[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Sun Aug 30 10:02:06 CDT 2015


Index: configs/core1.lan-mx80.onenet.net
===================================================================
--- configs/core1.lan-mx80.onenet.net	(revision 132059)
+++ configs/core1.lan-mx80.onenet.net	(working copy)
@@ -197,7 +197,7 @@
 # -rw-rw----  1 root  field   52711424 Jun 10 15:37 ifinfo.core.1
 # -rw-rw----  1 root  field   52711424 Jun 10 15:40 ifinfo.core.2
 # -rw-rw----  1 root  field   52711424 Jun 10 15:47 ifinfo.core.3
-# -rw-rw----  1 root  field   52711424 Aug 30 09:00 ifinfo.core.4
+# -rw-rw----  1 root  field   52711424 Aug 30 10:00 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Aug 13  2012 install/
 # -rw-r--r--  1 eng   field   99542994 May 30  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
 # -rw-r--r--  1 upgrades field 150276951 Aug 8   2014 jinstall-ppc-12.3R7.7-domestic-signed.tgz
Index: configs/vinita-public-library-srx220.onenet.net
===================================================================
--- configs/vinita-public-library-srx220.onenet.net	(revision 132059)
+++ configs/vinita-public-library-srx220.onenet.net	(working copy)
@@ -118,8 +118,8 @@
 #ge-0/0/2.0 up up
 #ge-0/0/3 up up
 #ge-0/0/3.0 up up
-#ge-0/0/4 up down
-#ge-0/0/4.0 up down
+#ge-0/0/4 up up
+#ge-0/0/4.0 up up
 #ge-0/0/5 up up
 #ge-0/0/5.0 up up
 #ge-0/0/6 up up
Index: configs/hub.tsb.onenet.net
===================================================================
--- configs/hub.tsb.onenet.net	(revision 132059)
+++ configs/hub.tsb.onenet.net	(working copy)
@@ -200,7 +200,7 @@
 # -rw-rw----  1 root  field   51994624 Oct 24  2013 ifinfo.core.1
 # -rw-rw----  1 root  field   51974144 Oct 24  2013 ifinfo.core.2
 # -rw-rw----  1 root  field   52744192 Oct 24  2013 ifinfo.core.3
-# -rw-rw----  1 root  field   52727808 Aug 30 09:00 ifinfo.core.4
+# -rw-rw----  1 root  field   52727808 Aug 30 10:00 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Oct 12  2012 install/
 # -rw-rw----  1 root  field   33464320 Mar 3   2014 jdiameterd.core.0
 # -rw-r--r--  1 eng   field   99542994 Apr 23  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
Index: configs/rpswi3.rp3f2.onenet.net
===================================================================
--- configs/rpswi3.rp3f2.onenet.net	(revision 132062)
+++ configs/rpswi3.rp3f2.onenet.net	(working copy)
@@ -0,0 +1,773 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show system commit 
+#   2015-07-27 14:52:49 CDT by andrew via cli commit confirmed, rollback in 3mins
+#   2015-07-20 22:29:37 CDT by andrew via cli
+#   2015-07-20 19:33:32 CDT by andrew via cli
+#   2015-07-20 19:33:04 CDT by andrew via cli
+#   2015-07-20 19:30:24 CDT by andrew via cli commit confirmed, rollback in 3mins
+#   2015-07-08 18:13:07 CDT by andrew via cli
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis environment 
+# Class Item                           Status     Measurement
+# Power FPC 0 Power Supply 0           OK        
+# Temp  FPC 0 CPU                      OK        
+#       FPC 0 Exhaust Area             OK        
+#       FPC 0 EX-PFE1                  OK        
+#       FPC 0 Local Intake             OK        
+#       FPC 0 Remote Intake            OK        
+#       FPC 0 GEPHY1                   OK        
+#       FPC 0 GEPHY2                   OK        
+#       FPC 0 GEPHY3                   OK        
+#       FPC 0 GEPHY4                   OK        
+#       FPC 0 GEPHY5                   OK        
+#       FPC 0 GEPHY6                   OK        
+# Fans  FPC 0 Fan 1                    OK
+#       FPC 0 Fan 2                    OK
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    uboot      U-Boot 1.1.6 (Mar 26 2011 - 04:38:23)   1.0
+#                          loader     FreeBSD/arm U-Boot loader 1.1              
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                  512 MB
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CW0210100089      EX2200-24T-4G
+# Routing Engine 0 REV 11   750-026468   CW0210100089      EX2200-24T-4G
+# FPC 0            REV 11   750-026468   CW0210100089      EX2200-24T-4G
+#   CPU                     BUILTIN      BUILTIN           FPC CPU
+#   PIC 0                   BUILTIN      BUILTIN           24x 10/100/1000 Base-T
+#   PIC 1          REV 11   750-026468   CW0210100089      4x GE SFP
+#     Xcvr 0       REV 01   740-031851   AM1141SVRZC       SFP-SX
+# Power Supply 0                                           PS 100W AC
+# Fan Tray                                                 Fan Tray
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis hardware models 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     FRU model number
+# Routing Engine 0 REV 11   750-026468   CW0210100089      EX2200-24T-4G
+# FPC 0            REV 11   750-026468   CW0210100089      EX2200-24T-4G
+#   PIC 0                   BUILTIN      BUILTIN           EX2200-24T-4G
+#   PIC 1          REV 11   750-026468   CW0210100089      EX2200-24T-4G
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis routing-engine 
+# Routing Engine status:
+#   Slot 0:
+#     Current state                  Master
+#     DRAM                       512
+#     Serial ID                      CW0210100089
+# 
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis scb 
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis sfm detail 
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show chassis ssb 
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show system boot-messages 
+# fpc0:
+# --------------------------------------------------------------------------
+# GDB: debug ports: uart
+# GDB: current port: uart
+# KDB: debugger backends: ddb gdb
+# KDB: current backend: ddb
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# can't re-use a leaf (all_slot_serialid)!
+# CPU: Feroceon 88FR131 rev 1 (Marvell core)
+# cpu53: Feroceon 88FR131 revision   WB enabled EABT branch prediction enabled
+#   16KB/32B 4-way Instruction cache
+#   16KB/32B 4-way write-back-locking-C Data cache
+# SOC: Marvell 88F6281 rev A0, TClock 200MHz
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing EXSERIES properties ...
+# mbus0: <Marvell Internal Bus (Mbus)> on motherboard
+# ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
+# timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 1 on mbus0
+# gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 35,36,37,38,39,40,41 on mbus0
+# uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 33 on mbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 34 on mbus0
+# ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 48,19 on mbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x04cc product 0x1520, class 9/0, rev 2.00/2.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 2 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 12,13,14,11,46 on mbus0
+# mge0: hardware MAC address 2c:6b:f5:90:31:7f
+# miibus0: <MII bus> on mge0
+# e1000phy0: <Marvell 88E1118 Gigabit PHY> on miibus0
+# e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f irq 29 on mbus0
+# syspld0: <SYSPLD> on i2c0
+# 8564 rtc0: <8564 RTC> on i2c0
+# poe0: <POE> on i2c0
+# device_attach: poe0 attach returned 19
+# cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8000000-0xf87fffff irq 23 on mbus0
+# mpfe0: <Juniper EX-series Packet Forwarding Engine> at mem 0xf4000000-0xf7ffffff irq 113 on mbus0
+# pcib0: <Marvell 88F6281 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xefffffff irq 9 on mbus0
+# pci0: <PCI bus> on pcib0
+# Initializing product: 75 ..
+# bmeb: bmeb_lib_init done 0xc3386800, addr 0xc1d5bac0
+# bme0:Virtual BME driver initializing
+# Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
+# Kernel thread "wkupdaemon" (pid 42) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s2a
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show version 
+# fpc0: # -------------------------------------------------------------------------- # Hostname: RPSWI3-RP3FL2-EX2200 # Model: ex2200-24t-4g # JUNOS Base OS boot [12.3R6.6] # JUNOS Base OS Software Suite [12.3R6.6] # JUNOS Kernel Software Suite [12.3R6.6] # JUNOS Crypto Software Suite [12.3R6.6] # JUNOS Online Documentation [12.3R6.6] # JUNOS Enterprise Software Suite [12.3R6.6] # JUNOS Packet Forwarding Engine Enterprise Software Suite [12.3R6.6] # JUNOS Routing Software Suite [12.3R6.6] # JUNOS Web Management [12.3R6.6] # JUNOS FIPS mode utilities [12.3R6.6] #  # {master:0} # grnoc-mon at RPSWI3-RP3FL2-EX2200> file list /var/tmp detail # 
+# /var/tmp:
+# total blocks: 32
+# drwxrwxr-x  2 root  wheel        512 Dec 31  2009 .snap/
+# drwxr-xr-x  2 root  field        512 Dec 12  2014 gres-tp/
+# drwxrwxrwx  2 root  wheel        512 Dec 12  2014 install/
+# drwxrwxrwx  2 root  wheel        512 Dec 12  2014 pics/
+# drwxr-xr-x  2 root  field        512 Dec 12  2014 rtsdb/
+# drwxrwxrwt  2 root  wheel        512 Dec 12  2014 vi.recover/
+# total files: 0
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show system uptime 
+# fpc0:
+# --------------------------------------------------------------------------
+# System booted: 2014-12-12 10:43 CST 
+# Protocols started: 2014-12-12 10:46 CST 
+# Last configured: 2015-07-27 14:52 CDT  by andrew
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up down
+#ge-0/0/0.0 up down
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 up down
+#ge-0/0/2.0 up down
+#ge-0/0/3 up down
+#ge-0/0/3.0 up down
+#ge-0/0/4 up down
+#ge-0/0/4.0 up down
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
+#ge-0/0/6 up up
+#ge-0/0/6.0 up up
+#ge-0/0/7 up down
+#ge-0/0/7.0 up down
+#ge-0/0/8 up down
+#ge-0/0/8.0 up down
+#ge-0/0/9 up down
+#ge-0/0/9.0 up down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 down down
+#ge-0/0/15 down down
+#ge-0/0/16 down down
+#ge-0/0/17 down down
+#ge-0/0/18 down down
+#ge-0/0/19 down down
+#ge-0/0/20 down down
+#ge-0/0/21 down down
+#ge-0/0/22 down down
+#ge-0/0/23 down down
+#ge-0/1/0 up up
+#ge-0/1/0.0 up up
+#bme0 up up
+#bme0.32768 up up
+#dsc up up
+#gre up up
+#ipip up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lsi up up
+#me0 down down
+#me0.0 up down
+#mtun up up
+#pimd up up
+#pime up up
+#tap up up
+#vlan up up
+#vlan.16 up up
+#vlan.80 up up
+#vlan.690 up up
+#vme up down
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show configuration 
+## Last commit: 2015-07-27 14:52:49 CDT by andrew
+version 12.3R6.6;
+system {
+    host-name RPSWI3-RP3FL2-EX2200;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.198.10;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.248.154;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.248.154;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+        netconf {
+            ssh;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        host 164.58.253.92 {
+            any any;
+        }
+        host 164.58.253.38 {
+            any any;
+        }
+        file messages {
+            any notice;
+            authorization info;
+            match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file default-log-messages {
+            any any;
+            match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete) | CFMD_CCM_DEFECT| LFMD_3AH | RPD_MPLS_PATH_BFD";
+            structured-data;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+        source-address 10.119.248.154;
+    }
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+chassis {
+    alarm {
+        management-ethernet {
+            link-down ignore;
+        }
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members 81;
+                }
+            }
+        }
+    }
+    ge-0/0/1 {
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members 81;
+                }
+            }
+        }
+    }
+    ge-0/0/2 {
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members 82;
+                }
+            }
+        }
+    }
+    ge-0/0/3 {
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members 82;
+                }
+            }
+        }
+    }
+    ge-0/0/4 {
+        description "USER - D-102-C - FLOOR 1 - ANDREW";
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members 509;
+                }
+            }
+        }
+    }
+    ge-0/0/5 {
+        description "USER - D-102-D - FLOOR 1 - ANDREW";
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 507;
+                }
+            }
+        }
+    }
+    ge-0/0/6 {
+        description "USER - D-101-F - FLOOR 1 - JEREMY";
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members 501;
+                }
+            }
+        }
+    }
+    ge-0/0/7 {
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members 500;
+                }
+            }
+        }
+    }
+    ge-0/0/8 {
+        description "USER - D-101-K - FLOOR 1 - SKY";
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members 504;
+                }
+            }
+        }
+    }
+    ge-0/0/9 {
+        description "USER - D-101-L - FLOOR 1 - SKY";
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members 500;
+                }
+            }
+        }
+    }
+    ge-0/0/10 {
+        disable;
+    }
+    ge-0/0/11 {
+        disable;
+    }
+    ge-0/0/12 {
+        disable;
+    }
+    ge-0/0/13 {
+        disable;
+    }
+    ge-0/0/14 {
+        disable;
+    }
+    ge-0/0/15 {
+        disable;
+    }
+    ge-0/0/16 {
+        disable;
+    }
+    ge-0/0/17 {
+        disable;
+    }
+    ge-0/0/18 {
+        disable;
+    }
+    ge-0/0/19 {
+        disable;
+    }
+    ge-0/0/20 {
+        disable;
+    }
+    ge-0/0/21 {
+        disable;
+    }
+    ge-0/0/22 {
+        disable;
+    }
+    ge-0/0/23 {
+        disable;
+    }
+    ge-0/1/0 {
+        description "CORE 1GE to faye.okcdc ge-1/0/0 | OneNet-OKCDC-RP3F2-GE-XXXX [NO-MONITOR]";
+        mtu 9192;
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 16 80-82 300 500-509 542 690 700-701 800 2011 ];
+                }
+            }
+        }
+    }
+    ge-0/1/1 {
+        disable;
+    }
+    ge-0/1/2 {
+        disable;
+    }
+    ge-0/1/3 {
+        disable;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    me0 {
+        disable;
+    }
+    vlan {
+        mtu 9192;
+        unit 16 {
+            family inet {
+                mtu 1500;
+                address 10.97.100.0/17;
+            }
+        }
+        unit 80 {
+            family inet {
+                mtu 9000;
+                address 10.119.248.154/30;
+            }
+        }
+        unit 690 {
+            family inet {
+                mtu 1500;
+                address 10.97.100.1/17;
+            }
+        }
+    }
+}
+snmp {
+    description OneNet;
+    contact "Net Group";
+    client-list snmp-management {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+    trap-group "<removed>" {
+        version v2;
+        targets {
+            164.58.253.34;
+            164.58.253.35;
+        }
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 10.119.248.153;
+    }
+}
+protocols {
+    igmp-snooping {
+        vlan all;
+    }
+    rstp;
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+}
+policy-options {
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-MGMT-SOURCES {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-DNS-SOURCES {
+        apply-path "system name-server <*>";
+    }
+    prefix-list PRE-NTP-SOURCES {
+        apply-path "system ntp server <*>";
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term MGMT {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-DNS-SOURCES;
+                        PRE-NTP-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                }
+                then accept;
+            }
+            term ICMP-ALLOW {
+                from {
+                    protocol icmp;
+                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+                }
+                then accept;
+            }
+            term Reject {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+}
+routing-instances {
+    LANGSTON {
+        ##
+        ## Warning: requires 'virtual-router' license
+        ##
+        instance-type virtual-router;
+        interface vlan.16;
+        routing-options {
+            static {
+                route 0.0.0.0/0 next-hop 10.97.0.1;
+            }
+        }
+    }
+    TEST {
+        ##
+        ## Warning: requires 'virtual-router' license
+        ##
+        instance-type virtual-router;
+        interface vlan.690;
+        routing-options {
+            static {
+                route 0.0.0.0/0 next-hop 10.97.0.1;
+            }
+        }
+    }
+}
+ethernet-switching-options {
+    dot1q-tunneling {
+        ether-type 0x8100;
+    }
+}
+vlans {
+    VLAN-16 {
+        vlan-id 16;
+        l3-interface vlan.16;
+    }
+    VLAN-300 {
+        vlan-id 300;
+    }
+    VLAN-542 {
+        vlan-id 542;
+    }
+    VLAN-690 {
+        vlan-id 690;
+        l3-interface vlan.690;
+    }
+    VLAN-700 {
+        vlan-id 700;
+    }
+    VLAN-701 {
+        vlan-id 701;
+    }
+    VLAN-800 {
+        vlan-id 800;
+    }
+    vlan-2011 {
+        vlan-id 2011;
+    }
+    vlan-500 {
+        vlan-id 500;
+    }
+    vlan-501 {
+        vlan-id 501;
+    }
+    vlan-502 {
+        vlan-id 502;
+    }
+    vlan-503 {
+        vlan-id 503;
+    }
+    vlan-504 {
+        vlan-id 504;
+        ##
+        ## Warning: requires 'dot1q-tunneling' license
+        ##
+        dot1q-tunneling;
+    }
+    vlan-505 {
+        vlan-id 505;
+    }
+    vlan-506 {
+        vlan-id 506;
+    }
+    vlan-507 {
+        vlan-id 507;
+    }
+    vlan-508 {
+        vlan-id 508;
+    }
+    vlan-509 {
+        vlan-id 509;
+    }
+    vlan-80 {
+        vlan-id 80;
+        l3-interface vlan.80;
+    }
+    vlan-81 {
+        vlan-id 81;
+    }
+    vlan-82 {
+        vlan-id 82;
+    }
+}
+{master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show ospf neighbor 
+# OSPF instance is not running
+# 
+# {master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
+{master:0}
+# grnoc-mon at RPSWI3-RP3FL2-EX2200> show system snapshot media internal 
+# fpc0:
+# --------------------------------------------------------------------------
+# Information for snapshot on       internal (/dev/da0s1a) (backup)
+# Creation date: Dec 12 12:27:41 2014
+# JUNOS version on snapshot:
+#   jbase  : ex-12.3R6.6
+#   jkernel-ex-2200: 12.3R6.6
+#   jweb-ex: 12.3R6.6
+#   jcrypto-ex: 12.3R6.6
+#   jdocs-ex: 12.3R6.6
+#   jswitch-ex: 12.3R6.6
+#   jpfe-ex22x: 12.3R6.6
+#   jroute-ex: 12.3R6.6
+#   fips-mode-arm: 12.3R6.6
+# Information for snapshot on       internal (/dev/da0s2a) (primary)
+# Creation date: Dec 12 10:42:03 2014
+# JUNOS version on snapshot:
+#   jbase  : ex-12.3R6.6
+#   jkernel-ex-2200: 12.3R6.6
+#   jweb-ex: 12.3R6.6
+#   jcrypto-ex: 12.3R6.6
+#   jdocs-ex: 12.3R6.6
+#   jswitch-ex: 12.3R6.6
+#   jpfe-ex22x: 12.3R6.6
+#   jroute-ex: 12.3R6.6
+#   fips-mode-arm: 12.3R6.6
+# 
+# {master:0}



More information about the Nocrancid mailing list