[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri Dec 5 19:02:19 CST 2014


Index: router.db
===================================================================
--- router.db	(revision 121973)
+++ router.db	(working copy)
@@ -75,6 +75,7 @@
 core6.okc-M7i.onenet.net:juniper:up
 core6.tul-M7i.onenet.net:juniper:up
 core7.tul.onenet.net:juniper:down
+core8.okc-MX480.onenet.net:juniper:up
 core8.okc.onenet.net:cisco:down
 core8.tul-C7603.onenet.net:cisco:down
 core8.tul.onenet.net:juniper:up
Index: routers.up
===================================================================
--- routers.up	(revision 121933)
+++ routers.up	(working copy)
@@ -64,6 +64,7 @@
 core5.tul.onenet.net:juniper
 core6.okc-m7i.onenet.net:juniper
 core6.tul-m7i.onenet.net:juniper
+core8.okc-mx480.onenet.net:juniper
 core8.tul.onenet.net:juniper
 faye.okcdc.onenet.net:juniper
 hub.ada.onenet.net:juniper
Index: configs/core1.okc-mx960.onenet.net
===================================================================
--- configs/core1.okc-mx960.onenet.net	(revision 121972)
+++ configs/core1.okc-mx960.onenet.net	(working copy)
@@ -14497,6 +14497,7 @@
 # 164.58.247.46    xe-4/0/0.40            Full      164.58.199.164
 # 164.58.244.66    xe-4/1/0.42            Full      164.58.199.202
 # 164.58.247.190   xe-4/1/1.42            Full      164.58.199.81
+# 164.58.244.89    xe-4/2/0.42            Full      164.58.199.218
 # 
 # {master}
 # grnoc-mon at OKC-CORE1-MX960-RE0> show bfd session 
@@ -14529,7 +14530,7 @@
 164.58.247.66            Up        xe-3/2/1.40    1.200     0.400        3   
 164.58.247.190           Up        xe-4/1/1.42    1.200     0.400        3   
 
-26 sessions, 37 clients
+26 sessions, 38 clients
 Cumulative transmit rate 65.0 pps, cumulative receive rate 65.0 pps
 
 {master}
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 121962)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -5,6 +5,7 @@
 #   2014-12-05 10:17:51 CST by andrew via cli commit confirmed, rollback in 3mins
 #   2014-11-07 15:22:29 CST by admin via netconf
 #   2014-11-05 17:01:28 CST by andrew via cli
+# show chassis environment
 #   2014-11-05 17:00:47 CST by andrew via cli
 #   2014-11-05 17:00:27 CST by andrew via cli
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis environment 
Index: configs/acx.cai.ato-acx2100.onenet.net
===================================================================
--- configs/acx.cai.ato-acx2100.onenet.net	(revision 121971)
+++ configs/acx.cai.ato-acx2100.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ATOKA-MEMORIAL-HOSPITAL-ACX2100> show system commit 
+#   2014-12-05 18:51:06 CST by andrew via cli commit confirmed, rollback in 3mins
 #   2014-12-05 15:40:10 CST by jeremyt via cli
 #   2014-12-05 14:49:31 CST by andrew via cli
 #   2014-12-05 14:48:25 CST by andrew via cli commit confirmed, rollback in 3mins
 #   2014-12-05 10:32:39 CST by andrew via cli
 #   2014-12-05 09:42:54 CST by andrew via cli
-#   2014-12-04 17:30:20 CST by andrew via cli
 # grnoc-mon at ATOKA-MEMORIAL-HOSPITAL-ACX2100> show chassis environment 
 # Class Item                           Status     Measurement
 #       PCB Left                       OK        
@@ -158,7 +158,7 @@
 # grnoc-mon at ATOKA-MEMORIAL-HOSPITAL-ACX2100> show system uptime 
 # System booted: 2014-12-03 12:27 CST 
 # Protocols started: 2014-12-03 12:29 CST 
-# Last configured: 2014-12-05 15:40 CST  by jeremyt
+# Last configured: 2014-12-05 18:51 CST  by andrew
 # 
 # grnoc-mon at ATOKA-MEMORIAL-HOSPITAL-ACX2100> show interface terse 
 #Interface Admin Link
@@ -217,7 +217,7 @@
 #pime up up
 #tap up up
 # grnoc-mon at ATOKA-MEMORIAL-HOSPITAL-ACX2100> show configuration 
-## Last commit: 2014-12-05 15:40:10 CST by jeremyt
+## Last commit: 2014-12-05 18:51:06 CST by andrew
 version 12.3X54-D10.6;
 system {
     host-name ATOKA-MEMORIAL-HOSPITAL-ACX2100;
@@ -422,10 +422,6 @@
             vlan-id 500;
             family inet {
                 mtu 1500;
-                filter {
-                    input 10-MB-IN;
-                    output 10-MB-IN;
-                }
                 address 156.110.58.57/30;
             }
         }
@@ -985,23 +981,6 @@
             }
         }
     }
-    policer 10-MB {
-        filter-specific;
-        if-exceeding {
-            bandwidth-limit 10m;
-            burst-size-limit 50k;
-        }
-        then discard;
-    }
-    filter 10-MB-IN {
-        interface-specific;
-        term POPO {
-            then policer 10-MB;
-        }
-        term all {
-            then accept;
-        }
-    }
 }
 routing-instances {
     ONENET-MGMT-L3VPN {
Index: configs/core2-okc-mx960.onenet.net
===================================================================
--- configs/core2-okc-mx960.onenet.net	(revision 121972)
+++ configs/core2-okc-mx960.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE2-MX960-RE0> show system commit 
+#   2014-12-05 18:11:54 CST by andrew via cli commit synchronize
 #   2014-12-05 16:33:38 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
 #   2014-12-03 12:43:13 CST by joel via cli commit synchronize
 #   2014-11-22 14:15:05 CST by andrew via cli commit synchronize
 #   2014-11-13 20:13:04 CST by andrew via cli commit synchronize
 #   2014-11-13 19:51:21 CST by andrew via cli commit synchronize
-#   2014-11-13 19:21:53 CST by andrew via cli commit synchronize
 # grnoc-mon at OKC-CORE2-MX960-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -412,7 +412,7 @@
 # grnoc-mon at OKC-CORE2-MX960-RE0> show system uptime 
 # System booted: 2014-09-14 04:07 CDT 
 # Protocols started: 2014-09-14 04:09 CDT 
-# Last configured: 2014-12-05 16:33 CST  by andrew
+# Last configured: 2014-12-05 18:11 CST  by andrew
 # 
 # {master}
 # grnoc-mon at OKC-CORE2-MX960-RE0> show interface terse 
@@ -617,7 +617,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE2-MX960-RE0> show configuration 
-## Last commit: 2014-12-05 16:33:38 CST by andrew
+## Last commit: 2014-12-05 18:11:54 CST by andrew
 version 12.3R7.7;
 groups {
     re0 {
@@ -1479,7 +1479,7 @@
             }
             family iso;
             family inet6 {
-                address 2610:1d8:1100::e/127;
+                address 2610:1d8:1100::1e/127;
             }
             family mpls;
         }
@@ -17537,6 +17537,7 @@
 # 164.58.246.94    xe-2/2/0.69            Full      164.58.199.233
 # 164.58.246.106   xe-2/2/1.69            Full      164.58.199.222
 # 164.58.246.122   xe-2/3/0.69            Full      164.58.199.232
+# 164.58.244.91    xe-3/0/0.42            Full      164.58.199.218
 # 164.58.244.38    xe-3/1/0.42            Full      164.58.199.80
 # 
 # {master}
@@ -17562,7 +17563,7 @@
 164.58.246.106           Up        xe-2/2/1.69    1.200     0.400        3   
 164.58.246.122           Up        xe-2/3/0.69    1.200     0.400        3   
 
-18 sessions, 26 clients
+18 sessions, 27 clients
 Cumulative transmit rate 40.5 pps, cumulative receive rate 37.5 pps
 
 {master}
Index: configs/core8.okc-mx480.onenet.net
===================================================================
--- configs/core8.okc-mx480.onenet.net	(revision 121974)
+++ configs/core8.okc-mx480.onenet.net	(working copy)
@@ -0,0 +1,1144 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at OKC-CORE8-MX480-RE0> show system commit 
+#   2014-12-05 18:44:41 CST by admin via cli commit synchronize
+#   2014-12-05 18:39:22 CST by admin via cli commit synchronize
+#   2014-12-05 18:35:03 CST by admin via cli commit synchronize
+#   2014-12-05 18:12:38 CST by admin via cli commit synchronize
+#   2014-12-05 18:02:20 CST by admin via cli commit synchronize
+#   2014-12-05 16:48:20 CST by admin via cli commit synchronize
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  PEM 0                          OK        
+#       PEM 1                          OK        
+#       PEM 2                          OK        
+#       PEM 3                          OK        
+#       Routing Engine 0               OK        
+#       Routing Engine 0 CPU           OK        
+#       Routing Engine 1               OK        
+#       Routing Engine 1 CPU           OK        
+#       CB 0 Intake                    OK        
+#       CB 0 Exhaust A                 OK        
+#       CB 0 Exhaust B                 OK        
+#       CB 0 ACBC                      OK        
+#       CB 0 XF A                      OK        
+#       CB 0 XF B                      OK        
+#       CB 1 Intake                    OK        
+#       CB 1 Exhaust A                 OK        
+#       CB 1 Exhaust B                 OK        
+#       CB 1 ACBC                      OK        
+#       CB 1 XF A                      OK        
+#       CB 1 XF B                      OK        
+#       FPC 0 Intake                   OK        
+#       FPC 0 Exhaust A                OK        
+#       FPC 0 Exhaust B                OK        
+#       FPC 0 QX 0 TSen                OK        
+#       FPC 0 QX 0 Chip                OK        
+#       FPC 0 LU 0 TCAM TSen           OK        
+#       FPC 0 LU 0 TCAM Chip           OK        
+#       FPC 0 LU 0 TSen                OK        
+#       FPC 0 LU 0 Chip                OK        
+#       FPC 0 MQ 0 TSen                OK        
+#       FPC 0 MQ 0 Chip                OK        
+#       FPC 0 QX 1 TSen                OK        
+#       FPC 0 QX 1 Chip                OK        
+#       FPC 0 LU 1 TCAM TSen           OK        
+#       FPC 0 LU 1 TCAM Chip           OK        
+#       FPC 0 LU 1 TSen                OK        
+#       FPC 0 LU 1 Chip                OK        
+#       FPC 0 MQ 1 TSen                OK        
+#       FPC 0 MQ 1 Chip                OK        
+# Fans  Top Rear Fan                   OK
+#       Bottom Rear Fan                OK
+#       Top Middle Fan                 OK
+#       Bottom Middle Fan              OK
+#       Top Front Fan                  OK
+#       Bottom Front Fan               OK
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    ROM        Juniper ROM Monitor Version 10.1b2         
+#                          O/S        Version 14.2R1.9 by builder on 2014-10-30 1
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis fpc detail 
+# Slot 0 information:
+#   State                                 Online    
+#   Total CPU DRAM                   2048 MB
+#   Total RLDRAM                      734 MB
+#   Total DDR DRAM                   2596 MB
+#   Max Power Consumption             368 Watts
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                JN1159807AFB      MX480
+# Midplane         REV 05   710-017414   ABAC1787          MX480 Midplane
+# FPM Board        REV 02   710-017254   ABBE6576          Front Panel Display
+# PEM 0            Rev 03   740-027736   QCS1021T04Y       DC 2.4kW Power Entry Module
+# PEM 1            Rev 03   740-027736   QCS1021T0FU       DC 2.4kW Power Entry Module
+# PEM 2            Rev 03   740-027736   QCS1021T09N       DC 2.4kW Power Entry Module
+# PEM 3            Rev 03   740-027736   QCS1021T07K       DC 2.4kW Power Entry Module
+# Routing Engine 0 REV 14   740-013063   9012008787        RE-S-2000
+# Routing Engine 1 REV 14   740-013063   9012009319        RE-S-2000
+# CB 0             REV 14   750-031391   ABBV5453          Enhanced MX SCB
+# CB 1             REV 14   750-031391   ABBV4938          Enhanced MX SCB
+# FPC 0            REV 15   750-031088   YY9947            MPC Type 2 3D Q
+#   CPU            REV 06   711-030884   YY6468            MPC PMB 2G 
+#   MIC 0          REV 29   750-028387   ABCG8329          3D 4x 10GE  XFP
+#     PIC 0                 BUILTIN      BUILTIN           2x 10GE  XFP
+#       Xcvr 0     REV 01   740-033777   URM04G2           XFP-10G-SR
+#       Xcvr 1     REV 01   740-033777   URM02ZU           XFP-10G-SR
+#     PIC 1                 BUILTIN      BUILTIN           2x 10GE  XFP
+#   MIC 1          REV 19   750-032469   ZS9393            MIC-3D-8CHOC3-4CHOC12
+#     PIC 2                 BUILTIN      BUILTIN           MIC-3D-8CHOC3-4CHOC12
+#   QXM 0          REV 05   711-028408   YZ8502            MPC QXM
+#   QXM 1          REV 05   711-028408   YZ8826            MPC QXM
+# Fan Tray                                                 Enhanced Left Fan Tray
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis hardware models 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     FRU model number
+# Midplane         REV 05   710-017414   ABAC1787          CHAS-BP-MX480-S
+# FPM Board        REV 02   710-017254   ABBE6576          CRAFT-MX480-S
+# PEM 0            Rev 03   740-027736   QCS1021T04Y       PWR-MX480-2400-DC-S
+# PEM 1            Rev 03   740-027736   QCS1021T0FU       PWR-MX480-2400-DC-S
+# PEM 2            Rev 03   740-027736   QCS1021T09N       PWR-MX480-2400-DC-S
+# PEM 3            Rev 03   740-027736   QCS1021T07K       PWR-MX480-2400-DC-S
+# Routing Engine 0 REV 14   740-013063   9012008787        RE-S-2000-4096-S
+# Routing Engine 1 REV 14   740-013063   9012009319        RE-S-2000-4096-S
+# CB 0             REV 14   750-031391   ABBV5453          SCBE-MX-S
+# CB 1             REV 14   750-031391   ABBV4938          SCBE-MX-S
+# FPC 0            REV 15   750-031088   YY9947            MX-MPC2-3D-Q
+#   MIC 0          REV 29   750-028387   ABCG8329          MIC-3D-4XGE-XFP
+#   MIC 1          REV 19   750-032469   ZS9393            MIC-3D-8CHOC3-4CHOC12
+# Fan Tray                                                 FFANTRAY-MX480-HC-S
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis routing-engine 
+# Routing Engine status:
+#   Slot 0:
+#     Current state                  Master
+#     Election priority              Master
+#     DRAM                      3584 MB (4096 MB installed)
+#     Serial ID                      9012008787
+# Routing Engine status:
+#   Slot 1:
+#     Current state                  Backup
+#     Election priority              Backup
+#     DRAM                      3584 MB (4096 MB installed)
+#     Serial ID                      9012009319
+# 
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis scb 
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis sfm detail 
+# grnoc-mon at OKC-CORE8-MX480-RE0> show chassis ssb 
+# grnoc-mon at OKC-CORE8-MX480-RE0> show system boot-messages 
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2007 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD is a registered trademark of The FreeBSD Foundation.
+# Timecounter "i8254" frequency 1193182 Hz quality 0
+# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
+#   Origin = "GenuineIntel"  Id = 0x6d8  Stepping = 8
+#   Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
+#   Features2=0x180<EST,TM2>
+#   AMD Features=0x100000<NX>
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# MAC/veriexec fingerprint module loaded: SHA1
+# MAC/veriexec fingerprint module loaded: SHA256
+# Initializing M/T/EX platform properties ..
+# cpu0 on motherboard
+# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
+# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
+# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
+# pci0: <PCI bus> on pcib0
+# pci0: <unknown> at device 0.1 (no driver attached)
+# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
+# pci2: <PCI bus> on pcib1
+# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
+# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
+# pci3: <PCI bus> on pcib2
+# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
+# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
+# pci4: <PCI bus> on pcib3
+# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
+# acb0: acb: softc at 0xc7b2a9e0, fpga regs at 0xf99c5c00
+# spi: zl30143 clock initialized to 19.44 MHz
+# spi: zl30130 clock module initialized
+# pci4: <network> at device 14.0 (no driver attached)
+# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
+# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
+# usb0: USB revision 1.0
+# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# pci0: <base peripheral> at device 29.4 (no driver attached)
+# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
+# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
+# pci1: <PCI bus> on pcib4
+# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
+# gpio0: <GPIO controller> at device 31.0 on pci0
+# gpio_lpc_dev_init, Found bios device: 0x25a18086
+# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
+# ata0: <ATA channel 0> on atapci0
+# ata1: <ATA channel 1> on atapci0
+# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
+# isa0: <ISA bus> on motherboard
+# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
+# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
+# atkbd0: <AT Keyboard> irq 1 on atkbdc0
+# kbd0 at atkbd0
+# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
+# sc0: <System console> at flags 0x100 on isa0
+# sc0: MDA <16 virtual consoles, flags=0x100>
+# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
+# sio0: type 16550A, console
+# sio1 at port 0x3e8-0x3ef irq 5 on isa0
+# sio1: type 16550A
+# sio2 at port 0x2f8-0x2ff irq 3 on isa0
+# sio2: type 16550A
+# sio3 at port 0x2e8-0x2ef irq 7 on isa0
+# sio3: type 16550A
+# virtual chassis member-id = 255
+# virtual chassis mode      = 0
+# Initializing product: 33 ..
+# Setting up M/T interface operations and attributes
+# fxp0: Ethernet address 00:a0:a5:71:59:a7
+# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
+# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
+# acb: acb_late_attach: Initializing silabs clocks to drive 8727 external phy
+# Registered AMT tunnel Encap with UDP Tunnel!
+#  Loading Redundant LT driver
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
+# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
+# Loading JUNOS chassis module
+# chassis_init_hw_chassis_startup_time: chassis startup time 0.000000
+# Kernel thread "wkupdaemon" (pid 47) exited prematurely.
+# Trying to mount root from ufs:/dev/ad0s1a
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show version 
+# Hostname: OKC-CORE8-MX480-RE0 # Model: mx480 # Junos: 14.2R1.9 # JUNOS Base OS boot [14.2R1.9] # JUNOS Base OS Software Suite [14.2R1.9] # JUNOS Kernel Software Suite [14.2R1.9] # JUNOS Crypto Software Suite [14.2R1.9] # JUNOS Packet Forwarding Engine Support (M/T/EX Common) [14.2R1.9] # JUNOS Packet Forwarding Engine Support (MX Common) [14.2R1.9] # JUNOS Online Documentation [14.2R1.9] # JUNOS Services AACL Container package [14.2R1.9] # JUNOS Services Application Level Gateways [14.2R1.9] # JUNOS AppId Services [14.2R1.9] # JUNOS Border Gateway Function package [14.2R1.9] # JUNOS Services Captive Portal and Content Delivery Container package [14.2R1.9] # JUNOS Services HTTP Content Management package [14.2R1.9] # JUNOS IDP Services [14.2R1.9] # JUNOS Services Jflow Container package [14.2R1.9] # JUNOS Services LL-PDF Container package [14.2R1.9] # JUNOS Services MobileNext Software package [14.2R1.9] # JUNOS Services Mobile Subscriber Service Container package [14.2R1.!
 9] # JUNOS Services NAT [14.2R1.9] # JUNOS Services PTSP Container package [14.2R1.9] # JUNOS Services RPM [14.2R1.9] # JUNOS Services Stateful Firewall [14.2R1.9] # JUNOS Voice Services Container package [14.2R1.9] # JUNOS Services Crypto [14.2R1.9] # JUNOS Services SSL [14.2R1.9] # JUNOS Services IPSec [14.2R1.9] # JUNOS platform Software Suite [14.2R1.9] # JUNOS Routing Software Suite [14.2R1.9] # JUNOS Runtime Software Suite [14.2R1.9] # JUNOS Web Management [14.2R1.9] # JUNOS py-base-i386 [14.2R1.9] #  # {master} # grnoc-mon at OKC-CORE8-MX480-RE0> file list /var/tmp detail # 
+# /var/tmp:
+# total blocks: 44
+# drwxr-xr-x  2 root  field        512 Dec 4  18:14 gres-tp/
+# -rw-r--r--  1 root  field          4 Dec 5  16:14 idp_license_info
+# drwxrwxrwx  2 root  wheel        512 Dec 4  18:03 install/
+# -rw-r--r--  1 root  field         79 Dec 5  16:13 kmdchk.log
+# drwxrwxrwx  2 root  wheel        512 Dec 4  18:03 pics/
+# drwxr-xr-x  2 root  field        512 Dec 4  18:14 rtsdb/
+# -rw-r-----  1 root  field        534 Dec 5  16:14 sampled.pkts
+# drwxr-xr-x  3 root  field        512 Dec 5  08:55 sec-download/
+# drwxrwxrwt  2 root  wheel        512 Dec 4  18:03 vi.recover/
+# total files: 3
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show system uptime 
+# System booted: 2014-12-05 16:12 CST 
+# Protocols started: 2014-12-05 16:14 CST 
+# Last configured: 2014-12-05 18:44 CST  by admin
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show interface terse 
+#Interface Admin Link
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#xe-0/0/0 up up
+#xe-0/0/0.42 up up
+#xe-0/0/0.32767 up up
+#xe-0/0/1 up up
+#xe-0/0/1.42 up up
+#xe-0/0/1.32767 up up
+#xe-0/1/0 up down
+#xe-0/1/1 up down
+#coc12-0/2/0 up down
+#lc-0/2/0 up up
+#lc-0/2/0.32769 up up
+#pfe-0/2/0 up up
+#pfe-0/2/0.16383 up up
+#coc3-0/2/1 up down
+#coc3-0/2/2 up down
+#coc3-0/2/3 up down
+#coc3-0/2/5 up down
+#coc3-0/2/6 up down
+#coc3-0/2/7 up down
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#em1.0 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+#vtep up up
+# grnoc-mon at OKC-CORE8-MX480-RE0> show configuration 
+## Last commit: 2014-12-05 18:44:41 CST by admin
+version 14.2R1.9;
+groups {
+    re0 {
+        system {
+            host-name OKC-CORE8-MX480-RE0;
+            backup-router 172.25.46.1;
+        }
+        interfaces {
+            fxp0 {
+                unit 0 {
+                    family inet {
+                        address 172.25.46.182/24;
+                    }
+                }
+            }
+        }
+    }
+    re1 {
+        system {
+            host-name OKC-CORE8-MX480-RE1;
+            backup-router 172.25.46.1;
+        }
+        interfaces {
+            fxp0 {
+                unit 0 {
+                    family inet {
+                        address 172.25.46.183/24;
+                    }
+                }
+            }
+        }
+    }
+    LDP {
+        protocols {
+            ldp {
+                interface <*> {
+                    link-protection;
+                }
+            }
+        }
+    }
+    OSPF {
+        protocols {
+            ospf {
+                area 0.0.0.0 {
+                    interface <*> {
+                        link-protection;
+                        bfd-liveness-detection {
+                            minimum-interval 400;
+                            multiplier 3;
+                        }
+                    }
+                }
+            }
+        }
+    }
+    ISIS-LEVEL2 {
+        protocols {
+            isis {
+                interface <*> {
+                    link-protection;
+                    bfd-liveness-detection {
+                        minimum-interval 400;
+                        multiplier 3;
+                    }
+                    level 2 {
+                        hello-#authentication-key <removed>;
+                        hello-authentication-type md5;
+                    }
+                    level 1 disable;
+                }
+            }
+        }
+    }
+}
+apply-groups [ re0 re1 ];
+system {
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.198.10;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.199.218;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+        class admin {
+            idle-timeout 1440;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ftp;
+        ssh {
+            root-login deny;
+            protocol-version v2;
+            max-sessions-per-connection 32;
+        }
+        netconf {
+            ssh;
+        }
+    }
+    syslog {
+        archive size 10m files 20;
+        user * {
+            any emergency;
+        }
+        host 164.58.253.92 {
+            any notice;
+        }
+        host 164.58.253.38 {
+            any notice;
+        }
+        file messages {
+            any notice;
+            authorization info;
+            match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file default-log-messages {
+            any info;
+            match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|CFMD_CCM_DEFECT| LFMD_3AH | RPD_MPLS_PATH_BFD|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)";
+            structured-data;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+        source-address 164.58.199.218;
+    }
+    commit synchronize;
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+chassis {
+    redundancy {
+        routing-engine 0 master;
+        routing-engine 1 backup;
+        failover {
+            on-loss-of-keepalives;
+            on-disk-failure;
+        }
+        graceful-switchover;
+    }
+    routing-engine {
+        on-disk-failure disk-failure-action reboot;
+    }
+    fpc 0 {
+        pic 2 {
+            port 0 {
+                speed oc12-stm4;
+            }
+        }
+        sampling-instance JFLOW-1;
+    }
+}
+services {
+    flow-monitoring {
+        version-ipfix {
+            template IP-V4 {
+                flow-active-timeout 60;
+                flow-inactive-timeout 60;
+                template-refresh-rate {
+                    packets 1000;
+                    seconds 10;
+                }
+                option-refresh-rate {
+                    packets 1000;
+                    seconds 10;
+                }
+                ipv4-template;
+            }
+            template IP-V6 {
+                flow-active-timeout 60;
+                flow-inactive-timeout 60;
+                template-refresh-rate {
+                    packets 1000;
+                    seconds 10;
+                }
+                option-refresh-rate {
+                    packets 1000;
+                    seconds 10;
+                }
+                ipv6-template;
+            }
+        }
+    }
+}
+security {
+    ipsec {
+        security-association OneNet-OSPF3-AUTH {
+            mode transport;
+            manual {
+                direction bidirectional {
+                    protocol ah;
+                    spi 256;
+                    authentication {
+                        algorithm hmac-md5-96;
+                        key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+                    }
+                }
+            }
+        }
+    }
+}
+interfaces {
+    xe-0/0/0 {
+        description "CORE 10GE to core1.okc xe-?/?/? | OneNet-OKC-OKC-XE-XXXX";
+        vlan-tagging;
+        mtu 9192;
+        encapsulation flexible-ethernet-services;
+        unit 42 {
+            vlan-id 42;
+            family inet {
+                mtu 9000;
+                sampling {
+                    input;
+                }
+                address 164.58.244.89/31;
+            }
+            family iso;
+            family inet6 {
+                address 2610:1d8:1000::2b/127;
+            }
+            family mpls;
+        }
+    }
+    xe-0/0/1 {
+        description "CORE 10GE to core2.okc xe-?/?/? | OneNet-OKC-OKC-XE-XXXX";
+        vlan-tagging;
+        mtu 9192;
+        encapsulation flexible-ethernet-services;
+        unit 42 {
+            vlan-id 42;
+            family inet {
+                mtu 9000;
+                sampling {
+                    input;
+                }
+                address 164.58.244.91/31;
+            }
+            family iso;
+            family inet6 {
+                address 2610:1d8:1100::1f/127;
+            }
+            family mpls;
+        }
+    }
+    fxp0 {
+        disable;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+                address 164.58.199.218/32;
+            }
+            family iso {
+                address 49.0001.1640.5819.9218.00;
+            }
+            family inet6 {
+                address 2610:1d8::164:58:199:218/128;
+            }
+        }
+    }
+}
+snmp {
+    description "NetGroup 1-888-566-3638";
+    location OKCCORE8-MX480;
+    contact "OneNet Netgroup";
+    client-list snmp-management {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+    trap-options {
+        source-address 164.58.199.218;
+    }
+    trap-group "<removed>" {
+        version v2;
+        targets {
+            164.58.253.35;
+        }
+    }
+}
+forwarding-options {
+    sampling {
+        instance {
+            JFLOW-1 {
+                input {
+                    rate 1000;
+                }
+                family inet {
+                    output {
+                        flow-inactive-timeout 60;
+                        flow-active-timeout 60;
+                        flow-server 164.58.253.36 {
+                            port 9218;
+                            autonomous-system-type origin;
+                            no-local-dump;
+                            version-ipfix {
+                                template {
+                                    IP-V4;
+                                }
+                            }
+                        }
+                        inline-jflow {
+                            source-address 164.58.199.218;
+                        }
+                    }
+                }
+                family inet6 {
+                    output {
+                        flow-inactive-timeout 60;
+                        flow-active-timeout 60;
+                        flow-server 164.58.253.36 {
+                            port 9218;
+                            autonomous-system-type origin;
+                            no-local-dump;
+                            version-ipfix {
+                                template {
+                                    IP-V6;
+                                }
+                            }
+                        }
+                        inline-jflow {
+                            source-address 164.58.199.218;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+routing-options {
+    nonstop-routing;
+    static {
+        route 192.0.2.1/32 {
+            discard;
+            no-readvertise;
+        }
+    }
+    router-id 164.58.199.218;
+    autonomous-system 5078;
+    forwarding-table {
+        export LOAD-BALANCE;
+    }
+}
+protocols {
+    mpls {
+        ipv6-tunneling;
+        interface lo0.0;
+        interface xe-0/0/0.42;
+        interface xe-0/0/1.42;
+    }
+    bgp {
+        group CORE-RR-OKC-V4 {
+            type internal;
+            local-address 164.58.199.218;
+            family inet {
+                any;
+            }
+            family inet-vpn {
+                unicast;
+            }
+            family inet6-vpn {
+                unicast;
+            }
+            family l2vpn {
+                signaling;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 164.58.199.216 {
+                description OKC-CORE6-IBGP-V4;
+            }
+        }
+        group CORE-RR-TUL-V4 {
+            type internal;
+            local-address 164.58.199.218;
+            family inet {
+                any;
+            }
+            family inet-vpn {
+                unicast;
+            }
+            family inet6-vpn {
+                unicast;
+            }
+            family l2vpn {
+                signaling;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 164.58.199.226 {
+                description TUL-CORE6-IBGP-V4;
+            }
+        }
+        group CORE-RR-OKC-V6 {
+            type internal;
+            local-address 2610:1d8::164:58:199:218;
+            family inet6 {
+                any;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 2610:1d8::164:58:199:216 {
+                description OKC-CORE6-IBGP-V6;
+            }
+        }
+        group CORE-RR-TUL-V6 {
+            type internal;
+            local-address 2610:1d8::164:58:199:218;
+            family inet6 {
+                any;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 2610:1d8::164:58:199:226 {
+                description TUL-CORE6-IBGP-V6;
+            }
+        }
+    }
+    isis {
+        apply-groups ISIS-LEVEL2;
+        reference-bandwidth 1000g;
+        level 1 disable;
+        interface xe-0/0/0.42;
+        interface xe-0/0/1.42;
+        interface fxp0.0 {
+            apply-groups-except ISIS-LEVEL2;
+            disable;
+        }
+        interface lo0.0 {
+            apply-groups-except ISIS-LEVEL2;
+            passive;
+            level 1 disable;
+        }
+    }
+    ospf {
+        apply-groups OSPF;
+        reference-bandwidth 100g;
+        area 0.0.0.0 {
+            interface lo0.0 {
+                apply-groups-except OSPF;
+                passive;
+            }
+            interface fxp0.0 {
+                apply-groups-except OSPF;
+                disable;
+            }
+            interface xe-0/0/0.42 {
+                authentication {
+                    md5 7 key "$9$kq5Qn/tpOR/9RSrex7DiHkfz69AuBEQF9p0BEh"; ## SECRET-DATA
+                }
+            }
+            interface xe-0/0/1.42 {
+                authentication {
+                    md5 7 key "$9$OWRuBhSevLXNbvMb24aHktu0OEyKM8x-wSrMX7-ws"; ## SECRET-DATA
+                }
+            }
+        }
+    }
+    ospf3 {
+        reference-bandwidth 100g;
+        area 0.0.0.0 {
+            interface lo0.0 {
+                passive;
+            }
+            interface fxp0.0 {
+                disable;
+            }
+            interface xe-0/0/0.42 {
+                ipsec-sa OneNet-OSPF3-AUTH;
+            }
+            interface xe-0/0/1.42 {
+                ipsec-sa OneNet-OSPF3-AUTH;
+            }
+        }
+    }
+    ldp {
+        apply-groups LDP;
+        preference 255;
+        track-igp-metric;
+        interface xe-0/0/0.42;
+        interface xe-0/0/1.42;
+        interface lo0.0;
+    }
+    lldp {
+        interface all;
+    }
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        64.207.244.14/32;
+        66.129.224.37/32;
+        129.15.127.96/28;
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.10.0/24;
+        164.58.15.0/24;
+        164.58.244.0/22;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-RADIUS-SOURCES {
+        apply-path "system radius-server <*>";
+    }
+    prefix-list PRE-NTP-SOURCES {
+        apply-path "system ntp server <*>";
+    }
+    prefix-list PRE-DNS-SOURCES {
+        apply-path "system name-server <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        apply-path "snmp client-list snmp-management <1*>";
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-BGP-ALLOW {
+        apply-path "protocols bgp group <*> neighbor <*>";
+    }
+    prefix-list PRE-LDP-SOURCES {
+        10.199.0.0/16;
+        164.58.198.0/23;
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-L0-SOURCES {
+        apply-path "interfaces lo0 unit <*> family inet address <164.*>";
+    }
+    prefix-list PRE-RI-BGP-ALLOW {
+        apply-path "routing-instances <*> protocols bgp group <*> neighbor <*>";
+    }
+    policy-statement LOAD-BALANCE {
+        then {
+            load-balance per-packet;
+        }
+    }
+    policy-statement REDISTRIBUTE-DIRECTS {
+        term 1 {
+            from protocol direct;
+            then {
+                community add OKCCORE8;
+                external {
+                    type 1;
+                }
+                accept;
+            }
+        }
+    }
+    policy-statement REDISTRIBUTE-STATICS {
+        term 1 {
+            from protocol static;
+            then {
+                community add OKCCORE8;
+                accept;
+            }
+        }
+    }
+    community OKCCORE8 members [ 5078:218 5078:9218 ];
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term FIRST-FRAG {
+                from {
+                    first-fragment;
+                }
+                then {
+                    discard;
+                }
+            }
+            term NEXT-FRAG {
+                from {
+                    is-fragment;
+                }
+                then {
+                    discard;
+                }
+            }
+            term OSPF-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol ospf;
+                }
+                then accept;
+            }
+            term BGP-ALLOW {
+                from {
+                    prefix-list {
+                        PRE-BGP-ALLOW;
+                        PRE-RI-BGP-ALLOW;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
+            term RADIUS-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-RADIUS-SOURCES;
+                    }
+                    protocol [ udp tcp ];
+                    port [ radius radacct ];
+                }
+                then accept;
+            }
+            term NTP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-NTP-SOURCES;
+                        PRE-L0-SOURCES;
+                    }
+                    protocol udp;
+                    port ntp;
+                }
+                then accept;
+            }
+            term DOMAIN-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-DNS-SOURCES;
+                    }
+                    port domain;
+                }
+                then accept;
+            }
+            term SYSLOG-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    port syslog;
+                }
+                then accept;
+            }
+            term FTP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    port ftp;
+                }
+                then accept;
+            }
+            term JSPACE-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    source-port 7408;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol [ tcp udp ];
+                    port [ snmp snmptrap ];
+                }
+                then accept;
+            }
+            term LDP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LDP-SOURCES;
+                    }
+                    port ldp;
+                }
+                then accept;
+            }
+            term PIM-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol pim;
+                }
+                then accept;
+            }
+            term BFD-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol udp;
+                    port [ 3784 3785 ];
+                }
+                then accept;
+            }
+            term RPKI-ALLOW {
+                from {
+                    source-address {
+                        164.58.253.143/32;
+                    }
+                    protocol tcp;
+                    source-port 8282;
+                }
+                then accept;
+            }
+            term ICMP-ALLOW {
+                from {
+                    protocol icmp;
+                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+                }
+                then accept;
+            }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
+            term DENY-SERVICES-INBOUND {
+                from {
+                    destination-port [ ssh telnet http https snmp ntp domain ];
+                }
+                then {
+                    discard;
+                }
+            }
+            term SERVICES-OUTBOUND {
+                from {
+                    source-port [ ssh telnet ];
+                }
+                then accept;
+            }
+            term DENY_ALL {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+}
+{master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 164.58.244.88    xe-0/0/0.42            Full      164.58.199.211
+# 164.58.244.90    xe-0/0/1.42            Full      164.58.199.212
+# 
+# {master}
+# grnoc-mon at OKC-CORE8-MX480-RE0> show bfd session 
+                                                  Detect   Transmit
+Address                  State     Interface      Time     Interval  Multiplier
+164.58.244.88            Up        xe-0/0/0.42    1.200     0.400        3   
+164.58.244.90            Up        xe-0/0/1.42    1.200     0.400        3   
+
+2 sessions, 4 clients
+Cumulative transmit rate 5.0 pps, cumulative receive rate 5.0 pps
+
+{master}
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net	(revision 121973)
+++ configs/hub.dur.onenet.net	(working copy)
@@ -380,7 +380,7 @@
 #fe-2/1/1.0 up up
 #fe-2/1/2 up up
 #fe-2/1/2.0 up up
-#fe-2/1/3 down down
+#fe-2/1/3 down up
 #ge-2/2/0 up up
 #pc-2/2/0 up up
 #pc-2/2/0.16383 up up
Index: routers.all
===================================================================
--- routers.all	(revision 121933)
+++ routers.all	(working copy)
@@ -78,6 +78,7 @@
 core6.okc-M7i.onenet.net:juniper
 core6.tul-M7i.onenet.net:juniper
 core7.tul.onenet.net:juniper
+core8.okc-MX480.onenet.net:juniper
 core8.okc.onenet.net:cisco
 core8.tul-C7603.onenet.net:cisco
 core8.tul.onenet.net:juniper



More information about the Nocrancid mailing list