[Nocrancid] autopop-onenet.net/swi.odot.dun.onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Wed Sep 18 15:43:15 CDT 2013
Index: swi.odot.dun.onenet.net
===================================================================
--- swi.odot.dun.onenet.net (revision 80195)
+++ swi.odot.dun.onenet.net (working copy)
@@ -0,0 +1,604 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show system commit
+# 2013-09-18 15:40:28 CDT by admin via cli
+# 2013-09-18 15:38:48 CDT by admin via cli
+# 2013-07-17 20:48:51 CDT by root via cli
+# 2013-07-17 20:47:31 CDT by root via cli
+# 2013-07-17 20:12:45 CDT by root via cli
+# 2013-07-17 20:06:33 CDT by root via cli
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis environment
+# Class Item Status Measurement
+# Power FPC 0 Power Supply 0 OK
+# Temp FPC 0 CPU OK
+# FPC 0 Exhaust Area OK
+# FPC 0 EX-PFE1 OK
+# FPC 0 Local Intake OK
+# FPC 0 Remote Intake OK
+# FPC 0 GEPHY1 OK
+# FPC 0 GEPHY2 OK
+# FPC 0 GEPHY3 OK
+# FPC 0 GEPHY4 OK
+# FPC 0 GEPHY5 OK
+# FPC 0 GEPHY6 OK
+# Fans FPC 0 Fan 1 OK
+# FPC 0 Fan 2 OK
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis firmware
+# Part Type Version
+# FPC 0 uboot U-Boot 1.1.6 (Jul 26 2011 - 03:19:50) 1.0
+# loader FreeBSD/arm U-Boot loader 1.1
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 512 MB
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis CW0212039390 EX2200-24T-4G
+# Routing Engine 0 REV 18 750-026468 CW0212039390 EX2200-24T-4G
+# FPC 0 REV 18 750-026468 CW0212039390 EX2200-24T-4G
+# CPU BUILTIN BUILTIN FPC CPU
+# PIC 0 BUILTIN BUILTIN 24x 10/100/1000 Base-T
+# PIC 1 REV 18 750-026468 CW0212039390 4x GE SFP
+# Xcvr 0 REV 01 740-031850 PM243RU SFP-LX10
+# Xcvr 1 REV 01 740-011612 C09C62606 SFP-LH
+# Power Supply 0 PS 100W AC
+# Fan Tray Fan Tray
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Routing Engine 0 REV 18 750-026468 CW0212039390 EX2200-24T-4G
+# FPC 0 REV 18 750-026468 CW0212039390 EX2200-24T-4G
+# PIC 0 BUILTIN BUILTIN EX2200-24T-4G
+# PIC 1 REV 18 750-026468 CW0212039390 EX2200-24T-4G
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# Election priority Master (default)
+# DRAM 512 MB
+# Serial ID CW0212039390
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis scb
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis sfm detail
+# grnoc-mon at swi.odot.dun.onenet.net> show chassis ssb
+# grnoc-mon at swi.odot.dun.onenet.net> show system boot-messages
+# GDB: debug ports: uart
+# GDB: current port: uart
+# KDB: debugger backends: ddb gdb
+# KDB: current backend: ddb
+# Copyright (c) 1996-2012, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# can't re-use a leaf (all_slot_serialid)!
+# CPU: Feroceon 88FR131 rev 1 (Marvell core)
+# WB enabled EABT branch prediction enabled
+# 16KB/32B 4-way Instruction cache
+# 16KB/32B 4-way write-back-locking-C Data cache
+# SOC: Marvell 88F6281 rev A0, TClock 200MHz
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing EXSERIES platform properties ...
+# mbus0: <Marvell Internal Bus (Mbus)> on motherboard
+# ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
+# timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 1 on mbus0
+# gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 35,36,37,38,39,40,41 on mbus0
+# uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 33 on mbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 34 on mbus0
+# ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 48,19 on mbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x04b4 product 0x6560, class 9/0, rev 2.00/90.15, addr 2
+# uhub1: single transaction translator
+# uhub1: 2 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682 High Speed Mode, rev 2.00/2.10, addr 3
+# mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 12,13,14,11,46 on mbus0
+# mge0: hardware MAC address 78:fe:3d:ea:ee:7f
+# miibus0: <MII bus> on mge0
+# e1000phy0: <Marvell 88E1118 Gigabit PHY> on miibus0
+# e1000phy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f irq 29 on mbus0
+# syspld0: <SYSPLD> on i2c0
+# 8564 rtc0: <8564 RTC> on i2c0
+# poe0: <POE> on i2c0
+# device_attach: poe0 attach returned 19
+# cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8000000-0xf87fffff irq 23 on mbus0
+# mpfe0: <Juniper EX-series Packet Forwarding Engine> at mem 0xf4000000-0xf7ffffff irq 113 on mbus0
+# pcib0: <Marvell 88F6281 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xefffffff irq 9 on mbus0
+# pci0: <PCI bus> on pcib0
+# Initializing product: 75 ..
+# bmeb: bmeb_lib_init done 0xc32b4800, addr 0xc1c9b5d4
+# bme0:Virtual BME driver initializing
+# Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
+# Trying to mount root from ufs:/dev/da0s2a
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show version
+# Hostname: swi.odot.dun.onenet.net # Model: ex2200-24t-4g # JUNOS Base OS boot [11.4R5.5] # JUNOS Base OS Software Suite [11.4R5.5] # JUNOS Kernel Software Suite [11.4R5.5] # JUNOS Crypto Software Suite [11.4R5.5] # JUNOS Online Documentation [11.4R5.5] # JUNOS Enterprise Software Suite [11.4R5.5] # JUNOS Packet Forwarding Engine Enterprise Software Suite [11.4R5.5] # JUNOS Routing Software Suite [11.4R5.5] # JUNOS Web Management [11.4R5.5] # JUNOS FIPS mode utilities [11.4R5.5] # # grnoc-mon at swi.odot.dun.onenet.net> file list /var/tmp detail #
+# /var/tmp:
+# total 40
+# drwxrwxr-x 2 root operator 512 Oct 2 2012 .snap/
+# -rw-r--r-- 1 root wheel 3931 Jul 17 17:36 ex_autod_config
+# -rw-r--r-- 1 root wheel 3106 Jul 17 17:36 ex_autod_rollback_cfg
+# drwxr-xr-x 2 root wheel 512 Jul 17 17:34 gres-tp/
+# -rw-r--r-- 1 root wheel 155 Jul 19 22:03 krt_gencfg_filter.txt
+# drwxr-xr-x 2 root wheel 512 Jul 17 17:35 rtsdb/
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show system uptime
+# System booted: 2013-09-18 13:36 CDT
+# Protocols started: 2013-09-18 13:38 CDT
+# Last configured: 2013-09-18 15:40 CDT by admin
+#
+# grnoc-mon at swi.odot.dun.onenet.net> show interface terse
+#Interface Admin Link
+#ge-0/0/0 up down
+#ge-0/0/1 up down
+#ge-0/0/2 up down
+#ge-0/0/3 up down
+#ge-0/0/4 up down
+#ge-0/0/5 up down
+#ge-0/0/6 up down
+#ge-0/0/7 up down
+#ge-0/0/8 up down
+#ge-0/0/9 up down
+#ge-0/0/10 up down
+#ge-0/0/11 up down
+#ge-0/0/12 up down
+#ge-0/0/13 up down
+#ge-0/0/14 up down
+#ge-0/0/15 up down
+#ge-0/0/16 up down
+#ge-0/0/17 up down
+#ge-0/0/18 up down
+#ge-0/0/19 up down
+#ge-0/0/20 up down
+#ge-0/0/21 up down
+#ge-0/0/22 up down
+#ge-0/0/23 up down
+#ge-0/1/0 up up
+#ge-0/1/0.0 up up
+#ge-0/1/1 up up
+#ge-0/1/1.0 up up
+#bme0 up up
+#bme0.32768 up up
+#dsc up up
+#gre up up
+#ipip up up
+#jsrv up up
+#jsrv.1 up up
+#lo0 up up
+#lo0.0 up up
+#lsi up up
+#me0 up down
+#mtun up up
+#pimd up up
+#pime up up
+#tap up up
+#vlan up up
+# grnoc-mon at swi.odot.dun.onenet.net> show configuration
+## Last commit: 2013-09-18 15:40:28 CDT by admin
+version 11.4R5.5;
+system {
+ host-name swi.odot.dun.onenet.net;
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.199.198;
+ }
+ }
+ radius-options {
+ attributes {
+ nas-ip-address 164.58.199.198;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n;";
+ class admin {
+ idle-timeout 1044;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*; ## Warning: 'deny-configuration' is deprecated
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 5;
+ user * {
+ any emergency;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ }
+ ntp {
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+interfaces {
+ ge-0/1/0 {
+ description "CORE 1GE to core.dun ge-0/2/5 | [NO-MONITOR]";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.247.86/30;
+ }
+ }
+ }
+ ge-0/1/1 {
+ description "CORE 1GE to core.hut.waur ge-1/0/0 | [NO-MONITOR]";
+ mtu 9192;
+ unit 0 {
+ family inet {
+ mtu 9000;
+ address 164.58.247.90/30;
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ address 164.58.199.198/32;
+ address 127.0.0.1/32;
+ }
+ }
+ }
+}
+snmp {
+ description OneNet;
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+}
+routing-options {
+ static {
+ route 0.0.0.0/0 next-hop 164.58.247.209;
+ }
+}
+protocols {
+ ##
+ ## Warning: configuration block ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ mpls {
+ interface ge-0/1/1.0;
+ interface lo0.0;
+ interface ge-0/1/0.0;
+ }
+ ##
+ ## Warning: requires 'ospf2' license
+ ##
+ ospf {
+ area 0.0.0.0 {
+ interface lo0.0;
+ interface ge-0/1/0.0 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$pyI5uIEylMWX-le-wYgDj9Atp1hrev8xdEceWLxdV"; ## SECRET-DATA
+ }
+ }
+ interface ge-0/1/1.0 {
+ link-protection;
+ authentication {
+ md5 7 key "$9$FGC03CtO1hcrv1IvLxN2g5QzF9pBIESlMtuIcylMW"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ ##
+ ## Warning: configuration block ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ ldp {
+ interface lo0.0;
+ }
+ igmp-snooping {
+ vlan all;
+ }
+ rstp;
+ lldp {
+ interface all;
+ interface ge-0/1/1.0;
+ interface ge-0/1/0.0;
+ }
+ lldp-med {
+ interface all;
+ }
+}
+policy-options {
+ prefix-list MGMT {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.12.233/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ 164.58.247.209/32;
+ 164.58.253.0/24;
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SERVICES {
+ from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
+ protocol tcp;
+ destination-port [ ssh http ];
+ }
+ then accept;
+ }
+ term OSPF-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ protocol ospf;
+ }
+ then accept;
+ }
+ term EBGP-ALLOW {
+ from {
+ ##
+ ## Warning: configuration block ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ prefix-list {
+ EBGP-IPV4-NEIGHBORS; ## 'EBGP-IPV4-NEIGHBORS' is not defined
+ }
+ protocol tcp;
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ port 179;
+ }
+ then accept;
+ }
+ term IBGP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.216/32;
+ 164.58.199.226/32;
+ }
+ protocol tcp;
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ port 179;
+ }
+ then accept;
+ }
+ term FIRST-FRAG {
+ from {
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ first-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term NEXT-FRAG {
+ from {
+ is-fragment;
+ }
+ then {
+ discard;
+ }
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ domain ntp ssh syslog ftp 7804 telnet ];
+ }
+ then accept;
+ }
+ term RADIUS {
+ from {
+ source-address {
+ 156.110.31.11/32;
+ }
+ protocol [ udp tcp ];
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP {
+ from {
+ source-address {
+ 164.58.10.1/32;
+ 164.58.199.0/24;
+ }
+ protocol udp;
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ port ntp;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-address {
+ 164.58.253.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ }
+ protocol [ tcp udp ];
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term LDP-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ port ldp;
+ }
+ }
+ term PIM-ALLOW {
+ from {
+ source-address {
+ 164.58.199.0/24;
+ 164.58.0.0/16;
+ }
+ protocol pim;
+ }
+ then accept;
+ }
+ term BFD-ALLOW {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ }
+ protocol udp;
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ port [ 3784 3785 ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY_ALL {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+ethernet-switching-options {
+ voip;
+ storm-control {
+ interface all {
+ level 50;
+ }
+ }
+}
+# grnoc-mon at swi.odot.dun.onenet.net> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.247.85 ge-0/1/0.0 Full 164.58.199.19
+#
More information about the Nocrancid
mailing list