[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Thu Oct 8 11:02:19 CDT 2015


Index: configs/core.end.onenet.net
===================================================================
--- configs/core.end.onenet.net	(revision 135574)
+++ configs/core.end.onenet.net	(working copy)
@@ -386,8 +386,6 @@
 #lsi.1076777 up up
 #lsi.1076778 up up
 #lsi.1076779 up up
-#lsi.1076786 up up
-#lsi.1076787 up up
 #lsi.1076790 up up
 #lsi.1076791 up up
 #lsi.1076795 up up
@@ -407,6 +405,8 @@
 #lsi.1076816 up up
 #lsi.1076817 up up
 #lsi.1076818 up up
+#lsi.1076819 up up
+#lsi.1076820 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 135574)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -27,6 +27,7 @@
 # FEB                      O/S        Version 12.3X54-D10.6 by builder on 2014-07
 # 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis fpc detail 
+# show chassis hardware
 # Slot 0 information:
 #   State                               Online    
 #   Total CPU DRAM                  512 MB
Index: configs/core5.okc.onenet.net
===================================================================
--- configs/core5.okc.onenet.net	(revision 135571)
+++ configs/core5.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system commit 
+#   2015-10-08 10:54:01 CDT by sean via cli commit synchronize
 #   2015-10-06 17:44:13 CDT by andrew via cli commit synchronize
 #   2015-10-03 19:46:35 CDT by andrew via cli commit synchronize
 #   2015-10-01 14:21:48 CDT by sky via cli commit synchronize
 #   2015-09-30 14:04:24 CDT by sky via cli commit synchronize
 #   2015-09-30 13:55:21 CDT by sky via cli commit synchronize
-#   2015-09-30 13:32:15 CDT by sky via cli commit synchronize
 # grnoc-mon at OKC-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -432,7 +432,7 @@
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system uptime 
 # System booted: 2014-09-16 23:50 CDT 
 # Protocols started: 2014-09-16 23:51 CDT 
-# Last configured: 2015-10-06 17:44 CDT  by andrew
+# Last configured: 2015-10-08 10:54 CDT  by sean
 # 
 # {master}
 # grnoc-mon at OKC-CORE5-MX480-RE0> show interface terse 
@@ -632,6 +632,7 @@
 #xe-2/1/0.918 up up
 #xe-2/1/0.920 up up
 #xe-2/1/0.921 up up
+#xe-2/1/0.923 up up
 #xe-2/1/0.3810 up up
 #xe-2/1/0.32767 up up
 #xe-2/1/1 up up
@@ -780,7 +781,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE5-MX480-RE0> show configuration 
-## Last commit: 2015-10-06 17:44:13 CDT by andrew
+## Last commit: 2015-10-08 10:54:01 CDT by sean
 version 12.3R7.7;
 groups {
     re0 {
@@ -2188,6 +2189,16 @@
                 address 164.58.58.94/31;
             }
         }
+        unit 923 {
+            description PIONEER-LIBRARY-SYSTEM-NOBLE-300M-CIR0018903;
+            vlan-id 923;
+            family inet {
+                policer {
+                    input 300M-POL;
+                    output 300M-POL;
+                }
+            }
+        }
         unit 3810 {
             description STILLWATER-PUBLIC-SCHOOLS-NID-MGMT-CIR0018861;
             vlan-tags outer 810 inner 80;
Index: configs/core.dur.onenet.net
===================================================================
--- configs/core.dur.onenet.net	(revision 135574)
+++ configs/core.dur.onenet.net	(working copy)
@@ -381,8 +381,6 @@
 #lsi.1078153 up up
 #lsi.1078154 up up
 #lsi.1078155 up up
-#lsi.1078163 up up
-#lsi.1078164 up up
 #lsi.1078167 up up
 #lsi.1078168 up up
 #lsi.1078169 up up
@@ -402,6 +400,8 @@
 #lsi.1078193 up up
 #lsi.1078194 up up
 #lsi.1078195 up up
+#lsi.1078196 up up
+#lsi.1078197 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core1.lan-mx80.onenet.net
===================================================================
--- configs/core1.lan-mx80.onenet.net	(revision 135574)
+++ configs/core1.lan-mx80.onenet.net	(working copy)
@@ -196,7 +196,7 @@
 # -rw-rw----  1 root  field   52711424 Jun 10 15:37 ifinfo.core.1
 # -rw-rw----  1 root  field   52711424 Jun 10 15:40 ifinfo.core.2
 # -rw-rw----  1 root  field   52711424 Jun 10 15:47 ifinfo.core.3
-# -rw-rw----  1 root  field   52711424 Oct 8  09:55 ifinfo.core.4
+# -rw-rw----  1 root  field   52711424 Oct 8  10:55 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Aug 13  2012 install/
 # -rw-r--r--  1 eng   field   99542994 May 30  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
 # -rw-r--r--  1 upgrades field 150276951 Aug 8   2014 jinstall-ppc-12.3R7.7-domestic-signed.tgz
Index: configs/core.hut.ard.onenet.net
===================================================================
--- configs/core.hut.ard.onenet.net	(revision 135574)
+++ configs/core.hut.ard.onenet.net	(working copy)
@@ -322,7 +322,6 @@
 #lsi.1052389 up up
 #lsi.1052391 up up
 #lsi.1052398 up up
-#lsi.1052401 up up
 #lsi.1052403 up up
 #lsi.1052404 up up
 #lsi.1052406 up up
@@ -333,6 +332,7 @@
 #lsi.1052412 up up
 #lsi.1052414 up up
 #lsi.1052415 up up
+#lsi.1052416 up up
 #me0 up up
 #me0.0 up up
 #mtun up up
Index: configs/core.hut.412.onenet.net
===================================================================
--- configs/core.hut.412.onenet.net	(revision 135574)
+++ configs/core.hut.412.onenet.net	(working copy)
@@ -321,7 +321,6 @@
 #lsi.1051756 up up
 #lsi.1051762 up up
 #lsi.1051766 up up
-#lsi.1051769 up up
 #lsi.1051771 up up
 #lsi.1051773 up up
 #lsi.1051774 up up
@@ -331,6 +330,7 @@
 #lsi.1051779 up up
 #lsi.1051781 up up
 #lsi.1051782 up up
+#lsi.1051783 up up
 #me0 up up
 #me0.0 up up
 #mtun up up
Index: configs/core.ard.onenet.net
===================================================================
--- configs/core.ard.onenet.net	(revision 135574)
+++ configs/core.ard.onenet.net	(working copy)
@@ -343,12 +343,10 @@
 #lsi.1078846 up up
 #lsi.1078856 up up
 #lsi.1078877 up up
-#lsi.1078885 up up
 #lsi.1078889 up up
 #lsi.1078894 up up
 #lsi.1078895 up up
 #lsi.1078897 up up
-#lsi.1078901 up up
 #lsi.1078902 up up
 #lsi.1078904 up up
 #lsi.1078905 up up
@@ -361,6 +359,8 @@
 #lsi.1078919 up up
 #lsi.1078920 up up
 #lsi.1078921 up up
+#lsi.1078922 up up
+#lsi.1078923 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/oja-sw-youth-academy-manitou.client.onenet.net
===================================================================
--- configs/oja-sw-youth-academy-manitou.client.onenet.net	(revision 135557)
+++ configs/oja-sw-youth-academy-manitou.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OJA-SW-YOUTH-ACADEMY-MANITOU-LR-004653> show system commit 
+#   2015-10-08 10:06:56 CDT by andrew via cli
+#   2015-10-08 10:02:51 CDT by andrew via cli
 #   2015-10-07 07:17:53 CDT by andrew via cli
 #   2015-10-06 22:31:17 CDT by andrew via cli
 #   2015-10-06 22:30:00 CDT by andrew via cli
 #   2015-09-01 10:42:20 CDT by sky via cli
-#   2015-07-17 15:33:04 CDT by sky via cli
-#   2015-07-10 10:25:26 CDT by admin via cli
 # grnoc-mon at OJA-SW-YOUTH-ACADEMY-MANITOU-LR-004653> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -98,7 +98,7 @@
 # grnoc-mon at OJA-SW-YOUTH-ACADEMY-MANITOU-LR-004653> show system uptime 
 # System booted: 2015-08-05 16:47 CDT 
 # Protocols started: 2015-08-05 16:50 CDT 
-# Last configured: 2015-10-07 07:17 CDT  by andrew
+# Last configured: 2015-10-08 10:06 CDT  by andrew
 # 
 # grnoc-mon at OJA-SW-YOUTH-ACADEMY-MANITOU-LR-004653> show interface terse 
 #Interface Admin Link
@@ -146,7 +146,7 @@
 #vlan.4 up up
 #vlan.999 up down
 # grnoc-mon at OJA-SW-YOUTH-ACADEMY-MANITOU-LR-004653> show configuration 
-## Last commit: 2015-10-07 07:17:53 CDT by andrew
+## Last commit: 2015-10-08 10:06:56 CDT by andrew
 version 12.1X46-D20.5;
 system {
     host-name OJA-SW-YOUTH-ACADEMY-MANITOU-LR-004653;
@@ -249,8 +249,9 @@
             }
             pool 10.1.171.0/24 {
                 address-range low 10.1.171.11 high 10.1.171.254;
-                domain-name onenet.net;
+                domain-name oyaswojc.local;
                 name-server {
+                    10.1.171.250;
                     208.67.222.222;
                     208.67.220.220;
                 }
Index: configs/hub.tsb.onenet.net
===================================================================
--- configs/hub.tsb.onenet.net	(revision 135574)
+++ configs/hub.tsb.onenet.net	(working copy)
@@ -200,7 +200,7 @@
 # -rw-rw----  1 root  field   51994624 Oct 24  2013 ifinfo.core.1
 # -rw-rw----  1 root  field   51974144 Oct 24  2013 ifinfo.core.2
 # -rw-rw----  1 root  field   52744192 Oct 24  2013 ifinfo.core.3
-# -rw-rw----  1 root  field   52727808 Oct 8  10:00 ifinfo.core.4
+# -rw-rw----  1 root  field   52727808 Oct 8  11:00 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Oct 12  2012 install/
 # -rw-rw----  1 root  field   33464320 Mar 3   2014 jdiameterd.core.0
 # -rw-r--r--  1 eng   field   99542994 Apr 23  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
Index: configs/core.alt.onenet.net
===================================================================
--- configs/core.alt.onenet.net	(revision 135574)
+++ configs/core.alt.onenet.net	(working copy)
@@ -379,7 +379,6 @@
 #lsi.1211439 up up
 #lsi.1211444 up up
 #lsi.1211460 up up
-#lsi.1211471 up up
 #lsi.1211479 up up
 #lsi.1211504 up up
 #lsi.1211506 up up
@@ -388,7 +387,6 @@
 #lsi.1211513 up up
 #lsi.1211516 up up
 #lsi.1211517 up up
-#lsi.1211520 up up
 #lsi.1211522 up up
 #lsi.1211523 up up
 #lsi.1211525 up up
@@ -412,6 +410,8 @@
 #lsi.1211561 up up
 #lsi.1211562 up up
 #lsi.1211563 up up
+#lsi.1211564 up up
+#lsi.1211565 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core1.sti-mx960.onenet.net
===================================================================
--- configs/core1.sti-mx960.onenet.net	(revision 135574)
+++ configs/core1.sti-mx960.onenet.net	(working copy)
@@ -754,7 +754,6 @@
 #lsi.1084626 up up
 #lsi.1084637 up up
 #lsi.1084644 up up
-#lsi.1084650 up up
 #lsi.1084653 up up
 #lsi.1084654 up up
 #lsi.1084655 up up
@@ -771,6 +770,7 @@
 #lsi.1084673 up up
 #lsi.1084674 up up
 #lsi.1084675 up up
+#lsi.1084676 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.chi.onenet.net
===================================================================
--- configs/core.chi.onenet.net	(revision 135574)
+++ configs/core.chi.onenet.net	(working copy)
@@ -332,12 +332,10 @@
 #lsi.1076833 up up
 #lsi.1076850 up up
 #lsi.1076873 up up
-#lsi.1076881 up up
 #lsi.1076886 up up
 #lsi.1076892 up up
 #lsi.1076893 up up
 #lsi.1076898 up up
-#lsi.1076899 up up
 #lsi.1076900 up up
 #lsi.1076902 up up
 #lsi.1076903 up up
@@ -349,6 +347,8 @@
 #lsi.1076916 up up
 #lsi.1076917 up up
 #lsi.1076918 up up
+#lsi.1076919 up up
+#lsi.1076920 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.hut.cli.onenet.net
===================================================================
--- configs/core.hut.cli.onenet.net	(revision 135574)
+++ configs/core.hut.cli.onenet.net	(working copy)
@@ -296,7 +296,6 @@
 #lsi.1051862 up up
 #lsi.1051868 up up
 #lsi.1051872 up up
-#lsi.1051875 up up
 #lsi.1051877 up up
 #lsi.1051879 up up
 #lsi.1051880 up up
@@ -306,6 +305,7 @@
 #lsi.1051885 up up
 #lsi.1051887 up up
 #lsi.1051888 up up
+#lsi.1051889 up up
 #me0 up up
 #me0.0 up up
 #mtun up up
Index: configs/core1.nor.onenet.net
===================================================================
--- configs/core1.nor.onenet.net	(revision 135574)
+++ configs/core1.nor.onenet.net	(working copy)
@@ -587,7 +587,6 @@
 #lsi.1055026 up up
 #lsi.1055029 up up
 #lsi.1055030 up up
-#lsi.1055033 up up
 #lsi.1055035 up up
 #lsi.1055036 up up
 #lsi.1055038 up up
@@ -605,6 +604,7 @@
 #lsi.1055054 up up
 #lsi.1055055 up up
 #lsi.1055056 up up
+#lsi.1055057 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/acx.owtccla.onenet.net
===================================================================
--- configs/acx.owtccla.onenet.net	(revision 133629)
+++ configs/acx.owtccla.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OWTC-CLAYTON-ACX4000> show system commit 
+#   2015-10-08 10:21:30 CDT by sky via cli commit confirmed, rollback in 3mins
 #   2015-09-04 15:58:08 CDT by andrew via cli
 #   2015-09-04 15:47:52 CDT by andrew via cli commit confirmed, rollback in 3mins
 #   2015-09-02 20:56:01 CDT by andrew via cli
 #   2015-09-02 20:51:54 CDT by andrew via cli
 #   2015-09-01 23:17:27 CDT by andrew via cli commit confirmed, rollback in 3mins
-#   2015-09-01 17:37:43 CDT by andrew via cli
 # grnoc-mon at OWTC-CLAYTON-ACX4000> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -184,7 +184,7 @@
 # grnoc-mon at OWTC-CLAYTON-ACX4000> show system uptime 
 # System booted: 2015-09-01 15:57 CDT 
 # Protocols started: 2015-09-01 15:58 CDT 
-# Last configured: 2015-09-04 15:58 CDT  by andrew
+# Last configured: 2015-10-08 10:21 CDT  by sky
 # 
 # grnoc-mon at OWTC-CLAYTON-ACX4000> show interface terse 
 #Interface Admin Link
@@ -246,7 +246,7 @@
 #pime up up
 #tap up up
 # grnoc-mon at OWTC-CLAYTON-ACX4000> show configuration 
-## Last commit: 2015-09-04 15:58:08 CDT by andrew
+## Last commit: 2015-10-08 10:21:30 CDT by sky
 version 12.3X54-D15.3;
 system {
     host-name OWTC-CLAYTON-ACX4000;
@@ -705,6 +705,21 @@
                 description TUL-CORE6-IBGP-V4;
             }
         }
+        group EBGP-OWTC-V4 {
+            type external;
+            accept-remote-nexthop;
+            family inet {
+                unicast;
+            }
+            neighbor 156.110.39.174 {
+                description "EBGP-OWTC-V4-CIR000XXXX [NO-MONITOR]";
+                import EBGP-OWTC-V4-IMPORT;
+#                authentication-key <removed>;
+                export EBGP-OWTC-V4-EXPORT;
+                remove-private;
+                peer-as 64514;
+            }
+        }
     }
     ospf {
         reference-bandwidth 100g;
@@ -771,6 +786,184 @@
     }
 }
 policy-options {
+    prefix-list EBGP-OWTC-V4-PREFIXES {
+        216.198.188.0/22;
+    }
+    policy-statement COMMODITY-PREFIXES-LIST {
+        term PREFIXES {
+            from {
+                route-filter 64.112.240.0/20 exact;
+                route-filter 66.186.144.0/20 exact;
+                route-filter 129.15.0.0/16 exact;
+                route-filter 129.15.0.0/17 exact;
+                route-filter 129.15.128.0/17 exact;
+                route-filter 129.244.0.0/16 exact;
+                route-filter 129.244.0.0/17 exact;
+                route-filter 129.244.128.0/17 exact;
+                route-filter 139.78.0.0/16 exact;
+                route-filter 152.123.8.0/21 exact;
+                route-filter 155.178.0.0/16 exact;
+                route-filter 155.178.32.0/23 exact;
+                route-filter 155.178.34.0/24 exact;
+                route-filter 156.110.0.0/16 exact;
+                route-filter 156.110.144.0/20 exact;
+                route-filter 156.110.240.0/20 exact;
+                route-filter 157.142.0.0/16 exact;
+                route-filter 162.58.0.0/16 exact;
+                route-filter 164.58.0.0/16 exact;
+                route-filter 174.77.146.0/24 exact;
+                route-filter 192.31.83.0/24 exact;
+                route-filter 192.35.96.0/24 exact;
+                route-filter 192.35.97.0/24 exact;
+                route-filter 192.35.98.0/24 exact;
+                route-filter 192.78.4.0/24 exact;
+                route-filter 192.135.141.0/24 exact;
+                route-filter 192.146.206.0/24 exact;
+                route-filter 192.149.244.0/24 exact;
+                route-filter 192.150.147.0/24 exact;
+                route-filter 192.153.53.0/24 exact;
+                route-filter 192.173.32.0/19 orlonger;
+                route-filter 192.173.49.0/24 exact;
+                route-filter 192.198.4.0/22 exact;
+                route-filter 192.203.164.0/24 exact;
+                route-filter 192.206.65.0/24 exact;
+                route-filter 192.231.56.0/24 exact;
+                route-filter 192.234.12.0/24 exact;
+                route-filter 192.234.13.0/24 exact;
+                route-filter 198.11.4.0/24 exact;
+                route-filter 198.11.5.0/24 exact;
+                route-filter 198.11.6.0/24 exact;
+                route-filter 198.11.7.0/24 exact;
+                route-filter 198.17.223.0/24 exact;
+                route-filter 198.102.159.0/24 exact;
+                route-filter 198.178.194.0/24 exact;
+                route-filter 198.183.248.0/23 exact;
+                route-filter 198.187.154.0/24 exact;
+                route-filter 198.204.126.0/24 exact;
+                route-filter 199.27.8.0/21 exact;
+                route-filter 199.38.147.0/24 exact;
+                route-filter 199.120.0.0/21 exact;
+                route-filter 199.120.8.0/22 exact;
+                route-filter 199.164.253.0/24 exact;
+                route-filter 199.181.88.0/24 exact;
+                route-filter 199.181.89.0/24 exact;
+                route-filter 199.181.90.0/24 exact;
+                route-filter 199.181.91.0/24 exact;
+                route-filter 199.184.200.0/24 exact;
+                route-filter 199.184.201.0/24 exact;
+                route-filter 199.184.202.0/24 exact;
+                route-filter 199.184.203.0/24 exact;
+                route-filter 199.190.128.0/23 exact;
+                route-filter 199.245.163.0/24 exact;
+                route-filter 199.245.164.0/24 exact;
+                route-filter 199.245.165.0/24 exact;
+                route-filter 199.245.166.0/24 exact;
+                route-filter 199.248.134.0/23 exact;
+                route-filter 199.253.0.0/21 exact;
+                route-filter 199.253.8.0/24 exact;
+                route-filter 199.253.9.0/24 exact;
+                route-filter 204.29.164.0/24 exact;
+                route-filter 204.61.0.0/21 exact;
+                route-filter 204.61.8.0/22 exact;
+                route-filter 204.61.12.0/23 exact;
+                route-filter 204.62.16.0/21 exact;
+                route-filter 204.62.24.0/22 exact;
+                route-filter 204.63.216.0/21 exact;
+                route-filter 204.63.222.0/24 orlonger;
+                route-filter 204.87.64.0/18 exact;
+                route-filter 204.107.242.0/24 exact;
+                route-filter 204.108.2.0/23 exact;
+                route-filter 204.108.2.0/24 exact;
+                route-filter 204.108.3.0/24 exact;
+                route-filter 204.126.138.0/23 exact;
+                route-filter 204.126.144.0/23 exact;
+                route-filter 204.126.162.0/23 exact;
+                route-filter 204.126.186.0/23 exact;
+                route-filter 204.126.188.0/24 exact;
+                route-filter 204.126.189.0/24 exact;
+                route-filter 204.126.190.0/24 exact;
+                route-filter 204.126.191.0/24 exact;
+                route-filter 204.154.112.0/21 exact;
+                route-filter 204.236.32.0/19 exact;
+                route-filter 205.143.216.0/21 exact;
+                route-filter 205.153.220.0/22 exact;
+                route-filter 205.235.88.0/23 exact;
+                route-filter 206.61.156.0/24 exact;
+                route-filter 206.202.192.0/18 exact;
+                route-filter 206.202.208.0/23 exact;
+                route-filter 206.202.208.0/24 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EBGP-OWTC-V4-EXPORT {
+        term EXPORT-INTERNAL {
+            from policy COMMODITY-PREFIXES-LIST;
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EBGP-OWTC-V4-IMPORT {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term CHECK-BLACKHOLE-LENGTH {
+            from {
+                community ONENET_BLACKHOLE;
+                route-filter 0.0.0.0/0 prefix-length-range /24-/32;
+            }
+            then next term;
+        }
+        term ACCEPT-BLACKHOLE {
+            from {
+                community ONENET_BLACKHOLE;
+                prefix-list-filter EBGP-OWTC-V4-PREFIXES orlonger;
+            }
+            then {
+                community set ONENET_BLACKHOLE;
+                community add ONENET_PEER_OWTC;
+                next-hop 192.0.2.1;
+                accept;
+            }
+        }
+        term REJECT-25-ORLONGER {
+            from {
+                route-filter 0.0.0.0/0 prefix-length-range /25-/32;
+            }
+            then reject;
+        }
+        term DELETE-PROHIBITED-COMMUNITIES {
+            from {
+                prefix-list-filter EBGP-OWTC-V4-PREFIXES orlonger;
+            }
+            then {
+                community delete NON_ONENET;
+                community delete ONENET_ENGINEERING;
+                next term;
+            }
+        }
+        term ACCEPT-ROUTES {
+            from {
+                prefix-list-filter EBGP-OWTC-V4-PREFIXES orlonger;
+            }
+            then {
+                community add ONENET_SRC_PEER;
+                community add ONENET_PEER_OWTC;
+                accept;
+            }
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
     policy-statement LOAD-BALANCE {
         then {
             load-balance per-packet;
@@ -833,7 +1026,15 @@
         }
     }
     community CLAYTON members 5078:9136;
+    community NON_ONENET {
+        invert-match;
+        members 5078:*;
+    }
     community ONENET-MGMT-VPN members target:5078:2543;
+    community ONENET_BLACKHOLE members 5078:911;
+    community ONENET_ENGINEERING members "5078:[023456789].*";
+    community ONENET_PEER_OWTC members 5078:64514;
+    community ONENET_SRC_PEER members 5078:4200;
 }
 firewall {
     family inet {
@@ -874,6 +1075,7 @@
                     source-address {
                         164.58.199.226/32;
                         164.58.199.216/32;
+                        156.110.39.174/32;
                     }
                     protocol tcp;
                     source-port bgp;
@@ -885,6 +1087,7 @@
                     source-address {
                         164.58.199.226/32;
                         164.58.199.216/32;
+                        156.110.39.174/32;
                     }
                     protocol tcp;
                     destination-port bgp;
Index: configs/core.dun.onenet.net
===================================================================
--- configs/core.dun.onenet.net	(revision 135569)
+++ configs/core.dun.onenet.net	(working copy)
@@ -374,13 +374,13 @@
 #lsi.1053500 up up
 #lsi.1053501 up up
 #lsi.1053502 up up
-#lsi.1053504 up up
 #lsi.1053506 up up
 #lsi.1053509 up up
 #lsi.1053510 up up
 #lsi.1053512 up up
 #lsi.1053513 up up
 #lsi.1053515 up up
+#lsi.1053516 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 135574)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -512,8 +512,8 @@
 #ge-1/0/4.0 up up
 #ge-1/0/5 up down
 #ge-1/0/5.0 up down
-#ge-1/0/6 up up
-#ge-1/0/6.0 up up
+#ge-1/0/6 up down
+#ge-1/0/6.0 up down
 #ge-1/0/7 up down
 #ge-1/0/7.0 up down
 #ge-1/0/8 up up



More information about the Nocrancid mailing list