[Nocrancid] autopop-onenet.net/swi.cai.dun.onenet.net[0] router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri Sep 11 03:21:53 CDT 2015


Index: configs/core.woo.onenet.net
===================================================================
--- configs/core.woo.onenet.net	(revision 11105)
+++ configs/core.woo.onenet.net	(working copy)
@@ -1,1511 +0,0 @@
-# RANCID-CONTENT-TYPE: juniper
-#
-# grnoc-mon at WOODWARD-MX480-RE0> show system commit 
-#   2015-08-05 14:39:10 CDT by swaters via cli commit synchronize
-#   2015-08-05 13:18:27 CDT by sky via cli commit synchronize
-#   2015-07-10 12:50:17 CDT by sky via cli commit synchronize
-#   2015-07-06 14:49:46 CDT by sky via cli commit synchronize
-#   2015-06-23 13:50:32 CDT by ianl via cli commit synchronize
-#   2015-05-06 14:21:06 CDT by sky via cli commit synchronize
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis environment 
-# Class Item                           Status     Measurement
-# Temp  PEM 0                          OK        
-#       PEM 1                          OK        
-#       PEM 2                          OK        
-#       PEM 3                          OK        
-#       Routing Engine 0               OK        
-#       Routing Engine 0 CPU           OK        
-#       Routing Engine 1               OK        
-#       Routing Engine 1 CPU           OK        
-#       CB 0 Intake                    OK        
-#       CB 0 Exhaust A                 OK        
-#       CB 0 Exhaust B                 OK        
-#       CB 0 ACBC                      OK        
-#       CB 0 XF A                      OK        
-#       CB 0 XF B                      OK        
-#       CB 1 Intake                    OK        
-#       CB 1 Exhaust A                 OK        
-#       CB 1 Exhaust B                 OK        
-#       CB 1 ACBC                      OK        
-#       CB 1 XF A                      OK        
-#       CB 1 XF B                      OK        
-#       FPC 0 Intake                   OK        
-#       FPC 0 Exhaust A                OK        
-#       FPC 0 Exhaust B                OK        
-#       FPC 0 QX 0 TSen                OK        
-#       FPC 0 QX 0 Chip                OK        
-#       FPC 0 LU 0 TCAM TSen           OK        
-#       FPC 0 LU 0 TCAM Chip           OK        
-#       FPC 0 LU 0 TSen                OK        
-#       FPC 0 LU 0 Chip                OK        
-#       FPC 0 MQ 0 TSen                OK        
-#       FPC 0 MQ 0 Chip                OK        
-#       FPC 0 QX 1 TSen                OK        
-#       FPC 0 QX 1 Chip                OK        
-#       FPC 0 LU 1 TCAM TSen           OK        
-#       FPC 0 LU 1 TCAM Chip           OK        
-#       FPC 0 LU 1 TSen                OK        
-#       FPC 0 LU 1 Chip                OK        
-#       FPC 0 MQ 1 TSen                OK        
-#       FPC 0 MQ 1 Chip                OK        
-# Fans  Top Rear Fan                   OK
-#       Bottom Rear Fan                OK
-#       Top Middle Fan                 OK
-#       Bottom Middle Fan              OK
-#       Top Front Fan                  OK
-#       Bottom Front Fan               OK
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis firmware 
-# Part                     Type       Version
-# FPC 0                    ROM        Juniper ROM Monitor Version 11.4b2         
-#                          O/S        Version 12.3R7.7 by builder on 2014-06-12 1
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis fpc detail 
-# Slot 0 information:
-#   State                                 Online    
-#   Total CPU DRAM                   2048 MB
-#   Total RLDRAM                      806 MB
-#   Total DDR DRAM                   3144 MB
-#   Max Power Consumption             368 Watts
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis hardware 
-# Hardware inventory:
-# Item             Version  Part number  Serial number     Description
-# Chassis                                JN1201769AFB      MX480 Midplane
-# Midplane         REV 05   710-017414   ACAB5794          MX480 Midplane
-# FPM Board        REV 02   710-017254   ABBS1770          Front Panel Display
-# PEM 0            Rev 06   740-029970   QCS1039U0BJ       PS 1.4-2.52kW; 90-264V AC in
-# PEM 1            Rev 10   740-029970   QCS1414U0N6       PS 1.4-2.52kW; 90-264V AC in
-# PEM 2            Rev 09   740-029970   QCS1213U0PZ       PS 1.4-2.52kW; 90-264V AC in
-# PEM 3            Rev 09   740-029970   QCS1213U0JR       PS 1.4-2.52kW; 90-264V AC in
-# Routing Engine 0 REV 17   740-013063   9012028906        RE-S-2000
-# Routing Engine 1 REV 17   740-013063   9012029000        RE-S-2000
-# CB 0             REV 14   750-031391   ABBS3898          Enhanced MX SCB
-# CB 1             REV 14   750-031391   ABBS3878          Enhanced MX SCB
-# FPC 0            REV 09   750-038493   ZZ6510            MPCE Type 2 3D Q
-#   CPU            REV 04   711-038484   CAAE2697          MPCE PMB 2G 
-#   MIC 0          REV 26   750-028387   ABBV6204          3D 4x 10GE  XFP
-#     PIC 0                 BUILTIN      BUILTIN           2x 10GE  XFP
-#       Xcvr 0     REV 01   740-031833   UL40W22           XFP-10G-LR
-#       Xcvr 1     REV 03   740-014289   T13J87547         XFP-10G-SR
-#     PIC 1                 BUILTIN      BUILTIN           2x 10GE  XFP
-#       Xcvr 1     REV 01   740-031833   UL515NJ           XFP-10G-LR
-#   MIC 1          REV 26   750-028392   ABBV0311          3D 20x 1GE(LAN) SFP
-#     PIC 2                 BUILTIN      BUILTIN           10x 1GE(LAN) SFP
-#       Xcvr 0     REV 01   740-031851   AC1108S03WK       SFP-SX
-#       Xcvr 1     REV 01   740-031850   PM24CM5           SFP-LX10
-#       Xcvr 3     REV 02   740-013111   D444791           SFP-T
-#       Xcvr 8     REV 02   740-013111   B436543           SFP-T
-#       Xcvr 9     REV 02   740-013111   D443658           SFP-T
-#     PIC 3                 BUILTIN      BUILTIN           10x 1GE(LAN) SFP
-#       Xcvr 3     REV 02   740-013111   D446391           SFP-T
-#       Xcvr 5     REV 02   740-013111   D446017           SFP-T
-#       Xcvr 7     REV 02   740-013111   A476573           SFP-T
-#       Xcvr 9     REV 02   740-013111   B436478           SFP-T
-#   QXM 0          REV 06   711-028408   CAAE4954          MPC QXM
-#   QXM 1          REV 06   711-028408   CAAE4772          MPC QXM
-# Fan Tray                                                 Enhanced Left Fan Tray
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis hardware models 
-# Hardware inventory:
-# Item             Version  Part number  Serial number     FRU model number
-# Midplane         REV 05   710-017414   ACAB5794          CHAS-BP-MX480-S
-# FPM Board        REV 02   710-017254   ABBS1770          CRAFT-MX480-S
-# PEM 0            Rev 06   740-029970   QCS1039U0BJ       PWR-MX480-2520-AC-S
-# PEM 1            Rev 10   740-029970   QCS1414U0N6       PWR-MX480-2520-AC-S
-# PEM 2            Rev 09   740-029970   QCS1213U0PZ       PWR-MX480-2520-AC-S
-# PEM 3            Rev 09   740-029970   QCS1213U0JR       PWR-MX480-2520-AC-S
-# Routing Engine 0 REV 17   740-013063   9012028906        RE-S-2000-4096-S
-# Routing Engine 1 REV 17   740-013063   9012029000        RE-S-2000-4096-S
-# CB 0             REV 14   750-031391   ABBS3898          SCBE-MX-S
-# CB 1             REV 14   750-031391   ABBS3878          SCBE-MX-S
-# FPC 0            REV 09   750-038493   ZZ6510            MX-MPC2E-3D-Q
-#   MIC 0          REV 26   750-028387   ABBV6204          MIC-3D-4XGE-XFP
-#   MIC 1          REV 26   750-028392   ABBV0311          MIC-3D-20GE-SFP
-# Fan Tray                                                 FFANTRAY-MX480-HC-S
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis routing-engine 
-# Routing Engine status:
-#   Slot 0:
-#     Current state                  Master
-#     Election priority              Master
-#     DRAM                      3584 MB (3584 MB installed)
-#     Serial ID                      9012028906
-# Routing Engine status:
-#   Slot 1:
-#     Current state                  Backup
-#     Election priority              Backup
-#     DRAM                      3584 MB (3584 MB installed)
-#     Serial ID                      9012029000
-# 
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis scb 
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis sfm detail 
-# grnoc-mon at WOODWARD-MX480-RE0> show chassis ssb 
-# grnoc-mon at WOODWARD-MX480-RE0> show system boot-messages 
-# Copyright (c) 1996-2014, Juniper Networks, Inc.
-# All rights reserved.
-# Copyright (c) 1992-2006 The FreeBSD Project.
-# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
-# 	The Regents of the University of California. All rights reserved.
-# Timecounter "i8254" frequency 1193182 Hz quality 0
-# CPU: Intel(R) Pentium(R) M processor 2.00GHz (1995.01-MHz 686-class CPU)
-#   Origin = "GenuineIntel"  Id = 0x6d8  Stepping = 8
-#   Features=0xafe9fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,PBE>
-#   Features2=0x180<EST,TM2>
-#   AMD Features=0x100000<NX>
-# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
-# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
-# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
-# MAC/veriexec fingerprint module loaded: SHA256
-# MAC/veriexec fingerprint module loaded: SHA1
-# Initializing M/T/EX platform properties ..
-# cpu0 on motherboard
-# DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
-# pcib0: <Intel E7320 (MCH D0:F0) Host to PCI bridge> pcibus 0 on motherboard
-# pir0: <PCI Interrupt Routing Table: 13 Entries> on motherboard
-# pci0: <PCI bus> on pcib0
-# pci0: <unknown> at device 0.1 (no driver attached)
-# pcib1: <PCIBIOS PCI-PCI bridge> irq 10 at device 2.0 on pci0
-# pci2: <PCI bus> on pcib1
-# em0: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xcc00-0xcc1f mem 0xfe8e0000-0xfe8fffff irq 10 at device 0.0 on pci2
-# pcib2: <PCIBIOS PCI-PCI bridge> irq 10 at device 3.0 on pci0
-# pci3: <PCI bus> on pcib2
-# em1: <Intel(R) PRO/1000 Network Connection Version - 3.2.18> port 0xdc00-0xdc1f mem 0xfe9e0000-0xfe9fffff irq 10 at device 0.0 on pci3
-# pcib3: <PCI-PCI bridge> at device 28.0 on pci0
-# pci4: <PCI bus> on pcib3
-# acb0: <Atlas Enhanced Control Subsystem> mem 0xfeaffc00-0xfeafffff irq 12 at device 13.0 on pci4
-# acb0: acb: softc at 0xc7b3cd00, fpga regs at 0xf999bc00
-# spi: zl30143 clock initialized to 19.44 MHz
-# spi: zl30130 clock module initialized
-# pci4: <network> at device 14.0 (no driver attached)
-# uhci0: <Intel 6300ESB USB controller USB-A> port 0xec00-0xec1f irq 10 at device 29.0 on pci0
-# usb0: <Intel 6300ESB USB controller USB-A> on uhci0
-# usb0: USB revision 1.0
-# uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
-# uhub0: 2 ports with 2 removable, self powered
-# pci0: <base peripheral> at device 29.4 (no driver attached)
-# pci0: <base peripheral, interrupt controller> at device 29.5 (no driver attached)
-# pcib4: <PCIBIOS PCI-PCI bridge> at device 30.0 on pci0
-# pci1: <PCI bus> on pcib4
-# fxp0: <Intel 82559ER Embedded 10/100 Ethernet> port 0xbc00-0xbc3f mem 0xfe7ff000-0xfe7fffff,0xfe7c0000-0xfe7dffff irq 10 at device 0.0 on pci1
-# isab0: <PCI-ISA bridge> at device 31.0 on pci0
-# isa0: <ISA bus> on isab0
-# atapci0: <Intel 6300ESB SATA150 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.2 on pci0
-# ata0: <ATA channel 0> on atapci0
-# ata1: <ATA channel 1> on atapci0
-# ichsmb0: <Intel 6300ESB (ICH) SMBus controller> port 0x540-0x55f irq 10 at device 31.3 on pci0
-# orm0: <ISA Option ROMs> at iomem 0xc8000-0xc8fff,0xc9000-0xc9fff on isa0
-# atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
-# atkbd0: <AT Keyboard> irq 1 on atkbdc0
-# kbd0 at atkbd0
-# vga0: <Generic ISA VGA> at port 0x3b0-0x3bb iomem 0xb0000-0xb7fff on isa0
-# sc0: <System console> at flags 0x100 on isa0
-# sc0: MDA <16 virtual consoles, flags=0x100>
-# sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0
-# sio0: type 16550A, console
-# sio1 at port 0x3e8-0x3ef irq 5 on isa0
-# sio1: type 16550A
-# sio2 at port 0x2f8-0x2ff irq 3 on isa0
-# sio2: type 16550A
-# sio3 at port 0x2e8-0x2ef irq 7 on isa0
-# sio3: type 16550A
-# virtual chassis member-id = 255
-# virtual chassis mode      = 0
-# Initializing product: 33 ..
-# Setting up M/T interface operations and attributes
-# bmeb: bmeb_lib_init done 0xc7bd0000, addr 0xc0e2c1e0
-# fxp0: Ethernet address 00:a0:a5:77:45:33
-# em1: bus=3, device=0, func=0, Ethernet address 02:00:01:00:00:04
-# em0: bus=2, device=0, func=0, Ethernet address 02:00:00:00:00:04
-# acb: acb_late_attach: Initializing silabs clocks to drive 8727 external phy
-# ###PCB Group initialized for udppcbgroup
-# ###PCB Group initialized for tcppcbgroup
-# ad0: Device does not support APM
-# ad0: 999MB <SILICONSYSTEMS INC 1GB V2.27d> at ata0-master WDMA2
-# ad2: 38154MB <Seagate ST940817SM 3.AAB> at ata1-master SATA150
-# Kernel thread "wkupdaemon" (pid 48) exited prematurely.
-# Trying to mount root from ufs:/dev/ad0s1a
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show version 
-# Hostname: WOODWARD-MX480-RE0 # Model: mx480 # JUNOS Base OS boot [12.3R7.7] # JUNOS Base OS Software Suite [12.3R7.7] # JUNOS Kernel Software Suite [12.3R7.7] # JUNOS Crypto Software Suite [12.3R7.7] # JUNOS Packet Forwarding Engine Support (M/T/EX Common) [12.3R7.7] # JUNOS Packet Forwarding Engine Support (MX Common) [12.3R7.7] # JUNOS Online Documentation [12.3R7.7] # JUNOS Services AACL Container package [12.3R7.7] # JUNOS Services Application Level Gateways [12.3R7.7] # JUNOS AppId Services [12.3R7.7] # JUNOS Border Gateway Function package [12.3R7.7] # JUNOS Services Captive Portal and Content Delivery Container package [12.3R7.7] # JUNOS Services HTTP Content Management package [12.3R7.7] # JUNOS IDP Services [12.3R7.7] # JUNOS Services LL-PDF Container package [12.3R7.7] # JUNOS Services NAT [12.3R7.7] # JUNOS Services PTSP Container package [12.3R7.7] # JUNOS Services RPM [12.3R7.7] # JUNOS Services Stateful Firewall [12.3R7.7] # JUNOS Voice Services Container pa!
 ckage [12.3R7.7] # JUNOS Services Example Container package [12.3R7.7] # JUNOS Services Crypto [12.3R7.7] # JUNOS Services SSL [12.3R7.7] # JUNOS Services IPSec [12.3R7.7] # JUNOS Runtime Software Suite [12.3R7.7] # JUNOS platform Software Suite [12.3R7.7] # JUNOS Routing Software Suite [12.3R7.7] #  # {master} # grnoc-mon at WOODWARD-MX480-RE0> file list /var/tmp detail # 
-# /var/tmp:
-# total blocks: 4129500
-# -rwxr-xr-x  1 root  field      19312 Jul 11  2012 Woodward.txt*
-# -rw-r--r--  1 root  field         30 Jun 23  2012 ex.txt
-# drwxr-xr-x  2 root  field        512 Jun 23  2012 gres-tp/
-# -rw-r--r--  1 root  field          4 Sep 17  2014 idp_license_info
-# drwxrwxrwx  2 root  wheel        512 Jul 11  2012 install/
-# -rw-r--r--  1 root  field  421204768 Jul 11  2012 jinstall-11.4R4.4-domestic-signed.tgz
-# -rw-r--r--  1 eng   field  421523837 Jun 5   2013 jinstall-11.4R7.5-domestic-signed.tgz
-# -rw-r--r--  1 upgrades field 501460114 Aug 9   2014 jinstall-12.3R7.7-domestic-signed.tgz
-# -rw-r-----  1 upgrades field 761003758 May 22 22:45 jinstall-13.3R6.5-domestic-signed.tgz
-# -rw-r--r--  1 root  field    8404168 Jul 11  2012 jweb-11.4R4.4-signed.tgz
-# -rw-r--r--  1 root  field        155 Sep 19  2013 krt_gencfg_filter.txt
-# drwxrwxrwx  2 root  wheel        512 Jul 11  2012 pics/
-# -r--r--r--  1 root  field        499 Sep 17  2014 preinstall_boot_loader.conf
-# drwxr-xr-x  2 root  field        512 Jun 23  2012 rtsdb/
-# -rw-r-----  1 root  field       1068 Sep 17  2014 sampled.pkts
-# drwxr-xr-x  3 root  field        512 Jun 23  2012 sec-download/
-# drwxrwxrwt  2 root  wheel        512 Jun 23  2012 vi.recover/
-# total files: 11
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show system uptime 
-# System booted: 2014-09-17 01:10 CDT 
-# Protocols started: 2014-09-17 01:11 CDT 
-# Last configured: 2015-08-05 14:39 CDT  by swaters
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show interface terse 
-#Interface Admin Link
-#lc-0/0/0 up up
-#lc-0/0/0.32769 up up
-#pfe-0/0/0 up up
-#pfe-0/0/0.16383 up up
-#pfh-0/0/0 up up
-#pfh-0/0/0.16383 up up
-#xe-0/0/0 up up
-#xe-0/0/0.69 up up
-#xe-0/0/0.32767 up up
-#xe-0/0/1 up up
-#xe-0/0/1.0 up up
-#xe-0/1/0 down down
-#xe-0/1/1 down down
-#ge-0/2/0 up up
-#ge-0/2/0.0 up up
-#lc-0/2/0 up up
-#lc-0/2/0.32769 up up
-#pfe-0/2/0 up up
-#pfe-0/2/0.16383 up up
-#ge-0/2/1 up up
-#ge-0/2/1.250 up up
-#ge-0/2/1.3907 up up
-#ge-0/2/1.32767 up up
-#ge-0/2/2 down down
-#ge-0/2/2.250 up down
-#ge-0/2/2.3910 up down
-#ge-0/2/2.32767 up down
-#ge-0/2/3 up up
-#ge-0/2/3.0 up up
-#ge-0/2/4 down down
-#ge-0/2/5 down down
-#ge-0/2/6 down down
-#ge-0/2/7 down down
-#ge-0/2/8 up up
-#ge-0/2/8.0 up up
-#ge-0/2/9 up up
-#ge-0/2/9.0 up up
-#ge-0/3/0 down down
-#ge-0/3/1 down down
-#ge-0/3/2 down down
-#ge-0/3/3 up up
-#ge-0/3/3.0 up up
-#ge-0/3/4 down down
-#ge-0/3/5 up up
-#ge-0/3/5.0 up up
-#ge-0/3/6 down down
-#ge-0/3/6.0 up down
-#ge-0/3/7 up up
-#ge-0/3/7.0 up up
-#ge-0/3/8 down down
-#ge-0/3/8.0 up down
-#ge-0/3/9 up up
-#ge-0/3/9.0 up up
-#cbp0 up up
-#demux0 up up
-#dsc up up
-#em0 up up
-#em0.0 up up
-#em1 up up
-#em1.0 up up
-#fxp0 down down
-#fxp0.0 up down
-#gre up up
-#ipip up up
-#irb up up
-#lo0 up up
-#lo0.0 up up
-#lo0.16384 up up
-#lo0.16385 up up
-#lsi up up
-#lsi.1075566 up up
-#lsi.1075568 up up
-#lsi.1075606 up up
-#lsi.1075699 up up
-#lsi.1075876 up up
-#lsi.1075906 up up
-#lsi.1075959 up up
-#lsi.1075995 up up
-#lsi.1075998 up up
-#lsi.1076004 up up
-#lsi.1076016 up up
-#lsi.1076030 up up
-#lsi.1076033 up up
-#lsi.1076035 up up
-#lsi.1076037 up up
-#lsi.1076039 up up
-#lsi.1076040 up up
-#lsi.1076041 up up
-#lsi.1076042 up up
-#lsi.1076043 up up
-#lsi.1076044 up up
-#lsi.1076045 up up
-#mtun up up
-#pimd up up
-#pime up up
-#pip0 up up
-#pp0 up up
-#tap up up
-# grnoc-mon at WOODWARD-MX480-RE0> show configuration 
-## Last commit: 2015-08-05 14:39:10 CDT by swaters
-version 12.3R7.7;
-groups {
-    re0 {
-        system {
-            host-name WOODWARD-MX480-RE0;
-            backup-router 172.25.46.1;
-        }
-        interfaces {
-            fxp0 {
-                unit 0 {
-                    family inet {
-                        address 172.25.46.182/24;
-                    }
-                }
-            }
-        }
-    }
-    re1 {
-        system {
-            host-name WOODWARD-MX480-RE1;
-            backup-router 172.25.46.1;
-        }
-        interfaces {
-            fxp0 {
-                unit 0 {
-                    family inet {
-                        address 172.25.46.183/24;
-                    }
-                }
-            }
-        }
-    }
-}
-apply-groups [ re0 re1 ];
-system {
-    domain-name onenet.net;
-    time-zone America/Chicago;
-    authentication-order [ radius password ];
-    root-authentication {
-#        encrypted-password <removed>;
-    }
-    name-server {
-        164.58.253.10;
-        164.58.198.10;
-    }
-    radius-server {
-        156.110.31.11 {
-            port 1812;
-            accounting-port 1813;
-#            secret "<removed>"; ## SECRET-DATA
-            source-address 164.58.199.59;
-        }
-    }
-    login {
-        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
-        class admin {
-            idle-timeout 1440;
-            permissions all;
-        }
-        class lockdown {
-            idle-timeout 2;
-            permissions view;
-            deny-commands .*;
-            deny-configuration .*;
-        }
-        class operator-local {
-            idle-timeout 15;
-            permissions [ access admin configure firewall interface network routing snmp system trace view ];
-            allow-commands "show log messages";
-        }
-        class robot {
-            idle-timeout 10;
-            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
-        }
-        user admin {
-            uid 1000;
-            class super-user;
-            authentication {
-#                encrypted-password <removed>;
-            }
-        }
-        user eng {
-            uid 2018;
-            class admin;
-        }
-        user rancid {
-            uid 2001;
-            class robot;
-        }
-        user remote {
-            uid 2002;
-            class operator-local;
-        }
-        user upgrades {
-            uid 2003;
-            class operator;
-            authentication {
-#                ssh-rsa <removed>;
-            }
-        }
-    }
-    services {
-        ftp;
-        ssh {
-            root-login deny;
-            protocol-version v2;
-            max-sessions-per-connection 32;
-        }
-        netconf {
-            ssh;
-        }
-        web-management {
-            http;
-        }
-    }
-    syslog {
-        archive size 10m files 20;
-        user * {
-            any emergency;
-        }
-        host 164.58.253.92 {
-            any any;
-        }
-        host 164.58.253.38 {
-            any any;
-        }
-        file messages {
-            any notice;
-            authorization info;
-            match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
-        }
-        file interactive-commands {
-            interactive-commands any;
-        }
-        file PROTECT-RE {
-            firewall any;
-            archive no-world-readable;
-        }
-        file default-log-messages {
-            any info;
-            match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|CFMD_CCM_DEFECT| LFMD_3AH | RPD_MPLS_PATH_BFD|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)";
-            structured-data;
-        }
-        file updown {
-            any any;
-            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
-        }
-        source-address 164.58.199.59;
-    }
-    commit synchronize;
-    ntp {
-        server 164.58.3.98 prefer;
-    }
-}
-chassis {
-    redundancy {
-        routing-engine 0 master;
-        routing-engine 1 backup;
-        failover {
-            on-loss-of-keepalives;
-            on-disk-failure;
-        }
-        graceful-switchover;
-    }
-    routing-engine {
-        on-disk-failure disk-failure-action reboot;
-    }
-    fpc 0 {
-        sampling-instance JFLOW-1;
-    }
-    fpc 1 {
-        sampling-instance JFLOW-1;
-    }
-    fpc 2 {
-        sampling-instance JFLOW-1;
-    }
-    fpc 3 {
-        sampling-instance JFLOW-1;
-    }
-    fpc 4 {
-        sampling-instance JFLOW-1;
-    }
-    fpc 5 {
-        sampling-instance JFLOW-1;
-    }
-}
-services {
-    flow-monitoring {
-        version-ipfix {
-            template ipv4 {
-                flow-active-timeout 60;
-                flow-inactive-timeout 60;
-                ipv4-template;
-            }
-        }
-    }
-}
-security {
-    ipsec {
-        security-association OneNet-OSPF3-AUTH {
-            mode transport;
-            manual {
-                direction bidirectional {
-                    protocol ah;
-                    spi 256;
-                    authentication {
-                        algorithm hmac-md5-96;
-                        key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
-                    }
-                }
-            }
-        }
-    }
-}
-interfaces {
-    xe-0/0/0 {
-        description "CORE 10GE to core.okc2 xe-2/0/1 | OneNet-OKC-WOO-XE-5001";
-        vlan-tagging;
-        mtu 9192;
-        encapsulation flexible-ethernet-services;
-        unit 69 {
-            vlan-id 69;
-            family inet {
-                mtu 9000;
-                sampling {
-                    input;
-                }
-                address 164.58.246.74/30;
-            }
-            family inet6 {
-                address 2610:1d8:1100::15/127;
-            }
-            family mpls;
-        }
-    }
-    xe-0/0/1 {
-        description "IPERF - RESERVED [NO-MONITOR]";
-        mtu 9192;
-        unit 0 {
-            family inet {
-                mtu 9000;
-                address 164.58.22.37/30;
-            }
-        }
-    }
-    xe-0/1/0 {
-        disable;
-    }
-    xe-0/1/1 {
-        disable;
-    }
-    ge-0/2/0 {
-        description "CORE 1GE to hub.woo ge-3/2/3 | OneNet-WOO-WOO-GE-5100";
-        mtu 9192;
-        unit 0 {
-            family inet {
-                mtu 9000;
-                sampling {
-                    input;
-                }
-                address 164.58.245.65/30;
-            }
-            family inet6 {
-                address 2610:1d8:4800::/127;
-            }
-            family mpls;
-        }
-    }
-    ge-0/2/1 {
-        vlan-tagging;
-        mtu 9192;
-        unit 250 {
-            description "L2 CORE 1GE to swi.cai.nwosu ge-0/1/0 | OneNet-WOO-CAINWOSU-GE-15448";
-            vlan-id 250;
-            family inet {
-                mtu 9000;
-                sampling {
-                    input;
-                }
-                address 164.58.247.193/30;
-            }
-        }
-        unit 3907 {
-            description HEI-L2-Northwestern-OSU-GE-VLAN3907-CIR000XXXX;
-            vlan-id 3907;
-            family inet {
-                sampling {
-                    input;
-                }
-                address 156.110.59.41/29;
-            }
-        }
-    }
-    ge-0/2/2 {
-        disable;
-        vlan-tagging;
-        mtu 9192;
-        unit 250 {
-            description "L2 CORE 1GE to core.woo ge-0/2/2 | OneNet-WOO-CAIWOO-GE-5256 [ORDERED]";
-            vlan-id 250;
-            family inet {
-                mtu 9000;
-                sampling {
-                    input;
-                }
-                address 164.58.247.213/30;
-            }
-        }
-        unit 3910 {
-            description "L2 Woodward-Hospital-100Mb-VLAN3910-CIR0005257 [ORDERED]";
-            vlan-id 3916;
-            family inet {
-                sampling {
-                    input;
-                }
-                address 156.110.130.37/30;
-            }
-        }
-    }
-    ge-0/2/3 {
-        description "IPERF MGMT - RESERVED [NO-MONITOR]";
-        speed 100m;
-        mtu 9192;
-        encapsulation ethernet-vpls;
-        unit 0 {
-            family vpls;
-        }
-    }
-    ge-0/2/4 {
-        disable;
-    }
-    ge-0/2/5 {
-        disable;
-    }
-    ge-0/2/6 {
-        disable;
-    }
-    ge-0/2/7 {
-        disable;
-    }
-    ge-0/2/8 {
-        description WOODWARD-HIGH-PLAINS-VOTECH-1G-CIR0018875;
-        unit 0 {
-            family inet {
-                sampling {
-                    input;
-                }
-                address 164.58.223.129/25;
-            }
-        }
-    }
-    ge-0/2/9 {
-        description WOODWARD-HIGH-SCHOOL-500Mb-CIR0005865;
-        unit 0 {
-            family inet {
-                policer {
-                    input 500M-POL;
-                    output 500M-POL;
-                }
-                address 156.110.200.109/30;
-            }
-        }
-    }
-    ge-0/3/0 {
-        disable;
-    }
-    ge-0/3/1 {
-        disable;
-    }
-    ge-0/3/2 {
-        disable;
-    }
-    ge-0/3/3 {
-        description "Hub Appliance - Generator - WOO";
-        speed 100m;
-        link-mode full-duplex;
-        gigether-options {
-            no-auto-negotiation;
-        }
-        unit 0 {
-            family inet {
-                sampling {
-                    input;
-                }
-                address 10.10.127.233/30;
-            }
-        }
-    }
-    ge-0/3/4 {
-        description "Hub Appliance - RESERVED [NO-MONITOR]";
-        disable;
-        speed 10m;
-        link-mode full-duplex;
-        gigether-options {
-            no-auto-negotiation;
-        }
-    }
-    ge-0/3/5 {
-        description "Hub Appliance - Camera #1 - WOO";
-        speed 10m;
-        link-mode full-duplex;
-        gigether-options {
-            no-auto-negotiation;
-        }
-        unit 0 {
-            family inet {
-                sampling {
-                    input;
-                }
-                address 10.10.120.73/30;
-            }
-        }
-    }
-    ge-0/3/6 {
-        description "Hub Appliance - Camera #2 - WOO";
-        disable;
-        speed 10m;
-        link-mode full-duplex;
-        gigether-options {
-            no-auto-negotiation;
-        }
-        unit 0 {
-            family inet {
-                sampling {
-                    input;
-                }
-                address 10.10.120.77/30;
-            }
-        }
-    }
-    ge-0/3/7 {
-        description "Hub Appliance - UPS System - WOO";
-        speed 100m;
-        link-mode full-duplex;
-        gigether-options {
-            no-auto-negotiation;
-        }
-        unit 0 {
-            family inet {
-                sampling {
-                    input;
-                }
-                address 10.10.127.81/30;
-            }
-        }
-    }
-    ge-0/3/8 {
-        description "Hub Appliance - DC Power Plant - WOO";
-        disable;
-        speed 100m;
-        link-mode full-duplex;
-        gigether-options {
-            no-auto-negotiation;
-        }
-        unit 0 {
-            family inet {
-                sampling {
-                    input;
-                }
-                address 10.10.125.81/30;
-            }
-        }
-    }
-    ge-0/3/9 {
-        description "Hub Appliance - NetGuardian - WOO";
-        speed 100m;
-        link-mode full-duplex;
-        gigether-options {
-            no-auto-negotiation;
-        }
-        unit 0 {
-            family inet {
-                sampling {
-                    input;
-                }
-                address 10.10.124.81/30;
-            }
-        }
-    }
-    fxp0 {
-        disable;
-        unit 0 {
-            family inet {
-                address 192.168.1.1/24;
-            }
-        }
-    }
-    lo0 {
-        unit 0 {
-            family inet {
-                filter {
-                    input PROTECT-RE;
-                }
-                address 164.58.199.59/32;
-                address 127.0.0.1/32;
-            }
-            family inet6 {
-                address 2610:1d8::164:58:199:59/128;
-            }
-        }
-    }
-}
-snmp {
-    description "NetGroup 1-888-566-3638";
-    location WOODWARD;
-    contact "OneNet Netgroup";
-    client-list snmp-management {
-        156.110.31.0/27;
-        156.110.31.32/28;
-        164.58.253.0/24;
-        0.0.0.0/0 {
-            restrict;
-        }
-    }
-    community "<removed>" {
-        authorization read-only;
-    }
-    community "<removed>" {
-        authorization read-write;
-    }
-    trap-options {
-        source-address 164.58.199.59;
-    }
-    trap-group "<removed>" {
-        version v2;
-        targets {
-            164.58.253.34;
-            164.58.253.35;
-        }
-    }
-}
-forwarding-options {
-    sampling {
-        input {
-            rate 1;
-        }
-        instance {
-            JFLOW-1 {
-                input {
-                    rate 1;
-                }
-                family inet {
-                    output {
-                        flow-inactive-timeout 60;
-                        flow-active-timeout 60;
-                        flow-server 164.58.253.36 {
-                            port 9059;
-                            autonomous-system-type origin;
-                            no-local-dump;
-                            version-ipfix {
-                                template {
-                                    ipv4;
-                                }
-                            }
-                        }
-                        inline-jflow {
-                            source-address 164.58.199.59;
-                        }
-                    }
-                }
-            }
-        }
-    }
-}
-routing-options {
-    nonstop-routing;
-    static {
-        route 164.58.18.224/29 next-hop 156.110.211.220;
-        route 164.58.144.32/27 next-hop 156.110.59.44;
-        route 164.58.222.0/24 next-hop 156.110.200.110;
-        route 192.0.2.1/32 {
-            discard;
-            no-readvertise;
-        }
-    }
-    router-id 164.58.199.59;
-    autonomous-system 5078;
-    forwarding-table {
-        export LOAD-BALANCE;
-    }
-}
-protocols {
-    mpls {
-        interface xe-0/0/0.69;
-        interface lo0.0;
-        interface ge-0/2/0.0;
-    }
-    bgp {
-        group CORE-RR {
-            type internal;
-            local-address 164.58.199.59;
-            family inet {
-                any;
-            }
-            family inet-vpn {
-                any;
-            }
-            family inet6 {
-                unicast;
-            }
-            family inet6-vpn {
-                unicast;
-            }
-            family l2vpn {
-                signaling;
-            }
-            family inet-mvpn {
-                signaling;
-            }
-            family inet6-mvpn {
-                signaling;
-            }
-#            authentication-key <removed>;
-            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
-            peer-as 5078;
-            neighbor 164.58.199.216 {
-                description OKC-CORE6-IBGP;
-            }
-            neighbor 164.58.199.226 {
-                description TUL-CORE6-IBGP;
-            }
-        }
-        group CORE-RR-OKC-V6 {
-            type internal;
-            local-address 2610:1d8::164:58:199:59;
-            family inet6 {
-                any;
-            }
-#            authentication-key <removed>;
-            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
-            peer-as 5078;
-            neighbor 2610:1d8::164:58:199:216 {
-                description OKC-CORE6-IBGP-V6;
-            }
-        }
-        group CORE-RR-TUL-V6 {
-            type internal;
-            local-address 2610:1d8::164:58:199:59;
-            family inet6 {
-                any;
-            }
-#            authentication-key <removed>;
-            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
-            peer-as 5078;
-            neighbor 2610:1d8::164:58:199:226 {
-                description TUL-CORE6-IBGP-V6;
-            }
-        }
-    }
-    ospf {
-        reference-bandwidth 100g;
-        area 0.0.0.0 {
-            interface lo0.0;
-            interface fxp0.0 {
-                disable;
-            }
-            interface ge-0/2/0.0 {
-                authentication {
-                    md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
-                }
-            }
-            interface xe-0/0/0.69 {
-                authentication {
-                    md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
-                }
-            }
-        }
-    }
-    ospf3 {
-        reference-bandwidth 100g;
-        area 0.0.0.0 {
-            interface xe-0/0/0.69 {
-                link-protection;
-                ipsec-sa OneNet-OSPF3-AUTH;
-                bfd-liveness-detection {
-                    minimum-interval 100;
-                    multiplier 3;
-                }
-            }
-            interface ge-0/2/0.0 {
-                link-protection;
-                ipsec-sa OneNet-OSPF3-AUTH;
-                bfd-liveness-detection {
-                    minimum-interval 100;
-                    multiplier 3;
-                }
-            }
-            interface lo0.0;
-        }
-    }
-    ldp {
-        preference 255;
-        track-igp-metric;
-        interface xe-0/0/0.69;
-        interface ge-0/2/0.0;
-        interface lo0.0;
-    }
-    lldp {
-        interface xe-0/0/0;
-    }
-}
-policy-options {
-    prefix-list PRE-LDP-SOURCES {
-        10.199.0.0/16;
-        164.58.198.0/23;
-        apply-path "interfaces <*> unit <*> family inet address <*>";
-    }
-    prefix-list PRE-MGMT-SOURCES {
-        64.207.244.14/32;
-        66.129.224.37/32;
-        129.15.127.96/28;
-        156.110.31.0/27;
-        156.110.31.32/28;
-        164.58.10.0/24;
-        164.58.15.0/24;
-        164.58.244.0/22;
-        164.58.253.0/24;
-    }
-    prefix-list PRE-RADIUS-SOURCES {
-        apply-path "system radius-server <*>";
-    }
-    prefix-list PRE-NTP-SOURCES {
-        apply-path "system ntp server <*>";
-    }
-    prefix-list PRE-DNS-SOURCES {
-        apply-path "system name-server <*>";
-    }
-    prefix-list PRE-SNMP-SOURCES {
-        apply-path "snmp client-list snmp-management <1*>";
-    }
-    prefix-list PRE-LOCALIPv4-SOURCES {
-        apply-path "interfaces <*> unit <*> family inet address <*>";
-    }
-    prefix-list PRE-BGP-ALLOW {
-        apply-path "protocols bgp group <*> neighbor <*>";
-    }
-    prefix-list PRE-L0-SOURCES {
-        apply-path "interfaces lo0 unit <*> family inet address <164.*>";
-    }
-    policy-statement LOAD-BALANCE {
-        then {
-            load-balance per-packet;
-        }
-    }
-    policy-statement ONENET-PoP-APPLIANCES-EXPORT {
-        term 1 {
-            from protocol static;
-            then {
-                community add ONENET-PoP-APPLIANCES;
-                accept;
-            }
-        }
-        term 2 {
-            from protocol bgp;
-            then {
-                community add ONENET-PoP-APPLIANCES;
-                accept;
-            }
-        }
-        term REJECT {
-            then reject;
-        }
-    }
-    policy-statement ONENET-PoP-APPLIANCES-IMPORT {
-        term 1 {
-            from {
-                protocol bgp;
-                community ONENET-PoP-APPLIANCES;
-            }
-            then accept;
-        }
-        term REJECT {
-            then reject;
-        }
-    }
-    policy-statement REDISTRIBUTE-DIRECTS {
-        term 1 {
-            from protocol direct;
-            then {
-                community add Woodward;
-                external {
-                    type 1;
-                }
-                accept;
-            }
-        }
-    }
-    policy-statement REDISTRIBUTE-STATICS {
-        term 1 {
-            from protocol static;
-            then {
-                community add Woodward;
-                accept;
-            }
-        }
-    }
-    community Ada members 5078:22;
-    community Altus members 5078:26;
-    community Alva members 5078:74;
-    community Ardmore members 5078:10;
-    community Bartlesville members 5078:134;
-    community Chickasha members 5078:82;
-    community Claremore members 5078:142;
-    community Duncan members 5078:18;
-    community Durant members 5078:14;
-    community Edmond members 5078:235;
-    community Elreno members 5078:6;
-    community Enid members 5078:66;
-    community Goodwell members 5078:62;
-    community Idabel members 5078:102;
-    community Langston members 5078:236;
-    community Lawton120 members 5078:189;
-    community Lawton480 members 5078:202;
-    community Mcalester members 5078:90;
-    community Miami members 5078:138;
-    community Midwest-City members 5078:2;
-    community Muskogee members 5078:94;
-    community ONENET-PoP-APPLIANCES members target:5078:2012;
-    community OSUOKC members 5078:50;
-    community Okmulgee members 5078:110;
-    community Ponca-City members 5078:186;
-    community Poteau members 5078:146;
-    community Sallisaw members 5078:118;
-    community Sayre members 5078:30;
-    community Seminole members 5078:46;
-    community Tahlequah members 5078:130;
-    community Tishomingo members 5078:86;
-    community Tonkawa members 5078:70;
-    community Warner members 5078:106;
-    community Weathrford members 5078:38;
-    community Wilburn members 5078:98;
-    community Woodward members 5078:58;
-}
-class-of-service {
-    classifiers {
-        dscp dscp-default {
-            import default;
-        }
-    }
-    forwarding-classes {
-        class data queue-num 0;
-        class voice queue-num 1;
-        class video queue-num 2;
-        class network-control queue-num 3;
-    }
-    interfaces {
-        all {
-            scheduler-map sch-map;
-            unit * {
-                classifiers {
-                    dscp dscp-default;
-                }
-            }
-        }
-    }
-    scheduler-maps {
-        sch-map {
-            forwarding-class data scheduler data-sch;
-            forwarding-class voice scheduler voice-sch;
-            forwarding-class video scheduler video-sch;
-            forwarding-class network-control scheduler network-control-sch;
-        }
-    }
-    schedulers {
-        data-sch {
-            transmit-rate {
-                remainder;
-            }
-            buffer-size {
-                remainder;
-            }
-            priority low;
-        }
-        voice-sch {
-            transmit-rate percent 5;
-            buffer-size percent 5;
-            priority high;
-        }
-        video-sch {
-            transmit-rate percent 5;
-            buffer-size percent 5;
-            priority high;
-        }
-        network-control-sch {
-            transmit-rate percent 5;
-            buffer-size percent 5;
-            priority high;
-        }
-    }
-}
-firewall {
-    family inet {
-        filter PROTECT-RE {
-            term SSH-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-MGMT-SOURCES;
-                    }
-                    protocol tcp;
-                    destination-port ssh;
-                }
-                then accept;
-            }
-            term FIRST-FRAG {
-                from {
-                    first-fragment;
-                }
-                then {
-                    discard;
-                }
-            }
-            term NEXT-FRAG {
-                from {
-                    is-fragment;
-                }
-                then {
-                    discard;
-                }
-            }
-            term OSPF-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-LOCALIPv4-SOURCES;
-                    }
-                    protocol ospf;
-                }
-                then accept;
-            }
-            term BGP-ALLOW {
-                from {
-                    prefix-list {
-                        PRE-BGP-ALLOW;
-                    }
-                    protocol tcp;
-                    port 179;
-                }
-                then accept;
-            }
-            term RADIUS-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-RADIUS-SOURCES;
-                    }
-                    protocol [ udp tcp ];
-                    port [ radius radacct ];
-                }
-                then accept;
-            }
-            term NTP-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-NTP-SOURCES;
-                        PRE-L0-SOURCES;
-                    }
-                    protocol udp;
-                    port ntp;
-                }
-                then accept;
-            }
-            term DOMAIN-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-DNS-SOURCES;
-                    }
-                    port domain;
-                }
-                then accept;
-            }
-            term SYSLOG-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-MGMT-SOURCES;
-                    }
-                    port syslog;
-                }
-                then accept;
-            }
-            term FTP-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-MGMT-SOURCES;
-                    }
-                    port ftp;
-                }
-                then accept;
-            }
-            term JSPACE-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-MGMT-SOURCES;
-                    }
-                    source-port 7408;
-                }
-                then accept;
-            }
-            term SNMP-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-SNMP-SOURCES;
-                    }
-                    protocol [ tcp udp ];
-                    port [ snmp snmptrap ];
-                }
-                then accept;
-            }
-            term LDP-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-LDP-SOURCES;
-                    }
-                    port ldp;
-                }
-                then accept;
-            }
-            term PIM-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-LOCALIPv4-SOURCES;
-                    }
-                    protocol pim;
-                }
-                then accept;
-            }
-            term BFD-ALLOW {
-                from {
-                    source-prefix-list {
-                        PRE-LOCALIPv4-SOURCES;
-                    }
-                    protocol udp;
-                    port [ 3784 3785 ];
-                }
-                then accept;
-            }
-            term ICMP-ALLOW {
-                from {
-                    protocol icmp;
-                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
-                }
-                then accept;
-            }
-            term TRACEROUTE-ALLOW {
-                from {
-                    protocol udp;
-                    destination-port 33434-33523;
-                }
-                then accept;
-            }
-            term DENY-SERVICES-INBOUND {
-                from {
-                    destination-port [ ssh telnet http https snmp ntp domain ];
-                }
-                then {
-                    discard;
-                }
-            }
-            term SERVICES-OUTBOUND {
-                from {
-                    source-port [ ssh telnet ];
-                }
-                then accept;
-            }
-            term DENY_ALL {
-                then {
-                    discard;
-                }
-            }
-        }
-    }
-    policer 500M-POL {
-        logical-interface-policer;
-        if-exceeding {
-            bandwidth-limit 500m;
-            burst-size-limit 100m;
-        }
-        then discard;
-    }
-}
-routing-instances {
-    ONENET-PoP-APPLIANCES-L3VPN {
-        description ONENET-PoP-APPLIANCES-L3VPN;
-        instance-type vrf;
-        interface ge-0/3/3.0;
-        interface ge-0/3/4.0; ## 'ge-0/3/4.0' is not defined
-        interface ge-0/3/5.0;
-        interface ge-0/3/6.0;
-        interface ge-0/3/7.0;
-        interface ge-0/3/8.0;
-        interface ge-0/3/9.0;
-        route-distinguisher 164.58.199.59:2012;
-        vrf-import ONENET-PoP-APPLIANCES-IMPORT;
-        vrf-export ONENET-PoP-APPLIANCES-EXPORT;
-        vrf-target target:5078:2012;
-        routing-options {
-            static {
-                route 10.10.124.82/32 next-hop 10.10.124.82;
-                route 10.10.125.82/32 next-hop 10.10.125.82;
-                route 10.10.127.82/32 next-hop 10.10.127.82;
-                route 10.10.120.74/32 next-hop 10.10.120.74;
-                route 10.10.120.78/32 next-hop 10.10.120.78;
-                route 10.10.127.234/32 next-hop 10.10.127.234;
-            }
-        }
-    }
-    VPLS-ONENET-IPERF {
-        description ONENET-IPERF-MGMT;
-        instance-type vpls;
-        vlan-id 2011;
-        interface ge-0/2/3.0;
-        route-distinguisher 164.58.199.59:2011;
-        vrf-target target:5078:2011;
-        protocols {
-            vpls {
-                mac-table-size {
-                    3000;
-                    packet-action drop;
-                }
-                no-tunnel-services;
-                site WOODWARD-IPERF {
-                    site-identifier 34;
-                }
-            }
-        }
-    }
-}
-{master}
-# grnoc-mon at WOODWARD-MX480-RE0> show ospf neighbor 
-# Address          Interface              State     ID               Pri  Dead
-# 164.58.245.66    ge-0/2/0.0             Full      164.58.199.58
-# 164.58.246.73    xe-0/0/0.69            Full      164.58.199.212
-# 
-# {master}
-# grnoc-mon at WOODWARD-MX480-RE0> show bfd session 
-                                                  Detect   Transmit
-Address                  State     Interface      Time     Interval  Multiplier
-fe80::223:9cff:feb3:a6fb Up        ge-0/2/0.0     0.300     0.100        3   
-fe80::8618:8800:45ee:a94b Down     xe-0/0/0.69    0.000     1.000        3   
-
-2 sessions, 2 clients
-Cumulative transmit rate 11.0 pps, cumulative receive rate 10.0 pps
-
-{master}
-# grnoc-mon at WOODWARD-MX480-RE0> show system snapshot media internal 
-# error: command is not valid on the mx480
-# 
-# {master}



More information about the Nocrancid mailing list