[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Thu Jun 11 17:02:30 CDT 2015


Index: configs/hub.chi.onenet.net
===================================================================
--- configs/hub.chi.onenet.net	(revision 127991)
+++ configs/hub.chi.onenet.net	(working copy)
@@ -292,7 +292,7 @@
 #t3-2/0/1.0 up up
 #ct3-2/0/2 up up
 #t1-2/0/2:1 up up
-#t1-2/0/2:2 down down
+#t1-2/0/2:2 down up
 #t1-2/0/2:3 down down
 #t1-2/0/2:4 down down
 #t1-2/0/2:5 down down
Index: configs/core.end.onenet.net
===================================================================
--- configs/core.end.onenet.net	(revision 127991)
+++ configs/core.end.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ENID-MX480-RE0> show system commit 
+#   2015-06-11 16:46:58 CDT by andrew via cli commit synchronize
 #   2015-06-09 21:53:20 CDT by andrew via cli commit synchronize
 #   2015-06-06 23:38:10 CDT by root via other
 #     Synchronization with remote Routing Engine
@@ -9,7 +10,6 @@
 #   2015-06-06 23:37:41 CDT by root via other
 #   2015-06-06 23:24:15 CDT by root via other
 #     Synchronization with remote Routing Engine
-#   2015-06-06 22:48:15 CDT by andrew via cli commit synchronize
 # grnoc-mon at ENID-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -258,7 +258,7 @@
 # grnoc-mon at ENID-MX480-RE0> show system uptime 
 # System booted: 2015-06-06 23:35 CDT 
 # Protocols started: 2015-06-06 23:37 CDT 
-# Last configured: 2015-06-09 21:53 CDT  by andrew
+# Last configured: 2015-06-11 16:46 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at ENID-MX480-RE0> show interface terse 
@@ -411,7 +411,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at ENID-MX480-RE0> show configuration 
-## Last commit: 2015-06-09 21:53:20 CDT by andrew
+## Last commit: 2015-06-11 16:46:58 CDT by andrew
 version 13.3R6.5;
 groups {
     re0 {
@@ -1568,14 +1568,9 @@
                 route-filter 129.244.0.0/16 exact;
                 route-filter 129.244.0.0/17 exact;
                 route-filter 129.244.128.0/17 exact;
-                route-filter 139.78.0.0/16 exact;
                 route-filter 152.123.8.0/21 exact;
-                route-filter 155.178.0.0/16 exact;
-                route-filter 155.178.32.0/23 exact;
-                route-filter 155.178.34.0/24 exact;
                 route-filter 156.110.0.0/16 exact;
                 route-filter 157.142.0.0/16 exact;
-                route-filter 162.58.0.0/16 exact;
                 route-filter 164.58.0.0/16 exact;
                 route-filter 174.77.146.0/24 exact;
                 route-filter 192.31.83.0/24 exact;
@@ -1641,8 +1636,6 @@
                 route-filter 204.87.64.0/18 exact;
                 route-filter 204.87.241.0/24 exact;
                 route-filter 204.107.242.0/24 exact;
-                route-filter 204.108.2.0/24 exact;
-                route-filter 204.108.3.0/24 exact;
                 route-filter 204.126.138.0/23 exact;
                 route-filter 204.126.144.0/23 exact;
                 route-filter 204.126.162.0/23 exact;
Index: configs/core4.okc.onenet.net
===================================================================
--- configs/core4.okc.onenet.net	(revision 127988)
+++ configs/core4.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE4-MX480-RE0> show system commit 
-#   2015-06-10 11:25:54 CDT by sky via cli commit synchronize
-#   2015-06-10 11:21:16 CDT by sky via cli commit synchronize
-#   2015-06-10 11:19:36 CDT by sky via cli commit synchronize
-#   2015-06-10 10:55:21 CDT by sky via cli commit synchronize
-#   2015-06-09 21:50:29 CDT by andrew via cli commit synchronize
-#   2015-06-09 21:07:09 CDT by rnordmark via cli commit synchronize
+#   2015-06-11 16:57:28 CDT by jeremyt via cli commit synchronize
+#   2015-06-11 16:48:37 CDT by jeremyt via cli commit synchronize
+#   2015-06-11 16:31:19 CDT by jeremyt via cli commit synchronize
+#   2015-06-11 16:26:14 CDT by jeremyt via cli commit synchronize
+#   2015-06-11 16:21:21 CDT by jeremyt via cli commit synchronize
+#   2015-06-11 16:13:18 CDT by jeremyt via cli commit confirmed, rollback in 5mins synchronize
 # grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -426,7 +426,7 @@
 # grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime 
 # System booted: 2014-09-16 23:49 CDT 
 # Protocols started: 2014-09-16 23:51 CDT 
-# Last configured: 2015-06-10 11:25 CDT  by sky
+# Last configured: 2015-06-11 16:57 CDT  by jeremyt
 # 
 # {master}
 # grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse 
@@ -901,7 +901,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE4-MX480-RE0> show configuration 
-## Last commit: 2015-06-10 11:25:54 CDT by sky
+## Last commit: 2015-06-11 16:57:28 CDT by jeremyt
 version 12.3R7.7;
 groups {
     re0 {
@@ -1070,6 +1070,9 @@
             any any;
             match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
         }
+        file RPF-VIOLATION {
+            firewall any;
+        }
         source-address 164.58.199.214;
     }
     commit synchronize;
@@ -2496,7 +2499,7 @@
             family inet {
                 filter {
                     input ABUSE-BCP38-INBOUND;
-                    output FLOW-INFO;
+                    output RPF-CHECK;
                 }
                 sampling {
                     input;
@@ -5727,6 +5730,9 @@
         204.87.64.0/18;
         206.202.208.0/24;
     }
+    prefix-list RPF-CHECK {
+        apply-path "policy-options policy-statement COMMODITY-PREFIXES-LIST term PREFIXES from route-filter <*.*>";
+    }
     policy-statement AREON-PREFIX-LIST {
         term prefixes {
             from {
@@ -7395,26 +7401,6 @@
 }
 firewall {
     family inet {
-        filter FLOW-INFO {
-            term CHARGEN {
-                from {
-                    protocol [ udp tcp ];
-                    port 19;
-                }
-                then {
-                    inactive: policer CHARGEN;
-                    discard;
-                }
-            }
-            term ALL_FLOW {
-                then accept;
-            }
-            term REJECT_ALL {
-                then {
-                    discard;
-                }
-            }
-        }
         filter ICMP-POL {
             term ICMP {
                 from {
@@ -8129,6 +8115,43 @@
                 then accept;
             }
         }
+        filter RPF-CHECK {
+            term CHARGEN {
+                from {
+                    protocol [ udp tcp ];
+                    port 19;
+                }
+                then {
+                    discard;
+                }
+            }
+            term RFC1918 {
+                from {
+                    source-prefix-list {
+                        MARTIANS-IPV4;
+                    }
+                }
+                then {
+                    discard;
+                }
+            }
+            term SOURCES {
+                from {
+                    source-prefix-list {
+                        RPF-CHECK;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                }
+                then accept;
+            }
+            term REJECT {
+                then {
+                    count RPF-VIOLATION;
+                    syslog;
+                    discard;
+                }
+            }
+        }
     }
     policer 200M-POL {
         logical-interface-policer;
Index: configs/core2.tul-mx960.onenet.net
===================================================================
--- configs/core2.tul-mx960.onenet.net	(revision 127960)
+++ configs/core2.tul-mx960.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TULSA-CORE2-MX960-RE0> show system commit 
+#   2015-06-11 16:53:48 CDT by andrew via cli commit synchronize
 #   2015-06-06 23:53:29 CDT by root via other
 #     Synchronization with remote Routing Engine
 #   2015-06-06 23:53:22 CDT by root via other
@@ -9,7 +10,6 @@
 #   2015-06-06 23:39:52 CDT by root via other
 #     Synchronization with remote Routing Engine
 #   2015-06-06 22:17:45 CDT by andrew via cli commit synchronize
-#   2015-06-06 22:14:55 CDT by andrew via cli commit synchronize
 # grnoc-mon at TULSA-CORE2-MX960-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -434,7 +434,7 @@
 # grnoc-mon at TULSA-CORE2-MX960-RE0> show system uptime 
 # System booted: 2015-06-06 23:50 CDT 
 # Protocols started: 2015-06-06 23:53 CDT 
-# Last configured: 2015-06-06 23:53 CDT  by root
+# Last configured: 2015-06-11 16:53 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at TULSA-CORE2-MX960-RE0> show interface terse 
@@ -613,7 +613,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at TULSA-CORE2-MX960-RE0> show configuration 
-## Last commit: 2015-06-06 23:53:29 CDT by root
+## Last commit: 2015-06-11 16:53:48 CDT by andrew
 version 13.3R6.5;
 groups {
     re0 {
@@ -1250,7 +1250,7 @@
         }
     }
     et-3/3/0 {
-        description "CORE 100GE to core2.sti et-0/0/0 | OneNet-TUL-STI-ET-XXXX";
+        description "CORE 100GE to core1.sti et-4/1/0 | OneNet-TUL-STI-ET-XXXX";
         flexible-vlan-tagging;
         mtu 9192;
         encapsulation flexible-ethernet-services;
@@ -2243,6 +2243,7 @@
 # 164.58.15.105    ae4.104                Full      164.58.199.221
 # 164.58.15.134    ae5.132                Full      164.58.199.224
 # 164.58.22.41     et-3/1/0.42            Full      164.58.199.228
+# 164.58.244.17    et-3/3/0.42            Full      164.58.199.232
 # 164.58.15.142    ge-0/2/0.140           Full      164.58.199.226
 # 164.58.15.130    xe-0/0/1.128           Full      164.58.199.223
 # 164.58.245.137   xe-0/1/0.70            Full      164.58.199.212
@@ -2266,13 +2267,14 @@
 164.58.15.146            Up        xe-1/1/1.144   1.200     0.400        3   
 164.58.15.237            Up        xe-0/1/1.236   1.200     0.400        3   
 164.58.22.41             Up        et-3/1/0.42    1.200     0.400        3   
+164.58.244.17            Up        et-3/3/0.42    1.200     0.400        3   
 164.58.245.137           Up        xe-0/1/0.70    1.200     0.400        3   
 164.58.246.70            Up        xe-2/1/1.69    1.200     0.400        3   
 164.58.246.105           Up        xe-2/0/0.69    1.200     0.400        3   
 164.58.246.130           Up        xe-2/0/1.69    1.200     2.000        3   
 164.58.246.254           Up        xe-2/3/0.70    1.200     0.400        3   
 
-13 sessions, 20 clients
-Cumulative transmit rate 30.5 pps, cumulative receive rate 32.5 pps
+14 sessions, 21 clients
+Cumulative transmit rate 33.0 pps, cumulative receive rate 35.0 pps
 
 {master}
Index: configs/core1.lan-mx80.onenet.net
===================================================================
--- configs/core1.lan-mx80.onenet.net	(revision 127991)
+++ configs/core1.lan-mx80.onenet.net	(working copy)
@@ -191,14 +191,14 @@
 # grnoc-mon at LANGSTON-MX80> show version 
 # Hostname: LANGSTON-MX80 # Model: mx80 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX80) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] #  # grnoc-mon at LANGSTON-MX80> file list /var/tmp detail # 
 # /var/tmp:
-# total 1460140
+# total 1503980
 # -rw-r--r--  1 root  field         30 Feb 29  2012 ex.txt
 # drwxr-xr-x  2 root  field        512 Feb 29  2012 gres-tp/
 # -rw-rw----  1 root  field   52711424 Jun 10 15:30 ifinfo.core.0
 # -rw-rw----  1 root  field   52711424 Jun 10 15:37 ifinfo.core.1
 # -rw-rw----  1 root  field   52711424 Jun 10 15:40 ifinfo.core.2
 # -rw-rw----  1 root  field   52711424 Jun 10 15:47 ifinfo.core.3
-# -rw-rw----  1 root  field   33226752 Jun 11 16:00 ifinfo.core.4
+# -rw-rw----  1 root  field   52711424 Jun 11 17:00 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Aug 13  2012 install/
 # -rw-r--r--  1 eng   field   99542994 May 30  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
 # -rw-r--r--  1 upgrades field 150276951 Aug 8   2014 jinstall-ppc-12.3R7.7-domestic-signed.tgz
Index: configs/core.hut.412.onenet.net
===================================================================
--- configs/core.hut.412.onenet.net	(revision 127988)
+++ configs/core.hut.412.onenet.net	(working copy)
@@ -317,10 +317,8 @@
 #lsi.1050030 up up
 #lsi.1050039 up up
 #lsi.1050055 up up
-#lsi.1050071 up up
 #lsi.1050087 up up
 #lsi.1050091 up up
-#lsi.1050098 up up
 #lsi.1050104 up up
 #lsi.1050106 up up
 #lsi.1050107 up up
@@ -333,6 +331,8 @@
 #lsi.1050121 up up
 #lsi.1050122 up up
 #lsi.1050123 up up
+#lsi.1050124 up up
+#lsi.1050125 up up
 #me0 up up
 #me0.0 up up
 #mtun up up
Index: configs/hub.tsb.onenet.net
===================================================================
--- configs/hub.tsb.onenet.net	(revision 127991)
+++ configs/hub.tsb.onenet.net	(working copy)
@@ -200,7 +200,7 @@
 # -rw-rw----  1 root  field   51994624 Oct 24  2013 ifinfo.core.1
 # -rw-rw----  1 root  field   51974144 Oct 24  2013 ifinfo.core.2
 # -rw-rw----  1 root  field   52744192 Oct 24  2013 ifinfo.core.3
-# -rw-rw----  1 root  field   52727808 Jun 11 16:00 ifinfo.core.4
+# -rw-rw----  1 root  field   52727808 Jun 11 17:00 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Oct 12  2012 install/
 # -rw-rw----  1 root  field   33464320 Mar 3   2014 jdiameterd.core.0
 # -rw-r--r--  1 eng   field   99542994 Apr 23  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
Index: configs/core.alt.onenet.net
===================================================================
--- configs/core.alt.onenet.net	(revision 127991)
+++ configs/core.alt.onenet.net	(working copy)
@@ -384,7 +384,6 @@
 #lsi.1202223 up up
 #lsi.1202233 up up
 #lsi.1202234 up up
-#lsi.1202245 up up
 #lsi.1202256 up up
 #lsi.1202259 up up
 #lsi.1202260 up up
@@ -411,6 +410,7 @@
 #lsi.1202302 up up
 #lsi.1202303 up up
 #lsi.1202304 up up
+#lsi.1202305 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core1.sti-mx960.onenet.net
===================================================================
--- configs/core1.sti-mx960.onenet.net	(revision 127990)
+++ configs/core1.sti-mx960.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at STILLWATER-MX960-RE0> show system commit 
+#   2015-06-11 16:59:37 CDT by andrew via cli commit confirmed, rollback in 3mins synchronize
 #   2015-06-11 13:14:09 CDT by root via other
 #   2015-06-11 13:12:12 CDT by sky via cli commit confirmed, rollback in 1mins synchronize
 #   2015-06-11 13:11:14 CDT by sky via cli commit synchronize
 #   2015-06-11 13:06:50 CDT by sky via cli commit synchronize
 #   2015-06-10 05:03:32 CDT by sky via cli commit synchronize
-#   2015-06-08 11:43:24 CDT by andrew via cli commit synchronize
 # grnoc-mon at STILLWATER-MX960-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -497,7 +497,7 @@
 # grnoc-mon at STILLWATER-MX960-RE0> show system uptime 
 # System booted: 2015-06-07 00:06 CDT 
 # Protocols started: 2015-06-07 00:08 CDT 
-# Last configured: 2015-06-11 13:14 CDT  by root
+# Last configured: 2015-06-11 16:59 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at STILLWATER-MX960-RE0> show interface terse 
@@ -751,7 +751,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at STILLWATER-MX960-RE0> show configuration 
-## Last commit: 2015-06-11 13:14:09 CDT by root
+## Last commit: 2015-06-11 16:59:37 CDT by andrew
 version 13.3R6.5;
 groups {
     re0 {
@@ -1882,6 +1882,7 @@
         interface xe-1/1/0.40;
         interface xe-0/0/1.40;
         interface xe-3/0/0.42;
+        interface et-4/1/0.42;
     }
     bgp {
         group CORE-RR-OKC-V6 {
@@ -2172,6 +2173,16 @@
                     multiplier 3;
                 }
             }
+            interface et-4/1/0.42 {
+                link-protection;
+                authentication {
+                    md5 7 key "$9$kq5Qn/tpOR/9RSrex7DiHkfz69AuBEQF9p0BEh"; ## SECRET-DATA
+                }
+                bfd-liveness-detection {
+                    minimum-interval 400;
+                    multiplier 3;
+                }
+            }
         }
     }
     ospf3 {
@@ -2290,6 +2301,7 @@
         interface xe-2/3/0.40;
         interface xe-3/0/0.42;
         inactive: interface xe-3/1/1.70;
+        interface et-4/1/0.42;
         interface lo0.0;
     }
     pim {
@@ -2327,6 +2339,7 @@
         inactive: interface xe-3/1/1;
         interface xe-2/3/0;
         interface xe-3/0/0;
+        interface et-4/1/0;
     }
 }
 policy-options {
@@ -3194,6 +3207,7 @@
 {master}
 # grnoc-mon at STILLWATER-MX960-RE0> show ospf neighbor 
 # Address          Interface              State     ID               Pri  Dead
+# 164.58.244.16    et-4/1/0.42            Full      164.58.199.222
 # 164.58.245.162   ge-0/3/0.0             Full      164.58.199.186
 # 164.58.15.238    xe-0/0/0.236           Full      164.58.199.222
 # 164.58.247.2     xe-0/0/1.40            Full      164.58.199.153
@@ -3218,6 +3232,7 @@
 164.58.15.229            Up        xe-1/2/0.228   1.200     0.400        3   
 164.58.15.233            Up        xe-1/0/0.232   1.200     0.400        3   
 164.58.15.238            Up        xe-0/0/0.236   1.200     0.400        3   
+164.58.244.16            Up        et-4/1/0.42    1.200     0.400        3   
 164.58.246.109           Up        xe-2/0/0.69    1.200     0.400        3   
 164.58.246.113           Up        xe-2/0/1.69    1.200     0.400        3   
 164.58.246.117           Up        xe-2/1/0.69    1.200     0.400        3   
@@ -3241,7 +3256,7 @@
 fe80::8ae0:f300:287f:5a00 Up       xe-1/1/0.40    0.300     0.100        3   
 fe80::8ae0:f300:287f:5d00 Up       xe-0/0/1.40    1.200     0.400        3   
 
-25 sessions, 34 clients
-Cumulative transmit rate 117.5 pps, cumulative receive rate 113.0 pps
+26 sessions, 35 clients
+Cumulative transmit rate 120.0 pps, cumulative receive rate 115.5 pps
 
 {master}
Index: configs/core.chi.onenet.net
===================================================================
--- configs/core.chi.onenet.net	(revision 127988)
+++ configs/core.chi.onenet.net	(working copy)
@@ -338,7 +338,6 @@
 #lsi.1068621 up up
 #lsi.1068623 up up
 #lsi.1068627 up up
-#lsi.1068628 up up
 #lsi.1068630 up up
 #lsi.1068631 up up
 #lsi.1068634 up up
@@ -348,6 +347,7 @@
 #lsi.1068640 up up
 #lsi.1068642 up up
 #lsi.1068643 up up
+#lsi.1068644 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.hut.cli.onenet.net
===================================================================
--- configs/core.hut.cli.onenet.net	(revision 127991)
+++ configs/core.hut.cli.onenet.net	(working copy)
@@ -292,7 +292,6 @@
 #lsi.1049837 up up
 #lsi.1049869 up up
 #lsi.1049873 up up
-#lsi.1049880 up up
 #lsi.1049886 up up
 #lsi.1049888 up up
 #lsi.1049889 up up
@@ -306,6 +305,7 @@
 #lsi.1049904 up up
 #lsi.1049905 up up
 #lsi.1049906 up up
+#lsi.1049907 up up
 #me0 up up
 #me0.0 up up
 #mtun up up



More information about the Nocrancid mailing list