[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Mon Jun 10 16:00:51 CDT 2013


Index: core1.okc-mx960.onenet.net
===================================================================
--- core1.okc-mx960.onenet.net	(revision 67184)
+++ core1.okc-mx960.onenet.net	(working copy)
@@ -586,9 +586,9 @@
 #xe-3/2/0 up down
 #xe-3/2/0.32767 up down
 #xe-3/2/1 up down
-#xe-3/3/0 up down
-#xe-3/3/0.70 up down
-#xe-3/3/0.32767 up down
+#xe-3/3/0 up up
+#xe-3/3/0.70 up up
+#xe-3/3/0.32767 up up
 #xe-3/3/1 up up
 #xe-3/3/1.69 up up
 #xe-3/3/1.32767 up up
@@ -2635,6 +2635,7 @@
 # 164.58.246.90    xe-2/0/0.69            Full      164.58.199.233
 # 164.58.246.102   xe-2/0/1.69            Full      164.58.199.221
 # 164.58.246.118   xe-2/1/0.69            Full      164.58.199.232
+# 164.58.245.118   xe-3/3/0.70            Full      164.58.199.195
 # 164.58.246.54    xe-3/3/1.69            Full      164.58.199.31
 # 
 # {master}

Index: core.okcbok.onenet.net
===================================================================
--- core.okcbok.onenet.net	(revision 59394)
+++ core.okcbok.onenet.net	(working copy)
@@ -0,0 +1,854 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at OKCBOK-MX80> show system commit 
+#   2013-06-10 16:47:37 CDT by admin via cli
+#   2013-06-10 16:47:13 CDT by admin via cli
+#   2013-05-03 17:04:01 CDT by admin via cli
+#   2013-05-01 16:11:36 CDT by admin via cli
+#   2013-05-01 12:11:28 CDT by admin via cli
+#   2013-05-01 11:31:03 CDT by admin via cli
+# grnoc-mon at OKCBOK-MX80> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  PEM 0                          OK        
+#       PEM 1                          OK        
+#       RE 0 Intake                    OK        
+#       RE 0 Front Exhaust             OK        
+#       RE 0 Rear Exhaust              OK        
+#       Routing Engine                 OK        
+#       Routing Engine CPU             OK        
+#       TFEB 0 QX 0 TSen               OK        
+#       TFEB 0 QX 0 Chip               OK        
+#       TFEB 0 LU 0 TSen               OK        
+#       TFEB 0 LU 0 Chip               OK        
+#       TFEB 0 MQ 0 TSen               OK        
+#       TFEB 0 MQ 0 Chip               OK        
+#       TFEB 0 TBB PFE TSen            OK        
+#       TFEB 0 TBB PFE Chip            OK        
+#       TFEB 0 TFEB PCIE TSen          OK        
+#       TFEB 0 TFEB PCIE Chip          OK        
+# Fans  Fan 1                          OK
+#       Fan 2                          OK
+#       Fan 3                          OK
+#       Fan 4                          OK
+#       Fan 5                          OK
+# 
+# grnoc-mon at OKCBOK-MX80> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    ROM        Juniper ROM Monitor Version 10.4b1         
+#                          O/S        Version 11.4R7.5 by builder on 2013-03-01 1
+# FPC 1                    ROM        Juniper ROM Monitor Version 10.4b1         
+#                          O/S        Version 11.4R7.5 by builder on 2013-03-01 1
+# TFEB                     ROM        Juniper ROM Monitor Version 10.4b1         
+#                          O/S        Version 11.4R7.5 by builder on 2013-03-01 1
+# 
+# grnoc-mon at OKCBOK-MX80> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                 1024 MB
+#   Total SRAM                      403 MB
+#   Total SDRAM                    1316 MB
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                 1024 MB
+#   Total SRAM                      403 MB
+#   Total SDRAM                    1316 MB
+# 
+# grnoc-mon at OKCBOK-MX80> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                E4137             MX80
+# Midplane         REV 07   711-031594   YL2381            MX80
+# PEM 0            Rev 03   740-029712   WCA0806           DC Power Entry Module
+# PEM 1            Rev 03   740-029712   WCA0810           DC Power Entry Module
+# Routing Engine            BUILTIN      BUILTIN           Routing Engine
+# TFEB 0                    BUILTIN      BUILTIN           Forwarding Engine Processor
+#   QXM 0          REV 05   711-028408   YM0166            MPC QXM
+# FPC 0                     BUILTIN      BUILTIN           MPC BUILTIN
+#   MIC 0                   BUILTIN      BUILTIN           4x 10GE XFP
+#     PIC 0                 BUILTIN      BUILTIN           4x 10GE XFP
+#       Xcvr 0     REV 01   740-031832   T11A25460         XFP-10G-ZR
+#       Xcvr 3     REV 03   740-014289   CC44BQ0AD         XFP-10G-SR
+# FPC 1                     BUILTIN      BUILTIN           MPC BUILTIN
+# Fan Tray                                                 Fan Tray
+# 
+# grnoc-mon at OKCBOK-MX80> show chassis hardware models 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     FRU model number
+# Midplane         REV 07   711-031594   YL2381            CHAS-MX80-S
+# PEM 0            Rev 03   740-029712   WCA0806           PWR-MX80-DC-S
+# PEM 1            Rev 03   740-029712   WCA0810           PWR-MX80-DC-S
+# Routing Engine            BUILTIN      BUILTIN          
+# TFEB 0                    BUILTIN      BUILTIN          
+# FPC 0                     BUILTIN      BUILTIN          
+# FPC 1                     BUILTIN      BUILTIN          
+# Fan Tray                                                 FANTRAY-MX80-S
+# 
+# grnoc-mon at OKCBOK-MX80> show chassis routing-engine 
+# Routing Engine status:
+#     DRAM                      2048 MB
+# 
+# grnoc-mon at OKCBOK-MX80> show chassis scb 
+# grnoc-mon at OKCBOK-MX80> show chassis sfm detail 
+# grnoc-mon at OKCBOK-MX80> show chassis ssb 
+# grnoc-mon at OKCBOK-MX80> show system boot-messages 
+# platform_early_bootinit: MX-PPC Series Early Boot Initialization
+# mxppc_set_re_type: hw.board.type is MX80
+# mxppc_set_re_type: REtype:78, model:mx80, model:MX80, i2cid:2447
+# WDOG initialized
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# WARNING: debug.mpsafenet forced to 0 as ipsec requires Giant
+# Timecounter "decrementer" frequency 66666666 Hz quality 0
+# cpu0: Freescale e500v2 core revision 3.0
+# cpu0: HID0 80004000<EMCP,TBEN>
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing M/T platform properties ..
+# nexus0: <PPC e500 Nexus device>
+# ocpbus0: <on-chip peripheral bus> on nexus0
+# openpic0: <OpenPIC in on-chip peripheral bus> iomem 0xf7f40000-0xf7f600b3 on ocpbus0
+# uart0: <16550 or compatible> iomem 0xf7f04500-0xf7f0450f irq 58 on ocpbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> iomem 0xf7f04600-0xf7f0460f irq 58 on ocpbus0
+# lbc0: <Freescale 8533 Local Bus Controller> iomem 0xf7f05000-0xf7f05fff,0xf8000000-0xffffffff irq 20,21,22,24 on ocpbus0
+# cfi0: <AMD/Fujitsu - 8MB> iomem 0xff800000-0xffffffff on lbc0
+# tbbcpld0 iomem 0xff700000-0xff7fffff on lbc0
+# tbbcpld_attach: 1st IRQ alloc; start:4 end:4 flags:7
+# tbbcpld_attach: 2st IRQ alloc; start:6 end:6 flags:7
+# uart2: <16750 or compatible> iomem 0xff600000-0xff600007 on lbc0
+# i2c0: <MPC85XX OnChip i2c Controller> iomem 0xf7f03000-0xf7f03014 irq 59 on ocpbus0
+# ds1672 rtc0: <DS1672 RTC> on i2c0
+# i2c1: <MPC85XX OnChip i2c Controller> iomem 0xf7f03100-0xf7f03114 irq 59 on ocpbus0
+# tsec0: <eTSEC ethernet controller> iomem 0xf7f24000-0xf7f24fff irq 45,46,50 on ocpbus0
+# tsec0: hardware MAC address 02:00:00:00:00:0b
+# miibus0: <MII bus> on tsec0
+# gentbi0: <Generic ten-bit interface> on miibus0
+# gentbi0:  1000baseSX-FDX, 1000baseT-FDX, auto
+# tsec1: <eTSEC ethernet controller> iomem 0xf7f25000-0xf7f25fff irq 51,52,56 on ocpbus0
+# tsec1: hardware MAC address 02:00:00:00:00:04
+# miibus1: <MII bus> on tsec1
+# gentbi1: <Generic ten-bit interface> on miibus1
+# gentbi1:  1000baseSX-FDX, 1000baseT-FDX, auto
+# tsec2: <eTSEC ethernet controller> iomem 0xf7f26000-0xf7f26fff irq 47,48,49 on ocpbus0
+# tsec2: hardware MAC address 80:71:1f:c5:f4:ff
+# miibus2: <MII bus> on tsec2
+# e1000phy0: <Marvell 88E1112 Gigabit PHY> on miibus2
+# e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# tsec3: <eTSEC ethernet controller> iomem 0xf7f27000-0xf7f27fff irq 53,54,55 on ocpbus0
+# tsec3: hardware MAC address 02:00:02:00:00:04
+# miibus3: <MII bus> on tsec3
+# gentbi2: <Generic ten-bit interface> on miibus3
+# gentbi2:  1000baseSX-FDX, 1000baseT-FDX, auto
+# pcib0: <Freescale MPC8572 PCI Express host controller> iomem 0xf7f09000-0xf7f09fff,0xe8000000-0xebffffff on ocpbus0
+# pci0: <PCI bus> on pcib0
+# pcib1: <PCI-PCI bridge> mem 0xe8000000-0xe80fffff at device 0.0 on pci0
+# pci1: <PCI bus> on pcib1
+# pcib2: <PCI-PCI bridge> mem 0xe8100000-0xe810ffff irq 0 at device 0.0 on pci1
+# pci2: <PCI bus> on pcib2
+# pci2: <serial bus, USB> at device 1.0 (no driver attached)
+# ehci0: <NEC uPD 72010x USB 2.0 controller> mem 0xe8200000-0xe82000ff irq 21 at device 1.1 on pci2
+# usb0: EHCI version 1.0
+# usb0: <NEC uPD 72010x USB 2.0 controller> on ehci0
+# usb0: USB revision 2.0
+# uhub0: NEC EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 3 ports with 3 removable, self powered
+# umass0: ATP Electronics ATP IG eUSB SSD, rev 2.00/11.00, addr 2
+# umass0: SCSI over Bulk-Only; quirks = 0x0000
+# umass0:0:0:-1: Attached to scbus0
+# umass1: ATP Electronics ATP IG eUSB SSD, rev 2.00/11.00, addr 3
+# umass1: SCSI over Bulk-Only; quirks = 0x0000
+# umass1:1:1:-1: Attached to scbus1
+# Initializing product: 88 ..
+# Setting up M/T interface operations and attributes
+# platform_cookie_read not implemented
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ATP ATP IG eUSB SSD 1100> Fixed Direct Access SCSI-0 device
+# da0: 40.000MB/s transfers
+# da0: 3920MB (8028160 512 byte sectors: 255H 63S/T 499C)
+# da1 at umass-sim1 bus 1 target 0 lun 0
+# da1: <ATP ATP IG eUSB SSD 1100> Fixed Direct Access SCSI-0 device
+# da1: 40.000MB/s transfers
+# da1: 3920MB (8028160 512 byte sectors: 255H 63S/T 499C)
+# Trying to mount root from ufs:/dev/da0s1a
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at OKCBOK-MX80> show version 
+# Hostname: OKCBOK-MX80 # Model: mx80 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX80) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] #  # grnoc-mon at OKCBOK-MX80> file list /var/tmp detail # 
+# /var/tmp:
+# total 279688
+# -rw-r--r--  1 admin field      20552 Apr 19 11:29 NOR2-Config.txt
+# -rw-r--r--  1 root  field       5506 Feb 22 11:05 VPLS-Q-in-Q-METRO-and-DOH.txt
+# -rw-r--r--  1 root  field       3485 Feb 22 11:02 eodls.txt
+# drwxr-xr-x  2 root  field        512 Jan 11  2012 gres-tp/
+# drwxrwxrwx  2 root  wheel        512 Jan 11  2012 install/
+# -rw-r--r--  1 root  field  143070583 Jan 27  2012 jbundle-ppc-10.4R6.5-domestic.tgz
+# -rw-r--r--  1 root  field          0 Jan 27  2012 jperf
+# -rw-r--r--  1 root  field          0 Jan 27  2012 jperf_shmem_sem
+# -rw-r--r--  1 root  field        155 May 22 01:29 krt_gencfg_filter.txt
+# drwxrwxrwx  2 root  wheel        512 Jan 11  2012 pics/
+# -r--r--r--  1 root  field        237 Mar 27 15:26 preinstall_boot_loader.conf
+# drwxr-xr-x  2 root  field        512 Jan 11  2012 rtsdb/
+# -rw-r--r--  1 root  field          0 Jan 27  2012 tracelogs
+# -rw-r--r--  1 root  field          0 Jan 27  2012 tracelogs_jperf
+# -rw-r--r--  1 root  field          0 Jan 27  2012 tracelogs_sem
+# drwxr-xr-x  2 root  field        512 Apr 19 12:02 usb/
+# drwxrwxrwT  2 root  wheel        512 Jan 11  2012 vi.recover/
+# 
+# grnoc-mon at OKCBOK-MX80> show system uptime 
+# System booted: 2013-05-22 00:20 CDT 
+# Protocols started: 2013-05-22 00:22 CDT 
+# Last configured: 2013-06-10 16:47 CDT  by admin
+# 
+# grnoc-mon at OKCBOK-MX80> show interface terse 
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.70 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 down down
+#xe-0/0/2 down down
+#xe-0/0/3 up down
+#xe-0/0/3.32767 up down
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up down
+#fxp0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#lsi.0 up up
+#me0 up up
+#me0.0 up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at OKCBOK-MX80> show configuration 
+## Last commit: 2013-06-10 16:47:37 CDT by admin
+version 11.4R7.5;
+system {
+    host-name OKCBOK-MX80;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        156.110.198.10;
+        164.58.233.202;
+        164.58.253.4;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.199.195;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+        class admin {
+            idle-timeout 1044;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+        netconf {
+            ssh;
+        }
+        web-management {
+            http;
+        }
+    }
+    syslog {
+        archive size 10m files 20;
+        user * {
+            any emergency;
+        }
+        host 164.58.253.92 {
+            any any;
+        }
+        file messages {
+            any notice;
+            authorization info;
+            match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file default-log-messages {
+            any any;
+            match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vc add)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|(package -X update)|(package -X delete)|GRES|CFMD_CCM_DEFECT|LFMD_3AH|MEDIA_FLOW_ERROR|RPD_MPLS_PATH_BFD";
+            structured-data;
+        }
+        file updown {
+            any any;
+            match "(TRAP_LINK)";
+        }
+    }
+    commit synchronize;
+    ntp {
+        server 164.58.3.98;
+        server 164.58.253.82 prefer;
+    }
+}
+chassis {
+    alarm {
+        management-ethernet {
+            link-down ignore;
+        }
+    }
+    inactive: network-services all-ethernet;
+}
+interfaces {
+    xe-0/0/0 {
+        description "CORE 10GE to core1.okc xe-3/3/0 | OneNet-OKC-OKCBOK-XE-5178";
+        vlan-tagging;
+        mtu 9192;
+        encapsulation flexible-ethernet-services;
+        unit 70 {
+            vlan-id 70;
+            family inet {
+                mtu 9000;
+                address 164.58.245.118/30;
+            }
+            family mpls;
+        }
+    }
+    xe-0/0/1 {
+        disable;
+    }
+    xe-0/0/2 {
+        disable;
+    }
+    xe-0/0/3 {
+        description "NNI to Dobson Communications - OKCBOK - CIR0005179";
+        flexible-vlan-tagging;
+        encapsulation flexible-ethernet-services;
+        gigether-options {
+            no-auto-negotiation;
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+                address 127.0.0.1/32;
+                address 164.58.199.195/32;
+            }
+        }
+    }
+}
+snmp {
+    location "Oklahoma City, OK";
+    contact "Net Group";
+    client-list snmp-management {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+    trap-group "<removed>" {
+        targets {
+            164.58.253.34;
+            164.58.253.35;
+        }
+    }
+}
+routing-options {
+    ##
+    ## Warning: statement ignored: unsupported platform (mx80)
+    ## Warning: Graceful switchover needs to be configured
+    ##
+    nonstop-routing;
+    router-id 164.58.199.195;
+    autonomous-system 5078;
+    forwarding-table {
+        export LOAD-BALANCE;
+    }
+}
+protocols {
+    mpls {
+        interface lo0.0;
+        interface xe-0/0/0.70;
+    }
+    bgp {
+        group CORE-RR {
+            type internal;
+            local-address 164.58.199.195;
+            family inet {
+                any;
+            }
+            family inet-vpn {
+                any;
+            }
+            family inet6 {
+                unicast;
+            }
+            family inet6-vpn {
+                unicast;
+            }
+            family l2vpn {
+                signaling;
+            }
+            family inet-mvpn {
+                signaling;
+            }
+            family inet6-mvpn {
+                signaling;
+            }
+#            authentication-key <removed>;
+            export [ NEXT-HOP-SELF REDISTRIBUTE-STATICS REDISTRIBUTE-DIRECTS ];
+            peer-as 5078;
+            neighbor 164.58.199.216;
+            neighbor 164.58.199.226;
+        }
+    }
+    ospf {
+        reference-bandwidth 100g;
+        area 0.0.0.0 {
+            interface lo0.0 {
+                link-protection;
+            }
+            interface fxp0.0 {
+                disable;
+            }
+            interface xe-0/0/0.70 {
+                link-protection;
+                authentication {
+                    md5 7 key "$9$E2FhlK8X-dwgXxgJGDPfBIRErvLxNVs4KMxdbs4o"; ## SECRET-DATA
+                }
+                bfd-liveness-detection {
+                    minimum-interval 100;
+                    multiplier 3;
+                }
+            }
+        }
+    }
+    ospf3 {
+        area 0.0.0.0 {
+            interface xe-0/0/0.70;
+        }
+    }
+    ldp {
+        preference 255;
+        track-igp-metric;
+        interface xe-0/0/0.70;
+        interface lo0.0;
+    }
+    lldp {
+        interface xe-0/0/0;
+    }
+}
+policy-options {
+    prefix-list EBGP-IPV4-NEIGHBORS;
+    policy-statement LOAD-BALANCE {
+        then {
+            load-balance per-packet;
+        }
+    }
+    policy-statement NEXT-HOP-SELF {
+        term 1 {
+            from protocol bgp;
+            then {
+                next-hop self;
+                accept;
+            }
+        }
+    }
+    policy-statement REDISTRIBUTE-DIRECTS {
+        term 1 {
+            from protocol direct;
+            then {
+                community add OKCBOK;
+                external {
+                    type 1;
+                }
+                accept;
+            }
+        }
+    }
+    policy-statement REDISTRIBUTE-STATICS {
+        term 1 {
+            from protocol static;
+            then {
+                community add OKCBOK;
+                accept;
+            }
+        }
+    }
+    community 5078:25776 members 5078:25776;
+    community Ada members 5078:22;
+    community Altus members 5078:26;
+    community Alva members 5078:74;
+    community Ardmore members 5078:10;
+    community Bartlesville members 5078:134;
+    community Chickasha members 5078:82;
+    community Claremore members 5078:142;
+    community Duncan members 5078:18;
+    community Durant members 5078:14;
+    community Edmond members 5078:235;
+    community Elreno members 5078:6;
+    community Enid members 5078:66;
+    community Goodwell members 5078:62;
+    community Idabel members 5078:102;
+    community Langston members 5078:236;
+    community Lawton120 members 5078:189;
+    community Lawton480 members 5078:202;
+    community Mcalester members 5078:90;
+    community Miami members 5078:138;
+    community Midwest-City members 5078:2;
+    community Muskogee members 5078:94;
+    community NORMANCORE1 members 5078:230;
+    community NORMANCORE2 members 5078:231;
+    community OKCBOK members 5078:195;
+    community OKCCCCORE1 members 5078:233;
+    community OKCCORE1 members 5078:211;
+    community OKCCORE2 members 5078:212;
+    community OKCCORE3 members 5078:213;
+    community OKCCORE4 members 5078:214;
+    community OKCCORE5 members 5078:215;
+    community OKCCORE6 members 5078:216;
+    community OSUOKC members 5078:50;
+    community Okmulgee members 5078:110;
+    community PTCCORE1 members 5078:234;
+    community Ponca-City members 5078:186;
+    community Poteau members 5078:146;
+    community STILLWATERCORE1 members 5078:232;
+    community Sallisaw members 5078:118;
+    community Sayre members 5078:30;
+    community Seminole members 5078:46;
+    community TULSA-STATE-BUILDING members 5078:193;
+    community TULSACORE1 members 5078:221;
+    community TULSACORE2 members 5078:222;
+    community TULSACORE3 members 5078:223;
+    community TULSACORE4 members 5078:224;
+    community TULSACORE5 members 5078:225;
+    community TULSACORE6 members 5078:226;
+    community Tahlequah members 5078:130;
+    community Tishomingo members 5078:86;
+    community Tonkawa members 5078:70;
+    community Warner members 5078:106;
+    community Weathrford members 5078:38;
+    community Wilburn members 5078:98;
+    community Woodward members 5078:58;
+}
+class-of-service {
+    classifiers {
+        dscp dscp-default {
+            import default;
+        }
+    }
+    forwarding-classes {
+        class data queue-num 0;
+        class voice queue-num 1;
+        class video queue-num 2;
+        class network-control queue-num 3;
+    }
+    interfaces {
+        all {
+            scheduler-map sch-map;
+            unit * {
+                classifiers {
+                    dscp dscp-default;
+                }
+            }
+        }
+    }
+    scheduler-maps {
+        sch-map {
+            forwarding-class data scheduler data-sch;
+            forwarding-class voice scheduler voice-sch;
+            forwarding-class video scheduler video-sch;
+            forwarding-class network-control scheduler network-control-sch;
+        }
+    }
+    schedulers {
+        data-sch {
+            transmit-rate {
+                remainder;
+            }
+            buffer-size {
+                remainder;
+            }
+            priority low;
+        }
+        voice-sch {
+            transmit-rate percent 5;
+            buffer-size percent 5;
+            priority high;
+        }
+        video-sch {
+            transmit-rate percent 5;
+            buffer-size percent 5;
+            priority high;
+        }
+        network-control-sch {
+            transmit-rate percent 5;
+            buffer-size percent 5;
+            priority high;
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SERVICES {
+                from {
+                    source-address {
+                        129.15.127.96/28;
+                        156.110.31.0/27;
+                        156.110.31.32/28;
+                        164.58.10.0/24;
+                        164.58.253.0/24;
+                        64.207.244.14/32;
+                        66.129.224.37/32;
+                        164.58.15.0/24;
+                        164.58.244.0/22;
+                    }
+                    protocol tcp;
+                    destination-port [ ssh http ];
+                }
+                then accept;
+            }
+            term OSPF-ALLOW {
+                from {
+                    source-address {
+                        164.58.199.0/24;
+                        164.58.0.0/16;
+                        156.110.0.0/16;
+                    }
+                    protocol ospf;
+                }
+                then accept;
+            }
+            term EBGP-ALLOW {
+                from {
+                    prefix-list {
+                        EBGP-IPV4-NEIGHBORS;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
+            term IBGP-ALLOW {
+                from {
+                    source-address {
+                        164.58.199.216/32;
+                        164.58.199.226/32;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
+            term FIRST-FRAG {
+                from {
+                    first-fragment;
+                }
+                then {
+                    discard;
+                }
+            }
+            term NEXT-FRAG {
+                from {
+                    is-fragment;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ICMP-ALLOW {
+                from {
+                    protocol icmp;
+                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+                }
+                then accept;
+            }
+            term SERVICES-OUTBOUND {
+                from {
+                    source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+                }
+                then accept;
+            }
+            term RADIUS {
+                from {
+                    source-address {
+                        156.110.31.11/32;
+                    }
+                    protocol [ udp tcp ];
+                    port [ radius radacct ];
+                }
+                then accept;
+            }
+            term NTP {
+                from {
+                    source-address {
+                        164.58.10.1/32;
+                        164.58.199.0/24;
+                    }
+                    protocol udp;
+                    port ntp;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-address {
+                        164.58.253.0/24;
+                        156.110.31.0/27;
+                        156.110.31.32/28;
+                    }
+                    protocol [ tcp udp ];
+                    port [ snmp snmptrap ];
+                }
+                then accept;
+            }
+            term LDP-ALLOW {
+                from {
+                    source-address {
+                        164.58.199.0/24;
+                        164.58.0.0/16;
+                        156.110.0.0/16;
+                    }
+                    port ldp;
+                }
+            }
+            term PIM-ALLOW {
+                from {
+                    source-address {
+                        164.58.199.0/24;
+                        164.58.0.0/16;
+                    }
+                    protocol pim;
+                }
+                then accept;
+            }
+            term BFD-ALLOW {
+                from {
+                    source-address {
+                        164.58.0.0/16;
+                    }
+                    protocol udp;
+                    port [ 3784 3785 ];
+                }
+                then accept;
+            }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
+            term DENY_ALL {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+}
+routing-instances {
+    VRF-INET6 {
+        instance-type vrf;
+        route-distinguisher 164.58.199.195:6001;
+        vrf-target target:5078:6001;
+        vrf-table-label;
+    }
+}
+inactive: services {
+    flow-monitoring {
+        version-ipfix {
+            template IP-V4 {
+                flow-active-timeout 60;
+                flow-inactive-timeout 60;
+                template-refresh-rate {
+                    packets 1000;
+                    seconds 10;
+                }
+                option-refresh-rate {
+                    packets 1000;
+                    seconds 10;
+                }
+                ipv4-template;
+            }
+        }
+    }
+}
+# grnoc-mon at OKCBOK-MX80> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 164.58.245.117   xe-0/0/0.70            Full      164.58.199.211
+# 

Index: core3.okc-m120.onenet.net
===================================================================
--- core3.okc-m120.onenet.net	(revision 67190)
+++ core3.okc-m120.onenet.net	(working copy)
@@ -919,8 +919,8 @@
 #t1-2/3/0:11:18 up down
 #t1-2/3/0:11:19 up up
 #t1-2/3/0:11:19.0 up up
-#t1-2/3/0:11:20 up up
-#t1-2/3/0:11:20.0 up up
+#t1-2/3/0:11:20 up down
+#t1-2/3/0:11:20.0 up down
 #t1-2/3/0:11:21 up up
 #t1-2/3/0:11:21.0 up up
 #t1-2/3/0:11:22 up up
@@ -1169,8 +1169,8 @@
 #t1-3/3/0:4:9.0 up up
 #t1-3/3/0:4:10 up up
 #t1-3/3/0:4:10.0 up up
-#t1-3/3/0:4:11 up up
-#t1-3/3/0:4:11.0 up up
+#t1-3/3/0:4:11 up down
+#t1-3/3/0:4:11.0 up down
 #t1-3/3/0:4:12 up down
 #t1-3/3/0:4:13 up down
 #t1-3/3/0:4:14 up down

Index: hub.dur.mx480.onenet.net
===================================================================
--- hub.dur.mx480.onenet.net	(revision 67188)
+++ hub.dur.mx480.onenet.net	(working copy)
@@ -274,9 +274,9 @@
 #ge-0/2/7 up down
 #ge-0/2/8 up down
 #ge-0/2/9 up down
-#ge-0/3/0 up down
-#ge-0/3/0.196 up down
-#ge-0/3/0.32767 up down
+#ge-0/3/0 up up
+#ge-0/3/0.196 up up
+#ge-0/3/0.32767 up up
 #ge-0/3/1 up down
 #ge-0/3/2 up down
 #ge-0/3/3 up down

Index: hub.chi.onenet.net
===================================================================
--- hub.chi.onenet.net	(revision 67189)
+++ hub.chi.onenet.net	(working copy)
@@ -281,7 +281,7 @@
 #t3-2/0/1.0 up up
 #ct3-2/0/2 up up
 #t1-2/0/2:1 up down
-#t1-2/0/2:2 down up
+#t1-2/0/2:2 down down
 #t1-2/0/2:3 up down
 #t1-2/0/2:4 up up
 #t1-2/0/2:4.0 up up
@@ -309,7 +309,7 @@
 #t1-2/0/2:21 down down
 #t1-2/0/2:22 down down
 #t1-2/0/2:23 down down
-#t1-2/0/2:24 down down
+#t1-2/0/2:24 down up
 #t1-2/0/2:25 down up
 #t1-2/0/2:26 down down
 #t1-2/0/2:27 down down

Index: hub.end.onenet.net
===================================================================
--- hub.end.onenet.net	(revision 66606)
+++ hub.end.onenet.net	(working copy)
@@ -325,8 +325,8 @@
 #t1-2/0/2:21 up down
 #t1-2/0/2:22 up down
 #t1-2/0/2:23 up down
-#t1-2/0/2:24 up up
-#t1-2/0/2:24.0 up up
+#t1-2/0/2:24 up down
+#t1-2/0/2:24.0 up down
 #t1-2/0/2:25 up down
 #t1-2/0/2:26 up down
 #t1-2/0/2:27 up down

Index: hub.woo.onenet.net
===================================================================
--- hub.woo.onenet.net	(revision 66615)
+++ hub.woo.onenet.net	(working copy)
@@ -308,8 +308,8 @@
 #t1-2/0/2:11.0 up up
 #t1-2/0/2:12 down down
 #t1-2/0/2:12.0 up down
-#t1-2/0/2:13 up up
-#t1-2/0/2:13.0 up up
+#t1-2/0/2:13 up down
+#t1-2/0/2:13.0 up down
 #t1-2/0/2:14 down down
 #t1-2/0/2:14.0 up down
 #t1-2/0/2:15 up down



More information about the Nocrancid mailing list