[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Tue Jan 7 10:01:02 CST 2014


Index: core.hut.ato.onenet.net
===================================================================
--- core.hut.ato.onenet.net	(revision 96050)
+++ core.hut.ato.onenet.net	(working copy)
@@ -253,10 +253,10 @@
 #ge-1/0/8 down down
 #ge-1/0/9 down down
 #ge-1/1/0 down down
-#ge-1/1/1 up up
-#ge-1/1/1.250 up up
-#ge-1/1/1.3905 up up
-#ge-1/1/1.32767 up up
+#ge-1/1/1 up down
+#ge-1/1/1.250 up down
+#ge-1/1/1.3905 up down
+#ge-1/1/1.32767 up down
 #ge-1/1/2 down down
 #ge-1/1/3 up down
 #ge-1/1/4 up up

Index: core.end.onenet.net
===================================================================
--- core.end.onenet.net	(revision 97322)
+++ core.end.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ENID-MX480-RE0> show system commit 
+#   2014-01-07 09:52:29 CST by joel via cli commit synchronize
 #   2013-12-19 09:13:46 CST by joel via cli commit synchronize
 #   2013-12-19 09:04:56 CST by joel via cli commit synchronize
 #   2013-11-13 12:15:16 CST by joel via cli commit synchronize
 #   2013-11-11 15:26:05 CST by rnordmark via cli commit synchronize
 #   2013-11-01 12:01:23 CDT by joel via cli commit synchronize
-#   2013-10-31 21:28:52 CDT by joel via cli commit synchronize
 # grnoc-mon at ENID-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -238,7 +238,7 @@
 # grnoc-mon at ENID-MX480-RE0> show system uptime 
 # System booted: 2013-05-30 00:12 CDT 
 # Protocols started: 2013-05-30 00:17 CDT 
-# Last configured: 2013-12-19 09:13 CST  by joel
+# Last configured: 2014-01-07 09:52 CST  by joel
 # 
 # {master}
 # grnoc-mon at ENID-MX480-RE0> show interface terse 
@@ -311,7 +311,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at ENID-MX480-RE0> show configuration 
-## Last commit: 2013-12-19 09:13:46 CST by joel
+## Last commit: 2014-01-07 09:52:29 CST by joel
 version 11.4R7.5;
 groups {
     re0 {
@@ -786,7 +786,7 @@
                     md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
                 }
             }
-            inactive: interface ge-0/2/2.70 {
+            interface ge-0/2/2.70 {
                 link-protection;
                 authentication {
                     md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
@@ -818,7 +818,7 @@
                 }
             }
             interface lo0.0;
-            inactive: interface ge-0/2/2.70 {
+            interface ge-0/2/2.70 {
                 link-protection;
                 ipsec-sa OneNet-OSPF3-AUTH;
                 bfd-liveness-detection {
@@ -1212,6 +1212,7 @@
 # grnoc-mon at ENID-MX480-RE0> show ospf neighbor 
 # Address          Interface              State     ID               Pri  Dead
 # 164.58.244.186   ge-0/2/0.0             Full      164.58.199.66
+# 164.58.247.242   ge-0/2/2.70            Full      164.58.198.18
 # 164.58.246.25    xe-0/0/0.69            Full      164.58.199.212
 # 
 # {master}

Index: core3.okc-m120.onenet.net
===================================================================
--- core3.okc-m120.onenet.net	(revision 97448)
+++ core3.okc-m120.onenet.net	(working copy)
@@ -436,7 +436,7 @@
 #t1-2/3/0:1:10.0 up down
 #t1-2/3/0:1:11 up up
 #t1-2/3/0:1:11.0 up up
-#t1-2/3/0:1:12 up down
+#t1-2/3/0:1:12 up up
 #t1-2/3/0:1:12.0 up down
 #t1-2/3/0:1:13 up up
 #t1-2/3/0:1:13.0 up up

Index: hub.sal.onenet.net
===================================================================
--- hub.sal.onenet.net	(revision 97440)
+++ hub.sal.onenet.net	(working copy)
@@ -320,7 +320,7 @@
 #t1-2/0/2:21.0 up up
 #t1-2/0/2:22 up up
 #t1-2/0/2:22.0 up up
-#t1-2/0/2:23 up down
+#t1-2/0/2:23 up up
 #t1-2/0/2:23.0 up down
 #t1-2/0/2:24 up down
 #t1-2/0/2:25 up down

Index: hub.tis.onenet.net
===================================================================
--- hub.tis.onenet.net	(revision 97447)
+++ hub.tis.onenet.net	(working copy)
@@ -9,7 +9,7 @@
 #   2013-10-04 16:03:52 CDT by joe via cli commit synchronize
 # grnoc-mon at TISHOMINGO-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
-# Temp  PEM 0                          Check     
+# Temp  PEM 0                          OK        
 #       PEM 1                          OK        
 #       Routing Engine 0               OK        
 #       Routing Engine 0 CPU           OK        
@@ -287,8 +287,8 @@
 #ct3-2/0/2 up up
 #t1-2/0/2:1 up down
 #t1-2/0/2:1.0 up down
-#t1-2/0/2:2 up down
-#t1-2/0/2:2.0 up down
+#t1-2/0/2:2 up up
+#t1-2/0/2:2.0 up up
 #t1-2/0/2:3 up up
 #t1-2/0/2:3.0 up up
 #t1-2/0/2:4 up up
@@ -301,8 +301,8 @@
 #t1-2/0/2:8.0 up up
 #t1-2/0/2:9 up down
 #t1-2/0/2:9.0 up down
-#t1-2/0/2:10 up down
-#t1-2/0/2:10.0 up down
+#t1-2/0/2:10 up up
+#t1-2/0/2:10.0 up up
 #t1-2/0/2:11 up up
 #t1-2/0/2:11.0 up up
 #t1-2/0/2:12 up up
@@ -363,8 +363,8 @@
 #fe-2/1/1.0 up down
 #fe-2/1/2 up up
 #fe-2/1/2.0 up up
-#fe-2/1/3 up down
-#fe-2/1/3.0 up down
+#fe-2/1/3 up up
+#fe-2/1/3.0 up up
 #ge-2/2/0 up up
 #ge-2/2/0.0 up up
 #pc-2/2/0 up up

Index: hub.mus.onenet.net
===================================================================
--- hub.mus.onenet.net	(revision 96657)
+++ hub.mus.onenet.net	(working copy)
@@ -326,8 +326,8 @@
 #t1-2/0/2:8 up down
 #t1-2/0/2:9 up up
 #t1-2/0/2:9.0 up up
-#t1-2/0/2:10 up up
-#t1-2/0/2:10.0 up up
+#t1-2/0/2:10 up down
+#t1-2/0/2:10.0 up down
 #t1-2/0/2:11 up up
 #t1-2/0/2:11.0 up up
 #t1-2/0/2:12 up up

Index: swi.cai.nok.onenet.net
===================================================================
--- swi.cai.nok.onenet.net	(revision 94703)
+++ swi.cai.nok.onenet.net	(working copy)
@@ -0,0 +1,549 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at SWI-CAI-NOK-EX3300> show system commit 
+#   2014-01-07 09:59:03 CST by admin via cli
+#   2014-01-07 09:55:18 CST by admin via cli
+#   2013-03-24 19:38:13 CDT by admin via cli
+#   2013-03-23 18:52:58 CDT by root via cli
+#   2013-03-22 19:02:26 CDT by root via button
+#   2013-03-22 19:01:17 CDT by root via other
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis environment 
+# Class Item                           Status     Measurement
+# Power FPC 0 Power Supply 0           OK        
+# Temp  FPC 0 CPU                      OK        
+#       FPC 0 EX-PFE1                  OK        
+#       FPC 0 GEPHY1                   OK        
+#       FPC 0 Fan Exhaust              OK        
+#       FPC 0 SFP+ PHY                 OK        
+#       FPC 0 Local Sensor             OK        
+# Fans  FPC 0 Fan 1                    OK
+#       FPC 0 Fan 2                    OK
+# 
+# {master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    uboot      U-Boot 1.1.6 (Aug 21 2011 - 01:45:26)   1.0
+#                          loader     FreeBSD/arm U-Boot loader 1.1              
+# 
+# {master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                 1024 MB
+# 
+# {master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                GD0211402125      EX3300-24T
+# Routing Engine 0 REV 08   750-034299   GD0211402125      EX3300 24-Port
+# FPC 0            REV 08   750-034299   GD0211402125      EX3300 24-Port
+#   CPU                     BUILTIN      BUILTIN           FPC CPU
+#   PIC 0                   BUILTIN      BUILTIN           24x 10/100/1000 Base-T
+#   PIC 1          REV 08   750-034299   GD0211402125      4x GE/XE SFP+
+#     Xcvr 0       REV 01   740-031850   C11E00876         SFP-LX10
+# Power Supply 0                                           PS 100W AC
+# Fan Tray                                                 Fan Tray
+# 
+# {master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis hardware models 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     FRU model number
+# Routing Engine 0 REV 08   750-034299   GD0211402125      EX3300-24T
+# FPC 0            REV 08   750-034299   GD0211402125      EX3300-24T
+#   PIC 0                   BUILTIN      BUILTIN           EX3300-24T
+#   PIC 1          REV 08   750-034299   GD0211402125      EX3300-24T
+# 
+# {master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis routing-engine 
+# Routing Engine status:
+#   Slot 0:
+#     Current state                  Master
+#     DRAM                      1024
+#     Serial ID                      GD0211402125
+# 
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis scb 
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis sfm detail 
+# grnoc-mon at SWI-CAI-NOK-EX3300> show chassis ssb 
+# grnoc-mon at SWI-CAI-NOK-EX3300> show system boot-messages 
+# fpc0:
+# --------------------------------------------------------------------------
+# GDB: debug ports: uart
+# GDB: current port: uart
+# KDB: debugger backends: ddb gdb
+# KDB: current backend: ddb
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# dog: ERROR - reset of uninitialized watchdog
+# dog: ERROR - reset of uninitialized watchdog
+# can't re-use a leaf (all_slot_serialid)!
+# CPU: Early Feroceon 88FR571 rev 0 (Marvell core)
+# cpu55: Early Feroceon 88FR571 revision   WB enabled EABT branch prediction enabled
+#   32KB/32B 4-way Instruction cache
+#   32KB/32B 4-way write-back-locking-C Data cache
+# SOC: Marvell MV78100, TClock 200MHz
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing EXSERIES platform properties ...
+# mbus0: <Marvell Internal Bus (Mbus)> on motherboard
+# ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
+# timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 8 on mbus0
+# gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 56,57,58,59 on mbus0
+# uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 12 on mbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 13 on mbus0
+# ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 72,16 on mbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 2
+# ehci1: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1051000-0xf1051fff irq 72,17 on mbus0
+# usb1: EHCI version 1.0
+# usb1 on ehci1
+# usb1: USB revision 2.0
+# uhub1: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub1: 1 port with 1 removable, self powered
+# ehci2: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1052000-0xf1052fff irq 72,18 on mbus0
+# usb2: EHCI version 1.0
+# usb2 on ehci2
+# usb2: USB revision 2.0
+# uhub2: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub2: 1 port with 1 removable, self powered
+# mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 41,42,43,40,70 on mbus0
+# mge0: hardware MAC address 88:e0:f3:72:d0:7f
+# miibus0: <MII bus> on mge0
+# e1000phy0: <Marvell 88E1310 Gigabit PHY> on miibus0
+# e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f on mbus0
+# 8564 rtc0: <8564 RTC> on i2c0
+# poe0: <POE> on i2c0
+# device_attach: poe0 attach returned 19
+# i2c1: <Marvell I2C ARM OnChip Controller> at mem 0xf1011100-0xf101111f on mbus0
+# pcib0: <Marvell MV78100 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xebffffff on mbus0
+# pci0: <PCI bus> on pcib0
+# mpfe0: <Juniper EX-series Packet Forwarding Engine> mem 0xe8000000-0xebffffff irq 112 at device 1.0 on pci0
+# mpfe0: 0x100000 bytes of rid 0x10 res 3 failed (0, 0xffffffff).
+# syspld0 at mem 0xf9000000-0xf90fffff on mbus0
+# cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8800000-0xf8ffffff irq 1 on mbus0
+# Initializing product: 112 ..
+# bmeb: bmeb_lib_init done 0xc41aa800, addr 0xc1d748d0
+# bme0:Virtual BME driver initializing
+# Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
+# Kernel thread "wkupdaemon" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s2a
+# 
+# {master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show version 
+# fpc0: # -------------------------------------------------------------------------- # Hostname: SWI-CAI-NOK-EX3300 # Model: ex3300-24t # JUNOS Base OS boot [12.3R2.5] # JUNOS Base OS Software Suite [12.3R2.5] # JUNOS Kernel Software Suite [12.3R2.5] # JUNOS Crypto Software Suite [12.3R2.5] # JUNOS Online Documentation [12.3R2.5] # JUNOS Enterprise Software Suite [12.3R2.5] # JUNOS Packet Forwarding Engine Enterprise Software Suite [12.3R2.5] # JUNOS Routing Software Suite [12.3R2.5] # JUNOS Web Management [12.3R2.5] # JUNOS FIPS mode utilities [12.3R2.5] #  # {master:0} # grnoc-mon at SWI-CAI-NOK-EX3300> file list /var/tmp detail # 
+# /var/tmp:
+# total blocks: 2212
+# drwxrwxr-x  2 root  wheel        512 Dec 31  2009 .snap/
+# -rw-rw----  1 root  field     278394 Mar 22  2013 chassism.core-tarball.0.tgz
+# -rw-rw----  1 root  field     280872 Mar 23  2013 chassism.core-tarball.1.tgz
+# -rw-rw----  1 root  field     487047 Mar 23  2013 chassism.core.1.gz
+# -rw-r--r--  1 root  field       3156 Mar 22  2013 ex_autod_config
+# -rw-r--r--  1 root  field       3156 Mar 22  2013 ex_autod_rollback_cfg
+# drwxr-xr-x  2 root  field        512 Mar 22  2013 gres-tp/
+# drwxr-xr-x  2 root  field        512 Mar 22  2013 rtsdb/
+# total files: 5
+# 
+# {master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show system uptime 
+# fpc0:
+# --------------------------------------------------------------------------
+# System booted: 2014-01-06 12:37 CST 
+# Protocols started: 2014-01-06 12:39 CST 
+# Last configured: 2014-01-07 09:59 CST  by admin
+# 
+# {master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 down down
+#ge-0/0/1 down down
+#ge-0/0/2 down down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 down down
+#ge-0/0/7 down down
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 down down
+#ge-0/0/15 down down
+#ge-0/0/16 down down
+#ge-0/0/17 down down
+#ge-0/0/18 down down
+#ge-0/0/19 down down
+#ge-0/0/20 down down
+#ge-0/0/21 down down
+#ge-0/0/22 down down
+#ge-0/0/23 down down
+#ge-0/1/0 up up
+#ge-0/1/0.0 up up
+#bme0 up up
+#bme0.32768 up up
+#dsc up up
+#gre up up
+#ipip up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lsi up up
+#me0 up down
+#me0.0 up down
+#mtun up up
+#pimd up up
+#pime up up
+#tap up up
+#vlan up up
+#vlan.70 up up
+#vme up down
+# grnoc-mon at SWI-CAI-NOK-EX3300> show configuration 
+## Last commit: 2014-01-07 09:59:03 CST by admin
+version 12.3R2.5;
+system {
+    host-name SWI-CAI-NOK-EX3300;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.253.4;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.198.18;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 164.58.198.18;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n;";
+        class admin {
+            idle-timeout 1044;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+        web-management {
+            http;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any notice;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+    }
+    ntp {
+        server 164.58.253.82 prefer;
+    }
+}
+chassis {
+    alarm {
+        management-ethernet {
+            link-down ignore;
+        }
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        disable;
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    ge-0/0/2 {
+        disable;
+    }
+    ge-0/0/3 {
+        disable;
+    }
+    ge-0/0/4 {
+        disable;
+    }
+    ge-0/0/5 {
+        disable;
+    }
+    ge-0/0/6 {
+        disable;
+    }
+    ge-0/0/7 {
+        disable;
+    }
+    ge-0/0/8 {
+        disable;
+    }
+    ge-0/0/9 {
+        disable;
+    }
+    ge-0/0/10 {
+        disable;
+    }
+    ge-0/0/11 {
+        disable;
+    }
+    ge-0/0/12 {
+        disable;
+    }
+    ge-0/0/13 {
+        disable;
+    }
+    ge-0/0/14 {
+        disable;
+    }
+    ge-0/0/15 {
+        disable;
+    }
+    ge-0/0/16 {
+        disable;
+    }
+    ge-0/0/17 {
+        disable;
+    }
+    ge-0/0/18 {
+        disable;
+    }
+    ge-0/0/19 {
+        disable;
+    }
+    ge-0/0/20 {
+        disable;
+    }
+    ge-0/0/21 {
+        disable;
+    }
+    ge-0/0/22 {
+        disable;
+    }
+    ge-0/0/23 {
+        description "“HEI-Northern-Oklahoma-College-GE-CIR000xxx”";
+        disable;
+    }
+    ge-0/1/0 {
+        description "“CORE";
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members vlan-70;
+                }
+            }
+        }
+    }
+    ge-0/1/1 {
+        disable;
+    }
+    ge-0/1/2 {
+        disable;
+    }
+    ge-0/1/3 {
+        disable;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                address 164.58.198.18/32;
+                address 127.0.0.1/32;
+            }
+        }
+    }
+    vlan {
+        mtu 9192;
+        unit 70 {
+            family inet {
+                mtu 9000;
+                address 164.58.247.242/30;
+            }
+        }
+    }
+}
+snmp {
+    description OneNet;
+    location "CAINOK, Enid, OK";
+    contact "Net Group";
+    client-list snmp-management {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+protocols {
+    ##
+    ## Warning: requires 'ospf2' license
+    ##
+    ospf {
+        export [ REDISTRIBUTE-STATICS REDISTRIBUTE-DIRECTS ];
+        reference-bandwidth 100g;
+        area 0.0.0.0 {
+            interface lo0.0;
+            interface vlan.70 {
+                metric 65535;
+                authentication {
+                    md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+                }
+            }
+        }
+    }
+    igmp-snooping {
+        vlan all;
+    }
+    rstp;
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+}
+policy-options {
+    prefix-list MGMT {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.10.0/24;
+        164.58.12.233/32;
+        164.58.15.0/24;
+        164.58.244.0/22;
+        164.58.247.209/32;
+        164.58.253.0/24;
+    }
+    policy-statement REDISTRIBUTE-DIRECTS {
+        term 1 {
+            from protocol direct;
+            then accept;
+        }
+    }
+    policy-statement REDISTRIBUTE-STATICS {
+        term 1 {
+            from protocol static;
+            then accept;
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term 1 {
+                from {
+                    source-prefix-list {
+                        MGMT;
+                    }
+                }
+                then accept;
+            }
+            term ICMP-ALLOW {
+                from {
+                    protocol icmp;
+                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+                }
+                then accept;
+            }
+            term Reject {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+}
+ethernet-switching-options {
+    voip;
+    storm-control {
+        interface all {
+            level 50;
+        }
+    }
+}
+vlans {
+    vlan-70 {
+        vlan-id 70;
+        l3-interface vlan.70;
+    }
+}
+{master:0}
+# grnoc-mon at SWI-CAI-NOK-EX3300> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 164.58.247.241   vlan.70                Full      164.58.199.67
+# 
+# {master:0}



More information about the Nocrancid mailing list