[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Nov 5 01:02:24 CST 2014


Index: configs/core.woo.onenet.net
===================================================================
--- configs/core.woo.onenet.net	(revision 121107)
+++ configs/core.woo.onenet.net	(working copy)
@@ -342,10 +342,10 @@
 #lsi.1049080 up up
 #lsi.1049124 up up
 #lsi.1049136 up up
-#lsi.1049140 up up
 #lsi.1049142 up up
 #lsi.1049143 up up
 #lsi.1049145 up up
+#lsi.1049146 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.law.onenet.net
===================================================================
--- configs/core.law.onenet.net	(revision 121107)
+++ configs/core.law.onenet.net	(working copy)
@@ -492,11 +492,11 @@
 #lsi.1061478 up up
 #lsi.1061479 up up
 #lsi.1061481 up up
-#lsi.1061482 up up
 #lsi.1061485 up up
 #lsi.1061488 up up
 #lsi.1061489 up up
 #lsi.1061491 up up
+#lsi.1061492 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/cor.cai.hart-acx2100.onenet.net
===================================================================
--- configs/cor.cai.hart-acx2100.onenet.net	(revision 121111)
+++ configs/cor.cai.hart-acx2100.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system commit 
-#   2014-11-04 23:52:30 CST by andrew via cli
-#   2014-11-04 23:50:07 CST by andrew via cli commit confirmed, rollback in 2mins
-#   2014-11-04 17:02:16 CST by rnordmark via cli
-#   2014-11-04 17:01:07 CST by rnordmark via cli
-#   2014-11-04 17:00:37 CST by rnordmark via cli
-#   2014-11-04 16:59:44 CST by rnordmark via cli
+#   2014-11-05 00:44:06 CST by andrew via cli
+#   2014-11-05 00:42:38 CST by andrew via cli
+#   2014-11-05 00:36:33 CST by andrew via cli
+#   2014-11-05 00:34:44 CST by andrew via cli
+#   2014-11-05 00:34:01 CST by andrew via cli
+#   2014-11-05 00:30:24 CST by andrew via cli
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis environment 
 # Class Item                           Status     Measurement
 #       PCB Left                       OK        
@@ -72,6 +72,7 @@
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis sfm detail 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis ssb 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system boot-messages 
+# show version
 # platform_early_bootinit: MX-PPC Series Early Boot Initialization
 # mxppc_set_re_type: hw.board.type is ACX-2100
 # WDOG initialized
@@ -156,7 +157,7 @@
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system uptime 
 # System booted: 2014-11-04 13:19 CST 
 # Protocols started: 2014-11-04 13:20 CST 
-# Last configured: 2014-11-04 23:52 CST  by andrew
+# Last configured: 2014-11-05 00:44 CST  by andrew
 # 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show interface terse 
 #Interface Admin Link
@@ -211,7 +212,7 @@
 #pime up up
 #tap up up
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show configuration 
-## Last commit: 2014-11-04 23:52:30 CST by andrew
+## Last commit: 2014-11-05 00:44:06 CST by andrew
 version 12.3X54-D10.6;
 system {
     host-name HARTSHORNE-PUBLIC-LIBRARY-ACX2100;
@@ -724,24 +725,35 @@
                     discard;
                 }
             }
-            term BGP-ALLOW {
+            term BGP-SRC-ALLOW {
                 from {
                     source-address {
                         164.58.199.226/32;
                         164.58.199.216/32;
                     }
                     protocol tcp;
-                    source-port 179;
+                    source-port bgp;
                 }
                 then accept;
             }
+            term BGP-DEST-ALLOW {
+                from {
+                    source-address {
+                        164.58.199.226/32;
+                        164.58.199.216/32;
+                    }
+                    protocol tcp;
+                    destination-port bgp;
+                }
+                then accept;
+            }
             term RADIUS-ALLOW {
                 from {
                     source-address {
                         156.110.31.11/32;
                     }
                     protocol [ udp tcp ];
-                    source-port [ 1812 1813 ];
+                    source-port [ radius radacct ];
                 }
                 then accept;
             }
@@ -754,7 +766,7 @@
                 }
                 then accept;
             }
-            term NTP-ALLOW {
+            term NTP-SRC-ALLOW {
                 from {
                     source-address {
                         164.58.3.98/32;
@@ -762,10 +774,22 @@
                         127.0.0.1/32;
                     }
                     protocol udp;
-                    source-port 123;
+                    source-port ntp;
                 }
                 then accept;
             }
+            term NTP-DEST-ALLOW {
+                from {
+                    source-address {
+                        164.58.3.98/32;
+                        164.58.199.0/24;
+                        127.0.0.1/32;
+                    }
+                    protocol udp;
+                    destination-port ntp;
+                }
+                then accept;
+            }
             term DOMAIN-ALLOW {
                 from {
                     source-address {
@@ -779,15 +803,10 @@
             term SYSLOG-ALLOW {
                 from {
                     source-address {
-                        164.58.253.0/24;
-                        164.58.244.0/22;
-                        156.110.31.0/27;
-                        156.110.31.32/28;
-                        164.58.10.0/24;
-                        164.58.15.0/24;
+                        164.58.253.38/32;
+                        164.58.253.92/32;
                     }
                     source-port syslog;
-                    destination-port syslog;
                 }
                 then accept;
             }
@@ -802,7 +821,6 @@
                         164.58.15.0/24;
                     }
                     source-port ftp;
-                    destination-port ftp;
                 }
                 then accept;
             }
@@ -820,7 +838,7 @@
                 }
                 then accept;
             }
-            term SNMP-ALLOW {
+            term SNMP-POLL-ALLOW {
                 from {
                     source-address {
                         156.110.31.0/27;
@@ -828,17 +846,38 @@
                         164.58.253.0/24;
                     }
                     protocol [ tcp udp ];
-                    source-port [ snmp snmptrap ];
-                    destination-port [ snmp snmptrap ];
+                    destination-port snmp;
                 }
                 then accept;
             }
-            term LDP-ALLOW {
+            term SNMP-TRAP-ALLOW {
                 from {
                     source-address {
+                        156.110.31.0/27;
+                        156.110.31.32/28;
+                        164.58.253.0/24;
+                    }
+                    protocol [ tcp udp ];
+                    source-port snmptrap;
+                }
+                then accept;
+            }
+            term LDP-SRC-ALLOW {
+                from {
+                    source-address {
                         164.58.244.0/22;
+                        164.58.199.0/24;
                     }
                     source-port ldp;
+                }
+                then accept;
+            }
+            term LDP-DEST-ALLOW {
+                from {
+                    source-address {
+                        164.58.244.0/22;
+                        164.58.199.0/24;
+                    }
                     destination-port ldp;
                 }
                 then accept;
@@ -853,18 +892,28 @@
                 }
                 then accept;
             }
-            term BFD-ALLOW {
+            term BFD-DEST-ALLOW {
                 from {
                     source-address {
                         164.58.0.0/16;
                         156.110.0.0/16;
                     }
                     protocol udp;
-                    source-port [ 3784 3785 ];
                     destination-port [ 3784 3785 ];
                 }
                 then accept;
             }
+            term BFD-SRC-ALLOW {
+                from {
+                    source-address {
+                        164.58.0.0/16;
+                        156.110.0.0/16;
+                    }
+                    protocol udp;
+                    source-port [ 3784 3785 ];
+                }
+                then accept;
+            }
             term ICMP-ALLOW {
                 from {
                     protocol icmp;
Index: configs/core5.okc.onenet.net
===================================================================
--- configs/core5.okc.onenet.net	(revision 121107)
+++ configs/core5.okc.onenet.net	(working copy)
@@ -599,10 +599,10 @@
 #lsi.1494658 up up
 #lsi.1494659 up up
 #lsi.1494668 up up
-#lsi.1494669 up up
 #lsi.1494671 up up
 #lsi.1494672 up up
 #lsi.1494674 up up
+#lsi.1494675 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core2-okc-mx960.onenet.net
===================================================================
--- configs/core2-okc-mx960.onenet.net	(revision 121107)
+++ configs/core2-okc-mx960.onenet.net	(working copy)
@@ -602,10 +602,10 @@
 #lsi.1062466 up up
 #lsi.1062483 up up
 #lsi.1062502 up up
-#lsi.1062503 up up
 #lsi.1062505 up up
 #lsi.1062506 up up
 #lsi.1062508 up up
+#lsi.1062509 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core1.dc.onenet.net
===================================================================
--- configs/core1.dc.onenet.net	(revision 121107)
+++ configs/core1.dc.onenet.net	(working copy)
@@ -874,11 +874,11 @@
 #lsi.1048836 up up
 #lsi.1048857 up up
 #lsi.1048933 up up
-#lsi.1048934 up up
 #lsi.1048936 up up
 #lsi.1048938 up up
 #lsi.1048939 up up
 #lsi.1048941 up up
+#lsi.1048942 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.ard.onenet.net
===================================================================
--- configs/core.ard.onenet.net	(revision 121107)
+++ configs/core.ard.onenet.net	(working copy)
@@ -337,10 +337,10 @@
 #lsi.1048942 up up
 #lsi.1048948 up up
 #lsi.1048949 up up
-#lsi.1048950 up up
 #lsi.1048953 up up
 #lsi.1048954 up up
 #lsi.1048956 up up
+#lsi.1048957 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core1.sti-mx960.onenet.net
===================================================================
--- configs/core1.sti-mx960.onenet.net	(revision 121107)
+++ configs/core1.sti-mx960.onenet.net	(working copy)
@@ -634,11 +634,11 @@
 #lsi.1056182 up up
 #lsi.1056183 up up
 #lsi.1056184 up up
-#lsi.1056185 up up
 #lsi.1056186 up up
 #lsi.1056188 up up
 #lsi.1056189 up up
 #lsi.1056191 up up
+#lsi.1056192 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/hub.alv.onenet.net
===================================================================
--- configs/hub.alv.onenet.net	(revision 121111)
+++ configs/hub.alv.onenet.net	(working copy)
@@ -341,7 +341,6 @@
 #sp-2/3/0 up up
 #sp-2/3/0.16383 up up
 #vt-2/3/0 up up
-#vt-2/3/0.1049149 up up
 #fe-3/0/0 down down
 #pfh-3/0/0 up up
 #pfh-3/0/0.16383 up up
@@ -371,6 +370,7 @@
 #sp-3/3/0.0 up up
 #sp-3/3/0.16383 up up
 #vt-3/3/0 up up
+#vt-3/3/0.1049150 up up
 #demux0 up up
 #dsc up up
 #em0 up up
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 121111)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -540,7 +540,7 @@
 #t1-2/3/0:3:12 up up
 #t1-2/3/0:3:12.0 up up
 #t1-2/3/0:3:13 up up
-#t1-2/3/0:3:13.0 up down
+#t1-2/3/0:3:13.0 up up
 #t1-2/3/0:3:14 up up
 #t1-2/3/0:3:14.0 up up
 #t1-2/3/0:3:15 up up
Index: configs/core.wil.onenet.net
===================================================================
--- configs/core.wil.onenet.net	(revision 121100)
+++ configs/core.wil.onenet.net	(working copy)
@@ -345,8 +345,8 @@
 #lsi.1048995 up up
 #lsi.1049016 up up
 #lsi.1049017 up up
-#lsi.1049018 up up
 #lsi.1049020 up up
+#lsi.1049026 up up
 #mtun up up
 #pimd up up
 #pime up up



More information about the Nocrancid mailing list