+ }
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.103/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::23/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9103;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.103;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location IDABEL;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 156.110.83.112/29 next-hop 156.110.83.100;
+ route 164.58.29.80/28 next-hop 156.110.83.100;
+ route 164.58.29.200/29 next-hop 156.110.83.100;
+ }
+ router-id 164.58.199.103;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.103;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216;
+ neighbor 164.58.199.226;
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/0.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface lo0.0;
+ }
+ l2circuit {
+ neighbor 164.58.199.15 {
+ interface ge-0/3/9.2514 {
+ virtual-circuit-id 2514;
+ }
+ }
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Idabel;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Idabel;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+routing-instances {
+ VPLS-ONENET-IPERF {
+ description ONENET-IPERF-MGMT;
+ instance-type vpls;
+ vlan-id 2011;
+ interface ge-0/3/3.2011;
+ route-distinguisher 164.58.199.103:2011;
+ vrf-target target:5078:2011;
+ protocols {
+ vpls {
+ mac-table-size {
+ 3000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site IDABEL-IPERF {
+ site-identifier 9;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at IDABEL-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.244.190 ge-0/2/0.0 Full 164.58.199.102
+#
+# {master}
Index: core.woo.onenet.net
===================================================================
--- core.woo.onenet.net (revision 76433)
+++ core.woo.onenet.net (working copy)
@@ -0,0 +1,1139 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at WOODWARD-MX480-RE0> show system commit
+# 2013-08-19 13:24:25 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 11:50:53 CDT by rnordmark via cli commit synchronize
+# 2013-08-15 09:06:56 CDT by joel via cli commit synchronize
+# 2013-08-14 17:02:37 CDT by donnie via cli commit synchronize
+# 2013-08-14 11:34:01 CDT by joel via cli commit synchronize
+# 2013-08-14 09:52:54 CDT by joel via cli commit synchronize
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN1201769AFB MX480
+# Midplane REV 05 710-017414 ACAB5794 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBS1770 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U03D PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U02T PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U0PZ PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U0JR PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012028906 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012029000 RE-S-2000
+# CB 0 REV 14 750-031391 ABBS3898 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBS3878 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 ZZ6510 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 CAAE2697 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6204 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL40W22 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL515NJ XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV0311 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AC1108S03WK SFP-SX
+# Xcvr 1 REV 01 740-031850 PM24CM5 SFP-LX10
+# Xcvr 8 REV 02 740-013111 B436577 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A476573 SFP-T
+# Xcvr 9 REV 02 740-013111 B436478 SFP-T
+# QXM 0 REV 06 711-028408 CAAE4954 MPC QXM
+# QXM 1 REV 06 711-028408 CAAE4772 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB5794 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBS1770 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U03D PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U02T PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U0PZ PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U0JR PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012028906 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012029000 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBS3898 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBS3878 SCBE-MX-S
+# FPC 0 REV 09 750-038493 ZZ6510 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6204 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV0311 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012028906
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012029000
+#
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis scb
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis sfm detail
+# grnoc-mon at WOODWARD-MX480-RE0> show chassis ssb
+# grnoc-mon at WOODWARD-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:77:45:33
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+# WARNING: / was not properly dismounted
+#
+# {master}
+# grnoc-mon at WOODWARD-MX480-RE0> show version
+# Hostname: WOODWARD-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Servic!
es [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at WOODWARD-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 1663036
+# -rwxr-xr-x 1 root field 19312 Jul 11 2012 Woodward.txt*
+# -rw-r--r-- 1 root field 30 Jun 23 2012 ex.txt
+# drwxr-xr-x 2 root field 512 Jun 23 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 Jul 29 23:32 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 install/
+# -rw-r--r-- 1 root field 421204768 Jul 11 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Jun 5 19:33 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 8404168 Jul 11 2012 jweb-11.4R4.4-signed.tgz
+# -rw-r--r-- 1 root field 155 Jul 29 23:32 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 pics/
+# -r--r--r-- 1 root field 499 Jun 5 22:35 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jun 23 2012 rtsdb/
+# -rw-r----- 1 root field 712 Jul 29 23:32 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jun 23 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jun 23 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at WOODWARD-MX480-RE0> show system uptime
+# System booted: 2013-07-29 23:30 CDT
+# Protocols started: 2013-07-29 23:32 CDT
+# Last configured: 2013-08-19 13:24 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at WOODWARD-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 down down
+#xe-0/1/0 down down
+#xe-0/1/1 down down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.250 up up
+#ge-0/2/1.3907 up up
+#ge-0/2/1.32767 up up
+#ge-0/2/2 up down
+#ge-0/2/2.250 up down
+#ge-0/2/2.3910 up down
+#ge-0/2/2.32767 up down
+#ge-0/2/3 down down
+#ge-0/2/4 down down
+#ge-0/2/5 down down
+#ge-0/2/6 down down
+#ge-0/2/7 down down
+#ge-0/2/8 up up
+#ge-0/2/8.0 up up
+#ge-0/2/9 down down
+#ge-0/3/0 up up
+#ge-0/3/0.0 up up
+#ge-0/3/1 down down
+#ge-0/3/2 down down
+#ge-0/3/3 down down
+#ge-0/3/4 down down
+#ge-0/3/5 down down
+#ge-0/3/6 down down
+#ge-0/3/7 down down
+#ge-0/3/8 down down
+#ge-0/3/8.0 up down
+#ge-0/3/9 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at WOODWARD-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:24:25 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name WOODWARD-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name WOODWARD-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.59;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core.okc2 xe-2/0/1 | OneNet-OKC-WOO-XE-5001";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.74/30;
+ }
+ family inet6 {
+ address 2610:1d8:1100::15/127;
+ }
+ family mpls;
+ }
+ }
+ xe-0/0/1 {
+ disable;
+ }
+ xe-0/1/0 {
+ disable;
+ }
+ xe-0/1/1 {
+ disable;
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.woo ge-3/2/3 | OneNet-WOO-WOO-GE-5100";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.65/30;
+ }
+ family inet6 {
+ address 2610:1d8:4800::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/1 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.nwosu ge-0/1/0 | OneNet-WOO-CAINWOSU-GE-15448";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.193/30;
+ }
+ }
+ unit 3907 {
+ description "L2 Northwestern-OSU-GE-VLAN3907-CIR000XXXX [ORDERED]";
+ vlan-id 3907;
+ family inet {
+ address 156.110.59.41/29;
+ }
+ }
+ }
+ ge-0/2/2 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to core.woo ge-0/2/2 | OneNet-WOO-CAIWOO-GE-5256 [ORDERED]";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.213/30;
+ }
+ }
+ unit 3910 {
+ description "L2 Woodward-Hospital-100Mb-VLAN3910-CIR0005257 [ORDERED]";
+ vlan-id 3916;
+ family inet {
+ address 156.110.130.37/30;
+ }
+ }
+ }
+ ge-0/2/3 {
+ disable;
+ }
+ ge-0/2/4 {
+ disable;
+ }
+ ge-0/2/5 {
+ disable;
+ }
+ ge-0/2/6 {
+ disable;
+ }
+ ge-0/2/7 {
+ disable;
+ }
+ ge-0/2/8 {
+ description "WOODWARD-HIGH-PLAINS-VOTECH-CIR0002774 [NO-MONITOR]";
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.223.129/25;
+ }
+ }
+ }
+ ge-0/2/9 {
+ disable;
+ }
+ ge-0/3/0 {
+ description Woodward-Public-Library-DS3-CIR0004656-RICI;
+ speed 100m;
+ mtu 9192;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ mtu 1500;
+ address 156.110.211.217/29;
+ }
+ }
+ }
+ ge-0/3/1 {
+ disable;
+ }
+ ge-0/3/2 {
+ disable;
+ }
+ ge-0/3/3 {
+ disable;
+ }
+ ge-0/3/4 {
+ disable;
+ }
+ ge-0/3/5 {
+ disable;
+ }
+ ge-0/3/6 {
+ disable;
+ }
+ ge-0/3/7 {
+ disable;
+ }
+ ge-0/3/8 {
+ description "WOODWARD-HIGH-PLAINS-VOTECH-CIR0002774 [NO-MONITOR]";
+ disable;
+ speed 100m;
+ link-mode full-duplex;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 0 {
+ family inet;
+ }
+ }
+ fxp0 {
+ disable;
+ unit 0 {
+ family inet {
+ address 192.168.1.1/24;
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.59/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::31/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9059;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.59;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location WOODWARD;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 164.58.18.224/29 next-hop 156.110.211.220;
+ route 164.58.144.32/27 next-hop 156.110.59.44;
+ }
+ router-id 164.58.199.59;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.59;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/0.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface lo0.0;
+ }
+ lldp {
+ interface xe-0/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Woodward;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Woodward;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at WOODWARD-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.66 ge-0/2/0.0 Full 164.58.199.58
+# 164.58.246.73 xe-0/0/0.69 Full 164.58.199.212
+#
+# {master}
Index: core2.dc.onenet.net
===================================================================
--- core2.dc.onenet.net (revision 76410)
+++ core2.dc.onenet.net (working copy)
@@ -493,12 +493,12 @@
#ae0.1 up up
#ae0.32767 up up
#ae1 up down
-#ae2 up up
-#ae2.0 up up
-#ae2.32767 up up
-#ae3 up up
-#ae3.0 up up
-#ae3.32767 up up
+#ae2 up down
+#ae2.0 up down
+#ae2.32767 up down
+#ae3 up down
+#ae3.0 up down
+#ae3.32767 up down
#ae4 up down
#ae5 up up
#ae5.0 up up
Index: core.dun.onenet.net
===================================================================
--- core.dun.onenet.net (revision 76422)
+++ core.dun.onenet.net (working copy)
@@ -0,0 +1,1112 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show system commit
+# 2013-08-19 13:22:40 CDT by jeremyt via cli commit synchronize
+# 2013-08-16 10:11:57 CDT by josh via cli commit synchronize
+# 2013-08-15 15:06:20 CDT by rnordmark via cli commit synchronize
+# 2013-08-14 15:41:27 CDT by rnordmark via cli commit synchronize
+# 2013-08-14 15:39:26 CDT by rnordmark via cli commit synchronize
+# 2013-08-14 09:03:36 CDT by joel via cli commit synchronize
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11FF846AFB MX480
+# Midplane REV 05 710-017414 ACAB5805 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBT8406 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U007 PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 07 740-029970 QCS1139U06P PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U09T PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U060 PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012033712 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012033780 RE-S-2000
+# CB 0 REV 14 750-031391 ABBS3883 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBS3873 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 CAAD4975 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 CAAE1115 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6243 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL40W1B XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL40W0W XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV4719 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AC1108S03U2 SFP-SX
+# Xcvr 2 REV 01 740-031850 PLS6PEF SFP-LX10
+# Xcvr 3 REV 01 740-031849 97T601000326 SFP-LH
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 9 REV 02 740-013111 B436461 SFP-T
+# QXM 0 REV 06 711-028408 CAAE1505 MPC QXM
+# QXM 1 REV 06 711-028408 CAAE1499 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB5805 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBT8406 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U007 PWR-MX480-2520-AC-S
+# PEM 1 Rev 07 740-029970 QCS1139U06P PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U09T PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U060 PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012033712 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012033780 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBS3883 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBS3873 SCBE-MX-S
+# FPC 0 REV 09 750-038493 CAAD4975 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6243 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV4719 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012033712
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012033780
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis scb
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis sfm detail
+# grnoc-mon at DUNCAN-MX480-RE0> show chassis ssb
+# grnoc-mon at DUNCAN-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:79:a3:45
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show version
+# Hostname: DUNCAN-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Services!
[11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # grnoc-mon at DUNCAN-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 1662996
+# -rw-r--r-- 1 root field 30 Jun 28 2012 ex.txt
+# drwxr-xr-x 2 root field 512 Jun 28 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 May 28 00:36 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 install/
+# -rw-r--r-- 1 root field 421204768 Jul 10 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 May 27 21:24 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 8404168 Jul 10 2012 jweb-11.4R4.4-signed.tgz
+# -rw-r--r-- 1 root field 155 May 28 01:03 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 10 2012 pics/
+# -r--r--r-- 1 root field 499 May 28 00:28 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jun 28 2012 rtsdb/
+# -rw-r----- 1 root field 712 May 28 01:03 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jun 28 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jun 28 2012 vi.recover/
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show system uptime
+# System booted: 2013-05-28 00:35 CDT
+# Protocols started: 2013-05-28 01:03 CDT
+# Last configured: 2013-08-19 13:22 CDT by jeremyt
+#
+# grnoc-mon at DUNCAN-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 up up
+#ge-0/2/2.250 up up
+#ge-0/2/2.251 up up
+#ge-0/2/2.3901 up up
+#ge-0/2/2.3902 up up
+#ge-0/2/2.32767 up up
+#ge-0/2/3 up up
+#ge-0/2/3.250 up up
+#ge-0/2/3.3914 up up
+#ge-0/2/3.32767 up up
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up down
+#ge-0/3/0 up down
+#ge-0/3/1 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/3.2011 up down
+#ge-0/3/3.32767 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at DUNCAN-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:22:40 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name DUNCAN-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name DUNCAN-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.19;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ inactive: graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ description "CORE 10GE to core1.okc xe-3/2/0 | OneNet-OKC-HUTDUN-XE-xxxx [NO-MONITOR]";
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.18/30;
+ }
+ family inet6 {
+ address 2610:1d8:1000::1d/127;
+ }
+ family mpls;
+ }
+ }
+ xe-0/1/1 {
+ description "RESERVED FOR IPERF [ORDERED]";
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.dun ge-3/2/3 | OneNet-DUN-DUN-GE-5083";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.244.125/30;
+ }
+ family inet6 {
+ address 2610:1d8:800::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/2 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.dun ge-0/1/0 | OneNet-DUN-CAIDUN-GE-5215";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.209/30;
+ }
+ }
+ unit 251 {
+ description "L2 CORE 1GE to swi.cai.com ge-0/1/0 | OneNet-DUN-CAICOM-GE-5209";
+ vlan-id 251;
+ family inet {
+ mtu 9000;
+ address 164.58.247.249/30;
+ }
+ }
+ unit 3901 {
+ description "L2 Duncan-Public-Library-100Mb-VLAN3901-CIR0005216 [ORDERED]";
+ vlan-id 3901;
+ family inet {
+ address 156.110.62.225/30;
+ }
+ }
+ unit 3902 {
+ description "L2 Comanche-Nation-Tribal-College-GE-VLAN3902-CIR0005210 [ORDERED]";
+ vlan-id 3902;
+ family inet {
+ address 156.110.72.117/30;
+ }
+ }
+ }
+ ge-0/2/3 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.caijef ge-0/1/0 | OneNet-DUN-CAIJEF-GE-5252";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.217/30;
+ }
+ }
+ unit 3914 {
+ description "L2 Jefferson-County-Hospital-100Mb-VLAN3914-CIR0005253 [ORDERED]";
+ vlan-id 3914;
+ family inet {
+ address 164.58.16.49/30;
+ }
+ }
+ }
+ ge-0/3/3 {
+ description "IPERF SERVER MGMT VPLS_2011 [NO-MONITOR]";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation vlan-vpls;
+ unit 2011 {
+ encapsulation vlan-vpls;
+ vlan-id 2011;
+ family vpls;
+ }
+ }
+ ge-0/3/4 {
+ description "Hub-Appliance [NO-MONITOR]";
+ }
+ ge-0/3/5 {
+ description "Hub-Appliance - Camera #2 [NO-MONITOR]";
+ }
+ ge-0/3/6 {
+ description "Hub-Appliance - Camera #1 [NO-MONITOR]";
+ }
+ ge-0/3/7 {
+ description "Hub-Appliance - UPS System [NO-MONITOR]";
+ }
+ ge-0/3/8 {
+ description "Hub-Appliance - DC Power Plant [NO-MONITOR]";
+ }
+ ge-0/3/9 {
+ description "Hub-Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.19/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::2f/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9019;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.19;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location DUNCAN;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ inactive: nonstop-routing;
+ static {
+ route 156.110.87.48/29 next-hop 156.110.72.118;
+ }
+ router-id 164.58.199.19;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.19;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ inactive: interface xe-0/0/0.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface lo0.0;
+ }
+ lldp {
+ interface ge-0/2/2;
+ interface ge-0/2/3;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Duncan;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Duncan;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+routing-instances {
+ VPLS-ONENET-IPERF {
+ description ONENET-IPERF-MGMT;
+ instance-type vpls;
+ vlan-id 2011;
+ interface ge-0/3/3.2011;
+ route-distinguisher 164.58.199.19:2011;
+ vrf-target target:5078:2011;
+ protocols {
+ vpls {
+ mac-table-size {
+ 3000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site DUNCAN-IPERF {
+ site-identifier 5;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+# grnoc-mon at DUNCAN-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.244.126 ge-0/2/0.0 Full 164.58.199.18
+#
Index: core4.okc.onenet.net
===================================================================
--- core4.okc.onenet.net (revision 76437)
+++ core4.okc.onenet.net (working copy)
@@ -0,0 +1,3161 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show system commit
+# 2013-08-19 13:32:24 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 12:44:12 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 10:57:13 CDT by donnie via cli commit synchronize
+# 2013-08-19 08:30:29 CDT by joe via cli commit synchronize
+# 2013-08-19 08:29:19 CDT by joe via cli commit synchronize
+# 2013-08-14 17:55:29 CDT by josh via cli commit synchronize
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# FPC 1 Intake OK
+# FPC 1 Exhaust A OK
+# FPC 1 Exhaust B OK
+# FPC 1 QX 0 TSen OK
+# FPC 1 QX 0 Chip OK
+# FPC 1 LU 0 TCAM TSen OK
+# FPC 1 LU 0 TCAM Chip OK
+# FPC 1 LU 0 TSen OK
+# FPC 1 LU 0 Chip OK
+# FPC 1 MQ 0 TSen OK
+# FPC 1 MQ 0 Chip OK
+# FPC 1 QX 1 TSen OK
+# FPC 1 QX 1 Chip OK
+# FPC 1 LU 1 TCAM TSen OK
+# FPC 1 LU 1 TCAM Chip OK
+# FPC 1 LU 1 TSen OK
+# FPC 1 LU 1 Chip OK
+# FPC 1 MQ 1 TSen OK
+# FPC 1 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 1 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN119D7D0AFB MX480 Midplane
+# Midplane REV 05 710-017414 ACAA8510 MX480 Midplane
+# FPM Board REV 02 710-017254 YH8728 Front Panel Display
+# PEM 0 Rev 03 740-027736 QCS1019T022 DC 2.4kW Power Entry Module
+# PEM 1 Rev 03 740-027736 QCS1019T01H DC 2.4kW Power Entry Module
+# PEM 2 Rev 03 740-027736 QCS1019T07X DC 2.4kW Power Entry Module
+# PEM 3 Rev 03 740-027736 QCS1019T052 DC 2.4kW Power Entry Module
+# Routing Engine 0 REV 14 740-013063 9012009428 RE-S-2000
+# Routing Engine 1 REV 14 740-013063 9012008957 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV5441 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV5486 Enhanced MX SCB
+# FPC 0 REV 14 750-031088 YM3004 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YM8438 MPC PMB 2G
+# MIC 0 REV 25 750-028387 YS1897 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 CA47BQ025 XFP-10G-SR
+# Xcvr 1 REV 02 740-014291 AJ203KF XFP-10G-ZR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 T10K73313 XFP-10G-SR
+# Xcvr 1 REV 02 740-014279 T09E15138 XFP-10G-LR
+# MIC 1 REV 24 750-028392 YT7711 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU0BV SFP-SX
+# Xcvr 1 REV 02 740-013111 A476894 SFP-T
+# Xcvr 2 REV 02 740-013111 A475793 SFP-T
+# Xcvr 3 REV 02 740-013111 A476812 SFP-T
+# Xcvr 4 REV 02 740-013111 A476472 SFP-T
+# Xcvr 5 REV 02 740-013111 A476885 SFP-T
+# Xcvr 6 REV 02 740-013111 A475354 SFP-T
+# Xcvr 7 REV 02 740-013111 A476470 SFP-T
+# Xcvr 8 REV 02 740-013111 A476775 SFP-T
+# Xcvr 9 REV 02 740-013111 A476919 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU323 SFP-SX
+# Xcvr 1 REV 01 740-031851 AM1041SU184 SFP-SX
+# Xcvr 2 REV 01 740-031851 AM1041SU17Y SFP-SX
+# Xcvr 3 REV 01 740-031851 AM1041SU17M SFP-SX
+# Xcvr 4 REV 01 740-031851 AM1041SU17N SFP-SX
+# Xcvr 5 REV 01 740-031851 AM1041SU180 SFP-SX
+# Xcvr 6 REV 01 740-031851 AM1041SU31U SFP-SX
+# Xcvr 7 REV 01 740-011614 PJ70YV7 SFP-LX10
+# Xcvr 8 REV 01 740-011614 07T415601485 SFP-LX10
+# Xcvr 9 REV 01 740-011614 97T406001729 SFP-LX10
+# QXM 0 REV 05 711-028408 YM2426 MPC QXM
+# QXM 1 REV 05 711-028408 YM2372 MPC QXM
+# FPC 1 REV 21 750-031088 ZX7256 MPC Type 2 3D Q
+# CPU REV 07 711-030884 ZX6922 MPC PMB 2G
+# MIC 0 REV 26 750-028387 YW8600 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 03 740-014289 CB51BQ02G XFP-10G-SR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 21T670101025 XFP-10G-LR
+# Xcvr 1 REV 03 740-014289 T10K73394 XFP-10G-SR
+# MIC 1 REV 24 750-028392 YT7794 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU3ER SFP-SX
+# Xcvr 1 REV 02 740-013111 A475832 SFP-T
+# Xcvr 2 REV 02 740-013111 A475232 SFP-T
+# Xcvr 3 REV 02 740-013111 A475728 SFP-T
+# Xcvr 4 REV 02 740-011613 PJH2F3E SFP-SX
+# Xcvr 6 REV 02 740-013111 A475341 SFP-T
+# Xcvr 7 REV 02 740-013111 A475348 SFP-T
+# Xcvr 8 REV 02 740-013111 A475843 SFP-T
+# Xcvr 9 REV 02 740-013111 A464337 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A475811 SFP-T
+# Xcvr 1 REV 02 740-013111 A476634 SFP-T
+# Xcvr 5 REV 02 740-013111 A476893 SFP-T
+# Xcvr 8 REV 02 740-013111 B436855 SFP-T
+# Xcvr 9 REV 02 740-013111 B436603 SFP-T
+# QXM 0 REV 06 711-028408 ZW8174 MPC QXM
+# QXM 1 REV 06 711-028408 ZW8189 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAA8510 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 YH8728 CRAFT-MX480-S
+# PEM 0 Rev 03 740-027736 QCS1019T022 PWR-MX480-2400-DC-S
+# PEM 1 Rev 03 740-027736 QCS1019T01H PWR-MX480-2400-DC-S
+# PEM 2 Rev 03 740-027736 QCS1019T07X PWR-MX480-2400-DC-S
+# PEM 3 Rev 03 740-027736 QCS1019T052 PWR-MX480-2400-DC-S
+# Routing Engine 0 REV 14 740-013063 9012009428 RE-S-2000-4096-S
+# Routing Engine 1 REV 14 740-013063 9012008957 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV5441 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV5486 SCBE-MX-S
+# FPC 0 REV 14 750-031088 YM3004 MX-MPC2-3D-Q
+# MIC 0 REV 25 750-028387 YS1897 MIC-3D-4XGE-XFP
+# MIC 1 REV 24 750-028392 YT7711 MIC-3D-20GE-SFP
+# FPC 1 REV 21 750-031088 ZX7256 MX-MPC2-3D-Q
+# MIC 0 REV 26 750-028387 YW8600 MIC-3D-4XGE-XFP
+# MIC 1 REV 24 750-028392 YT7794 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012009428
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012008957
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis scb
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis sfm detail
+# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis ssb
+# grnoc-mon at OKC-CORE4-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:68:48
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+# WARNING: / was not properly dismounted
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show version
+# Hostname: OKC-CORE4-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Servi!
ces [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # grnoc-mon at OKC-CORE4-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 8642920
+# -rw-r--r-- 1 admin field 655 Jan 13 2011 Junos-Config-Login-Banner3.txt
+# -rw-r--r-- 1 admin field 8117 Jan 12 2011 bgp-commodity-prefix-list.txt
+# -rw-r--r-- 1 root field 30 Dec 4 2010 ex.txt
+# -rw-rw---- 1 eng field 63568 Oct 5 2012 ftp.core.0.gz
+# drwxr-xr-x 2 root field 512 Dec 4 2010 gres-tp/
+# -rw-r--r-- 1 root field 4 Apr 14 01:10 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Dec 4 2010 install/
+# -r-xr-xr-x 1 root wheel 329257475 Dec 4 2010 jbundle-10.3R1.9-domestic.tgz*
+# -rw-r--r-- 1 root field 338894858 Jan 13 2011 jbundle-10.4R1.9-domestic.tgz
+# -rw-r--r-- 1 root field 349730789 Apr 16 2011 jbundle-10.4R3.4-domestic.tgz
+# -rw-r--r-- 1 root field 350497882 Nov 18 2011 jbundle-10.4R6.5-domestic.tgz
+# -rw-r--r-- 1 root field 350868915 Nov 14 2011 jbundle-10.4R7.5-domestic.tgz
+# -rw-r--r-- 1 root field 345084664 Jan 12 2011 jinstall-10.4R1.9-domestic.tgz
+# -rw-r--r-- 1 admin field 356069136 Apr 7 2011 jinstall-10.4R3.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 356846496 Nov 17 2011 jinstall-10.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421204768 Aug 31 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 420899223 Sep 15 2012 jinstall-11.4R5.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Apr 12 12:27 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 0 May 17 13:18 joel.txt
+# -rw-r--r-- 1 root field 0 Dec 4 2010 jperf
+# -rw-r--r-- 1 root field 0 Dec 4 2010 jperf_shmem_sem
+# -rw-r--r-- 1 admin field 7795728 Jan 13 2011 jweb-10.4R1.9.tgz
+# -rw-r--r-- 1 admin field 7830840 Apr 7 2011 jweb-10.4R3.4-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 17 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 root field 155 Apr 14 01:10 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Sep 2 2012 pics/
+# -rw-r--r-- 1 root wheel 4478 Sep 21 2012 ppe_trap_fpc0_pfe0.core.0
+# -rw-r--r-- 1 root wheel 140814 Sep 21 2012 ppe_trap_fpc0_pfe0.core.1
+# -rw-r--r-- 1 root wheel 140895 Sep 21 2012 ppe_trap_fpc0_pfe0.core.2
+# -rw-r--r-- 1 root wheel 140883 Sep 21 2012 ppe_trap_fpc0_pfe0.core.3
+# -rw-r--r-- 1 root wheel 140818 Sep 21 2012 ppe_trap_fpc0_pfe0.core.4
+# -rw-r--r-- 1 root wheel 4016 Sep 21 2012 ppe_trap_fpc0_pfe1.core.0
+# -rw-r--r-- 1 root wheel 138949 Sep 21 2012 ppe_trap_fpc0_pfe1.core.1
+# -rw-r--r-- 1 root wheel 138419 Sep 21 2012 ppe_trap_fpc0_pfe1.core.2
+# -rw-r--r-- 1 root wheel 132464 Apr 13 23:49 ppe_trap_fpc0_pfe1.core.3
+# -rw-r--r-- 1 root wheel 3720 Sep 16 2012 ppe_trap_fpc1_pfe0.core.0
+# -rw-r--r-- 1 root wheel 4017 Oct 8 2012 ppe_trap_fpc1_pfe0.core.1
+# -rw-r--r-- 1 root wheel 129862 Oct 8 2012 ppe_trap_fpc1_pfe0.core.2
+# -rw-r--r-- 1 root wheel 135968 Oct 8 2012 ppe_trap_fpc1_pfe0.core.3
+# -rw-r--r-- 1 root wheel 140052 Oct 8 2012 ppe_trap_fpc1_pfe0.core.4
+# -rw-r--r-- 1 root wheel 4187 Sep 17 2012 ppe_trap_fpc1_pfe1.core.0
+# -rw-r--r-- 1 root wheel 128261 Sep 17 2012 ppe_trap_fpc1_pfe1.core.1
+# -rw-r--r-- 1 root wheel 128259 Sep 17 2012 ppe_trap_fpc1_pfe1.core.2
+# -rw-r--r-- 1 root wheel 127057 Sep 2 2012 ppe_trap_fpc1_pfe1.core.3
+# -rw-r--r-- 1 root wheel 130713 Oct 11 2012 ppe_trap_fpc1_pfe1.core.4
+# -r--r--r-- 1 root field 499 Apr 14 00:29 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 Nov 18 2011 rdm.taf
+# drwxr-xr-x 2 root field 512 Sep 2 2012 rtsdb/
+# -rw-r----- 1 root field 3026 Apr 14 01:10 sampled.pkts
+# drwxr-xr-x 3 root field 512 Dec 4 2010 sec-download/
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 Jul 24 17:02 vi.recover/
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime
+# System booted: 2013-04-14 01:08 CDT
+# Protocols started: 2013-04-14 01:10 CDT
+# Last configured: 2013-08-19 13:32 CDT by jeremyt
+#
+# grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.40 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up up
+#xe-0/0/1.101 up up
+#xe-0/0/1.104 up up
+#xe-0/0/1.106 up up
+#xe-0/0/1.109 up up
+#xe-0/0/1.117 up up
+#xe-0/0/1.118 up up
+#xe-0/0/1.119 up up
+#xe-0/0/1.120 up up
+#xe-0/0/1.121 up up
+#xe-0/0/1.122 up up
+#xe-0/0/1.124 up up
+#xe-0/0/1.125 up up
+#xe-0/0/1.131 up up
+#xe-0/0/1.135 up up
+#xe-0/0/1.136 up up
+#xe-0/0/1.137 up up
+#xe-0/0/1.140 up up
+#xe-0/0/1.142 up up
+#xe-0/0/1.143 up up
+#xe-0/0/1.144 up up
+#xe-0/0/1.145 up up
+#xe-0/0/1.146 up up
+#xe-0/0/1.147 up up
+#xe-0/0/1.149 up up
+#xe-0/0/1.151 up up
+#xe-0/0/1.152 up up
+#xe-0/0/1.153 up up
+#xe-0/0/1.155 up up
+#xe-0/0/1.156 up up
+#xe-0/0/1.157 up up
+#xe-0/0/1.158 up up
+#xe-0/0/1.159 up up
+#xe-0/0/1.161 up up
+#xe-0/0/1.162 up up
+#xe-0/0/1.163 up up
+#xe-0/0/1.164 up up
+#xe-0/0/1.165 up up
+#xe-0/0/1.166 up up
+#xe-0/0/1.167 up up
+#xe-0/0/1.168 up up
+#xe-0/0/1.169 up up
+#xe-0/0/1.170 up up
+#xe-0/0/1.171 up up
+#xe-0/0/1.172 up up
+#xe-0/0/1.173 up up
+#xe-0/0/1.174 up up
+#xe-0/0/1.175 up up
+#xe-0/0/1.176 up up
+#xe-0/0/1.177 up up
+#xe-0/0/1.178 up up
+#xe-0/0/1.201 up up
+#xe-0/0/1.32767 up up
+#xe-0/1/0 up up
+#xe-0/1/0.72 up up
+#xe-0/1/0.32767 up up
+#xe-0/1/1 up up
+#xe-0/1/1.0 up up
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.0 up up
+#ge-0/2/2 up up
+#ge-0/2/2.0 up up
+#ge-0/2/3 up up
+#ge-0/2/3.0 up up
+#ge-0/2/4 up up
+#ge-0/2/4.0 up up
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up up
+#ge-0/2/7.0 up up
+#ge-0/2/8 up up
+#ge-0/2/8.0 up up
+#ge-0/2/9 up up
+#ge-0/2/9.0 up up
+#ge-0/3/0 up down
+#ge-0/3/1 down down
+#ge-0/3/2 up up
+#ge-0/3/2.0 up up
+#ge-0/3/3 down down
+#ge-0/3/4 up down
+#ge-0/3/5 up up
+#ge-0/3/5.0 up up
+#ge-0/3/6 up up
+#ge-0/3/6.0 up up
+#ge-0/3/6.32767 up up
+#ge-0/3/7 up up
+#ge-0/3/7.0 up up
+#ge-0/3/8 up up
+#ge-0/3/8.0 up up
+#ge-0/3/9 up down
+#lc-1/0/0 up up
+#lc-1/0/0.32769 up up
+#pfe-1/0/0 up up
+#pfe-1/0/0.16383 up up
+#pfh-1/0/0 up up
+#pfh-1/0/0.16383 up up
+#xe-1/0/0 up down
+#xe-1/0/1 up up
+#xe-1/0/1.56 up up
+#xe-1/0/1.32767 up up
+#xe-1/1/0 up up
+#xe-1/1/0.0 up up
+#xe-1/1/1 up up
+#xe-1/1/1.0 up up
+#xe-1/1/1.666 up up
+#xe-1/1/1.32767 up up
+#ge-1/2/0 up up
+#ge-1/2/0.401 up up
+#ge-1/2/0.402 up up
+#ge-1/2/0.32767 up up
+#lc-1/2/0 up up
+#lc-1/2/0.32769 up up
+#pfe-1/2/0 up up
+#pfe-1/2/0.16383 up up
+#ge-1/2/1 up up
+#ge-1/2/2 up down
+#ge-1/2/3 up down
+#ge-1/2/4 up up
+#ge-1/2/4.604 up up
+#ge-1/2/4.32767 up up
+#ge-1/2/5 up down
+#ge-1/2/6 up down
+#ge-1/2/7 up down
+#ge-1/2/8 up down
+#ge-1/2/9 up up
+#ge-1/2/9.0 up up
+#ge-1/3/0 up up
+#ge-1/3/0.2523 up up
+#ge-1/3/0.32767 up up
+#ge-1/3/1 up up
+#ge-1/3/1.146 up up
+#ge-1/3/1.178 up up
+#ge-1/3/1.503 up up
+#ge-1/3/1.504 up up
+#ge-1/3/1.32767 up up
+#ge-1/3/2 up down
+#ge-1/3/3 up down
+#ge-1/3/4 up down
+#ge-1/3/5 up up
+#ge-1/3/5.0 up up
+#ge-1/3/6 up down
+#ge-1/3/7 up down
+#ge-1/3/8 up up
+#ge-1/3/8.2510 up up
+#ge-1/3/8.2512 up up
+#ge-1/3/8.32767 up up
+#ge-1/3/9 up up
+#ge-1/3/9.158 up up
+#ge-1/3/9.159 up up
+#ge-1/3/9.164 up up
+#ge-1/3/9.165 up up
+#ge-1/3/9.167 up up
+#ge-1/3/9.173 up up
+#ge-1/3/9.2510 up up
+#ge-1/3/9.2512 up up
+#ge-1/3/9.32767 up up
+#ae0 up down
+#ae1 up down
+#ae2 up down
+#ae3 up down
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#lsi.0 up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at OKC-CORE4-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:32:24 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name OKC-CORE4-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name OKC-CORE4-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ internet-options {
+ icmpv4-rate-limit packet-rate 2000;
+ }
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.214;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ inactive: graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ aggregated-devices {
+ ethernet {
+ device-count 4;
+ }
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.okc xe-1/0/0 | OneNet-OKC-OKC-XE-4464";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 40 {
+ vlan-id 40;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.42/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ff3::2/80;
+ address 2610:1d8:1000::5/127;
+ }
+ family mpls;
+ }
+ }
+ xe-0/0/1 {
+ description "NNI to COX - OKC - CIR0004688";
+ flexible-vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 101 {
+ description JD-McCarty-Center-FE-CIR0002799;
+ vlan-id 101;
+ family inet {
+ address 156.110.26.77/30;
+ }
+ }
+ inactive: unit 103 {
+ description Metro-Area-VoTech-Dist-2-FE-CIR0002244;
+ vlan-id 103;
+ family inet {
+ address 164.58.26.193/26 {
+ preferred;
+ }
+ address 164.58.72.105/29;
+ }
+ }
+ unit 104 {
+ description Metropolitan-Library-System-FE-CIR0002159;
+ vlan-id 104;
+ family inet {
+ address 156.110.27.85/30;
+ }
+ }
+ unit 106 {
+ description Francis-Tuttle-Votech-FE-CIR0002645;
+ vlan-id 106;
+ family inet {
+ address 164.58.1.77/30;
+ }
+ }
+ unit 109 {
+ description Oklahoma-County-Annex-FE-CIR0003416;
+ vlan-id 109;
+ family inet {
+ address 156.110.24.57/30;
+ }
+ }
+ unit 117 {
+ description Krebs-Schools-10M-CIR0002426;
+ vlan-id 117;
+ family inet {
+ address 156.110.25.21/30;
+ }
+ }
+ unit 118 {
+ description ElReno-PS-FE-CIR0003769;
+ vlan-id 118;
+ family inet {
+ address 156.110.25.9/30;
+ }
+ }
+ unit 119 {
+ description Mustang-PS-100M-CIR0002653;
+ vlan-id 119;
+ family inet {
+ address 164.58.0.193/30;
+ }
+ }
+ unit 120 {
+ description Mid-America-Bible-College-100m-CIR0002679;
+ vlan-id 120;
+ family inet {
+ address 156.110.25.161/30;
+ }
+ }
+ unit 121 {
+ description Yukon-Public-Schools-Ethernet-CIR0002461;
+ vlan-id 121;
+ family inet {
+ address 156.110.25.109/30;
+ }
+ }
+ unit 122 {
+ description Moore-Norman-Vo-Tech-FE-CIR0002431;
+ vlan-id 122;
+ family inet {
+ address 164.58.0.77/30;
+ }
+ }
+ unit 124 {
+ description Norman-Public-Library-FE-CIR0001206;
+ vlan-id 124;
+ family inet {
+ address 164.58.14.193/30;
+ }
+ }
+ unit 125 {
+ description Edmond-Schools-FE-CIR0001094;
+ vlan-id 125;
+ family inet {
+ address 164.58.74.1/25;
+ }
+ }
+ unit 131 {
+ description Cleveland-County-Ethernet-CIR0003471;
+ vlan-id 131;
+ family inet {
+ address 156.110.98.69/30;
+ }
+ }
+ inactive: unit 133 {
+ family inet;
+ }
+ unit 135 {
+ description City-of-Edmond-FE-CIR0003633;
+ vlan-id 135;
+ family inet {
+ address 164.58.0.129/30;
+ }
+ }
+ unit 136 {
+ description Moore-Public-Library-FE-CIR0003733;
+ vlan-id 136;
+ family inet {
+ address 156.110.24.5/30;
+ }
+ }
+ unit 137 {
+ description Metropolitan-Library-System-FE-CIR0003746;
+ vlan-id 137;
+ family inet {
+ address 156.110.27.93/30;
+ }
+ }
+ unit 140 {
+ description OKC-Public-Schools-FE-CIR0003820;
+ vlan-id 140;
+ family inet {
+ address 156.110.24.21/30;
+ }
+ }
+ unit 142 {
+ description Integris-Tele-Health-Network-FE-CIR0004976;
+ vlan-id 142;
+ family inet {
+ address 156.110.27.97/30;
+ }
+ }
+ unit 143 {
+ description Bethany-Public-Schools-FE-CIR0003871;
+ vlan-id 143;
+ family inet {
+ address 164.58.1.137/30;
+ }
+ }
+ unit 144 {
+ description Oklahoma-City-County-Health-Department-CIR0003857;
+ vlan-id 144;
+ family inet {
+ address 156.110.25.49/30;
+ }
+ }
+ unit 145 {
+ description "Canadian-Valley-VT-Elreno-FE-CIR0003865 CIR-DOWN-MIGRATING-TO-NEW-SOON [NO-MONITOR]";
+ vlan-id 145;
+ family inet {
+ address 164.58.173.225/28;
+ }
+ }
+ unit 146 {
+ description Canadian-Valley-Tech-Center-Mustang-CIR0003866;
+ encapsulation vlan-vpls;
+ vlan-tags outer 146 inner-range 100-600;
+ native-inner-vlan-id 146;
+ family vpls;
+ }
+ unit 147 {
+ description Pioneer-Library-System-FE-CIR0003960;
+ vlan-id 147;
+ family inet {
+ address 164.58.254.21/30;
+ }
+ }
+ unit 149 {
+ description University-of-Central-OK-SchoolofRock-FE-CIR0004023;
+ vlan-id 149;
+ family inet {
+ address 10.100.100.6/30;
+ }
+ }
+ unit 151 {
+ description Millwood-Public-Schools-10Mbps-CIR0003946;
+ vlan-id 151;
+ family inet {
+ address 156.110.70.145/30;
+ }
+ }
+ unit 152 {
+ description OK-Housing-Finance-Agency-FE-CIR0004360;
+ vlan-id 152;
+ family inet {
+ address 156.110.24.181/30;
+ }
+ }
+ unit 153 {
+ description South-Oklahoma-City-Public-Library-Fast-Ethernet-CIR0004632;
+ vlan-id 153;
+ family inet {
+ address 164.58.4.217/30;
+ }
+ }
+ unit 155 {
+ description OKC-Public-Schools-Gb-CIR0003950;
+ vlan-id 155;
+ family inet {
+ address 164.58.1.97/30;
+ }
+ }
+ unit 156 {
+ description OK-Christian-University-CIR0004353;
+ vlan-id 156;
+ family inet {
+ address 164.58.8.145/30;
+ }
+ }
+ unit 157 {
+ description North-Rock-Creek-School-40Mb-CIR0005195;
+ vlan-id 157;
+ family inet {
+ address 164.58.12.97/30;
+ }
+ }
+ unit 158 {
+ description "Metro Tech Aviation Career Campus-100m-CIR0004846";
+ encapsulation vlan-vpls;
+ vlan-tags outer 158 inner-range 1-4000;
+ native-inner-vlan-id 158;
+ family vpls;
+ }
+ unit 159 {
+ description "Metro Tech-Walker Campus 50M CIR0004847";
+ encapsulation vlan-vpls;
+ vlan-tags outer 159 inner-range 1-4000;
+ native-inner-vlan-id 159;
+ family vpls;
+ }
+ unit 161 {
+ description Bethel-PS-FE-100M-CIR0004812;
+ vlan-id 161;
+ family inet {
+ address 156.110.50.117/30;
+ }
+ }
+ unit 162 {
+ description OBU-10Meg-CIR0004838;
+ encapsulation vlan-vpls;
+ vlan-tags outer 162 inner-range 10-239;
+ family vpls;
+ }
+ unit 163 {
+ description Mid-Del-VoTech-FE-400Mbps-CIR0003081;
+ vlan-id 163;
+ family inet {
+ address 156.110.24.133/30;
+ }
+ }
+ unit 164 {
+ description "Metro Tech South Bryant Campus 200M CIR0004845";
+ encapsulation vlan-vpls;
+ vlan-tags outer 164 inner-range 1-4000;
+ native-inner-vlan-id 164;
+ family vpls;
+ }
+ unit 165 {
+ description "Metro Tech Springlake 200M CIR0004844";
+ encapsulation vlan-vpls;
+ vlan-tags outer 165 inner-range 1-4000;
+ native-inner-vlan-id 165;
+ family vpls;
+ }
+ unit 166 {
+ description Banner-PS-FE-CIR0004834;
+ vlan-id 166;
+ family inet {
+ address 164.58.5.13/30;
+ }
+ }
+ unit 167 {
+ description "Metro Tech Adult & Continuing Ed Campus 10M CIR0004848";
+ encapsulation vlan-vpls;
+ vlan-tags outer 167 inner-range 1-4000;
+ native-inner-vlan-id 167;
+ family vpls;
+ }
+ unit 168 {
+ description OBU-second-300meg-COX-CIR0004839;
+ encapsulation vlan-vpls;
+ vlan-tags outer 168 inner-range 1-1000;
+ family vpls;
+ }
+ unit 169 {
+ description Edmond-PS-Santa-Fe-COX-CIR0004879;
+ vlan-id 169;
+ family inet {
+ address 164.58.3.121/30;
+ }
+ }
+ unit 170 {
+ description Norman-Public-Schools-1G-CIR0005124;
+ vlan-id 170;
+ family inet {
+ address 164.58.255.105/30;
+ }
+ }
+ unit 171 {
+ description "CORE L3 1GE to core.osuokc ge-1/1/0 | OneNet-OKC-OSUOKC-GE-4907";
+ vlan-id 171;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.245.109/30;
+ }
+ family inet6 {
+ address 2610:1d8:1300::7/127;
+ }
+ family mpls;
+ }
+ unit 172 {
+ description "CORE 1GE to core.mwc ge-1/0/9 | OneNet-OKC-MWC-GE-4906";
+ vlan-id 172;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.245.197/30;
+ }
+ family inet6 {
+ address 2610:1d8:1300::e/127;
+ }
+ family mpls;
+ }
+ unit 173 {
+ description "Metro Tech Chase Tower 100M CIR0004849";
+ encapsulation vlan-vpls;
+ vlan-tags outer 173 inner-range 1-4000;
+ native-inner-vlan-id 173;
+ family vpls;
+ }
+ unit 174 {
+ description OESC-South-OKC-100Mb-CIR0005101;
+ vlan-id 174;
+ family inet {
+ address 156.110.72.93/30;
+ }
+ }
+ unit 175 {
+ description "Grand River Dam Authority 1G | CIR0005190";
+ vlan-id 175;
+ family inet {
+ address 156.110.0.13/30;
+ }
+ }
+ unit 176 {
+ description "Norman-West-Library-100Mb-CIR0005180 [ORDERED]";
+ vlan-id 176;
+ family inet {
+ address 164.58.109.57/30;
+ }
+ }
+ unit 177 {
+ description "Putnam City Schools 600M | CIR0005244";
+ vlan-id 177;
+ family inet {
+ address 164.58.172.154/29;
+ address 164.58.157.97/30;
+ address 164.58.157.101/30;
+ }
+ }
+ unit 178 {
+ description "Canadian-Valley-Tech-Center-Mustang | CIR0005246";
+ encapsulation vlan-vpls;
+ vlan-tags outer 178 inner-range 100-600;
+ native-inner-vlan-id 178;
+ family vpls;
+ }
+ unit 201 {
+ description FAA-1-Gig-CIR0003987;
+ vlan-id 201;
+ family inet {
+ address 164.58.5.193/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:fffa::1/80;
+ }
+ }
+ }
+ xe-0/1/0 {
+ description "CORE 10GE to core5.okc xe-0/1/0 | OneNet-OKC-OKC-XE-4465";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 72 {
+ vlan-id 72;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.73/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ffb::1/80;
+ address 2610:1d8:1300::/127;
+ }
+ family mpls;
+ }
+ }
+ xe-0/1/1 {
+ description "UPSTREAM 10GE to ^ QWEST - Dallas [CIR-ETH10000-15710007] ^ devicexxxx int-?/?/? CIR0004478";
+ unit 0 {
+ family inet {
+ filter {
+ output FLOW-INFO;
+ }
+ sampling {
+ input;
+ }
+ address 65.115.192.18/30;
+ }
+ }
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to hub.ard ge-3/2/2 | OneNet-OKC-ARD-GE-3800";
+ mtu 9192;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ bandwidth 500m;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.245.213/30;
+ }
+ family inet6 {
+ address 2610:1d8:1300::c/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/1 {
+ description Tecumseh-High-School-FE-CIR0003835;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.165.249/30;
+ }
+ }
+ }
+ ge-0/2/2 {
+ description Purcell-PS-Ethernet-10Mbps-CIR0003896;
+ speed 10m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.3.41/30;
+ }
+ }
+ }
+ ge-0/2/3 {
+ description Lexington-Public-Schools-Ethernet-10Mbps-CIR0003979;
+ speed 10m;
+ mtu 9000;
+ unit 0 {
+ family inet {
+ address 164.58.14.25/30;
+ }
+ }
+ }
+ ge-0/2/4 {
+ description ONENET-OKC-Argus-A;
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 156.110.27.81/30;
+ }
+ }
+ }
+ inactive: ge-0/2/5 {
+ description Pauls-Valley-Schools-Ethernet-10Mbps-CIR0003620_Cisco-OKC13-FE-2-29;
+ speed 10m;
+ unit 0 {
+ family inet {
+ address 156.110.27.69/30;
+ }
+ }
+ }
+ ge-0/2/7 {
+ description MCU-Tulsa;
+ mtu 9000;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 164.58.63.41/30;
+ }
+ }
+ }
+ ge-0/2/8 {
+ description ETN-UPS-Monitor;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 10.11.100.9/30;
+ }
+ }
+ }
+ ge-0/2/9 {
+ description ETN-Clock-Maintenance-Port;
+ speed 10m;
+ unit 0 {
+ family inet {
+ address 164.58.3.97/30;
+ }
+ }
+ }
+ ge-0/3/1 {
+ disable;
+ mtu 9000;
+ }
+ ge-0/3/2 {
+ description OETA-OKC-CIR0003567;
+ mtu 9000;
+ unit 0 {
+ family inet {
+ address 156.110.27.9/30;
+ }
+ }
+ }
+ ge-0/3/3 {
+ disable;
+ }
+ ge-0/3/5 {
+ description Ardmore-Tower-Switch;
+ unit 0 {
+ family inet {
+ address 164.58.149.89/29;
+ }
+ }
+ }
+ ge-0/3/6 {
+ description "CORE 500Mb to hub.goo ge-3/2/0 | OneNet-OKC-GOO-GE-4431";
+ vlan-tagging;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ vlan-id 302;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.245.201/30;
+ }
+ family inet6 {
+ address 2610:1d8:1300::a/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/7 {
+ description OU-HSC-GE-CIR0003552;
+ unit 0 {
+ family inet {
+ address 156.110.27.21/30;
+ }
+ }
+ }
+ ge-0/3/8 {
+ description Capitol-Gig-to-Cisco3508;
+ unit 0 {
+ family inet {
+ address 164.58.11.49/30;
+ }
+ }
+ }
+ xe-1/0/1 {
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 56 {
+ description "CORE 10GE to core2.okc xe-1/3/0.56 | OneNet-OKC-OKC-XE-4467";
+ vlan-id 56;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.58/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ff7::2/80;
+ address 2610:1d8:1100::3/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/1/0 {
+ description "OUHSC ^ OKCASR ^ SS CIR0005194";
+ unit 0 {
+ family inet {
+ address 164.58.63.77/30;
+ }
+ family inet6 {
+ address 2610:1d8:1300::4/127;
+ }
+ }
+ }
+ xe-1/1/1 {
+ description NPAD-SERVER-PERFORMANCE-TEST-PORT;
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 0 {
+ vlan-id 10;
+ family inet {
+ mtu 9000;
+ address 156.110.27.101/30;
+ }
+ }
+ unit 666 {
+ description "IU TEST CIRCUIT";
+ encapsulation vlan-ccc;
+ vlan-id 666;
+ }
+ }
+ ge-1/2/0 {
+ description "NNI to ATT - OKC - CIR0005236";
+ vlan-tagging;
+ mtu 1518;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 401 {
+ description "Oklahoma-Heart-Hospital-Physicians-OKC-10M | CIR0005017";
+ vlan-id 401;
+ family inet {
+ mtu 1500;
+ address 156.110.134.45/30;
+ }
+ }
+ unit 402 {
+ description "El-Reno-Carnegie-Library-100M | CIR0005107";
+ vlan-id 402;
+ family inet {
+ mtu 1500;
+ address 156.110.130.17/30;
+ }
+ }
+ }
+ inactive: ge-1/2/1 {
+ description GGChost1-Gb2;
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ inactive: ge-1/2/2 {
+ description GGChost2-Gb1;
+ gigether-options {
+ 802.3ad ae1;
+ }
+ }
+ inactive: ge-1/2/3 {
+ description GGChost2-Gb2;
+ gigether-options {
+ 802.3ad ae1;
+ }
+ }
+ ge-1/2/4 {
+ description "NNI to INFO - OKC - CIR000XXXX";
+ vlan-tagging;
+ speed auto;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 604 {
+ description Pauls-Valley-PS-CIR0004824;
+ vlan-id 604;
+ family inet {
+ address 156.110.27.69/30;
+ }
+ }
+ }
+ ge-1/2/5 {
+ description "Hub-Appliance [NO-MONITOR]";
+ }
+ ge-1/2/6 {
+ description "Hub-Appliance - TMON Security Net0 [NO-MONITOR]";
+ }
+ ge-1/2/7 {
+ description "Hub-Appliance - TMON Security Net1 [NO-MONITOR]";
+ }
+ ge-1/2/8 {
+ description "Hub-Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ ge-1/2/9 {
+ description TELEMATE-VERSO-WEBFILTER-PORT-MIRROR;
+ speed auto;
+ link-mode full-duplex;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 192.168.79.1/30 {
+ arp 192.168.79.2 mac 00:90:69:4f:84:9a;
+ }
+ }
+ }
+ }
+ ge-1/3/0 {
+ description "Canadian-Valley VPLS L2-to-L3 LINK";
+ flexible-vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 2523 {
+ description "Czech Hall L2 to L3 Link";
+ encapsulation vlan-vpls;
+ vlan-id-range 100-600;
+ family vpls;
+ }
+ }
+ ge-1/3/1 {
+ description "Canadian-Valley VPLS L3-to-L2 LINK";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 146 {
+ description Canadian-Valley-CZECH-HALL-MGMT;
+ vlan-id 146;
+ family inet {
+ address 10.199.9.1/30;
+ }
+ }
+ unit 178 {
+ description Canadian-Valley-HOLT-MGMT;
+ vlan-id 178;
+ family inet {
+ address 10.199.9.6/30;
+ }
+ }
+ unit 503 {
+ description Canadian-Valley-Tech-Center-Mustang-CIR0003866;
+ vlan-id 503;
+ family inet {
+ address 164.58.207.193/28;
+ }
+ }
+ unit 504 {
+ description "Canadian Valley Vo=Tech 1G | CIR0005246";
+ vlan-id 504;
+ family inet {
+ address 156.110.66.105/30;
+ address 156.110.130.97/27;
+ }
+ }
+ }
+ inactive: ge-1/3/2 {
+ description GGChost4-Gb1;
+ gigether-options {
+ 802.3ad ae3;
+ }
+ }
+ inactive: ge-1/3/3 {
+ description GGChost4-Gb2;
+ gigether-options {
+ 802.3ad ae3;
+ }
+ }
+ ge-1/3/5 {
+ description "CORE 1GE to hub.sem ge-2/2/0 | OneNet-OKC-SEM-GE-4570";
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.244.1/30;
+ }
+ family inet6 {
+ address 2610:1d8:1300::8/127;
+ }
+ family mpls;
+ }
+ }
+ inactive: ge-1/3/7 {
+ description OBU;
+ disable;
+ }
+ ge-1/3/8 {
+ description "VPLS L2-to-L3 LINK";
+ flexible-vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 2510 {
+ description "OBU VPLS L2 to L3 Link";
+ encapsulation vlan-vpls;
+ vlan-id 99;
+ family vpls;
+ }
+ unit 2512 {
+ description "Metro Tech VPLS L2 to L3 Link";
+ encapsulation vlan-vpls;
+ vlan-id-range 158-2512;
+ family vpls;
+ }
+ }
+ ge-1/3/9 {
+ description "VPLS L3-to-L2 LINK";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 158 {
+ description "Metro Tech Aviation Career Campus MGMT";
+ vlan-id 158;
+ family inet {
+ address 10.199.1.6/31;
+ }
+ }
+ unit 159 {
+ description "Metro Tech-Walker Campus MGMT";
+ vlan-id 159;
+ family inet {
+ address 10.199.1.4/31;
+ }
+ }
+ unit 164 {
+ description "Metro Tech South Bryant Campus MGMT";
+ vlan-id 164;
+ family inet {
+ address 10.199.1.2/31;
+ }
+ }
+ unit 165 {
+ description "Metro Tech Springlake MGMT";
+ vlan-id 165;
+ family inet {
+ address 10.199.1.0/31;
+ }
+ }
+ unit 167 {
+ description "Metro Tech Adult & Continuing Ed Campus";
+ vlan-id 167;
+ family inet {
+ address 10.199.1.8/31;
+ }
+ }
+ unit 173 {
+ description "Metro Tech Chase Tower";
+ vlan-id 173;
+ family inet {
+ address 10.199.1.10/31;
+ }
+ }
+ unit 2510 {
+ description "OBU L3 to L2 VPLS Link for Cox Circuit";
+ vlan-id 99;
+ family inet {
+ address 164.58.5.177/30;
+ }
+ }
+ unit 2512 {
+ description Metro-Area-VoTech-Dist-2-FE-CIR0002244;
+ vlan-id 990;
+ family inet {
+ address 164.58.26.193/26 {
+ preferred;
+ }
+ address 164.58.72.105/29;
+ }
+ }
+ }
+ inactive: ae0 {
+ description GGChost1;
+ encapsulation ethernet-bridge;
+ aggregated-ether-options {
+ lacp {
+ passive;
+ }
+ }
+ unit 0;
+ }
+ inactive: ae1 {
+ description GGChost2;
+ encapsulation ethernet-bridge;
+ aggregated-ether-options {
+ lacp {
+ passive;
+ }
+ }
+ unit 0;
+ }
+ inactive: ae2 {
+ description GGChost3;
+ encapsulation ethernet-bridge;
+ aggregated-ether-options {
+ lacp {
+ passive;
+ }
+ }
+ unit 0;
+ }
+ inactive: ae3 {
+ description GGChost4;
+ encapsulation ethernet-bridge;
+ aggregated-ether-options {
+ lacp {
+ passive;
+ }
+ }
+ unit 0;
+ }
+ fxp0 {
+ disable;
+ }
+ irb {
+ inactive: unit 223 {
+ description GGC_Servers;
+ family inet {
+ filter {
+ inactive: input GGC-FILTER;
+ inactive: output GGC-FILTER;
+ }
+ address 164.58.87.1/26;
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 127.0.0.1/32;
+ address 164.58.199.214/32;
+ }
+ family inet6 {
+ address 2610:1d8::3/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-server 164.58.253.36 {
+ port 9214;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ IP-V4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.214;
+ }
+ }
+ }
+ }
+ }
+ }
+ port-mirroring {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ interface ge-1/2/9.0 {
+ next-hop 192.168.79.2;
+ }
+ }
+ }
+ }
+}
+snmp {
+ description OneNet-Base-Config;
+ location "Oklahoma City, OK";
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ inactive: nonstop-routing;
+ rib inet6.0 {
+ aggregate {
+ route 2001:468:a00::/40;
+ route 2610:1d8::/32;
+ }
+ }
+ static {
+ route 164.58.70.128/25 next-hop 156.110.26.78;
+ route 164.58.26.0/24 next-hop 164.58.72.106;
+ route 156.110.24.140/30 next-hop [ 156.110.27.86 156.110.27.94 ];
+ route 164.58.86.0/24 next-hop [ 156.110.27.86 156.110.27.94 ];
+ route 164.58.153.160/28 next-hop 164.58.1.78;
+ route 164.58.180.0/26 next-hop 164.58.1.78;
+ route 164.58.19.160/29 next-hop 156.110.24.58;
+ route 164.58.87.80/29 next-hop 156.110.24.58;
+ route 164.58.87.224/29 next-hop 156.110.24.58;
+ route 164.58.150.152/29 next-hop 156.110.24.58;
+ route 164.58.176.232/29 next-hop 156.110.24.58;
+ route 164.58.145.128/25 next-hop 156.110.25.22;
+ route 156.110.28.240/29 next-hop 156.110.25.10;
+ route 156.110.67.0/29 next-hop 156.110.25.10;
+ route 164.58.156.0/30 next-hop 156.110.25.10;
+ route 156.110.31.80/28 next-hop 164.58.0.194;
+ route 164.58.7.0/27 next-hop 164.58.0.194;
+ route 156.110.25.176/28 next-hop 156.110.25.162;
+ route 156.110.31.104/29 next-hop 156.110.25.162;
+ route 164.58.9.212/30 next-hop 156.110.25.162;
+ route 164.58.170.0/24 next-hop 156.110.25.110;
+ route 156.110.99.0/29 next-hop 164.58.0.78;
+ route 164.58.69.0/29 next-hop 164.58.0.78;
+ route 164.58.151.0/28 next-hop 164.58.0.78;
+ route 164.58.68.0/24 next-hop 164.58.255.106;
+ route 199.164.253.0/24 next-hop 164.58.14.194;
+ route 156.110.99.112/28 next-hop 156.110.98.70;
+ route 164.58.28.96/29 next-hop 156.110.98.70;
+ route 164.58.69.80/29 next-hop 156.110.98.70;
+ route 164.58.29.224/28 next-hop 164.58.0.130;
+ route 164.58.156.160/29 next-hop 164.58.0.130;
+ route 164.58.215.52/30 next-hop 156.110.24.6;
+ route 156.110.91.192/26 next-hop 156.110.24.22;
+ route 164.58.75.216/29 next-hop 156.110.24.22;
+ route 156.110.207.208/28 next-hop 156.110.27.98;
+ route 164.58.148.216/29 next-hop 156.110.27.98;
+ route 164.58.237.112/28 next-hop 156.110.27.98;
+ route 164.58.243.192/28 next-hop 164.58.1.138;
+ route 164.58.109.128/28 next-hop 156.110.25.50;
+ route 156.110.31.136/29 next-hop 156.110.70.146;
+ route 164.58.29.136/29 next-hop 156.110.70.146;
+ route 164.58.29.192/29 next-hop 156.110.24.182;
+ route 164.58.237.240/28 next-hop 156.110.24.182;
+ route 156.110.27.136/30 next-hop 164.58.11.50;
+ route 156.110.28.136/29 next-hop 164.58.11.50;
+ route 156.110.28.160/29 next-hop 164.58.11.50;
+ route 164.58.11.192/30 next-hop 164.58.11.50;
+ route 164.58.29.144/29 next-hop 164.58.11.50;
+ route 164.58.72.120/29 next-hop 164.58.11.50;
+ route 164.58.203.0/24 next-hop 164.58.11.50;
+ route 164.58.228.128/25 next-hop 164.58.11.50;
+ route 204.61.6.0/24 next-hop 164.58.11.50;
+ route 204.126.138.0/23 next-hop 164.58.11.50;
+ route 204.126.144.0/23 next-hop 164.58.11.50;
+ route 204.126.162.0/23 next-hop 164.58.11.50;
+ route 164.58.9.172/30 next-hop 156.110.24.134;
+ route 164.58.184.0/27 next-hop 156.110.24.134;
+ route 205.143.216.0/21 next-hop 164.58.8.146;
+ route 164.58.180.192/28 next-hop 156.110.27.10;
+ route 164.58.145.0/26 next-hop 164.58.1.98;
+ route 164.58.211.160/30 next-hop 164.58.1.98;
+ route 156.110.82.164/30 next-hop 164.58.165.250;
+ route 164.58.167.176/29 next-hop 164.58.165.250;
+ route 164.58.176.144/29 next-hop 164.58.3.42;
+ route 156.110.99.96/29 next-hop 164.58.14.26;
+ route 156.110.31.200/29 next-hop 156.110.27.70;
+ route 164.58.27.0/29 next-hop 156.110.27.70;
+ route 164.58.29.248/30 next-hop 156.110.27.70;
+ route 164.58.149.0/27 next-hop 164.58.173.237;
+ route 156.110.28.200/29 next-hop 164.58.172.153;
+ route 164.58.172.152/29 next-hop 164.58.172.153;
+ route 164.58.172.160/27 next-hop 164.58.172.153;
+ route 164.58.150.192/26 next-hop 156.110.98.70;
+ route 164.58.159.192/26 next-hop 156.110.50.118;
+ route 198.203.153.0/24 next-hop 164.58.15.41;
+ route 192.231.3.0/24 next-hop 164.58.15.41;
+ route 156.110.67.32/29 next-hop 164.58.5.14;
+ route 164.58.209.216/29 next-hop 156.110.24.58;
+ route 164.58.149.36/30 next-hop 156.110.24.58;
+ route 156.110.114.36/30 next-hop 164.58.12.98;
+ route 156.110.115.48/29 next-hop 164.58.12.98;
+ route 164.58.5.40/30 next-hop 164.58.5.14;
+ route 204.137.224.0/20 next-hop 164.58.5.178;
+ route 164.58.253.36/32 {
+ next-hop 164.58.15.41;
+ no-readvertise;
+ }
+ route 164.58.207.128/28 next-hop 164.58.3.122;
+ route 164.58.84.96/28 next-hop 156.110.24.58;
+ route 201.96.20.1/32 reject;
+ route 222.128.198.6/32 reject;
+ route 164.58.74.224/29 next-hop 156.110.72.94;
+ route 164.58.149.112/29 next-hop 156.110.130.18;
+ route 164.58.69.104/29 next-hop 164.58.14.194;
+ route 156.110.130.96/27 next-hop 156.110.66.106;
+ }
+ router-id 164.58.199.214;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.40;
+ interface xe-1/0/0.56;
+ interface xe-0/1/0.72;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ interface xe-1/0/1.56;
+ interface xe-0/0/1.171;
+ interface ge-0/3/6.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.214;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ export [ NEXT-HOP-SELF REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ }
+ group EBGP-QWEST-AS209 {
+ type external;
+ description EBGP-QWEST-AS209;
+ import [ EBGP-REJECT-IMPORT EBGP-QWEST-IMPORT ];
+ family inet {
+ any;
+ }
+ export [ EBGP-REJECT-EXPORT EBGP-QWEST-EXPORT ];
+ neighbor 65.115.192.17 {
+ remove-private;
+ peer-as 209;
+ }
+ }
+ group CUSTOMER-EBGP {
+ type external;
+ family inet {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ neighbor 156.110.27.22 {
+ description UNIVERSITY-of-OKLAHOMA-HEALTH-SCIENCE-CENTER-OUHSC-eBGP;
+ import EBGP-OUHSC-IMPORT;
+# authentication-key <removed>;
+ export REDISTRIBUTE-STATICS;
+ remove-private;
+ peer-as 16922;
+ }
+ neighbor 156.110.27.98 {
+ description INTEGRIS-HEALTH-eBGP;
+ import EBGP-INTEGRIS-IMPORT;
+ export EBGP-REJECT-EXPORT;
+ remove-private;
+ peer-as 21518;
+ }
+ neighbor 164.58.5.194 {
+ description FEDERAL-AVIATION-AUTHORITY-FAA-eBGP;
+ import EBGP-FAA-IMPORT;
+# authentication-key <removed>;
+ export DEFAULT-ONLY-EXPORT;
+ remove-private;
+ peer-as 3923;
+ }
+ neighbor 164.58.5.178 {
+ description "Oklahoma Baptist University-OBU-eBGP";
+ import EBGP-OBU-IMPORT;
+# authentication-key <removed>;
+ export OBU-DEFAULT-ONLY-EXPORT;
+ remove-private;
+ peer-as 64588;
+ }
+ neighbor 164.58.63.78 {
+ description UNIVERSITY-of-OKLAHOMA-SHARED-SERVICES-eBGP;
+ import EBGP-OUSS-IMPORT;
+# authentication-key <removed>;
+ export REDISTRIBUTE-STATICS;
+ remove-private;
+ peer-as 16922;
+ }
+ }
+ inactive: group EBGP-GOOGLE-AS65535 {
+ type external;
+ description EBGP-GOOGLE-AS65535;
+ import EBGP-GOOGLE-IMPORT;
+ family inet {
+ any;
+ }
+ export [ GGC-PREFIXES-LIST EBGP-REJECT-EXPORT ];
+ neighbor 164.58.87.16 {
+ passive;
+ remove-private;
+ peer-as 65535;
+ }
+ }
+ group EBGP-FAA-V6 {
+ type external;
+ description EBGP-FAA-V6-CIR0003987;
+ import EBGP-FAA-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+ export DEFAULT-ONLY-V6-EXPORT;
+ neighbor 2001:468:aff:ffff:fffa::2 {
+ remove-private;
+ peer-as 3923;
+ }
+ }
+ }
+ ospf {
+ export OSPF-DEFAULT;
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0 {
+ link-protection;
+ }
+ interface fxp0.0 {
+ disable;
+ }
+ interface xe-0/0/0.40 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5" start-time "2011-6-25.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/0.56 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$gr4GDk.5TF/.m/tuOSywY2gZjqmfQ39DimTz39C" start-time "2011-6-25.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/1/0.72 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$I-ORylM87NVY8LYoJG.m0B1ISeWLx-b2lKLNdb2g" start-time "2011-6-25.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/9.0;
+ interface ge-0/3/6.0 {
+ authentication {
+ md5 7 key "$9$f536ApB1EypuyKM8VbqmPfF/tuOIhr69u1Rhrl"; ## SECRET-DATA
+ }
+ }
+ interface ge-1/3/5.0 {
+ authentication {
+ md5 7 key "$9$IJERylM87NVY8LYoJG.m0B1ISeWLx-b2lKLNdb2g"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$4OoUjqmTQ39mP9p0Byrs2g4Gi.P5znCjHPQFnCA"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/1.56 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$gr4GDk.5TF/.m/tuOSywY2gZjqmfQ39DimTz39C"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/1.171 {
+ authentication {
+ md5 7 key "$9$EQjhlK8X-dwgXxgJGDPfBIRErvLxNVs4KMxdbs4o"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/1.172 {
+ authentication {
+ md5 7 key "$9$u8r70RhreW8xdeKds24jiCtpuIclKML7VhSK8X7Vb" start-time "2011-6-15.22:56:00 -0500"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ ospf3 {
+ export IPV6-EXPORT-FROM-BGPV6-TO-OSPFV3;
+ area 0.0.0.0 {
+ interface xe-0/0/0.40 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/1/0.72;
+ interface xe-0/0/1.201;
+ interface xe-1/0/1.56;
+ interface ge-0/3/6.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-1/1/0.171 {
+ link-protection;
+ }
+ interface xe-0/0/1.171 {
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-1/3/5.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/1.172 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.40;
+ interface xe-0/0/1.171;
+ interface xe-0/0/1.172;
+ interface xe-0/1/0.72;
+ interface ge-0/2/0.0;
+ interface ge-0/3/6.0;
+ interface xe-1/0/0.56;
+ interface xe-1/0/1.56;
+ interface ge-1/3/5.0;
+ interface lo0.0;
+ }
+ l2circuit {
+ neighbor 164.58.199.192 {
+ interface xe-1/1/1.666 {
+ virtual-circuit-id 666;
+ }
+ }
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface xe-1/0/0;
+ interface xe-0/1/0;
+ interface ge-1/3/5;
+ interface xe-1/0/1;
+ interface xe-0/0/1;
+ }
+}
+policy-options {
+ prefix-list MARTIANS-IPV4 {
+ 0.0.0.0/8;
+ 10.0.0.0/8;
+ 127.0.0.0/8;
+ 169.254.0.0/16;
+ 172.16.0.0/12;
+ 192.0.0.0/24;
+ 192.0.2.0/24;
+ 192.168.0.0/16;
+ 198.18.0.0/15;
+ 198.51.100.0/24;
+ 203.0.113.0/24;
+ 224.0.0.0/4;
+ 240.0.0.0/4;
+ }
+ prefix-list EBGP-IPV4-NEIGHBORS {
+ 65.115.192.17/32;
+ 156.110.27.22/32;
+ 156.110.27.98/32;
+ 164.58.5.178/32;
+ 164.58.5.194/32;
+ 164.58.63.78/32;
+ 164.58.87.16/32;
+ }
+ prefix-list TELEMATE-CUSTOMERS {
+ 156.110.46.96/30;
+ 156.110.47.32/29;
+ 156.110.54.16/30;
+ 156.110.59.48/29;
+ 156.110.62.180/30;
+ 164.58.23.64/26;
+ 164.58.176.44/30;
+ 164.58.243.208/28;
+ }
+ policy-statement COMMODITY-PREFIXES-LIST {
+ term prefixes {
+ from {
+ route-filter 66.186.144.0/20 exact;
+ route-filter 129.15.0.0/16 exact;
+ route-filter 129.244.0.0/16 exact;
+ route-filter 139.78.0.0/16 exact;
+ route-filter 156.110.0.0/16 exact;
+ route-filter 157.142.0.0/16 exact;
+ route-filter 162.58.0.0/16 exact;
+ route-filter 164.58.0.0/16 exact;
+ route-filter 174.77.146.0/24 exact;
+ route-filter 192.31.83.0/24 exact;
+ route-filter 192.35.96.0/24 exact;
+ route-filter 192.35.98.0/24 exact;
+ route-filter 192.78.4.0/24 exact;
+ route-filter 192.135.141.0/24 exact;
+ route-filter 192.146.206.0/24 exact;
+ route-filter 192.149.244.0/24 exact;
+ route-filter 192.150.147.0/24 exact;
+ route-filter 192.153.53.0/24 exact;
+ route-filter 192.198.4.0/22 exact;
+ route-filter 192.203.164.0/24 exact;
+ route-filter 192.206.65.0/24 exact;
+ route-filter 192.231.3.0/24 exact;
+ route-filter 192.231.56.0/24 exact;
+ route-filter 192.234.12.0/24 exact;
+ route-filter 192.234.13.0/24 exact;
+ route-filter 198.11.4.0/24 exact;
+ route-filter 198.11.5.0/24 exact;
+ route-filter 198.11.6.0/24 exact;
+ route-filter 198.11.7.0/24 exact;
+ route-filter 198.17.223.0/24 exact;
+ route-filter 198.102.159.0/24 exact;
+ route-filter 198.178.194.0/24 exact;
+ route-filter 198.183.248.0/23 exact;
+ route-filter 198.187.154.0/24 exact;
+ route-filter 198.203.153.0/24 exact;
+ route-filter 198.204.126.0/24 exact;
+ route-filter 198.207.222.0/24 exact;
+ route-filter 199.27.8.0/21 exact;
+ route-filter 199.120.0.0/21 exact;
+ route-filter 199.120.8.0/22 exact;
+ route-filter 199.164.253.0/24 exact;
+ route-filter 199.181.88.0/24 exact;
+ route-filter 199.181.89.0/24 exact;
+ route-filter 199.184.200.0/22 exact;
+ route-filter 199.190.128.0/23 exact;
+ route-filter 199.223.171.0/24 exact;
+ route-filter 199.245.163.0/24 exact;
+ route-filter 199.245.164.0/24 exact;
+ route-filter 199.245.165.0/24 exact;
+ route-filter 199.245.166.0/24 exact;
+ route-filter 199.248.134.0/23 exact;
+ route-filter 204.29.164.0/24 exact;
+ route-filter 204.61.0.0/21 exact;
+ route-filter 204.61.8.0/22 exact;
+ route-filter 204.61.12.0/23 exact;
+ route-filter 204.62.16.0/21 exact;
+ route-filter 204.62.24.0/22 exact;
+ route-filter 204.63.218.0/24 exact;
+ route-filter 204.87.64.0/18 exact;
+ route-filter 204.87.241.0/24 exact;
+ route-filter 204.107.242.0/24 exact;
+ route-filter 204.126.138.0/23 exact;
+ route-filter 204.126.144.0/23 exact;
+ route-filter 204.126.162.0/23 exact;
+ route-filter 204.126.186.0/23 exact;
+ route-filter 204.126.188.0/24 exact;
+ route-filter 204.126.189.0/24 exact;
+ route-filter 204.126.190.0/24 exact;
+ route-filter 204.126.191.0/24 exact;
+ route-filter 204.154.112.0/21 exact;
+ route-filter 205.143.136.0/21 exact;
+ route-filter 205.143.216.0/21 exact;
+ route-filter 205.153.220.0/22 exact;
+ route-filter 205.235.88.0/23 exact;
+ route-filter 206.61.156.0/24 exact;
+ route-filter 206.202.192.0/18 exact;
+ route-filter 206.202.208.0/24 exact;
+ route-filter 206.203.81.0/24 exact;
+ route-filter 208.8.54.0/24 exact;
+ route-filter 192.173.49.0/24 exact;
+ route-filter 192.173.32.0/19 orlonger;
+ route-filter 192.35.97.0/24 exact;
+ route-filter 129.15.0.0/17 exact;
+ route-filter 129.15.128.0/17 exact;
+ route-filter 64.112.240.0/20 exact;
+ route-filter 152.123.8.0/21 exact;
+ route-filter 204.63.222.0/24 orlonger;
+ route-filter 147.97.160.0/19 exact;
+ route-filter 204.63.217.0/24 exact;
+ route-filter 204.137.224.0/20 exact;
+ route-filter 199.253.0.0/21 exact;
+ route-filter 199.253.9.0/24 exact;
+ route-filter 199.253.8.0/24 exact;
+ route-filter 147.97.96.0/19 exact;
+ route-filter 204.108.2.0/24 exact;
+ route-filter 204.108.3.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement DEFAULT-ONLY-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement DEFAULT-ONLY-V6-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter ::/0 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-FAA-IMPORT {
+ term prefixes {
+ from {
+ route-filter 152.123.8.0/21 exact;
+ route-filter 162.58.0.0/16 exact;
+ route-filter 204.108.2.0/24 exact;
+ route-filter 204.108.3.0/24 exact;
+ }
+ then {
+ community set 5078:3923;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-FAA-V6-IMPORT {
+ term STEP-1 {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ community set 5078:3923;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-GOOGLE-IMPORT {
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-INTEGRIS-IMPORT {
+ term STEP-1 {
+ from {
+ route-filter 204.107.242.0/24 orlonger;
+ }
+ then {
+ community set 5078:21518;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-OBU-IMPORT {
+ term OBU-PREFIX {
+ from {
+ route-filter 164.58.88.0/21 orlonger;
+ }
+ then {
+ community set OKCCORE4;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-OUHSC-IMPORT {
+ term prefixes {
+ from {
+ route-filter 156.110.144.0/20 exact;
+ route-filter 156.110.240.0/20 exact;
+ route-filter 157.142.0.0/16 orlonger;
+ }
+ then {
+ community set 5078:16922;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-OUSS-IMPORT {
+ term prefixes {
+ from {
+ route-filter 156.110.144.0/20 exact;
+ route-filter 156.110.240.0/20 exact;
+ route-filter 157.142.0.0/16 orlonger;
+ }
+ then {
+ community set 5078:16922;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-QWEST-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ community add Global-Prepend;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-QWEST-IMPORT {
+ term STEP-1 {
+ then {
+ community add 5078:209;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-EXPORT {
+ term STEP-1 {
+ from {
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-IMPORT {
+ term DEFAULT {
+ from {
+ neighbor [ 65.115.192.17 38.104.198.69 ];
+ route-filter 0.0.0.0/0 through 0.0.0.0/32;
+ }
+ then accept;
+ }
+ term MARVIN {
+ from {
+ route-filter 0.0.0.0/0 through 0.0.0.0/32;
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement GGC-PREFIXES-LIST {
+ term prefixes {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement IPV6-EXPORT-FROM-BGPV6-TO-OSPFV3 {
+ term STEP-1 {
+ from {
+ family inet6;
+ protocol bgp;
+ neighbor 2001:468:aff:ffff:fffa::2;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement NEXT-HOP-SELF {
+ term 1 {
+ from protocol bgp;
+ then {
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ policy-statement OBU-DEFAULT-ONLY-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then {
+ as-path-prepend "5078 5078 5078";
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement ONENET-UPS-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add ONET-UPS-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add ONET-UPS-VPN;
+ accept;
+ }
+ }
+ term reject {
+ then reject;
+ }
+ }
+ policy-statement ONENET-UPS-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community ONET-UPS-VPN;
+ }
+ then accept;
+ }
+ term reject {
+ then reject;
+ }
+ }
+ policy-statement OSPF-DEFAULT {
+ term GET-ROUTE {
+ from {
+ protocol bgp;
+ route-filter 0.0.0.0/0 exact;
+ }
+ then {
+ metric 1;
+ accept;
+ }
+ }
+ term REJECT-ALL {
+ then reject;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add OKCCORE4;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add OKCCORE4;
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ policy-statement UCO-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add UCO-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add UCO-VPN;
+ accept;
+ }
+ }
+ term reject {
+ then reject;
+ }
+ }
+ policy-statement UCO-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community UCO-VPN;
+ }
+ then accept;
+ }
+ term reject {
+ then reject;
+ }
+ }
+ community 5078:16922 members 5078:16922;
+ community 5078:209 members 5078:209;
+ community 5078:21518 members 5078:21518;
+ community 5078:3923 members 5078:3923;
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Global-Prepend members 209:64603;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community NORMANCORE1 members 5078:230;
+ community NORMANCORE2 members 5078:231;
+ community OKCCCCORE1 members 5078:233;
+ community OKCCORE1 members 5078:211;
+ community OKCCORE2 members 5078:212;
+ community OKCCORE3 members 5078:213;
+ community OKCCORE4 members 5078:214;
+ community OKCCORE5 members 5078:215;
+ community OKCCORE6 members 5078:216;
+ community ONET-UPS-VPN members target:5078:100;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community PTCCORE1 members 5078:234;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community STILLWATERCORE1 members 5078:232;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community TULSACORE1 members 5078:221;
+ community TULSACORE2 members 5078:222;
+ community TULSACORE3 members 5078:223;
+ community TULSACORE4 members 5078:224;
+ community TULSACORE5 members 5078:225;
+ community TULSACORE6 members 5078:226;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community UCO-VPN members target:5078:3001;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+ as-path 40581 40581;
+ as-path 11537 11537;
+ as-path 293 293;
+ as-path 174 174;
+ as-path 11317 11317;
+ as-path 11164 11164;
+ as-path 19401 19401;
+ as-path 21357 21357;
+ as-path 209 209;
+ as-path 65535 65535;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ xe-1/0/1 {
+ scheduler-map sch-map;
+ }
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority medium-low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority medium-low;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority medium-high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$wpgJUF3/u018XVsYgGUz3nCuBEcrlv8dbjHq.TQSyleL72ga"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter FLOW-INFO {
+ term TELEMATE {
+ from {
+ source-prefix-list {
+ TELEMATE-CUSTOMERS;
+ }
+ port [ http ftp nntp https ];
+ }
+ then {
+ port-mirror;
+ accept;
+ }
+ }
+ term ALL_FLOW {
+ then accept;
+ }
+ term REJECT_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+ filter GGC-FILTER {
+ term 0 {
+ from {
+ source-address {
+ 156.110.0.0/16;
+ }
+ destination-address {
+ 156.110.0.0/16;
+ }
+ }
+ then accept;
+ }
+ term 1 {
+ then {
+ port-mirror;
+ accept;
+ }
+ }
+ }
+}
+routing-instances {
+ CANADIAN-VALLEY-VPLS {
+ description "CANADIAN VVALLEY VPLS";
+ instance-type vpls;
+ vlan-id all;
+ interface xe-0/0/1.146;
+ interface xe-0/0/1.178;
+ interface ge-1/3/0.2523;
+ route-distinguisher 164.58.199.214:2523;
+ vrf-target target:5078:2523;
+ protocols {
+ vpls {
+ mac-table-size {
+ 10000;
+ packet-action drop;
+ }
+ interface ge-1/3/0.2523;
+ interface xe-0/0/1.178;
+ interface xe-0/0/1.146;
+ no-tunnel-services;
+ site OKC-Core4 {
+ site-identifier 1;
+ }
+ }
+ }
+ }
+ METRO-TECH-VPLS-2012 {
+ description "Metro Tech VPLS";
+ instance-type vpls;
+ vlan-id all;
+ interface xe-0/0/1.158;
+ interface xe-0/0/1.159;
+ interface xe-0/0/1.164;
+ interface xe-0/0/1.165;
+ interface xe-0/0/1.167;
+ interface xe-0/0/1.173;
+ interface ge-1/3/8.2512;
+ route-distinguisher 164.58.199.215:2512;
+ vrf-target target:5078:2512;
+ protocols {
+ vpls {
+ mac-table-size {
+ 10000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site OKC-Core5 {
+ site-identifier 1;
+ interface xe-0/0/1.165;
+ interface xe-0/0/1.158;
+ interface xe-0/0/1.159;
+ interface xe-0/0/1.164;
+ interface xe-0/0/1.167;
+ interface xe-0/0/1.173;
+ }
+ }
+ }
+ }
+ OBU-VPLS-2510 {
+ description VPLS-OBU-Shawnee;
+ instance-type vpls;
+ vlan-id all;
+ interface xe-0/0/1.162;
+ interface xe-0/0/1.168;
+ interface ge-1/3/8.2510;
+ route-distinguisher 164.58.199.214:2510;
+ vrf-target target:5078:2510;
+ protocols {
+ vpls {
+ mac-table-size {
+ 10000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site OKC-CORE4 {
+ site-identifier 2;
+ interface xe-0/0/1.162;
+ interface xe-0/0/1.168;
+ }
+ }
+ }
+ }
+ ONENET-UPS-L3VPN {
+ description UPS-L3VPN;
+ instance-type vrf;
+ interface ge-0/2/8.0;
+ route-distinguisher 164.58.199.214:100;
+ vrf-import ONENET-UPS-VRF-IMPORT;
+ vrf-export ONENET-UPS-VRF-EXPORT;
+ vrf-target target:5078:100;
+ routing-options {
+ static {
+ route 10.11.100.10/32 next-hop 10.11.100.10;
+ }
+ }
+ }
+ UCO {
+ description UCO-L3VPN;
+ instance-type vrf;
+ interface xe-0/0/1.149;
+ route-distinguisher 164.58.199.214:3001;
+ vrf-import UCO-IMPORT;
+ vrf-export UCO-EXPORT;
+ vrf-target target:5078:3001;
+ vrf-table-label;
+ routing-options {
+ static {
+ route 10.100.10.0/24 next-hop 10.100.100.5;
+ route 10.100.12.0/24 next-hop 10.100.100.5;
+ route 10.100.14.0/24 next-hop 10.100.100.5;
+ route 10.100.16.0/24 next-hop 10.100.100.5;
+ route 192.168.88.0/24 next-hop 10.100.100.5;
+ route 10.100.18.0/24 next-hop 10.100.100.5;
+ route 172.19.10.0/24 next-hop 10.100.100.5;
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template IP-V4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+bridge-domains {
+ inactive: VLAN_223_Google {
+ domain-type bridge;
+ vlan-id 223;
+ interface ae0.0;
+ interface ae1.0;
+ interface ae2.0;
+ interface ae3.0;
+ routing-interface irb.223;
+ }
+}
+# grnoc-mon at OKC-CORE4-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.214 ge-0/2/0.0 Full 164.58.199.10
+# 164.58.245.202 ge-0/3/6.0 Full 164.58.199.62
+# 164.58.244.2 ge-1/3/5.0 Full 164.58.199.46
+# 164.58.15.41 xe-0/0/0.40 Full 164.58.199.211
+# 164.58.245.110 xe-0/0/1.171 Full 164.58.199.50
+# 164.58.245.198 xe-0/0/1.172 Full 164.58.199.2
+# 164.58.15.74 xe-0/1/0.72 Full 164.58.199.215
+# 164.58.15.57 xe-1/0/1.56 Full 164.58.199.212
+#
Index: core3.tul-m120.onenet.net
===================================================================
--- core3.tul-m120.onenet.net (revision 76244)
+++ core3.tul-m120.onenet.net (working copy)
@@ -495,8 +495,8 @@
#t1-3/1/0:4 up down
#t1-3/1/0:5 up up
#t1-3/1/0:5.0 up up
-#t1-3/1/0:6 up down
-#t1-3/1/0:6.0 up down
+#t1-3/1/0:6 up up
+#t1-3/1/0:6.0 up up
#t1-3/1/0:7 up down
#t1-3/1/0:8 up up
#t1-3/1/0:8.0 up up
Index: core.sem.onenet.net
===================================================================
--- core.sem.onenet.net (revision 76432)
+++ core.sem.onenet.net (working copy)
@@ -0,0 +1,1026 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at SEMINOLE-MX480-RE0> show system commit
+# 2013-08-19 13:24:02 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 09:29:32 CDT by josh via cli commit synchronize
+# 2013-08-14 15:15:40 CDT by josh via cli commit synchronize
+# 2013-06-27 14:37:48 CDT by josh via cli commit synchronize
+# 2013-06-25 09:13:27 CDT by rnordmark via cli commit synchronize
+# 2013-06-25 09:11:30 CDT by rnordmark via cli commit synchronize
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN12022F9AFB MX480
+# Midplane REV 05 710-017414 ACAB5741 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBT7679 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U085 PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U08F PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U052 PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U04N PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 16 740-013063 9012030778 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012029010 RE-S-2000
+# CB 0 REV 14 750-031391 ABBS3870 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV5462 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 ZC9523 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 ZZ6037 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6293 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL4143G XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL600RW XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV4624 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU31Q SFP-SX
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 9 REV 01 740-038291 D175197 SFP-T
+# QXM 0 REV 06 711-028408 ZY7149 MPC QXM
+# QXM 1 REV 06 711-028408 ZY7128 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB5741 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBT7679 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U085 PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U08F PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U052 PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U04N PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 16 740-013063 9012030778 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012029010 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBS3870 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV5462 SCBE-MX-S
+# FPC 0 REV 09 750-038493 ZC9523 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6293 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV4624 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012030778
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012029010
+#
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis scb
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis sfm detail
+# grnoc-mon at SEMINOLE-MX480-RE0> show chassis ssb
+# grnoc-mon at SEMINOLE-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:77:e7:37
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show version
+# Hostname: SEMINOLE-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Servic!
es [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at SEMINOLE-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 1663036
+# -rwxr-xr-x 1 root field 19314 Jul 11 2012 Seminole.txt*
+# -rw-r--r-- 1 root field 30 Jun 24 2012 ex.txt
+# drwxr-xr-x 2 root field 512 Jun 24 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 Jun 5 23:11 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 install/
+# -rw-r--r-- 1 root field 421204768 Jul 11 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Jun 5 19:47 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 8404168 Jul 11 2012 jweb-11.4R4.4-signed.tgz
+# -rw-r--r-- 1 root field 155 Jun 5 23:15 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 pics/
+# -r--r--r-- 1 root field 499 Jun 5 23:01 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jun 24 2012 rtsdb/
+# -rw-r----- 1 root field 712 Jun 5 23:15 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jun 24 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jun 24 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show system uptime
+# System booted: 2013-06-05 23:10 CDT
+# Protocols started: 2013-06-05 23:15 CDT
+# Last configured: 2013-08-19 13:24 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up down
+#ge-0/3/0 up down
+#ge-0/3/1 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up down
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at SEMINOLE-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:24:02 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name SEMINOLE-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name SEMINOLE-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.47;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10 GE to core.okc1-MX960 xe-2/1/1 | OneNet-OKC-SEM-XE-XXXX";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ description "10G Backhaul";
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.58/30;
+ }
+ family inet6 {
+ address 2610:1d8:1000::17/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to core.sem ge-2/2/3 | OneNet-SEM-SEM-GE-5097";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.29/30;
+ }
+ family inet6 {
+ address 2610:1d8:4000::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/4 {
+ description "Hub Appliance [NO-MONITOR]";
+ }
+ ge-0/3/5 {
+ description "Hub Appliance - Camera #2 [NO-MONITOR]";
+ }
+ ge-0/3/6 {
+ description "Hub Appliance - Camera #1 [NO-MONITOR]";
+ }
+ ge-0/3/7 {
+ description "Hub Appliance - UPS System [NO-MONITOR]";
+ }
+ ge-0/3/8 {
+ description "Hub Appliance - DC Power Plant [NO-MONITOR]";
+ }
+ ge-0/3/9 {
+ description "Hub Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ fxp0 {
+ disable;
+ unit 0 {
+ family inet {
+ address 192.168.1.1/24;
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.47/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::4b/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9047;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.47;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location SEMINOLE;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ router-id 164.58.199.47;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.47;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$lHbe8X-VY2oGVbGik.F3cyrlWxdbsgaUX7b24aUD"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface lo0.0;
+ }
+ lldp {
+ interface xe-0/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Seminole;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Seminole;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at SEMINOLE-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.30 ge-0/2/0.0 Full 164.58.199.46
+# 164.58.246.57 xe-0/0/0.69 Full 164.58.199.211
+#
+# {master}
Index: core.law.onenet.net
===================================================================
--- core.law.onenet.net (revision 76428)
+++ core.law.onenet.net (working copy)
@@ -0,0 +1,1699 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at LAWTON-MX480-RE0> show system commit
+# 2013-08-19 14:53:27 CDT by joel via cli commit synchronize
+# 2013-08-19 13:31:38 CDT by jeremyt via cli commit synchronize
+# 2013-08-16 14:54:43 CDT by josh via cli commit synchronize
+# 2013-08-16 11:11:52 CDT by josh via cli commit synchronize
+# 2013-08-16 10:09:50 CDT by rnordmark via cli commit synchronize
+# 2013-08-15 15:39:37 CDT by josh via cli commit synchronize
+# grnoc-mon at LAWTON-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 SF A OK
+# CB 0 SF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 SF A OK
+# CB 1 SF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# FPC 1 Intake OK
+# FPC 1 Exhaust A OK
+# FPC 1 Exhaust B OK
+# FPC 1 QX 0 TSen OK
+# FPC 1 QX 0 Chip OK
+# FPC 1 LU 0 TCAM TSen OK
+# FPC 1 LU 0 TCAM Chip OK
+# FPC 1 LU 0 TSen OK
+# FPC 1 LU 0 Chip OK
+# FPC 1 MQ 0 TSen OK
+# FPC 1 MQ 0 Chip OK
+# FPC 1 QX 1 TSen OK
+# FPC 1 QX 1 Chip OK
+# FPC 1 LU 1 TCAM TSen OK
+# FPC 1 LU 1 TCAM Chip OK
+# FPC 1 LU 1 TSen OK
+# FPC 1 LU 1 Chip OK
+# FPC 1 MQ 1 TSen OK
+# FPC 1 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at LAWTON-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at LAWTON-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 1 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at LAWTON-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN1159A85AFB MX480 Midplane
+# Midplane REV 05 710-017414 ABAB3702 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBE6562 Front Panel Display
+# PEM 0 Rev 03 740-027736 QCS1026T09V DC 2.4kW Power Entry Module
+# PEM 1 Rev 03 740-027736 QCS1026T0HK DC 2.4kW Power Entry Module
+# PEM 2 Rev 03 740-027736 QCS1026T0KX DC 2.4kW Power Entry Module
+# PEM 3 Rev 03 740-027736 QCS1021T0DT DC 2.4kW Power Entry Module
+# Routing Engine 0 REV 15 740-013063 9012009678 RE-S-2000
+# Routing Engine 1 REV 14 740-013063 9009064359 RE-S-2000
+# CB 0 REV 08 710-021523 ABBG0195 MX SCB
+# CB 1 REV 08 710-021523 ABBF6646 MX SCB
+# FPC 0 REV 15 750-031088 YT7311 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YT1590 MPC PMB 2G
+# MIC 0 REV 23 750-028392 YV0076 3D 20x 1GE(LAN) SFP
+# PIC 0 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU25D SFP-SX
+# Xcvr 2 REV 01 740-031851 AM1141SVRZB SFP-SX
+# Xcvr 8 REV 01 740-031850 C11E00879 SFP-LX10
+# Xcvr 9 REV 01 740-031851 AM1041SU15A SFP-SX
+# PIC 1 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 B436681 SFP-T
+# Xcvr 1 REV 02 740-013111 A476926 SFP-T
+# Xcvr 2 REV 02 740-013111 A476936 SFP-T
+# Xcvr 3 REV 02 740-013111 A476934 SFP-T
+# Xcvr 4 REV 02 740-013111 A476877 SFP-T
+# Xcvr 5 REV 02 740-013111 A476909 SFP-T
+# Xcvr 6 REV 02 740-013111 A476886 SFP-T
+# Xcvr 7 REV 01 740-031851 AM1041SU271 SFP-SX
+# Xcvr 8 REV 01 740-031851 AM1041S02MM SFP-SX
+# Xcvr 9 REV 01 740-031851 AM1041S02MK SFP-SX
+# MIC 1 REV 23 750-028392 YV0161 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041S02PW SFP-SX
+# Xcvr 1 REV 01 740-031851 AM1041SU3J6 SFP-SX
+# Xcvr 2 REV 01 740-031851 AM1041SU3FB SFP-SX
+# Xcvr 3 REV 02 740-013111 A476809 SFP-T
+# Xcvr 6 REV 01 740-031850 C11E00873 SFP-LX10
+# Xcvr 9 REV 01 740-031851 AM1041S02ML SFP-SX
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A464022 SFP-T
+# Xcvr 1 REV 02 740-013111 A464471 SFP-T
+# Xcvr 2 REV 02 740-013111 B436497 SFP-T
+# Xcvr 8 REV 02 740-013111 B436540 SFP-T
+# Xcvr 9 REV 01 740-031851 AM1041S01Q7 SFP-SX
+# QXM 0 REV 05 711-028408 YS4733 MPC QXM
+# QXM 1 REV 05 711-028408 YS4747 MPC QXM
+# FPC 1 REV 08 750-038493 ZV7910 MPCE Type 2 3D Q
+# CPU REV 03 711-038484 ZV1293 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6315 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL70462 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# MIC 1 REV 26 750-028387 ABBV2287 3D 4x 10GE XFP
+# PIC 2 BUILTIN BUILTIN 2x 10GE XFP
+# PIC 3 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 03 740-014289 CB51BQ0CG XFP-10G-SR
+# QXM 0 REV 06 711-028408 ZS7247 MPC QXM
+# QXM 1 REV 06 711-028408 ZS7224 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at LAWTON-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ABAB3702 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBE6562 CRAFT-MX480-S
+# PEM 0 Rev 03 740-027736 QCS1026T09V PWR-MX480-2400-DC-S
+# PEM 1 Rev 03 740-027736 QCS1026T0HK PWR-MX480-2400-DC-S
+# PEM 2 Rev 03 740-027736 QCS1026T0KX PWR-MX480-2400-DC-S
+# PEM 3 Rev 03 740-027736 QCS1021T0DT PWR-MX480-2400-DC-S
+# Routing Engine 0 REV 15 740-013063 9012009678 RE-S-2000-4096-S
+# Routing Engine 1 REV 14 740-013063 9009064359 RE-S-2000-4096-S
+# CB 0 REV 08 710-021523 ABBG0195 SCB-MX960-S
+# CB 1 REV 08 710-021523 ABBF6646 SCB-MX960-S
+# FPC 0 REV 15 750-031088 YT7311 MX-MPC2-3D-Q
+# MIC 0 REV 23 750-028392 YV0076 MIC-3D-20GE-SFP
+# MIC 1 REV 23 750-028392 YV0161 MIC-3D-20GE-SFP
+# FPC 1 REV 08 750-038493 ZV7910 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6315 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028387 ABBV2287 MIC-3D-4XGE-XFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at LAWTON-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012009678
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9009064359
+#
+# grnoc-mon at LAWTON-MX480-RE0> show chassis scb
+# grnoc-mon at LAWTON-MX480-RE0> show chassis sfm detail
+# grnoc-mon at LAWTON-MX480-RE0> show chassis ssb
+# grnoc-mon at LAWTON-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:88:cf
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at LAWTON-MX480-RE0> show version
+# Hostname: LAWTON-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Services!
[11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at LAWTON-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 7277768
+# -rw-r--r-- 1 eng field 29238 Mar 10 07:28 20130310-0728.cfg
+# -rw-r--r-- 1 eng field 29297 Mar 10 09:13 20130310-0914.cfg
+# -rw-r--r-- 1 root field 18205 Feb 23 2011 MX480_Config_LAWTON_NEW_LAG#3.txt
+# -rw-r--r-- 1 root field 24950 Feb 23 2011 MX480_Config_LAWTON_NEW_LAG#4.txt
+# -rw-r--r-- 1 root field 30 Dec 4 2010 ex.txt
+# drwxr-xr-x 2 root field 512 Dec 4 2010 gres-tp/
+# -rw-r--r-- 1 root field 4 May 28 01:08 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Dec 4 2010 install/
+# -r-xr-xr-x 1 root wheel 329257475 Dec 4 2010 jbundle-10.3R1.9-domestic.tgz*
+# -rw-r--r-- 1 root field 338894858 Feb 14 2011 jbundle-10.4R1.9-domestic.tgz
+# -rw-r--r-- 1 root field 348823558 Feb 23 2011 jbundle-10.4R2.6-domestic.tgz
+# -rw-r--r-- 1 root field 350497882 Dec 22 2011 jbundle-10.4R6.5-domestic.tgz
+# -rw-r--r-- 1 root field 355159151 Feb 23 2011 jinstall-10.4R2.6-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 356846496 Dec 22 2011 jinstall-10.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421204768 Mar 8 21:56 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 admin field 421246106 Mar 8 22:59 jinstall-11.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 May 27 21:19 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 0 Dec 4 2010 jperf
+# -rw-r--r-- 1 root field 0 Dec 4 2010 jperf_shmem_sem
+# -rw-r--r-- 1 root field 7829561 Feb 23 2011 jweb-10.4R2.6-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 9 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 eng field 8404168 Mar 8 21:57 jweb-11.4R4.4-signed.tgz
+# -rw-r--r-- 1 root field 155 May 28 01:08 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Mar 10 08:51 pics/
+# -r--r--r-- 1 root field 499 May 28 00:07 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 Mar 10 08:34 rdm.taf
+# drwxr-xr-x 2 root field 512 Mar 10 08:53 rtsdb/
+# -rw-r----- 1 root field 1246 Feb 23 2011 sampled.pkts
+# drwxr-xr-x 3 root field 512 Dec 4 2010 sec-download/
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 Mar 9 01:00 vi.recover/
+#
+# {master}
+# grnoc-mon at LAWTON-MX480-RE0> show system uptime
+# System booted: 2013-05-28 01:07 CDT
+# Protocols started: 2013-05-28 01:08 CDT
+# Last configured: 2013-08-19 14:53 CDT by joel
+#
+# {master}
+# grnoc-mon at LAWTON-MX480-RE0> show interface terse
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#ge-0/0/1 up down
+#ge-0/0/2 up up
+#ge-0/0/2.0 up up
+#ge-0/0/3 up down
+#ge-0/0/4 up down
+#ge-0/0/5 up down
+#ge-0/0/6 up down
+#ge-0/0/7 up down
+#ge-0/0/8 up down
+#ge-0/0/8.40 up down
+#ge-0/0/8.32767 up down
+#ge-0/0/9 up up
+#ge-0/0/9.0 up up
+#ge-0/1/0 up down
+#ge-0/1/0.2011 up down
+#ge-0/1/0.32767 up down
+#ge-0/1/1 up up
+#ge-0/1/1.0 up up
+#ge-0/1/2 up up
+#ge-0/1/2.0 up up
+#ge-0/1/3 up up
+#ge-0/1/3.0 up up
+#ge-0/1/4 up up
+#ge-0/1/4.0 up up
+#ge-0/1/5 up up
+#ge-0/1/5.0 up up
+#ge-0/1/6 up down
+#ge-0/1/7 up up
+#ge-0/1/7.100 up up
+#ge-0/1/7.110 up up
+#ge-0/1/7.111 up up
+#ge-0/1/7.112 up up
+#ge-0/1/7.113 up up
+#ge-0/1/7.114 up up
+#ge-0/1/7.115 up up
+#ge-0/1/7.116 up up
+#ge-0/1/7.117 up up
+#ge-0/1/7.32767 up up
+#ge-0/1/8 up up
+#ge-0/1/8.0 up up
+#ge-0/1/9 up down
+#ge-0/1/9.2509 up down
+#ge-0/1/9.32767 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.255 up up
+#ge-0/2/1.32767 up up
+#ge-0/2/2 up up
+#ge-0/2/2.255 up up
+#ge-0/2/2.32767 up up
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up up
+#ge-0/2/7 down down
+#ge-0/2/8 down down
+#ge-0/2/9 up up
+#ge-0/2/9.0 up up
+#ge-0/3/0 up up
+#ge-0/3/0.2000 up up
+#ge-0/3/0.32767 up up
+#ge-0/3/1 up up
+#ge-0/3/1.0 up up
+#ge-0/3/2 up down
+#ge-0/3/2.250 up down
+#ge-0/3/2.32767 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up up
+#ge-0/3/9 up up
+#lc-1/0/0 up up
+#lc-1/0/0.32769 up up
+#pfe-1/0/0 up up
+#pfe-1/0/0.16383 up up
+#pfh-1/0/0 up up
+#pfh-1/0/0.16383 up up
+#xe-1/0/0 up up
+#xe-1/0/0.69 up up
+#xe-1/0/0.32767 up up
+#xe-1/0/1 up down
+#xe-1/1/0 up down
+#xe-1/1/1 up down
+#lc-1/2/0 up up
+#lc-1/2/0.32769 up up
+#pfe-1/2/0 up up
+#pfe-1/2/0.16383 up up
+#xe-1/2/0 up down
+#xe-1/2/1 up down
+#xe-1/3/0 up down
+#xe-1/3/1 up up
+#xe-1/3/1.0 up up
+#ae0 up up
+#ae0.0 up up
+#ae1 up up
+#ae1.255 up up
+#ae1.32767 up up
+#ae2 up up
+#ae2.0 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 up up
+#fxp0.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#irb.255 up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#lsi.1049600 up up
+#lsi.1049604 up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at LAWTON-MX480-RE0> show configuration
+## Last commit: 2013-08-19 14:53:27 CDT by joel
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name LAWTON-MX480-RE0;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name LAWTON-MX480-RE1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ backup-router 172.25.46.1;
+ time-zone America/Chicago;
+ authentication-order [ password radius ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.202;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1044;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ aggregated-devices {
+ ethernet {
+ device-count 3;
+ }
+ }
+ fpc 0 {
+ inactive: sampling-instance JFLOW-1;
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+interfaces {
+ ge-0/0/0 {
+ description "CORE GE to core.okccc ge-0/2/2 [AE2-1of2] | OneNet-OKCCC-LAW-GE-3828";
+ gigether-options {
+ no-auto-negotiation;
+ 802.3ad ae2;
+ }
+ }
+ ge-0/0/2 {
+ description "CORE 1GE to hub.dun ge-3/2/0 | OneNet-LAW-DUN-GE-4056";
+ speed 1g;
+ mtu 9192;
+ link-mode full-duplex;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.181/30;
+ }
+ family inet6 {
+ address 2610:1d8:3100::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/0/8 {
+ description "CORE 1GE to core.hut.law ge-1/1/0 | OneNet-LAW-HUTLAW-GE-xxxx [ORDERED]";
+ vlan-tagging;
+ mtu 9192;
+ unit 40 {
+ vlan-id 40;
+ family inet {
+ mtu 9000;
+ address 164.58.248.1/31;
+ }
+ family mpls;
+ }
+ }
+ ge-0/0/9 {
+ description "CORE GE to hub.law ge-3/2/0 [AE0-1of2] | OneNet-LAW-LAW-GE-5088";
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-0/1/0 {
+ description "IPERF SERVER MGMT VPLS_2011 [NO-MONITOR]";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation vlan-vpls;
+ unit 2011 {
+ encapsulation vlan-vpls;
+ vlan-id 2011;
+ family vpls;
+ }
+ }
+ ge-0/1/1 {
+ description LAWTON-HUB-UPS;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.87.57/30;
+ }
+ }
+ }
+ ge-0/1/2 {
+ description Cameron-University-LAN-Polycom/Video-Network-CIR0004034;
+ unit 0 {
+ family inet {
+ address 198.17.223.65/26;
+ }
+ }
+ }
+ ge-0/1/3 {
+ description Great-Plains-VoTech-Fast-Ethernet-CIR0003470;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.86.101/30;
+ }
+ }
+ }
+ ge-0/1/4 {
+ description LAWTON-HUB-Argus-DC-Plant-MW-Room_Cisco-FE-7-7_;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ description LAWTON-HUB-Argus-DC-Plant-MW-Room;
+ family inet {
+ address 156.110.86.113/30;
+ }
+ }
+ }
+ ge-0/1/5 {
+ description LAWTON-HUB-Argus-DC-Plant-CETES-II-Cisco-FE-7-8_;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ description LAWTON-HUB-Argus-DC-Plant-CETES-II;
+ family inet {
+ address 156.110.86.121/30;
+ }
+ }
+ }
+ ge-0/1/7 {
+ description ATT-Customers-LAWTON_CIR0003985;
+ vlan-tagging;
+ speed 1g;
+ link-mode full-duplex;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 100 {
+ description "Lawton Public School 100M Ethernet CIR0005034";
+ vlan-id 100;
+ family inet {
+ address 156.110.86.1/30;
+ }
+ }
+ unit 110 {
+ description Comanche-County-Memorial-Hospital-FastEthernet-CIR0004249;
+ vlan-id 110;
+ family inet {
+ policer {
+ output 100M-POL;
+ }
+ address 156.110.86.141/30;
+ }
+ }
+ unit 111 {
+ description Bishop-PS-10M-CIR0004271;
+ vlan-id 111;
+ family inet {
+ policer {
+ output 10M-POL;
+ }
+ address 164.58.215.21/30;
+ }
+ }
+ unit 112 {
+ description OK-Corporation-Commission-100m-CIR0004419;
+ vlan-id 112;
+ family inet {
+ policer {
+ output 100M-POL;
+ }
+ address 156.110.86.245/30;
+ }
+ }
+ unit 113 {
+ description Geronimo-PS-10m-Cir0004598;
+ vlan-id 113;
+ family inet {
+ address 164.58.163.9/30;
+ }
+ }
+ unit 114 {
+ description "Southwestern Medical Center-FE-CIR0004867";
+ vlan-id 114;
+ family inet {
+ policer {
+ output 100M-POL;
+ }
+ address 164.58.2.49/30;
+ }
+ }
+ unit 115 {
+ description "Lawton Public Library-FE-CIR0004605";
+ vlan-id 115;
+ family inet {
+ policer {
+ output 100M-POL;
+ }
+ address 156.110.86.109/30;
+ }
+ }
+ unit 116 {
+ description "Harry Truman Ed Ctr-10M-CIR0004796";
+ vlan-id 116;
+ family inet {
+ policer {
+ output 10M-POL;
+ }
+ address 164.58.19.173/30;
+ }
+ }
+ unit 117 {
+ description Walters-Public-School-100meg-CIR0004904;
+ vlan-id 117;
+ family inet {
+ address 164.58.4.121/30;
+ }
+ }
+ }
+ ge-0/1/8 {
+ description "Cameron University LAN GE CIR0004033";
+ unit 0 {
+ family inet {
+ filter {
+ output CAMERON;
+ }
+ address 164.58.112.1/21 {
+ arp 164.58.112.86 multicast-mac 01:00:5e:7f:70:56 publish;
+ arp 164.58.112.132 multicast-mac 01:00:5e:7f:70:84 publish;
+ arp 164.58.112.216 multicast-mac 01:00:5e:7f:70:d8 publish;
+ }
+ }
+ }
+ }
+ ge-0/1/9 {
+ description "VPLS-CAMERON-2509 [NO-MONITOR]";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation vlan-vpls;
+ unit 2509 {
+ encapsulation vlan-vpls;
+ vlan-id 2509;
+ family vpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE GE to core.okccc ge-0/3/0 [AE2-2of2] | OneNet-OKCCC-LAW-GE-3829";
+ gigether-options {
+ no-auto-negotiation;
+ 802.3ad ae2;
+ }
+ }
+ ge-0/2/1 {
+ gigether-options {
+ no-auto-negotiation;
+ 802.3ad ae1;
+ }
+ }
+ ge-0/2/2 {
+ gigether-options {
+ 802.3ad ae1;
+ }
+ }
+ inactive: ge-0/2/3 {
+ description Southwestern-Medical-Center-Cir0004867;
+ unit 0 {
+ family inet {
+ address 164.58.2.49/30;
+ }
+ }
+ }
+ ge-0/2/7 {
+ disable;
+ }
+ ge-0/2/8 {
+ disable;
+ }
+ ge-0/2/9 {
+ description "CORE GE to hub.law ge-3/2/1 [AE0-2of2] | OneNet-LAW-LAW-GE-5090";
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-0/3/0 {
+ vlan-tagging;
+ mtu 9192;
+ encapsulation vlan-vpls;
+ unit 2000 {
+ description SANS-VPLS-LAWTON-NODE;
+ encapsulation vlan-vpls;
+ vlan-id 2000;
+ family vpls;
+ }
+ }
+ ge-0/3/1 {
+ unit 0 {
+ description JNPR-EX2200-MGMT;
+ family inet {
+ address 156.110.86.197/30;
+ }
+ }
+ }
+ ge-0/3/2 {
+ description "Lawton Indian Hospital-CAI-CIR000xxxx | [NO-MONITOR]";
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.lih ge-0/1/0 | OneNet-LAW-CAILIH-GE-XXXX | [NO-MONITOR]";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.225/30;
+ }
+ }
+ }
+ ge-0/3/3 {
+ description "Hub Appliance [NO-MONITOR]";
+ }
+ ge-0/3/4 {
+ description "Hub Appliance - Camera #2 [NO-MONITOR]";
+ }
+ ge-0/3/5 {
+ description "Hub Appliance - Camera #1 [NO-MONITOR]";
+ }
+ ge-0/3/6 {
+ description "Hub Appliance - UPS System [NO-MONITOR]";
+ }
+ ge-0/3/7 {
+ description "Hub Appliance - DC Power Plant [NO-MONITOR]";
+ }
+ ge-0/3/8 {
+ description "Hub Appliance - NetGuardian Alarm [NO-MONITOR]";
+ }
+ inactive: ge-0/3/9 {
+ description ONENETHUB-LAWTON-SANS-LAG_Cisco-GE-2-2-CHANNEL-GROUP1;
+ }
+ xe-1/0/0 {
+ description "CORE 10GE to hub.okccc xe-1/3/1 | OneNet-OKCCC-LAW-XE-XXXX";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.247.30/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::9/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/3/1 {
+ description "RESERVED FOR IPERF [ORDERED]";
+ unit 0 {
+ family inet {
+ address 164.58.16.85/30;
+ }
+ }
+ }
+ ae0 {
+ description "CORE 2GE to hub.law AE0 | OneNet-LAW-LAW-2GE-AE";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family inet {
+ address 164.58.245.69/30;
+ }
+ family inet6 {
+ address 2610:1d8:3100::2/127;
+ }
+ family mpls;
+ }
+ }
+ ae1 {
+ description LAWTON-SANS-EX2200;
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ aggregated-ether-options {
+ link-speed 1g;
+ lacp {
+ active;
+ }
+ }
+ unit 255 {
+ encapsulation vlan-bridge;
+ vlan-id 255;
+ }
+ }
+ ae2 {
+ description "CORE 2GE to core.okccc AE0 | OneNet-OKCCC-LAW-2GE-AE";
+ mtu 9192;
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.210/30;
+ }
+ family mpls;
+ }
+ }
+ irb {
+ unit 255 {
+ description OKC-CORE1-to-EC1;
+ bandwidth 2g;
+ family inet {
+ mtu 9000;
+ address 164.58.69.49/28;
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ description LAWTON-M480-Loopback;
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.202/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::2b/128;
+ }
+ }
+ }
+}
+inactive: forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1000;
+ }
+ family inet {
+ output {
+ flow-server 164.58.253.210 {
+ port 9100;
+ version-ipfix {
+ template {
+ IP-V4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.34;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ location "Lawton, OK";
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 198.17.223.0/24 next-hop 164.58.112.21;
+ route 164.58.168.64/26 next-hop 156.110.86.102;
+ route 164.58.168.128/25 next-hop 156.110.86.102;
+ route 164.58.171.128/26 next-hop 156.110.86.102;
+ route 164.58.171.160/32 next-hop 156.110.86.102;
+ route 164.58.168.0/26 next-hop 156.110.86.2;
+ route 204.63.217.0/24 next-hop 156.110.86.142;
+ route 204.63.218.0/24 next-hop 156.110.86.142;
+ route 156.110.87.0/29 next-hop 164.58.215.22;
+ route 199.248.134.0/23 next-hop 156.110.86.142;
+ route 164.58.63.160/28 next-hop 156.110.86.246;
+ route 156.110.87.112/29 next-hop 164.58.163.10;
+ route 156.110.211.200/29 next-hop 164.58.215.22;
+ route 156.110.87.32/29 next-hop 164.58.19.174;
+ route 164.58.72.32/27 next-hop 164.58.19.174;
+ route 164.58.225.40/29 next-hop 156.110.86.110;
+ route 164.58.218.32/28 next-hop 164.58.4.122;
+ route 156.110.86.56/30 next-hop 164.58.4.122;
+ route 156.110.90.208/30 next-hop 156.110.86.110;
+ route 164.58.17.96/27 next-hop 164.58.2.50;
+ }
+ router-id 164.58.199.202;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface lo0.0;
+ interface ge-0/0/1.0;
+ interface ae0.0;
+ interface ae2.0;
+ }
+ bgp {
+ inactive: path-selection cisco-non-deterministic;
+ traceoptions {
+ file bgp-trace size 10m files 5;
+ flag state;
+ flag all detail;
+ }
+ log-updown;
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.202;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ area 0.0.0.0 {
+ interface ae0.0 {
+ metric 65500;
+ authentication {
+ md5 7 key "$9$5Tn/tu1Ihru0rvWLbw.Pf539p0BRcl/C0IEcle" start-time "2011-6-15.22:36:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface fxp0.0 {
+ disable;
+ }
+ interface lo0.0;
+ interface ge-0/1/6.0;
+ interface ae2.0 {
+ authentication {
+ md5 7 key "$9$5Tn/tu1Ihru0rvWLbw.Pf539p0BRcl/C0IEcle"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/0/2.0 {
+ metric 1000;
+ authentication {
+ md5 7 key "$9$sEYaZjHmPT3Hk39ApEhdbwsoGik.fQnZUkP5Qn6"; ## SECRET-DATA
+ }
+ }
+ interface xe-1/0/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$xFx7bs4aUDHmaJmTz3puWLXxVYoJGjkPs2JDikPf"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface ge-0/0/2.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ae0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface ge-0/0/1.0;
+ interface ge-0/0/2.0;
+ interface xe-1/0/0.69;
+ interface ae0.0;
+ interface ae2.0;
+ interface lo0.0;
+ }
+ lldp {
+ interface ge-0/2/0;
+ interface ge-0/0/0;
+ interface all;
+ interface ge-0/0/2;
+ interface xe-1/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ prefix-list CAMERON-BAD-IP {
+ 58.68.130.154/32;
+ 64.206.54.198/32;
+ 66.180.172.11/32;
+ 67.104.146.36/32;
+ 70.87.134.34/32;
+ 82.99.15.6/32;
+ 85.206.6.48/32;
+ 120.104.231.250/32;
+ 174.139.66.2/32;
+ }
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Lawton480;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Lawton480;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ filter CAMERON {
+ term 1 {
+ from {
+ source-prefix-list {
+ CAMERON-BAD-IP;
+ }
+ }
+ then {
+ discard;
+ }
+ }
+ term 2 {
+ then accept;
+ }
+ }
+ }
+ policer 10M-POL {
+ logical-interface-policer;
+ if-exceeding {
+ bandwidth-limit 9m;
+ burst-size-limit 300k;
+ }
+ then discard;
+ }
+ policer 100M-POL {
+ logical-interface-policer;
+ if-exceeding {
+ bandwidth-limit 95m;
+ burst-size-limit 300k;
+ }
+ then discard;
+ }
+}
+routing-instances {
+ VPLS-CAMERON-2509 {
+ description VPLS-CAMERON;
+ instance-type vpls;
+ interface ge-0/1/9.2509;
+ route-distinguisher 164.58.199.202:2509;
+ vrf-target target:5078:2509;
+ protocols {
+ vpls {
+ mac-table-size {
+ 1024;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site Lawton-1 {
+ site-identifier 1;
+ }
+ }
+ }
+ }
+ VPLS-ONENET-DC {
+ description ONENET-SANS-VPLS-OKC-TULSA-LAWTON;
+ instance-type vpls;
+ interface ge-0/3/0.2000;
+ route-distinguisher 164.58.199.202:2000;
+ vrf-target target:5078:2000;
+ protocols {
+ vpls {
+ mac-table-size {
+ 3000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site LAWTON-DC {
+ site-identifier 3;
+ }
+ }
+ }
+ }
+ VPLS-ONENET-IPERF {
+ description ONENET-IPERF-MGMT;
+ instance-type vpls;
+ vlan-id 2011;
+ interface ge-0/1/0.2011;
+ route-distinguisher 164.58.199.202:2011;
+ vrf-target target:5078:2011;
+ protocols {
+ vpls {
+ mac-table-size {
+ 3000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site LAWTON-IPERF {
+ site-identifier 2;
+ }
+ }
+ }
+ }
+}
+inactive: services {
+ flow-monitoring {
+ version-ipfix {
+ template IP-V4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+bridge-domains {
+ VLAN_255_SAN {
+ vlan-id 255;
+ interface ae1.255;
+ routing-interface irb.255;
+ }
+}
+{master}
+# grnoc-mon at LAWTON-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.70 ae0.0 Full 164.58.199.189
+# 164.58.245.209 ae2.0 Full 164.58.199.233
+# 164.58.245.182 ge-0/0/2.0 Full 164.58.199.18
+# 164.58.247.29 xe-1/0/0.69 Full 164.58.199.233
+#
+# {master}
Index: core4.tul.onenet.net
===================================================================
--- core4.tul.onenet.net (revision 76438)
+++ core4.tul.onenet.net (working copy)
@@ -0,0 +1,3295 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show system commit
+# 2013-08-19 13:33:10 CDT by jeremyt via cli commit synchronize
+# 2013-08-15 09:29:26 CDT by josh via cli commit synchronize
+# 2013-08-15 08:42:49 CDT by josh via cli commit synchronize
+# 2013-08-14 14:40:37 CDT by joel via cli commit synchronize
+# 2013-08-14 12:30:31 CDT by jeremyt via cli commit synchronize
+# 2013-08-14 12:12:42 CDT by jeremyt via cli commit synchronize
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# FPC 1 Intake OK
+# FPC 1 Exhaust A OK
+# FPC 1 Exhaust B OK
+# FPC 1 QX 0 TSen OK
+# FPC 1 QX 0 Chip OK
+# FPC 1 LU 0 TCAM TSen OK
+# FPC 1 LU 0 TCAM Chip OK
+# FPC 1 LU 0 TSen OK
+# FPC 1 LU 0 Chip OK
+# FPC 1 MQ 0 TSen OK
+# FPC 1 MQ 0 Chip OK
+# FPC 1 QX 1 TSen OK
+# FPC 1 QX 1 Chip OK
+# FPC 1 LU 1 TCAM TSen OK
+# FPC 1 LU 1 TCAM Chip OK
+# FPC 1 LU 1 TSen OK
+# FPC 1 LU 1 Chip OK
+# FPC 1 MQ 1 TSen OK
+# FPC 1 MQ 1 Chip OK
+# FPC 2 Intake OK
+# FPC 2 Exhaust A OK
+# FPC 2 Exhaust B OK
+# FPC 2 QX 0 TSen OK
+# FPC 2 QX 0 Chip OK
+# FPC 2 LU 0 TCAM TSen OK
+# FPC 2 LU 0 TCAM Chip OK
+# FPC 2 LU 0 TSen OK
+# FPC 2 LU 0 Chip OK
+# FPC 2 MQ 0 TSen OK
+# FPC 2 MQ 0 Chip OK
+# FPC 2 QX 1 TSen OK
+# FPC 2 QX 1 Chip OK
+# FPC 2 LU 1 TCAM TSen OK
+# FPC 2 LU 1 TCAM Chip OK
+# FPC 2 LU 1 TSen OK
+# FPC 2 LU 1 Chip OK
+# FPC 2 MQ 1 TSen OK
+# FPC 2 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 2 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 1 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 2 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN1159FE3AFB MX480 Midplane
+# Midplane REV 05 710-017414 ABAC1710 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBG0446 Front Panel Display
+# PEM 0 Rev 03 740-027736 QCS1021T0EK DC 2.4kW Power Entry Module
+# PEM 1 Rev 03 740-027736 QCS1026T0J3 DC 2.4kW Power Entry Module
+# PEM 2 Rev 03 740-027736 QCS1021T07S DC 2.4kW Power Entry Module
+# PEM 3 Rev 03 740-027736 QCS1021T0DX DC 2.4kW Power Entry Module
+# Routing Engine 0 REV 15 740-013063 9009066274 RE-S-2000
+# Routing Engine 1 REV 15 740-013063 9012009936 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV5002 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV5009 Enhanced MX SCB
+# FPC 0 REV 15 750-031088 YZ0007 MPC Type 2 3D Q
+# CPU REV 06 711-030884 ZA0650 MPC PMB 2G
+# MIC 0 REV 26 750-028387 YT7101 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 T10K68152 XFP-10G-SR
+# Xcvr 1 REV 01 740-031833 T10L15733 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 34T749103487 XFP-10G-LR
+# Xcvr 1 REV 03 740-014289 T10K70627 XFP-10G-SR
+# MIC 1 REV 24 750-028392 YR7980 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 1 REV 02 740-013111 A476890 SFP-T
+# Xcvr 2 REV 02 740-013111 A464128 SFP-T
+# Xcvr 3 REV 02 740-013111 A464045 SFP-T
+# Xcvr 4 REV 02 740-013111 A476754 SFP-T
+# Xcvr 6 REV 02 740-013111 A476866 SFP-T
+# Xcvr 7 REV 02 740-013111 A476850 SFP-T
+# Xcvr 8 REV 02 740-013111 A476888 SFP-T
+# Xcvr 9 REV 02 740-013111 A476793 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-011613 PJH4SUK SFP-SX
+# Xcvr 1 REV 01 740-031851 AM1041SU0QK SFP-SX
+# Xcvr 2 REV 01 740-031851 AM1041S01PY SFP-SX
+# Xcvr 3 REV 01 740-031851 AM1144SW5Z4 SFP-SX
+# Xcvr 4 REV 01 740-031850 PM2440L SFP-LX10
+# Xcvr 5 REV 02 740-013111 B436511 SFP-T
+# Xcvr 6 REV 02 740-013111 B437340 SFP-T
+# Xcvr 9 REV 02 740-013111 A464196 SFP-T
+# QXM 0 REV 05 711-028408 YW2930 MPC QXM
+# QXM 1 REV 05 711-028408 YV9714 MPC QXM
+# FPC 1 REV 15 750-031088 YZ0304 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YY6498 MPC PMB 2G
+# MIC 0 REV 26 750-028387 YT7041 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 T10K67838 XFP-10G-SR
+# Xcvr 1 REV 01 740-031833 T10L15832 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 CB51BQ08G XFP-10G-SR
+# Xcvr 1 REV 01 740-031833 T10L15853 XFP-10G-LR
+# MIC 1 REV 26 750-028387 ABBR1654 3D 4x 10GE XFP
+# PIC 2 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 21T670101009 XFP-10G-LR
+# Xcvr 1 REV 01 740-031833 34T749103431 XFP-10G-LR
+# PIC 3 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 CC44BQ0CR XFP-10G-SR
+# Xcvr 1 REV 01 740-031833 34T749103220 XFP-10G-LR
+# QXM 0 REV 05 711-028408 YW3241 MPC QXM
+# QXM 1 REV 05 711-028408 YV9439 MPC QXM
+# FPC 2 REV 15 750-031088 YZ7001 MPC Type 2 3D Q
+# CPU REV 06 711-030884 ZA0845 MPC PMB 2G
+# MIC 1 REV 26 750-028392 ABBY6018 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# QXM 0 REV 05 711-028408 YY3260 MPC QXM
+# QXM 1 REV 05 711-028408 YY3234 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ABAC1710 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBG0446 CRAFT-MX480-S
+# PEM 0 Rev 03 740-027736 QCS1021T0EK PWR-MX480-2400-DC-S
+# PEM 1 Rev 03 740-027736 QCS1026T0J3 PWR-MX480-2400-DC-S
+# PEM 2 Rev 03 740-027736 QCS1021T07S PWR-MX480-2400-DC-S
+# PEM 3 Rev 03 740-027736 QCS1021T0DX PWR-MX480-2400-DC-S
+# Routing Engine 0 REV 15 740-013063 9009066274 RE-S-2000-4096-S
+# Routing Engine 1 REV 15 740-013063 9012009936 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV5002 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV5009 SCBE-MX-S
+# FPC 0 REV 15 750-031088 YZ0007 MX-MPC2-3D-Q
+# MIC 0 REV 26 750-028387 YT7101 MIC-3D-4XGE-XFP
+# MIC 1 REV 24 750-028392 YR7980 MIC-3D-20GE-SFP
+# FPC 1 REV 15 750-031088 YZ0304 MX-MPC2-3D-Q
+# MIC 0 REV 26 750-028387 YT7041 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028387 ABBR1654 MIC-3D-4XGE-XFP
+# FPC 2 REV 15 750-031088 YZ7001 MX-MPC2-3D-Q
+# MIC 1 REV 26 750-028392 ABBY6018 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9009066274
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012009936
+#
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis scb
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis sfm detail
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis ssb
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:eb:cc
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show version
+# Hostname: TULSA-CORE4-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Ser!
vices [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at TULSA-CORE4-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 5979412
+# drwxr-xr-x 2 root field 512 Mar 9 2011 gres-tp/
+# -rw-r--r-- 1 root field 4 Apr 28 00:35 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Mar 9 2011 install/
+# -rw-r--r-- 1 root field 348823558 Mar 9 2011 jbundle-10.4R2.6-domestic.tgz
+# -rw-r--r-- 1 root field 349730789 Mar 24 2011 jbundle-10.4R3.4-domestic.tgz
+# -rw-r--r-- 1 root field 350497882 Nov 30 2011 jbundle-10.4R6.5-domestic.tgz
+# -rw-r--r-- 1 root field 355159151 Mar 3 2011 jinstall-10.4R2.6-domestic-signed.tgz
+# -rw-r--r-- 1 admin field 356069136 Mar 24 2011 jinstall-10.4R3.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 356846496 Nov 29 2011 jinstall-10.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Apr 23 07:16 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 457473 Feb 22 09:14 joel.txt
+# -rw-r--r-- 1 root field 0 Mar 9 2011 jperf
+# -rw-r--r-- 1 root field 0 Mar 9 2011 jperf_shmem_sem
+# -rw-r--r-- 1 root field 7829561 Mar 9 2011 jweb-10.4R2.6-signed.tgz
+# -rw-r--r-- 1 admin field 7830840 Mar 24 2011 jweb-10.4R3.4-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 9 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 root field 155 Apr 28 00:35 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Apr 28 00:22 pics/
+# -r--r--r-- 1 root field 499 Apr 28 00:17 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 Dec 10 2012 rdm.taf
+# -rw------- 1 root field 140455327 Nov 30 2011 rpd.core-tarball.0.tgz
+# drwxr-xr-x 2 root field 512 Apr 28 00:25 rtsdb/
+# -rw-r----- 1 root field 534 Apr 28 00:36 sampled.pkts
+# drwxr-xr-x 3 root field 512 Mar 9 2011 sec-download/
+# -rw-r--r-- 1 root field 0 Mar 9 2011 tracelogs
+# -rw-r--r-- 1 root field 0 Mar 9 2011 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Mar 9 2011 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 Feb 12 2013 vi.recover/
+#
+# {master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show system uptime
+# System booted: 2013-04-28 00:30 CDT
+# Protocols started: 2013-04-28 00:31 CDT
+# Last configured: 2013-08-19 13:33 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.112 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up up
+#xe-0/0/1.2030 up up
+#xe-0/0/1.2970 up up
+#xe-0/0/1.32767 up up
+#xe-0/1/0 up up
+#xe-0/1/0.70 up up
+#xe-0/1/0.32767 up up
+#xe-0/1/1 up up
+#xe-0/1/1.148 up up
+#xe-0/1/1.32767 up up
+#gr-0/1/10 up up
+#gr-0/1/10.100 up up
+#ip-0/1/10 up up
+#lt-0/1/10 up up
+#mt-0/1/10 up up
+#pd-0/1/10 up up
+#pe-0/1/10 up up
+#pe-0/1/10.32769 up up
+#ut-0/1/10 up up
+#vt-0/1/10 up up
+#ge-0/2/0 down down
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.0 up up
+#ge-0/2/2 up up
+#ge-0/2/2.0 up up
+#ge-0/2/3 up up
+#ge-0/2/3.0 up up
+#ge-0/2/4 up up
+#ge-0/2/4.0 up up
+#ge-0/2/5 up down
+#ge-0/2/6 up up
+#ge-0/2/6.0 up up
+#ge-0/2/7 up up
+#ge-0/2/7.0 up up
+#ge-0/2/8 up up
+#ge-0/2/9 up up
+#ge-0/2/9.0 up up
+#ge-0/3/0 up up
+#ge-0/3/0.0 up up
+#ge-0/3/1 up up
+#ge-0/3/1.250 up up
+#ge-0/3/1.2000 up up
+#ge-0/3/1.32767 up up
+#ge-0/3/2 up up
+#ge-0/3/2.101 up up
+#ge-0/3/2.109 up up
+#ge-0/3/2.110 up up
+#ge-0/3/2.111 up up
+#ge-0/3/2.112 up up
+#ge-0/3/2.113 up up
+#ge-0/3/2.114 up up
+#ge-0/3/2.116 up up
+#ge-0/3/2.117 up up
+#ge-0/3/2.119 up up
+#ge-0/3/2.138 up up
+#ge-0/3/2.139 up up
+#ge-0/3/2.140 up up
+#ge-0/3/2.141 up up
+#ge-0/3/2.142 up up
+#ge-0/3/2.32767 up up
+#ge-0/3/3 up up
+#ge-0/3/3.250 up up
+#ge-0/3/3.2000 up up
+#ge-0/3/3.32767 up up
+#ge-0/3/4 up up
+#ge-0/3/4.143 up up
+#ge-0/3/4.144 up up
+#ge-0/3/4.146 up up
+#ge-0/3/4.147 up up
+#ge-0/3/4.377 up up
+#ge-0/3/4.32767 up up
+#ge-0/3/5 up up
+#ge-0/3/5.320 up up
+#ge-0/3/5.321 up up
+#ge-0/3/5.32767 up up
+#ge-0/3/6 up down
+#ge-0/3/6.32767 up down
+#ge-0/3/7 down down
+#ge-0/3/8 down down
+#ge-0/3/9 up up
+#ge-0/3/9.0 up up
+#lc-1/0/0 up up
+#lc-1/0/0.32769 up up
+#pfe-1/0/0 up up
+#pfe-1/0/0.16383 up up
+#pfh-1/0/0 up up
+#pfh-1/0/0.16383 up up
+#xe-1/0/0 up up
+#xe-1/0/0.132 up up
+#xe-1/0/0.32767 up up
+#xe-1/0/1 up up
+#xe-1/0/1.441 up up
+#xe-1/0/1.442 up up
+#xe-1/0/1.443 up up
+#xe-1/0/1.710 up up
+#xe-1/0/1.991 up up
+#xe-1/0/1.992 up up
+#xe-1/0/1.994 up up
+#xe-1/0/1.2970 up up
+#xe-1/0/1.32767 up up
+#xe-1/1/0 up up
+#xe-1/1/0.112 up up
+#xe-1/1/0.32767 up up
+#xe-1/1/1 up up
+#xe-1/1/1.980 up up
+#xe-1/1/1.981 up up
+#xe-1/1/1.991 up up
+#xe-1/1/1.992 up up
+#xe-1/1/1.993 up up
+#xe-1/1/1.994 up up
+#xe-1/1/1.996 up up
+#xe-1/1/1.997 up up
+#xe-1/1/1.998 up up
+#xe-1/1/1.32767 up up
+#lc-1/2/0 up up
+#lc-1/2/0.32769 up up
+#pfe-1/2/0 up up
+#pfe-1/2/0.16383 up up
+#xe-1/2/0 up up
+#xe-1/2/0.70 up up
+#xe-1/2/0.32767 up up
+#xe-1/2/1 up down
+#xe-1/3/0 up up
+#xe-1/3/0.0 up up
+#xe-1/3/1 up down
+#lc-2/0/0 up up
+#lc-2/0/0.32769 up up
+#pfe-2/0/0 up up
+#pfe-2/0/0.16383 up up
+#pfh-2/0/0 up up
+#pfh-2/0/0.16383 up up
+#ge-2/2/0 up down
+#lc-2/2/0 up up
+#lc-2/2/0.32769 up up
+#pfe-2/2/0 up up
+#pfe-2/2/0.16383 up up
+#ge-2/2/1 up down
+#ge-2/2/2 up down
+#ge-2/2/3 up down
+#ge-2/2/4 up down
+#ge-2/2/5 up down
+#ge-2/2/6 up down
+#ge-2/2/7 up down
+#ge-2/2/8 up down
+#ge-2/2/9 up down
+#ge-2/3/0 up down
+#ge-2/3/1 up down
+#ge-2/3/2 up down
+#ge-2/3/3 up down
+#ge-2/3/4 up down
+#ge-2/3/5 up down
+#ge-2/3/6 up down
+#ge-2/3/7 up down
+#ge-2/3/8 up down
+#ge-2/3/9 up down
+#ae0 up up
+#ae0.112 up up
+#ae0.32767 up up
+#ae1 up up
+#ae1.250 up up
+#ae1.2000 up up
+#ae1.32767 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 up down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#lsi.1049600 up up
+#lsi.1049604 up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:33:10 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name TULSA-CORE4-MX480-RE0;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name TULSA-CORE4-MX480-RE1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ backup-router 172.25.46.1;
+ time-zone America/Chicago;
+ internet-options {
+ icmpv4-rate-limit packet-rate 2000;
+ }
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.224;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ aggregated-devices {
+ ethernet {
+ device-count 2;
+ }
+ }
+ fpc 0 {
+ pic 1 {
+ tunnel-services {
+ bandwidth 1g;
+ }
+ }
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.tul xe-1/0/0 [AE0-1of2] | OneNet-TUL-TUL-XE-xxxx";
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ xe-0/0/1 {
+ description "UPSTREAM 10GE to ^ OMNI-POP ^ devicexxxx int-?/?/? CIR0005050";
+ enable;
+ vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ unit 2030 {
+ description "UPSTREAM L3 10GE to ^ WiscNet Peering Service ^ CIR0005051";
+ vlan-id 2030;
+ family inet {
+ sampling {
+ input;
+ }
+ address 216.56.50.38/30;
+ }
+ family inet6 {
+ address 2001:4e0:0:300d::2/64;
+ }
+ }
+ unit 2970 {
+ description "University of Missouri WiscNet";
+ encapsulation vlan-bridge;
+ vlan-id 2970;
+ }
+ }
+ xe-0/1/0 {
+ description "CORE 10GE to core.mus xe-0/0/0 [DARK FIBER MBO] | OneNet-TUL-MUS-XE-3813";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 70 {
+ vlan-id 70;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.245.205/30;
+ }
+ family inet6 {
+ address 2610:1d8:2300::2/127;
+ }
+ family mpls;
+ }
+ }
+ xe-0/1/1 {
+ description "CORE 10GE to core5.tul xe-0/1/1 | OneNet-TUL-TUL-XE-4474";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 148 {
+ vlan-id 148;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.149/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ffac::1/80;
+ address 2610:1d8:2300::/127;
+ }
+ family mpls;
+ }
+ }
+ gr-0/1/10 {
+ unit 100 {
+ tunnel {
+ source 164.58.199.224;
+ destination 164.58.199.192;
+ ttl 10;
+ }
+ family inet {
+ filter {
+ input TELEMATE;
+ }
+ address 164.58.212.166/30;
+ }
+ }
+ }
+ ge-0/2/0 {
+ disable;
+ }
+ ge-0/2/1 {
+ description Mannford-PS-CIR0004370;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.92.153/30;
+ }
+ }
+ }
+ ge-0/2/2 {
+ description ARE-ON-backdoor-datalink;
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 156.110.203.225/28;
+ }
+ }
+ }
+ ge-0/2/3 {
+ description Temp-Verso-Box-Mgmt-Port;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 156.110.202.73/30;
+ }
+ }
+ }
+ ge-0/2/4 {
+ description Temp-Verso-Box-Mgmt-Port;
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 156.110.202.69/30;
+ }
+ }
+ }
+ ge-0/2/6 {
+ description Tulsa-UPS-1;
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 156.110.202.141/30;
+ }
+ }
+ }
+ ge-0/2/7 {
+ description Tulsa-UPS-2;
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 156.110.202.145/30;
+ }
+ }
+ }
+ inactive: ge-0/2/8 {
+ description Cordell-Monitor-NAGIOS;
+ disable;
+ unit 0 {
+ description Cordell-Monitor-NAGIOS;
+ family inet {
+ address 156.110.202.137/30;
+ }
+ }
+ }
+ ge-0/2/9 {
+ description Cisco-Access-Server-2511;
+ speed 10m;
+ unit 0 {
+ family inet {
+ address 164.58.62.137/30;
+ }
+ }
+ }
+ ge-0/3/0 {
+ description OSU-TulsaLAN-CIR0004038;
+ unit 0 {
+ family inet {
+ address 156.110.202.165/30;
+ }
+ }
+ }
+ ge-0/3/1 {
+ description "LAG to SAN EX2200";
+ gigether-options {
+ 802.3ad ae1;
+ }
+ }
+ ge-0/3/2 {
+ description "NNI to AT&T - TUL - CIR0004047";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 101 {
+ description Pryor-PS-CIR0004046;
+ vlan-id 101;
+ family inet {
+ address 164.58.6.101/30;
+ }
+ }
+ unit 109 {
+ description OSU-IT-CIR0004414;
+ vlan-id 109;
+ family inet {
+ address 164.58.69.9/30;
+ }
+ }
+ unit 110 {
+ description "OK Corporation Commission Oil Gas District I FastEthernet CIR0004394 [NO-MONITOR]";
+ vlan-id 110;
+ family inet {
+ address 156.110.82.137/30;
+ }
+ }
+ unit 111 {
+ description Tahlequah-PS-DS3/Ethernet-CIR0004546;
+ vlan-id 111;
+ family inet {
+ address 164.58.40.13/30;
+ }
+ }
+ unit 112 {
+ description Depew-PS-100Meg-CIR0004581;
+ vlan-id 112;
+ family inet {
+ address 156.110.106.25/30;
+ }
+ }
+ unit 113 {
+ description Sapulpa-Public-Library-100Mb-CIR0004674;
+ vlan-id 113;
+ family inet {
+ address 156.110.90.145/30;
+ }
+ }
+ unit 114 {
+ description Bartlesville-Public-Library-100Mb-CIR0005035;
+ vlan-id 114;
+ family inet {
+ address 164.58.0.69/30;
+ }
+ }
+ unit 116 {
+ description Will-Rogers-Public-Library-100Mb-CIR0004673;
+ vlan-id 116;
+ family inet {
+ address 164.58.11.217/30;
+ }
+ }
+ unit 117 {
+ description "Okmulgee Public Library 100Mb CIR0005021";
+ vlan-id 117;
+ family inet {
+ address 164.58.2.141/30;
+ }
+ }
+ unit 119 {
+ description "Jay C. Byers Memorial Library 100M-CIR0005108";
+ vlan-id 119;
+ family inet {
+ address 164.58.63.65/30;
+ }
+ }
+ unit 138 {
+ description Dewey-PS-50Mb-CIR0004881;
+ vlan-id 138;
+ family inet {
+ address 164.58.6.65/30;
+ }
+ }
+ unit 139 {
+ description EODLS-Tahlequah-Public-Library-FE-100Mb-CIR0005182;
+ vlan-id 139;
+ family inet {
+ address 156.110.122.177/30;
+ }
+ }
+ unit 140 {
+ description "Schulter Independant School-District#6-20M-CIR0004887";
+ vlan-id 140;
+ family inet {
+ address 156.110.62.181/30;
+ }
+ }
+ unit 141 {
+ description Ripley-Public-Schools-10M-CIR0004916;
+ vlan-id 141;
+ family inet {
+ address 164.58.1.73/30;
+ }
+ }
+ unit 142 {
+ description "Bristow Public Library 10m CIR0005133";
+ vlan-id 142;
+ family inet {
+ address 156.110.62.133/30;
+ }
+ }
+ }
+ ge-0/3/3 {
+ description "LAG to SAN EX2200";
+ gigether-options {
+ 802.3ad ae1;
+ }
+ }
+ ge-0/3/4 {
+ description "NNI to AT&T - TUL - CIR0005140";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 143 {
+ description "Drumright Public Library 100m CIR0004984";
+ vlan-id 143;
+ family inet {
+ address 156.110.72.65/30;
+ }
+ }
+ unit 144 {
+ description "Bristow PS 250M | CIR0004979";
+ vlan-id 144;
+ family inet {
+ address 164.58.14.145/30;
+ }
+ }
+ unit 146 {
+ description "Pryor Library 100m |CIR0005198";
+ vlan-id 146;
+ family inet {
+ address 156.110.130.5/30;
+ }
+ }
+ unit 147 {
+ description "Yale PS 100m | CIR0005157";
+ vlan-id 147;
+ family inet {
+ address 164.58.2.217/30;
+ }
+ }
+ unit 377 {
+ description "Copan PS 100M | CIR0005167";
+ vlan-id 377;
+ family inet {
+ address 156.110.130.21/30;
+ }
+ }
+ }
+ ge-0/3/5 {
+ description "NNI to MBO - TUL - CIR000xxxx";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 320 {
+ description Gore-High-School-10Mb-CIR0005106;
+ vlan-id 320;
+ family inet {
+ address 156.110.230.101/30;
+ }
+ }
+ unit 321 {
+ description Gore-Elementary-School-5Mb-CIR0005110;
+ vlan-id 321;
+ family inet {
+ address 164.58.4.85/30;
+ }
+ }
+ }
+ ge-0/3/6 {
+ description "NNI to AT&T - TUL - CIR000xxxx [NO-MONITOR]";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ }
+ ge-0/3/7 {
+ disable;
+ }
+ ge-0/3/8 {
+ disable;
+ }
+ ge-0/3/9 {
+ description TELEMATE-VERSO-WEBFILTER-PORT-MIRROR;
+ unit 0 {
+ family inet {
+ address 192.168.79.1/30 {
+ arp 192.168.79.2 mac 00:90:69:4f:84:9a;
+ }
+ }
+ }
+ }
+ xe-1/0/0 {
+ description "CORE 10GE to core2.tul xe-1/0/0 | OneNet-TUL-TUL-XE-4476";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 132 {
+ vlan-id 132;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.134/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ffa8::2/80;
+ address 2610:1d8:2100::5/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/0/1 {
+ description "UPSTREAM 10GE to ^ GPN-WAVENET ^ devicexxx int-?/?/? CIR0005052;";
+ vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ unit 441 {
+ description "UPSTREAM L3 XX to ^ GPN-Direct-Peer ^ CIR0005053";
+ vlan-id 441;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.113.255.30/30;
+ }
+ }
+ unit 442 {
+ description "UPSTREAM L3 XX to ^ I2-CPS (via GPN) ^ CIR0005054";
+ vlan-id 442;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 156.110.203.1/30;
+ }
+ }
+ unit 443 {
+ description "UPSTREAM L3 XX to ^ I2-RE (via GPN) ^ CIR0005055";
+ vlan-id 443;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 156.110.203.5/30;
+ }
+ family inet6 {
+ mtu 9000;
+ address 2001:468:1ff:18::2/64;
+ }
+ }
+ inactive: unit 444 {
+ description "UPSTREAM L3 XX to ^ NTR (via I2)(via GPN) ^ CIR0005056";
+ vlan-id 444;
+ family inet {
+ mtu 1500;
+ sampling {
+ input;
+ }
+ address 64.57.21.166/30;
+ }
+ family inet6 {
+ mtu 1500;
+ address 2001:468:f000:2118::2/64;
+ }
+ }
+ unit 710 {
+ description "UPSTREAM L3 XX to ^ ESnet ^ CIR0005058";
+ vlan-id 710;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 198.129.77.54/30;
+ }
+ }
+ unit 991 {
+ description "UPSTREAM L2 XX to ^ 991-AREON-I2 ^ CIR0005059";
+ encapsulation vlan-bridge;
+ vlan-id 991;
+ }
+ unit 992 {
+ description "UPSTREAM L2 XX to ^ 992-AREON-CPS ^ CIR0005060;";
+ encapsulation vlan-bridge;
+ vlan-id 992;
+ }
+ unit 994 {
+ description "UPSTREAM L2 XX to ^ 994-AREON-ESNET ^ CIR0005061";
+ encapsulation vlan-bridge;
+ vlan-id 994;
+ }
+ unit 2970 {
+ description "University of Missouri WiscNet";
+ encapsulation vlan-bridge;
+ vlan-id 2970;
+ }
+ }
+ xe-1/1/0 {
+ description "CORE 10GE to core1.tul xe-1/1/0 [AE0-2of2] | OneNet-TUL-TUL-XE-4483";
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ xe-1/1/1 {
+ description "UPSTREAM 10GE to ^ AREON ^ devicexxx int-?/?/? CIR0005062";
+ vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ unit 980 {
+ description "UPSTREAM 10GE to ^ TXLEARN - Dallas ^ devicexxxx int-?/?/? CIR000XXXX";
+ vlan-id 980;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 74.200.189.42/30;
+ }
+ }
+ unit 981 {
+ description "UPSTREAM 10GE to ^ TXLEARNV6 - Dallas ^ devicexxxx int-?/?/? CIR000XXXX";
+ vlan-id 981;
+ family inet {
+ mtu 9000;
+ }
+ family inet6 {
+ address 2607:f928:4:7::2/64;
+ }
+ }
+ unit 991 {
+ description "UPSTREAM L3 XX to ^ AREON-I2-DIRECT-PEER-GPN ^ CIR0005063";
+ encapsulation vlan-bridge;
+ vlan-id 991;
+ }
+ unit 992 {
+ description "UPSTREAM L3 XX to ^ AREON-CPS ^ CIR0005064";
+ encapsulation vlan-bridge;
+ vlan-id 992;
+ }
+ unit 993 {
+ description "UPSTREAM L3 XX to ^ VLAN-993-AREON-BGP-IPv4-PEER ^ CIR0004482";
+ vlan-id 993;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 156.110.202.157/30;
+ }
+ }
+ unit 994 {
+ description "UPSTREAM L3 XX to ^ VLAN-994-AREON-ESNET ^ CIR0005066";
+ encapsulation vlan-bridge;
+ vlan-id 994;
+ }
+ unit 996 {
+ description "UPSTREAM L3 XX to ^ VLAN-996-AREON-BGP-IPv6-PEER ^ CIR0005067";
+ vlan-id 996;
+ family inet6 {
+ mtu 9000;
+ address 2001:468:aff:ffff:16::1/80;
+ }
+ }
+ unit 997 {
+ description "UPSTREAM L3 XX to ^ VLAN-997-AREON-COGENT-IPv4-PEER ^ CIR0005068";
+ vlan-id 997;
+ family inet {
+ sampling {
+ input;
+ }
+ address 38.104.198.70/30;
+ }
+ }
+ unit 998 {
+ description "UPSTREAM L3 XX to ^ VLAN-998-AREON-COGENT-IPv6-PEER ^ CIR0005069";
+ vlan-id 998;
+ family inet6 {
+ mtu 9000;
+ address 2001:550:2:2e::e/126;
+ }
+ }
+ }
+ xe-1/2/0 {
+ description "CORE 10GE to core.tsb xe-0/0/0 | OneNet-TUL-TSB-XE-4969";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 70 {
+ vlan-id 70;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.246.249/30;
+ }
+ family inet6 {
+ address 2610:1d8:2300::4/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/3/0 {
+ description "OUTULSA ^ OKCASR ^ SS CIR000XXXX [NO-MONITOR]";
+ unit 0 {
+ family inet {
+ address 164.58.16.25/30;
+ }
+ }
+ }
+ ae0 {
+ description "CORE 20GE to core1.tul AE0 | OneNet-TUL-TUL-2XE-AE";
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ aggregated-ether-options {
+ link-speed 10g;
+ lacp {
+ active;
+ }
+ }
+ unit 112 {
+ bandwidth 20g;
+ vlan-id 112;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.245.234/30;
+ }
+ family inet6 {
+ mtu 9000;
+ address 2001:468:aff:ffff:ffa3::2/80;
+ address 2610:1d8:2000::5/127;
+ }
+ family mpls;
+ }
+ }
+ ae1 {
+ description "LAG to SAN EX2200";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ aggregated-ether-options {
+ link-speed 1g;
+ lacp {
+ active;
+ }
+ }
+ unit 250 {
+ description ONENET-TULSA-SANS;
+ vlan-id 250;
+ family inet {
+ address 164.58.244.253/30;
+ }
+ }
+ unit 2000 {
+ description SANS-VPLS-TULSA-NODE;
+ encapsulation vlan-vpls;
+ vlan-id-range 804-2013;
+ family vpls;
+ }
+ }
+ lo0 {
+ description TULSA-CORE4-MX480-Loopback;
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.224/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8:ffff::1/32;
+ address 2610:1d8::9/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-server 164.58.253.36 {
+ port 9224;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ IP-V4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.224;
+ }
+ }
+ }
+ }
+ }
+ }
+ port-mirroring {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ interface ge-0/3/9.0 {
+ next-hop 192.168.79.2;
+ }
+ }
+ }
+ }
+}
+snmp {
+ location "Tulsa, OK";
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ rib inet6.0 {
+ aggregate {
+ route 2001:468:a00::/40;
+ route 2610:1d8::/32;
+ }
+ }
+ static {
+ route 192.234.12.0/24 next-hop 156.110.202.166;
+ route 192.234.13.0/24 next-hop 156.110.202.166;
+ route 198.183.248.0/24 next-hop 156.110.202.166;
+ route 156.110.127.0/29 next-hop 164.58.6.102;
+ route 156.110.204.0/29 next-hop 164.58.14.146;
+ route 156.110.207.72/29 next-hop 156.110.202.26;
+ route 164.58.230.0/23 next-hop 164.58.6.102;
+ route 164.58.80.16/28 next-hop 164.58.14.146;
+ route 198.183.248.0/23 next-hop 156.110.202.166;
+ route 164.58.29.128/30 next-hop 156.110.92.154;
+ route 164.58.186.144/30 next-hop 156.110.92.154;
+ route 164.58.69.32/28 next-hop 164.58.244.254;
+ route 172.30.32.0/24 next-hop 164.58.69.10;
+ route 156.110.215.8/29 next-hop 164.58.69.10;
+ route 164.58.180.208/28 next-hop 164.58.40.14;
+ route 164.58.19.184/29 next-hop 156.110.90.146;
+ route 156.110.27.40/30 next-hop 156.110.106.26;
+ route 156.110.107.24/29 next-hop 156.110.106.26;
+ route 164.58.183.16/30 next-hop 164.58.11.218;
+ route 164.58.21.240/28 next-hop 164.58.2.142;
+ route 164.58.98.0/28 next-hop 164.58.0.70;
+ route 156.110.207.112/29 next-hop 164.58.63.66;
+ route 156.110.211.80/28 next-hop 164.58.6.66;
+ route 164.58.20.12/30 next-hop 164.58.11.218;
+ route 164.58.253.36/32 {
+ next-hop 164.58.245.233;
+ no-readvertise;
+ }
+ route 164.58.98.48/29 next-hop 164.58.11.218;
+ route 0.0.0.0/0 {
+ discard;
+ no-install;
+ }
+ route 164.58.176.44/30 next-hop 156.110.62.182;
+ route 156.110.107.8/29 next-hop 164.58.1.74;
+ route 164.58.20.208/30 next-hop 156.110.122.178;
+ route 164.58.165.208/29 next-hop 164.58.4.86;
+ route 164.58.165.200/29 next-hop 156.110.230.102;
+ route 164.58.20.136/30 next-hop 156.110.62.182;
+ route 164.58.28.16/29 next-hop 164.58.2.142;
+ route 164.58.109.192/28 next-hop 156.110.130.22;
+ route 156.110.204.16/29 next-hop 164.58.2.218;
+ route 164.58.72.192/29 next-hop 164.58.2.218;
+ route 156.110.130.40/29 next-hop 156.110.130.6;
+ }
+ router-id 164.58.199.224;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-1/0/0.132;
+ interface lo0.0;
+ interface xe-0/1/1.148;
+ interface ge-0/2/0.0;
+ interface xe-0/1/0.70;
+ interface xe-1/2/0.70;
+ interface ae0.112;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.224;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ any;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ export [ NEXT-HOP-SELF REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ neighbor 164.58.253.36;
+ }
+ group EBGP-COGENT-AS174 {
+ type external;
+ description EBGP-COGENT-AS174;
+ import [ EBGP-COGENT-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+# authentication-key <removed>;
+ export EBGP-COGENT-EXPORT;
+ neighbor 38.104.198.69 {
+ remove-private;
+ peer-as 174;
+ }
+ }
+ group EBGP-AREON-V4 {
+ type external;
+ description EBGP-AREON-V4-82005aCd;
+ import [ EBGP-AREON-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+# authentication-key <removed>;
+ export EBGP-AREON-EXPORT;
+ neighbor 156.110.202.158 {
+ remove-private;
+ peer-as 40581;
+ }
+ }
+ group EBGP-AREON-V6 {
+ type external;
+ description EBGP-AREON-V6-82005aCd;
+ import EBGP-AREON-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+# authentication-key <removed>;
+ export EBGP-AREON-V6-EXPORT;
+ neighbor 2001:468:aff:ffff:16::2 {
+ remove-private;
+ peer-as 40581;
+ }
+ }
+ group I2-CPS-VIA-GPN {
+ type external;
+ description I2-CPS-VIA-GPN;
+ import [ I2-CPS-VIA-GPN-IMPORT EBGP-REJECT-IMPORT ];
+ inactive:# authentication-key <removed>;
+ export I2-CPS-VIA-GPN-EXPORT;
+ neighbor 156.110.203.2 {
+ remove-private;
+ peer-as 11537;
+ }
+ }
+ group I2-RE-VIA-GPN {
+ type external;
+ description I2-RE-VIA-GPN;
+ import [ I2-RE-VIA-GPN-IMPORT EBGP-REJECT-IMPORT EBGP-INGRESS-REJECTS ];
+# authentication-key <removed>;
+ export I2-RE-VIA-GPN-EXPORT;
+ neighbor 156.110.203.6 {
+ remove-private;
+ peer-as 11537;
+ }
+ }
+ group ESNET-VIA-GPN {
+ type external;
+ description ESNET-VIA-GPN;
+ import [ ESNET-VIA-GPN-IMPORT EBGP-REJECT-IMPORT ];
+ export ESNET-VIA-GPN-EXPORT;
+ neighbor 198.129.77.53 {
+ remove-private;
+ peer-as 293;
+ }
+ }
+ group I2-RE-VIA-GPN-V6 {
+ type external;
+ description I2-RE-VIA-GPN-V6;
+ import I2-RE-VIA-GPN-V6-GPN-IMPORT;
+ family inet6 {
+ any {
+ prefix-limit {
+ maximum 10000;
+ }
+ }
+ }
+ export IPV6-EXPORT-FROM-OSPFV3-TO-BGPV6;
+ peer-as 11537;
+ neighbor 2001:468:1ff:18::1;
+ }
+ group EBGP-COGENT-AS174-V6 {
+ type external;
+ description EBGP-COGENT-AS174-V6;
+ import EBGP-COGENT-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+ export EBGP-COGENT-V6-EXPORT;
+ neighbor 2001:550:2:2e::d {
+ remove-private;
+ peer-as 174;
+ }
+ }
+ group NTR-via-I2-via-GPN-V6 {
+ type external;
+ description NTR-via-I2-via-GPN-V6;
+ import NTR-via-I2-via-GPN-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+# authentication-key <removed>;
+ export NTR-via-I2-via-GPN-V6-EXPORT;
+ neighbor 2001:468:f000:2118::1 {
+ remove-private;
+ peer-as 11164;
+ }
+ }
+ group GPN-Direct {
+ type external;
+ description GPN-Direct-Peer;
+ import [ GPN-Direct-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+# authentication-key <removed>;
+ export GPN-Direct-EXPORT;
+ neighbor 164.113.255.29 {
+ remove-private;
+ peer-as 11317;
+ }
+ }
+ group EBGP-WISCNET-V4 {
+ import [ EBGP-REJECT-IMPORT EBGP-WISCNET-V4-IMPORT ];
+# authentication-key <removed>;
+ export EBGP-WISCNET-V4-EXPORT;
+ neighbor 216.56.50.37 {
+ remove-private;
+ peer-as 2381;
+ }
+ }
+ group LEARN-via-Areon-via-NLR {
+ type external;
+ description LEARN-via-Areon-via-NLR;
+ import EBGP-LEARN-IMPORT;
+ family inet {
+ any;
+ }
+# authentication-key <removed>;
+ export EBGP-LEARN-EXPORT;
+ neighbor 74.200.189.41 {
+ remove-private;
+ peer-as 13359;
+ }
+ }
+ group LEARN-via-Areon-via-NLR-V6 {
+ type external;
+ description LEARN-via-Areon-via-NLR-V6;
+ import EBGP-LEARN-IMPORT;
+ family inet6 {
+ any;
+ }
+# authentication-key <removed>;
+ export COMMODITY-PREFIXES-LIST-V6;
+ neighbor 2607:f928:4:7::1 {
+ remove-private;
+ peer-as 13359;
+ }
+ }
+ group CUSTOMER-EBGP {
+ neighbor 164.58.16.26 {
+ description UNIVERSITY-of-OKLAHOMA-SHARED-SERVICES-eBGP;
+ import EBGP-OUSS-IMPORT;
+# authentication-key <removed>;
+ export REDISTRIBUTE-STATICS;
+ remove-private;
+ peer-as 16922;
+ }
+ }
+ }
+ ospf {
+ export OSPF-DEFAULT;
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0 {
+ link-protection;
+ }
+ interface fxp0.0 {
+ disable;
+ }
+ interface xe-0/0/1.148;
+ interface xe-1/0/0.132 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$hBVcevLxdVs4x74ZUjf51REhlMX7-bYovW7VwYoa" start-time "2011-6-26.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/1/1.148 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$q.Tz69puBE9CEylK7NjHkq5F/Ct01hz3CuO1hc" start-time "2011-6-26.23:50:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/1/1.993 {
+ passive;
+ }
+ interface ge-0/2/0.0 {
+ authentication {
+ md5 7 key "$9$jEimfz39CpB3nBEcy8LZUDj.5Fn/Au1fTnCtu1I" start-time "2011-6-15.23:05:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/2/2.0;
+ interface xe-0/1/0.70 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$8OGL-VYgJZDkg4kP5QCAKMW8Nb24aGjqVw4ZUjq."; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ae0.112 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/2/0.70 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$iHP5FnCAu1n61hSrLXGDjimT369t0I5Q6Ap0IR"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ export IPV6-EXPORT-FROM-BGPV6-TO-OSPFV3;
+ area 0.0.0.0 {
+ interface xe-1/0/0.132;
+ interface xe-0/1/1.148;
+ interface ae0.112;
+ interface lo0.0;
+ interface xe-0/1/0.70 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/2/0.70 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/1/0.70;
+ interface xe-0/1/1.148;
+ interface ge-0/2/0.0;
+ interface xe-1/0/0.132;
+ interface xe-1/2/0.70;
+ interface ae0.112;
+ interface lo0.0;
+ }
+ pim {
+ rp {
+ static {
+ address 164.113.238.210;
+ }
+ }
+ interface xe-0/1/1.148 {
+ mode sparse;
+ version 2;
+ }
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface xe-1/0/0;
+ interface xe-0/1/1;
+ interface xe-1/1/0;
+ interface xe-1/2/0;
+ interface ge-0/3/1;
+ interface xe-0/1/0;
+ }
+}
+policy-options {
+ prefix-list RE-PREFIXES {
+ 129.15.0.0/16;
+ 129.15.0.0/17;
+ 129.15.40.0/24;
+ 129.15.128.0/17;
+ 129.244.0.0/16;
+ 139.78.0.0/16;
+ 147.97.0.0/16;
+ 147.97.128.0/19;
+ 147.97.192.0/18;
+ 150.208.97.0/24;
+ 156.110.0.0/16;
+ 157.142.0.0/16;
+ 164.58.0.0/16;
+ 192.31.83.0/24;
+ 192.35.96.0/23;
+ 192.35.98.0/24;
+ 192.78.4.0/24;
+ 192.135.141.0/24;
+ 192.146.206.0/24;
+ 192.173.32.0/20;
+ 192.173.48.0/22;
+ 192.198.4.0/22;
+ 192.203.164.0/24;
+ 192.206.65.0/24;
+ 192.231.56.0/24;
+ 192.234.12.0/23;
+ 198.11.4.0/22;
+ 198.17.223.0/24;
+ 198.102.159.0/24;
+ 198.178.194.0/24;
+ 198.183.248.0/23;
+ 198.187.154.0/24;
+ 198.204.126.0/24;
+ 198.207.222.0/24;
+ 199.120.0.0/21;
+ 199.120.8.0/22;
+ 199.164.253.0/24;
+ 199.181.88.0/22;
+ 199.245.163.0/24;
+ 199.245.164.0/23;
+ 199.245.166.0/24;
+ 204.61.0.0/21;
+ 204.61.8.0/22;
+ 204.61.12.0/23;
+ 204.126.2.0/23;
+ 204.126.186.0/23;
+ 204.126.188.0/22;
+ 204.154.112.0/21;
+ 205.143.136.0/21;
+ 205.143.216.0/21;
+ }
+ prefix-list DEFAULT-ROUTE {
+ 0.0.0.0/0;
+ }
+ prefix-list DENY-ALL {
+ 0.0.0.0/0;
+ }
+ prefix-list EBGP-IPV4-NEIGHBORS {
+ 38.104.198.69/32;
+ 64.57.21.161/32;
+ 64.57.21.165/32;
+ 74.200.189.41/32;
+ 156.110.202.158/32;
+ 156.110.203.2/32;
+ 156.110.203.6/32;
+ 164.58.16.26/32;
+ 164.58.253.36/32;
+ 164.113.255.29/32;
+ 198.129.77.53/32;
+ 216.56.50.37/32;
+ }
+ prefix-list MARTIANS-IPV4 {
+ 0.0.0.0/8;
+ 10.0.0.0/8;
+ 127.0.0.0/8;
+ 169.254.0.0/16;
+ 172.16.0.0/12;
+ 192.0.0.0/24;
+ 192.0.2.0/24;
+ 192.168.0.0/16;
+ 198.18.0.0/15;
+ 198.51.100.0/24;
+ 203.0.113.0/24;
+ 224.0.0.0/4;
+ 240.0.0.0/4;
+ }
+ prefix-list ONENET-IP-V6-COMMODITY {
+ 2610:1d8::/32;
+ }
+ prefix-list EBGP-INGRESS-REJECTS {
+ 128.150.0.0/16;
+ }
+ prefix-list EBGP-IPV4-LEARN {
+ 66.64.64.0/19;
+ 66.218.144.0/21;
+ 66.218.156.0/22;
+ 67.207.0.0/23;
+ 67.207.2.0/23;
+ 67.207.4.0/23;
+ 67.207.6.0/23;
+ 67.207.8.0/24;
+ 67.207.9.0/24;
+ 67.207.10.0/24;
+ 67.207.11.0/24;
+ 67.207.12.0/23;
+ 67.207.14.0/23;
+ 67.207.16.0/20;
+ 68.232.0.0/19;
+ 68.232.208.0/20;
+ 69.62.0.0/17;
+ 69.65.192.0/18;
+ 69.94.160.0/19;
+ 69.147.0.0/18;
+ 72.53.176.0/20;
+ 74.200.128.0/18;
+ 74.200.189.0/24;
+ 74.200.189.28/30;
+ 74.200.189.32/30;
+ 74.200.189.254/32;
+ 96.46.160.0/20;
+ 98.159.48.0/20;
+ 128.42.0.0/16;
+ 128.62.0.0/16;
+ 128.83.0.0/16;
+ 128.83.114.10/32;
+ 128.194.0.0/16;
+ 129.7.0.0/16;
+ 129.62.0.0/16;
+ 129.62.0.0/19;
+ 129.62.32.0/19;
+ 129.62.64.0/19;
+ 129.62.96.0/19;
+ 129.62.128.0/19;
+ 129.62.160.0/19;
+ 129.62.192.0/19;
+ 129.62.224.0/19;
+ 129.106.0.0/16;
+ 129.106.160.0/20;
+ 129.107.0.0/16;
+ 129.108.0.0/16;
+ 129.109.0.0/16;
+ 129.110.0.0/16;
+ 129.111.0.0/16;
+ 129.112.0.0/16;
+ 129.113.0.0/16;
+ 129.114.0.0/17;
+ 129.114.128.0/17;
+ 129.115.0.0/16;
+ 129.115.160.0/19;
+ 129.116.0.0/16;
+ 129.118.0.0/16;
+ 129.119.0.0/16;
+ 129.120.0.0/16;
+ 138.237.0.0/16;
+ 139.52.0.0/16;
+ 140.158.0.0/16;
+ 144.96.0.0/16;
+ 146.6.0.0/16;
+ 147.26.0.0/16;
+ 147.26.25.0/24;
+ 147.26.151.0/24;
+ 147.26.166.0/23;
+ 147.26.170.0/23;
+ 147.26.192.0/23;
+ 147.26.198.0/23;
+ 147.26.202.0/23;
+ 147.26.204.0/24;
+ 147.26.205.0/24;
+ 147.26.207.0/24;
+ 147.26.208.0/23;
+ 147.26.210.0/23;
+ 147.26.212.0/24;
+ 147.26.218.0/24;
+ 147.26.219.0/24;
+ 147.26.220.0/22;
+ 147.26.224.0/24;
+ 147.26.225.0/24;
+ 147.26.226.0/23;
+ 147.26.228.0/23;
+ 147.26.232.0/24;
+ 147.26.233.0/24;
+ 147.26.234.0/23;
+ 147.26.236.0/23;
+ 147.26.239.0/24;
+ 147.26.255.0/24;
+ 165.91.0.0/16;
+ 168.4.0.0/16;
+ 168.5.0.0/16;
+ 168.6.0.0/16;
+ 168.7.0.0/16;
+ 192.58.112.0/22;
+ 192.70.161.0/24;
+ 192.124.35.0/24;
+ 192.124.230.0/24;
+ 192.136.144.0/22;
+ 192.136.148.0/23;
+ 192.138.193.0/24;
+ 192.138.194.0/24;
+ 192.150.93.0/24;
+ 198.22.91.0/24;
+ 198.32.236.0/24;
+ 198.49.125.0/24;
+ 199.66.232.0/22;
+ 199.83.216.0/24;
+ 199.83.217.0/24;
+ 199.83.218.0/24;
+ 199.115.208.0/23;
+ 199.115.210.0/24;
+ 199.115.211.0/24;
+ 199.165.152.0/24;
+ 199.165.153.0/24;
+ 199.165.154.0/24;
+ 199.242.234.0/23;
+ 199.242.236.0/22;
+ 204.153.35.0/24;
+ 206.40.176.0/20;
+ 206.76.12.0/23;
+ 206.76.13.0/24;
+ 206.77.0.0/19;
+ 206.77.64.0/19;
+ 208.76.224.0/22;
+ 208.84.136.0/22;
+ 208.117.128.0/18;
+ 216.38.80.0/24;
+ 216.38.81.0/24;
+ 216.38.91.0/24;
+ 216.38.92.0/24;
+ 216.38.93.0/24;
+ }
+ prefix-list EBGP-IPV6-LEARN {
+ 2607:f918::/32;
+ 2607:f928::/32;
+ 2607:f928:4::/48;
+ 2607:f928:4:4::/64;
+ 2607:f928:4:5::/64;
+ 2620:0:270::/48;
+ 2620:a9:8000::/48;
+ }
+ prefix-list TELEMATE-CUSTOMERS {
+ 156.110.46.96/30;
+ 156.110.47.32/29;
+ 156.110.54.16/30;
+ 156.110.59.48/29;
+ 156.110.62.180/30;
+ 164.58.23.64/26;
+ 164.58.176.44/30;
+ 164.58.243.208/28;
+ }
+ policy-statement COMMODITY-PREFIXES-LIST {
+ term prefixes {
+ from {
+ route-filter 66.186.144.0/20 exact;
+ route-filter 129.15.0.0/16 exact;
+ route-filter 129.244.0.0/16 exact;
+ route-filter 139.78.0.0/16 exact;
+ route-filter 156.110.0.0/16 exact;
+ route-filter 157.142.0.0/16 exact;
+ route-filter 162.58.0.0/16 exact;
+ route-filter 164.58.0.0/16 exact;
+ route-filter 174.77.146.0/24 exact;
+ route-filter 192.31.83.0/24 exact;
+ route-filter 192.35.96.0/24 exact;
+ route-filter 192.35.98.0/24 exact;
+ route-filter 192.78.4.0/24 exact;
+ route-filter 192.135.141.0/24 exact;
+ route-filter 192.146.206.0/24 exact;
+ route-filter 192.149.244.0/24 exact;
+ route-filter 192.150.147.0/24 exact;
+ route-filter 192.153.53.0/24 exact;
+ route-filter 192.198.4.0/22 exact;
+ route-filter 192.203.164.0/24 exact;
+ route-filter 192.206.65.0/24 exact;
+ route-filter 192.231.3.0/24 exact;
+ route-filter 192.231.56.0/24 exact;
+ route-filter 192.234.12.0/24 exact;
+ route-filter 192.234.13.0/24 exact;
+ route-filter 198.11.4.0/24 exact;
+ route-filter 198.11.5.0/24 exact;
+ route-filter 198.11.6.0/24 exact;
+ route-filter 198.11.7.0/24 exact;
+ route-filter 198.17.223.0/24 exact;
+ route-filter 198.102.159.0/24 exact;
+ route-filter 198.178.194.0/24 exact;
+ route-filter 198.183.248.0/23 exact;
+ route-filter 198.187.154.0/24 exact;
+ route-filter 198.203.153.0/24 exact;
+ route-filter 198.204.126.0/24 exact;
+ route-filter 198.207.222.0/24 exact;
+ route-filter 199.27.8.0/21 exact;
+ route-filter 199.120.0.0/21 exact;
+ route-filter 199.120.8.0/22 exact;
+ route-filter 199.164.253.0/24 exact;
+ route-filter 199.181.88.0/24 exact;
+ route-filter 199.181.89.0/24 exact;
+ route-filter 199.184.200.0/22 exact;
+ route-filter 199.190.128.0/23 exact;
+ route-filter 199.223.171.0/24 exact;
+ route-filter 199.245.163.0/24 exact;
+ route-filter 199.245.164.0/24 exact;
+ route-filter 199.245.165.0/24 exact;
+ route-filter 199.245.166.0/24 exact;
+ route-filter 199.248.134.0/23 exact;
+ route-filter 204.29.164.0/24 exact;
+ route-filter 204.61.0.0/21 exact;
+ route-filter 204.61.8.0/22 exact;
+ route-filter 204.61.12.0/23 exact;
+ route-filter 204.62.16.0/21 exact;
+ route-filter 204.62.24.0/22 exact;
+ route-filter 204.63.217.0/24 exact;
+ route-filter 204.63.218.0/24 exact;
+ route-filter 204.87.64.0/18 exact;
+ route-filter 204.87.241.0/24 exact;
+ route-filter 204.107.242.0/24 exact;
+ route-filter 204.126.138.0/23 exact;
+ route-filter 204.126.144.0/23 exact;
+ route-filter 204.126.162.0/23 exact;
+ route-filter 204.126.186.0/23 exact;
+ route-filter 204.126.188.0/24 exact;
+ route-filter 204.126.189.0/24 exact;
+ route-filter 204.126.190.0/24 exact;
+ route-filter 204.126.191.0/24 exact;
+ route-filter 204.154.112.0/21 exact;
+ route-filter 205.143.136.0/21 exact;
+ route-filter 205.143.216.0/21 exact;
+ route-filter 205.153.220.0/22 exact;
+ route-filter 205.235.88.0/23 exact;
+ route-filter 206.61.156.0/24 exact;
+ route-filter 206.202.192.0/18 exact;
+ route-filter 206.202.208.0/24 exact;
+ route-filter 206.203.81.0/24 exact;
+ route-filter 208.8.54.0/24 exact;
+ route-filter 192.173.49.0/24 exact;
+ route-filter 192.173.32.0/19 orlonger;
+ route-filter 192.35.97.0/24 exact;
+ route-filter 204.63.222.0/24 exact;
+ route-filter 129.15.0.0/17 exact;
+ route-filter 129.15.128.0/17 exact;
+ route-filter 64.112.240.0/20 exact;
+ route-filter 152.123.8.0/21 exact;
+ route-filter 147.97.160.0/19 exact;
+ route-filter 204.137.224.0/20 exact;
+ route-filter 199.253.0.0/21 exact;
+ route-filter 199.253.9.0/24 exact;
+ route-filter 199.253.8.0/24 exact;
+ route-filter 147.97.96.0/19 exact;
+ route-filter 147.97.0.0/16 exact;
+ route-filter 204.108.2.0/24 exact;
+ route-filter 204.108.3.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement COMMODITY-PREFIXES-LIST-V6 {
+ term prefixes {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:0a00::/40 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term STEP-2 {
+ from community 5078:19401;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-IMPORT {
+ term ASU-PREPEND {
+ from {
+ route-filter 147.97.0.0/16 upto /24;
+ }
+ then {
+ community set 5078:40581;
+ as-path-prepend "5078 5078 5078 5078 5078 5078";
+ accept;
+ }
+ }
+ term STEP-1 {
+ then {
+ community set 5078:40581;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-V6-EXPORT {
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:40581;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:174;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:174;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-I2-CPS-PEER-GPN-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ inactive: policy-statement EBGP-I2-R-E-PEER-GPN-EXPORT {
+ term STEP-1 {
+ inactive: from policy RE-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-INGRESS-REJECTS {
+ term STEP-1 {
+ from {
+ prefix-list EBGP-INGRESS-REJECTS;
+ }
+ then reject;
+ }
+ }
+ policy-statement EBGP-LEARN-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-LEARN-IMPORT {
+ term STEP-1 {
+ from {
+ prefix-list EBGP-IPV4-LEARN;
+ }
+ then {
+ community set 5078:13359;
+ accept;
+ }
+ }
+ term STEP-2 {
+ from {
+ prefix-list EBGP-IPV6-LEARN;
+ }
+ then {
+ community set 5078:13359;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-OUSS-IMPORT {
+ term prefixes {
+ from {
+ route-filter 156.110.144.0/20 exact;
+ route-filter 156.110.240.0/20 exact;
+ route-filter 157.142.0.0/16 orlonger;
+ }
+ then {
+ community set 5078:16922;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-EXPORT {
+ term STEP-1 {
+ from {
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-IMPORT {
+ term STEP-1 {
+ from {
+ route-filter 0.0.0.0/0 through 0.0.0.0/32;
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement EBGP-WISCNET-V4-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-WISCNET-V4-IMPORT {
+ term 1 {
+ then {
+ community set 5078:2381;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement ESNET-VIA-GPN-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement ESNET-VIA-GPN-IMPORT {
+ term STEP-1 {
+ then {
+ local-preference 102;
+ community set 5078:293;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement GPN-Direct-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement GPN-Direct-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11317;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement I2-CPS-VIA-GPN-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement I2-CPS-VIA-GPN-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11537;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement I2-RE-VIA-GPN-EXPORT {
+ term STEP-1 {
+ from policy RE-PREFIXES-LIST;
+ then {
+ community add I2-LOWER-LP-140;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement I2-RE-VIA-GPN-IMPORT {
+ term STEP-1 {
+ then {
+ local-preference 101;
+ community set 5078:11537;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement I2-RE-VIA-GPN-V6-GPN-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11537;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement IPV6-EXPORT-FROM-BGPV6-TO-OSPFV3 {
+ term STEP-1 {
+ from {
+ family inet6;
+ protocol bgp;
+ neighbor [ 2001:468:1FF:18::1 2001:468:aff:ffff:16::2 2001:550:2:2e::d 2001:468:f000:2118::1 2001:468:f000:2318::1 ];
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement IPV6-EXPORT-FROM-OSPFV3-TO-BGPV6 {
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement NEXT-HOP-SELF {
+ term 1 {
+ from protocol bgp;
+ then {
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ policy-statement NTR-via-I2-via-GPN-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ community add Netflix-Prepend;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement NTR-via-I2-via-GPN-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11164;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement NTR-via-I2-via-GPN-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement NTR-via-I2-via-GPN-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:40581;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement OSPF-DEFAULT {
+ term GET-ROUTE {
+ from {
+ protocol static;
+ route-filter 0.0.0.0/0 exact;
+ }
+ then {
+ metric 30;
+ accept;
+ }
+ }
+ term REJECT-ALL {
+ then reject;
+ }
+ }
+ policy-statement RE-PREFIXES-LIST {
+ term prefixes {
+ from {
+ route-filter 129.15.0.0/16 exact;
+ route-filter 129.15.0.0/17 exact;
+ route-filter 129.15.40.0/24 exact;
+ route-filter 129.15.128.0/17 exact;
+ route-filter 129.244.0.0/16 exact;
+ route-filter 139.78.0.0/16 exact;
+ route-filter 150.208.97.0/24 exact;
+ route-filter 156.110.0.0/16 exact;
+ route-filter 157.142.0.0/16 exact;
+ route-filter 164.58.0.0/16 exact;
+ route-filter 192.31.83.0/24 exact;
+ route-filter 192.35.96.0/23 exact;
+ route-filter 192.35.98.0/24 exact;
+ route-filter 192.78.4.0/24 exact;
+ route-filter 192.135.141.0/24 exact;
+ route-filter 192.146.206.0/24 exact;
+ route-filter 192.173.32.0/20 exact;
+ route-filter 192.173.48.0/22 exact;
+ route-filter 192.198.4.0/22 exact;
+ route-filter 192.203.164.0/24 exact;
+ route-filter 192.206.65.0/24 exact;
+ route-filter 192.231.56.0/24 exact;
+ route-filter 192.234.12.0/23 exact;
+ route-filter 198.11.4.0/22 exact;
+ route-filter 198.17.223.0/24 exact;
+ route-filter 198.102.159.0/24 exact;
+ route-filter 198.178.194.0/24 exact;
+ route-filter 198.183.248.0/23 exact;
+ route-filter 198.187.154.0/24 exact;
+ route-filter 198.204.126.0/24 exact;
+ route-filter 198.207.222.0/24 exact;
+ route-filter 199.120.0.0/21 exact;
+ route-filter 199.120.8.0/22 exact;
+ route-filter 199.164.253.0/24 exact;
+ route-filter 199.181.88.0/22 exact;
+ route-filter 199.245.163.0/24 exact;
+ route-filter 199.245.164.0/23 exact;
+ route-filter 199.245.166.0/24 exact;
+ route-filter 204.61.0.0/21 exact;
+ route-filter 204.61.8.0/22 exact;
+ route-filter 204.61.12.0/23 exact;
+ route-filter 204.126.2.0/23 exact;
+ route-filter 204.126.186.0/23 exact;
+ route-filter 204.126.188.0/22 exact;
+ route-filter 204.154.112.0/21 exact;
+ route-filter 205.143.136.0/21 exact;
+ route-filter 205.143.216.0/21 exact;
+ route-filter 147.97.160.0/19 exact;
+ route-filter 147.97.224.0/20 exact;
+ route-filter 204.137.224.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add TULSACORE4;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add TULSACORE4;
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ policy-statement TRCPS-DAL-via-I2-via-GPN-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ community add Netflix-Prepend;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement TRCPS-DAL-via-I2-via-GPN-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11164;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement TRCPS-DAL-via-I2-via-GPN-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement TRCPS-DAL-via-I2-via-GPN-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11164;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ community 5078:11164 members 5078:11164;
+ community 5078:11317 members 5078:11317;
+ community 5078:11537 members 5078:11537;
+ community 5078:13359 members 5078:13359;
+ community 5078:16922 members 5078:16922;
+ community 5078:174 members 5078:174;
+ community 5078:19401 members 5078:19401;
+ community 5078:2381 members 5078:2381;
+ community 5078:293 members 5078:293;
+ community 5078:40581 members 5078:40581;
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community I2-LOWER-LP-140 members 11537:140;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community NORMANCORE1 members 5078:230;
+ community NORMANCORE2 members 5078:231;
+ community Netflix-Prepend members 65001:2906;
+ community OKCCCCORE1 members 5078:233;
+ community OKCCORE1 members 5078:211;
+ community OKCCORE2 members 5078:212;
+ community OKCCORE3 members 5078:213;
+ community OKCCORE4 members 5078:214;
+ community OKCCORE5 members 5078:215;
+ community OKCCORE6 members 5078:216;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community PTCCORE1 members 5078:234;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community STILLWATERCORE1 members 5078:232;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community TULSACORE1 members 5078:221;
+ community TULSACORE2 members 5078:222;
+ community TULSACORE3 members 5078:223;
+ community TULSACORE4 members 5078:224;
+ community TULSACORE5 members 5078:225;
+ community TULSACORE6 members 5078:226;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+ community no-advertise members 5078:no-advertise;
+ as-path 40581 40581;
+ as-path 11537 11537;
+ as-path 293 293;
+ as-path 174 174;
+ as-path 11317 11317;
+ as-path 11164 11164;
+ as-path 19401 19401;
+ as-path 21357 21357;
+ as-path 209 209;
+ as-path 2381 2381;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ filter TELEMATE {
+ term TELEMATE {
+ from {
+ source-prefix-list {
+ TELEMATE-CUSTOMERS;
+ }
+ port [ http ftp nntp https ];
+ }
+ then {
+ port-mirror;
+ accept;
+ }
+ }
+ term ACCEPT-ALL {
+ then accept;
+ }
+ }
+ }
+}
+routing-instances {
+ VPLS-ONENET-DC {
+ description ONENET-SANS-VPLS-OKC-TULSA-LAWTON;
+ instance-type vpls;
+ vlan-id all;
+ interface ae1.2000;
+ route-distinguisher 164.58.199.224:2000;
+ vrf-target target:5078:2000;
+ protocols {
+ vpls {
+ mac-table-size {
+ 3000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site TULSA-DC {
+ site-identifier 2;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template IP-V4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+bridge-domains {
+ VLAN_2970_UOM {
+ description "University of Missouri WiscNet";
+ domain-type bridge;
+ vlan-id 2970;
+ interface xe-0/0/1.2970;
+ interface xe-1/0/1.2970;
+ }
+ inactive: VLAN_990_AREON {
+ description VLAN_AREON_BACKUP_LEGACY;
+ domain-type bridge;
+ vlan-id 990;
+ }
+ VLAN_991 {
+ description VLAN_991_AREON_I2_RE_PEER;
+ domain-type bridge;
+ vlan-id 991;
+ interface xe-1/1/1.991;
+ interface xe-1/0/1.991;
+ inactive: routing-interface irb.991;
+ }
+ VLAN_992 {
+ description VLAN_992_AREON_I2_CPS_PEER;
+ domain-type bridge;
+ vlan-id 992;
+ interface xe-1/1/1.992;
+ interface xe-1/0/1.992;
+ }
+ inactive: VLAN_993_AREON {
+ description VLAN_AREON_COMMODITY_PEER;
+ domain-type bridge;
+ vlan-id 993;
+ }
+ VLAN_994_AREON {
+ description VLAN_AREON;
+ domain-type bridge;
+ vlan-id 994;
+ interface xe-1/1/1.994;
+ interface xe-1/0/1.994;
+ inactive: routing-interface irb.994;
+ }
+ inactive: VLAN_995_AREON {
+ description VLAN_AREON_BACKUP_LEGACY;
+ domain-type bridge;
+ vlan-id 995;
+ }
+ inactive: VLAN_996_AREON {
+ description VLAN_AREON_IPV6_PEER;
+ domain-type bridge;
+ vlan-id 996;
+ }
+ inactive: VLAN_997_AREON {
+ description VLAN_AREON_COGENT_IPv4;
+ domain-type bridge;
+ vlan-id 997;
+ }
+ inactive: VLAN_998_AREON {
+ description VLAN_AREON_COGENT_IPv6;
+ domain-type bridge;
+ vlan-id 998;
+ }
+}
+{master}
+# grnoc-mon at TULSA-CORE4-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.233 ae0.112 Full 164.58.199.221
+# 164.58.245.206 xe-0/1/0.70 Full 164.58.199.95
+# 164.58.15.150 xe-0/1/1.148 Full 164.58.199.225
+# 164.58.15.133 xe-1/0/0.132 Full 164.58.199.222
+# 164.58.246.250 xe-1/2/0.70 Full 164.58.199.193
+#
+# {master}
Index: core1.okccc.onenet.net
===================================================================
--- core1.okccc.onenet.net (revision 76435)
+++ core1.okccc.onenet.net (working copy)
@@ -0,0 +1,1829 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at OKCCC-MX960-RE0> show system commit
+# 2013-08-19 13:33:44 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 09:03:18 CDT by josh via cli commit synchronize
+# 2013-08-19 08:59:31 CDT by rnordmark via cli commit synchronize
+# 2013-08-19 08:41:02 CDT by josh via cli commit synchronize
+# 2013-08-16 14:55:44 CDT by rnordmark via cli commit synchronize
+# 2013-08-16 14:55:41 CDT by rnordmark via cli commit synchronize
+# grnoc-mon at OKCCC-MX960-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 SF A OK
+# CB 0 SF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 SF A OK
+# CB 1 SF B OK
+# CB 2 Intake OK
+# CB 2 Exhaust A OK
+# CB 2 Exhaust B OK
+# CB 2 ACBC OK
+# CB 2 SF A OK
+# CB 2 SF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# FPC 1 Intake OK
+# FPC 1 Exhaust A OK
+# FPC 1 Exhaust B OK
+# FPC 1 QX 0 TSen OK
+# FPC 1 QX 0 Chip OK
+# FPC 1 LU 0 TCAM TSen OK
+# FPC 1 LU 0 TCAM Chip OK
+# FPC 1 LU 0 TSen OK
+# FPC 1 LU 0 Chip OK
+# FPC 1 MQ 0 TSen OK
+# FPC 1 MQ 0 Chip OK
+# FPC 1 QX 1 TSen OK
+# FPC 1 QX 1 Chip OK
+# FPC 1 LU 1 TCAM TSen OK
+# FPC 1 LU 1 TCAM Chip OK
+# FPC 1 LU 1 TSen OK
+# FPC 1 LU 1 Chip OK
+# FPC 1 MQ 1 TSen OK
+# FPC 1 MQ 1 Chip OK
+# FPC 2 Intake OK
+# FPC 2 Exhaust A OK
+# FPC 2 Exhaust B OK
+# FPC 2 QX 0 TSen OK
+# FPC 2 QX 0 Chip OK
+# FPC 2 LU 0 TCAM TSen OK
+# FPC 2 LU 0 TCAM Chip OK
+# FPC 2 LU 0 TSen OK
+# FPC 2 LU 0 Chip OK
+# FPC 2 MQ 0 TSen OK
+# FPC 2 MQ 0 Chip OK
+# FPC 2 QX 1 TSen OK
+# FPC 2 QX 1 Chip OK
+# FPC 2 LU 1 TCAM TSen OK
+# FPC 2 LU 1 TCAM Chip OK
+# FPC 2 LU 1 TSen OK
+# FPC 2 LU 1 Chip OK
+# FPC 2 MQ 1 TSen OK
+# FPC 2 MQ 1 Chip OK
+# Fans Top Fan Tray Temp OK
+# Top Tray Fan 1 OK
+# Top Tray Fan 2 OK
+# Top Tray Fan 3 OK
+# Top Tray Fan 4 OK
+# Top Tray Fan 5 OK
+# Top Tray Fan 6 OK
+# Top Tray Fan 7 OK
+# Top Tray Fan 8 OK
+# Top Tray Fan 9 OK
+# Top Tray Fan 10 OK
+# Top Tray Fan 11 OK
+# Top Tray Fan 12 OK
+# Bottom Fan Tray Temp OK
+# Bottom Tray Fan 1 OK
+# Bottom Tray Fan 2 OK
+# Bottom Tray Fan 3 OK
+# Bottom Tray Fan 4 OK
+# Bottom Tray Fan 5 OK
+# Bottom Tray Fan 6 OK
+# Bottom Tray Fan 7 OK
+# Bottom Tray Fan 8 OK
+# Bottom Tray Fan 9 OK
+# Bottom Tray Fan 10 OK
+# Bottom Tray Fan 11 OK
+# Bottom Tray Fan 12 OK
+#
+# {master}
+# grnoc-mon at OKCCC-MX960-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 2 ROM Juniper ROM Monitor Version 10.1b3
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at OKCCC-MX960-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 1 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 2 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at OKCCC-MX960-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11A71DDAFA MX960
+# Midplane REV 03 710-013698 ABAC2081 MX960 Backplane
+# FPM Board REV 03 710-014974 ABBG3032 Front Panel Display
+# PDM Rev 03 740-013110 QCS143650ET Power Distribution Module
+# PEM 0 Rev 05 740-029344 QCS1448V0AV DC 4.1kW Power Entry Module
+# PEM 1 Rev 05 740-029344 QCS1448V0AB DC 4.1kW Power Entry Module
+# PEM 2 Rev 05 740-029344 QCS1447V02T DC 4.1kW Power Entry Module
+# PEM 3 Rev 05 740-029344 QCS1447V02K DC 4.1kW Power Entry Module
+# Routing Engine 0 REV 15 740-013063 9009066433 RE-S-2000
+# Routing Engine 1 REV 15 740-013063 9009066416 RE-S-2000
+# CB 0 REV 09 710-021523 ABBG5110 MX SCB
+# CB 1 REV 09 710-021523 ABBG6366 MX SCB
+# CB 2 REV 09 710-021523 ABBG5216 MX SCB
+# FPC 0 REV 15 750-031088 YY9961 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YY6398 MPC PMB 2G
+# MIC 0 REV 26 750-028387 YW1944 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-031585 FA4795910088 XFP-10G-T-DWDM-ZR
+# Xcvr 1 REV 03 740-014289 CB21BQ02B XFP-10G-SR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-031585 FA193859011F XFP-10G-T-DWDM-ZR
+# Xcvr 1 REV 01 740-031833 UL50GRH XFP-10G-LR
+# MIC 1 REV 24 750-028392 YR7977 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A475775 SFP-T
+# Xcvr 1 REV 01 740-011612 9YT702504190 SFP-LH
+# Xcvr 2 REV 01 740-031851 AM1041SU181 SFP-SX
+# Xcvr 9 REV 02 740-013111 A476771 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-011613 PJH4QFD SFP-SX
+# Xcvr 1 REV 01 740-031851 AM1041SU15G SFP-SX
+# Xcvr 9 REV 01 740-031851 AM1141SVRZF SFP-SX
+# QXM 0 REV 05 711-028408 YY8556 MPC QXM
+# QXM 1 REV 05 711-028408 YZ8531 MPC QXM
+# FPC 1 REV 15 750-031088 YZ0126 MPC Type 2 3D Q
+# CPU REV 06 711-030884 ZA0711 MPC PMB 2G
+# MIC 0 REV 25 750-028387 YT0169 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 T10L07307 XFP-10G-LR
+# Xcvr 1 REV 03 740-014289 CB51BQ07S XFP-10G-SR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL703D4 XFP-10G-LR
+# Xcvr 1 REV 01 740-031833 UL5158C XFP-10G-LR
+# MIC 1 REV 26 750-028387 YW8613 3D 4x 10GE XFP
+# PIC 2 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL515VP XFP-10G-LR
+# Xcvr 1 REV 01 740-031833 UL5035T XFP-10G-LR
+# PIC 3 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL50TU2 XFP-10G-LR
+# Xcvr 1 REV 01 740-031833 UL30FPN XFP-10G-LR
+# QXM 0 REV 05 711-028408 YY9749 MPC QXM
+# QXM 1 REV 05 711-028408 YZ8488 MPC QXM
+# FPC 2 REV 23 750-031088 ABBV6924 MPC Type 2 3D Q
+# CPU REV 08 711-030884 ABBV6697 MPC PMB 2G
+# MIC 0 REV 26 750-028387 ABBV1693 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL515PC XFP-10G-LR
+# Xcvr 1 REV 01 740-031833 UL515QB XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# MIC 1 REV 26 750-028387 ABBL9983 3D 4x 10GE XFP
+# PIC 2 BUILTIN BUILTIN 2x 10GE XFP
+# PIC 3 BUILTIN BUILTIN 2x 10GE XFP
+# QXM 0 REV 05 711-028408 ABBT8000 MPC QXM
+# QXM 1 REV 05 711-028408 ABBT8104 MPC QXM
+# Fan Tray 0 REV 07 740-031521 ACAC4306 Enhanced Fan Tray
+# Fan Tray 1 REV 07 740-031521 ACAC4313 Enhanced Fan Tray
+#
+# {master}
+# grnoc-mon at OKCCC-MX960-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 03 710-013698 ABAC2081 CHAS-BP-MX960-S
+# FPM Board REV 03 710-014974 ABBG3032 CRAFT-MX960-S
+# PEM 0 Rev 05 740-029344 QCS1448V0AV PWR-MX960-4100-DC-S
+# PEM 1 Rev 05 740-029344 QCS1448V0AB PWR-MX960-4100-DC-S
+# PEM 2 Rev 05 740-029344 QCS1447V02T PWR-MX960-4100-DC-S
+# PEM 3 Rev 05 740-029344 QCS1447V02K PWR-MX960-4100-DC-S
+# Routing Engine 0 REV 15 740-013063 9009066433 RE-S-2000-4096-S
+# Routing Engine 1 REV 15 740-013063 9009066416 RE-S-2000-4096-S
+# CB 0 REV 09 710-021523 ABBG5110 SCB-MX960-S
+# CB 1 REV 09 710-021523 ABBG6366 SCB-MX960-S
+# CB 2 REV 09 710-021523 ABBG5216 SCB-MX960-S
+# FPC 0 REV 15 750-031088 YY9961 MX-MPC2-3D-Q
+# MIC 0 REV 26 750-028387 YW1944 MIC-3D-4XGE-XFP
+# MIC 1 REV 24 750-028392 YR7977 MIC-3D-20GE-SFP
+# FPC 1 REV 15 750-031088 YZ0126 MX-MPC2-3D-Q
+# MIC 0 REV 25 750-028387 YT0169 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028387 YW8613 MIC-3D-4XGE-XFP
+# FPC 2 REV 23 750-031088 ABBV6924 MX-MPC2-3D-Q
+# MIC 0 REV 26 750-028387 ABBV1693 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028387 ABBL9983 MIC-3D-4XGE-XFP
+# Fan Tray 0 REV 07 740-031521 ACAC4306 FFANTRAY-MX960-HC-S
+# Fan Tray 1 REV 07 740-031521 ACAC4313 FFANTRAY-MX960-HC-S
+#
+# {master}
+# grnoc-mon at OKCCC-MX960-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9009066433
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9009066416
+#
+# grnoc-mon at OKCCC-MX960-RE0> show chassis scb
+# grnoc-mon at OKCCC-MX960-RE0> show chassis sfm detail
+# grnoc-mon at OKCCC-MX960-RE0> show chassis ssb
+# grnoc-mon at OKCCC-MX960-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 21 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:ef:5f
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+# WARNING: / was not properly dismounted
+#
+# {master}
+# grnoc-mon at OKCCC-MX960-RE0> show version
+# Hostname: OKCCC-MX960-RE0 # Model: mx960 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Services !
[11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at OKCCC-MX960-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 5960308
+# -rw-r--r-- 1 root field 30 Dec 24 2010 ex.txt
+# drwxr-xr-x 2 root field 512 Dec 24 2010 gres-tp/
+# -rw-r--r-- 1 root field 4 Jun 1 14:51 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Dec 24 2010 install/
+# -rw-r--r-- 1 root field 348823558 Mar 9 2011 jbundle-10.4R2.6-domestic.tgz
+# -rw-r--r-- 1 root field 349730789 Mar 27 2011 jbundle-10.4R3.4-domestic.tgz
+# -rw-r--r-- 1 root field 350497882 Dec 1 2011 jbundle-10.4R6.5-domestic.tgz
+# -rw-r--r-- 1 root field 355159151 Mar 9 2011 jinstall-10.4R2.6-domestic-signed.tgz
+# -rw-r--r-- 1 admin field 356069136 Mar 27 2011 jinstall-10.4R3.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 356846496 Dec 1 2011 jinstall-10.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Apr 19 14:40 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 0 Mar 9 2011 jperf
+# -rw-r--r-- 1 root field 0 Mar 9 2011 jperf_shmem_sem
+# -rw-r--r-- 1 root field 7829561 Mar 9 2011 jweb-10.4R2.6-signed.tgz
+# -rw-r--r-- 1 admin field 7830840 Mar 27 2011 jweb-10.4R3.4-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 9 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 root field 155 Jun 1 14:51 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Apr 21 00:00 pics/
+# -r--r--r-- 1 root field 499 Apr 20 23:54 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 Dec 1 2011 rdm.taf
+# -rw------- 1 root field 3733078 Apr 5 2011 rpd.core-tarball.0.tgz
+# -rw------- 1 root field 3705229 Apr 5 2011 rpd.core-tarball.1.tgz
+# -rw------- 1 root field 3707501 Apr 5 2011 rpd.core-tarball.2.tgz
+# -rw------- 1 root field 119934763 Sep 6 2011 rpd.core-tarball.3.tgz
+# drwxr-xr-x 2 root field 512 Apr 21 00:02 rtsdb/
+# drwxr-xr-x 3 root field 512 Dec 24 2010 sec-download/
+# -rw-r--r-- 1 root field 0 Mar 9 2011 tracelogs
+# -rw-r--r-- 1 root field 0 Mar 9 2011 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Mar 9 2011 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 May 13 2011 vi.recover/
+#
+# {master}
+# grnoc-mon at OKCCC-MX960-RE0> show system uptime
+# System booted: 2013-06-01 14:49 CDT
+# Protocols started: 2013-06-01 14:51 CDT
+# Last configured: 2013-08-19 13:33 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at OKCCC-MX960-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.212 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up up
+#xe-0/0/1.228 up up
+#xe-0/0/1.32767 up up
+#xe-0/1/0 up up
+#xe-0/1/0.216 up up
+#xe-0/1/0.32767 up up
+#xe-0/1/1 up up
+#xe-0/1/1.40 up up
+#xe-0/1/1.32767 up up
+#ge-0/2/0 up down
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.0 up up
+#ge-0/2/2 up up
+#ge-0/2/2.0 up up
+#ge-0/2/3 down down
+#ge-0/2/4 down down
+#ge-0/2/5 down down
+#ge-0/2/6 down down
+#ge-0/2/7 down down
+#ge-0/2/8 down down
+#ge-0/2/9 down down
+#ge-0/3/0 up up
+#ge-0/3/0.0 up up
+#ge-0/3/1 up up
+#ge-0/3/1.0 up up
+#ge-0/3/2 down down
+#ge-0/3/3 down down
+#ge-0/3/4 down down
+#ge-0/3/5 down down
+#ge-0/3/6 down down
+#ge-0/3/7 up down
+#ge-0/3/7.2011 up down
+#ge-0/3/7.32767 up down
+#ge-0/3/8 down down
+#ge-0/3/9 up up
+#ge-0/3/9.2515 up up
+#ge-0/3/9.32767 up up
+#lc-1/0/0 up up
+#lc-1/0/0.32769 up up
+#pfe-1/0/0 up up
+#pfe-1/0/0.16383 up up
+#pfh-1/0/0 up up
+#pfh-1/0/0.16383 up up
+#xe-1/0/0 up up
+#xe-1/0/0.232 up up
+#xe-1/0/0.32767 up up
+#xe-1/0/1 up up
+#xe-1/0/1.0 up up
+#xe-1/1/0 up up
+#xe-1/1/0.69 up up
+#xe-1/1/0.32767 up up
+#xe-1/1/1 up up
+#xe-1/1/1.69 up up
+#xe-1/1/1.32767 up up
+#lc-1/2/0 up up
+#lc-1/2/0.32769 up up
+#pfe-1/2/0 up up
+#pfe-1/2/0.16383 up up
+#xe-1/2/0 up up
+#xe-1/2/0.69 up up
+#xe-1/2/0.32767 up up
+#xe-1/2/1 up up
+#xe-1/2/1.69 up up
+#xe-1/2/1.32767 up up
+#xe-1/3/0 up up
+#xe-1/3/0.69 up up
+#xe-1/3/0.32767 up up
+#xe-1/3/1 up up
+#xe-1/3/1.69 up up
+#xe-1/3/1.32767 up up
+#lc-2/0/0 up up
+#lc-2/0/0.32769 up up
+#pfe-2/0/0 up up
+#pfe-2/0/0.16383 up up
+#pfh-2/0/0 up up
+#pfh-2/0/0.16383 up up
+#xe-2/0/0 up up
+#xe-2/0/0.69 up up
+#xe-2/0/0.32767 up up
+#xe-2/0/1 up up
+#xe-2/0/1.70 up up
+#xe-2/0/1.32767 up up
+#xe-2/1/0 up down
+#xe-2/1/1 up down
+#lc-2/2/0 up up
+#lc-2/2/0.32769 up up
+#pfe-2/2/0 up up
+#pfe-2/2/0.16383 up up
+#xe-2/2/0 up down
+#xe-2/2/1 up down
+#xe-2/3/0 up down
+#xe-2/3/1 up down
+#ae0 up up
+#ae0.0 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 up down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at OKCCC-MX960-RE0> show configuration
+## Last commit: 2013-08-19 13:33:44 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name OKCCC-MX960-RE0;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name OKCCC-MX960-RE1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ backup-router 172.25.46.1;
+ time-zone America/Chicago;
+ authentication-order [ password radius ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.233;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1044;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ aggregated-devices {
+ ethernet {
+ device-count 1;
+ }
+ }
+ fpc 0 {
+ inactive: sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ inactive: sampling-instance JFLOW-1;
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+ inactive: network-services all-ethernet;
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.nor xe-1/0/0 | OneNet-OKCCC-NOR-XE-4462";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ optics-options {
+ wavelength 1540.56;
+ }
+ unit 212 {
+ vlan-id 212;
+ family inet {
+ mtu 9000;
+ address 164.58.15.214/30;
+ }
+ family inet6 {
+ address 2610:1d8:3600::3/127;
+ }
+ family mpls;
+ }
+ }
+ xe-0/0/1 {
+ description "CORE 10GE to core.sti xe-1/2/0 | OneNet-OKCCC-STI-XE-4706";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ optics-options {
+ wavelength 1531.12;
+ }
+ unit 228 {
+ vlan-id 228;
+ family inet {
+ mtu 9000;
+ address 164.58.15.229/30;
+ }
+ family mpls;
+ }
+ }
+ xe-0/1/0 {
+ description "CORE 10GE to core1.nor xe-1/1/0 | OneNet-OKCCC-TUL-XE-4705";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ optics-options {
+ wavelength 1531.12;
+ }
+ unit 216 {
+ vlan-id 216;
+ family inet {
+ mtu 9000;
+ address 164.58.15.218/30;
+ }
+ family mpls;
+ }
+ }
+ xe-0/1/1 {
+ description "CORE 10GE to core.hut.elr xe-0/0/0 | OneNet-OKCCC-HUTELR-XE-xxxx";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 40 {
+ vlan-id 40;
+ family inet {
+ mtu 9000;
+ address 164.58.247.33/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/1 {
+ description WESTERN-HEIGHTS-SCHOOL-DISTRICT-CIR0005135;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.140.25/22;
+ }
+ }
+ }
+ ge-0/2/2 {
+ description "CORE GE to core.law ge-0/0/0 [AE0-1of2] | OneNet-OKCCC-LAW-GE-3828";
+ gigether-options {
+ no-auto-negotiation;
+ 802.3ad ae0;
+ }
+ }
+ ge-0/2/3 {
+ disable;
+ }
+ ge-0/2/4 {
+ description "Hub Appliance [NO-MONITOR]";
+ disable;
+ }
+ ge-0/2/5 {
+ description "Hub Appliance - Camera #2 [NO-MONITOR]";
+ disable;
+ }
+ ge-0/2/6 {
+ description "Hub Appliance - Camera #1 [NO-MONITOR]";
+ disable;
+ }
+ ge-0/2/7 {
+ description "Hub Appliance - UPS System [NO-MONITOR]";
+ disable;
+ }
+ ge-0/2/8 {
+ description "Hub Appliance - DC Power Plant [NO-MONITOR]";
+ disable;
+ }
+ ge-0/2/9 {
+ description "Hub Appliance - NetGuardian Alarm [NO-MONITOR]";
+ disable;
+ }
+ ge-0/3/0 {
+ description "CORE GE to core.law ge-0/2/0 [AE0-2of2] | OneNet-OKCCC-LAW-GE-3829";
+ gigether-options {
+ no-auto-negotiation;
+ 802.3ad ae0;
+ }
+ }
+ ge-0/3/1 {
+ description "CORE 1GE to core.hub.chi ge-3/2/3 [DARK FIBER USAO] | OneNet-OKCCC-CHI-GE-4296";
+ mtu 9192;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.97/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::6/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/2 {
+ disable;
+ }
+ ge-0/3/3 {
+ disable;
+ }
+ ge-0/3/4 {
+ disable;
+ }
+ ge-0/3/5 {
+ disable;
+ }
+ ge-0/3/6 {
+ disable;
+ }
+ ge-0/3/7 {
+ description "IPERF SERVER MGMT VPLS_2011 [NO-MONITOR]";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation vlan-vpls;
+ unit 2011 {
+ encapsulation vlan-vpls;
+ vlan-id 2011;
+ family vpls;
+ }
+ }
+ ge-0/3/8 {
+ disable;
+ }
+ ge-0/3/9 {
+ description "OCCC L2 Link to Tulsa PTC ";
+ flexible-vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 2515 {
+ encapsulation vlan-ccc;
+ vlan-id-range 1-4000;
+ }
+ }
+ xe-1/0/0 {
+ description "CORE 10GE to core.sti xe-1/0/0 | OneNet-OKCCC-STI-XE-4459";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 232 {
+ vlan-id 232;
+ family inet {
+ mtu 9000;
+ address 164.58.15.233/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::a/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/0/1 {
+ description LINK-TO-OKCCC-LAN-10GE-CIR0002278;
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 8940;
+ address 164.58.64.1/22 {
+ primary;
+ }
+ address 164.58.180.129/26;
+ }
+ family mpls;
+ }
+ }
+ xe-1/1/0 {
+ description "CORE 10GE to core.wea xe-0/0/0 | OneNet-OKCCC-WEA-XE-4991";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.77/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::c/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/1/1 {
+ description "CORE 10GE to core1.okc xe-1/1/1 | OneNet-OKC-OKCCC-XE-4994";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.90/30;
+ }
+ family inet6 {
+ address 2610:1d8:1000::f/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/2/0 {
+ description "CORE 10GE to core2.okc xe-2/2/0 | OneNet-OKC-OKCCC-XE-4995";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.94/30;
+ }
+ family inet6 {
+ address 2610:1d8:1100::11/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/2/1 {
+ description "CORE 10GE to core.sti xe-2/0/0 | OneNet-OKCCC-STI-XE-5004";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.109/30;
+ }
+ family mpls;
+ }
+ }
+ xe-1/3/0 {
+ description "CORE 10GE to core.sti xe-2/0/1 | OneNet-OKCCC-STI-XE-5005";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.113/30;
+ }
+ family mpls;
+ }
+ }
+ xe-1/3/1 {
+ description "CORE 10GE to hub.law xe-1/0/0 | OneNet-OKCCC-LAW-XE-XXXX";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.247.29/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::8/127;
+ }
+ family mpls;
+ }
+ }
+ xe-2/0/0 {
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ description "CORE 10GE to core.alt xe-0/0/0 | OneNet-OKCCC-ALT-XE-XXXX [NO-MONITOR]";
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.5/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::2/127;
+ }
+ family mpls;
+ }
+ }
+ xe-2/0/1 {
+ description "CORE 10GE to core.chi xe-0/0/0 | OneNet-OKCCC-CHI-XE-15442";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 70 {
+ vlan-id 70;
+ family inet {
+ mtu 9000;
+ address 164.58.246.13/30;
+ }
+ family inet6 {
+ address 2610:1d8:3800::4/127;
+ }
+ family mpls;
+ }
+ }
+ xe-2/3/1 {
+ description "RESERVED FOR IPERF [ORDERED]";
+ }
+ ae0 {
+ description "CORE 2GE to core.law AE2 | OneNet-OKCCC-LAW-2GE-AE";
+ mtu 9192;
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.209/30;
+ }
+ family mpls;
+ }
+ }
+ lo0 {
+ description OKCCC-MX960-Loopback;
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.233/32;
+ }
+ family inet6 {
+ address 2610:1d8::16/128;
+ }
+ }
+ }
+}
+inactive: forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1000;
+ }
+ family inet {
+ output {
+ flow-server 164.58.253.210 {
+ port 9993;
+ version-ipfix {
+ template {
+ IP-V4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.186;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ location "Oklahoma City, OK";
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ router-id 164.58.199.233;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface lo0.0;
+ interface xe-1/0/0.232;
+ interface xe-0/0/0.212;
+ interface ae0.0;
+ interface ge-0/2/0.0;
+ interface ge-0/3/1.0;
+ interface xe-0/0/1.228;
+ interface xe-0/1/0.216;
+ interface xe-1/0/1.0;
+ interface xe-2/0/1.70;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.233;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface xe-0/0/0.212 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7wNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5" start-time "2011-6-23.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/0.232 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7xNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5" start-time "2011-6-23.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface lo0.0 {
+ link-protection;
+ }
+ interface fxp0.0 {
+ disable;
+ }
+ interface ae0.0 {
+ authentication {
+ md5 7 key "$9$5Tn/tu1Ihru0rvWLbw.Pf539p0BRcl/C0IEcle"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/3/1.0 {
+ metric 1000;
+ authentication {
+ md5 7 key "$9$VHbgoGDkqPQDjQn/C1I7-dV2aUjH.fzoJjqmfzF"; ## SECRET-DATA
+ }
+ }
+ interface xe-0/0/1.228 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$xFx7bs4aUDHmaJmTz3puWLXxVYoJGjkPs2JDikPf"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/1/0.216 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$lHbe8X-VY2oGVbGik.F3cyrlWxdbsgaUX7b24aUD"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/1/1.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-1/2/0.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface xe-1/2/1.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$r23lWLNdsY4ZdVZjHqzFhSyrMX-Vw2oGLxVYgoGU"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/3/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$r23lWLNdsY4ZdVZjHqzFhSyrMX-Vw2oGLxVYgoGU"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/1/1.40 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$r23lWLNdsY4ZdVZjHqzFhSyrMX-Vw2oGLxVYgoGU"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/1/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$r23lWLNdsY4ZdVZjHqzFhSyrMX-Vw2oGLxVYgoGU"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-2/0/1.70 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7xNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-2/0/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$xFx7bs4aUDHmaJmTz3puWLXxVYoJGjkPs2JDikPf"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/3/1.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$xFx7bs4aUDHmaJmTz3puWLXxVYoJGjkPs2JDikPf"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-1/1/1.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface lo0.0;
+ interface xe-0/1/1.40 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/2/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-2/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-2/0/1.70 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/3/1.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/3/1.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/0.212 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/1/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/0.232 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface ge-0/0/0.0;
+ interface xe-0/0/0.212;
+ interface xe-0/0/1.228;
+ interface xe-0/1/0.216;
+ interface xe-0/1/1.40;
+ interface ge-0/2/0.0;
+ interface ge-0/3/1.0;
+ interface xe-1/0/0.232;
+ interface xe-1/0/1.0;
+ interface xe-1/1/0.69;
+ interface xe-1/1/1.0;
+ interface xe-1/1/1.69;
+ interface xe-1/2/0.0;
+ interface xe-1/2/0.69;
+ interface xe-1/2/1.69;
+ interface xe-1/3/0.69;
+ interface xe-1/3/1.69;
+ interface xe-2/0/0.69;
+ interface xe-2/0/1.70;
+ interface ae0.0;
+ interface lo0.0;
+ }
+ l2circuit {
+ neighbor 164.58.199.234 {
+ interface ge-0/3/9.2515 {
+ virtual-circuit-id 2515;
+ }
+ }
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface xe-1/0/0;
+ interface ge-0/2/2;
+ interface ge-0/3/0;
+ interface xe-0/0/1;
+ interface xe-0/1/0;
+ interface xe-1/1/1;
+ interface xe-1/2/0;
+ interface xe-1/0/1;
+ interface xe-1/2/1;
+ interface xe-1/3/0;
+ interface xe-0/1/1;
+ interface xe-1/1/0;
+ interface xe-2/0/1;
+ interface xe-2/0/0;
+ interface xe-1/3/1;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add OKCCCCORE1;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add OKCCCCORE1;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community NORMANCORE1 members 5078:230;
+ community NORMANCORE2 members 5078:231;
+ community OKCCCCORE1 members 5078:233;
+ community OKCCORE1 members 5078:211;
+ community OKCCORE2 members 5078:212;
+ community OKCCORE3 members 5078:213;
+ community OKCCORE4 members 5078:214;
+ community OKCCORE5 members 5078:215;
+ community OKCCORE6 members 5078:216;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community PTCCORE1 members 5078:234;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community STILLWATERCORE1 members 5078:232;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community TULSACORE1 members 5078:221;
+ community TULSACORE2 members 5078:222;
+ community TULSACORE3 members 5078:223;
+ community TULSACORE4 members 5078:224;
+ community TULSACORE5 members 5078:225;
+ community TULSACORE6 members 5078:226;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ unit * {
+ scheduler-map sch-map;
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+routing-instances {
+ VPLS-ONENET-IPERF {
+ description ONENET-IPERF-MGMT;
+ instance-type vpls;
+ vlan-id 2011;
+ interface ge-0/3/7.2011;
+ route-distinguisher 164.58.199.233:2011;
+ vrf-target target:5078:2011;
+ protocols {
+ vpls {
+ mac-table-size {
+ 3000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site OKCCC-IPERF {
+ site-identifier 10;
+ }
+ }
+ }
+ }
+}
+inactive: services {
+ flow-monitoring {
+ version-ipfix {
+ template IP-V4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at OKCCC-MX960-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.210 ae0.0 Full 164.58.199.202
+# 164.58.245.98 ge-0/3/1.0 Full 164.58.199.82
+# 164.58.15.213 xe-0/0/0.212 Full 164.58.199.230
+# 164.58.15.230 xe-0/0/1.228 Full 164.58.199.232
+# 164.58.15.217 xe-0/1/0.216 Full 164.58.199.230
+# 164.58.247.34 xe-0/1/1.40 Full 164.58.199.150
+# 164.58.15.234 xe-1/0/0.232 Full 164.58.199.232
+# 164.58.246.78 xe-1/1/0.69 Full 164.58.199.39
+# 164.58.246.89 xe-1/1/1.69 Full 164.58.199.211
+# 164.58.246.93 xe-1/2/0.69 Full 164.58.199.212
+# 164.58.246.110 xe-1/2/1.69 Full 164.58.199.232
+# 164.58.246.114 xe-1/3/0.69 Full 164.58.199.232
+# 164.58.247.30 xe-1/3/1.69 Full 164.58.199.202
+# 164.58.246.6 xe-2/0/0.69 Full 164.58.199.27
+# 164.58.246.14 xe-2/0/1.70 Full 164.58.199.83
+#
+# {master}
Index: core.sal.onenet.net
===================================================================
--- core.sal.onenet.net (revision 76430)
+++ core.sal.onenet.net (working copy)
@@ -0,0 +1,1037 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at SALLISAW-MX480-RE0> show system commit
+# 2013-08-19 13:27:37 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 09:17:59 CDT by rnordmark via cli commit synchronize
+# 2013-08-14 18:21:10 CDT by joel via cli commit synchronize
+# 2013-08-14 18:15:12 CDT by joel via cli commit synchronize
+# 2013-08-14 17:16:55 CDT by joel via cli commit synchronize
+# 2013-08-14 17:03:13 CDT by joel via cli commit synchronize
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 11.4b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 3144 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN11EEB52AFB MX480
+# Midplane REV 05 710-017414 ACAB3543 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBS5727 Front Panel Display
+# PEM 0 Rev 09 740-029970 QCS1213U110 PS 1.4-2.52kW; 90-264V AC in
+# PEM 1 Rev 09 740-029970 QCS1213U07U PS 1.4-2.52kW; 90-264V AC in
+# PEM 2 Rev 09 740-029970 QCS1213U03R PS 1.4-2.52kW; 90-264V AC in
+# PEM 3 Rev 09 740-029970 QCS1213U0JP PS 1.4-2.52kW; 90-264V AC in
+# Routing Engine 0 REV 17 740-013063 9012033717 RE-S-2000
+# Routing Engine 1 REV 17 740-013063 9012033651 RE-S-2000
+# CB 0 REV 14 750-031391 ABBS5594 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV0726 Enhanced MX SCB
+# FPC 0 REV 09 750-038493 CAAD4979 MPCE Type 2 3D Q
+# CPU REV 04 711-038484 CAAE1108 MPCE PMB 2G
+# MIC 0 REV 26 750-028387 ABBV6202 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 UL40P6S XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 UL515B2 XFP-10G-LR
+# MIC 1 REV 26 750-028392 ABBV4790 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AC1108S03UZ SFP-SX
+# Xcvr 9 REV 01 740-031849 07T617600033 SFP-LH
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 9 REV 02 740-013111 A476929 SFP-T
+# QXM 0 REV 06 711-028408 CAAE1560 MPC QXM
+# QXM 1 REV 06 711-028408 CAAE1594 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAB3543 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBS5727 CRAFT-MX480-S
+# PEM 0 Rev 09 740-029970 QCS1213U110 PWR-MX480-2520-AC-S
+# PEM 1 Rev 09 740-029970 QCS1213U07U PWR-MX480-2520-AC-S
+# PEM 2 Rev 09 740-029970 QCS1213U03R PWR-MX480-2520-AC-S
+# PEM 3 Rev 09 740-029970 QCS1213U0JP PWR-MX480-2520-AC-S
+# Routing Engine 0 REV 17 740-013063 9012033717 RE-S-2000-4096-S
+# Routing Engine 1 REV 17 740-013063 9012033651 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBS5594 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV0726 SCBE-MX-S
+# FPC 0 REV 09 750-038493 CAAD4979 MX-MPC2E-3D-Q
+# MIC 0 REV 26 750-028387 ABBV6202 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028392 ABBV4790 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012033717
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012033651
+#
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis scb
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis sfm detail
+# grnoc-mon at SALLISAW-MX480-RE0> show chassis ssb
+# grnoc-mon at SALLISAW-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:79:9b:7a
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at SALLISAW-MX480-RE0> show version
+# Hostname: SALLISAW-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Servic!
es [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at SALLISAW-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 1662996
+# -rw-r--r-- 1 root field 30 Jun 28 2012 ex.txt
+# drwxr-xr-x 2 root field 512 Jun 28 2012 gres-tp/
+# -rw-r--r-- 1 root field 4 Jun 4 22:33 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 install/
+# -rw-r--r-- 1 root field 421204768 Jul 11 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Jun 4 11:03 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 8404168 Jul 11 2012 jweb-11.4R4.4-signed.tgz
+# -rw-r--r-- 1 root field 155 Jun 4 22:38 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 11 2012 pics/
+# -r--r--r-- 1 root field 499 Jun 4 22:21 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root field 512 Jun 28 2012 rtsdb/
+# -rw-r----- 1 root field 534 Jun 4 22:38 sampled.pkts
+# drwxr-xr-x 3 root field 512 Jun 28 2012 sec-download/
+# drwxrwxrwT 2 root wheel 512 Jun 28 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at SALLISAW-MX480-RE0> show system uptime
+# System booted: 2013-06-04 22:31 CDT
+# Protocols started: 2013-06-04 22:38 CDT
+# Last configured: 2013-08-19 13:27 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at SALLISAW-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.69 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up up
+#ge-0/2/9.69 up up
+#ge-0/2/9.32767 up up
+#ge-0/3/0 up down
+#ge-0/3/1 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at SALLISAW-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:27:37 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name SALLISAW-MX480-RE0;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name SALLISAW-MX480-RE1;
+ backup-router 172.25.46.1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.119;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ftp;
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98;
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core.hut.sal xe-0/0/1 | OneNet-HUTSAL-SAL-XE-15447";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.50/30;
+ }
+ family inet6 {
+ address 2610:1d8:3e00::/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "CORE 1GE to core.sal ge-3/2/3 | OneNet-SAY-SAY-GE-5095";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.245.17/30;
+ }
+ family inet6 {
+ address 2610:1d8:3e00::2/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/9 {
+ description "CORE 1GE core.pot ge-0/2/8 [TEMPORARY CIRCUIT UNTIL BTOP] | OneNet-SAL-POT-GE-5156";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 69 {
+ vlan-id 69;
+ family inet {
+ mtu 9000;
+ address 164.58.246.142/30;
+ }
+ family mpls;
+ }
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.119/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2610:1d8::43/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ input {
+ rate 1;
+ }
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.253.36 {
+ port 9119;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.119;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ description "NetGroup 1-888-566-3638";
+ location SALLISAW;
+ contact "OneNet Netgroup";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ router-id 164.58.199.119;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.69;
+ interface lo0.0;
+ interface ge-0/2/0.0;
+ interface ge-0/2/9.69;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.119;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+# authentication-key <removed>;
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/0/0.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/9.69 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.69 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.69;
+ interface ge-0/2/0.0;
+ interface ge-0/2/9.69;
+ interface lo0.0;
+ }
+ lldp {
+ interface ge-0/2/9;
+ interface xe-0/0/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add Sallisaw;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add Sallisaw;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at SALLISAW-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.18 ge-0/2/0.0 Full 164.58.199.118
+# 164.58.246.141 ge-0/2/9.69 Full 164.58.199.147
+# 164.58.246.49 xe-0/0/0.69 Full 164.58.199.158
+#
+# {master}
Index: core5.tul.onenet.net
===================================================================
--- core5.tul.onenet.net (revision 76439)
+++ core5.tul.onenet.net (working copy)
@@ -0,0 +1,3050 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show system commit
+# 2013-08-19 13:33:15 CDT by jeremyt via cli commit synchronize
+# 2013-08-19 13:27:20 CDT by jeremyt via cli commit synchronize
+# 2013-08-15 14:10:14 CDT by donnie via cli commit synchronize
+# 2013-08-15 14:06:08 CDT by rnordmark via cli commit synchronize
+# 2013-08-15 14:04:34 CDT by donnie via cli commit synchronize
+# 2013-08-15 14:02:42 CDT by josh via cli commit synchronize
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# FPC 1 Intake OK
+# FPC 1 Exhaust A OK
+# FPC 1 Exhaust B OK
+# FPC 1 QX 0 TSen OK
+# FPC 1 QX 0 Chip OK
+# FPC 1 LU 0 TCAM TSen OK
+# FPC 1 LU 0 TCAM Chip OK
+# FPC 1 LU 0 TSen OK
+# FPC 1 LU 0 Chip OK
+# FPC 1 MQ 0 TSen OK
+# FPC 1 MQ 0 Chip OK
+# FPC 1 QX 1 TSen OK
+# FPC 1 QX 1 Chip OK
+# FPC 1 LU 1 TCAM TSen OK
+# FPC 1 LU 1 TCAM Chip OK
+# FPC 1 LU 1 TSen OK
+# FPC 1 LU 1 Chip OK
+# FPC 1 MQ 1 TSen OK
+# FPC 1 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 1 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN119DF18AFB MX480 Midplane
+# Midplane REV 05 710-017414 ACAA8508 MX480 Midplane
+# FPM Board REV 02 710-017254 YM6797 Front Panel Display
+# PEM 0 Rev 03 740-027736 QCS1019T06L DC 2.4kW Power Entry Module
+# PEM 1 Rev 03 740-027736 QCS1019T059 DC 2.4kW Power Entry Module
+# PEM 2 Rev 03 740-027736 QCS1019T04Y DC 2.4kW Power Entry Module
+# PEM 3 Rev 03 740-027736 QCS1019T056 DC 2.4kW Power Entry Module
+# Routing Engine 0 REV 14 740-013063 9012009451 RE-S-2000
+# Routing Engine 1 REV 14 740-013063 9012009291 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV4982 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV5393 Enhanced MX SCB
+# FPC 0 REV 15 750-031088 YZ0115 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YY8850 MPC PMB 2G
+# MIC 0 REV 26 750-028387 YT7015 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 T10K73376 XFP-10G-SR
+# Xcvr 1 REV 01 740-031833 T10L15829 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 CB51BQ0CT XFP-10G-SR
+# Xcvr 1 REV 03 740-014289 CA47BQ026 XFP-10G-SR
+# MIC 1 REV 23 750-028392 YV0215 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU31S SFP-SX
+# Xcvr 1 REV 01 740-011612 9ZT702500747 SFP-LH
+# Xcvr 2 REV 01 740-031851 AM1041SU3F1 SFP-SX
+# Xcvr 3 REV 02 740-013111 A464222 SFP-T
+# Xcvr 4 REV 02 740-011613 PJH51YG SFP-SX
+# Xcvr 5 REV 02 740-011613 PJH1XJL SFP-SX
+# Xcvr 6 M5] NON-JNPR FNS0850D1EX SFP-LX10
+# Xcvr 8 REV 01 740-031851 AM1041SU2RL SFP-SX
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU3HV SFP-SX
+# Xcvr 1 REV 02 740-013111 A475740 SFP-T
+# Xcvr 2 REV 02 740-013111 A475745 SFP-T
+# Xcvr 3 REV 02 740-013111 A464509 SFP-T
+# Xcvr 4 REV 02 740-013111 A475913 SFP-T
+# Xcvr 5 REV 02 740-013111 A476906 SFP-T
+# Xcvr 6 REV 01 740-031851 AM1041SU15K SFP-SX
+# Xcvr 7 REV 01 740-031851 AM1041SU2T6 SFP-SX
+# Xcvr 8 REV 01 740-031851 AM1041SU3EQ SFP-SX
+# Xcvr 9 REV 02 740-013111 A476920 SFP-T
+# QXM 0 REV 05 711-028408 YY8559 MPC QXM
+# QXM 1 REV 05 711-028408 YY9748 MPC QXM
+# FPC 1 REV 15 750-031088 YZ0069 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YY6598 MPC PMB 2G
+# MIC 0 REV 25 750-028387 YS1898 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 T10K73512 XFP-10G-SR
+# Xcvr 1 REV 01 740-031833 T10L15818 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 02 740-014279 T09E25900 XFP-10G-LR
+# Xcvr 1 REV 01 740-031833 T10L15817 XFP-10G-LR
+# MIC 1 REV 26 750-028387 ABBR1682 3D 4x 10GE XFP
+# PIC 2 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 21T670100936 XFP-10G-LR
+# PIC 3 BUILTIN BUILTIN 2x 10GE XFP
+# QXM 0 REV 05 711-028408 YY9788 MPC QXM
+# QXM 1 REV 05 711-028408 YY9798 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ACAA8508 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 YM6797 CRAFT-MX480-S
+# PEM 0 Rev 03 740-027736 QCS1019T06L PWR-MX480-2400-DC-S
+# PEM 1 Rev 03 740-027736 QCS1019T059 PWR-MX480-2400-DC-S
+# PEM 2 Rev 03 740-027736 QCS1019T04Y PWR-MX480-2400-DC-S
+# PEM 3 Rev 03 740-027736 QCS1019T056 PWR-MX480-2400-DC-S
+# Routing Engine 0 REV 14 740-013063 9012009451 RE-S-2000-4096-S
+# Routing Engine 1 REV 14 740-013063 9012009291 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV4982 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV5393 SCBE-MX-S
+# FPC 0 REV 15 750-031088 YZ0115 MX-MPC2-3D-Q
+# MIC 0 REV 26 750-028387 YT7015 MIC-3D-4XGE-XFP
+# MIC 1 REV 23 750-028392 YV0215 MIC-3D-20GE-SFP
+# FPC 1 REV 15 750-031088 YZ0069 MX-MPC2-3D-Q
+# MIC 0 REV 25 750-028387 YS1898 MIC-3D-4XGE-XFP
+# MIC 1 REV 26 750-028387 ABBR1682 MIC-3D-4XGE-XFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012009451
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012009291
+#
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis scb
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis sfm detail
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis ssb
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:6d:0f
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show version
+# Hostname: TULSA-CORE5-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Ser!
vices [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at TULSA-CORE5-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 7385944
+# -rwxrwxr-x 1 root field 1774099 Oct 22 2012 chassisd.core-tarball.0.tgz*
+# -rwxrwxr-x 1 root field 1774099 Oct 22 2012 chassisd.core-tarball.0.tgz-re1*
+# -rwxrwxr-x 1 root field 1656980 Oct 22 2012 chassisd.core-tarball.1.tgz*
+# -rwxrwxr-x 1 root field 1749512 Oct 22 2012 chassisd.core-tarball.1.tgz-re1*
+# -rwxrwxr-x 1 root field 1657127 Oct 22 2012 chassisd.core-tarball.2.tgz*
+# -rwxrwxr-x 1 root field 1749345 Oct 22 2012 chassisd.core-tarball.2.tgz-re1*
+# -rwxrwxr-x 1 root field 1657054 Oct 22 2012 chassisd.core-tarball.3.tgz*
+# -rwxrwxr-x 1 root field 1749559 Oct 22 2012 chassisd.core-tarball.3.tgz-re1*
+# -rwxrwxr-x 1 root field 1657366 Oct 22 2012 chassisd.core-tarball.4.tgz*
+# -rwxrwxr-x 1 root field 1750206 Oct 22 2012 chassisd.core-tarball.4.tgz-re1*
+# -rwxrwxr-x 1 root field 1569726 Oct 22 2012 chassisd.core.1.gz*
+# -rw-r--r-- 1 root field 30 Dec 5 2010 ex.txt
+# drwxr-xr-x 2 root field 512 Dec 5 2010 gres-tp/
+# -rw-r--r-- 1 root field 4 Apr 27 23:46 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Dec 5 2010 install/
+# -r-xr-xr-x 1 root wheel 329257475 Dec 5 2010 jbundle-10.3R1.9-domestic.tgz*
+# -rw-r--r-- 1 root field 338894858 Feb 24 2011 jbundle-10.4R1.9-domestic.tgz
+# -rw-r--r-- 1 root field 348823558 Mar 8 2011 jbundle-10.4R2.6-domestic.tgz
+# -rw-r--r-- 1 root field 349730789 Mar 24 2011 jbundle-10.4R3.4-domestic.tgz
+# -rw-r--r-- 1 root field 350497882 Nov 30 2011 jbundle-10.4R6.5-domestic.tgz
+# -rw-r--r-- 1 root field 355159151 Mar 8 2011 jinstall-10.4R2.6-domestic-signed.tgz
+# -rw-r--r-- 1 admin field 356069136 Mar 24 2011 jinstall-10.4R3.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 356846496 Nov 29 2011 jinstall-10.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Apr 23 07:17 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 0 Dec 5 2010 jperf
+# -rw-r--r-- 1 root field 0 Dec 5 2010 jperf_shmem_sem
+# -rw-r--r-- 1 root field 7829561 Mar 8 2011 jweb-10.4R2.6-signed.tgz
+# -rw-r--r-- 1 admin field 7830840 Mar 24 2011 jweb-10.4R3.4-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 9 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 root field 155 Apr 27 23:46 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Apr 27 23:34 pics/
+# -r--r--r-- 1 root field 499 Apr 27 23:29 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 Oct 22 2012 rdm.taf
+# -rw------- 1 root field 173668736 Nov 30 2011 rpd.core-tarball.0.tgz
+# drwxr-xr-x 2 root field 512 Apr 27 23:36 rtsdb/
+# -rw-r----- 1 root field 1246 Apr 27 23:46 sampled.pkts
+# drwxr-xr-x 3 root field 512 Dec 5 2010 sec-download/
+# -rw-r--r-- 1 root field 0 Dec 5 2010 tracelogs
+# -rw-r--r-- 1 root field 0 Dec 5 2010 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Dec 5 2010 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 Oct 19 2012 vi.recover/
+#
+# {master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show system uptime
+# System booted: 2013-04-27 23:43 CDT
+# Protocols started: 2013-04-27 23:45 CDT
+# Last configured: 2013-08-19 13:33 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.116 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up up
+#xe-0/1/0 up up
+#xe-0/1/0.116 up up
+#xe-0/1/0.32767 up up
+#xe-0/1/1 up up
+#xe-0/1/1.148 up up
+#xe-0/1/1.32767 up up
+#ge-0/2/0 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 up up
+#ge-0/2/3 up up
+#ge-0/2/3.0 up up
+#ge-0/2/4 up down
+#ge-0/2/5 up up
+#ge-0/2/5.2500 up up
+#ge-0/2/5.2501 up up
+#ge-0/2/5.2505 up up
+#ge-0/2/5.32767 up up
+#ge-0/2/6 up up
+#ge-0/2/6.0 up up
+#ge-0/2/7 up down
+#ge-0/2/8 up up
+#ge-0/2/8.0 up up
+#ge-0/2/9 up down
+#ge-0/2/9.0 up down
+#ge-0/3/0 up up
+#ge-0/3/0.0 up up
+#ge-0/3/1 up up
+#ge-0/3/1.0 up up
+#ge-0/3/2 up up
+#ge-0/3/2.0 up up
+#ge-0/3/3 up up
+#ge-0/3/3.0 up up
+#ge-0/3/4 up up
+#ge-0/3/4.0 up up
+#ge-0/3/5 up up
+#ge-0/3/5.0 up up
+#ge-0/3/6 up up
+#ge-0/3/6.70 up up
+#ge-0/3/6.32767 up up
+#ge-0/3/7 up down
+#ge-0/3/8 up up
+#ge-0/3/8.0 up up
+#ge-0/3/9 up up
+#ge-0/3/9.0 up up
+#lc-1/0/0 up up
+#lc-1/0/0.32769 up up
+#pfe-1/0/0 up up
+#pfe-1/0/0.16383 up up
+#pfh-1/0/0 up up
+#pfh-1/0/0.16383 up up
+#xe-1/0/0 up up
+#xe-1/0/0.136 up up
+#xe-1/0/0.32767 up up
+#xe-1/0/1 up up
+#xe-1/0/1.174 up up
+#xe-1/0/1.175 up up
+#xe-1/0/1.181 up up
+#xe-1/0/1.182 up up
+#xe-1/0/1.183 up up
+#xe-1/0/1.185 up up
+#xe-1/0/1.186 up up
+#xe-1/0/1.190 up up
+#xe-1/0/1.191 up up
+#xe-1/0/1.32767 up up
+#xe-1/1/0 up up
+#xe-1/1/0.144 up up
+#xe-1/1/0.809 up up
+#xe-1/1/0.32767 up up
+#xe-1/1/1 up up
+#xe-1/1/1.143 up up
+#xe-1/1/1.496 up up
+#xe-1/1/1.588 up up
+#xe-1/1/1.681 up up
+#xe-1/1/1.682 up up
+#xe-1/1/1.2519 up up
+#xe-1/1/1.32767 up up
+#gr-1/2/0 up up
+#ip-1/2/0 up up
+#lc-1/2/0 up up
+#lc-1/2/0.32769 up up
+#lt-1/2/0 up up
+#mt-1/2/0 up up
+#pd-1/2/0 up up
+#pd-1/2/0.32769 up up
+#pe-1/2/0 up up
+#pfe-1/2/0 up up
+#pfe-1/2/0.16383 up up
+#ut-1/2/0 up up
+#vt-1/2/0 up up
+#xe-1/2/0 up up
+#xe-1/2/0.70 up up
+#xe-1/2/0.32767 up up
+#xe-1/2/1 down down
+#xe-1/3/0 down down
+#xe-1/3/1 down down
+#ae0 up up
+#ae0.116 up up
+#ae0.32767 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 up down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#lsi.1048582 up up
+#lsi.1048584 up up
+#lsi.1048585 up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:33:15 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name TULSA-CORE5-MX480-RE0;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name TULSA-CORE5-MX480-RE1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ backup-router 172.25.46.1;
+ time-zone America/Chicago;
+ authentication-order [ password radius ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.225;
+ }
+ }
+ scripts {
+ op {
+ file show-bgp-policy.slax {
+ command show-bgp-policy;
+ }
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ telnet;
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ aggregated-devices {
+ ethernet {
+ device-count 1;
+ }
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ pic 2 {
+ tunnel-services {
+ bandwidth 10g;
+ }
+ }
+ sampling-instance JFLOW-1;
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+ inactive: network-services all-ethernet;
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.tul xe-1/0/1 [AE0-1of2] | OneNet-TUL-TUL-XE-4477";
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ inactive: xe-0/0/1 {
+ description COGENT-AREON-IPV4-PEER-CIR4486;
+ vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ unit 997 {
+ vlan-id 997;
+ family inet {
+ mtu 9000;
+ address 38.104.198.70/30;
+ }
+ }
+ unit 998 {
+ vlan-id 998;
+ family inet {
+ mtu 9000;
+ }
+ family inet6 {
+ address 2001:550:2:2e::e/126;
+ }
+ }
+ }
+ xe-0/1/0 {
+ description "CORE 10GE to core1.tul xe-1/1/1 [AE0-2of2] | OneNet-TUL-TUL-XE-5070";
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ xe-0/1/1 {
+ description "CORE 10GE to core4.tul xe-0/1/1 | OneNet-TUL-TUL-XE-4474";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 148 {
+ vlan-id 148;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.150/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ffac::2/80;
+ address 2610:1d8:2300::1/127;
+ }
+ family mpls;
+ }
+ }
+ inactive: ge-0/2/2 {
+ description NortheasternStateUniversity-BrokenArrow-Gig-CIR0004251;
+ unit 0 {
+ family inet {
+ address 164.58.237.89/30;
+ }
+ }
+ }
+ ge-0/2/3 {
+ description "Pawnee PS-DS3-CIR0004912-RICI";
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 156.110.207.105/29;
+ }
+ }
+ }
+ ge-0/2/5 {
+ description OU-Schusterman-Campus-Gig-CIR0004533;
+ flexible-vlan-tagging;
+ speed 1g;
+ mtu 9192;
+ link-mode full-duplex;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 2500 {
+ description OU-Schusterman-VPLS;
+ encapsulation vlan-vpls;
+ vlan-id-range 1-2504;
+ family vpls;
+ }
+ unit 2501 {
+ description OU-Schusterman-VPLS;
+ encapsulation vlan-vpls;
+ vlan-id-range 2506-4094;
+ family vpls;
+ }
+ unit 2505 {
+ description OU-Schusterman-Layer-3-Routed;
+ vlan-id 2505;
+ family inet {
+ address 164.58.3.153/30;
+ }
+ }
+ }
+ ge-0/2/6 {
+ description Langston-Tulsa-CIR0004351;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 164.58.6.193/30;
+ address 156.110.143.81/29;
+ }
+ }
+ }
+ ge-0/2/8 {
+ description "CORE 1GE to hub.tah ge-4/0/0 | OneNet-TUL-TAH-GE-3966";
+ unit 0 {
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.245.173/30;
+ }
+ family inet6 {
+ address 2610:1d8:2400::8/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/9 {
+ unit 0 {
+ family inet {
+ address 192.168.1.150/30;
+ }
+ }
+ }
+ ge-0/3/0 {
+ description "CORE 1GE to hub.mia ge-3/2/0 [DARK FIBER LEVEL3] | OneNet-TUL-MIA-GE-4298";
+ link-mode full-duplex;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.245.185/30;
+ }
+ family inet6 {
+ address 2610:1d8:2400::6/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/1 {
+ description Argus-DC-Plant-A-monitor;
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 156.110.201.137/30;
+ }
+ }
+ }
+ ge-0/3/2 {
+ description Jay-PS-FastEthernet-CIR0004714;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 164.58.0.137/30;
+ }
+ }
+ }
+ ge-0/3/3 {
+ description "Pawnee PS DS3 CIR0004915-RICI";
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 164.58.87.121/29;
+ }
+ }
+ }
+ ge-0/3/4 {
+ description Sunhub-Tulsa-FE;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.198.149/30;
+ }
+ }
+ }
+ ge-0/3/5 {
+ description OneNetHub-Tulsa3-AP;
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 164.58.63.97/29;
+ }
+ }
+ }
+ ge-0/3/6 {
+ description "CORE 1GE to core.mus ge-0/2/9 [TEMPORARY CIRCUIT] | OneNet-TUL-MUS-GE-xxxx";
+ vlan-tagging;
+ speed 1g;
+ mtu 9192;
+ link-mode full-duplex;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 70 {
+ vlan-id 70;
+ family inet {
+ mtu 9000;
+ address 164.58.246.81/30;
+ }
+ family inet6 {
+ address 2610:1d8:2400::a/127;
+ }
+ family mpls;
+ }
+ }
+ inactive: ge-0/3/7 {
+ description ONENET-TULSA-SANS;
+ unit 0 {
+ family inet {
+ address 164.58.244.249/30;
+ }
+ }
+ }
+ ge-0/3/8 {
+ description "CORE 1GE to hub.bar ge-3/2/0 | OneNet-TUL-BAR-GE-4502";
+ mtu 9192;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.245.217/30;
+ }
+ family inet6 {
+ address 2610:1d8:2400::5/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/3/9 {
+ description TELEMATE-VERSO-WEBFILTER-PORT-MIRROR;
+ unit 0 {
+ family inet {
+ address 192.168.79.1/30 {
+ arp 192.168.79.2 mac 00:90:69:4f:84:9a;
+ }
+ }
+ }
+ }
+ xe-1/0/0 {
+ description "CORE 10GE to core2.tul xe-1/0/1 | OneNet-TUL-TUL-XE-4475";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 136 {
+ vlan-id 136;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.138/30;
+ }
+ family inet6 {
+ address 2610:1d8:2100::7/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/0/1 {
+ description "NNI to Cox Communications - TUL - CIR0004794";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 174 {
+ description CompSource-Tulsa-CIR0003745;
+ vlan-id 174;
+ family inet {
+ sampling {
+ input;
+ }
+ address 156.110.202.61/30;
+ }
+ }
+ unit 175 {
+ description UniversityofTulsa-CIR0003760;
+ vlan-id 175;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.12.253/30;
+ }
+ }
+ unit 181 {
+ description St-Gregory-University-2-Ethernet-CIR0004531;
+ vlan-id 181;
+ family inet {
+ sampling {
+ input;
+ }
+ address 156.110.118.13/30;
+ }
+ }
+ unit 182 {
+ description Teachers-Credit-Union-10Mb-CIR0004708;
+ vlan-id 182;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.63.21/30;
+ }
+ }
+ unit 183 {
+ description "L2 CORE 300Mb to hub.cla ge-3/2/0 | OneNet-TUL-CLA-GE-4811";
+ bandwidth 300m;
+ vlan-id 183;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.244.41/30;
+ }
+ family inet6 {
+ address 2610:1d8:2400::2/127;
+ }
+ family mpls;
+ }
+ unit 185 {
+ description Tulsa-Community-College-CIR0004836;
+ vlan-id 185;
+ family inet {
+ address 164.58.199.113/30;
+ }
+ }
+ unit 186 {
+ description NortheasternStateUniversity-BrokenArrow-Gig-CIR0004251;
+ vlan-id 186;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.237.89/30;
+ }
+ }
+ unit 190 {
+ description "Grand River Dam Authority CIR0004978";
+ vlan-id 190;
+ family inet {
+ sampling {
+ input;
+ }
+ address 156.110.24.17/30;
+ }
+ }
+ unit 191 {
+ description Berryhill-HighSchool-100Mb-CIR0005164;
+ vlan-id 191;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.28.253/30;
+ }
+ }
+ }
+ xe-1/1/0 {
+ description "UPSTREAM 10GE to ^ FrameNet (2) ^ Cisco6509 int-?/?/? CIR0005071";
+ vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ unit 144 {
+ description "UPSTREAM L3 XX to ^ KanREN (via FRAMENET-2) ^ CIR0005072";
+ vlan-id 144;
+ family inet {
+ inactive: mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.245.141/30;
+ }
+ family inet6 {
+ address 2001:49d0:200b:1000::1/126;
+ }
+ }
+ unit 809 {
+ description "UPSTREAM L3 XX to ^ PACKETNET (via FRAMENET-2) ^ CIR0004484";
+ vlan-id 809;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.245.85/30;
+ }
+ family inet6 {
+ mtu 9000;
+ address 2001:4880:100:83::2/64;
+ }
+ }
+ }
+ xe-1/1/1 {
+ description "UPSTREAM 10GE to ^ FrameNet (1) ^ Cisco6509 int-?/?/? CIR0004485";
+ vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ unit 143 {
+ description "UPSTREAM L3 XX to ^ TR-CPS-LOAS (via FRAMENET-1) ^ CIR0005074";
+ vlan-id 143;
+ family inet {
+ mtu 1500;
+ sampling {
+ input;
+ }
+ address 64.57.21.18/30;
+ }
+ family inet6 {
+ mtu 1500;
+ address 2001:468:f000:2348::2/64;
+ }
+ }
+ unit 496 {
+ description "UPSTREAM L3 XX to ^ NOAA (via FRAMENET-1) ^ CIR0005075";
+ encapsulation vlan-ccc;
+ vlan-id 496;
+ }
+ inactive: unit 576 {
+ disable;
+ description "UPSTREAM L3 XX to ^ NTR CPS LOSANGLES (via FRAMENET-1) ^ CIR000xxxx";
+ vlan-id 576;
+ family inet {
+ mtu 1500;
+ sampling {
+ input;
+ }
+ address 137.164.131.214/30;
+ }
+ }
+ unit 588 {
+ description "UPSTREAM L3 XX to ^ NTR-CPS-ASHBURN (via FRAMENET-1) ^ CIR0005076";
+ vlan-id 588;
+ family inet {
+ mtu 1500;
+ sampling {
+ input;
+ }
+ address 137.164.131.134/30;
+ }
+ family inet6 {
+ mtu 1500;
+ address 2001:468:f000:212e::2/64;
+ }
+ }
+ inactive: unit 593 {
+ disable;
+ description "UPSTREAM L3 XX to ^ NTR-CPS-ASHBURN (via FRAMENET-1) ^ CIR000xxxx";
+ vlan-id 593;
+ family inet {
+ mtu 1500;
+ sampling {
+ input;
+ }
+ address 137.164.131.218/30;
+ }
+ }
+ unit 681 {
+ description "UPSTREAM L3 XX to ^ I2-RE-L3GPN (via FRAMENET-1) ^ CIR0005077";
+ vlan-id 681;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.113.255.14/30;
+ }
+ }
+ unit 682 {
+ description "UPSTREAM L3 XX to ^ I2-CPS-L3GPN (via FRAMENET-1) ^ CIR0005078";
+ vlan-id 682;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.113.254.250/30;
+ }
+ }
+ unit 2519 {
+ description "NOAA L2 Link to Tulsa.5";
+ encapsulation vlan-ccc;
+ bandwidth 1g;
+ vlan-id 615;
+ }
+ }
+ xe-1/2/0 {
+ description "CORE 10GE to core.tsb xe-0/0/1 | OneNet-TUL-TSB-XE-4968";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 70 {
+ vlan-id 70;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.246.253/30;
+ }
+ family inet6 {
+ address 2610:1d8:2400::/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/2/1 {
+ disable;
+ }
+ xe-1/3/0 {
+ disable;
+ }
+ xe-1/3/1 {
+ disable;
+ }
+ ae0 {
+ description "CORE 20GE to core1.tul AE1 | OneNet-TUL-TUL-2XE-AE";
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ aggregated-ether-options {
+ link-speed 10g;
+ lacp {
+ active;
+ }
+ }
+ unit 116 {
+ bandwidth 20g;
+ vlan-id 116;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.245.230/30;
+ }
+ family inet6 {
+ address 2610:1d8:2000::7/127;
+ }
+ family mpls;
+ }
+ }
+ irb {
+ inactive: unit 469 {
+ family inet {
+ address 156.110.201.190/30;
+ }
+ }
+ }
+ lo0 {
+ description TULSA-CORE-5-MX480-Loopback;
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 164.58.199.225/32;
+ address 127.0.0.1/32;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:10::199:225/128;
+ address 2610:1d8::a/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-server 164.58.253.36 {
+ port 9225;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ IP-V4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.225;
+ }
+ }
+ }
+ }
+ }
+ }
+ port-mirroring {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ interface ge-0/3/9.0 {
+ next-hop 192.168.79.2;
+ }
+ }
+ }
+ }
+}
+snmp {
+ location "Tulsa, OK";
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ rib inet6.0 {
+ aggregate {
+ route 2001:468:a00::/40;
+ route 2610:1d8::/32;
+ }
+ }
+ static {
+ route 164.58.189.0/24 next-hop 164.58.0.198;
+ route 156.110.192.0/24 next-hop 164.58.198.150;
+ route 164.58.198.252/30 next-hop 164.58.198.10;
+ route 129.244.0.0/16 next-hop 164.58.12.254;
+ route 156.110.204.240/28 next-hop 164.58.12.254;
+ route 164.58.25.176/28 next-hop 164.58.12.254;
+ route 156.110.207.40/29 next-hop 164.58.237.90;
+ route 156.110.207.192/29 next-hop 164.58.237.90;
+ route 192.173.56.0/24 next-hop 164.58.237.90;
+ route 192.173.57.0/24 next-hop 164.58.237.90;
+ route 192.173.58.0/24 next-hop 164.58.237.90;
+ route 192.173.59.0/24 next-hop 164.58.237.90;
+ route 192.173.60.0/24 next-hop 164.58.237.90;
+ route 192.173.61.0/24 next-hop 164.58.237.90;
+ route 192.173.62.0/24 next-hop 164.58.237.90;
+ route 192.173.63.0/24 next-hop 164.58.237.90;
+ route 164.58.82.240/28 next-hop 156.110.202.62;
+ route 164.58.184.168/29 next-hop 164.58.28.254;
+ route 164.58.69.32/28 next-hop 164.58.244.250;
+ route 164.58.209.176/29 next-hop 164.58.3.226;
+ route 164.58.111.0/24 next-hop 164.58.63.22;
+ route 156.110.160.0/19 next-hop 164.58.3.154;
+ route 192.35.98.0/24 next-hop 164.58.3.154;
+ route 156.110.31.48/29 next-hop 164.58.0.138;
+ route 164.58.83.80/29 next-hop 164.58.0.138;
+ route 164.58.184.252/30 next-hop 164.58.0.138;
+ route 164.58.224.252/30 next-hop 164.58.0.138;
+ route 164.58.253.36/32 {
+ next-hop 164.58.245.229;
+ no-readvertise;
+ }
+ route 156.110.31.184/29 next-hop 164.58.87.124;
+ route 164.58.139.128/28 next-hop 156.110.207.108;
+ route 164.58.28.88/29 next-hop 156.110.24.18;
+ }
+ router-id 164.58.199.225;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ inactive: sap;
+ mpls {
+ interface xe-1/0/0.136;
+ interface lo0.0;
+ interface xe-0/1/1.148;
+ interface ge-0/2/8.0;
+ interface ge-0/3/0.0;
+ interface ge-0/3/3.0;
+ interface ge-0/3/8.0;
+ interface xe-1/0/1.171;
+ interface xe-1/0/1.183;
+ interface ae0.116;
+ interface xe-1/2/0.70;
+ interface ge-0/3/6.70;
+ }
+ bgp {
+ log-updown;
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.225;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ any;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ export [ NEXT-HOP-SELF REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ }
+ inactive: group EBGP-COGENT-AS174 {
+ type external;
+ description EBGP-COGENT-AS21357;
+ import [ EBGP-COGENT-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+ export EBGP-COGENT-EXPORT;
+ neighbor 38.104.198.69 {
+ remove-private;
+ peer-as 174;
+ }
+ }
+ group PACKETNET {
+ type external;
+ description NLR-PACKETNET;
+ import [ EBGP-NLR-PACKETNET-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+ export EBGP-NLR-PACKETNET-EXPORT;
+ neighbor 164.58.245.86 {
+ remove-private;
+ peer-as 19401;
+ }
+ }
+ group NTR-CPS {
+ type external;
+ description NTR-CPS-LA-CHI-ASH;
+ family inet {
+ any;
+ }
+ neighbor 137.164.131.133 {
+ import [ EBGP-NTR-CHICAGO-IMPORT EBGP-REJECT-IMPORT ];
+# authentication-key <removed>;
+ export EBGP-NTR-CHICAGO-EXPORT;
+ remove-private;
+ peer-as 11164;
+ }
+ neighbor 64.57.21.17 {
+ import EBGP-NTR-LOAS-IMPORT;
+ export EBGP-NTR-LOAS-EXPORT;
+ remove-private;
+ peer-as 11164;
+ }
+ }
+ group I2-CPS-L3GPN {
+ type external;
+ description I2-CPS-L3GPN;
+ import [ EBGP-I2-CPS-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+# authentication-key <removed>;
+ export EBGP-I2-CPS-EXPORT;
+ neighbor 164.113.254.249 {
+ remove-private;
+ peer-as 11317;
+ }
+ }
+ group I2-RE-L3GPN {
+ description I2-RE-L3GPN;
+ import [ EBGP-I2-RE-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+ inactive:# authentication-key <removed>;
+ export EBGP-I2-RE-EXPORT;
+ neighbor 164.113.255.13 {
+ remove-private;
+ peer-as 11317;
+ }
+ }
+ group CUSTOMER-EBGP {
+ type external;
+ family inet {
+ any;
+ }
+ neighbor 164.58.12.254 {
+ description UNIVERSITY-OF-TULSA-eBGP;
+ import EBGP-TU-IMPORT;
+ export REDISTRIBUTE-STATICS;
+ remove-private;
+ peer-as 8036;
+ }
+ neighbor 164.58.199.114 {
+ description TULSA-COMMUNITY-COLLEGE-eBGP;
+ import EBGP-TCC-IMPORT;
+ export DEFAULT-EXPORT;
+ remove-private;
+ peer-as 11897;
+ }
+ }
+ group EBGP-NTR-CPS-V6 {
+ type external;
+ description EBGP-NTR-CPS-V6;
+ import EBGP-NTR-CPS-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+ export EBGP-NTR-CPS-V6-EXPORT;
+ neighbor 2001:468:f000:212e::1 {
+ remove-private;
+ peer-as 11164;
+ }
+ }
+ group EBGP-NLR-V6 {
+ type external;
+ description EBGP-NLR-V6-0n3t0n1rv6k3y;
+ import EBGP-NLR-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+# authentication-key <removed>;
+ export EBGP-NLR-V6-EXPORT;
+ neighbor 2001:4880:100:83::1 {
+ remove-private;
+ peer-as 19401;
+ }
+ }
+ group EBGP-KanREN-AS2495 {
+ type external;
+ description EBGP-KanREN-AS2495;
+ import [ EBGP-REJECT-IMPORT EBGP-KanREN-IMPORT ];
+ family inet {
+ any;
+ }
+ export EBGP-KanREN-EXPORT;
+ neighbor 164.58.245.142 {
+ remove-private;
+ peer-as 2495;
+ }
+ }
+ group EBGP-KanREN-V6 {
+ type external;
+ description EBGP-KanREN-V6;
+ import EBGP-KanREN-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+ export EBGP-KanREN-V6-EXPORT;
+ neighbor 2001:49d0:200b:1000::2 {
+ remove-private;
+ peer-as 2495;
+ }
+ }
+ group EBGP-TR-CPS-V6 {
+ type external;
+ description EBGP-TR-CPS-V6;
+ import EBGP-TR-CPS-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+ export EBGP-TR-CPS-V6-EXPORT;
+ neighbor 2001:468:f000:2348::1 {
+ remove-private;
+ peer-as 11164;
+ }
+ }
+ }
+ msdp {
+ active-source-limit {
+ maximum 10000;
+ }
+ group I2 {
+ peer 164.113.238.209 {
+ local-address 164.113.255.14;
+ }
+ }
+ group AREON {
+ peer 156.110.202.158 {
+ local-address 164.58.199.225;
+ }
+ }
+ group OU {
+ peer 164.58.10.20 {
+ local-address 164.58.199.225;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface lo0.0 {
+ link-protection;
+ }
+ interface fxp0.0 {
+ disable;
+ }
+ interface xe-0/0/1.148;
+ interface xe-1/0/0.136 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$-6dYgJGiH.5GU5Fn/OBX7N-s4ZUjkmTgoUHqmTQ" start-time "2011-6-26.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/1/1.148 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$JhZikP5F3/t5TtO1ReKgoaJjqfTzn9pk.T369pu" start-time "2011-6-26.23:50:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/8.0 {
+ authentication {
+ md5 7 key "$9$9cMvC0BEcleMXcSX-VwJZ36/9u1hSrKWxBISevWx7" start-time "2011-6-16.23:30:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/3/0.0 {
+ authentication {
+ md5 7 key "$9$MkpW7-wYoaGiY2i.P5/9lKvMxds24JUH-V2aZUHk" start-time "2011-6-15.22:55:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/3/3.0 {
+ authentication {
+ md5 7 key "$9$JhZikP5F3/t5TtO1ReKgoaJjqfTzn9pk.T369pu" start-time "2011-6-15.23:08:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/3/8.0 {
+ authentication {
+ md5 7 key "$9$yL5rM87-wsgJ-dJDikQzEcSyvLNdbY4Z8Xds24ZG"; ## SECRET-DATA
+ }
+ }
+ interface xe-1/0/1.171 {
+ authentication {
+ md5 7 key "$9$VbbgoGDkqPQDjQn/C1I7-dV2aUjH.fzoJjqmfzF"; ## SECRET-DATA
+ }
+ }
+ interface xe-1/0/1.183 {
+ authentication {
+ md5 7 key "$9$VbbgoGDkqPQDjQn/C1I7-dV2aUjH.fzoJjqmfzF"; ## SECRET-DATA
+ }
+ }
+ interface ae0.116 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/2/0.70 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$iHP5FnCAu1n61hSrLXGDjimT369t0I5Q6Ap0IR"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/3/6.70 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ export IPV6-EXPORT-FROM-BGPV6-TO-OSPFV3;
+ area 0.0.0.0 {
+ interface xe-0/1/1.148;
+ interface ae0.116;
+ interface xe-1/0/0.136;
+ interface ge-0/3/6.70 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/2/0.70 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/3/8.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/1.183 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/3/0.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/8.0 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/1/1.148;
+ interface ge-0/2/8.0;
+ interface ge-0/3/0.0;
+ interface ge-0/3/3.0;
+ interface ge-0/3/6.70;
+ interface ge-0/3/8.0;
+ interface xe-1/0/0.136;
+ interface xe-1/0/1.171;
+ interface xe-1/0/1.183;
+ interface xe-1/2/0.70;
+ interface ae0.116;
+ interface lo0.0;
+ }
+ pim {
+ nonstop-routing {
+ disable;
+ }
+ rp {
+ local {
+ address 164.113.255.14;
+ }
+ }
+ interface xe-0/1/1.148 {
+ mode sparse;
+ version 2;
+ }
+ interface ae0.116 {
+ mode sparse;
+ version 2;
+ }
+ }
+ l2circuit {
+ neighbor 164.58.199.230 {
+ interface xe-1/1/1.496 {
+ virtual-circuit-id 496;
+ description NOAA-MPLS-TO-NORMAN1;
+ mtu 9000;
+ }
+ interface xe-1/1/1.2519 {
+ virtual-circuit-id 2519;
+ mtu 9000;
+ }
+ }
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface xe-1/0/0;
+ interface xe-0/1/1;
+ interface xe-0/1/0;
+ interface xe-1/2/0;
+ interface ge-0/3/6;
+ }
+}
+policy-options {
+ prefix-list DENY-ALL {
+ 0.0.0.0/0;
+ }
+ prefix-list DEFAULT-ROUTE {
+ 0.0.0.0/0;
+ }
+ prefix-list NAT-WEATHER-SVR-PERMIT {
+ 164.113.224.0/19;
+ 205.120.0.0/13;
+ 216.38.80.0/24;
+ 216.38.95.0/24;
+ }
+ prefix-list RE-PREFIXES {
+ 129.15.0.0/16;
+ 129.15.0.0/17;
+ 129.15.40.0/24;
+ 129.15.128.0/17;
+ 129.244.0.0/16;
+ 139.78.0.0/16;
+ 147.97.0.0/17;
+ 147.97.128.0/19;
+ 147.97.192.0/18;
+ 150.208.97.0/24;
+ 156.110.0.0/16;
+ 157.142.0.0/16;
+ 164.58.0.0/16;
+ 192.31.83.0/24;
+ 192.35.96.0/23;
+ 192.35.98.0/24;
+ 192.78.4.0/24;
+ 192.135.141.0/24;
+ 192.146.206.0/24;
+ 192.173.32.0/20;
+ 192.173.48.0/22;
+ 192.198.4.0/22;
+ 192.203.164.0/24;
+ 192.206.65.0/24;
+ 192.231.56.0/24;
+ 192.234.12.0/23;
+ 198.11.4.0/22;
+ 198.17.223.0/24;
+ 198.102.159.0/24;
+ 198.178.194.0/24;
+ 198.183.248.0/23;
+ 198.187.154.0/24;
+ 198.204.126.0/24;
+ 198.207.222.0/24;
+ 199.120.0.0/21;
+ 199.120.8.0/22;
+ 199.164.253.0/24;
+ 199.181.88.0/22;
+ 199.245.163.0/24;
+ 199.245.164.0/23;
+ 199.245.166.0/24;
+ 204.61.0.0/21;
+ 204.61.8.0/22;
+ 204.61.12.0/23;
+ 204.126.2.0/23;
+ 204.126.186.0/23;
+ 204.126.188.0/22;
+ 204.154.112.0/21;
+ 205.143.136.0/21;
+ 205.143.216.0/21;
+ }
+ prefix-list EBGP-IPV4-NEIGHBORS {
+ 38.104.198.69/32;
+ 64.57.21.17/32;
+ 137.164.131.133/32;
+ 137.164.131.213/32;
+ 137.164.131.217/32;
+ 164.58.12.254/32;
+ 164.58.199.114/32;
+ 164.58.245.86/32;
+ 164.58.245.142/32;
+ 164.113.254.249/32;
+ 164.113.255.13/32;
+ }
+ prefix-list MARTIANS-IPV4 {
+ 0.0.0.0/8;
+ 10.0.0.0/8;
+ 127.0.0.0/8;
+ 169.254.0.0/16;
+ 172.16.0.0/12;
+ 192.0.0.0/24;
+ 192.0.2.0/24;
+ 192.168.0.0/16;
+ 198.18.0.0/15;
+ 198.51.100.0/24;
+ 203.0.113.0/24;
+ 224.0.0.0/4;
+ 240.0.0.0/4;
+ }
+ prefix-list TELEMATE-CUSTOMERS {
+ 156.110.46.96/30;
+ 156.110.47.32/29;
+ 156.110.54.16/30;
+ 156.110.59.48/29;
+ 156.110.62.180/30;
+ 164.58.23.64/26;
+ 164.58.176.44/30;
+ 164.58.243.208/28;
+ }
+ policy-statement COMMODITY-PREFIXES-LIST {
+ term prefixes {
+ from {
+ route-filter 66.186.144.0/20 exact;
+ route-filter 129.15.0.0/16 exact;
+ route-filter 129.244.0.0/16 exact;
+ route-filter 139.78.0.0/16 exact;
+ route-filter 156.110.0.0/16 exact;
+ route-filter 157.142.0.0/16 exact;
+ route-filter 162.58.0.0/16 exact;
+ route-filter 164.58.0.0/16 exact;
+ route-filter 174.77.146.0/24 exact;
+ route-filter 192.31.83.0/24 exact;
+ route-filter 192.35.96.0/24 exact;
+ route-filter 192.35.98.0/24 exact;
+ route-filter 192.78.4.0/24 exact;
+ route-filter 192.135.141.0/24 exact;
+ route-filter 192.146.206.0/24 exact;
+ route-filter 192.149.244.0/24 exact;
+ route-filter 192.150.147.0/24 exact;
+ route-filter 192.153.53.0/24 exact;
+ route-filter 192.198.4.0/22 exact;
+ route-filter 192.203.164.0/24 exact;
+ route-filter 192.206.65.0/24 exact;
+ route-filter 192.231.3.0/24 exact;
+ route-filter 192.231.56.0/24 exact;
+ route-filter 192.234.12.0/24 exact;
+ route-filter 192.234.13.0/24 exact;
+ route-filter 198.11.4.0/24 exact;
+ route-filter 198.11.5.0/24 exact;
+ route-filter 198.11.6.0/24 exact;
+ route-filter 198.11.7.0/24 exact;
+ route-filter 198.17.223.0/24 exact;
+ route-filter 198.102.159.0/24 exact;
+ route-filter 198.178.194.0/24 exact;
+ route-filter 198.183.248.0/23 exact;
+ route-filter 198.187.154.0/24 exact;
+ route-filter 198.203.153.0/24 exact;
+ route-filter 198.204.126.0/24 exact;
+ route-filter 198.207.222.0/24 exact;
+ route-filter 199.27.8.0/21 exact;
+ route-filter 199.120.0.0/21 exact;
+ route-filter 199.120.8.0/22 exact;
+ route-filter 199.164.253.0/24 exact;
+ route-filter 199.181.88.0/24 exact;
+ route-filter 199.181.89.0/24 exact;
+ route-filter 199.184.200.0/22 exact;
+ route-filter 199.190.128.0/23 exact;
+ route-filter 199.223.171.0/24 exact;
+ route-filter 199.245.163.0/24 exact;
+ route-filter 199.245.164.0/24 exact;
+ route-filter 199.245.165.0/24 exact;
+ route-filter 199.245.166.0/24 exact;
+ route-filter 199.248.134.0/23 exact;
+ route-filter 204.29.164.0/24 exact;
+ route-filter 204.61.0.0/21 exact;
+ route-filter 204.61.8.0/22 exact;
+ route-filter 204.61.12.0/23 exact;
+ route-filter 204.62.16.0/21 exact;
+ route-filter 204.62.24.0/22 exact;
+ route-filter 204.63.217.0/24 exact;
+ route-filter 204.63.218.0/24 exact;
+ route-filter 204.87.64.0/18 exact;
+ route-filter 204.87.241.0/24 exact;
+ route-filter 204.107.242.0/24 exact;
+ route-filter 204.126.138.0/23 exact;
+ route-filter 204.126.144.0/23 exact;
+ route-filter 204.126.162.0/23 exact;
+ route-filter 204.126.186.0/23 exact;
+ route-filter 204.126.188.0/24 exact;
+ route-filter 204.126.189.0/24 exact;
+ route-filter 204.126.190.0/24 exact;
+ route-filter 204.126.191.0/24 exact;
+ route-filter 204.154.112.0/21 exact;
+ route-filter 205.143.136.0/21 exact;
+ route-filter 205.143.216.0/21 exact;
+ route-filter 205.153.220.0/22 exact;
+ route-filter 205.235.88.0/23 exact;
+ route-filter 206.61.156.0/24 exact;
+ route-filter 206.202.192.0/18 exact;
+ route-filter 206.202.208.0/24 exact;
+ route-filter 206.203.81.0/24 exact;
+ route-filter 208.8.54.0/24 exact;
+ route-filter 192.173.32.0/19 orlonger;
+ route-filter 192.35.97.0/24 exact;
+ route-filter 204.63.222.0/24 exact;
+ route-filter 129.15.0.0/17 exact;
+ route-filter 129.15.128.0/17 exact;
+ route-filter 64.112.240.0/20 exact;
+ route-filter 152.123.8.0/21 exact;
+ route-filter 147.97.160.0/19 exact;
+ route-filter 204.137.224.0/20 exact;
+ route-filter 199.253.0.0/21 exact;
+ route-filter 199.253.9.0/24 exact;
+ route-filter 199.253.8.0/24 exact;
+ route-filter 147.97.96.0/19 exact;
+ route-filter 204.108.2.0/24 exact;
+ route-filter 204.108.3.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement COMMODITY-PREFIXES-PLUS-AREON {
+ term prefixes {
+ from {
+ route-filter 64.112.240.0/20 orlonger;
+ route-filter 66.186.144.0/20 orlonger;
+ route-filter 69.65.160.0/19 orlonger;
+ route-filter 74.117.168.0/22 orlonger;
+ route-filter 74.122.220.0/22 orlonger;
+ route-filter 129.15.0.0/16 orlonger;
+ route-filter 129.244.0.0/16 orlonger;
+ route-filter 130.184.0.0/16 orlonger;
+ route-filter 139.78.0.0/16 orlonger;
+ route-filter 144.30.0.0/16 orlonger;
+ route-filter 144.167.0.0/16 orlonger;
+ route-filter 147.97.0.0/17 orlonger;
+ route-filter 147.97.128.0/19 orlonger;
+ route-filter 147.97.192.0/18 orlonger;
+ route-filter 156.110.0.0/16 orlonger;
+ route-filter 157.142.0.0/16 orlonger;
+ route-filter 159.35.0.0/16 orlonger;
+ route-filter 159.150.0.0/16 orlonger;
+ route-filter 159.150.2.0/24 orlonger;
+ route-filter 161.31.0.0/16 orlonger;
+ route-filter 162.58.0.0/16 orlonger;
+ route-filter 164.58.0.0/16 orlonger;
+ route-filter 174.77.146.0/24 orlonger;
+ route-filter 192.31.83.0/24 orlonger;
+ route-filter 192.35.96.0/24 orlonger;
+ route-filter 192.35.98.0/24 orlonger;
+ route-filter 192.78.4.0/24 orlonger;
+ route-filter 192.101.185.0/24 orlonger;
+ route-filter 192.104.173.0/24 orlonger;
+ route-filter 192.104.174.0/24 orlonger;
+ route-filter 192.135.141.0/24 orlonger;
+ route-filter 192.146.206.0/24 orlonger;
+ route-filter 192.149.244.0/24 orlonger;
+ route-filter 192.150.147.0/24 orlonger;
+ route-filter 192.153.53.0/24 orlonger;
+ route-filter 192.173.32.0/19 orlonger;
+ route-filter 192.173.32.0/23 orlonger;
+ route-filter 192.173.48.0/24 orlonger;
+ route-filter 192.198.4.0/22 orlonger;
+ route-filter 192.203.164.0/24 orlonger;
+ route-filter 192.206.65.0/24 orlonger;
+ route-filter 192.231.3.0/24 orlonger;
+ route-filter 192.231.56.0/24 orlonger;
+ route-filter 192.234.12.0/24 orlonger;
+ route-filter 192.234.13.0/24 orlonger;
+ route-filter 198.11.4.0/24 orlonger;
+ route-filter 198.11.5.0/24 orlonger;
+ route-filter 198.11.6.0/24 orlonger;
+ route-filter 198.11.7.0/24 orlonger;
+ route-filter 198.16.16.0/21 orlonger;
+ route-filter 198.16.24.0/24 orlonger;
+ route-filter 198.17.223.0/24 orlonger;
+ route-filter 198.102.159.0/24 orlonger;
+ route-filter 198.178.194.0/24 orlonger;
+ route-filter 198.183.248.0/23 orlonger;
+ route-filter 198.187.154.0/24 orlonger;
+ route-filter 198.203.153.0/24 orlonger;
+ route-filter 198.204.126.0/24 orlonger;
+ route-filter 198.207.222.0/24 orlonger;
+ route-filter 199.27.8.0/21 orlonger;
+ route-filter 199.120.0.0/21 orlonger;
+ route-filter 199.120.8.0/22 orlonger;
+ route-filter 199.164.253.0/24 orlonger;
+ route-filter 199.181.88.0/24 orlonger;
+ route-filter 199.181.89.0/24 orlonger;
+ route-filter 199.184.200.0/22 orlonger;
+ route-filter 199.184.205.0/24 orlonger;
+ route-filter 199.190.128.0/23 orlonger;
+ route-filter 199.223.171.0/24 orlonger;
+ route-filter 199.245.163.0/24 orlonger;
+ route-filter 199.245.164.0/24 orlonger;
+ route-filter 199.245.165.0/24 orlonger;
+ route-filter 199.245.166.0/24 orlonger;
+ route-filter 199.248.134.0/23 orlonger;
+ route-filter 204.29.164.0/24 orlonger;
+ route-filter 204.61.0.0/21 orlonger;
+ route-filter 204.61.8.0/22 orlonger;
+ route-filter 204.61.12.0/23 orlonger;
+ route-filter 204.62.16.0/21 orlonger;
+ route-filter 204.62.24.0/22 orlonger;
+ route-filter 204.63.217.0/24 orlonger;
+ route-filter 204.63.218.0/24 orlonger;
+ route-filter 204.87.64.0/18 orlonger;
+ route-filter 204.87.241.0/24 orlonger;
+ route-filter 204.107.242.0/24 orlonger;
+ route-filter 204.126.138.0/23 orlonger;
+ route-filter 204.126.144.0/23 orlonger;
+ route-filter 204.126.162.0/23 orlonger;
+ route-filter 204.126.186.0/23 orlonger;
+ route-filter 204.126.188.0/24 orlonger;
+ route-filter 204.126.189.0/24 orlonger;
+ route-filter 204.126.190.0/24 orlonger;
+ route-filter 204.126.191.0/24 orlonger;
+ route-filter 204.154.112.0/21 orlonger;
+ route-filter 205.143.136.0/21 orlonger;
+ route-filter 205.143.216.0/21 orlonger;
+ route-filter 205.153.220.0/22 orlonger;
+ route-filter 205.235.88.0/23 orlonger;
+ route-filter 206.61.156.0/24 orlonger;
+ route-filter 206.202.192.0/18 orlonger;
+ route-filter 206.202.208.0/24 orlonger;
+ route-filter 206.203.81.0/24 orlonger;
+ route-filter 208.8.54.0/24 orlonger;
+ route-filter 208.90.104.0/21 orlonger;
+ route-filter 204.63.222.0/24 exact;
+ route-filter 147.97.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement DEFAULT-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term ACCEPT-ALL-ELSE {
+ then accept;
+ }
+ }
+ policy-statement DEFAULT-ONLY-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-I2-CPS-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ community set CPS-DEPREFER;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-I2-CPS-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11317;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-I2-RE-EXPORT {
+ term STEP-1 {
+ from policy RE-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-I2-RE-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11317;
+ accept;
+ }
+ }
+ inactive: term STEP-2 {
+ from {
+ prefix-list NAT-WEATHER-SVR-PERMIT;
+ }
+ then accept;
+ }
+ inactive: term STEP-3 {
+ from {
+ route-filter 198.146.108.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-KanREN-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-KanREN-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:2495;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-KanREN-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2620:0:2b20::/48 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-KanREN-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:2495;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NLR-PACKETNET-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-PLUS-AREON;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NLR-PACKETNET-IMPORT {
+ term OU-TO-IU {
+ from {
+ route-filter 149.165.128.0/17 exact;
+ }
+ then reject;
+ }
+ term STEP-1 {
+ then {
+ local-preference 101;
+ community set 5078:19401;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NLR-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2607:f4f0::/32 exact;
+ route-filter 2604:fc00::/32 exact;
+ route-filter 2620:e8::/48 exact;
+ route-filter 2620:1e::/48 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NLR-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:19401;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NTR-ASHBURN-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NTR-CHICAGO-EXPORT {
+ inactive: term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NTR-CHICAGO-IMPORT {
+ inactive: term STEP-1 {
+ then {
+ community set 5078:11164;
+ community set 5078:588;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NTR-CPS-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2620:0:2b20::/48 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NTR-CPS-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11164;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NTR-LOAS-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ community add Netflix-Prepend;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NTR-LOAS-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11164;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NTR-LOSANGLES-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-EXPORT {
+ term STEP-1 {
+ from {
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-IMPORT {
+ term STEP-1 {
+ from {
+ route-filter 0.0.0.0/0 through 0.0.0.0/32;
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement EBGP-TCC-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11897;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-TCC-IMPORT-PREFIX {
+ term prefixes {
+ from {
+ route-filter 129.244.0.0/16 exact;
+ }
+ }
+ }
+ policy-statement EBGP-TCCL-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:17236;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-TCCL-IMPORT-PREFIX {
+ term prefixes {
+ from {
+ route-filter 198.207.222.0/24 exact;
+ }
+ }
+ }
+ policy-statement EBGP-TR-CPS-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2620:0:2b20::/48 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-TR-CPS-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:11164;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-TU-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:8036;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-TU-IMPORT-PREFIX {
+ term prefixes {
+ from {
+ route-filter 198.178.194.0/24 exact;
+ route-filter 199.245.163.0/24 exact;
+ route-filter 199.245.164.0/24 exact;
+ route-filter 199.245.165.0/24 exact;
+ route-filter 199.245.166.0/24 exact;
+ }
+ }
+ }
+ policy-statement IPV6-EXPORT-FROM-BGPV6-TO-OSPFV3 {
+ term STEP-1 {
+ from {
+ family inet6;
+ protocol bgp;
+ neighbor 2001:468:f000:212e::1;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement NEXT-HOP-SELF {
+ term 1 {
+ from protocol bgp;
+ then {
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ policy-statement RE-PREFIXES-LIST {
+ term prefixes {
+ from {
+ route-filter 129.15.0.0/16 exact;
+ route-filter 129.15.0.0/17 exact;
+ route-filter 129.15.40.0/24 exact;
+ route-filter 129.15.128.0/17 exact;
+ route-filter 129.244.0.0/16 exact;
+ route-filter 139.78.0.0/16 exact;
+ route-filter 150.208.97.0/24 exact;
+ route-filter 156.110.0.0/16 exact;
+ route-filter 157.142.0.0/16 exact;
+ route-filter 164.58.0.0/16 exact;
+ route-filter 192.31.83.0/24 exact;
+ route-filter 192.35.96.0/23 exact;
+ route-filter 192.35.98.0/24 exact;
+ route-filter 192.78.4.0/24 exact;
+ route-filter 192.135.141.0/24 exact;
+ route-filter 192.146.206.0/24 exact;
+ route-filter 192.173.32.0/20 exact;
+ route-filter 192.173.48.0/22 exact;
+ route-filter 192.198.4.0/22 exact;
+ route-filter 192.203.164.0/24 exact;
+ route-filter 192.206.65.0/24 exact;
+ route-filter 192.231.56.0/24 exact;
+ route-filter 192.234.12.0/23 exact;
+ route-filter 198.11.4.0/22 exact;
+ route-filter 198.17.223.0/24 exact;
+ route-filter 198.102.159.0/24 exact;
+ route-filter 198.178.194.0/24 exact;
+ route-filter 198.183.248.0/23 exact;
+ route-filter 198.187.154.0/24 exact;
+ route-filter 198.204.126.0/24 exact;
+ route-filter 198.207.222.0/24 exact;
+ route-filter 199.120.0.0/21 exact;
+ route-filter 199.120.8.0/22 exact;
+ route-filter 199.164.253.0/24 exact;
+ route-filter 199.181.88.0/22 exact;
+ route-filter 199.245.163.0/24 exact;
+ route-filter 199.245.164.0/23 exact;
+ route-filter 199.245.166.0/24 exact;
+ route-filter 204.61.0.0/21 exact;
+ route-filter 204.61.8.0/22 exact;
+ route-filter 204.61.12.0/23 exact;
+ route-filter 204.126.2.0/23 exact;
+ route-filter 204.126.186.0/23 exact;
+ route-filter 204.126.188.0/22 exact;
+ route-filter 204.154.112.0/21 exact;
+ route-filter 205.143.136.0/21 exact;
+ route-filter 205.143.216.0/21 exact;
+ route-filter 147.97.160.0/19 exact;
+ route-filter 147.97.224.0/20 exact;
+ route-filter 204.137.224.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add TULSACORE5;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add TULSACORE5;
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ community 5078:11164 members 5078:11164;
+ community 5078:11317 members 5078:11317;
+ community 5078:11897 members 5078:11897;
+ community 5078:17236 members 5078:17236;
+ community 5078:174 members 5078:174;
+ community 5078:19401 members 5078:19401;
+ community 5078:2495 members 5078:2495;
+ community 5078:576 members 5078:576;
+ community 5078:588 members 5078:588;
+ community 5078:593 members 5078:593;
+ community 5078:8036 members 5078:8036;
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community CPS-DEPREFER members [ 65001:15169 65001:22822 ];
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community NORMANCORE1 members 5078:230;
+ community NORMANCORE2 members 5078:231;
+ community Netflix-Prepend members 65001:2906;
+ community OKCCCCORE1 members 5078:233;
+ community OKCCORE1 members 5078:211;
+ community OKCCORE2 members 5078:212;
+ community OKCCORE3 members 5078:213;
+ community OKCCORE4 members 5078:214;
+ community OKCCORE5 members 5078:215;
+ community OKCCORE6 members 5078:216;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community PTCCORE1 members 5078:234;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community STILLWATERCORE1 members 5078:232;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community TULSACORE1 members 5078:221;
+ community TULSACORE2 members 5078:222;
+ community TULSACORE3 members 5078:223;
+ community TULSACORE4 members 5078:224;
+ community TULSACORE5 members 5078:225;
+ community TULSACORE6 members 5078:226;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+ community no-advertise members 5078:no-advertise;
+ as-path 11317 11317;
+ as-path 11164 11164;
+ as-path 19401 19401;
+ as-path 40581 40581;
+ as-path 11537 11537;
+ as-path 293 293;
+ as-path 174 174;
+ as-path 21357 21357;
+ as-path 209 209;
+ as-path 17236 17236;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term MSDP-ALLOW {
+ from {
+ source-address {
+ 164.58.10.20/32;
+ 156.110.202.158/32;
+ 164.113.255.13/32;
+ }
+ port msdp;
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+routing-instances {
+ VPLS-OU-2500 {
+ description VPLS-OU-TULSA;
+ instance-type vpls;
+ vlan-id all;
+ interface ge-0/2/5.2500;
+ interface ge-0/2/5.2501;
+ route-distinguisher 164.58.199.225:2501;
+ vrf-target target:5078:2501;
+ protocols {
+ vpls {
+ mac-table-size {
+ 10000;
+ packet-action drop;
+ }
+ interface ge-0/2/5.2500;
+ no-tunnel-services;
+ site Tulsa1 {
+ site-identifier 4;
+ interface ge-0/2/5.2500;
+ interface ge-0/2/5.2501;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template IP-V4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+bridge-domains {
+ inactive: VLAN-496-NOAA {
+ description VLAN-496-NOAA;
+ domain-type bridge;
+ vlan-id 496;
+ interface xe-1/1/1.496;
+ routing-interface irb.469;
+ }
+}
+{master}
+# grnoc-mon at TULSA-CORE5-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.229 ae0.116 Full 164.58.199.221
+# 164.58.245.174 ge-0/2/8.0 Full 164.58.199.130
+# 164.58.245.186 ge-0/3/0.0 Full 164.58.199.138
+# 164.58.246.82 ge-0/3/6.70 Full 164.58.199.95
+# 164.58.245.218 ge-0/3/8.0 Full 164.58.199.134
+# 164.58.15.149 xe-0/1/1.148 Full 164.58.199.224
+# 164.58.15.137 xe-1/0/0.136 Full 164.58.199.222
+# 164.58.244.42 xe-1/0/1.183 Full 164.58.199.142
+# 164.58.246.254 xe-1/2/0.70 Full 164.58.199.193
+#
+# {master}
Index: core5.okc.onenet.net
===================================================================
--- core5.okc.onenet.net (revision 11662)
+++ core5.okc.onenet.net (working copy)
@@ -1,1510 +1,2445 @@
-!RANCID-CONTENT-TYPE: cisco
-!
-!Chassis type: WS-C6509 - a WS-C6509 router
-!CPU: R7000
-!
-!Memory: main 983008K/65536K
-!Memory: nvram 1917K
-!Memory: bootflash 65536K
-!Processor board ID SAL08249ZAN
-!
-!Image: Compiled: Thu 25-Jan-07 00:37 by tinhuang
-!Image: disk0:s72033-adventerprisek9_wan-mz.122-18.SXE6b.bin
-!
-!ROM Bootstrap: Version 12.2(14r)S9, RELEASE SOFTWARE (fc1)
-!show inventory output:
-!NAME: "WS-C6509", DESCR: "Cisco Systems Catalyst 6500 9-slot Chassis System"
-!PID: WS-C6509 , VID: , SN: SAL08249ZAN
-!
-!NAME: "WS-C6K-VTT 1", DESCR: "VTT FRU 1"
-!PID: WS-C6K-VTT , VID: , SN: SMT0821C622
-!
-!NAME: "WS-C6K-VTT 2", DESCR: "VTT FRU 2"
-!PID: WS-C6K-VTT , VID: , SN: SMT0821C603
-!
-!NAME: "WS-C6K-VTT 3", DESCR: "VTT FRU 3"
-!PID: WS-C6K-VTT , VID: , SN: SMT0821G864
-!
-!NAME: "WS-C6000-CL 1", DESCR: "C6K Clock FRU 1"
-!PID: WS-C6000-CL , VID: , SN: SMT0818H369
-!
-!NAME: "WS-C6000-CL 2", DESCR: "C6K Clock FRU 2"
-!PID: WS-C6000-CL , VID: , SN: SMT0818H230
-!
-!NAME: "1", DESCR: "WS-X6704-10GE CEF720 4 port 10-Gigabit Ethernet Rev. 2.6"
-!PID: WS-X6704-10GE , VID: V02, SN: SAL1206FSQ5
-!
-!NAME: "switching engine sub-module of 1", DESCR: "WS-F6700-CFC Centralized Forwarding Card Rev. 4.0"
-!PID: WS-F6700-CFC , VID: V05, SN: SAL1206FURP
-!
-!NAME: "Te1/1", DESCR: "10Gbase-LR"
-!PID: TXN174312013F21 , VID: , SN: IJM1128M1AG
-!
-!NAME: "Te1/2", DESCR: "10Gbase-SR"
-!PID: TRE2000EN-SWC-11 , VID: , SN: ONT124701Q6
-!
-!NAME: "2", DESCR: "WS-X6582-2PA 2 port adapter Enhanced FlexWAN Rev. 1.3"
-!PID: WS-X6582-2PA , VID: V03, SN: JAB083101D2
-!
-!NAME: "module in bay 0, slot 2", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32468745
-!
-!NAME: "module in bay 1, slot 2", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32460784
-!
-!NAME: "3", DESCR: "WS-X6582-2PA 2 port adapter Enhanced FlexWAN Rev. 2.4"
-!PID: WS-X6582-2PA , VID: V08, SN: JAE1228OJDR
-!
-!NAME: "module in bay 0, slot 3", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32460727
-!
-!NAME: "module in bay 1, slot 3", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32460762
-!
-!NAME: "4", DESCR: "WS-X6582-2PA 2 port adapter Enhanced FlexWAN Rev. 2.3"
-!PID: WS-X6582-2PA , VID: V07, SN: JAE1041D16W
-!
-!NAME: "module in bay 0, slot 4", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32460821
-!
-!NAME: "module in bay 1, slot 4", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 33022829
-!
-!NAME: "5", DESCR: "WS-SUP720-BASE 2 ports Supervisor Engine 720 Rev. 3.1"
-!PID: WS-SUP720-BASE , VID: , SN: SAD083308MY
-!
-!NAME: "msfc sub-module of 5", DESCR: "WS-SUP720 MSFC3 Daughterboard Rev. 2.3"
-!PID: WS-SUP720 , VID: , SN: SAD083203XZ
-!
-!NAME: "switching engine sub-module of 5", DESCR: "WS-F6K-PFC3BXL Policy Feature Card 3 Rev. 1.8"
-!PID: WS-F6K-PFC3BXL , VID: V01, SN: SAL1109J6GU
-!
-!NAME: "6", DESCR: "WS-SUP720-BASE 2 ports Supervisor Engine 720 Rev. 3.1"
-!PID: WS-SUP720-BASE , VID: , SN: SAD08180850
-!
-!NAME: "msfc sub-module of 6", DESCR: "WS-SUP720 MSFC3 Daughterboard Rev. 2.2"
-!PID: WS-SUP720 , VID: , SN: SAD0818029Y
-!
-!NAME: "switching engine sub-module of 6", DESCR: "WS-F6K-PFC3BXL Policy Feature Card 3 Rev. 1.8"
-!PID: WS-F6K-PFC3BXL , VID: V01, SN: SAL1107GTB8
-!
-!NAME: "Gi6/1", DESCR: "1000BaseSX"
-!PID: QFBR-5798L , VID: , SN: AGS081605MJ
-!
-!NAME: "7", DESCR: "WS-X6582-2PA 2 port adapter Enhanced FlexWAN Rev. 1.3"
-!PID: WS-X6582-2PA , VID: V03, SN: JAB0831020L
-!
-!NAME: "module in bay 0, slot 7", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 30969944
-!
-!NAME: "PS 1 PWR-4000-DC", DESCR: "DC power supply, 4000 watt 1"
-!PID: PWR-4000-DC , VID: , SN: QCS0829204X
-!
-!NAME: "PS 2 PWR-4000-DC", DESCR: "DC power supply, 4000 watt 2"
-!PID: PWR-4000-DC , VID: , SN: QCS08292059
-!
-!
-!end show inventory
-!show inventory raw output:
-!NAME: "WS-C6509", DESCR: "Cisco Systems Catalyst 6500 9-slot Chassis System"
-!PID: WS-C6509 , VID: , SN: SAL08249ZAN
-!
-!NAME: "Backplane", DESCR: "Cisco Systems Catalyst 6500 9-slot backplane"
-!PID: , VID: , SN:
-!
-!NAME: "Container of VTT 1", DESCR: "Container of VTT"
-!PID: , VID: , SN:
-!
-!NAME: "WS-C6K-VTT 1", DESCR: "VTT FRU 1"
-!PID: WS-C6K-VTT , VID: , SN: SMT0821C622
-!
-!NAME: "VTT 1 OK Sensor", DESCR: "VTT FRU 1 OK Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "VTT 1 outlet temperature Sensor", DESCR: "VTT FRU 1 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Container of VTT 2", DESCR: "Container of VTT"
-!PID: , VID: , SN:
-!
-!NAME: "WS-C6K-VTT 2", DESCR: "VTT FRU 2"
-!PID: WS-C6K-VTT , VID: , SN: SMT0821C603
-!
-!NAME: "VTT 2 OK Sensor", DESCR: "VTT FRU 2 OK Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "VTT 2 outlet temperature Sensor", DESCR: "VTT FRU 2 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Container of VTT 3", DESCR: "Container of VTT"
-!PID: , VID: , SN:
-!
-!NAME: "WS-C6K-VTT 3", DESCR: "VTT FRU 3"
-!PID: WS-C6K-VTT , VID: , SN: SMT0821G864
-!
-!NAME: "VTT 3 OK Sensor", DESCR: "VTT FRU 3 OK Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "VTT 3 outlet temperature Sensor", DESCR: "VTT FRU 3 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Container of Clock 1", DESCR: "Container of Clock"
-!PID: , VID: , SN:
-!
-!NAME: "WS-C6000-CL 1", DESCR: "C6K Clock FRU 1"
-!PID: WS-C6000-CL , VID: , SN: SMT0818H369
-!
-!NAME: "Clock 1 OK Sensor", DESCR: "C6K Clock FRU 1 OK Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Clock 1 In Using Sensor", DESCR: "C6K Clock FRU 1 In Using Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Container of Clock 2", DESCR: "Container of Clock"
-!PID: , VID: , SN:
-!
-!NAME: "WS-C6000-CL 2", DESCR: "C6K Clock FRU 2"
-!PID: WS-C6000-CL , VID: , SN: SMT0818H230
-!
-!NAME: "Clock 2 OK Sensor", DESCR: "C6K Clock FRU 2 OK Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Clock 2 In Using Sensor", DESCR: "C6K Clock FRU 2 In Using Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Sensor for counting number of OK VTTs", DESCR: "Sensor for counting number of OK VTTs"
-!PID: , VID: , SN:
-!
-!NAME: "Sensor for counting number of OK Clocks", DESCR: "Sensor for counting number of OK Clocks"
-!PID: , VID: , SN:
-!
-!NAME: "PS 1 Absent High Power Usage Sensor", DESCR: "PS 1 Absent High Power Usage Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 1", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "1", DESCR: "WS-X6704-10GE CEF720 4 port 10-Gigabit Ethernet Rev. 2.6"
-!PID: WS-X6704-10GE , VID: V02, SN: SAL1206FSQ5
-!
-!NAME: "Switching Engine Container 1", DESCR: "Switching Engine Container"
-!PID: , VID: , SN:
-!
-!NAME: "switching engine sub-module of 1", DESCR: "WS-F6700-CFC Centralized Forwarding Card Rev. 4.0"
-!PID: WS-F6700-CFC , VID: V05, SN: SAL1206FURP
-!
-!NAME: "CPU of Sub-Module 1 CFC Card", DESCR: "CPU of Centralized Forwarding Card"
-!PID: , VID: , SN:
-!
-!NAME: "10-Gigabit Port Container 1/1", DESCR: "10-Gigabit Port Container"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/1", DESCR: "10Gbase-LR"
-!PID: TXN174312013F21 , VID: , SN: IJM1128M1AG
-!
-!NAME: "Te1/1 Module Temperature Sensor", DESCR: "TenGigabitEthernet1/1 Module Temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/1 Supply Voltage Sensor", DESCR: "TenGigabitEthernet1/1 Supply Voltage Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/1 Bias Current Sensor", DESCR: "TenGigabitEthernet1/1 Bias Current Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/1 Transmit Power Sensor", DESCR: "TenGigabitEthernet1/1 Transmit Power Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/1 Receive Power Sensor", DESCR: "TenGigabitEthernet1/1 Receive Power Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "10-Gigabit Port Container 1/2", DESCR: "10-Gigabit Port Container"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/2", DESCR: "10Gbase-SR"
-!PID: TRE2000EN-SWC-11 , VID: , SN: ONT124701Q6
-!
-!NAME: "Te1/2 Module Temperature Sensor", DESCR: "TenGigabitEthernet1/2 Module Temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/2 Supply Voltage Sensor", DESCR: "TenGigabitEthernet1/2 Supply Voltage Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/2 Bias Current Sensor", DESCR: "TenGigabitEthernet1/2 Bias Current Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/2 Transmit Power Sensor", DESCR: "TenGigabitEthernet1/2 Transmit Power Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Te1/2 Receive Power Sensor", DESCR: "TenGigabitEthernet1/2 Receive Power Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "10-Gigabit Port Container 1/3", DESCR: "10-Gigabit Port Container"
-!PID: , VID: , SN:
-!
-!NAME: "10-Gigabit Port Container 1/4", DESCR: "10-Gigabit Port Container"
-!PID: , VID: , SN:
-!
-!NAME: "module 1 power-output-fail Sensor", DESCR: "module 1 power-output-fail Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 1 insufficient cooling Sensor", DESCR: "module 1 insufficient cooling Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 1 outlet temperature Sensor", DESCR: "module 1 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 1 inlet temperature Sensor", DESCR: "module 1 inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 2", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "2", DESCR: "WS-X6582-2PA 2 port adapter Enhanced FlexWAN Rev. 1.3"
-!PID: WS-X6582-2PA , VID: V03, SN: JAB083101D2
-!
-!NAME: "CPU 0 of 2", DESCR: "CPU 0 of WS-X6582-2PA"
-!PID: , VID: , SN:
-!
-!NAME: "CPU 1 of 2", DESCR: "CPU 1 of WS-X6582-2PA"
-!PID: , VID: , SN:
-!
-!NAME: "bay 0 of 2", DESCR: "Port Adapter Card Container"
-!PID: , VID: , SN:
-!
-!NAME: "module in bay 0, slot 2", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32468745
-!
-!NAME: "Serial2/0/0", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "Serial2/0/1", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "bay 1 of 2", DESCR: "Port Adapter Card Container"
-!PID: , VID: , SN:
-!
-!NAME: "module in bay 1, slot 2", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32460784
-!
-!NAME: "Serial2/1/0", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "Serial2/1/1", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "module 2 power-output-fail Sensor", DESCR: "module 2 power-output-fail Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 2 insufficient cooling Sensor", DESCR: "module 2 insufficient cooling Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 2 outlet temperature Sensor", DESCR: "module 2 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 2 inlet temperature Sensor", DESCR: "module 2 inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 2 device-1 temperature Sensor", DESCR: "module 2 device-1 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 2 device-2 temperature Sensor", DESCR: "module 2 device-2 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 3", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "3", DESCR: "WS-X6582-2PA 2 port adapter Enhanced FlexWAN Rev. 2.4"
-!PID: WS-X6582-2PA , VID: V08, SN: JAE1228OJDR
-!
-!NAME: "CPU 0 of 3", DESCR: "CPU 0 of WS-X6582-2PA"
-!PID: , VID: , SN:
-!
-!NAME: "CPU 1 of 3", DESCR: "CPU 1 of WS-X6582-2PA"
-!PID: , VID: , SN:
-!
-!NAME: "bay 0 of 3", DESCR: "Port Adapter Card Container"
-!PID: , VID: , SN:
-!
-!NAME: "module in bay 0, slot 3", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32460727
-!
-!NAME: "Serial3/0/0", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "Serial3/0/1", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "bay 1 of 3", DESCR: "Port Adapter Card Container"
-!PID: , VID: , SN:
-!
-!NAME: "module in bay 1, slot 3", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32460762
-!
-!NAME: "Serial3/1/0", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "Serial3/1/1", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "module 3 power-output-fail Sensor", DESCR: "module 3 power-output-fail Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 3 insufficient cooling Sensor", DESCR: "module 3 insufficient cooling Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 3 outlet temperature Sensor", DESCR: "module 3 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 3 inlet temperature Sensor", DESCR: "module 3 inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 3 device-1 temperature Sensor", DESCR: "module 3 device-1 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 3 device-2 temperature Sensor", DESCR: "module 3 device-2 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 4", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "4", DESCR: "WS-X6582-2PA 2 port adapter Enhanced FlexWAN Rev. 2.3"
-!PID: WS-X6582-2PA , VID: V07, SN: JAE1041D16W
-!
-!NAME: "CPU 0 of 4", DESCR: "CPU 0 of WS-X6582-2PA"
-!PID: , VID: , SN:
-!
-!NAME: "CPU 1 of 4", DESCR: "CPU 1 of WS-X6582-2PA"
-!PID: , VID: , SN:
-!
-!NAME: "bay 0 of 4", DESCR: "Port Adapter Card Container"
-!PID: , VID: , SN:
-!
-!NAME: "module in bay 0, slot 4", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 32460821
-!
-!NAME: "Serial4/0/0", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "Serial4/0/1", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "bay 1 of 4", DESCR: "Port Adapter Card Container"
-!PID: , VID: , SN:
-!
-!NAME: "module in bay 1, slot 4", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 33022829
-!
-!NAME: "Serial4/1/0", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "Serial4/1/1", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "module 4 power-output-fail Sensor", DESCR: "module 4 power-output-fail Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 4 insufficient cooling Sensor", DESCR: "module 4 insufficient cooling Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 4 outlet temperature Sensor", DESCR: "module 4 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 4 inlet temperature Sensor", DESCR: "module 4 inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 4 device-1 temperature Sensor", DESCR: "module 4 device-1 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 4 device-2 temperature Sensor", DESCR: "module 4 device-2 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 5", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "5", DESCR: "WS-SUP720-BASE 2 ports Supervisor Engine 720 Rev. 3.1"
-!PID: WS-SUP720-BASE , VID: , SN: SAD083308MY
-!
-!NAME: "MSFC Container 5", DESCR: "MSFC Container"
-!PID: , VID: , SN:
-!
-!NAME: "msfc sub-module of 5", DESCR: "WS-SUP720 MSFC3 Daughterboard Rev. 2.3"
-!PID: WS-SUP720 , VID: , SN: SAD083203XZ
-!
-!NAME: "module 5 RP outlet temperature Sensor", DESCR: "module 5 RP outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 RP inlet temperature Sensor", DESCR: "module 5 RP inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "CPU of Routing Processor 5", DESCR: "CPU of Routing Processor"
-!PID: , VID: , SN:
-!
-!NAME: "Switching Engine Container 5", DESCR: "Switching Engine Container"
-!PID: , VID: , SN:
-!
-!NAME: "switching engine sub-module of 5", DESCR: "WS-F6K-PFC3BXL Policy Feature Card 3 Rev. 1.8"
-!PID: WS-F6K-PFC3BXL , VID: V01, SN: SAL1109J6GU
-!
-!NAME: "module 5 EARL outlet temperature Sensor", DESCR: "module 5 EARL outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 EARL inlet temperature Sensor", DESCR: "module 5 EARL inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Gigabit Port Container 5/1", DESCR: "Gigabit Port Container"
-!PID: , VID: , SN:
-!
-!NAME: "Gigabit Port Container 5/2", DESCR: "Gigabit Port Container"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 power-output-fail Sensor", DESCR: "Supervisor module 5 power-output-fail Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 insufficient cooling Sensor", DESCR: "Supervisor module 5 insufficient cooling Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 fan-upgrade required Sensor", DESCR: "Supervisor module 5 fan-upgrade required Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 outlet temperature Sensor", DESCR: "Supervisor module 5 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 inlet temperature Sensor", DESCR: "Supervisor module 5 inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 device-1 temperature Sensor", DESCR: "Supervisor module 5 device-1 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 device-2 temperature Sensor", DESCR: "Supervisor module 5 device-2 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 asic 1 temperature Sensor", DESCR: "Supervisor module 5 asic 1 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 asic 2 temperature Sensor", DESCR: "Supervisor module 5 asic 2 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 asic 3 temperature Sensor", DESCR: "Supervisor module 5 asic 3 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 asic 4 temperature Sensor", DESCR: "Supervisor module 5 asic 4 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 asic 5 temperature Sensor", DESCR: "Supervisor module 5 asic 5 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 5 asic 6 temperature Sensor", DESCR: "Supervisor module 5 asic 6 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "CPU of Switching Processor 5", DESCR: "CPU of Switching Processor"
-!PID: , VID: , SN:
-!
-!NAME: "Gi5/2 10/100/1000BaseT", DESCR: "10/100/1000BaseT"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 6", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "6", DESCR: "WS-SUP720-BASE 2 ports Supervisor Engine 720 Rev. 3.1"
-!PID: WS-SUP720-BASE , VID: , SN: SAD08180850
-!
-!NAME: "MSFC Container 6", DESCR: "MSFC Container"
-!PID: , VID: , SN:
-!
-!NAME: "msfc sub-module of 6", DESCR: "WS-SUP720 MSFC3 Daughterboard Rev. 2.2"
-!PID: WS-SUP720 , VID: , SN: SAD0818029Y
-!
-!NAME: "module 6 RP outlet temperature Sensor", DESCR: "module 6 RP outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 RP inlet temperature Sensor", DESCR: "module 6 RP inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "CPU of Routing Processor 6", DESCR: "CPU of Routing Processor"
-!PID: , VID: , SN:
-!
-!NAME: "Switching Engine Container 6", DESCR: "Switching Engine Container"
-!PID: , VID: , SN:
-!
-!NAME: "switching engine sub-module of 6", DESCR: "WS-F6K-PFC3BXL Policy Feature Card 3 Rev. 1.8"
-!PID: WS-F6K-PFC3BXL , VID: V01, SN: SAL1107GTB8
-!
-!NAME: "module 6 EARL outlet temperature Sensor", DESCR: "module 6 EARL outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 EARL inlet temperature Sensor", DESCR: "module 6 EARL inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Gigabit Port Container 6/1", DESCR: "Gigabit Port Container"
-!PID: , VID: , SN:
-!
-!NAME: "Gi6/1", DESCR: "1000BaseSX"
-!PID: QFBR-5798L , VID: , SN: AGS081605MJ
-!
-!NAME: "Gigabit Port Container 6/2", DESCR: "Gigabit Port Container"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 power-output-fail Sensor", DESCR: "Supervisor module 6 power-output-fail Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 insufficient cooling Sensor", DESCR: "Supervisor module 6 insufficient cooling Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 fan-upgrade required Sensor", DESCR: "Supervisor module 6 fan-upgrade required Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 outlet temperature Sensor", DESCR: "Supervisor module 6 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 inlet temperature Sensor", DESCR: "Supervisor module 6 inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 device-1 temperature Sensor", DESCR: "Supervisor module 6 device-1 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 device-2 temperature Sensor", DESCR: "Supervisor module 6 device-2 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 asic 1 temperature Sensor", DESCR: "Supervisor module 6 asic 1 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 asic 2 temperature Sensor", DESCR: "Supervisor module 6 asic 2 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 asic 3 temperature Sensor", DESCR: "Supervisor module 6 asic 3 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 asic 4 temperature Sensor", DESCR: "Supervisor module 6 asic 4 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 asic 5 temperature Sensor", DESCR: "Supervisor module 6 asic 5 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 6 asic 6 temperature Sensor", DESCR: "Supervisor module 6 asic 6 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "CPU of Switching Processor 6", DESCR: "CPU of Switching Processor"
-!PID: , VID: , SN:
-!
-!NAME: "Gi6/2 10/100/1000BaseT", DESCR: "10/100/1000BaseT"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 7", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "7", DESCR: "WS-X6582-2PA 2 port adapter Enhanced FlexWAN Rev. 1.3"
-!PID: WS-X6582-2PA , VID: V03, SN: JAB0831020L
-!
-!NAME: "CPU 0 of 7", DESCR: "CPU 0 of WS-X6582-2PA"
-!PID: , VID: , SN:
-!
-!NAME: "CPU 1 of 7", DESCR: "CPU 1 of WS-X6582-2PA"
-!PID: , VID: , SN:
-!
-!NAME: "bay 0 of 7", DESCR: "Port Adapter Card Container"
-!PID: , VID: , SN:
-!
-!NAME: "module in bay 0, slot 7", DESCR: "Serial T3+ Port Adapter"
-!PID: PA-2T3+ , VID: , SN: 30969944
-!
-!NAME: "Serial7/0/0", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "Serial7/0/1", DESCR: "PODS3+ Serial Port"
-!PID: , VID: , SN:
-!
-!NAME: "bay 1 of 7", DESCR: "Port Adapter Card Container"
-!PID: , VID: , SN:
-!
-!NAME: "module 7 power-output-fail Sensor", DESCR: "module 7 power-output-fail Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 7 insufficient cooling Sensor", DESCR: "module 7 insufficient cooling Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 7 outlet temperature Sensor", DESCR: "module 7 outlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 7 inlet temperature Sensor", DESCR: "module 7 inlet temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 7 device-1 temperature Sensor", DESCR: "module 7 device-1 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "module 7 device-2 temperature Sensor", DESCR: "module 7 device-2 temperature Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 8", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "Physical Slot 9", DESCR: "Cisco Systems Catalyst 6500 9-slot Physical Slot"
-!PID: , VID: , SN:
-!
-!NAME: "Container of Fan FRU 1", DESCR: "Container of Fan FRU"
-!PID: , VID: , SN:
-!
-!NAME: "fan-tray 1", DESCR: "Chassis fan-tray 1"
-!PID: , VID: , SN:
-!
-!NAME: "Fan-tray 1 Status Sensor", DESCR: "Chassis fan-tray 1 Status Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Container of Container of Power Supply", DESCR: "Container of Container of Power Supply"
-!PID: , VID: , SN:
-!
-!NAME: "Container of Power Supply 1", DESCR: "Container of Power Supply"
-!PID: , VID: , SN:
-!
-!NAME: "PS 1 PWR-4000-DC", DESCR: "DC power supply, 4000 watt 1"
-!PID: PWR-4000-DC , VID: , SN: QCS0829204X
-!
-!NAME: "PS 1 Fan Sensor", DESCR: "Power Supply Fan Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "PS 1 Output Sensor", DESCR: "Power Supply Output Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "PS 1 Input Sensor", DESCR: "Power Supply Input Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "PS 1 Fan Incompatible Sensor", DESCR: "Power Supply Fan Incompatible Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "Container of Power Supply 2", DESCR: "Container of Power Supply"
-!PID: , VID: , SN:
-!
-!NAME: "PS 2 PWR-4000-DC", DESCR: "DC power supply, 4000 watt 2"
-!PID: PWR-4000-DC , VID: , SN: QCS08292059
-!
-!NAME: "PS 2 Fan Sensor", DESCR: "Power Supply Fan Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "PS 2 Output Sensor", DESCR: "Power Supply Output Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "PS 2 Input Sensor", DESCR: "Power Supply Input Sensor"
-!PID: , VID: , SN:
-!
-!NAME: "PS 2 Fan Incompatible Sensor", DESCR: "Power Supply Fan Incompatible Sensor"
-!PID: , VID: , SN:
-!
-!
-!end show inventory
-!show cdp neighbor:
-!end show cdp neighbor
-!
-!BootFlash: BOOT variable = disk0:,12;
-!BootFlash: CONFIG_FILE variable does not exist
-!BootFlash: BOOTLDR variable =
-!BootFlash: Configuration register is 0x2102
-!BootFlash: Standby is up
-!BootFlash: Standby has 983008K/65536K bytes of memory.
-!BootFlash: Standby BOOT variable = disk0:,12;
-!BootFlash: Standby CONFIG_FILE variable does not exist
-!BootFlash: Standby BOOTLDR variable =
-!BootFlash: Standby Configuration register is 0x2102
-!
-!BootFlash: BOOT variable = disk0:,12;
-!BootFlash: CONFIG_FILE variable does not exist
-!BootFlash: BOOTLDR variable =
-!BootFlash: Configuration register is 0x2102
-!BootFlash: Standby is up
-!BootFlash: Standby has 983008K/65536K bytes of memory.
-!BootFlash: Standby BOOT variable = disk0:,12;
-!BootFlash: Standby CONFIG_FILE variable does not exist
-!BootFlash: Standby BOOTLDR variable =
-!BootFlash: Standby Configuration register is 0x2102
-!
-!show udld neighbors:
-!Port Device Name Device ID Port ID Neighbor State
-!---- ----------- --------- ------- --------------
-!end show udld neighbors
-!
-! Last configuration change at 12:31:11 extende Fri May 6 2011 by von
-! NVRAM config last updated at 08:25:07 extende Wed Apr 20 2011 by todd
-!
-config-register 0x2102
-upgrade fpd auto
-version 12.2
-service nagle
-no service pad
-service timestamps debug datetime localtime show-timezone
-service timestamps log datetime localtime show-timezone
-service password-encryption
-service counters max age 10
-!
-hostname onenethub-okc5
-!
-boot system disk0:
-logging snmp-authfail
-logging buffered 100000 debugging
-!enable secret <removed>
-!enable password <removed>
-!
-!username lastresort password <removed>
-aaa new-model
-aaa authentication login default group radius local
-aaa authentication login CONSOLE none
-aaa authorization exec default group radius if-authenticated
-aaa authorization exec CONSOLE none
-!
-aaa session-id common
-clock timezone CST -6
-clock summer-time extended_CST recurring
-ip subnet-zero
-no ip source-route
-!
-!
-!
-ip flow-cache timeout active 1
-ip ftp username router
-!ip ftp password <removed>
-no ip bootp server
-ip multicast-routing
-ip domain-name onenet.net
-ip name-server 164.58.253.10
-vtp domain onenet
-vtp mode transparent
-mls ip cef load-sharing full
-mls ip multicast flow-stat-timer 9
-mls flow ip interface-full
-no mls flow ipv6
-mls nde sender version 5
-no mls qos rewrite ip dscp
-mls qos
-no mls acl tcam share-global
-mls cef error action freeze
-no scripting tcl init
-no scripting tcl encdir
-!
-!
-!
-!
-!
-!
-!
-!
-!
-!
-redundancy
- mode sso
- main-cpu
- auto-sync startup-config
- auto-sync running-config
- auto-sync bootvar
- auto-sync standard
-spanning-tree mode pvst
-no spanning-tree optimize bpdu transmission
-diagnostic cns publish cisco.cns.device.diag_results
-diagnostic cns subscribe cisco.cns.device.diag_commands
-!
-vlan internal allocation policy ascending
-vlan access-log ratelimit 2000
-!
-vlan 24,52
-!
-vlan 80
- name Cisco-to-Juniper-Interconnect
-!
-class-map match-all OneNet
- match qos-group 30
-class-map match-all OSU_Okmulgee
- match access-group name OSU_Okmulgee
-class-map match-any Priority
- match ip dscp ef
- match ip dscp af41
-class-map match-all I1
- match not qos-group 20
- match not qos-group 30
-class-map match-all I2
- match qos-group 20
-!
-!
-policy-map CustomerIn
- class I1
- set dscp default
-policy-map OSU_Okmulgee
- class OSU_Okmulgee
- police cir 20000000 bc 625000 be 625000 conform-action transmit exceed-action drop
-policy-map OneNetOut
- class Priority
- priority percent 75
- class class-default
- fair-queue
- random-detect dscp-based
-policy-map CustomerOut
- class Priority
- priority percent 75
- class class-default
- fair-queue
- random-detect dscp-based
-!
-!
-!
-interface Loopback1
- ip address 164.58.10.25 255.255.255.255
-!
-interface TenGigabitEthernet1/1
- description Cisco-to-Juniper-OKC-CORE1-MX9600-INTERCONNECT
- switchport
- switchport access vlan 80
- switchport trunk encapsulation dot1q
- switchport trunk allowed vlan 80
- switchport mode trunk
- mtu 9216
- no ip address
-!
-interface TenGigabitEthernet1/2
- description Link to CC1(Ten 1/4)
- mtu 9000
- ip address 164.58.244.70 255.255.255.252
-!
-interface TenGigabitEthernet1/3
- no ip address
- shutdown
-!
-interface TenGigabitEthernet1/4
- description Link to Core1
- no ip address
- shutdown
-!
-interface Serial2/0/0
- description OneNetHub-Tishomingo T3 (45Mbps) - CIR1009
- ip address 164.58.244.101 255.255.255.252
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 90
- service-policy output OneNetOut
-!
-interface Serial2/0/1
- description OneNetHub-McAlester - T3 (45Mbps) - CIR0953
- ip address 164.58.244.65 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 10
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial2/1/0
- no ip address
- no ip redirects
- no ip proxy-arp
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 10
-!
-interface Serial2/1/1
- description OneNetHub-Idabel T3 (45Mps) - CIR0212
- ip address 164.58.244.53 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 10
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial3/0/0
- description OneNetHub-Weatherford T3 (45Mbps) CIR1031
- ip address 164.58.244.113 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 50
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial3/0/1
- description OneNetHub-Sayre T3 (45Mbps)- CIR0001029
- ip address 164.58.244.93 255.255.255.252
- no ip redirects
- no ip unreachables
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 10
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial3/1/0
- description OneNetHub-Chickasha T3 (45Mbps) - CIR1036
- ip address 164.58.244.21 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 10
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial3/1/1
- mtu 9000
- no ip address
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 50
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial4/0/0
- description OneNetHub-Weatherford T3 (45Mbps)-2nd- CIR3609
- ip address 164.58.245.117 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 50
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial4/0/1
- mtu 9000
- no ip address
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 50
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial4/1/0
- description OneNetHub-Woodward - T3 (45Mbps)
- ip address 164.58.244.121 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- ip ospf cost 100
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 50
- clock source internal
- service-policy output OneNetOut
- hold-queue 4096 in
- hold-queue 4096 out
-!
-interface Serial4/1/1
- description Link-to Wilburton Hub-DS3-CIR1001
- ip address 164.58.244.117 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 10
- clock source internal
- service-policy output OneNetOut
-!
-interface GigabitEthernet5/1
- description OKC5 to CC1 Gig Link CIR0004335
- mtu 9000
- ip address 164.58.244.182 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- ip ospf cost 50
- shutdown
- hold-queue 4096 in
- hold-queue 4096 out
-!
-interface GigabitEthernet5/2
- description Onenethub-Norman2-NAGIOS
- switchport
- switchport trunk encapsulation dot1q
- switchport trunk allowed vlan 24,52
- switchport mode trunk
- mtu 9216
- no ip address
-!
-interface GigabitEthernet6/1
- description OKC5 to CC2 Gig Link CIR0004346
- mtu 9000
- ip address 164.58.244.186 255.255.255.252
- ip pim sparse-mode
- ip route-cache flow
- ip ospf cost 50
-!
-interface GigabitEthernet6/2
- description Ardmore Hub GE - CIR3800
- ip address 164.58.245.153 255.255.255.252
- ip pim sparse-mode
- shutdown
-!
-interface Serial7/0/0
- mtu 9000
- no ip address
- ip pim sparse-mode
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 10
- clock source internal
- service-policy output OneNetOut
-!
-interface Serial7/0/1
- description OneNetHub-Muskogee - T3 (45Mbps)-CIR0003635
- ip address 164.58.245.65 255.255.255.252
- ip route-cache flow
- shutdown
- dsu bandwidth 44210
- framing c-bit
- cablelength 10
- clock source internal
- service-policy output OneNetOut
-!
-interface Vlan1
- no ip address
- shutdown
-!
-interface Vlan24
- description Vlan for Norman2-NAGIOS
- ip address 164.58.244.177 255.255.255.252
- ip pim dr-priority 10
- ip pim sparse-mode
- ip ospf priority 255
- shutdown
-!
-interface Vlan52
- description Onenethub-Norman2-NAGIOS
- ip address 156.110.99.249 255.255.255.248
-!
-interface Vlan80
- description Cisco-to-Juniper-OKC-CORE1-MX9600-INTERCONNECT
- mtu 9000
- ip address 164.58.15.81 255.255.255.252
-!
-router ospf 1
- router-id 164.58.10.25
- log-adjacency-changes
- nsf
- network 164.58.10.25 0.0.0.0 area 0
- network 164.58.15.80 0.0.0.3 area 0
- network 164.58.244.120 0.0.0.3 area 0
- network 164.58.244.180 0.0.0.3 area 0
- network 164.58.244.184 0.0.0.3 area 0
- network 164.58.244.0 0.0.0.255 area 0
- network 164.58.245.40 0.0.0.3 area 0
- network 164.58.245.116 0.0.0.3 area 0
- network 164.58.245.152 0.0.0.3 area 0
- default-information originate always metric 1 metric-type 1
-!
-router bgp 5078
- bgp router-id 164.58.10.25
- no bgp log-neighbor-changes
- bgp graceful-restart restart-time 120
- bgp graceful-restart stalepath-time 360
- bgp graceful-restart
- neighbor OKC5-CLIENTS peer-group
- neighbor OKC5-CLIENTS remote-as 5078
-! neighbor OKC5-CLIENTS password <removed>
- neighbor OKC5-CLIENTS update-source Loopback1
- neighbor OKC5-CLIENTS timers 5 15
- neighbor 164.58.10.9 remote-as 5078
- neighbor 164.58.10.9 description iBGP peer with CoreCat1
-! neighbor 164.58.10.9 password <removed>
- neighbor 164.58.10.9 update-source Loopback1
- neighbor 164.58.10.10 remote-as 5078
- neighbor 164.58.10.10 description iBGP peer with CoreCat2
- neighbor 164.58.10.10 update-source Loopback1
- neighbor 164.58.10.12 remote-as 5078
- neighbor 164.58.10.12 description iBGP peer Stillwater
- neighbor 164.58.10.12 update-source Loopback1
- neighbor 164.58.10.13 remote-as 5078
- neighbor 164.58.10.13 description iBGP peer OKC13
- neighbor 164.58.10.13 update-source Loopback1
- neighbor 164.58.10.16 remote-as 5078
- neighbor 164.58.10.16 description iBGP peer OKC14
- neighbor 164.58.10.16 update-source Loopback1
- neighbor 164.58.10.17 remote-as 5078
- neighbor 164.58.10.17 description iBGP peer TulsaCore1
- neighbor 164.58.10.17 update-source Loopback1
- neighbor 164.58.10.18 remote-as 5078
- neighbor 164.58.10.18 description iBGP peer TulsaCore2
- neighbor 164.58.10.18 update-source Loopback1
- neighbor 164.58.10.20 remote-as 5078
- neighbor 164.58.10.20 description iBGP peer Norman1
- neighbor 164.58.10.20 update-source Loopback1
- neighbor 164.58.10.26 remote-as 5078
- neighbor 164.58.10.26 description iBGP peer OKC6
- neighbor 164.58.10.26 update-source Loopback1
- neighbor 164.58.199.10 remote-as 5078
- neighbor 164.58.199.10 description iBGP peer with Ardmore
- neighbor 164.58.199.10 update-source Loopback1
- neighbor 164.58.199.18 remote-as 5078
- neighbor 164.58.199.18 description iBGP peer with Duncan
- neighbor 164.58.199.18 update-source Loopback1
- neighbor 164.58.199.38 remote-as 5078
- neighbor 164.58.199.38 description iBGP peer Weatherford
- neighbor 164.58.199.38 update-source Loopback1
- neighbor 164.58.199.42 peer-group OKC5-CLIENTS
- neighbor 164.58.199.42 description iBGP peer with Langston
- neighbor 164.58.199.58 remote-as 5078
- neighbor 164.58.199.58 description iBGP peer with Woodward
- neighbor 164.58.199.58 update-source Loopback1
- neighbor 164.58.199.82 remote-as 5078
- neighbor 164.58.199.82 update-source Loopback1
- neighbor 164.58.199.86 remote-as 5078
- neighbor 164.58.199.86 description iBGP peer with Wilburton
- neighbor 164.58.199.86 update-source Loopback1
- neighbor 164.58.199.90 remote-as 5078
- neighbor 164.58.199.90 update-source Loopback1
- neighbor 164.58.199.98 remote-as 5078
- neighbor 164.58.199.100 remote-as 5078
- neighbor 164.58.199.100 description iBGP peer Juniper MX480 - Qwest
- neighbor 164.58.199.100 shutdown
- neighbor 164.58.199.100 update-source Loopback1
- neighbor 164.58.199.102 remote-as 5078
- neighbor 164.58.199.102 description iBGP peer with Idabel
- neighbor 164.58.199.102 update-source Loopback1
- neighbor 164.58.199.166 remote-as 5078
- neighbor 164.58.199.166 description iBGP peer with Newcastle Tower
- neighbor 164.58.199.166 update-source Loopback1
- neighbor 164.58.199.178 remote-as 5078
- neighbor 164.58.199.178 description iBGP peer Norman2
- neighbor 164.58.199.178 update-source Loopback1
- neighbor 164.58.199.189 remote-as 5078
- neighbor 164.58.199.189 description iBGP peer with Lawton M120
- neighbor 164.58.199.189 update-source Loopback1
- neighbor 164.58.199.202 remote-as 5078
- neighbor 164.58.199.202 description iBGP peer with Lawton
- neighbor 164.58.199.202 update-source Loopback1
- neighbor 164.58.199.216 remote-as 5078
- neighbor 164.58.199.216 description iBGP peer with OKC-Juniper-M7i-RR
- neighbor 164.58.199.216 update-source Loopback1
- neighbor 164.58.199.226 remote-as 5078
- neighbor 164.58.199.226 description iBGP peer with Tulsa-Juniper-M7i-RR
- neighbor 164.58.199.226 update-source Loopback1
- !
- address-family ipv4
- redistribute connected route-map SetCommConn
- redistribute static route-map SetCommStatic
- neighbor OKC5-CLIENTS activate
- neighbor OKC5-CLIENTS route-reflector-client
- neighbor OKC5-CLIENTS send-community
- neighbor OKC5-CLIENTS filter-list 199 out
- neighbor 164.58.10.9 activate
- neighbor 164.58.10.9 route-reflector-client
- neighbor 164.58.10.9 send-community
- neighbor 164.58.10.10 activate
- neighbor 164.58.10.10 send-community
- neighbor 164.58.10.12 activate
- neighbor 164.58.10.12 soft-reconfiguration inbound
- neighbor 164.58.10.13 activate
- neighbor 164.58.10.13 soft-reconfiguration inbound
- neighbor 164.58.10.16 activate
- neighbor 164.58.10.17 activate
- neighbor 164.58.10.17 send-community
- neighbor 164.58.10.18 activate
- neighbor 164.58.10.18 send-community
- neighbor 164.58.10.20 activate
- neighbor 164.58.10.20 send-community
- neighbor 164.58.10.20 soft-reconfiguration inbound
- neighbor 164.58.10.26 activate
- neighbor 164.58.10.26 filter-list 150 out
- neighbor 164.58.199.10 activate
- neighbor 164.58.199.10 route-reflector-client
- neighbor 164.58.199.10 send-community
- neighbor 164.58.199.10 filter-list 100 out
- neighbor 164.58.199.18 activate
- neighbor 164.58.199.18 send-community
- neighbor 164.58.199.18 filter-list 100 out
- neighbor 164.58.199.38 activate
- neighbor 164.58.199.38 send-community
- neighbor 164.58.199.42 peer-group OKC5-CLIENTS
- neighbor 164.58.199.42 soft-reconfiguration inbound
- neighbor 164.58.199.58 activate
- neighbor 164.58.199.58 route-reflector-client
- neighbor 164.58.199.58 send-community
- neighbor 164.58.199.58 filter-list 160 out
- neighbor 164.58.199.82 activate
- neighbor 164.58.199.82 route-reflector-client
- neighbor 164.58.199.82 send-community
- neighbor 164.58.199.82 filter-list 199 out
- neighbor 164.58.199.86 activate
- neighbor 164.58.199.86 route-reflector-client
- neighbor 164.58.199.86 send-community
- neighbor 164.58.199.86 filter-list 100 out
- neighbor 164.58.199.90 activate
- neighbor 164.58.199.90 route-reflector-client
- neighbor 164.58.199.90 send-community
- neighbor 164.58.199.90 filter-list 100 out
- neighbor 164.58.199.98 activate
- neighbor 164.58.199.98 route-reflector-client
- neighbor 164.58.199.98 send-community
- neighbor 164.58.199.98 filter-list 100 out
- neighbor 164.58.199.100 activate
- neighbor 164.58.199.102 activate
- neighbor 164.58.199.102 route-reflector-client
- neighbor 164.58.199.102 send-community
- neighbor 164.58.199.102 filter-list 100 out
- neighbor 164.58.199.166 activate
- neighbor 164.58.199.166 send-community
- neighbor 164.58.199.166 filter-list 100 out
- neighbor 164.58.199.178 activate
- neighbor 164.58.199.178 route-reflector-client
- neighbor 164.58.199.178 soft-reconfiguration inbound
- neighbor 164.58.199.189 activate
- neighbor 164.58.199.189 send-community
- neighbor 164.58.199.202 activate
- neighbor 164.58.199.202 send-community
- neighbor 164.58.199.216 activate
- neighbor 164.58.199.216 route-reflector-client
- neighbor 164.58.199.226 activate
- neighbor 164.58.199.226 route-reflector-client
- neighbor 164.58.199.226 soft-reconfiguration inbound
- no auto-summary
- no synchronization
- table-map Qppb
- exit-address-family
-!
-ip classless
-!
-ip bgp-community new-format
-ip community-list expanded I1 permit 5078:7...
-ip community-list expanded I1 permit 5078:8...
-ip community-list expanded I2 permit 5078:2...
-ip community-list expanded OneNet permit 5078:1...
-ip as-path access-list 20 deny ^11537
-ip as-path access-list 20 deny ^3549
-ip as-path access-list 20 deny ^7911
-ip as-path access-list 20 deny ^19401
-ip as-path access-list 20 permit .*
-ip as-path access-list 100 permit ^$
-ip as-path access-list 150 permit ^$
-ip as-path access-list 150 permit _65500_
-ip as-path access-list 150 permit _3923_
-ip as-path access-list 150 permit _25776_
-ip as-path access-list 150 permit _17236__
-ip as-path access-list 150 permit _10508_
-ip as-path access-list 150 permit _11537_
-ip as-path access-list 150 permit _65525_
-ip as-path access-list 160 permit ^$
-ip as-path access-list 199 permit ^$
-ip flow-export source Loopback1
-ip flow-export version 5 origin-as
-ip flow-export destination 164.58.253.210 9921
-no ip http server
-ip pim rp-address 164.113.238.210 override
-!
-ip access-list standard VTY_ACL
- permit 129.15.127.96 0.0.0.15
- permit 156.110.31.0 0.0.0.31
- permit 156.110.31.32 0.0.0.15
- permit 164.58.10.0 0.0.0.255
- permit 164.58.233.0 0.0.0.255
- permit 164.58.244.0 0.0.1.255
- permit 164.58.245.0 0.0.0.255
- permit 164.58.250.0 0.0.0.255
- permit 164.58.253.0 0.0.0.255
- permit 164.58.15.0 0.0.0.255
-ip access-list standard any
- permit any
-ip access-list standard rfc1918
- permit 10.0.0.0 0.255.255.255
- permit 172.16.0.0 0.0.15.255
- permit 192.168.0.0 0.0.255.255
-!
-ip access-list extended OKM-227
- deny ip any 139.78.227.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-231
- deny ip any 139.78.231.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-248
- deny ip any 139.78.248.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-249
- deny ip any 139.78.249.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-250
- deny ip any 139.78.250.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-251
- deny ip any 139.78.251.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-252
- deny ip any 139.78.252.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-253
- deny ip any 139.78.253.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-254
- deny ip any 139.78.254.0 0.0.0.255
- permit ip any any
-ip access-list extended OKM-255
- deny ip any 139.78.255.0 0.0.0.255
- permit ip any any
-ip access-list extended OSU_Okmulgee
- permit ip any 139.78.224.0 0.0.7.255
- permit ip any 139.78.248.0 0.0.7.255
-ip access-list extended OSU_Okmulgee_Dorms
- deny ip any 139.78.224.0 0.0.0.255
- deny ip any 139.78.225.0 0.0.0.255
- deny ip any 139.78.226.0 0.0.0.255
- deny ip any 139.78.227.0 0.0.0.127
- deny ip any 139.78.227.128 0.0.0.63
- deny ip any 139.78.228.0 0.0.0.255
- deny ip any 139.78.229.0 0.0.0.255
- deny ip any 139.78.230.0 0.0.0.255
- deny ip any 139.78.231.0 0.0.0.127
- deny ip any 139.78.231.128 0.0.0.63
- deny ip any host 139.78.227.192
- deny ip any host 139.78.231.192
- permit ip any any
-ip access-list extended OSU_Okmulgee_host
- deny ip any host 139.78.230.48
- permit ip any any
-!
-ip radius source-interface Loopback1
-logging event link-status default
-logging source-interface Loopback1
-logging 164.58.253.33
-logging 164.58.253.92
-access-list 1 permit 156.110.31.0 0.0.0.31
-access-list 1 permit 156.110.31.32 0.0.0.15
-access-list 1 permit 164.58.198.0 0.0.1.255
-access-list 1 permit 164.58.200.120 0.0.0.7
-access-list 1 permit 164.58.253.0 0.0.0.255
-access-list 2 permit 164.58.10.0 0.0.0.255
-access-list 2 permit 164.58.198.0 0.0.1.255
-access-list 2 permit 164.58.233.0 0.0.0.255
-access-list 2 permit 164.58.245.0 0.0.0.255
-access-list 2 permit 164.58.248.0 0.0.0.255
-access-list 2 permit 164.58.253.0 0.0.0.255
-access-list 110 deny ip any host 164.58.253.31
-access-list 110 permit ip any any
-!
-route-map Qppb permit 10
- match community I1
- set ip qos-group 10
-!
-route-map Qppb permit 20
- match community I2
- set ip qos-group 20
-!
-route-map Qppb permit 30
- match community OneNet
- set ip qos-group 30
-!
-route-map SetCommConn permit 10
- match ip address rfc1918
- set community 5078:1340
-!
-route-map SetCommConn permit 90
- match ip address any
- set community 5078:1310
-!
-route-map SetCommStatic permit 10
- match ip address rfc1918
- set community 5078:1240
-!
-route-map SetCommStatic permit 90
- match ip address any
- set community 5078:1210
-!
-route-map no-i2 permit 10
- match as-path 20
-!
-!snmp-server community <removed> RO 1
-!snmp-server community <removed> RO 1
-!snmp-server community <removed> RW 1
-!snmp-server community <removed> RO 1
-!snmp-server community <removed> RO 1
-snmp-server trap-source Loopback1
-snmp-server location OKC5
-snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
-snmp-server enable traps bgp
-snmp-server enable traps tty
-snmp-server enable traps frame-relay
-snmp-server enable traps hsrp
-snmp-server enable traps ipmulticast
-snmp-server enable traps msdp
-snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
-snmp-server enable traps rf
-snmp-server enable traps rtr
-snmp-server enable traps syslog
-snmp-server enable traps sonet
-snmp-server enable traps fru-ctrl
-snmp-server enable traps entity
-snmp-server enable traps rsvp
-snmp-server enable traps srp
-snmp-server enable traps flash insertion removal
-snmp-server enable traps envmon fan shutdown supply temperature status
-snmp-server enable traps mpls traffic-eng
-snmp-server enable traps mpls ldp
-snmp-server enable traps mpls vpn
-!snmp-server host 164.58.253.92 <removed>
-tacacs-server host 164.58.253.221
-tacacs-server directed-request
-!tacacs-server key <removed>
-!
-!radius-server key <removed>
-radius-server source-ports 1645-1646
-!
-control-plane
-!
-!
-!
-dial-peer cor custom
-!
-!
-!
-rtr responder
-banner motd ^CCCC
-+----------------------------------------------------------------------------+
-| |
-| Managed by Oklahoma State Regents for Higher Education |
-| Oklahoma Network for Education Enrichment (ONENET) |
-| |
-| *** Unauthorized Use or Access Prohibited *** |
-| |
-| For more information, contact: |
-| |
-| Oklahoma State Regents for Higher Education |
-| Educational Telecommunications Network -- ONENET |
-| 888-566-3638 |
-| info at onenet.net |
-| |
-+----------------------------------------------------------------------------+
-
-
-^C
-!
-line con 0
-! password <removed>
-line vty 0 4
- access-class VTY_ACL in
- exec-timeout 10080 0
-! password <removed>
- transport input ssh
-line vty 5 14
- access-class VTY_ACL in
- exec-timeout 10080 0
-! password <removed>
- transport input ssh
-line vty 15
- access-class VTY_ACL in
- transport input ssh
-!
-ntp update-calendar
-ntp peer 164.58.10.1
-no cns aaa enable
-end
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at OKC-CORE5-MX480-RE0> show system commit
+# 2013-08-19 13:32:31 CDT by jeremyt via cli commit synchronize
+# 2013-08-15 12:29:46 CDT by joe via cli commit synchronize
+# 2013-08-14 18:20:38 CDT by josh via cli commit synchronize
+# 2013-08-14 18:16:23 CDT by josh via cli commit synchronize
+# 2013-08-14 18:07:50 CDT by josh via cli commit synchronize
+# 2013-08-14 18:00:55 CDT by josh via cli commit synchronize
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# FPC 1 Intake OK
+# FPC 1 Exhaust A OK
+# FPC 1 Exhaust B OK
+# FPC 1 QX 0 TSen OK
+# FPC 1 QX 0 Chip OK
+# FPC 1 LU 0 TCAM TSen OK
+# FPC 1 LU 0 TCAM Chip OK
+# FPC 1 LU 0 TSen OK
+# FPC 1 LU 0 Chip OK
+# FPC 1 MQ 0 TSen OK
+# FPC 1 MQ 0 Chip OK
+# FPC 1 QX 1 TSen OK
+# FPC 1 QX 1 Chip OK
+# FPC 1 LU 1 TCAM TSen OK
+# FPC 1 LU 1 TCAM Chip OK
+# FPC 1 LU 1 TSen OK
+# FPC 1 LU 1 Chip OK
+# FPC 1 MQ 1 TSen OK
+# FPC 1 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+# Slot 1 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN115B68DAFB MX480 Midplane
+# Midplane REV 05 710-017414 ABAC1781 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBE6538 Front Panel Display
+# PEM 0 Rev 03 740-027736 QCS1021T0AZ DC 2.4kW Power Entry Module
+# PEM 1 Rev 03 740-027736 QCS1021T0A2 DC 2.4kW Power Entry Module
+# PEM 2 Rev 03 740-027736 QCS1021T0CS DC 2.4kW Power Entry Module
+# PEM 3 Rev 03 740-027736 QCS1021T06D DC 2.4kW Power Entry Module
+# Routing Engine 0 REV 15 740-013063 9012009907 RE-S-2000
+# Routing Engine 1 REV 15 740-013063 9012009525 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV5166 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV4922 Enhanced MX SCB
+# FPC 0 REV 15 750-031088 YZ0239 MPC Type 2 3D Q
+# CPU REV 06 711-030884 ZA0742 MPC PMB 2G
+# MIC 0 REV 25 750-028387 YS1913 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 T10K73536 XFP-10G-SR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 T10K73511 XFP-10G-SR
+# MIC 1 REV 23 750-028392 YV0440 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU3J1 SFP-SX
+# Xcvr 1 REV 01 740-011614 07T415601799 SFP-LX10
+# Xcvr 2 REV 01 740-011614 PJ70YV4 SFP-LX10
+# Xcvr 3 REV 02 740-011613 PJH284G SFP-SX
+# Xcvr 4 REV 01 740-031851 AM1041SU0BK SFP-SX
+# Xcvr 5 REV 01 740-011614 PJ70YVG SFP-LX10
+# Xcvr 6 REV 01 740-011614 97T406001257 SFP-LX10
+# Xcvr 7 REV 01 740-011614 PJ70Z85 SFP-LX10
+# Xcvr 8 REV 01 740-011614 PJ70ZE7 SFP-LX10
+# Xcvr 9 REV 02 740-013111 A476896 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A476801 SFP-T
+# Xcvr 1 REV 02 740-013111 A476804 SFP-T
+# Xcvr 2 REV 02 740-013111 A476844 SFP-T
+# Xcvr 3 REV 02 740-013111 A476876 SFP-T
+# Xcvr 4 REV 02 740-013111 A475227 SFP-T
+# Xcvr 5 REV 02 740-013111 A476779 SFP-T
+# Xcvr 6 REV 02 740-013111 A476895 SFP-T
+# Xcvr 8 REV 02 740-013111 A476820 SFP-T
+# Xcvr 9 REV 02 740-013111 A476870 SFP-T
+# QXM 0 REV 05 711-028408 YZ8614 MPC QXM
+# QXM 1 REV 05 711-028408 YZ8601 MPC QXM
+# FPC 1 REV 14 750-031088 YH8401 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YH9567 MPC PMB 2G
+# MIC 0 REV 26 750-028387 YT7108 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 03 740-014289 T10K73345 XFP-10G-SR
+# Xcvr 1 REV 02 740-014291 T10H49855 XFP-10G-ZR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 1 REV 01 740-031833 T10L15850 XFP-10G-LR
+# MIC 1 REV 23 750-028392 YV0233 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-013111 A475783 SFP-T
+# Xcvr 1 REV 02 740-013111 A476795 SFP-T
+# Xcvr 2 REV 02 740-013111 A476869 SFP-T
+# Xcvr 3 REV 02 740-013111 A476474 SFP-T
+# Xcvr 4 REV 02 740-013111 A476865 SFP-T
+# Xcvr 5 REV 02 740-013111 A476819 SFP-T
+# Xcvr 6 REV 02 740-013111 A476918 SFP-T
+# Xcvr 7 REV 02 740-013111 A476880 SFP-T
+# Xcvr 8 REV 02 740-013111 A476892 SFP-T
+# Xcvr 9 REV 02 740-013111 A476915 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 02 740-011613 PJH1YHF SFP-SX
+# Xcvr 1 REV 01 740-031851 AM1041SU3J5 SFP-SX
+# Xcvr 2 REV 01 740-011614 PJ70Z9N SFP-LX10
+# Xcvr 3 REV 01 740-031850 PLS2KN5 SFP-LX10
+# Xcvr 4 REV 01 740-031849 97T601000339 SFP-LH
+# Xcvr 5 REV 02 740-013111 A476922 SFP-T
+# Xcvr 9 REV 02 740-013111 A476881 SFP-T
+# QXM 0 REV 05 711-028408 YF4558 MPC QXM
+# QXM 1 REV 05 711-028408 YF4670 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ABAC1781 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBE6538 CRAFT-MX480-S
+# PEM 0 Rev 03 740-027736 QCS1021T0AZ PWR-MX480-2400-DC-S
+# PEM 1 Rev 03 740-027736 QCS1021T0A2 PWR-MX480-2400-DC-S
+# PEM 2 Rev 03 740-027736 QCS1021T0CS PWR-MX480-2400-DC-S
+# PEM 3 Rev 03 740-027736 QCS1021T06D PWR-MX480-2400-DC-S
+# Routing Engine 0 REV 15 740-013063 9012009907 RE-S-2000-4096-S
+# Routing Engine 1 REV 15 740-013063 9012009525 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV5166 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV4922 SCBE-MX-S
+# FPC 0 REV 15 750-031088 YZ0239 MX-MPC2-3D-Q
+# MIC 0 REV 25 750-028387 YS1913 MIC-3D-4XGE-XFP
+# MIC 1 REV 23 750-028392 YV0440 MIC-3D-20GE-SFP
+# FPC 1 REV 14 750-031088 YH8401 MX-MPC2-3D-Q
+# MIC 0 REV 26 750-028387 YT7108 MIC-3D-4XGE-XFP
+# MIC 1 REV 23 750-028392 YV0233 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012009907
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012009525
+#
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis scb
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis sfm detail
+# grnoc-mon at OKC-CORE5-MX480-RE0> show chassis ssb
+# grnoc-mon at OKC-CORE5-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:8b:30
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+#
+# {master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show version
+# Hostname: OKC-CORE5-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Servi!
ces [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at OKC-CORE5-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 7714668
+# -rw-r--r-- 1 root field 5877433 Sep 21 2012 JFLOWX
+# -rw-r--r-- 1 root field 796702 Sep 21 2012 JFLOWX.0.gz
+# -rw-r--r-- 1 root field 810287 Sep 21 2012 JFLOWX.1.gz
+# -rw-r--r-- 1 root field 816331 Sep 21 2012 JFLOWX.2.gz
+# -rw-r--r-- 1 root field 828905 Sep 21 2012 JFLOWX.3.gz
+# -rw-r--r-- 1 root field 816122 Sep 21 2012 JFLOWX.4.gz
+# -rw-r--r-- 1 root field 817018 Sep 21 2012 JFLOWX.5.gz
+# -rw-r--r-- 1 root field 805361 Sep 21 2012 JFLOWX.6.gz
+# -rw-r--r-- 1 root field 805868 Sep 21 2012 JFLOWX.7.gz
+# -rw-r--r-- 1 root field 804306 Sep 21 2012 JFLOWX.8.gz
+# -rw-r--r-- 1 eng field 513412 Jul 21 2012 UPGRADE-RSI
+# -rw-r--r-- 1 root field 30 Dec 3 2010 ex.txt
+# drwxr-xr-x 2 root field 512 Dec 3 2010 gres-tp/
+# -rw-r--r-- 1 root field 4 Apr 14 00:45 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Dec 3 2010 install/
+# -rw-r--r-- 1 root field 348823558 Mar 22 2011 jbundle-10.4R2.6-domestic.tgz
+# -rw-r--r-- 1 root field 349730789 Mar 27 2011 jbundle-10.4R3.4-domestic.tgz
+# -rw-r--r-- 1 root field 350497882 Nov 20 2011 jbundle-10.4R6.5-domestic.tgz
+# -rw-r--r-- 1 admin field 355159151 Mar 22 2011 jinstall-10.4R2.6-domestic-signed.tgz
+# -rw-r--r-- 1 admin field 356069136 Mar 24 2011 jinstall-10.4R3.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 356846496 Nov 20 2011 jinstall-10.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421204768 Jul 21 2012 jinstall-11.4R4.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 420899223 Sep 15 2012 jinstall-11.4R5.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Apr 12 12:28 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 0 Dec 3 2010 jperf
+# -rw-r--r-- 1 root field 0 Dec 3 2010 jperf_shmem_sem
+# -rw-r--r-- 1 admin field 7829561 Mar 22 2011 jweb-10.4R2.6-signed.tgz
+# -rw-r--r-- 1 admin field 7830840 Mar 24 2011 jweb-10.4R3.4-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 9 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 root field 155 Apr 14 00:45 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Jul 22 2012 pics/
+# -rw-r--r-- 1 root wheel 4187 Jul 31 2012 ppe_trap_fpc0_pfe0.core.0
+# -rw-r--r-- 1 root wheel 140778 Jul 31 2012 ppe_trap_fpc0_pfe0.core.1
+# -rw-r--r-- 1 root wheel 140816 Jul 31 2012 ppe_trap_fpc0_pfe0.core.2
+# -rw-r--r-- 1 root wheel 4477 Sep 21 2012 ppe_trap_fpc0_pfe0.core.3
+# -rw-r--r-- 1 root wheel 140693 Sep 21 2012 ppe_trap_fpc0_pfe0.core.4
+# -rw-r--r-- 1 root wheel 127127 Jul 22 2012 ppe_trap_fpc0_pfe1.core.0
+# -rw-r--r-- 1 root wheel 126957 Jul 22 2012 ppe_trap_fpc0_pfe1.core.1
+# -rw-r--r-- 1 root wheel 127513 Jul 23 2012 ppe_trap_fpc0_pfe1.core.2
+# -rw-r--r-- 1 root wheel 131749 Jul 23 2012 ppe_trap_fpc0_pfe1.core.3
+# -rw-r--r-- 1 root wheel 126199 Apr 13 23:27 ppe_trap_fpc0_pfe1.core.4
+# -rw-r--r-- 1 root wheel 4477 Sep 21 2012 ppe_trap_fpc1_pfe0.core.0
+# -rw-r--r-- 1 root wheel 140820 Sep 21 2012 ppe_trap_fpc1_pfe0.core.1
+# -rw-r--r-- 1 root wheel 4016 Jul 23 2012 ppe_trap_fpc1_pfe1.core.0
+# -rw-r--r-- 1 root wheel 4016 Sep 21 2012 ppe_trap_fpc1_pfe1.core.1
+# -r--r--r-- 1 root field 499 Apr 14 00:27 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 Jul 22 2012 rdm.taf
+# -rw-r--r-- 1 root field 33305249 Oct 9 2012 re0.tar.gz
+# -rw------- 1 root field 138470581 Nov 20 2011 rpd.core-tarball.0.tgz
+# drwxr-xr-x 2 root field 512 Jul 22 2012 rtsdb/
+# -rw-r----- 1 root field 2884 Apr 14 00:45 sampled.pkts
+# drwxr-xr-x 3 root field 512 Dec 3 2010 sec-download/
+# -rw-r--r-- 1 root field 0 Dec 3 2010 tracelogs
+# -rw-r--r-- 1 root field 0 Dec 3 2010 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Dec 3 2010 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 Jun 6 14:11 vi.recover/
+#
+# {master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show system uptime
+# System booted: 2013-04-14 00:44 CDT
+# Protocols started: 2013-04-14 00:45 CDT
+# Last configured: 2013-08-19 13:32 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.44 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up up
+#xe-0/1/0.72 up up
+#xe-0/1/0.32767 up up
+#xe-0/1/1 up down
+#ge-0/2/0 up down
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up down
+#ge-0/2/2 down down
+#ge-0/2/2.0 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up up
+#ge-0/2/4.301 down up
+#ge-0/2/4.303 up up
+#ge-0/2/4.306 up up
+#ge-0/2/4.307 up up
+#ge-0/2/4.308 up up
+#ge-0/2/4.309 up up
+#ge-0/2/4.310 up up
+#ge-0/2/4.311 up up
+#ge-0/2/4.312 up up
+#ge-0/2/4.313 up up
+#ge-0/2/4.314 up up
+#ge-0/2/4.32767 up up
+#ge-0/2/5 up up
+#ge-0/2/5.130 up up
+#ge-0/2/5.178 up up
+#ge-0/2/5.182 up up
+#ge-0/2/5.220 up up
+#ge-0/2/5.327 up up
+#ge-0/2/5.32767 up up
+#ge-0/2/6 up down
+#ge-0/2/7 up up
+#ge-0/2/7.0 up up
+#ge-0/2/8 up up
+#ge-0/2/8.0 up up
+#ge-0/2/9 up down
+#ge-0/3/0 up up
+#ge-0/3/0.0 up up
+#ge-0/3/1 up down
+#ge-0/3/2 down down
+#ge-0/3/2.0 up down
+#ge-0/3/3 up up
+#ge-0/3/3.0 up up
+#ge-0/3/4 up up
+#ge-0/3/4.0 up up
+#ge-0/3/5 up up
+#ge-0/3/5.0 up up
+#ge-0/3/6 up up
+#ge-0/3/6.0 up up
+#ge-0/3/7 up down
+#ge-0/3/8 down down
+#ge-0/3/8.0 up down
+#ge-0/3/9 down down
+#ge-0/3/9.0 up down
+#lc-1/0/0 up up
+#lc-1/0/0.32769 up up
+#pfe-1/0/0 up up
+#pfe-1/0/0.16383 up up
+#pfh-1/0/0 up up
+#pfh-1/0/0.16383 up up
+#xe-1/0/0 up up
+#xe-1/0/0.60 up up
+#xe-1/0/0.32767 up up
+#xe-1/0/1 up up
+#xe-1/0/1.2500 up up
+#xe-1/0/1.32767 up up
+#xe-1/1/0 up down
+#xe-1/1/0.0 up down
+#xe-1/1/1 up up
+#xe-1/1/1.0 up up
+#ge-1/2/0 up up
+#ge-1/2/0.0 up up
+#lc-1/2/0 up up
+#lc-1/2/0.32769 up up
+#pfe-1/2/0 up up
+#pfe-1/2/0.16383 up up
+#ge-1/2/1 up up
+#ge-1/2/1.0 up up
+#ge-1/2/2 up up
+#ge-1/2/2.0 up up
+#ge-1/2/3 up down
+#ge-1/2/4 up down
+#ge-1/2/5 up down
+#ge-1/2/6 up down
+#ge-1/2/7 up down
+#ge-1/2/8 up down
+#ge-1/2/9 up up
+#ge-1/2/9.0 up up
+#ge-1/3/0 up up
+#ge-1/3/1 up up
+#ge-1/3/1.774 up up
+#ge-1/3/1.830 up up
+#ge-1/3/1.32767 up up
+#ge-1/3/2 up up
+#ge-1/3/2.0 up up
+#ge-1/3/3 up up
+#ge-1/3/3.315 up up
+#ge-1/3/3.351 up up
+#ge-1/3/3.32767 up up
+#ge-1/3/4 up up
+#ge-1/3/4.250 up up
+#ge-1/3/4.3910 up up
+#ge-1/3/4.32767 up up
+#ge-1/3/5 up up
+#ge-1/3/5.98 up up
+#ge-1/3/5.2510 down up
+#ge-1/3/5.2511 down up
+#ge-1/3/5.32767 up up
+#ge-1/3/6 up down
+#ge-1/3/7 up down
+#ge-1/3/8 up down
+#ge-1/3/9 up up
+#ge-1/3/9.0 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 up down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#irb.233 up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#lsi.1048838 up up
+#lsi.1048839 up up
+#lsi.1048840 up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at OKC-CORE5-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:32:31 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name OKC-CORE5-MX480-RE0;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name OKC-CORE5-MX480-RE1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ backup-router 172.25.46.1;
+ time-zone America/Chicago;
+ authentication-order [ password radius ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.215;
+ }
+ }
+ radius-options {
+ attributes {
+ nas-ip-address 164.58.199.215;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1440;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ fpc 0 {
+ sampling-instance JFLOW-1;
+ }
+ fpc 1 {
+ sampling-instance JFLOW-1;
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.okc xe-1/0/1 | OneNet-OKC-OKC-XE-4466";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 44 {
+ vlan-id 44;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.46/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ff4::2/80;
+ address 2610:1d8:1000::7/127;
+ }
+ family mpls;
+ }
+ }
+ xe-0/1/0 {
+ description "CORE 10GE to core4.okc xe-0/1/0 | OneNet-OKC-OKC-XE-4465";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 72 {
+ vlan-id 72;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.74/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ffb::2/80;
+ address 2610:1d8:1300::1/127;
+ }
+ family mpls;
+ }
+ }
+ inactive: ge-0/2/0 {
+ description "OneNetHub-Ardmore-Gig | OneNet-ARD-OKC-GE-3800";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.245.153/30;
+ }
+ }
+ }
+ inactive: ge-0/2/1 {
+ description "LINK-TO-GSL-6513 [NO-MONITOR]";
+ mtu 9000;
+ unit 0 {
+ family inet {
+ address 164.58.1.13/30;
+ }
+ }
+ }
+ ge-0/2/2 {
+ description "OneNetHub-Edmond-Gig-NAGIOS | OneNet-EDM-OKC-GE";
+ disable;
+ unit 0 {
+ family inet {
+ address 164.58.245.9/30;
+ }
+ }
+ }
+ ge-0/2/4 {
+ description "NNI to AT&T - OKC - CIR0003621";
+ vlan-tagging;
+ mtu 1518;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 301 {
+ disable;
+ vlan-id 301;
+ }
+ unit 303 {
+ description "CORE L3 FE to hub.elr fe-3/0/0 | OneNet-OKC-ELR-FE-3622";
+ bandwidth 100m;
+ vlan-id 303;
+ family inet {
+ mtu 1500;
+ inactive: filter {
+ output ELRENO;
+ }
+ policer {
+ output 100M-POL;
+ }
+ sampling {
+ input;
+ }
+ address 164.58.245.101/30;
+ }
+ family inet6 {
+ address 2610:1d8:1400::2/127;
+ }
+ family mpls;
+ }
+ unit 306 {
+ description Langston-University-CIR0004144;
+ vlan-id 306;
+ family inet {
+ mtu 1500;
+ address 164.58.1.157/30;
+ }
+ }
+ unit 307 {
+ description Bishop-PS-CIR0004175;
+ vlan-id 307;
+ family inet {
+ mtu 1500;
+ address 156.110.42.185/30;
+ }
+ }
+ unit 308 {
+ description Noble-Public-Library-CIR0004157;
+ vlan-id 308;
+ family inet {
+ mtu 1500;
+ address 164.58.215.61/30;
+ }
+ }
+ unit 309 {
+ description Luther-PS-100-CIR0004860;
+ vlan-id 309;
+ family inet {
+ mtu 1500;
+ address 164.58.3.25/30;
+ }
+ }
+ unit 310 {
+ description Eastern-OK-County-VoTech-100M-CIR0004514;
+ vlan-id 310;
+ family inet {
+ mtu 1500;
+ address 164.58.28.229/30;
+ }
+ }
+ unit 311 {
+ description Minco-Public-Schools-10M-CIR0004591;
+ bandwidth 10m;
+ vlan-id 311;
+ family inet {
+ mtu 1500;
+ sampling {
+ input;
+ }
+ address 164.58.156.5/30;
+ }
+ }
+ unit 312 {
+ description Perkins-Tryon-PS-100M-CIR0004963;
+ vlan-id 312;
+ family inet {
+ mtu 1500;
+ address 164.58.2.101/30;
+ }
+ }
+ unit 313 {
+ description Guthrie-Public-Library-FE-CIR0004661;
+ vlan-id 313;
+ family inet {
+ mtu 1500;
+ address 164.58.80.137/30;
+ }
+ }
+ unit 314 {
+ description Anadarko-Community-Library-100M-CIR0005022;
+ vlan-id 314;
+ family inet {
+ address 164.58.5.197/30;
+ }
+ }
+ }
+ ge-0/2/5 {
+ description "NNI to MBO - OKC - CIR0004709";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 130 {
+ description Earlsboro-Public-School-FE-CIR0003879;
+ vlan-id 130;
+ family inet {
+ address 164.58.5.105/30;
+ }
+ }
+ unit 178 {
+ description Crowder-PS-CIR0004369;
+ vlan-id 178;
+ family inet {
+ address 164.58.2.209/30;
+ }
+ }
+ unit 182 {
+ description St-Gregorys-University-1-100M-CIR0004962;
+ vlan-id 182;
+ family inet {
+ address 156.110.114.85/30;
+ }
+ }
+ unit 220 {
+ description Stuart-PS-100Meg-CIR0004826;
+ vlan-id 220;
+ family inet {
+ address 164.58.5.85/30;
+ }
+ }
+ unit 327 {
+ description Canadian-Public-School-10M-CIR0005130;
+ vlan-id 327;
+ family inet {
+ mtu 1500;
+ address 164.58.12.17/30;
+ }
+ }
+ }
+ ge-0/2/7 {
+ description DOT-Data-Services-Division-GE-CIR0002573;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 164.58.11.45/30;
+ }
+ }
+ }
+ ge-0/2/8 {
+ description DOT-Branch-Offices-GE-CIR0002574;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 172.24.31.5/30;
+ }
+ }
+ }
+ ge-0/3/0 {
+ description OK-State-Dept-of-Educ-Fast-Ethernet-CIR0003285;
+ speed 100m;
+ mtu 9000;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.255.250/30;
+ }
+ }
+ }
+ ge-0/3/2 {
+ description WOSC-vg-200-NAGIOS;
+ disable;
+ encapsulation ethernet-bridge;
+ unit 0;
+ }
+ ge-0/3/3 {
+ description ETN-Fire-System;
+ speed 10m;
+ unit 0 {
+ family inet {
+ address 164.58.243.225/29;
+ }
+ }
+ }
+ ge-0/3/4 {
+ description Terra-DNS;
+ speed 100m;
+ link-mode full-duplex;
+ encapsulation ethernet-bridge;
+ unit 0;
+ }
+ ge-0/3/5 {
+ description "Mid American Votech CIR0004527";
+ speed auto;
+ link-mode full-duplex;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 164.58.252.169/30;
+ }
+ }
+ }
+ ge-0/3/6 {
+ description "DOT-Sallisaw Backup CIR0004528";
+ speed auto;
+ link-mode full-duplex;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 156.110.28.17/29;
+ }
+ }
+ }
+ ge-0/3/8 {
+ disable;
+ encapsulation ethernet-bridge;
+ unit 0;
+ }
+ ge-0/3/9 {
+ description ETN-PolyCom-Front-Office-164.58.233.184;
+ disable;
+ encapsulation ethernet-bridge;
+ unit 0;
+ }
+ xe-1/0/0 {
+ description "CORE 10GE to core2.okc xe-1/0/1 | OneNet-OKC-OKC-XE-4470";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 60 {
+ vlan-id 60;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.15.62/30;
+ }
+ family inet6 {
+ address 2001:468:aff:ffff:ff8::2/80;
+ address 2610:1d8:1100::5/127;
+ }
+ family mpls;
+ }
+ }
+ xe-1/0/1 {
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 2500 {
+ description VPLS-OU-2500;
+ encapsulation vlan-vpls;
+ vlan-id-range 1-4094;
+ family vpls;
+ }
+ }
+ xe-1/1/0 {
+ description "NETFX SERVER | [NO-MONITOR]";
+ unit 0 {
+ family inet {
+ address 156.110.3.249/30;
+ }
+ family inet6 {
+ address 2610:1d8:1400::/127;
+ }
+ }
+ }
+ xe-1/1/1 {
+ description "AKAMAI Server CIR0004480";
+ unit 0 {
+ family inet {
+ address 164.58.129.129/26;
+ }
+ }
+ }
+ ge-1/2/0 {
+ description TELEMATE-VERSO-WEBFILTER-ADMIN;
+ speed auto;
+ link-mode full-duplex;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 156.110.24.245/30;
+ }
+ }
+ }
+ ge-1/2/1 {
+ description TELEMATE-VERSO-WEBFILTER-ADMIN;
+ speed auto;
+ link-mode full-duplex;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 156.110.24.241/30;
+ }
+ }
+ }
+ ge-1/2/2 {
+ description NPAD-SERVER-MANAGEMENT-PORT;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.244.81/30;
+ }
+ }
+ }
+ ge-1/2/9 {
+ description TELEMATE-VERSO-WEBFILTER-PORT-MIRROR;
+ speed auto;
+ link-mode full-duplex;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 192.168.79.1/30 {
+ arp 192.168.79.2 mac 00:90:69:4f:84:9a;
+ }
+ }
+ }
+ }
+ ge-1/3/1 {
+ description "NNI to INFO - OKC - CIR0004636";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 774 {
+ description Purcell-Public-Library-CIR0004869;
+ vlan-id 774;
+ family inet {
+ address 164.58.4.1/30;
+ }
+ }
+ unit 830 {
+ description "CORE L3 1GE to core.alt ge-0/2/1.830 | OneNet-OKC-ALT-GE-4664";
+ bandwidth 100m;
+ vlan-id 830;
+ family inet {
+ mtu 1500;
+ sampling {
+ input;
+ }
+ address 164.58.244.13/30;
+ }
+ family inet6 {
+ mtu 1500;
+ address 2610:1d8:1400::4/127;
+ }
+ family mpls;
+ }
+ }
+ ge-1/3/2 {
+ description Grady-Memorial-Hospital-FE-CIR0004715;
+ unit 0 {
+ family inet {
+ address 156.110.66.137/30;
+ }
+ }
+ }
+ ge-1/3/3 {
+ description "NNI to AT&T - OKC - CIR0005141";
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 315 {
+ description Canadian-Valley-Vo-Tech-Chickasha-500Mb-CIR0005134;
+ vlan-id 315;
+ family inet {
+ mtu 1500;
+ address 156.110.122.245/30;
+ }
+ }
+ unit 351 {
+ description SHAWNEE-PS-500Mb-CIR0005019;
+ vlan-id 351;
+ family inet {
+ mtu 1500;
+ address 164.58.27.65/26;
+ }
+ }
+ }
+ ge-1/3/4 {
+ vlan-tagging;
+ mtu 9192;
+ unit 250 {
+ description "L2 CORE 1GE to swi.cai.caigc ge-0/1/0 | OneNet-OKC-CAIGC-GE-5213";
+ vlan-id 250;
+ family inet {
+ mtu 9000;
+ address 164.58.247.189/30;
+ }
+ }
+ unit 3910 {
+ description "L2 Gordon-Cooper-Career-Tech-100Mb-VLAN3910-CIR0005214 [NO-MONITOR]";
+ vlan-id 3910;
+ }
+ }
+ ge-1/3/5 {
+ description OBU-300meg-VPLS;
+ flexible-vlan-tagging;
+ link-mode full-duplex;
+ encapsulation flexible-ethernet-services;
+ gigether-options {
+ no-auto-negotiation;
+ }
+ unit 98 {
+ description "OBU-Shawnee-300M-MBO-CIR0004324 [NO-MONITOR]";
+ vlan-id 98;
+ family inet {
+ address 164.58.173.45/30;
+ }
+ }
+ unit 2510 {
+ disable;
+ description OBU-Shawnee-VPLS-300M-CIR0004324;
+ encapsulation vlan-vpls;
+ vlan-id-range 1-97;
+ family vpls;
+ }
+ unit 2511 {
+ disable;
+ description OBU-Shawnee-VPLS-300M-CIR0004324;
+ encapsulation vlan-vpls;
+ vlan-id-range 99-250;
+ family vpls;
+ }
+ }
+ ge-1/3/9 {
+ description Harrah-PS-15M-CIR0004530;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ address 164.58.17.201/29;
+ }
+ }
+ }
+ irb {
+ unit 233 {
+ family inet {
+ address 164.58.233.2/24;
+ }
+ }
+ }
+ lo0 {
+ description OKC-CORE5-MX480-Loopback;
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 127.0.0.1/32;
+ address 164.58.199.215/32;
+ address 164.58.10.100/32;
+ }
+ family inet6 {
+ address 2610:1d8::4/128;
+ }
+ }
+ }
+}
+forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ flow-server 164.58.253.36 {
+ port 9215;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.215;
+ }
+ }
+ }
+ }
+ }
+ }
+ port-mirroring {
+ input {
+ rate 1;
+ }
+ family inet {
+ output {
+ interface ge-1/2/9.0 {
+ next-hop 192.168.79.2;
+ }
+ }
+ }
+ }
+}
+snmp {
+ location "Oklahoma City, OK";
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ static {
+ route 192.149.244.0/24 next-hop 164.58.11.46;
+ route 199.27.8.0/21 next-hop 164.58.11.46;
+ route 199.184.200.0/22 next-hop 164.58.11.46;
+ route 205.153.220.0/22 next-hop 164.58.11.46;
+ route 156.110.115.112/29 next-hop 164.58.5.106;
+ route 164.58.163.152/29 next-hop 164.58.2.210;
+ route 164.58.16.128/30 next-hop 164.58.1.14;
+ route 164.58.235.0/24 next-hop 164.58.1.14;
+ route 167.104.238.25/32 next-hop 164.58.1.14;
+ route 167.104.240.131/32 next-hop 164.58.1.14;
+ route 167.104.240.132/32 next-hop 164.58.1.14;
+ route 167.104.240.134/32 next-hop 164.58.1.14;
+ route 164.58.173.32/30 next-hop 156.110.42.186;
+ route 164.58.75.120/29 next-hop 156.110.42.186;
+ route 156.110.26.108/30 next-hop 156.110.42.186;
+ route 164.58.5.136/30 next-hop 164.58.3.26;
+ route 164.58.72.24/29 next-hop 164.58.3.26;
+ route 156.110.31.208/29 next-hop 164.58.1.158;
+ route 156.110.43.24/29 next-hop 164.58.1.158;
+ inactive: route 172.23.32.0/19 next-hop 164.58.75.86;
+ route 164.58.70.0/25 next-hop 164.58.252.170;
+ inactive: route 204.137.224.0/20 next-hop 156.110.26.134;
+ route 164.58.162.0/25 next-hop 156.110.114.86;
+ route 164.58.75.208/29 next-hop 164.58.17.204;
+ route 156.110.28.88/29 next-hop 164.58.28.230;
+ route 164.58.17.16/28 next-hop 164.58.17.204;
+ route 156.110.91.48/29 next-hop 164.58.5.86;
+ route 164.58.139.112/29 next-hop 164.58.5.86;
+ route 164.58.18.244/30 next-hop 164.58.1.158;
+ route 156.110.67.16/29 next-hop 164.58.156.6;
+ route 164.58.28.196/30 next-hop 164.58.156.6;
+ route 164.58.148.24/29 next-hop 164.58.2.102;
+ route 156.110.35.152/29 next-hop 156.110.66.138;
+ route 156.110.50.104/30 next-hop 156.110.66.138;
+ route 164.58.19.224/30 next-hop 156.110.66.138;
+ route 164.58.12.64/30 next-hop 156.110.66.138;
+ route 164.58.29.184/29 next-hop 164.58.80.138;
+ inactive: route 156.110.90.164/30 next-hop 156.110.26.134;
+ route 164.58.186.64/29 next-hop 164.58.5.198;
+ route 164.58.253.36/32 {
+ next-hop 164.58.15.61;
+ no-readvertise;
+ }
+ route 164.58.63.16/30 next-hop 164.58.5.198;
+ route 164.58.184.112/29 next-hop 156.110.114.86;
+ route 164.58.17.192/29 next-hop 164.58.12.18;
+ route 164.58.24.0/24 next-hop 156.110.122.246;
+ }
+ router-id 164.58.199.215;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.44;
+ interface xe-1/0/0.60;
+ interface lo0.0;
+ interface xe-0/1/0.72;
+ interface ge-0/2/4.303;
+ interface ge-0/2/9.0;
+ interface ge-1/3/1.830;
+ interface ge-1/3/3.69;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.215;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ export [ NEXT-HOP-SELF REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ }
+ group EBGP-AKAMAI-AS21357 {
+ type external;
+ description EBGP-AKAMAI-AS21357;
+ multihop;
+ local-address 164.58.10.100;
+ import EBGP-AKAMAI-IMPORT;
+ family inet {
+ any;
+ }
+ export [ COMMODITY-PREFIXES-LIST EBGP-REJECT-EXPORT ];
+ neighbor 80.67.67.43 {
+ remove-private;
+ peer-as 21357;
+ }
+ }
+ group CUSTOMER-EBGP {
+ type external;
+ family inet {
+ any;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface xe-0/0/0.44 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$ATcNtBIcyKv87yr7VwYGU69CAORSreMLNIErvWLN-" start-time "2011-6-25.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface lo0.0 {
+ link-protection;
+ }
+ interface fxp0.0 {
+ disable;
+ }
+ interface xe-1/0/0.60 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$ZBGHqfT3n9pTQpBIEKv4aJZi.5QF6CuqmQn/Cu0" start-time "2011-6-25.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/1/0.72 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$8IpL-VYgJZDkg4kP5QCAKMW8Nb24aGjqVw4ZUjq." start-time "2011-6-25.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-0/2/0.0;
+ interface ge-0/2/2.0;
+ interface ge-0/2/4.300;
+ interface ge-0/2/4.301;
+ interface ge-0/2/4.303 {
+ metric 1000;
+ authentication {
+ md5 7 key "$9$oZaDi.PQznCPfCuO1rlYg4oUHmfTF6Aikfz36At" start-time "2011-6-14.23:38:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/2/9.0 {
+ authentication {
+ md5 7 key "$9$QvXZz/CuORESeOBeWLxsYP5TQ6A0BIhyKCtBEcyKv" start-time "2011-6-16.23:30:00 -0500"; ## SECRET-DATA
+ }
+ }
+ interface ge-1/3/1.830 {
+ authentication {
+ md5 7 key "$9$kq5Qn/tpOR/9RSrex7DiHkfz69AuBEQF9p0BEh"; ## SECRET-DATA
+ }
+ }
+ interface ge-1/3/3.69 {
+ authentication {
+ md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+ }
+ }
+ interface ge-1/3/5.98 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$ATcNtBIcyKv87yr7VwYGU69CAORSreMLNIErvWLN-"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/1/0.72;
+ interface xe-0/0/0.44 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-1/0/0.60;
+ interface lo0.0;
+ interface ge-0/2/4.303 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface ge-1/3/1.830 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.44;
+ interface xe-0/1/0.72;
+ interface ge-0/2/4.303;
+ interface ge-0/2/9.0;
+ interface xe-1/0/0.60;
+ interface ge-1/3/1.830;
+ interface ge-1/3/3.69;
+ interface lo0.0;
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface xe-1/0/0;
+ interface xe-0/1/0;
+ interface ge-1/3/3;
+ interface ge-1/3/4;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS {
+ 80.67.67.43/32;
+ 156.110.26.134/32;
+ 164.58.5.194/32;
+ }
+ prefix-list MARTIANS-IPV4 {
+ 0.0.0.0/8;
+ 10.0.0.0/8;
+ 127.0.0.0/8;
+ 169.254.0.0/16;
+ 172.16.0.0/12;
+ 192.0.0.0/24;
+ 192.0.2.0/24;
+ 192.168.0.0/16;
+ 198.18.0.0/15;
+ 198.51.100.0/24;
+ 203.0.113.0/24;
+ 224.0.0.0/4;
+ 240.0.0.0/4;
+ }
+ prefix-list HI-PRIORITY {
+ 164.58.104.248/32;
+ }
+ prefix-list TELEMATE-CUSTOMERS {
+ 156.110.46.96/30;
+ 156.110.47.32/29;
+ 156.110.54.16/30;
+ 156.110.59.48/29;
+ 156.110.62.180/30;
+ 164.58.23.64/26;
+ 164.58.176.44/30;
+ 164.58.243.208/28;
+ }
+ policy-statement COMMODITY-PREFIXES-LIST {
+ term prefixes {
+ from {
+ route-filter 66.186.144.0/20 exact;
+ route-filter 129.15.0.0/16 exact;
+ route-filter 129.244.0.0/16 exact;
+ route-filter 139.78.0.0/16 exact;
+ route-filter 147.97.0.0/16 exact;
+ route-filter 147.97.0.0/17 exact;
+ route-filter 147.97.128.0/19 exact;
+ route-filter 147.97.192.0/18 exact;
+ route-filter 156.110.0.0/16 exact;
+ route-filter 157.142.0.0/16 exact;
+ route-filter 162.58.0.0/16 exact;
+ route-filter 164.58.0.0/16 exact;
+ route-filter 174.77.146.0/24 exact;
+ route-filter 192.31.83.0/24 exact;
+ route-filter 192.35.96.0/24 exact;
+ route-filter 192.35.98.0/24 exact;
+ route-filter 192.78.4.0/24 exact;
+ route-filter 192.135.141.0/24 exact;
+ route-filter 192.146.206.0/24 exact;
+ route-filter 192.149.244.0/24 exact;
+ route-filter 192.150.147.0/24 exact;
+ route-filter 192.153.53.0/24 exact;
+ route-filter 192.198.4.0/22 exact;
+ route-filter 192.203.164.0/24 exact;
+ route-filter 192.206.65.0/24 exact;
+ route-filter 192.231.3.0/24 exact;
+ route-filter 192.231.56.0/24 exact;
+ route-filter 192.234.12.0/24 exact;
+ route-filter 192.234.13.0/24 exact;
+ route-filter 198.11.4.0/24 exact;
+ route-filter 198.11.5.0/24 exact;
+ route-filter 198.11.6.0/24 exact;
+ route-filter 198.11.7.0/24 exact;
+ route-filter 198.17.223.0/24 exact;
+ route-filter 198.102.159.0/24 exact;
+ route-filter 198.178.194.0/24 exact;
+ route-filter 198.183.248.0/23 exact;
+ route-filter 198.187.154.0/24 exact;
+ route-filter 198.203.153.0/24 exact;
+ route-filter 198.204.126.0/24 exact;
+ route-filter 198.207.222.0/24 exact;
+ route-filter 199.27.8.0/21 exact;
+ route-filter 199.120.0.0/21 exact;
+ route-filter 199.120.8.0/22 exact;
+ route-filter 199.164.253.0/24 exact;
+ route-filter 199.181.88.0/24 exact;
+ route-filter 199.181.89.0/24 exact;
+ route-filter 199.184.200.0/22 exact;
+ route-filter 199.190.128.0/23 exact;
+ route-filter 199.223.171.0/24 exact;
+ route-filter 199.245.163.0/24 exact;
+ route-filter 199.245.164.0/24 exact;
+ route-filter 199.245.165.0/24 exact;
+ route-filter 199.245.166.0/24 exact;
+ route-filter 199.248.134.0/23 exact;
+ route-filter 204.29.164.0/24 exact;
+ route-filter 204.61.0.0/21 exact;
+ route-filter 204.61.8.0/22 exact;
+ route-filter 204.61.12.0/23 exact;
+ route-filter 204.62.16.0/21 exact;
+ route-filter 204.62.24.0/22 exact;
+ route-filter 204.63.217.0/24 exact;
+ route-filter 204.63.218.0/24 exact;
+ route-filter 204.87.64.0/18 exact;
+ route-filter 204.87.241.0/24 exact;
+ route-filter 204.107.242.0/24 exact;
+ route-filter 204.126.138.0/23 exact;
+ route-filter 204.126.144.0/23 exact;
+ route-filter 204.126.162.0/23 exact;
+ route-filter 204.126.186.0/23 exact;
+ route-filter 204.126.188.0/24 exact;
+ route-filter 204.126.189.0/24 exact;
+ route-filter 204.126.190.0/24 exact;
+ route-filter 204.126.191.0/24 exact;
+ route-filter 204.154.112.0/21 exact;
+ route-filter 205.143.136.0/21 exact;
+ route-filter 205.143.216.0/21 exact;
+ route-filter 205.153.220.0/22 exact;
+ route-filter 205.235.88.0/23 exact;
+ route-filter 206.61.156.0/24 exact;
+ route-filter 206.202.192.0/18 exact;
+ route-filter 206.202.208.0/24 exact;
+ route-filter 206.203.81.0/24 exact;
+ route-filter 208.8.54.0/24 exact;
+ route-filter 192.173.49.0/24 exact;
+ route-filter 192.173.32.0/19 orlonger;
+ route-filter 192.35.97.0/24 exact;
+ route-filter 204.63.222.0/24 exact;
+ route-filter 129.15.0.0/17 exact;
+ route-filter 129.15.128.0/17 exact;
+ route-filter 64.112.240.0/20 exact;
+ route-filter 152.123.8.0/21 exact;
+ route-filter 199.253.0.0/21 exact;
+ route-filter 199.253.9.0/24 exact;
+ route-filter 199.253.8.0/24 exact;
+ route-filter 147.97.96.0/19 exact;
+ route-filter 204.108.2.0/24 exact;
+ route-filter 204.108.3.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement DEFAULT-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term ACCEPT-ALL-ELSE {
+ then accept;
+ }
+ }
+ policy-statement DEFAULT-ONLY-EXPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AKAMAI-IMPORT {
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-OBU-IMPORT {
+ term OBU-PREFIX {
+ from {
+ route-filter 164.58.88.0/21 orlonger;
+ }
+ then {
+ community set OKCCORE5;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-OSF-IMPORT {
+ term prefixes {
+ from {
+ route-filter 192.203.164.0/24 exact;
+ route-filter 199.190.128.0/23 exact;
+ route-filter 204.61.0.0/21 exact;
+ route-filter 204.61.8.0/22 exact;
+ route-filter 204.61.12.0/23 exact;
+ route-filter 204.62.16.0/24 exact;
+ route-filter 204.62.16.0/21 exact;
+ route-filter 204.62.19.0/24 exact;
+ route-filter 204.62.23.0/24 exact;
+ route-filter 204.62.24.0/22 exact;
+ route-filter 204.87.64.0/18 exact;
+ route-filter 206.202.208.0/24 exact;
+ }
+ then {
+ community set 5078:40628;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-EXPORT {
+ term STEP-1 {
+ from {
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-IMPORT {
+ term STEP-1 {
+ from {
+ route-filter 0.0.0.0/0 through 0.0.0.0/32;
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement NEXT-HOP-SELF {
+ term 1 {
+ from protocol bgp;
+ then {
+ next-hop self;
+ accept;
+ }
+ }
+ from protocol bgp;
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add OKCCORE5;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add OKCCORE5;
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ community 5078:3923 members 5078:3923;
+ community 5078:40628 members 5078:40628;
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community NORMANCORE1 members 5078:230;
+ community NORMANCORE2 members 5078:231;
+ community OKCCCCORE1 members 5078:233;
+ community OKCCORE1 members 5078:211;
+ community OKCCORE2 members 5078:212;
+ community OKCCORE3 members 5078:213;
+ community OKCCORE4 members 5078:214;
+ community OKCCORE5 members 5078:215;
+ community OKCCORE6 members 5078:216;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community PTCCORE1 members 5078:234;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community STILLWATERCORE1 members 5078:232;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community TULSACORE1 members 5078:221;
+ community TULSACORE2 members 5078:222;
+ community TULSACORE3 members 5078:223;
+ community TULSACORE4 members 5078:224;
+ community TULSACORE5 members 5078:225;
+ community TULSACORE6 members 5078:226;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+ as-path 21357 21357;
+ as-path 40581 40581;
+ as-path 11537 11537;
+ as-path 293 293;
+ as-path 174 174;
+ as-path 11317 11317;
+ as-path 11164 11164;
+ as-path 19401 19401;
+ as-path 209 209;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ class scavenger queue-num 4;
+ }
+ interfaces {
+ ge-0/2/4 {
+ scheduler-map sch-map;
+ unit 300 {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ unit 303 {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ all {
+ scheduler-map sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ forwarding-class scavenger scheduler scav-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 15;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ scav-sch {
+ transmit-rate percent 2;
+ buffer-size percent 1;
+ priority low;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ filter ELRENO {
+ interface-specific;
+ term source-priority {
+ from {
+ source-prefix-list {
+ HI-PRIORITY;
+ }
+ }
+ then {
+ forwarding-class video;
+ accept;
+ }
+ }
+ term dest-priority {
+ from {
+ destination-prefix-list {
+ HI-PRIORITY;
+ }
+ }
+ then {
+ forwarding-class video;
+ accept;
+ }
+ }
+ term Minco-Public {
+ from {
+ destination-address {
+ 156.110.67.16/29;
+ 164.58.28.196/30;
+ }
+ }
+ then policer T1-POL;
+ }
+ term ACCEPT-ALL {
+ then accept;
+ }
+ term REJECT_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ filter ALTUS {
+ interface-specific;
+ term Mangum-Public {
+ from {
+ destination-address {
+ 156.110.38.192/30;
+ 164.58.144.192/26;
+ }
+ }
+ then policer 50M-POL;
+ }
+ term Merrit-Public {
+ from {
+ destination-address {
+ 156.110.70.40/30;
+ 164.58.237.0/26;
+ }
+ }
+ then policer 100M-POL;
+ }
+ term Leedey-Public {
+ from {
+ destination-address {
+ 164.58.8.68/30;
+ 164.58.151.16/28;
+ }
+ }
+ then policer 50M-POL;
+ }
+ term Erick-Public {
+ from {
+ destination-address {
+ 164.58.4.188/30;
+ 164.58.63.240/29;
+ 164.58.156.64/28;
+ }
+ }
+ then policer 10M-POL;
+ }
+ term ACCEPT-ALL {
+ then accept;
+ }
+ term REJECT_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ filter FLOW-INFO {
+ term TELEMATE {
+ from {
+ source-prefix-list {
+ TELEMATE-CUSTOMERS;
+ }
+ port [ http ftp nntp https ];
+ }
+ then {
+ port-mirror;
+ accept;
+ }
+ }
+ term ALL_FLOW {
+ then accept;
+ }
+ term REJECT_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+ policer 100M-POL {
+ logical-interface-policer;
+ if-exceeding {
+ bandwidth-limit 95m;
+ burst-size-limit 300k;
+ }
+ then discard;
+ }
+ policer MWC-WIRELESS-POL {
+ if-exceeding {
+ bandwidth-limit 30m;
+ burst-size-limit 500k;
+ }
+ then forwarding-class scavenger;
+ }
+ policer T1-POL {
+ logical-interface-policer;
+ if-exceeding {
+ bandwidth-limit 2m;
+ burst-size-limit 300k;
+ }
+ then discard;
+ }
+ policer 10M-POL {
+ logical-interface-policer;
+ if-exceeding {
+ bandwidth-limit 10m;
+ burst-size-limit 300k;
+ }
+ then discard;
+ }
+ policer 50M-POL {
+ logical-interface-policer;
+ if-exceeding {
+ bandwidth-limit 50m;
+ burst-size-limit 300k;
+ }
+ then discard;
+ }
+ filter ONENET-COS {
+ interface-specific;
+ inactive: term wireless {
+ from {
+ source-address {
+ 164.58.104.33/32;
+ }
+ }
+ then policer MWC-WIRELESS-POL;
+ }
+ inactive: term ALL_FLOW {
+ from {
+ source-address {
+ 0.0.0.0/0;
+ }
+ destination-address {
+ 0.0.0.0/0;
+ }
+ }
+ then {
+ sample;
+ next term;
+ }
+ }
+ term source-priority {
+ from {
+ source-prefix-list {
+ HI-PRIORITY;
+ }
+ }
+ then {
+ forwarding-class video;
+ accept;
+ }
+ }
+ term dest-priority {
+ from {
+ destination-prefix-list {
+ HI-PRIORITY;
+ }
+ }
+ then {
+ forwarding-class video;
+ accept;
+ }
+ }
+ term ACCEPT-ALL {
+ then accept;
+ }
+ }
+}
+routing-instances {
+ OBU-VPLS-2510 {
+ description VPLS-OBU-Shawnee;
+ instance-type vpls;
+ vlan-id all;
+ interface ge-1/3/5.2510;
+ interface ge-1/3/5.2511;
+ route-distinguisher 164.58.199.215:2510;
+ vrf-target target:5078:2510;
+ protocols {
+ vpls {
+ mac-table-size {
+ 10000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site OKC-CORE4 {
+ site-identifier 2;
+ interface ge-1/3/5.2510;
+ }
+ }
+ }
+ }
+ VPLS-OU-2500 {
+ description VPLS-OU-OKC;
+ instance-type vpls;
+ vlan-id all;
+ interface xe-1/0/1.2500;
+ route-distinguisher 164.58.199.215:2501;
+ vrf-target target:5078:2501;
+ protocols {
+ vpls {
+ mac-table-size {
+ 10000;
+ packet-action drop;
+ }
+ interface xe-1/0/1.2500;
+ no-tunnel-services;
+ site OKC1 {
+ site-identifier 5;
+ interface xe-1/0/1.2500;
+ }
+ }
+ }
+ }
+}
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+bridge-domains {
+ VLAN_233 {
+ domain-type bridge;
+ vlan-id 233;
+ interface ge-0/3/4.0;
+ interface ge-0/3/2.0;
+ interface ge-0/3/7.0; ## 'ge-0/3/7.0' is not defined
+ interface ge-0/3/8.0;
+ interface ge-0/3/9.0;
+ routing-interface irb.233;
+ }
+}
+{master}
+# grnoc-mon at OKC-CORE5-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.245.102 ge-0/2/4.303 Full 164.58.199.6
+# 164.58.244.14 ge-1/3/1.830 Full 164.58.199.27
+# 164.58.173.46 ge-1/3/5.98 Full 156.110.26.133
+# 164.58.15.45 xe-0/0/0.44 Full 164.58.199.211
+# 164.58.15.73 xe-0/1/0.72 Full 164.58.199.214
+# 164.58.15.61 xe-1/0/0.60 Full 164.58.199.212
+#
+# {master}
Index: hub.sem.onenet.net
===================================================================
--- hub.sem.onenet.net (revision 76276)
+++ hub.sem.onenet.net (working copy)
@@ -375,7 +375,7 @@
#t1-2/0/3:12 up down
#t1-2/0/3:13 up down
#t1-2/0/3:13.0 up down
-#t1-2/0/3:14 up down
+#t1-2/0/3:14 up up
#t1-2/0/3:14.0 up down
#t1-2/0/3:15 up down
#t1-2/0/3:15.0 up down
Index: core1.ptc.onenet.net
===================================================================
--- core1.ptc.onenet.net (revision 76436)
+++ core1.ptc.onenet.net (working copy)
@@ -0,0 +1,1150 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show system commit
+# 2013-08-19 13:33:52 CDT by jeremyt via cli commit synchronize
+# 2013-08-15 09:10:45 CDT by rnordmark via cli commit synchronize
+# 2013-08-15 08:47:49 CDT by rnordmark via cli commit synchronize
+# 2013-07-26 14:59:09 CDT by rnordmark via cli commit synchronize
+# 2013-07-26 14:43:14 CDT by rnordmark via cli commit synchronize
+# 2013-07-26 14:39:53 CDT by rnordmark via cli commit synchronize
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis environment
+# Class Item Status Measurement
+# Temp PEM 0 OK
+# PEM 1 OK
+# PEM 2 OK
+# PEM 3 OK
+# Routing Engine 0 OK
+# Routing Engine 0 CPU OK
+# Routing Engine 1 OK
+# Routing Engine 1 CPU OK
+# CB 0 Intake OK
+# CB 0 Exhaust A OK
+# CB 0 Exhaust B OK
+# CB 0 ACBC OK
+# CB 0 XF A OK
+# CB 0 XF B OK
+# CB 1 Intake OK
+# CB 1 Exhaust A OK
+# CB 1 Exhaust B OK
+# CB 1 ACBC OK
+# CB 1 XF A OK
+# CB 1 XF B OK
+# FPC 0 Intake OK
+# FPC 0 Exhaust A OK
+# FPC 0 Exhaust B OK
+# FPC 0 QX 0 TSen OK
+# FPC 0 QX 0 Chip OK
+# FPC 0 LU 0 TCAM TSen OK
+# FPC 0 LU 0 TCAM Chip OK
+# FPC 0 LU 0 TSen OK
+# FPC 0 LU 0 Chip OK
+# FPC 0 MQ 0 TSen OK
+# FPC 0 MQ 0 Chip OK
+# FPC 0 QX 1 TSen OK
+# FPC 0 QX 1 Chip OK
+# FPC 0 LU 1 TCAM TSen OK
+# FPC 0 LU 1 TCAM Chip OK
+# FPC 0 LU 1 TSen OK
+# FPC 0 LU 1 Chip OK
+# FPC 0 MQ 1 TSen OK
+# FPC 0 MQ 1 Chip OK
+# Fans Top Rear Fan OK
+# Bottom Rear Fan OK
+# Top Middle Fan OK
+# Bottom Middle Fan OK
+# Top Front Fan OK
+# Bottom Front Fan OK
+#
+# {master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis firmware
+# Part Type Version
+# FPC 0 ROM Juniper ROM Monitor Version 10.1b2
+# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+#
+# {master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 806 MB
+# Total DDR DRAM 2632 MB
+# Max Power Consumption 368 Watts
+#
+# {master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis JN115B548AFB MX480 Midplane
+# Midplane REV 05 710-017414 ABAC1734 MX480 Midplane
+# FPM Board REV 02 710-017254 ABBE6550 Front Panel Display
+# PEM 0 Rev 03 740-027736 QCS1021T067 DC 2.4kW Power Entry Module
+# PEM 1 Rev 03 740-027736 QCS1019T09L DC 2.4kW Power Entry Module
+# PEM 2 Rev 03 740-027736 QCS1021T071 DC 2.4kW Power Entry Module
+# PEM 3 Rev 03 740-027736 QCS1021T08K DC 2.4kW Power Entry Module
+# Routing Engine 0 REV 15 740-013063 9012009833 RE-S-2000
+# Routing Engine 1 REV 15 740-013063 9012009825 RE-S-2000
+# CB 0 REV 14 750-031391 ABBV4986 Enhanced MX SCB
+# CB 1 REV 14 750-031391 ABBV4947 Enhanced MX SCB
+# FPC 0 REV 15 750-031088 YY9938 MPC Type 2 3D Q
+# CPU REV 06 711-030884 YY6423 MPC PMB 2G
+# MIC 0 REV 25 750-028387 YS1979 3D 4x 10GE XFP
+# PIC 0 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 T10L15684 XFP-10G-LR
+# PIC 1 BUILTIN BUILTIN 2x 10GE XFP
+# Xcvr 0 REV 01 740-031833 T10L15854 XFP-10G-LR
+# MIC 1 REV 24 750-028392 YS8791 3D 20x 1GE(LAN) SFP
+# PIC 2 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-038291 D175031 SFP-T
+# Xcvr 1 REV 01 740-038291 D175072 SFP-T
+# Xcvr 2 REV 02 740-013111 B436691 SFP-T
+# PIC 3 BUILTIN BUILTIN 10x 1GE(LAN) SFP
+# Xcvr 0 REV 01 740-031851 AM1041SU14S SFP-SX
+# Xcvr 9 REV 02 740-011613 PJH27ZL SFP-SX
+# QXM 0 REV 05 711-028408 YZ8744 MPC QXM
+# QXM 1 REV 05 711-028408 YZ8645 MPC QXM
+# Fan Tray Enhanced Left Fan Tray
+#
+# {master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Midplane REV 05 710-017414 ABAC1734 CHAS-BP-MX480-S
+# FPM Board REV 02 710-017254 ABBE6550 CRAFT-MX480-S
+# PEM 0 Rev 03 740-027736 QCS1021T067 PWR-MX480-2400-DC-S
+# PEM 1 Rev 03 740-027736 QCS1019T09L PWR-MX480-2400-DC-S
+# PEM 2 Rev 03 740-027736 QCS1021T071 PWR-MX480-2400-DC-S
+# PEM 3 Rev 03 740-027736 QCS1021T08K PWR-MX480-2400-DC-S
+# Routing Engine 0 REV 15 740-013063 9012009833 RE-S-2000-4096-S
+# Routing Engine 1 REV 15 740-013063 9012009825 RE-S-2000-4096-S
+# CB 0 REV 14 750-031391 ABBV4986 SCBE-MX-S
+# CB 1 REV 14 750-031391 ABBV4947 SCBE-MX-S
+# FPC 0 REV 15 750-031088 YY9938 MX-MPC2-3D-Q
+# MIC 0 REV 25 750-028387 YS1979 MIC-3D-4XGE-XFP
+# MIC 1 REV 24 750-028392 YS8791 MIC-3D-20GE-SFP
+# Fan Tray FFANTRAY-MX480-HC-S
+#
+# {master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master
+# DRAM 3584 MB
+# Serial ID 9012009833
+# Routing Engine status:
+# Slot 1:
+# Current state Backup
+# Election priority Backup
+# DRAM 3584 MB
+# Serial ID 9012009825
+#
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis scb
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis sfm detail
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis ssb
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show system boot-messages
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+# Origin = "GenuineIntel" Id = 0x6d8 Stepping = 8
+# Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+# Features2=0x180<EST,TM2>
+# AMD Features=0x100000<NX>
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Initializing M/T platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc771f0a0, fpga regs at 0xf95a2c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# isab0: <PCI-ISA bridge> at device 31.0 on pci0
+# isa0: <ISA bus> on isab0
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# bmeb: bmeb_lib_init done 0xc7851000, addr 0xc0d8fa60
+# fxp0: Ethernet address 00:a0:a5:71:8a:59
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ad0: Device does not support APM
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Kernel thread "devrt_kernel_thread" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+# WARNING: / was not properly dismounted
+#
+# {master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show version
+# Hostname: TULSA-PTC1-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX Common) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Serv!
ices [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # {master} # grnoc-mon at TULSA-PTC1-MX480-RE0> file list /var/tmp detail #
+# /var/tmp:
+# total 5719096
+# -rw-r--r-- 1 root field 30 Dec 4 2010 ex.txt
+# drwxr-xr-x 2 root field 512 Dec 4 2010 gres-tp/
+# -rw-r--r-- 1 root field 4 Apr 27 22:28 idp_license_info
+# drwxrwxrwx 2 root wheel 512 Dec 4 2010 install/
+# -rw-r--r-- 1 root field 348823558 Mar 8 2011 jbundle-10.4R2.6-domestic.tgz
+# -rw-r--r-- 1 root field 349730789 Mar 24 2011 jbundle-10.4R3.4-domestic.tgz
+# -rw-r--r-- 1 root field 350497882 Dec 1 2011 jbundle-10.4R6.5-domestic.tgz
+# -rw-r--r-- 1 root field 355159151 Mar 8 2011 jinstall-10.4R2.6-domestic-signed.tgz
+# -rw-r--r-- 1 admin field 356069136 Mar 24 2011 jinstall-10.4R3.4-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 356846496 Dec 1 2011 jinstall-10.4R6.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 357225126 Nov 9 2011 jinstall-10.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 421523837 Apr 23 07:30 jinstall-11.4R7.5-domestic-signed.tgz
+# -rw-r--r-- 1 root field 0 Dec 4 2010 jperf
+# -rw-r--r-- 1 root field 0 Dec 4 2010 jperf_shmem_sem
+# -rw-r--r-- 1 root field 7829561 Mar 8 2011 jweb-10.4R2.6-signed.tgz
+# -rw-r--r-- 1 admin field 7830840 Mar 24 2011 jweb-10.4R3.4-signed.tgz
+# -rw-r--r-- 1 eng field 7832275 Nov 9 2011 jweb-10.4R7.5-signed.tgz
+# -rw-r--r-- 1 root field 155 Apr 27 22:28 krt_gencfg_filter.txt
+# drwxrwxrwx 2 root wheel 512 Apr 27 22:16 pics/
+# -r--r--r-- 1 root field 499 Apr 27 22:11 preinstall_boot_loader.conf
+# -rw-r--r-- 1 root field 498 Dec 1 2011 rdm.taf
+# -rw------- 1 root field 3839250 Apr 5 2011 rpd.core-tarball.0.tgz
+# -rw-rw---- 1 root field 3829423 Apr 5 2011 rpd.core.0.gz
+# drwxr-xr-x 2 root field 512 Apr 27 22:18 rtsdb/
+# -rw-r----- 1 root field 534 Feb 23 2011 sampled.pkts
+# drwxr-xr-x 3 root field 512 Dec 4 2010 sec-download/
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs_jperf
+# -rw-r--r-- 1 root field 0 Dec 4 2010 tracelogs_sem
+# drwxrwxrwT 2 root wheel 512 May 19 2011 vi.recover/
+#
+# {master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show system uptime
+# System booted: 2013-04-27 22:24 CDT
+# Protocols started: 2013-04-27 22:25 CDT
+# Last configured: 2013-08-19 13:33 CDT by jeremyt
+#
+# {master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show interface terse
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.124 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up down
+#xe-0/1/0 up up
+#xe-0/1/0.144 up up
+#xe-0/1/0.32767 up up
+#xe-0/1/1 up down
+#ge-0/2/0 up up
+#ge-0/2/0.2521 up up
+#ge-0/2/0.32767 up up
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#ge-0/2/1 up up
+#ge-0/2/1.2521 up up
+#ge-0/2/1.32767 up up
+#ge-0/2/2 up down
+#ge-0/2/3 up down
+#ge-0/2/4 up down
+#ge-0/2/5 up down
+#ge-0/2/6 up down
+#ge-0/2/7 up down
+#ge-0/2/8 up down
+#ge-0/2/9 up down
+#ge-0/3/0 up up
+#ge-0/3/0.0 up up
+#ge-0/3/1 up down
+#ge-0/3/2 up down
+#ge-0/3/3 up down
+#ge-0/3/4 up down
+#ge-0/3/5 up down
+#ge-0/3/6 up down
+#ge-0/3/7 up down
+#ge-0/3/8 up down
+#ge-0/3/9 up up
+#ge-0/3/9.2515 up up
+#ge-0/3/9.32767 up up
+#ae0 up up
+#ae0.2521 up up
+#ae0.32767 up up
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 up down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show configuration
+## Last commit: 2013-08-19 13:33:52 CDT by jeremyt
+version 11.4R7.5;
+groups {
+ re0 {
+ system {
+ host-name TULSA-PTC1-MX480-RE0;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.182/24;
+ }
+ }
+ }
+ }
+ }
+ re1 {
+ system {
+ host-name TULSA-PTC1-MX480-RE1;
+ }
+ interfaces {
+ fxp0 {
+ unit 0 {
+ family inet {
+ address 172.25.46.183/24;
+ }
+ }
+ }
+ }
+ }
+}
+apply-groups [ re0 re1 ];
+system {
+ domain-name onenet.net;
+ backup-router 172.25.46.1;
+ time-zone America/Chicago;
+ authentication-order [ password radius ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.234;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+ class admin {
+ idle-timeout 1044;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 20;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+ structured-data;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|BGP_NEIGHBOR_STATE";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ redundancy {
+ routing-engine 0 master;
+ routing-engine 1 backup;
+ failover {
+ on-loss-of-keepalives;
+ on-disk-failure;
+ }
+ graceful-switchover;
+ }
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ aggregated-devices {
+ ethernet {
+ device-count 1;
+ }
+ }
+ fpc 0 {
+ inactive: sampling-instance JFLOW-1;
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+ inactive: network-services all-ethernet;
+}
+interfaces {
+ xe-0/0/0 {
+ description "CORE 10GE to core1.tul xe-0/1/0 | OneNet-TUL-PTC-XE-4488";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 124 {
+ vlan-id 124;
+ family inet {
+ mtu 9000;
+ address 164.58.15.126/30;
+ }
+ family inet6 {
+ address 2610:1d8:2000::15/127;
+ }
+ family mpls;
+ }
+ }
+ inactive: xe-0/0/1 {
+ vlan-tagging;
+ mtu 9174;
+ encapsulation flexible-ethernet-services;
+ unit 152 {
+ description JUNIPER-to-CISCO-INTERCONNECT;
+ vlan-id 152;
+ family inet {
+ mtu 9000;
+ address 164.58.15.153/30;
+ }
+ }
+ }
+ xe-0/1/0 {
+ description "CORE 10GE to core2.tul xe-1/1/1 | OneNet-TUL-PTC-XE-4489";
+ vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 144 {
+ vlan-id 144;
+ family inet {
+ mtu 9000;
+ address 164.58.15.146/30;
+ }
+ family inet6 {
+ address 2610:1d8:2100::d/127;
+ }
+ family mpls;
+ }
+ }
+ ge-0/2/0 {
+ description "DIA CCC [NO-MONITOR]";
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-0/2/1 {
+ gigether-options {
+ 802.3ad ae0;
+ }
+ }
+ inactive: ge-0/2/9 {
+ vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 52 {
+ description TULSA-PTC1-MX480-to-TULSA-PTC-7606;
+ vlan-id 52;
+ family inet {
+ address 192.168.1.54/30;
+ }
+ }
+ }
+ ge-0/3/0 {
+ description DOH-DR-to-PTC-TULSA-GE-CIR0003821;
+ gigether-options {
+ auto-negotiation;
+ }
+ unit 0 {
+ family inet {
+ address 172.23.6.81/29 {
+ preferred;
+ }
+ address 164.58.207.225/27;
+ }
+ }
+ }
+ ge-0/3/9 {
+ description "Tulsa PTC L2 Link to OCCC";
+ flexible-vlan-tagging;
+ encapsulation flexible-ethernet-services;
+ unit 2515 {
+ encapsulation vlan-ccc;
+ vlan-id-range 1-4000;
+ }
+ }
+ ae0 {
+ description "DIA CCC [NO-MONITOR]";
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ aggregated-ether-options {
+ minimum-links 1;
+ lacp {
+ active;
+ periodic fast;
+ }
+ }
+ unit 2521 {
+ encapsulation vlan-ccc;
+ vlan-id-range 8-120;
+ family ccc;
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 127.0.0.1/32;
+ address 164.58.199.234/32;
+ }
+ family inet6 {
+ address 2610:1d8::19/128;
+ }
+ }
+ }
+}
+inactive: forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1000;
+ }
+ family inet {
+ output {
+ flow-server 164.58.253.210 {
+ port 9993;
+ version-ipfix {
+ template {
+ IP-V4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.234;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+snmp {
+ location "Tulsa, OK";
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ targets {
+ 164.58.253.34;
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ nonstop-routing;
+ router-id 164.58.199.234;
+ autonomous-system 5078;
+ forwarding-table {
+ export LOAD-BALANCE;
+ }
+}
+protocols {
+ mpls {
+ interface xe-0/0/0.124;
+ interface xe-0/1/0.144;
+ interface lo0.0;
+ }
+ bgp {
+ group CORE-RR {
+ type internal;
+ local-address 164.58.199.234;
+ family inet {
+ any;
+ }
+ family inet-vpn {
+ any;
+ }
+ family inet6 {
+ unicast;
+ }
+ family inet6-vpn {
+ unicast;
+ }
+ family l2vpn {
+ signaling;
+ }
+ family inet-mvpn {
+ signaling;
+ }
+ family inet6-mvpn {
+ signaling;
+ }
+ export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ peer-as 5078;
+ neighbor 164.58.199.216 {
+ description OKC-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ neighbor 164.58.199.226 {
+ description TUL-CORE6-IBGP;
+# authentication-key <removed>;
+ }
+ }
+ }
+ ospf {
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface xe-0/0/0.124 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$kq5Qn/tpOR/9RSrex7DiHkfz69AuBEQF9p0BEh" start-time "2011-6-23.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface lo0.0;
+ interface fxp0.0 {
+ disable;
+ }
+ interface xe-0/1/0.144 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$kq5Qn/tpOR/9RSrex7DiHkfz69AuBEQF9p0BEh" start-time "2011-6-23.23:30:00 -0500"; ## SECRET-DATA
+ }
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ inactive: interface xe-0/0/1.152;
+ }
+ }
+ ospf3 {
+ area 0.0.0.0 {
+ interface xe-0/0/0.124 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ interface xe-0/1/0.144 {
+ link-protection;
+ ipsec-sa OneNet-OSPF3-AUTH;
+ bfd-liveness-detection {
+ minimum-interval 100;
+ multiplier 3;
+ }
+ }
+ }
+ }
+ ldp {
+ preference 255;
+ track-igp-metric;
+ interface xe-0/0/0.124;
+ interface xe-0/1/0.144;
+ interface lo0.0;
+ }
+ l2circuit {
+ neighbor 164.58.199.233 {
+ interface ge-0/3/9.2515 {
+ virtual-circuit-id 2515;
+ }
+ }
+ neighbor 164.58.199.193 {
+ interface ae0.2521 {
+ virtual-circuit-id 2521;
+ }
+ }
+ }
+ lldp {
+ interface xe-0/0/0;
+ interface xe-0/1/0;
+ }
+}
+policy-options {
+ prefix-list EBGP-IPV4-NEIGHBORS;
+ policy-statement LOAD-BALANCE {
+ then {
+ load-balance per-packet;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then {
+ community add PTCCORE1;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then {
+ community add PTCCORE1;
+ accept;
+ }
+ }
+ }
+ community Ada members 5078:22;
+ community Altus members 5078:26;
+ community Alva members 5078:74;
+ community Ardmore members 5078:10;
+ community Bartlesville members 5078:134;
+ community Chickasha members 5078:82;
+ community Claremore members 5078:142;
+ community Duncan members 5078:18;
+ community Durant members 5078:14;
+ community Edmond members 5078:235;
+ community Elreno members 5078:6;
+ community Enid members 5078:66;
+ community Goodwell members 5078:62;
+ community Idabel members 5078:102;
+ community Langston members 5078:236;
+ community Lawton120 members 5078:189;
+ community Lawton480 members 5078:202;
+ community Mcalester members 5078:90;
+ community Miami members 5078:138;
+ community Midwest-City members 5078:2;
+ community Muskogee members 5078:94;
+ community NORMANCORE1 members 5078:230;
+ community NORMANCORE2 members 5078:231;
+ community OKCCCCORE1 members 5078:233;
+ community OKCCORE1 members 5078:211;
+ community OKCCORE2 members 5078:212;
+ community OKCCORE3 members 5078:213;
+ community OKCCORE4 members 5078:214;
+ community OKCCORE5 members 5078:215;
+ community OKCCORE6 members 5078:216;
+ community OSUOKC members 5078:50;
+ community Okmulgee members 5078:110;
+ community PTCCORE1 members 5078:234;
+ community Ponca-City members 5078:186;
+ community Poteau members 5078:146;
+ community STILLWATERCORE1 members 5078:232;
+ community Sallisaw members 5078:118;
+ community Sayre members 5078:30;
+ community Seminole members 5078:46;
+ community TULSACORE1 members 5078:221;
+ community TULSACORE2 members 5078:222;
+ community TULSACORE3 members 5078:223;
+ community TULSACORE4 members 5078:224;
+ community TULSACORE5 members 5078:225;
+ community TULSACORE6 members 5078:226;
+ community Tahlequah members 5078:130;
+ community Tishomingo members 5078:86;
+ community Tonkawa members 5078:70;
+ community Warner members 5078:106;
+ community Weathrford members 5078:38;
+ community Wilburn members 5078:98;
+ community Woodward members 5078:58;
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ }
+ }
+ forwarding-classes {
+ class data queue-num 0;
+ class voice queue-num 1;
+ class video queue-num 2;
+ class network-control queue-num 3;
+ }
+ interfaces {
+ all {
+ unit * {
+ scheduler-map sch-map;
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ scheduler-maps {
+ sch-map {
+ forwarding-class data scheduler data-sch;
+ forwarding-class voice scheduler voice-sch;
+ forwarding-class video scheduler video-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ }
+ }
+ schedulers {
+ data-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ voice-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ video-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+inactive: services {
+ flow-monitoring {
+ version-ipfix {
+ template IP-V4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ template-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ option-refresh-rate {
+ packets 1000;
+ seconds 10;
+ }
+ ipv4-template;
+ }
+ }
+ }
+}
+{master}
+# grnoc-mon at TULSA-PTC1-MX480-RE0> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.15.125 xe-0/0/0.124 Full 164.58.199.221
+# 164.58.15.145 xe-0/1/0.144 Full 164.58.199.222
+#
+# {master}
Index: hub.chi.onenet.net
===================================================================
--- hub.chi.onenet.net (revision 76371)
+++ hub.chi.onenet.net (working copy)
@@ -281,7 +281,7 @@
#t3-2/0/1.0 up up
#ct3-2/0/2 up up
#t1-2/0/2:1 up down
-#t1-2/0/2:2 down down
+#t1-2/0/2:2 down up
#t1-2/0/2:3 up down
#t1-2/0/2:4 up up
#t1-2/0/2:4.0 up up
@@ -309,7 +309,7 @@
#t1-2/0/2:21 down down
#t1-2/0/2:22 down down
#t1-2/0/2:23 down down
-#t1-2/0/2:24 down down
+#t1-2/0/2:24 down up
#t1-2/0/2:25 down up
#t1-2/0/2:26 down down
#t1-2/0/2:27 down down
More information about the Nocrancid
mailing list