[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Mon Mar 24 16:09:11 CDT 2014
Index: core.dur.onenet.net
===================================================================
--- core.dur.onenet.net (revision 114662)
+++ core.dur.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at DURANT-MX480-RE0> show system commit
+# 2014-03-24 15:05:16 CDT by andrew via cli commit confirmed, rollback in 2mins synchronize
+# 2014-03-24 15:01:59 CDT by andrew via cli commit confirmed, rollback in 2mins synchronize
# 2014-03-24 14:17:59 CDT by andrew via cli commit confirmed, rollback in 2mins synchronize
# 2014-03-24 14:11:35 CDT by andrew via cli commit confirmed, rollback in 2mins synchronize
# 2014-03-24 12:18:13 CDT by donnie via cli commit synchronize
# 2014-03-24 12:14:42 CDT by donnie via cli commit synchronize
-# 2014-03-24 12:08:17 CDT by donnie via cli commit synchronize
-# 2014-03-18 17:20:25 CDT by rnordmark via cli commit synchronize
# grnoc-mon at DURANT-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -246,7 +246,7 @@
# grnoc-mon at DURANT-MX480-RE0> show system uptime
# System booted: 2013-05-26 00:24 CDT
# Protocols started: 2013-05-26 00:27 CDT
-# Last configured: 2014-03-24 14:17 CDT by andrew
+# Last configured: 2014-03-24 15:05 CDT by andrew
#
# {master}
# grnoc-mon at DURANT-MX480-RE0> show interface terse
@@ -331,7 +331,7 @@
#pp0 up up
#tap up up
# grnoc-mon at DURANT-MX480-RE0> show configuration
-## Last commit: 2014-03-24 14:17:59 CDT by andrew
+## Last commit: 2014-03-24 15:05:16 CDT by andrew
version 11.4R7.5;
groups {
re0 {
@@ -510,8 +510,8 @@
family inet {
mtu 9000;
filter {
- input BLOCKPORT19;
- output BLOCKPORT19;
+ input DDOS-PREVENT-50M-POL;
+ output DDOS-PREVENT-50M-POL;
}
sampling {
input;
@@ -1391,38 +1391,82 @@
}
}
}
- filter BLOCKPORT19 {
- term BLOCK0 {
+ filter DDOS-PREVENT-50M-POL {
+ term ICMP {
from {
- port 0;
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
}
- then {
- discard;
+ then policer 50M-POL;
+ }
+ term UDP-NTP {
+ from {
+ protocol udp;
+ port 123;
}
+ then policer 50M-POL;
}
- term BLOCK19UDP {
+ term TCP-NTP {
from {
+ protocol tcp;
+ port 123;
+ }
+ then policer 50M-POL;
+ }
+ term UDP-DNS {
+ from {
protocol udp;
- port 19;
+ port 53;
}
- then {
- discard;
+ then policer 50M-POL;
+ }
+ term TCP-DNS {
+ from {
+ protocol tcp;
+ port 53;
}
+ then policer 50M-POL;
}
- term BLOCK19TCP {
+ term UDP-19 {
from {
+ protocol udp;
+ port 19;
+ }
+ then policer 50M-POL;
+ }
+ term TCP-19 {
+ from {
protocol tcp;
port 19;
}
- then {
- discard;
+ then policer 50M-POL;
+ }
+ term UDP-0 {
+ from {
+ protocol udp;
+ port 0;
}
+ then policer 50M-POL;
}
- term ACCEPT {
+ term TCP-0 {
+ from {
+ protocol tcp;
+ port 0;
+ }
+ then policer 50M-POL;
+ }
+ term ACCEPT-ALL {
then accept;
}
}
}
+ policer 50M-POL {
+ if-exceeding {
+ bandwidth-limit 50m;
+ burst-size-limit 300k;
+ }
+ then discard;
+ }
}
routing-instances {
ONENET-PS_NET-L3VPN {
Index: core.ida.onenet.net
===================================================================
--- core.ida.onenet.net (revision 114663)
+++ core.ida.onenet.net (working copy)
@@ -276,8 +276,8 @@
#ge-0/2/1.1201 up up
#ge-0/2/1.1202 up up
#ge-0/2/1.32767 up up
-#ge-0/2/2 up down
-#ge-0/2/2.0 up down
+#ge-0/2/2 up up
+#ge-0/2/2.0 up up
#ge-0/2/3 up down
#ge-0/2/4 up down
#ge-0/2/5 up down
@@ -1348,5 +1348,6 @@
# grnoc-mon at IDABEL-MX480-RE0> show ospf neighbor
# Address Interface State ID Pri Dead
# 164.58.244.190 ge-0/2/0.0 Full 164.58.199.102
+# 164.58.21.13 ge-0/2/2.0 Full 164.58.199.14
#
# {master}
Index: core5.tul.onenet.net
===================================================================
--- core5.tul.onenet.net (revision 114623)
+++ core5.tul.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE5-MX480-RE0> show system commit
+# 2014-03-24 15:28:35 CDT by admin via cli commit synchronize
# 2014-03-24 08:32:15 CDT by donnie via cli commit synchronize
# 2014-03-21 07:43:50 CDT by joe via cli commit synchronize
# 2014-03-20 07:18:01 CDT by donnie via cli commit synchronize
# 2014-03-13 08:51:31 CDT by rnordmark via cli commit synchronize
# 2014-03-13 08:50:53 CDT by rnordmark via cli commit synchronize
-# 2014-03-12 09:59:37 CDT by donnie via cli commit synchronize
# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -379,7 +379,7 @@
# grnoc-mon at TULSA-CORE5-MX480-RE0> show system uptime
# System booted: 2013-04-27 23:43 CDT
# Protocols started: 2013-04-27 23:45 CDT
-# Last configured: 2014-03-24 08:32 CDT by donnie
+# Last configured: 2014-03-24 15:28 CDT by admin
#
# {master}
# grnoc-mon at TULSA-CORE5-MX480-RE0> show interface terse
@@ -393,7 +393,8 @@
#xe-0/0/0 up up
#xe-0/0/0.116 up up
#xe-0/0/0.32767 up up
-#xe-0/0/1 down down
+#xe-0/0/1 up up
+#xe-0/0/1.0 up up
#xe-0/1/0 up up
#xe-0/1/0.116 up up
#xe-0/1/0.32767 up up
@@ -556,7 +557,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE5-MX480-RE0> show configuration
-## Last commit: 2014-03-24 08:32:15 CDT by donnie
+## Last commit: 2014-03-24 15:28:35 CDT by admin
version 11.4R7.5;
groups {
re0 {
@@ -750,7 +751,10 @@
}
}
xe-0/0/1 {
- disable;
+ description "Future AREON DALLAS 10G [NO-MONITOR]";
+ unit 0 {
+ family inet;
+ }
}
xe-0/1/0 {
description "CORE 10GE to core1.tul xe-1/1/1 [AE0-2of2] | OneNet-TUL-TUL-XE-5070";
Index: hub.chi.onenet.net
===================================================================
--- hub.chi.onenet.net (revision 114667)
+++ hub.chi.onenet.net (working copy)
@@ -282,7 +282,7 @@
#t3-2/0/1.0 up up
#ct3-2/0/2 up up
#t1-2/0/2:1 up down
-#t1-2/0/2:2 down down
+#t1-2/0/2:2 down up
#t1-2/0/2:3 up down
#t1-2/0/2:4 up up
#t1-2/0/2:4.0 up up
@@ -309,7 +309,7 @@
#t1-2/0/2:21 down down
#t1-2/0/2:22 down down
#t1-2/0/2:23 down down
-#t1-2/0/2:24 down up
+#t1-2/0/2:24 down down
#t1-2/0/2:25 down up
#t1-2/0/2:26 down down
#t1-2/0/2:27 down down
Index: hub.dur.onenet.net
===================================================================
--- hub.dur.onenet.net (revision 114669)
+++ hub.dur.onenet.net (working copy)
@@ -1963,6 +1963,7 @@
# grnoc-mon at DURANT-M120-RE0> show ospf neighbor
# Address Interface State ID Pri Dead
# 164.58.244.234 fe-3/0/0.0 Full 164.58.199.102
+# 164.58.21.14 fe-3/0/0.0 Full 164.58.199.103
# 164.58.244.181 ge-2/2/2.0 Full 164.58.199.15
# 172.23.5.106 lsq-2/3/0.10 Full 10.199.2.76
# 172.23.5.102 t1-2/0/3:12.0 Full 10.199.2.77
More information about the Nocrancid
mailing list