[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Mon Nov 4 13:01:09 CST 2013


Index: core1.okc-mx960.onenet.net
===================================================================
--- core1.okc-mx960.onenet.net	(revision 87871)
+++ core1.okc-mx960.onenet.net	(working copy)
@@ -692,7 +692,6 @@
 #lsi.1049089 up up
 #lsi.1049090 up up
 #lsi.1049096 up up
-#lsi.1053955 up up
 #mtun up up
 #pimd up up
 #pime up up

Index: core2-okc-mx960.onenet.net
===================================================================
--- core2-okc-mx960.onenet.net	(revision 87870)
+++ core2-okc-mx960.onenet.net	(working copy)
@@ -539,7 +539,6 @@
 #lsi.1 up up
 #lsi.1048836 up up
 #lsi.1048838 up up
-#lsi.1054979 up up
 #mtun up up
 #pimd up up
 #pime up up

Index: core5.okc.onenet.net
===================================================================
--- core5.okc.onenet.net	(revision 87872)
+++ core5.okc.onenet.net	(working copy)
@@ -515,9 +515,9 @@
 #ge-1/3/5.2510 down up
 #ge-1/3/5.2511 down up
 #ge-1/3/5.32767 up up
-#ge-1/3/6 up up
-#ge-1/3/6.2011 up up
-#ge-1/3/6.32767 up up
+#ge-1/3/6 up down
+#ge-1/3/6.2011 up down
+#ge-1/3/6.32767 up down
 #ge-1/3/7 up down
 #ge-1/3/8 up down
 #ge-1/3/9 up up
@@ -566,8 +566,6 @@
 #lo0.16384 up up
 #lo0.16385 up up
 #lsi up up
-#lsi.1055750 up up
-#lsi.1055751 up up
 #lsi.1383944 up up
 #lsi.1383945 up up
 #lsi.1383946 up up

Index: core7.tul.onenet.net
===================================================================
--- core7.tul.onenet.net	(revision 87241)
+++ core7.tul.onenet.net	(working copy)
@@ -117,13 +117,14 @@
 #       Xcvr 0     REV 03   740-014289   CB51BQ056         XFP-10G-SR
 #       Xcvr 1     REV 03   740-014289   CB51BQ080         XFP-10G-SR
 #     PIC 1                 BUILTIN      BUILTIN           2x 10GE  XFP
-#       Xcvr 0     REV 03   740-014289   CD09BQ0GK         XFP-10G-SR
+#       Xcvr 0     REV 01   740-031833   34T749103551      XFP-10G-LR
 #       Xcvr 1     REV 03   740-014289   CD11BQ00F         XFP-10G-SR
 #   MIC 1          REV 26   750-028387   ABBR1819          3D 4x 10GE  XFP
 #     PIC 2                 BUILTIN      BUILTIN           2x 10GE  XFP
 #       Xcvr 0     REV 03   740-014289   CB51BQ085         XFP-10G-SR
 #       Xcvr 1     REV 03   740-014289   CB51BQ09N         XFP-10G-SR
 #     PIC 3                 BUILTIN      BUILTIN           2x 10GE  XFP
+#       Xcvr 0     REV 01   740-031833   34T749103208      XFP-10G-LR
 #   QXM 0          REV 05   711-028408   YV9608            MPC QXM
 #   QXM 1          REV 05   711-028408   YV9495            MPC QXM
 # FPC 5            REV 03   750-045372   CAAA7952          MPC Type 3

Index: hub.ida.onenet.net
===================================================================
--- hub.ida.onenet.net	(revision 87571)
+++ hub.ida.onenet.net	(working copy)
@@ -302,7 +302,7 @@
 #t1-2/0/2:13 up down
 #t1-2/0/2:14 up down
 #t1-2/0/2:15 up down
-#t1-2/0/2:16 up down
+#t1-2/0/2:16 up up
 #t1-2/0/2:17 up down
 #t1-2/0/2:18 up down
 #t1-2/0/2:19 up down

Index: hub.sem.onenet.net
===================================================================
--- hub.sem.onenet.net	(revision 87873)
+++ hub.sem.onenet.net	(working copy)
@@ -375,7 +375,7 @@
 #t1-2/0/3:15 up up
 #t1-2/0/3:15.0 up up
 #t1-2/0/3:16 up up
-#t1-2/0/3:16.0 up down
+#t1-2/0/3:16.0 up up
 #t1-2/0/3:17 up up
 #t1-2/0/3:17.0 up up
 #t1-2/0/3:18 up down

Index: hub.tsb.onenet.net
===================================================================
--- hub.tsb.onenet.net	(revision 87874)
+++ hub.tsb.onenet.net	(working copy)
@@ -235,9 +235,9 @@
 #ge-1/0/2 up up
 #ge-1/0/2.2521 up up
 #ge-1/0/2.32767 up up
-#ge-1/0/3 up up
-#ge-1/0/3.2521 up up
-#ge-1/0/3.32767 up up
+#ge-1/0/3 up down
+#ge-1/0/3.2521 up down
+#ge-1/0/3.32767 up down
 #ge-1/0/4 up down
 #ge-1/0/5 up down
 #ge-1/0/6 up down

Index: swi1.mia.onenet.net
===================================================================
--- swi1.mia.onenet.net	(revision 87877)
+++ swi1.mia.onenet.net	(working copy)
@@ -0,0 +1,658 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at SWI1-MIAMI-EX-2200> show system commit 
+#   2013-11-04 12:55:52 CST by admin via cli
+#   2013-11-04 09:57:00 CST by admin via cli
+#   2013-11-04 09:54:35 CST by admin via cli commit confirmed, rollback in 5mins
+#   2013-10-31 12:32:09 CDT by admin via cli
+#   2013-10-31 12:31:25 CDT by admin via cli
+#   2013-10-31 12:28:29 CDT by admin via cli commit confirmed, rollback in 5mins
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis environment 
+# Class Item                           Status     Measurement
+# Power FPC 0 Power Supply 0           OK        
+# Temp  FPC 0 CPU                      OK        
+#       FPC 0 Exhaust Area             OK        
+#       FPC 0 EX-PFE1                  OK        
+#       FPC 0 Local Intake             OK        
+#       FPC 0 Remote Intake            OK        
+#       FPC 0 GEPHY1                   OK        
+#       FPC 0 GEPHY2                   OK        
+#       FPC 0 GEPHY3                   OK        
+#       FPC 0 GEPHY4                   OK        
+#       FPC 0 GEPHY5                   OK        
+#       FPC 0 GEPHY6                   OK        
+# Fans  FPC 0 Fan 1                    OK
+#       FPC 0 Fan 2                    OK
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    uboot      U-Boot 1.1.6 (Nov 22 2009 - 07:01:21)      
+#                          loader     FreeBSD/arm U-Boot loader 1.0              
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                  512 MB
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CW0210100089      EX2200-24T-4G
+# Routing Engine 0 REV 11   750-026468   CW0210100089      EX2200-24T-4G
+# FPC 0            REV 11   750-026468   CW0210100089      EX2200-24T-4G
+#   CPU                     BUILTIN      BUILTIN           FPC CPU
+#   PIC 0                   BUILTIN      BUILTIN           24x 10/100/1000 Base-T
+#   PIC 1          REV 11   750-026468   CW0210100089      4x GE SFP
+#     Xcvr 0       REV 01   740-031851   AM1041SU0RD       SFP-SX
+# Power Supply 0                                           PS 100W AC
+# Fan Tray                                                 Fan Tray
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis hardware models 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     FRU model number
+# Routing Engine 0 REV 11   750-026468   CW0210100089      EX2200-24T-4G
+# FPC 0            REV 11   750-026468   CW0210100089      EX2200-24T-4G
+#   PIC 0                   BUILTIN      BUILTIN           EX2200-24T-4G
+#   PIC 1          REV 11   750-026468   CW0210100089      EX2200-24T-4G
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis routing-engine 
+# Routing Engine status:
+#   Slot 0:
+#     Current state                  Master
+#     Election priority              Master (default)
+#     DRAM                       512 MB
+#     Serial ID                      CW0210100089
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis scb 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis sfm detail 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show chassis ssb 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show system boot-messages 
+# GDB: debug ports: uart
+# GDB: current port: uart
+# KDB: debugger backends: ddb gdb
+# KDB: current backend: ddb
+# Copyright (c) 1996-2011, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# CPU: Feroceon 88FR131 rev 1 (Marvell core)
+#   WB enabled EABT branch prediction enabled
+#   16KB/32B 4-way Instruction cache
+#   16KB/32B 4-way write-back-locking-C Data cache
+# SOC: Marvell 88F6281 rev A0, TClock 200MHz
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing EXSERIES platform properties ...
+# mbus0: <Marvell Internal Bus (Mbus)> on motherboard
+# ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
+# timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 1 on mbus0
+# gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 35,36,37,38,39,40,41 on mbus0
+# uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 33 on mbus0
+# uart0: console (9600,n,8,1)
+# ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 48,19 on mbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x04cc product 0x1520, class 9/0, rev 2.00/2.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 2 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 12,13,14,11,46 on mbus0
+# mge0: hardware MAC address 2c:6b:f5:90:31:7f
+# miibus0: <MII bus> on mge0
+# e1000phy0: <Marvell 88E1118 Gigabit PHY> on miibus0
+# e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# i2c0: <I2C ARM 6281 OnChip i2c Controller> at mem 0xf1011000-0xf101101f irq 29 on mbus0
+# 8564 rtc0: <8564 RTC> on i2c0
+# cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8000000-0xf87fffff irq 23 on mbus0
+# mpfe0: <Juniper EX-series Packet Forwarding Engine> at mem 0xf4000000-0xf7ffffff irq 113 on mbus0
+# pcib0: <Marvell 88F6281 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xefffffff irq 9 on mbus0
+# pci0: <PCI bus> on pcib0
+# Initializing product: 75 ..
+# bmeb: bmeb_lib_init done 0xc31c2000, addr 0xc1bc64ec
+# bme0:Virtual BME driver initializing
+# Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
+# Timecounters tick every 1.000 msec
+# Loading the NETPFE picpeer module
+# IPsec: Initialized Security Association Processing.
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
+# Trying to mount root from ufs:/dev/da0s2a
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show version 
+# Hostname: SWI1-MIAMI-EX-2200 # Model: ex2200-24t-4g # JUNOS Base OS boot [10.4R2.6] # JUNOS Base OS Software Suite [10.4R2.6] # JUNOS Kernel Software Suite [10.4R2.6] # JUNOS Crypto Software Suite [10.4R2.6] # JUNOS Online Documentation [10.4R2.6] # JUNOS Enterprise Software Suite [10.4R2.6] # JUNOS Packet Forwarding Engine Enterprise Software Suite [10.4R2.6] # JUNOS Routing Software Suite [10.4R2.6] # JUNOS Web Management [10.4R2.6] #  # grnoc-mon at SWI1-MIAMI-EX-2200> file list /var/tmp detail # 
+# /var/tmp:
+# total 20
+# drwxrwxr-x  2 root  wheel        512 Dec 31  1969 .snap/
+# drwxr-xr-x  2 root  field        512 Feb 6   2011 gres-tp/
+# -rw-r--r--  1 root  field        155 May 17 12:32 krt_gencfg_filter.txt
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show system uptime 
+# System booted: 2013-05-17 12:27 CDT 
+# Protocols started: 2013-05-17 12:31 CDT 
+# Last configured: 2013-11-04 12:55 CST  by admin
+# 
+# grnoc-mon at SWI1-MIAMI-EX-2200> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 up up
+#ge-0/0/2.0 up up
+#ge-0/0/3 up down
+#ge-0/0/3.0 up down
+#ge-0/0/4 up up
+#ge-0/0/4.0 up up
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
+#ge-0/0/6 up up
+#ge-0/0/6.0 up up
+#ge-0/0/7 up down
+#ge-0/0/7.0 up down
+#ge-0/0/8 up down
+#ge-0/0/8.0 up down
+#ge-0/0/9 up down
+#ge-0/0/9.0 up down
+#ge-0/0/10 up down
+#ge-0/0/10.0 up down
+#ge-0/0/11 up down
+#ge-0/0/11.0 up down
+#ge-0/0/12 up down
+#ge-0/0/12.0 up down
+#ge-0/0/13 up down
+#ge-0/0/13.0 up down
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
+#ge-0/0/15 up down
+#ge-0/0/15.0 up down
+#ge-0/0/16 up down
+#ge-0/0/16.0 up down
+#ge-0/0/17 up down
+#ge-0/0/17.0 up down
+#ge-0/0/18 up down
+#ge-0/0/18.0 up down
+#ge-0/0/19 up down
+#ge-0/0/19.0 up down
+#ge-0/0/20 up down
+#ge-0/0/20.0 up down
+#ge-0/0/21 up down
+#ge-0/0/21.0 up down
+#ge-0/0/22 up down
+#ge-0/0/22.0 up down
+#ge-0/0/23 up down
+#ge-0/0/23.0 up down
+#ge-0/1/0 up up
+#ge-0/1/0.0 up up
+#bme0 up up
+#bme0.32768 up up
+#dsc up up
+#gre up up
+#ipip up up
+#jsrv up up
+#jsrv.1 up up
+#lo0 up up
+#lo0.0 up up
+#lsi up up
+#me0 up down
+#me0.0 up down
+#mtun up up
+#pimd up up
+#pime up up
+#tap up up
+#vlan up up
+#vlan.100 up up
+#vlan.250 up up
+# grnoc-mon at SWI1-MIAMI-EX-2200> show configuration 
+## Last commit: 2013-11-04 12:55:52 CST by admin
+version 10.4R2.6;
+system {
+    host-name SWI1-MIAMI-EX-2200;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.253.4;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.247.182;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 164.58.247.182;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+        class admin {
+            idle-timeout 1044;
+            permissions all;
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2000;
+            class admin;
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+        web-management {
+            http;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any notice;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+    }
+    ntp {
+        server 164.58.10.1 prefer;
+        server 164.58.253.82 prefer;
+    }
+}
+chassis {
+    alarm {
+        management-ethernet {
+            link-down ignore;
+        }
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        description NEO_AM_College-Miami-M120-CIR0002273;
+        inactive: ether-options {
+            link-mode full-duplex;
+            speed {
+                100m;
+            }
+        }
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members NEO_V100;
+                }
+            }
+        }
+    }
+    ge-0/0/1 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/2 {
+        description "NEO A&M College-Miami-Fast Ethernet-CIR0004079-old5-13";
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members NEO_V100;
+                }
+            }
+        }
+    }
+    ge-0/0/3 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/4 {
+        description NEO_AM_College-Miami-M120-CIR0002273-old-5-2;
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members NEO_V100;
+                }
+            }
+        }
+    }
+    ge-0/0/5 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/6 {
+        description NEO_AM_College-Miami-M120-CIR0002273;
+        ether-options {
+            link-mode full-duplex;
+            speed {
+                100m;
+            }
+        }
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members NEO_V100;
+                }
+            }
+        }
+    }
+    ge-0/0/7 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/8 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/9 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/10 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/11 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/12 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/13 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/14 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/15 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/16 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/17 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/18 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/19 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/20 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/21 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/22 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/0/23 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/1/0 {
+        description "CORE 1GE to hub.mia ge-3/2/3 | OneNet-MIA-MIA-GE-15471 [ORDERED]";
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members vlan-250;
+                }
+            }
+        }
+    }
+    ge-0/1/1 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/1/2 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    ge-0/1/3 {
+        unit 0 {
+            family ethernet-switching;
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    me0 {
+        unit 0 {
+            family inet {
+                address 10.1.1.1/8;
+            }
+        }
+    }
+    vlan {
+        unit 100 {
+            family inet {
+                address 164.58.100.254/24;
+            }
+        }
+        unit 250 {
+            family inet {
+                address 164.58.247.182/30;
+            }
+        }
+    }
+}
+snmp {
+    description OneNet;
+    location IDABEL-Juniper-M120;
+    contact "Net Group";
+    client-list snmp-management {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+    trap-group "<removed>" {
+        targets {
+            164.58.253.34;
+        }
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 164.58.247.181;
+    }
+}
+protocols {
+    igmp-snooping {
+        vlan all;
+    }
+    rstp;
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SERVICES {
+                from {
+                    source-address {
+                        129.15.127.96/28;
+                        156.110.31.0/27;
+                        156.110.31.32/28;
+                        164.58.10.0/24;
+                        164.58.244.0/23;
+                        164.58.253.0/24;
+                        64.207.244.14/32;
+                        66.129.224.37/32;
+                    }
+                    protocol tcp;
+                    destination-port [ ssh http ftp ftp-data ];
+                }
+                then accept;
+            }
+            term OSPF-ALLOW {
+                from {
+                    protocol ospf;
+                }
+                then accept;
+            }
+            term IBGP-allow {
+                from {
+                    protocol tcp;
+                    ##
+                    ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+                    ##
+                    port 179;
+                }
+                then accept;
+            }
+            term ICMP-ALLOW {
+                from {
+                    icmp-type [ echo-reply unreachable time-exceeded echo-request ];
+                }
+                then accept;
+            }
+            term SERVICES-OUTBOUND {
+                from {
+                    source-port [ domain ntp ];
+                }
+                then accept;
+            }
+            term RADIUS {
+                from {
+                    source-address {
+                        156.110.31.11/32;
+                    }
+                    protocol [ udp tcp ];
+                    ##
+                    ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+                    ##
+                    port [ radius radacct ];
+                }
+                then accept;
+            }
+            term NTP {
+                from {
+                    source-address {
+                        164.58.10.1/32;
+                    }
+                    protocol udp;
+                    ##
+                    ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+                    ##
+                    port ntp;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-address {
+                        164.58.253.0/24;
+                        156.110.31.0/27;
+                        156.110.31.32/28;
+                    }
+                    protocol [ tcp udp ];
+                    ##
+                    ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+                    ##
+                    port [ snmp snmptrap ];
+                }
+                then accept;
+            }
+            term DENY_ALL {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+}
+ethernet-switching-options {
+    storm-control {
+        interface all {
+            level 50; ## Warning: 'level' is deprecated
+        }
+    }
+}
+vlans {
+    NEO_V100 {
+        vlan-id 100;
+        l3-interface vlan.100;
+    }
+    default;
+    vlan-250 {
+        vlan-id 250;
+        l3-interface vlan.250;
+    }
+}
+# grnoc-mon at SWI1-MIAMI-EX-2200> show ospf neighbor 
+# error: command is not valid on the ex2200-24t-4g
+# 



More information about the Nocrancid mailing list