[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Sun Aug 17 00:02:15 CDT 2014
Index: configs/core2.tul-mx960.onenet.net
===================================================================
--- configs/core2.tul-mx960.onenet.net (revision 118734)
+++ configs/core2.tul-mx960.onenet.net (working copy)
@@ -399,9 +399,9 @@
#xe-0/1/1 up up
#xe-0/1/1.236 up up
#xe-0/1/1.32767 up up
-#ge-0/2/0 up down
-#ge-0/2/0.140 up down
-#ge-0/2/0.32767 up down
+#ge-0/2/0 up up
+#ge-0/2/0.140 up up
+#ge-0/2/0.32767 up up
#lc-0/2/0 up up
#lc-0/2/0.32769 up up
#pfe-0/2/0 up up
@@ -1876,6 +1876,7 @@
# grnoc-mon at TULSA-CORE2-MX960-RE0> show ospf neighbor
# Address Interface State ID Pri Dead
# 164.58.245.242 ae0.0 Full 164.58.199.192
+# 164.58.15.142 ge-0/2/0.140 Full 164.58.199.226
# 164.58.15.105 xe-0/0/0.104 Full 164.58.199.221
# 164.58.15.130 xe-0/0/1.128 Full 164.58.199.223
# 164.58.245.137 xe-0/1/0.70 Full 164.58.199.212
@@ -1897,6 +1898,7 @@
164.58.15.130 Up xe-0/0/1.128 1.200 0.400 3
164.58.15.134 Up xe-1/0/0.132 1.200 0.400 3
164.58.15.138 Up xe-1/0/1.136 1.200 0.400 3
+164.58.15.142 Up ge-0/2/0.140 1.200 0.400 3
164.58.15.146 Up xe-1/1/1.144 1.200 0.400 3
164.58.15.237 Up xe-0/1/1.236 1.200 0.400 3
164.58.245.137 Up xe-0/1/0.70 1.200 0.400 3
@@ -1904,10 +1906,11 @@
164.58.246.70 Up xe-2/1/1.69 1.200 0.400 3
164.58.246.105 Up xe-2/0/0.69 1.200 0.400 3
164.58.246.130 Up xe-2/0/1.69 1.200 0.400 3
+fe80::2ac0:da00:8c14:4028 Up ge-0/2/0.140 1.200 0.400 3
fe80::2ac0:da00:90fe:d850 Up xe-1/1/1.144 1.200 0.400 3
fe80::6687:8800:45f4:800 Up xe-2/1/1.69 1.200 0.400 3
-14 sessions, 14 clients
-Cumulative transmit rate 33.5 pps, cumulative receive rate 32.5 pps
+16 sessions, 16 clients
+Cumulative transmit rate 38.5 pps, cumulative receive rate 37.5 pps
{master}
Index: configs/faye.okcdc.onenet.net
===================================================================
--- configs/faye.okcdc.onenet.net (revision 118705)
+++ configs/faye.okcdc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at FAYE-MX104-RE0> show system commit
+# 2014-08-16 23:29:57 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
# 2014-08-15 16:24:21 CDT by andrew via cli commit synchronize
# 2014-08-15 13:12:34 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
# 2014-08-13 23:24:04 CDT by andrew via cli commit synchronize
# 2014-08-13 23:18:15 CDT by andrew via cli commit synchronize
# 2014-08-13 21:49:43 CDT by andrew via cli commit synchronize
-# 2014-08-13 21:48:53 CDT by andrew via cli commit synchronize
# grnoc-mon at FAYE-MX104-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -228,7 +228,7 @@
# grnoc-mon at FAYE-MX104-RE0> show system uptime
# System booted: 2014-08-11 21:27 CDT
# Protocols started: 2014-08-12 14:42 CDT
-# Last configured: 2014-08-15 16:24 CDT by andrew
+# Last configured: 2014-08-16 23:29 CDT by andrew
#
# {master}
# grnoc-mon at FAYE-MX104-RE0> show interface terse
@@ -301,7 +301,7 @@
#pp0 up up
#tap up up
# grnoc-mon at FAYE-MX104-RE0> show configuration
-## Last commit: 2014-08-15 16:24:21 CDT by andrew
+## Last commit: 2014-08-16 23:29:57 CDT by andrew
version 13.3R1.8;
groups {
re0 {
@@ -640,7 +640,7 @@
interface xe-2/0/0.42;
}
bgp {
- group CORE-RR-OKC {
+ group CORE-RR-OKC-V4 {
type internal;
local-address 164.58.199.69;
family inet {
@@ -659,7 +659,7 @@
export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
peer-as 5078;
neighbor 164.58.199.216 {
- description OKC-CORE6-IBGP;
+ description OKC-CORE6-IBGP-V4;
}
}
group CORE-RR-OKC-V6 {
@@ -671,11 +671,11 @@
# authentication-key <removed>;
export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
peer-as 5078;
- neighbor 2610:1d8::216 {
+ neighbor 2610:1d8::164:58:199:216 {
description OKC-CORE6-IBGP-V6;
}
}
- group CORE-RR-TUL {
+ group CORE-RR-TUL-V4 {
type internal;
local-address 164.58.199.69;
family inet {
@@ -694,7 +694,7 @@
export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
peer-as 5078;
neighbor 164.58.199.226 {
- description TUL-CORE6-IBGP;
+ description TUL-CORE6-IBGP-V4;
}
}
group CORE-RR-TUL-V6 {
Index: configs/core6.tul-m7i.onenet.net
===================================================================
--- configs/core6.tul-m7i.onenet.net (revision 118731)
+++ configs/core6.tul-m7i.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show system commit
+# 2014-08-16 23:04:29 CDT by andrew via cli commit confirmed, rollback in 10mins
+# 2014-08-16 22:58:59 CDT by root via other
+# 2014-08-16 22:49:17 CDT by andrew via cli commit confirmed, rollback in 10mins
# 2014-08-14 00:53:24 CDT by andrew via cli
# 2014-08-12 00:37:42 CDT by rnordmark via cli
# 2014-08-10 14:40:41 CDT by andrew via cli commit confirmed, rollback in 2mins
-# 2014-08-04 10:22:40 CDT by andrew via cli commit confirmed, rollback in 2mins
-# 2014-07-31 15:39:39 CDT by rnordmark via cli
-# 2014-07-15 14:25:20 CDT by andrew via cli
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show chassis environment
# Class Item Status Measurement
# Power Power Supply 0 OK
@@ -26,11 +26,11 @@
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show chassis firmware
# Part Type Version
# FPC 0 ROM Juniper ROM Monitor Version 9.4b4
-# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# O/S Version 12.3R7.7 by builder on 2014-06-12 1
# FPC 1 ROM Juniper ROM Monitor Version 9.4b4
-# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# O/S Version 12.3R7.7 by builder on 2014-06-12 1
# CFEB ROM Juniper ROM Monitor Version 9.4b4
-# O/S Version 11.4R7.5 by builder on 2013-03-01 1
+# O/S Version 12.3R7.7 by builder on 2014-06-12 1
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show chassis fpc detail
# Slot 0 information:
@@ -77,14 +77,14 @@
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show chassis routing-engine
# Routing Engine status:
-# DRAM 3313 MB
+# DRAM 3313 MB (4096 MB installed)
# Serial ID 9009115002
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show chassis scb
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show chassis sfm detail
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show chassis ssb
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show system boot-messages
-# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
# All rights reserved.
# Copyright (c) 1992-2006 The FreeBSD Project.
# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
@@ -98,9 +98,12 @@
# AMD Features2=0x1<LAHF>
# Cores per package: 8
# Logical CPUs per core: 2
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
-# Initializing M/T platform properties ..
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# Initializing M/T/EX platform properties ..
# cpu0 on motherboard
# pcib0: <Host to PCI bridge> pcibus 0 on motherboard
# pci0: <PCI bus> on pcib0
@@ -164,35 +167,38 @@
# Initializing product: 14 ..
# Overriding block private ifstate to PFE
# Setting up M/T interface operations and attributes
-# bmeb: bmeb_lib_init done 0xc7163000, addr 0xc0d8fa60
+# bmeb: bmeb_lib_init done 0xc7534800, addr 0xc0e2c1e0
# fxp0: bus=4, device=0, func=0, Ethernet address 00:a0:a5:7a:d4:53
# em0: bus=3, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
# ad1: Device does not support APM
# ad1: 61057MB <UGB94BPH64H0S1 KCI 2030> at ata0-master UDMA33
# ad0: Device does not support APM
# ad0: 3998MB <Virtium - TuffDrive VCF300 101130> at ata0-slave UDMA33
-# Kernel thread "devrt_kernel_thread" (pid 41) exited prematurely.
+# Kernel thread "wkupdaemon" (pid 44) exited prematurely.
# Trying to mount root from ufs:/dev/ad0s1a
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show version
-# Hostname: ROUTE-REFLECTOR-TULSA-M7i # Model: m7i # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M/T Common) [11.4R7.5] # JUNOS Packet Forwarding Engine Support (M7i/M10i) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Voice Services Container package [11.4R7.5] # JUNOS Border Gateway Function package [11.4R7.5] # JUNOS Services AACL Container package [11.4R7.5] # JUNOS Services LL-PDF Container package [11.4R7.5] # JUNOS Services PTSP Container package [11.4R7.5] # JUNOS Services Stateful Firewall [11.4R7.5] # JUNOS Services NAT [11.4R7.5] # JUNOS Services Application Level Gateways [11.4R7.5] # JUNOS Services Captive Portal and Content Delivery Container package [11.4R7.5] # JUNOS Services RPM [11.4R7.5] # JUNOS Services HTTP Content Management package [11.4R7.5] # JUNOS AppId Services [11.4R7.5] # JUNOS IDP Se!
rvices [11.4R7.5] # JUNOS Services Crypto [11.4R7.5] # JUNOS Services SSL [11.4R7.5] # JUNOS Services IPSec [11.4R7.5] # JUNOS Runtime Software Suite [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] # # grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> file list /var/tmp detail #
+# Hostname: ROUTE-REFLECTOR-TULSA-M7i # Model: m7i # JUNOS Base OS boot [12.3R7.7] # JUNOS Base OS Software Suite [12.3R7.7] # JUNOS Kernel Software Suite [12.3R7.7] # JUNOS Crypto Software Suite [12.3R7.7] # JUNOS Packet Forwarding Engine Support (M/T/EX Common) [12.3R7.7] # JUNOS Packet Forwarding Engine Support (M7i/M10i) [12.3R7.7] # JUNOS Online Documentation [12.3R7.7] # JUNOS Services AACL Container package [12.3R7.7] # JUNOS Services Application Level Gateways [12.3R7.7] # JUNOS AppId Services [12.3R7.7] # JUNOS Border Gateway Function package [12.3R7.7] # JUNOS Services Captive Portal and Content Delivery Container package [12.3R7.7] # JUNOS Services HTTP Content Management package [12.3R7.7] # JUNOS IDP Services [12.3R7.7] # JUNOS Services LL-PDF Container package [12.3R7.7] # JUNOS Services NAT [12.3R7.7] # JUNOS Services PTSP Container package [12.3R7.7] # JUNOS Services RPM [12.3R7.7] # JUNOS Services Stateful Firewall [12.3R7.7] # JUNOS Voice Services Containe!
r package [12.3R7.7] # JUNOS Services Example Container package [12.3R7.7] # JUNOS Services Crypto [12.3R7.7] # JUNOS Services SSL [12.3R7.7] # JUNOS Services IPSec [12.3R7.7] # JUNOS Runtime Software Suite [12.3R7.7] # JUNOS platform Software Suite [12.3R7.7] # JUNOS Routing Software Suite [12.3R7.7] # # grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> file list /var/tmp detail #
# /var/tmp:
-# total 1803304
-# -rwxr-xr-x 1 root field 285 Apr 28 2013 collect-pic-data*
+# total blocks: 1803304
+# -rwxr-xr-x 1 root field 285 Aug 16 22:52 collect-pic-data*
# drwxr-xr-x 2 root field 512 Feb 8 2013 gres-tp/
# drwxrwxrwx 2 root wheel 512 Feb 8 2013 install/
# -rw-r--r-- 1 eng field 421523837 Apr 23 2013 jinstall-11.4R7.5-domestic-signed.tgz
# -rw-r--r-- 1 eng field 501460114 Aug 16 20:44 jinstall-12.3R7.7-domestic-signed.tgz
# -rw-r--r-- 1 root field 155 Apr 28 2013 krt_gencfg_filter.txt
# drwxrwxrwx 2 root wheel 512 Feb 8 2013 pics/
-# -r--r--r-- 1 root field 499 Apr 28 2013 preinstall_boot_loader.conf
+# -r--r--r-- 1 root field 499 Aug 16 22:52 preinstall_boot_loader.conf
# drwxr-xr-x 2 root field 512 Feb 8 2013 rtsdb/
-# drwxrwxrwT 2 root wheel 512 Feb 8 2013 vi.recover/
+# drwxrwxrwt 2 root wheel 512 Feb 8 2013 vi.recover/
+# total files: 5
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show system uptime
-# System booted: 2013-04-28 00:13 CDT
-# Protocols started: 2013-04-28 00:14 CDT
-# Last configured: 2014-08-14 00:53 CDT by andrew
+# System booted: 2014-08-16 22:58 CDT
+# Protocols started: 2014-08-16 22:59 CDT
+# Last configured: 2014-08-16 23:04 CDT by andrew
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show interface terse
#Interface Admin Link
@@ -236,8 +242,8 @@
#pime up up
#tap up up
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show configuration
-## Last commit: 2014-08-14 00:53:24 CDT by andrew
-version 11.4R7.5;
+## Last commit: 2014-08-16 23:04:29 CDT by andrew
+version 12.3R7.7;
groups {
re0 {
system {
@@ -373,6 +379,23 @@
server 164.58.3.98 prefer;
}
}
+security {
+ ipsec {
+ security-association OneNet-OSPF3-AUTH {
+ mode transport;
+ manual {
+ direction bidirectional {
+ protocol ah;
+ spi 256;
+ authentication {
+ algorithm hmac-md5-96;
+ key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+ }
+ }
+ }
+ }
+ }
+}
interfaces {
ge-0/0/0 {
description "CORE 1GE to core2.tul ge-0/2/0 | OneNet-TUL-TUL-GE-4457";
@@ -472,16 +495,13 @@
interface lo0.0;
}
bgp {
- group TULSA-OKC-RR {
+ group ROUTE-REFLECTOR-V4 {
type internal;
local-address 164.58.199.226;
family inet {
any;
}
family inet-vpn {
- any;
- }
- family inet6 {
unicast;
}
family inet6-vpn {
@@ -490,28 +510,17 @@
family l2vpn {
signaling;
}
- family inet-mvpn {
- signaling;
- }
- family inet6-mvpn {
- signaling;
- }
peer-as 5078;
neighbor 164.58.199.216 {
# authentication-key <removed>;
}
}
- group CORE {
+ group GLOBAL-ROUTING-V4 {
type internal;
- local-address 164.58.199.226;
- inactive: advertise-inactive;
family inet {
any;
}
family inet-vpn {
- any;
- }
- family inet6 {
unicast;
}
family inet6-vpn {
@@ -520,80 +529,6 @@
family l2vpn {
signaling;
}
- family inet-mvpn {
- signaling;
- }
- family inet6-mvpn {
- signaling;
- }
- cluster 164.58.199.226;
- peer-as 5078;
- neighbor 164.58.199.211 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.212 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.215 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.221 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.222 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.224 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.225 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.230 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.231 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.232 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.233 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.234 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.192 {
-# authentication-key <removed>;
- }
- neighbor 164.58.199.228 {
-# authentication-key <removed>;
- }
- }
- group HUBSITES {
- type internal;
- family inet {
- any;
- }
- family inet-vpn {
- any;
- }
- family inet6 {
- unicast;
- }
- family inet6-vpn {
- unicast;
- }
- family l2vpn {
- signaling;
- }
- family inet-mvpn {
- signaling;
- }
- family inet6-mvpn {
- signaling;
- }
# authentication-key <removed>;
cluster 164.58.199.226;
peer-as 5078;
@@ -650,6 +585,21 @@
neighbor 164.58.199.4;
neighbor 164.58.199.80;
neighbor 164.58.199.69;
+ neighbor 164.58.199.211;
+ neighbor 164.58.199.212;
+ neighbor 164.58.199.214;
+ neighbor 164.58.199.215;
+ neighbor 164.58.199.221;
+ neighbor 164.58.199.222;
+ neighbor 164.58.199.224;
+ neighbor 164.58.199.225;
+ neighbor 164.58.199.230;
+ neighbor 164.58.199.231;
+ neighbor 164.58.199.232;
+ neighbor 164.58.199.233;
+ neighbor 164.58.199.234;
+ neighbor 164.58.199.192;
+ neighbor 164.58.199.228;
}
group DOH-HUBSITES {
type internal;
@@ -785,24 +735,8 @@
neighbor 10.199.2.136;
neighbor 10.199.2.137;
}
- group OSF-HUBSITES {
+ group ROUTE-REFLECTOR-V6 {
type internal;
- family inet {
- unicast;
- }
- family inet-vpn {
- unicast;
- }
- family l2vpn {
- signaling;
- }
-# authentication-key <removed>;
- export IBGP-OSF-EXPORT;
- cluster 164.58.199.226;
- peer-as 5078;
- }
- group OKC-TULSA-RR-V6 {
- type internal;
local-address 2610:1d8::226;
family inet6 {
any;
@@ -811,10 +745,7 @@
peer-as 5078;
neighbor 2610:1d8::216;
}
- group HUBSITES-V6-V6 {
- type internal;
- }
- inactive: group HUBSITES-V6 {
+ inactive: group GLOBAL-ROUTING-V6 {
family inet6 {
any;
}
@@ -920,28 +851,21 @@
neighbor 2610:1d8::211;
neighbor 2610:1d8::164:58:199:69;
}
- group DEF-ONLY-HUBSITES {
- type internal;
+ group DEFAULT-AND-IBGP-V4 {
family inet {
any;
}
-# authentication-key <removed>;
- export IBGP-DEFAULT-ROUTE-EXPORT;
- cluster 164.58.199.226;
- peer-as 5078;
- }
- group HUBSITES-M120 {
- family inet {
+ family inet-vpn {
unicast;
}
- family inet-vpn {
+ family inet6-vpn {
unicast;
}
family l2vpn {
signaling;
}
# authentication-key <removed>;
- export IBGP-M120-EXPORT;
+ export DEFAULT-IBGP-EXPORT;
cluster 164.58.199.226;
peer-as 5078;
neighbor 164.58.199.14;
@@ -977,36 +901,6 @@
neighbor 164.58.199.223;
neighbor 164.58.199.42;
neighbor 164.58.199.73;
- }
- group CORE-V4 {
- type internal;
- local-address 164.58.199.226;
- family inet {
- unicast;
- }
- family inet-vpn {
- unicast;
- }
- family l2vpn {
- signaling;
- }
-# authentication-key <removed>;
- cluster 164.58.199.226;
- peer-as 5078;
- neighbor 164.58.199.214;
- }
- group CPE-ROUTERS {
- type internal;
- family inet {
- any;
- }
- family inet-vpn {
- any;
- }
-# authentication-key <removed>;
- export IBGP-CPE-EXPORT;
- cluster 164.58.199.226;
- peer-as 5078;
neighbor 164.58.173.46;
}
}
@@ -1100,28 +994,36 @@
prefix-list PRE-LDP-SOURCES {
10.199.0.0/16;
}
- policy-statement HUB-SITES-EXPORT {
- inactive: term ALLOW-IBGP {
- from as-path NULL;
+ policy-statement DEFAULT-IBGP-EXPORT {
+ term NEEDED-ROUTES {
+ from {
+ protocol bgp;
+ as-path NULL;
+ }
then accept;
}
- term ACCEPT-DEFAULT {
+ term DEFAULT {
from {
route-filter 0.0.0.0/0 exact;
}
then accept;
}
- term REJECT-ALL-ELSE {
+ term REJECT {
then reject;
}
}
- policy-statement IBGP-CPE-EXPORT {
- term default {
+ policy-statement HUB-SITES-EXPORT {
+ inactive: term ALLOW-IBGP {
+ from as-path NULL;
+ then accept;
+ }
+ term ACCEPT-DEFAULT {
from {
- route-filter 0.0.0.0/0 exact accept;
+ route-filter 0.0.0.0/0 exact;
}
+ then accept;
}
- term reject {
+ term REJECT-ALL-ELSE {
then reject;
}
}
@@ -1149,24 +1051,6 @@
then reject;
}
}
- policy-statement IBGP-M120-EXPORT {
- term NEEDED-ROUTES {
- from {
- protocol bgp;
- as-path NULL;
- }
- then accept;
- }
- term DEFAULT {
- from {
- route-filter 0.0.0.0/0 exact;
- }
- then accept;
- }
- term REJECT {
- then reject;
- }
- }
policy-statement IBGP-OSF-EXPORT {
term doh {
from community DOH-VPN;
@@ -1315,23 +1199,6 @@
}
}
}
-security {
- ipsec {
- security-association OneNet-OSPF3-AUTH {
- mode transport;
- manual {
- direction bidirectional {
- protocol ah;
- spi 256;
- authentication {
- algorithm hmac-md5-96;
- key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
- }
- }
- }
- }
- }
-}
firewall {
family inet {
filter PROTECT-RE {
Index: configs/core1.tul-mx960.onenet.net
===================================================================
--- configs/core1.tul-mx960.onenet.net (revision 118734)
+++ configs/core1.tul-mx960.onenet.net (working copy)
@@ -2137,7 +2137,7 @@
# 164.58.245.234 ae0.112 Full 164.58.199.224
# 164.58.245.230 ae1.116 Full 164.58.199.225
# 164.58.245.238 ae2.0 Full 164.58.199.192
-# 164.58.15.122 ge-0/2/0.120 2Way 164.58.199.226
+# 164.58.15.122 ge-0/2/0.120 Full 164.58.199.226
# 164.58.15.106 xe-0/0/0.104 Full 164.58.199.222
# 164.58.15.110 xe-0/0/1.108 Full 164.58.199.223
# 164.58.15.126 xe-0/1/0.124 Full 164.58.199.234
@@ -2160,7 +2160,7 @@
164.58.15.102 Up xe-1/2/1.100 1.200 0.400 3
164.58.15.106 Up xe-0/0/0.104 1.200 0.400 3
164.58.15.110 Up xe-0/0/1.108 1.200 0.400 3
-164.58.15.122 AdminDown ge-0/2/0.120 0.000 1.000 3
+164.58.15.122 Up ge-0/2/0.120 1.200 0.400 3
164.58.15.126 Up xe-0/1/0.124 1.200 0.400 3
164.58.15.158 Up xe-1/2/0.156 1.200 0.400 3
164.58.245.230 Up ae1.116 1.200 0.400 3
@@ -2173,6 +2173,7 @@
164.58.247.18 Up xe-2/3/1.40 1.200 0.400 3
164.58.247.38 Up xe-2/3/0.40 1.200 0.400 3
164.58.247.42 Up xe-2/2/1.40 1.200 0.400 3
+fe80::2ac0:da00:7814:4103 Up ge-0/2/0.120 1.200 0.400 3
fe80::2ac0:da00:7cfe:d7fe Up xe-0/1/0.124 1.200 0.400 3
fe80::6687:8800:45f3:4000 Up xe-2/1/0.69 1.200 0.400 3
fe80::8618:8800:4428:382a Up xe-0/1/1.68 1.200 0.400 3
@@ -2182,7 +2183,7 @@
fe80::aad0:e500:45e3:5800 Up xe-2/1/1.69 1.200 0.400 3
fe80::b2a8:6e00:457d:499c Up xe-2/0/1.69 1.200 0.400 3
-25 sessions, 25 clients
-Cumulative transmit rate 59.5 pps, cumulative receive rate 57.5 pps
+26 sessions, 26 clients
+Cumulative transmit rate 63.5 pps, cumulative receive rate 62.5 pps
{master}
More information about the Nocrancid
mailing list