[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri Feb 15 09:01:52 CST 2013


Index: hub.chi.onenet.net
===================================================================
--- hub.chi.onenet.net	(revision 52587)
+++ hub.chi.onenet.net	(working copy)
@@ -337,7 +337,7 @@
 #t1-2/0/2:21 up down
 #t1-2/0/2:22 up down
 #t1-2/0/2:23 up down
-#t1-2/0/2:24 down up
+#t1-2/0/2:24 down down
 #t1-2/0/2:24.0 up down
 #t1-2/0/2:25 up up
 #t1-2/0/2:26 up down

Index: core3.okc-m120.onenet.net
===================================================================
--- core3.okc-m120.onenet.net	(revision 52588)
+++ core3.okc-m120.onenet.net	(working copy)
@@ -802,8 +802,8 @@
 #t1-2/3/0:8:11 up up
 #t1-2/3/0:8:11.0 up up
 #t1-2/3/0:8:12 up down
-#t1-2/3/0:8:13 up down
-#t1-2/3/0:8:13.0 up down
+#t1-2/3/0:8:13 up up
+#t1-2/3/0:8:13.0 up up
 #t1-2/3/0:8:14 up up
 #t1-2/3/0:8:14.0 up up
 #t1-2/3/0:8:15 up down
@@ -1089,7 +1089,7 @@
 #t1-3/3/0:2:6 up up
 #t1-3/3/0:2:6.0 up up
 #t1-3/3/0:2:7 up up
-#t1-3/3/0:2:7.0 up up
+#t1-3/3/0:2:7.0 up down
 #t1-3/3/0:2:8 up up
 #t1-3/3/0:2:8.0 up up
 #t1-3/3/0:2:9 up down

Index: san-sw-lawton.onenet.net
===================================================================
--- san-sw-lawton.onenet.net	(revision 51748)
+++ san-sw-lawton.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at SAN-EX2200> show system commit 
+#   2013-02-15 08:42:43 CST by joel via cli
 #   2013-02-05 13:40:41 CST by admin via netconf
 #   2013-02-05 13:40:25 CST by admin via netconf
 #   2013-02-05 13:37:42 CST by admin via netconf
 #   2013-02-05 13:37:28 CST by admin via netconf
 #   2013-02-05 13:35:52 CST by admin via netconf
-#   2013-02-05 13:35:38 CST by admin via netconf
 # grnoc-mon at SAN-EX2200> show chassis environment 
 # Class Item                           Status     Measurement
 # Power FPC 0 Power Supply 0           OK        
@@ -151,7 +151,7 @@
 # grnoc-mon at SAN-EX2200> show system uptime 
 # System booted: 2012-07-05 12:27 CDT 
 # Protocols started: 2012-07-05 12:31 CDT 
-# Last configured: 2013-02-05 13:40 CST  by admin
+# Last configured: 2013-02-15 08:42 CST  by joel
 # 
 # grnoc-mon at SAN-EX2200> show interface terse 
 #Interface Admin Link
@@ -232,7 +232,7 @@
 #vlan.0 up up
 #vlan.250 up up
 # grnoc-mon at SAN-EX2200> show configuration 
-## Last commit: 2013-02-05 13:40:41 CST by admin
+## Last commit: 2013-02-15 08:42:43 CST by joel
 version 10.4R2.6;
 system {
     host-name SAN-EX2200;
@@ -256,13 +256,28 @@
         }
     }
     login {
-        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n;";
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
         class admin {
-            idle-timeout 1044;
+            idle-timeout 1440;
             permissions all;
         }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
         user admin {
-            uid 2000;
+            uid 1000;
             class super-user;
             authentication {
 #                encrypted-password <removed>;
@@ -272,10 +287,18 @@
             uid 2018;
             class admin;
         }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
     }
     services {
         ssh {
-            root-login deny;
+            root-login allow;
             protocol-version v2;
         }
         netconf {

Index: san-sw-tulsa-ex2200.onenet.net
===================================================================
--- san-sw-tulsa-ex2200.onenet.net	(revision 52467)
+++ san-sw-tulsa-ex2200.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at san-sw-tulsa-EX2200> show system commit 
+#   2013-02-15 08:34:51 CST by joel via cli
 #   2013-02-13 14:51:57 CST by admin via cli
 #   2013-02-13 12:00:21 CST by admin via cli
 #   2013-02-13 11:54:29 CST by admin via cli
 #   2013-02-13 11:38:46 CST by admin via cli
 #   2013-02-13 11:25:54 CST by admin via cli
-#   2013-02-13 11:24:38 CST by admin via cli
 # grnoc-mon at san-sw-tulsa-EX2200> show chassis environment 
 # Class Item                           Status     Measurement
 # Power FPC 0 Power Supply 0           OK        
@@ -154,7 +154,7 @@
 # grnoc-mon at san-sw-tulsa-EX2200> show system uptime 
 # System booted: 2013-02-12 11:46 CST 
 # Protocols started: 2013-02-12 11:50 CST 
-# Last configured: 2013-02-13 14:51 CST  by admin
+# Last configured: 2013-02-15 08:34 CST  by joel
 # 
 # grnoc-mon at san-sw-tulsa-EX2200> show interface terse 
 #Interface Admin Link
@@ -228,7 +228,7 @@
 #vlan.0 up down
 #vlan.254 up down
 # grnoc-mon at san-sw-tulsa-EX2200> show configuration 
-## Last commit: 2013-02-13 14:51:57 CST by admin
+## Last commit: 2013-02-15 08:34:51 CST by joel
 version 11.4R6.6;
 system {
     host-name san-sw-tulsa-EX2200;
@@ -256,13 +256,28 @@
         }
     }
     login {
-        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n;";
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
         class admin {
-            idle-timeout 1044;
+            idle-timeout 1440;
             permissions all;
         }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
         user admin {
-            uid 2000;
+            uid 1000;
             class super-user;
             authentication {
 #                encrypted-password <removed>;
@@ -272,10 +287,18 @@
             uid 2018;
             class admin;
         }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
     }
     services {
         ssh {
-            root-login deny;
+            root-login allow;
             protocol-version v2;
         }
         web-management {



More information about the Nocrancid mailing list