[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Fri Oct 2 10:02:08 CDT 2015
Index: configs/swi.cai.nok.onenet.net
===================================================================
--- configs/swi.cai.nok.onenet.net (revision 133963)
+++ configs/swi.cai.nok.onenet.net (working copy)
@@ -527,29 +527,6 @@
# grnoc-mon at SWI-CAI-NOK-EX3300> show system snapshot media internal
# fpc0:
# --------------------------------------------------------------------------
-# Information for snapshot on internal (/dev/da0s1a) (backup)
-# Creation date: Jan 26 20:05:44 2014
-# JUNOS version on snapshot:
-# jbase : ex-12.3R2.5
-# jkernel-ex-3300: 12.3R2.5
-# jweb-ex: 12.3R2.5
-# jcrypto-ex: 12.3R2.5
-# jdocs-ex: 12.3R2.5
-# jswitch-ex: 12.3R2.5
-# jpfe-ex33x: 12.3R2.5
-# jroute-ex: 12.3R2.5
-# fips-mode-arm: 12.3R2.5
-# Information for snapshot on internal (/dev/da0s2a) (primary)
-# Creation date: Mar 22 18:58:22 2013
-# JUNOS version on snapshot:
-# jbase : ex-12.3R2.5
-# jkernel-ex-3300: 12.3R2.5
-# jweb-ex: 12.3R2.5
-# jcrypto-ex: 12.3R2.5
-# jdocs-ex: 12.3R2.5
-# jswitch-ex: 12.3R2.5
-# jpfe-ex33x: 12.3R2.5
-# jroute-ex: 12.3R2.5
-# fips-mode-arm: 12.3R2.5
+# error: cannot mount /dev/da0s1a
#
# {master:0}
Index: configs/hub.tsb.onenet.net
===================================================================
--- configs/hub.tsb.onenet.net (revision 135238)
+++ configs/hub.tsb.onenet.net (working copy)
@@ -200,7 +200,7 @@
# -rw-rw---- 1 root field 51994624 Oct 24 2013 ifinfo.core.1
# -rw-rw---- 1 root field 51974144 Oct 24 2013 ifinfo.core.2
# -rw-rw---- 1 root field 52744192 Oct 24 2013 ifinfo.core.3
-# -rw-rw---- 1 root field 52727808 Oct 2 09:40 ifinfo.core.4
+# -rw-rw---- 1 root field 52727808 Oct 2 10:00 ifinfo.core.4
# drwxrwxrwx 2 root wheel 512 Oct 12 2012 install/
# -rw-rw---- 1 root field 33464320 Mar 3 2014 jdiameterd.core.0
# -rw-r--r-- 1 eng field 99542994 Apr 23 2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
Index: configs/swi1.wayne.onenet.net
===================================================================
--- configs/swi1.wayne.onenet.net (revision 134796)
+++ configs/swi1.wayne.onenet.net (working copy)
@@ -624,17 +624,6 @@
# jpfe-ex22x: 12.3R6.6
# jroute-ex: 12.3R6.6
# fips-mode-arm: 12.3R6.6
-# Information for snapshot on internal (/dev/da0s2a) (backup)
-# Creation date: Aug 3 19:11:43 2015
-# JUNOS version on snapshot:
-# jbase : ex-12.3R6.6
-# jkernel-ex-2200: 12.3R6.6
-# jweb-ex: 12.3R6.6
-# jcrypto-ex: 12.3R6.6
-# jdocs-ex: 12.3R6.6
-# jswitch-ex: 12.3R6.6
-# jpfe-ex22x: 12.3R6.6
-# jroute-ex: 12.3R6.6
-# fips-mode-arm: 12.3R6.6
+# error: cannot mount /dev/da0s2a
#
# {master:0}
Index: configs/swi.cai.eosc.onenet.net
===================================================================
--- configs/swi.cai.eosc.onenet.net (revision 135097)
+++ configs/swi.cai.eosc.onenet.net (working copy)
@@ -0,0 +1,736 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at SWI-EOSC-EX-3300> show system commit
+# 2015-04-07 16:15:20 CDT by sky via cli commit confirmed, rollback in 2mins
+# 2015-04-07 12:31:57 CDT by andrew via cli commit confirmed, rollback in 3mins
+# 2014-11-07 15:45:52 CST by admin via netconf
+# 2014-11-05 15:29:16 CST by andrew via cli
+# 2014-11-04 12:54:21 CST by andrew via cli commit confirmed, rollback in 2mins
+# 2014-11-04 12:22:02 CST by andrew via cli commit confirmed, rollback in 2mins
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis environment
+# Class Item Status Measurement
+# Power FPC 0 Power Supply 0 OK
+# Temp FPC 0 CPU OK
+# FPC 0 EX-PFE1 OK
+# FPC 0 GEPHY1 OK
+# FPC 0 Fan Exhaust OK
+# FPC 0 SFP+ PHY OK
+# FPC 0 Local Sensor OK
+# Fans FPC 0 Fan 1 OK
+# FPC 0 Fan 2 OK
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis firmware
+# Part Type Version
+# FPC 0 uboot U-Boot 1.1.6 (Aug 21 2011 - 01:45:26) 1.0
+# loader FreeBSD/arm U-Boot loader 1.1
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 1024 MB
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis GD0211402169 EX3300-24T
+# Routing Engine 0 REV 08 750-034299 GD0211402169 EX3300 24-Port
+# FPC 0 REV 08 750-034299 GD0211402169 EX3300 24-Port
+# CPU BUILTIN BUILTIN FPC CPU
+# PIC 0 BUILTIN BUILTIN 24x 10/100/1000 Base-T
+# PIC 1 REV 08 750-034299 GD0211402169 4x GE/XE SFP+
+# Xcvr 0 REV 01 740-031850 PLQ49JE SFP-LX10
+# Xcvr 1 NON-JNPR PR919VM SFP-LX10
+# Power Supply 0 PS 100W AC
+# Fan Tray Fan Tray
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Routing Engine 0 REV 08 750-034299 GD0211402169 EX3300-24T
+# FPC 0 REV 08 750-034299 GD0211402169 EX3300-24T
+# PIC 0 BUILTIN BUILTIN EX3300-24T
+# PIC 1 REV 08 750-034299 GD0211402169 EX3300-24T
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# DRAM 1024
+# Serial ID GD0211402169
+#
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis scb
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis sfm detail
+# grnoc-mon at SWI-EOSC-EX-3300> show chassis ssb
+# grnoc-mon at SWI-EOSC-EX-3300> show system boot-messages
+# fpc0:
+# --------------------------------------------------------------------------
+# GDB: debug ports: uart
+# GDB: current port: uart
+# KDB: debugger backends: ddb gdb
+# KDB: current backend: ddb
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# dog: ERROR - reset of uninitialized watchdog
+# dog: ERROR - reset of uninitialized watchdog
+# can't re-use a leaf (all_slot_serialid)!
+# CPU: Early Feroceon 88FR571 rev 0 (Marvell core)
+# cpu55: Early Feroceon 88FR571 revision WB enabled EABT branch prediction enabled
+# 32KB/32B 4-way Instruction cache
+# 32KB/32B 4-way write-back-locking-C Data cache
+# SOC: Marvell MV78100, TClock 200MHz
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing EXSERIES platform properties ...
+# mbus0: <Marvell Internal Bus (Mbus)> on motherboard
+# ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
+# timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 8 on mbus0
+# gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 56,57,58,59 on mbus0
+# uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 12 on mbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 13 on mbus0
+# ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 72,16 on mbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# umass0: STMicroelectronics ST72682 High Speed Mode, rev 2.00/2.10, addr 2
+# ehci1: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1051000-0xf1051fff irq 72,17 on mbus0
+# usb1: EHCI version 1.0
+# usb1 on ehci1
+# usb1: USB revision 2.0
+# uhub1: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub1: 1 port with 1 removable, self powered
+# ehci2: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1052000-0xf1052fff irq 72,18 on mbus0
+# usb2: EHCI version 1.0
+# usb2 on ehci2
+# usb2: USB revision 2.0
+# uhub2: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub2: 1 port with 1 removable, self powered
+# mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 41,42,43,40,70 on mbus0
+# mge0: hardware MAC address 88:e0:f3:72:d3:bf
+# miibus0: <MII bus> on mge0
+# e1000phy0: <Marvell 88E1310 Gigabit PHY> on miibus0
+# e1000phy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f on mbus0
+# 8564 rtc0: <8564 RTC> on i2c0
+# poe0: <POE> on i2c0
+# device_attach: poe0 attach returned 19
+# i2c1: <Marvell I2C ARM OnChip Controller> at mem 0xf1011100-0xf101111f on mbus0
+# pcib0: <Marvell MV78100 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xebffffff on mbus0
+# pci0: <PCI bus> on pcib0
+# mpfe0: <Juniper EX-series Packet Forwarding Engine> mem 0xe8000000-0xebffffff irq 112 at device 1.0 on pci0
+# mpfe0: 0x100000 bytes of rid 0x10 res 3 failed (0, 0xffffffff).
+# syspld0 at mem 0xf9000000-0xf90fffff on mbus0
+# cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8800000-0xf8ffffff irq 1 on mbus0
+# Initializing product: 112 ..
+# bmeb: bmeb_lib_init done 0xc41aa800, addr 0xc1d748d0
+# bme0:Virtual BME driver initializing
+# Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
+# Kernel thread "wkupdaemon" (pid 44) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s2a
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show version
+# fpc0: # -------------------------------------------------------------------------- # Hostname: SWI-EOSC-EX-3300 # Model: ex3300-24t # JUNOS Base OS boot [12.3R2.5] # JUNOS Base OS Software Suite [12.3R2.5] # JUNOS Kernel Software Suite [12.3R2.5] # JUNOS Crypto Software Suite [12.3R2.5] # JUNOS Online Documentation [12.3R2.5] # JUNOS Enterprise Software Suite [12.3R2.5] # JUNOS Packet Forwarding Engine Enterprise Software Suite [12.3R2.5] # JUNOS Routing Software Suite [12.3R2.5] # JUNOS Web Management [12.3R2.5] # JUNOS FIPS mode utilities [12.3R2.5] # # {master:0} # grnoc-mon at SWI-EOSC-EX-3300> file list /var/tmp detail #
+# /var/tmp:
+# total blocks: 194612
+# drwxrwxr-x 2 root operator 512 Apr 4 21:22 .snap/
+# drwxr-xr-x 2 root field 512 May 23 2013 gres-tp/
+# -rw-r----- 1 eng field 99571226 Dec 18 2014 jinstall-ex-3300-12.3R6.6-domestic-signed.tgz
+# drwxr-xr-x 2 root field 512 May 23 2013 rtsdb/
+# total files: 1
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show system uptime
+# fpc0:
+# --------------------------------------------------------------------------
+# System booted: 2015-09-21 09:54 CDT
+# Protocols started: 2015-09-21 09:56 CDT
+# Last configured: 2015-04-07 16:15 CDT by sky
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show interface terse
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#ge-0/0/1 up down
+#ge-0/0/2 up down
+#ge-0/0/3 up down
+#ge-0/0/4 up down
+#ge-0/0/5 up down
+#ge-0/0/6 up down
+#ge-0/0/7 up down
+#ge-0/0/8 up down
+#ge-0/0/9 up down
+#ge-0/0/10 up down
+#ge-0/0/11 up down
+#ge-0/0/12 up down
+#ge-0/0/13 up down
+#ge-0/0/14 up down
+#ge-0/0/15 up down
+#ge-0/0/16 up down
+#ge-0/0/17 up down
+#ge-0/0/18 up down
+#ge-0/0/19 up down
+#ge-0/0/20 up down
+#ge-0/0/21 up up
+#ge-0/0/21.0 up up
+#ge-0/0/22 up up
+#ge-0/0/22.0 up up
+#ge-0/0/23 up up
+#ge-0/0/23.0 up up
+#ge-0/1/0 up up
+#ge-0/1/0.0 up up
+#ge-0/1/1 up up
+#ge-0/1/1.0 up up
+#bme0 up up
+#bme0.32768 up up
+#dsc up up
+#gre up up
+#ipip up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lsi up up
+#me0 up down
+#me0.0 up down
+#mtun up up
+#pimd up up
+#pime up up
+#tap up up
+#vlan up up
+#vlan.70 up up
+#vme up down
+# grnoc-mon at SWI-EOSC-EX-3300> show configuration
+## Last commit: 2015-04-07 16:15:20 CDT by sky
+version 12.3R2.5;
+system {
+ host-name SWI-EOSC-EX-3300;
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.253.4;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.198.14;
+ }
+ }
+ radius-options {
+ attributes {
+ nas-ip-address 164.58.198.14;
+ }
+ }
+ login {
+ message "\n\n************************************ WARNING ****************************************\n\n* To protect the system from unauthorized use, *\n\n* activities on this system are monitored,recorded and subject to audit. *\n\n* Use of this system is expressed consent to such monitoring and recording. *\n\n* Any unauthorized access or use of this system is prohibited and *\n\n* is subject to criminal and civil penalties and/or administrative action. *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n;";
+ class admin {
+ idle-timeout 1044;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 2000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ max-sessions-per-connection 32;
+ }
+ netconf {
+ ssh;
+ }
+ web-management {
+ http;
+ }
+ }
+ syslog {
+ archive size 10m files 5;
+ user * {
+ any emergency;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file default-log-messages {
+ any any;
+ match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|cm_device|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)";
+ structured-data;
+ }
+ source-address 164.58.198.14;
+ }
+ ntp {
+ server 164.58.253.82 prefer;
+ }
+}
+chassis {
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+interfaces {
+ ge-0/0/0 {
+ description "Hub Appliance - NetGuardian Alarm [NO-MONITOR]";
+ ether-options {
+ no-auto-negotiation;
+ link-mode full-duplex;
+ speed {
+ 100m;
+ }
+ }
+ unit 0 {
+ family inet {
+ address 10.10.124.185/29;
+ }
+ }
+ }
+ ge-0/0/1 {
+ description "Hub Appliance - DC Power Plant [NO-MONITOR]";
+ ether-options {
+ no-auto-negotiation;
+ link-mode full-duplex;
+ speed {
+ 100m;
+ }
+ }
+ }
+ ge-0/0/2 {
+ description "Hub Appliance - UPS System [NO-MONITOR]";
+ ether-options {
+ no-auto-negotiation;
+ link-mode full-duplex;
+ speed {
+ 100m;
+ }
+ }
+ }
+ ge-0/0/3 {
+ description "Hub Appliance - Camera #2 [NO-MONITOR]";
+ ether-options {
+ no-auto-negotiation;
+ link-mode full-duplex;
+ speed {
+ 100m;
+ }
+ }
+ }
+ ge-0/0/4 {
+ description "Hub Appliance - Camera #1 [NO-MONITOR]";
+ ether-options {
+ no-auto-negotiation;
+ link-mode full-duplex;
+ speed {
+ 100m;
+ }
+ }
+ }
+ ge-0/0/5 {
+ description "Hub Appliance [NO-MONITOR]";
+ ether-options {
+ no-auto-negotiation;
+ link-mode full-duplex;
+ speed {
+ 100m;
+ }
+ }
+ }
+ ge-0/0/21 {
+ description "L2-Vyve-to-Frink Chambers";
+ unit 0 {
+ family ethernet-switching {
+ port-mode trunk;
+ vlan {
+ members vlan-210;
+ }
+ }
+ }
+ }
+ ge-0/0/22 {
+ description "NNI to VYVE - MCA - CIR000XXXX";
+ ether-options {
+ no-auto-negotiation;
+ link-mode full-duplex;
+ speed {
+ 100m;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ port-mode trunk;
+ vlan {
+ members [ vlan-200 vlan-201 ];
+ }
+ }
+ }
+ }
+ ge-0/0/23 {
+ description "HEI-Eastern-Oklahoma-State-College-GE-CIR0005208 [NO-MONITOR]";
+ unit 0 {
+ family inet {
+ address 164.58.18.129/30;
+ }
+ }
+ }
+ ge-0/1/0 {
+ description "CORE 1GE to core.mca ge-0/2/1 | OneNet-MCA-CAIEOSC-GE-5207";
+ mtu 9192;
+ unit 0 {
+ family ethernet-switching {
+ port-mode trunk;
+ vlan {
+ members [ 301 500-501 vlan-70 vlan-210 vlan-200 vlan-201 vlan-80 vlan-42 ];
+ }
+ }
+ }
+ }
+ ge-0/1/1 {
+ description "CORE 1G to SWI1-ODOT-MCALESTER | [NO-MONITOR]";
+ mtu 9192;
+ unit 0 {
+ family ethernet-switching {
+ port-mode trunk;
+ vlan {
+ members [ 42 80 301 500-501 ];
+ }
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ address 127.0.0.1/32;
+ address 164.58.198.14/32;
+ }
+ }
+ }
+ vlan {
+ mtu 9192;
+ unit 70 {
+ family inet {
+ mtu 9000;
+ address 164.58.247.246/30;
+ }
+ }
+ }
+}
+snmp {
+ description OneNet;
+ contact "Net Group";
+ client-list snmp-management {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ trap-group "<removed>" {
+ version v2;
+ targets {
+ 164.58.253.35;
+ }
+ }
+}
+routing-options {
+ static {
+ route 199.38.147.0/24 {
+ next-hop 164.58.18.130;
+ no-readvertise;
+ }
+ }
+}
+protocols {
+ ##
+ ## Warning: requires 'ospf2' license
+ ##
+ ospf {
+ export [ REDISTRIBUTE-STATICS REDISTRIBUTE-DIRECTS ];
+ reference-bandwidth 100g;
+ area 0.0.0.0 {
+ interface vlan.70 {
+ metric 65535;
+ authentication {
+ md5 7 key "$9$lHbe8X-VY2oGVbGik.F3cyrlWxdbsgaUX7b24aUD"; ## SECRET-DATA
+ }
+ }
+ interface lo0.0;
+ }
+ }
+ ##
+ ## Warning: requires 'ospf3' license
+ ##
+ ospf3 {
+ reference-bandwidth 100g;
+ }
+ igmp-snooping {
+ vlan all;
+ }
+ rstp;
+ lldp {
+ interface ge-0/1/0.0;
+ interface ge-0/1/1.0;
+ }
+}
+policy-options {
+ prefix-list MGMT {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.10.0/24;
+ 164.58.15.0/24;
+ 164.58.244.0/23;
+ 164.58.247.245/32;
+ 164.58.253.0/24;
+ }
+ policy-statement ONENET-PoP-APPLIANCES-EXPORT {
+ term 1 {
+ from protocol direct;
+ then {
+ community add ONENET-PoP-APPLIANCES;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol static;
+ then {
+ community add ONENET-PoP-APPLIANCES;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol bgp;
+ then {
+ community add ONENET-PoP-APPLIANCES;
+ accept;
+ }
+ }
+ term REJECT {
+ then reject;
+ }
+ }
+ policy-statement ONENET-PoP-APPLIANCES-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community ONENET-PoP-APPLIANCES;
+ }
+ then accept;
+ }
+ term REJECT {
+ then reject;
+ }
+ }
+ policy-statement REDISTRIBUTE-DIRECTS {
+ term 1 {
+ from protocol direct;
+ then accept;
+ }
+ }
+ policy-statement REDISTRIBUTE-STATICS {
+ term 1 {
+ from protocol static;
+ then accept;
+ }
+ }
+ community ONENET-PoP-APPLIANCES members target:5078:2012;
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term 1 {
+ from {
+ source-prefix-list {
+ MGMT;
+ }
+ }
+ then accept;
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term Reject {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+routing-instances {
+ ONENET-PoP-APPLIANCES-L3VPN {
+ description ONENET-PoP-APPLIANCES-L3VPN;
+ instance-type vrf;
+ interface ge-0/0/0.0;
+ interface ge-0/0/1.0; ## 'ge-0/0/1.0' is not defined
+ interface ge-0/0/2.0; ## 'ge-0/0/2.0' is not defined
+ interface ge-0/0/3.0; ## 'ge-0/0/3.0' is not defined
+ interface ge-0/0/4.0; ## 'ge-0/0/4.0' is not defined
+ interface ge-0/0/5.0; ## 'ge-0/0/5.0' is not defined
+ route-distinguisher 164.58.247.246:2012;
+ vrf-import ONENET-PoP-APPLIANCES-IMPORT;
+ vrf-export ONENET-PoP-APPLIANCES-EXPORT;
+ vrf-target target:5078:2012;
+ routing-options {
+ static {
+ route 10.10.124.186/32 next-hop 10.10.124.186;
+ }
+ }
+ }
+}
+ethernet-switching-options {
+ voip;
+ storm-control {
+ interface all {
+ level 50;
+ }
+ }
+}
+vlans {
+ VLAN-301 {
+ vlan-id 301;
+ }
+ VLAN-500 {
+ vlan-id 500;
+ }
+ VLAN-501 {
+ vlan-id 501;
+ }
+ default;
+ vlan-200 {
+ vlan-id 200;
+ }
+ vlan-201 {
+ vlan-id 201;
+ }
+ vlan-210 {
+ vlan-id 210;
+ }
+ vlan-3900 {
+ vlan-id 3900;
+ }
+ vlan-42 {
+ vlan-id 42;
+ }
+ vlan-70 {
+ vlan-id 70;
+ l3-interface vlan.70;
+ }
+ vlan-80 {
+ vlan-id 80;
+ }
+}
+{master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show ospf neighbor
+# Address Interface State ID Pri Dead
+# 164.58.247.245 vlan.70 Full 164.58.199.92
+#
+# {master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show bfd session
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
+{master:0}
+# grnoc-mon at SWI-EOSC-EX-3300> show system snapshot media internal
+# fpc0:
+# --------------------------------------------------------------------------
+# Information for snapshot on internal (/dev/da0s1a) (backup)
+# Creation date: Apr 7 16:22:23 2015
+# JUNOS version on snapshot:
+# jbase : ex-12.3R2.5
+# jkernel-ex-3300: 12.3R2.5
+# jweb-ex: 12.3R2.5
+# jcrypto-ex: 12.3R2.5
+# jdocs-ex: 12.3R2.5
+# jswitch-ex: 12.3R2.5
+# jpfe-ex33x: 12.3R2.5
+# jroute-ex: 12.3R2.5
+# fips-mode-arm: 12.3R2.5
+# Information for snapshot on internal (/dev/da0s2a) (primary)
+# Creation date: May 23 14:16:06 2013
+# JUNOS version on snapshot:
+# jbase : ex-12.3R2.5
+# jkernel-ex-3300: 12.3R2.5
+# jweb-ex: 12.3R2.5
+# jcrypto-ex: 12.3R2.5
+# jdocs-ex: 12.3R2.5
+# jswitch-ex: 12.3R2.5
+# jpfe-ex33x: 12.3R2.5
+# jroute-ex: 12.3R2.5
+# fips-mode-arm: 12.3R2.5
+#
+# {master:0}
More information about the Nocrancid
mailing list