[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Wed Feb 19 12:02:17 CST 2014
Index: core.alt.onenet.net
===================================================================
--- core.alt.onenet.net (revision 108753)
+++ core.alt.onenet.net (working copy)
@@ -324,14 +324,14 @@
#lo0.16384 up up
#lo0.16385 up up
#lsi up up
-#lsi.1100918 up up
-#lsi.1100919 up up
-#lsi.1100920 up up
-#lsi.1100921 up up
-#lsi.1100922 up up
-#lsi.1100923 up up
-#lsi.1100924 up up
-#lsi.1100925 up up
+#lsi.1100990 up up
+#lsi.1100991 up up
+#lsi.1100992 up up
+#lsi.1100993 up up
+#lsi.1100994 up up
+#lsi.1100995 up up
+#lsi.1100996 up up
+#lsi.1100997 up up
#mtun up up
#pimd up up
#pime up up
Index: core.ida.onenet.net
===================================================================
--- core.ida.onenet.net (revision 107270)
+++ core.ida.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at IDABEL-MX480-RE0> show system commit
+# 2014-02-19 11:58:34 CST by josh via cli commit confirmed, rollback in 1mins synchronize
+# 2014-02-19 11:51:27 CST by josh via cli commit synchronize
+# 2014-02-19 11:50:48 CST by josh via cli commit confirmed, rollback in 1mins synchronize
# 2014-02-14 14:54:30 CST by rnordmark via cli commit synchronize
# 2014-02-12 15:27:30 CST by donnie via cli commit synchronize
# 2014-02-12 15:23:40 CST by donnie via cli commit synchronize
-# 2014-02-10 08:06:09 CST by donnie via cli commit synchronize
-# 2014-02-07 15:32:06 CST by donnie via cli commit synchronize
-# 2014-02-07 14:45:27 CST by donnie via cli commit synchronize
# grnoc-mon at IDABEL-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -249,7 +249,7 @@
# grnoc-mon at IDABEL-MX480-RE0> show system uptime
# System booted: 2013-05-26 00:55 CDT
# Protocols started: 2013-05-26 01:13 CDT
-# Last configured: 2014-02-14 14:54 CST by rnordmark
+# Last configured: 2014-02-19 11:58 CST by josh
#
# {master}
# grnoc-mon at IDABEL-MX480-RE0> show interface terse
@@ -329,7 +329,7 @@
#pp0 up up
#tap up up
# grnoc-mon at IDABEL-MX480-RE0> show configuration
-## Last commit: 2014-02-14 14:54:30 CST by rnordmark
+## Last commit: 2014-02-19 11:58:34 CST by josh
version 11.4R7.5;
groups {
re0 {
@@ -1099,6 +1099,17 @@
}
term SERVICES-OUTBOUND {
from {
+ source-address {
+ 129.15.127.96/28;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.253.0/24;
+ 64.207.244.14/32;
+ 66.129.224.37/32;
+ 164.58.15.0/24;
+ 164.58.244.0/22;
+ }
source-port [ domain ntp ssh syslog ftp 7804 telnet ];
}
then accept;
Index: core1.nor.onenet.net
===================================================================
--- core1.nor.onenet.net (revision 108757)
+++ core1.nor.onenet.net (working copy)
@@ -450,7 +450,7 @@
#lsi.1056221 up up
#lsi.1056389 up up
#lsi.1056576 up up
-#lsi.1056589 up up
+#lsi.1056598 up up
#mtun up up
#pimd up up
#pime up up
Index: core.law.onenet.net
===================================================================
--- core.law.onenet.net (revision 108755)
+++ core.law.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at LAWTON-MX480-RE0> show system commit
+# 2014-02-19 11:22:11 CST by rnordmark via cli commit confirmed, rollback in 5mins synchronize
# 2014-02-14 14:49:27 CST by rnordmark via cli commit synchronize
# 2014-02-11 16:39:41 CST by rnordmark via cli commit synchronize
# 2014-02-11 16:39:14 CST by rnordmark via cli commit synchronize
# 2014-01-21 14:40:41 CST by rnordmark via cli commit synchronize
# 2014-01-21 09:56:58 CST by rnordmark via cli commit synchronize
-# 2014-01-14 13:50:06 CST by rnordmark via cli commit synchronize
# grnoc-mon at LAWTON-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -322,7 +322,7 @@
# grnoc-mon at LAWTON-MX480-RE0> show system uptime
# System booted: 2013-05-28 01:07 CDT
# Protocols started: 2013-05-28 01:08 CDT
-# Last configured: 2014-02-14 14:49 CST by rnordmark
+# Last configured: 2014-02-19 11:22 CST by rnordmark
#
# {master}
# grnoc-mon at LAWTON-MX480-RE0> show interface terse
@@ -474,7 +474,7 @@
#lsi.1058664 up up
#lsi.1058703 up up
#lsi.1058853 up up
-#lsi.1058866 up up
+#lsi.1058875 up up
#mtun up up
#pimd up up
#pime up up
@@ -482,7 +482,7 @@
#pp0 up up
#tap up up
# grnoc-mon at LAWTON-MX480-RE0> show configuration
-## Last commit: 2014-02-14 14:49:27 CST by rnordmark
+## Last commit: 2014-02-19 11:22:11 CST by rnordmark
version 11.4R7.5;
groups {
re0 {
@@ -1122,6 +1122,9 @@
bandwidth 2g;
family inet {
mtu 9000;
+ filter {
+ output BLOCK-NTP;
+ }
address 164.58.69.49/28;
}
}
@@ -1741,6 +1744,47 @@
then accept;
}
}
+ filter BLOCK-NTP {
+ term 0.5 {
+ from {
+ source-address {
+ 164.58.68.0/24;
+ 164.58.109.250/32;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then {
+ discard;
+ }
+ }
+ term 1 {
+ from {
+ source-address {
+ 156.110.0.0/16;
+ 164.58.0.0/16;
+ 140.182.45.75/32;
+ 192.12.206.228/32;
+ 129.79.5.100/32;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term 2 {
+ from {
+ protocol udp;
+ port ntp;
+ }
+ then {
+ discard;
+ }
+ }
+ term 3 {
+ then accept;
+ }
+ }
}
policer 10M-POL {
logical-interface-policer;
Index: core1.sti-mx960.onenet.net
===================================================================
--- core1.sti-mx960.onenet.net (revision 108756)
+++ core1.sti-mx960.onenet.net (working copy)
@@ -620,7 +620,7 @@
#lsi.1067817 up up
#lsi.1067818 up up
#lsi.1067819 up up
-#lsi.1067832 up up
+#lsi.1067841 up up
#mtun up up
#pimd up up
#pime up up
Index: core1.dc.onenet.net
===================================================================
--- core1.dc.onenet.net (revision 108764)
+++ core1.dc.onenet.net (working copy)
@@ -847,7 +847,7 @@
#lsi.1057672 up up
#lsi.1057714 up up
#lsi.1057901 up up
-#lsi.1057914 up up
+#lsi.1057923 up up
#mtun up up
#pimd up up
#pime up up
Index: core1.okc-mx960.onenet.net
===================================================================
--- core1.okc-mx960.onenet.net (revision 108514)
+++ core1.okc-mx960.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE1-MX960-RE0> show system commit
+# 2014-02-19 11:44:40 CST by josh via cli commit confirmed, rollback in 1mins synchronize
+# 2014-02-19 11:34:49 CST by josh via cli commit confirmed, rollback in 1mins synchronize
# 2014-02-17 20:08:26 CST by josh via cli commit confirmed, rollback in 1mins synchronize
# 2014-02-17 17:49:32 CST by josh via cli commit confirmed, rollback in 1mins synchronize
# 2014-02-17 17:48:26 CST by josh via cli commit confirmed, rollback in 1mins synchronize
# 2014-02-17 17:46:51 CST by josh via cli commit confirmed, rollback in 1mins synchronize
-# 2014-02-17 17:40:17 CST by josh via cli commit confirmed, rollback in 1mins synchronize
-# 2014-02-17 17:05:45 CST by josh via cli commit synchronize
# grnoc-mon at OKC-CORE1-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -480,7 +480,7 @@
# grnoc-mon at OKC-CORE1-MX960-RE0> show system uptime
# System booted: 2013-04-13 23:52 CDT
# Protocols started: 2013-04-13 23:53 CDT
-# Last configured: 2014-02-17 20:08 CST by josh
+# Last configured: 2014-02-19 11:44 CST by josh
#
# {master}
# grnoc-mon at OKC-CORE1-MX960-RE0> show interface terse
@@ -704,7 +704,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE1-MX960-RE0> show configuration
-## Last commit: 2014-02-17 20:08:26 CST by josh
+## Last commit: 2014-02-19 11:44:40 CST by josh
version 11.4R7.5;
groups {
re0 {
@@ -1993,7 +1993,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2001,7 +2001,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2009,7 +2009,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2018,7 +2018,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2026,7 +2026,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2034,7 +2034,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2043,7 +2043,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2051,7 +2051,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2059,7 +2059,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2068,7 +2068,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
inactive: bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2076,7 +2076,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2084,7 +2084,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2092,7 +2092,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2100,7 +2100,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2108,7 +2108,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2116,7 +2116,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2124,7 +2124,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2132,7 +2132,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2140,7 +2140,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -2148,7 +2148,7 @@
link-protection;
ipsec-sa OneNet-OSPF3-AUTH;
bfd-liveness-detection {
- minimum-interval 100;
+ minimum-interval 400;
multiplier 3;
}
}
@@ -12915,7 +12915,10 @@
from {
source-port [ domain ntp ssh syslog ftp 7804 telnet ];
}
- then accept;
+ then {
+ count SERVICES-OUTBOUND-COUNTER;
+ accept;
+ }
}
term RADIUS {
from {
Index: hub.ada.onenet.net
===================================================================
--- hub.ada.onenet.net (revision 107293)
+++ hub.ada.onenet.net (working copy)
@@ -361,10 +361,10 @@
#t1-2/0/3:16 up down
#t1-2/0/3:17 up down
#t1-2/0/3:18 up down
-#t1-2/0/3:19 up up
-#t1-2/0/3:19.0 up up
-#t1-2/0/3:20 up up
-#t1-2/0/3:20.0 up up
+#t1-2/0/3:19 up down
+#t1-2/0/3:19.0 up down
+#t1-2/0/3:20 up down
+#t1-2/0/3:20.0 up down
#t1-2/0/3:21 up down
#t1-2/0/3:22 up down
#t1-2/0/3:23 up down
@@ -386,7 +386,7 @@
#lsq-2/3/0 up up
#lsq-2/3/0.6 up up
#lsq-2/3/0.12 up up
-#lsq-2/3/0.13 up up
+#lsq-2/3/0.13 up down
#mt-2/3/0 up up
#pd-2/3/0 up up
#pe-2/3/0 up up
Index: core5.okc.onenet.net
===================================================================
--- core5.okc.onenet.net (revision 108760)
+++ core5.okc.onenet.net (working copy)
@@ -576,7 +576,7 @@
#lsi.1491894 up up
#lsi.1492062 up up
#lsi.1492249 up up
-#lsi.1492262 up up
+#lsi.1492271 up up
#lsi.1496838 up up
#lsi.2010116 up up
#mtun up up
Index: core1.okccc.onenet.net
===================================================================
--- core1.okccc.onenet.net (revision 108761)
+++ core1.okccc.onenet.net (working copy)
@@ -532,7 +532,7 @@
#lsi.1048583 up up
#lsi.1048584 up up
#lsi.1048771 up up
-#lsi.1048784 up up
+#lsi.1048793 up up
#mtun up up
#pimd up up
#pime up up
Index: hub.chi.onenet.net
===================================================================
--- hub.chi.onenet.net (revision 108762)
+++ hub.chi.onenet.net (working copy)
@@ -310,7 +310,7 @@
#t1-2/0/2:21 down down
#t1-2/0/2:22 down down
#t1-2/0/2:23 down down
-#t1-2/0/2:24 down up
+#t1-2/0/2:24 down down
#t1-2/0/2:25 down up
#t1-2/0/2:26 down down
#t1-2/0/2:27 down down
Index: hub.mia.onenet.net
===================================================================
--- hub.mia.onenet.net (revision 108763)
+++ hub.mia.onenet.net (working copy)
@@ -442,7 +442,7 @@
#lsi.1053362 up up
#lsi.1053531 up up
#lsi.1053718 up up
-#lsi.1053731 up up
+#lsi.1053740 up up
#mtun up up
#pimd up up
#pime up up
Index: hub.say.onenet.net
===================================================================
--- hub.say.onenet.net (revision 107307)
+++ hub.say.onenet.net (working copy)
@@ -392,8 +392,8 @@
#fe-2/1/1 down down
#fe-2/1/2 up up
#fe-2/1/2.0 up up
-#fe-2/1/3 up up
-#fe-2/1/3.0 up up
+#fe-2/1/3 up down
+#fe-2/1/3.0 up down
#gr-2/3/0 up up
#ip-2/3/0 up up
#lsq-2/3/0 up up
More information about the Nocrancid
mailing list