[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri Sep 25 23:02:06 CDT 2015


Index: configs/core1.lan-mx80.onenet.net
===================================================================
--- configs/core1.lan-mx80.onenet.net	(revision 134655)
+++ configs/core1.lan-mx80.onenet.net	(working copy)
@@ -189,14 +189,14 @@
 # grnoc-mon at LANGSTON-MX80> show version 
 # Hostname: LANGSTON-MX80 # Model: mx80 # JUNOS Base OS boot [11.4R7.5] # JUNOS Base OS Software Suite [11.4R7.5] # JUNOS Kernel Software Suite [11.4R7.5] # JUNOS Crypto Software Suite [11.4R7.5] # JUNOS Packet Forwarding Engine Support (MX80) [11.4R7.5] # JUNOS Online Documentation [11.4R7.5] # JUNOS Routing Software Suite [11.4R7.5] #  # grnoc-mon at LANGSTON-MX80> file list /var/tmp detail # 
 # /var/tmp:
-# total 1503980
+# total 1459500
 # -rw-r--r--  1 root  field         30 Feb 29  2012 ex.txt
 # drwxr-xr-x  2 root  field        512 Feb 29  2012 gres-tp/
 # -rw-rw----  1 root  field   52711424 Jun 10 15:30 ifinfo.core.0
 # -rw-rw----  1 root  field   52711424 Jun 10 15:37 ifinfo.core.1
 # -rw-rw----  1 root  field   52711424 Jun 10 15:40 ifinfo.core.2
 # -rw-rw----  1 root  field   52711424 Jun 10 15:47 ifinfo.core.3
-# -rw-rw----  1 root  field   52711424 Sep 25 21:52 ifinfo.core.4
+# -rw-rw----  1 root  field   30932992 Sep 25 23:00 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Aug 13  2012 install/
 # -rw-r--r--  1 eng   field   99542994 May 30  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
 # -rw-r--r--  1 upgrades field 150276951 Aug 8   2014 jinstall-ppc-12.3R7.7-domestic-signed.tgz
Index: configs/core.hut.ard.onenet.net
===================================================================
--- configs/core.hut.ard.onenet.net	(revision 134648)
+++ configs/core.hut.ard.onenet.net	(working copy)
@@ -321,7 +321,6 @@
 #lsi.1052213 up up
 #lsi.1052221 up up
 #lsi.1052244 up up
-#lsi.1052245 up up
 #lsi.1052249 up up
 #lsi.1052250 up up
 #lsi.1052252 up up
@@ -333,6 +332,7 @@
 #lsi.1052260 up up
 #lsi.1052261 up up
 #lsi.1052262 up up
+#lsi.1052263 up up
 #me0 up up
 #me0.0 up up
 #mtun up up
Index: configs/core.ard.onenet.net
===================================================================
--- configs/core.ard.onenet.net	(revision 134655)
+++ configs/core.ard.onenet.net	(working copy)
@@ -358,9 +358,9 @@
 #lsi.1078593 up up
 #lsi.1078594 up up
 #lsi.1078595 up up
-#lsi.1078596 up up
 #lsi.1078597 up up
 #lsi.1078598 up up
+#lsi.1078599 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/hub.tsb.onenet.net
===================================================================
--- configs/hub.tsb.onenet.net	(revision 134655)
+++ configs/hub.tsb.onenet.net	(working copy)
@@ -200,7 +200,7 @@
 # -rw-rw----  1 root  field   51994624 Oct 24  2013 ifinfo.core.1
 # -rw-rw----  1 root  field   51974144 Oct 24  2013 ifinfo.core.2
 # -rw-rw----  1 root  field   52744192 Oct 24  2013 ifinfo.core.3
-# -rw-rw----  1 root  field   52727808 Sep 25 21:52 ifinfo.core.4
+# -rw-rw----  1 root  field   52727808 Sep 25 23:00 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Oct 12  2012 install/
 # -rw-rw----  1 root  field   33464320 Mar 3   2014 jdiameterd.core.0
 # -rw-r--r--  1 eng   field   99542994 Apr 23  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
Index: configs/core.alt.onenet.net
===================================================================
--- configs/core.alt.onenet.net	(revision 134655)
+++ configs/core.alt.onenet.net	(working copy)
@@ -385,8 +385,6 @@
 #lsi.1211000 up up
 #lsi.1211009 up up
 #lsi.1211010 up up
-#lsi.1211011 up up
-#lsi.1211012 up up
 #lsi.1211020 up up
 #lsi.1211022 up up
 #lsi.1211023 up up
@@ -408,6 +406,8 @@
 #lsi.1211051 up up
 #lsi.1211052 up up
 #lsi.1211053 up up
+#lsi.1211054 up up
+#lsi.1211055 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core1.edm.onenet.net
===================================================================
--- configs/core1.edm.onenet.net	(revision 134657)
+++ configs/core1.edm.onenet.net	(working copy)
@@ -0,0 +1,1428 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at EDMOND-MX104-RE0> show system commit 
+#   2015-07-20 09:52:51 CDT by rnordmark via cli commit synchronize
+#   2015-07-14 14:31:31 CDT by rnordmark via cli commit synchronize
+#   2015-04-14 15:47:15 CDT by admin via netconf commit synchronize
+#     %crId:1474835%changeType:inband%moduleName:CMP.updateDeviceSNMPTrapTarget%
+#   2015-04-14 15:42:16 CDT by admin via netconf commit synchronize
+#     %crId:1474728%changeType:inband%moduleName:CMP.updateDeviceSNMPTrapTarget%
+#   2015-04-10 14:02:40 CDT by andrew via cli commit synchronize
+#   2015-04-08 20:17:22 CDT by andrew via cli commit synchronize
+# grnoc-mon at EDMOND-MX104-RE0> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  PEM 0                          OK        
+#       PEM 1                          OK        
+#       ABB 0 Intake                   OK        
+#       ABB 0 Exhaust A                OK        
+#       ABB 0 Exhaust B                OK        
+#       ABB 1 Intake                   OK        
+#       ABB 1 Exhaust A                OK        
+#       ABB 1 Exhaust B                OK        
+#       Routing Engine 0               OK        
+#       Routing Engine 0 CPU           OK        
+#       Routing Engine 1               OK        
+#       Routing Engine 1 CPU           OK        
+#       AFEB 0 AFEB Processor          OK        
+#       AFEB 0 LU Temp                 OK        
+#       AFEB 0 MQ Temp                 OK        
+#       AFEB 0 QX Temp                 OK        
+# Fans  Fan 1                          OK
+#       Fan 2                          OK
+#       Fan 3                          OK
+#       Fan 4                          OK
+#       Fan 5                          OK
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    ROM        Juniper ROM Monitor Version 13.1b24        
+#                          O/S        Version 13.3R4.6 by builder on 2014-09-18 1
+# FPC 1                    ROM        Juniper ROM Monitor Version 13.1b24        
+#                          O/S        Version 13.3R4.6 by builder on 2014-09-18 1
+# FPC 2                    ROM        Juniper ROM Monitor Version 13.1b24        
+#                          O/S        Version 13.3R4.6 by builder on 2014-09-18 1
+# AFEB                     ROM        Juniper ROM Monitor Version 13.1b24        
+#                          O/S        Version 13.3R4.6 by builder on 2014-09-18 1
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                 2048 MB
+#   Total SRAM                      403 MB
+#   Total SDRAM                    1316 MB
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                 2048 MB
+#   Total SRAM                      403 MB
+#   Total SDRAM                    1316 MB
+# Slot 2 information:
+#   State                               Online    
+#   Total CPU DRAM                 2048 MB
+#   Total SRAM                      403 MB
+#   Total SDRAM                    1316 MB
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                G8357             MX104
+# Midplane         REV 46   750-044219   CACA4180          MX104
+# PEM 0            REV 03   740-045933   1H073520128       AC Power Entry Module
+# PEM 1            REV 03   740-045933   1H073520320       AC Power Entry Module
+# Routing Engine 0 REV 07   750-053342   CACH2645          RE-MX-104
+# Routing Engine 1 REV 07   750-053342   CACH2262          RE-MX-104
+# AFEB 0                    BUILTIN      BUILTIN           Forwarding Engine Processor
+# FPC 0                     BUILTIN      BUILTIN           MPC BUILTIN
+#   MIC 0          REV 27   750-028392   ABCH4558          3D 20x 1GE(LAN) SFP
+#     PIC 0                 BUILTIN      BUILTIN           10x 1GE(LAN) SFP
+#       Xcvr 0     REV 02   740-013111   B436653           SFP-T
+#       Xcvr 9     REV 01   740-031851   AM1144SW6RQ       SFP-SX
+#     PIC 1                 BUILTIN      BUILTIN           10x 1GE(LAN) SFP
+#       Xcvr 0     REV 01   740-031851   AM1141SVRZE       SFP-SX
+#       Xcvr 1     REV 01   740-031851   AM1144SW5Y8       SFP-SX
+#       Xcvr 2     REV 01   740-031850   PQE4BBK           SFP-LX10
+#       Xcvr 3     REV 01   740-031850   PQ54U0S           SFP-LX10
+#       Xcvr 4     REV 01   740-031851   PQG2EJW           SFP-SX
+# FPC 1                     BUILTIN      BUILTIN           MPC BUILTIN
+# FPC 2                     BUILTIN      BUILTIN           MPC BUILTIN
+#   MIC 0                   BUILTIN      BUILTIN           4x 10GE(LAN) SFP+
+#     PIC 0                 BUILTIN      BUILTIN           4x 10GE(LAN) SFP+
+#       Xcvr 0     REV 01   740-041612   Z13120A25         SFP+-10G-ZR
+#       Xcvr 1     REV 01   740-041612   Z13120A26         SFP+-10G-ZR
+#       Xcvr 2     REV 01   740-021308   AQS1Q1T           SFP+-10G-SR
+# Fan Tray 0       REV 03   711-049570   CACJ4565          Fan Tray
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show chassis hardware models 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     FRU model number
+# Midplane         REV 46   750-044219   CACA4180          CHAS-MX104-S
+# PEM 0            REV 03   740-045933   1H073520128       PWR-MX104-AC-S
+# PEM 1            REV 03   740-045933   1H073520320       PWR-MX104-AC-S
+# Routing Engine 0 REV 07   750-053342   CACH2645          RE-S-MX104-S
+# Routing Engine 1 REV 07   750-053342   CACH2262          RE-S-MX104-S
+# AFEB 0                    BUILTIN      BUILTIN          
+# FPC 0                     BUILTIN      BUILTIN          
+#   MIC 0          REV 27   750-028392   ABCH4558          MIC-3D-20GE-SFP
+# FPC 1                     BUILTIN      BUILTIN          
+# FPC 2                     BUILTIN      BUILTIN          
+# Fan Tray 0       REV 03   711-049570   CACJ4565          FANTRAY-MX104-S
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show chassis routing-engine 
+# Routing Engine status:
+#   Slot 0:
+#     Current state                  Master
+#     Election priority              Master
+#     DRAM                      3968 MB (4096 MB installed)
+#     Serial ID                      CACH2645
+# Routing Engine status:
+#   Slot 1:
+#     Current state                  Backup
+#     Election priority              Backup
+#     DRAM                      3968 MB (4096 MB installed)
+#     Serial ID                      CACH2262
+# 
+# grnoc-mon at EDMOND-MX104-RE0> show chassis scb 
+# grnoc-mon at EDMOND-MX104-RE0> show chassis sfm detail 
+# grnoc-mon at EDMOND-MX104-RE0> show chassis ssb 
+# grnoc-mon at EDMOND-MX104-RE0> show system boot-messages 
+# platform_early_bootinit: MX-PPC Series Early Boot Initialization
+# mxppc_set_re_type: hw.board.type is MX104
+# WDOG initialized
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2007 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD is a registered trademark of The FreeBSD Foundation.
+# WARNING: debug.mpsafenet forced to 0 as ipsec requires Giant
+# Timecounter "decrementer" frequency 37500000 Hz quality 0
+# cpu0: Freescale e5500 core revision 1.2
+# cpu0: HID0 c0000080<EMCP,EN_L2MMU_MHD,EN_MAS7_UPDATE>
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing M/T/EX platform properties ..
+# nexus0: <Powerpc Nexus device>
+# ocpbus0: <on-chip peripheral bus> on nexus0
+# openpic0: <OpenPIC in on-chip peripheral bus> iomem 0xfe040000-0xfe06ffff on ocpbus0
+# uart0: <16550 or compatible> iomem 0xfe11c500-0xfe11c50f irq 52 on ocpbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> iomem 0xfe11c600-0xfe11c60f irq 52 on ocpbus0
+# lbc0: <Freescale Local Bus Controller> iomem 0xfe124000-0xfe12410f,0xff000000-0xffffffff irq 16,17,18 on ocpbus0
+# uart2: <16750 or compatible> iomem 0xff600000-0xff600fff on lbc0
+# uart3: <16750 or compatible> iomem 0xff500000-0xff500fff on lbc0
+# cfi0: <AMD/Fujitsu - 8MB> iomem 0xffc00000-0xffffffff on lbc0
+# amxbcpld0: <MX104 Bootcpld> iomem 0xff700000-0xff700fff on lbc0
+# amxbcpld0: MX104 Bootcpld Ver 1 Rev 13 (Built 1-5-13)
+# i2c0: <MPC85XX OnChip i2c Controller> iomem 0xfe118000-0xfe118014 irq 54 on ocpbus0
+# i2c1: <MPC85XX OnChip i2c Controller> iomem 0xfe118100-0xfe118114 irq 54 on ocpbus0
+# i2c2: <MPC85XX OnChip i2c Controller> iomem 0xfe119000-0xfe119014 irq 55 on ocpbus0
+# i2c3: <MPC85XX OnChip i2c Controller> iomem 0xfe119100-0xfe119114 irq 55 on ocpbus0
+# ehci0: <Frescale Integrated USB 2.0 controller> iomem 0xfe210000-0xfe210fff irq 60 on ocpbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Freescale EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: SMSC USB2513Bi, class 9/0, rev 2.00/b.a0, addr 2
+# uhub1: multiple transaction translators
+# uhub1: 3 ports with 3 removable, self powered
+# umass0: ATP Electronics AF8GSSGH-JP4, rev 2.00/11.00, addr 3
+# umass0: SCSI over Bulk-Only; quirks = 0x0000
+# umass0:0:0:-1: Attached to scbus0
+# bman0 iomem 0xfe31a000-0xfe31afff,0xfd800000-0xfd803fff,0xfd804000-0xfd804fff irq 32,121,123,125,127,129,131,133,135,137,139 on ocpbus0
+# bman0: Hardware version: 1.0.
+# qman0 iomem 0xfe318000-0xfe318fff,0xfd808000-0xfd80bfff,0xfd80c000-0xfd80cfff irq 32,120,122,124,126,128,130,132,134,136,138 on ocpbus0
+# qman0: Hardware version: 1.2.
+# fman0 iomem 0xfe400000-0xfe4fffff irq 112,32 on ocpbus0
+# fman0: Hardware version: 3.0.
+# dtsec0 on fman0
+# dtsec0: Configured for independent mode.
+# dtsec0: hardware MAC address 02:00:ff:00:00:04
+# dtsec1 on fman0
+# dtsec1: Configured for independent mode.
+# dtsec1: hardware MAC address 02:00:00:00:00:04
+# dtsec2 on fman0
+# dtsec2: Configured for independent mode.
+# dtsec2: hardware MAC address 02:00:01:00:00:04
+# dtsec3 on fman0
+# dtsec3: Configured for independent mode.
+# dtsec3: hardware MAC address 10:0e:7e:9f:50:d7
+# miibus0: <MII bus> on dtsec3
+# e1000phy0: <Marvell 88E1111 Gigabit PHY> on miibus0
+# e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# Initializing product: 152 ..
+# Setting up M/T interface operations and attributes
+# platform_cookie_read not implemented
+# Initializing MX-PPC platform mastership..
+#  Loading Redundant LT driver
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ATP AF8GSSGH-JP4 1100> Fixed Direct Access SCSI-4 device
+# da0: 40.000MB/s transfers
+# da0: 7678MB (15724544 512 byte sectors: 255H 63S/T 978C)
+# Kernel thread "wkupdaemon" (pid 48) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s1a
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show version 
+# Hostname: EDMOND-MX104-RE0 # Model: mx104 # Junos: 13.3R4.6 # JUNOS Base OS boot [13.3R4.6] # JUNOS Base OS Software Suite [13.3R4.6] # JUNOS Kernel Software Suite [13.3R4.6] # JUNOS Crypto Software Suite [13.3R4.6] # JUNOS Packet Forwarding Engine Support (MX104) [13.3R4.6] # JUNOS Online Documentation [13.3R4.6] # JUNOS Services Application Level Gateways [13.3R4.6] # JUNOS Services Jflow Container package [13.3R4.6] # JUNOS Services Stateful Firewall [13.3R4.6] # JUNOS Services NAT [13.3R4.6] # JUNOS Services RPM [13.3R4.6] # JUNOS Services Crypto [13.3R4.6] # JUNOS Services SSL [13.3R4.6] # JUNOS Services IPSec [13.3R4.6] # JUNOS Routing Software Suite [13.3R4.6] #  # {master} # grnoc-mon at EDMOND-MX104-RE0> file list /var/tmp detail # 
+# /var/tmp:
+# total blocks: 500736
+# drwxr-xr-x  2 root  wheel        512 Dec 31  2009 gres-tp/
+# drwxrwxrwx  2 root  wheel        512 Dec 31  2009 install/
+# -rw-r-----  1 upgrades wheel 256266846 May 22 17:36 jinstall-ppc-13.3R6.5-domestic-signed.tgz
+# drwxrwxrwx  2 root  wheel        512 Dec 31  2009 pics/
+# drwxr-xr-x  2 root  wheel        512 Dec 31  2009 rtsdb/
+# -rw-r-----  1 root  wheel       1068 Jan 2   2010 sampled.pkts
+# drwxrwxrwt  2 root  wheel        512 Dec 31  2009 vi.recover/
+# total files: 2
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show system uptime 
+# System booted: 2015-03-13 23:13 CDT 
+# Protocols started: 2015-03-13 23:15 CDT 
+# Last configured: 2015-07-20 09:52 CDT  by rnordmark
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#lc-0/0/0 up up
+#lc-0/0/0.32769 up up
+#pfe-0/0/0 up up
+#pfe-0/0/0.16383 up up
+#pfh-0/0/0 up up
+#pfh-0/0/0.16383 up up
+#ge-0/0/1 up down
+#ge-0/0/2 up down
+#ge-0/0/3 up down
+#ge-0/0/4 up down
+#ge-0/0/5 up down
+#ge-0/0/6 up down
+#ge-0/0/7 up down
+#ge-0/0/8 up down
+#ge-0/0/9 up up
+#ge-0/0/9.0 up up
+#ge-0/1/0 up down
+#ge-0/1/0.0 up down
+#ge-0/1/1 up down
+#ge-0/1/2 up down
+#ge-0/1/3 up up
+#ge-0/1/3.0 up up
+#ge-0/1/4 up up
+#ge-0/1/4.80 up up
+#ge-0/1/4.500 up up
+#ge-0/1/4.32767 up up
+#ge-0/1/5 up down
+#ge-0/1/5.0 up down
+#ge-0/1/6 up down
+#ge-0/1/7 up down
+#ge-0/1/8 up down
+#ge-0/1/9 up down
+#xe-2/0/0 up up
+#xe-2/0/0.76 up up
+#xe-2/0/0.32767 up up
+#xe-2/0/1 up up
+#xe-2/0/1.42 up up
+#xe-2/0/1.32767 up up
+#xe-2/0/2 up up
+#xe-2/0/2.0 up up
+#xe-2/0/3 up down
+#cbp0 up up
+#demux0 up up
+#dsc up up
+#em0 up up
+#em0.0 up up
+#em1 up up
+#fxp0 down down
+#fxp0.0 up down
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lsi up up
+#lsi.0 up up
+#lsi.1 up up
+#lsi.2 up up
+#lsi.4 up up
+#me0 up up
+#mtun up up
+#pimd up up
+#pime up up
+#pip0 up up
+#pp0 up up
+#tap up up
+# grnoc-mon at EDMOND-MX104-RE0> show configuration 
+## Last commit: 2015-07-20 09:52:51 CDT by rnordmark
+version 13.3R4.6;
+groups {
+    re0 {
+        system {
+            host-name EDMOND-MX104-RE0;
+            backup-router 172.25.46.1;
+        }
+        interfaces {
+            fxp0 {
+                unit 0 {
+                    family inet {
+                        address 172.25.46.182/24;
+                    }
+                }
+            }
+        }
+    }
+    re1 {
+        system {
+            host-name EDMOND-MX104-RE1;
+            backup-router 172.25.46.1;
+        }
+        interfaces {
+            fxp0 {
+                unit 0 {
+                    family inet {
+                        address 172.25.46.183/24;
+                    }
+                }
+            }
+        }
+    }
+}
+apply-groups [ re0 re1 ];
+system {
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.198.10;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.199.235;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+        class admin {
+            idle-timeout 1440;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+            max-sessions-per-connection 32;
+        }
+        netconf {
+            ssh;
+        }
+    }
+    syslog {
+        archive size 10m files 20;
+        user * {
+            any emergency;
+        }
+        host 164.58.253.92 {
+            any any;
+        }
+        host 164.58.253.38 {
+            any any;
+        }
+        file messages {
+            any notice;
+            authorization info;
+            match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file default-log-messages {
+            any info;
+            match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|CFMD_CCM_DEFECT| LFMD_3AH | RPD_MPLS_PATH_BFD|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)";
+            structured-data;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+        source-address 164.58.199.235;
+    }
+    commit synchronize;
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+chassis {
+    redundancy {
+        routing-engine 0 master;
+        routing-engine 1 backup;
+        failover {
+            on-loss-of-keepalives;
+            on-disk-failure;
+        }
+        graceful-switchover;
+    }
+    routing-engine {
+        on-disk-failure disk-failure-action reboot;
+    }
+    afeb {
+        slot 0 {
+            sampling-instance JFLOW-1;
+        }
+    }
+    network-services enhanced-ip;
+}
+services {
+    flow-monitoring {
+        version-ipfix {
+            template ipv4 {
+                flow-active-timeout 60;
+                flow-inactive-timeout 60;
+                ipv4-template;
+            }
+            template IP-V4 {
+                flow-active-timeout 60;
+                flow-inactive-timeout 60;
+                template-refresh-rate {
+                    packets 1000;
+                    seconds 10;
+                }
+                option-refresh-rate {
+                    packets 1000;
+                    seconds 10;
+                }
+                ipv4-template;
+            }
+        }
+    }
+}
+security {
+    ipsec {
+        security-association OneNet-OSPF3-AUTH {
+            mode transport;
+            manual {
+                direction bidirectional {
+                    protocol ah;
+                    spi 256;
+                    authentication {
+                        algorithm hmac-md5-96;
+                        key ascii-text "$9$dos4JTQ3At0vWNVbsaJ5Qz6Au1RcSlv7-GDiHPfEhSyMLwsg"; ## SECRET-DATA
+                    }
+                }
+            }
+        }
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        description 12-Live-Project-Distance-Learning-Francis-Tuttle-Anchor-CIR000XXXX;
+        link-mode full-duplex;
+        unit 0 {
+            family inet {
+                sampling {
+                    input;
+                }
+                address 164.58.138.1/24;
+            }
+        }
+    }
+    ge-0/0/9 {
+        description HEI-UCO-L3VPN-1G-CIR000XXXX;
+        unit 0 {
+            family inet {
+                sampling {
+                    input;
+                }
+                address 10.2.1.1/30;
+                address 10.100.100.2/30;
+            }
+        }
+    }
+    ge-0/1/0 {
+        unit 0 {
+            family inet {
+                sampling {
+                    input;
+                }
+            }
+        }
+    }
+    ge-0/1/2 {
+        description "OU MEDICAL CENTER EDMOND | CIR000XXXX [NO-MONITOR]";
+    }
+    ge-0/1/3 {
+        description HEI-UCO-CARNEGIE-CENTER-500M-CIR000XXXX;
+        encapsulation ethernet-ccc;
+        unit 0 {
+            input-vlan-map {
+                push;
+                vlan-id 257;
+            }
+            output-vlan-map pop;
+            family ccc {
+                policer {
+                    input 500M-POL;
+                    output 500M-POL;
+                }
+            }
+        }
+    }
+    ge-0/1/4 {
+        description "CORE 1GE to swi1.osbi-edmond ge-0/1/0 | OneNet-EDM-EDM800OK-GE-6195";
+        vlan-tagging;
+        encapsulation flexible-ethernet-services;
+        unit 80 {
+            vlan-id 80;
+            family inet {
+                address 10.199.208.14/31;
+            }
+        }
+        unit 500 {
+            description OSBI-EDMOND-100M-CIR0006195;
+            vlan-id 500;
+            family inet {
+                address 192.168.252.10/30;
+            }
+        }
+    }
+    ge-0/1/5 {
+        description "OFFN-OOB-MGMT-CIR000XXXX [ORDERED]";
+        unit 0 {
+            family inet {
+                address 172.16.5.1/24;
+            }
+        }
+    }
+    xe-2/0/0 {
+        description "CORE 10GE to core2.okc xe-1/1/1 | OneNet-OKC-EDM-XE-4452";
+        vlan-tagging;
+        mtu 9192;
+        encapsulation flexible-ethernet-services;
+        unit 76 {
+            vlan-id 76;
+            family inet {
+                mtu 9000;
+                sampling {
+                    input;
+                }
+                address 164.58.15.78/30;
+            }
+            family inet6 {
+                address 2610:1d8:1100::19/127;
+            }
+            family mpls;
+        }
+    }
+    xe-2/0/1 {
+        description "CORE 10GE to core.lan xe-0/0/0 | OneNet-EDM-LAN-XE-4461";
+        flexible-vlan-tagging;
+        mtu 9192;
+        encapsulation flexible-ethernet-services;
+        unit 42 {
+            vlan-id 42;
+            family inet {
+                mtu 9000;
+                sampling {
+                    input;
+                }
+                address 164.58.244.200/31;
+            }
+            family inet6 {
+                mtu 9000;
+                address 2610:1d8:c00::/127;
+            }
+            family mpls;
+        }
+    }
+    xe-2/0/2 {
+        description HEI-University-of-Central-Oklahoma-UCO-CIR0003613;
+        unit 0 {
+            family inet {
+                sampling {
+                    input;
+                }
+                address 198.102.159.1/24 {
+                    arp 198.102.159.87 multicast-mac 03:bf:c6:66:9f:57;
+                }
+            }
+        }
+    }
+    fxp0 {
+        disable;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+                address 164.58.199.235/32;
+            }
+            family inet6 {
+                address 2610:1d8::164:58:199:235/128;
+            }
+        }
+    }
+}
+snmp {
+    description "NetGroup 1-888-566-3638";
+    location "University of Central Oklahoma - Edmond";
+    contact "OneNet Netgroup";
+    client-list snmp-management {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+    trap-options {
+        source-address 164.58.199.235;
+    }
+    trap-group "<removed>" {
+        version v2;
+        targets {
+            164.58.253.34;
+            164.58.253.35;
+        }
+    }
+}
+forwarding-options {
+    sampling {
+        instance {
+            JFLOW-1 {
+                input {
+                    rate 1000;
+                }
+                family inet {
+                    output {
+                        flow-inactive-timeout 60;
+                        flow-active-timeout 60;
+                        flow-server 164.58.253.36 {
+                            port 9235;
+                            autonomous-system-type origin;
+                            no-local-dump;
+                            version-ipfix {
+                                template {
+                                    ipv4;
+                                }
+                            }
+                        }
+                        inline-jflow {
+                            source-address 164.58.199.235;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+routing-options {
+    nonstop-routing;
+    static {
+        route 192.206.65.0/24 next-hop 198.102.159.254;
+        route 204.154.112.0/21 next-hop 198.102.159.254;
+        route 192.0.2.1/32 {
+            discard;
+            no-readvertise;
+        }
+    }
+    router-id 164.58.199.235;
+    autonomous-system 5078;
+    forwarding-table {
+        export LOAD-BALANCE;
+    }
+}
+protocols {
+    mpls {
+        interface lo0.0;
+        interface xe-2/0/0.76;
+        interface xe-2/0/1.42;
+    }
+    bgp {
+        group CORE-RR-OKC-V4 {
+            type internal;
+            local-address 164.58.199.235;
+            family inet {
+                any;
+            }
+            family inet-vpn {
+                unicast;
+            }
+            family inet6-vpn {
+                unicast;
+            }
+            family l2vpn {
+                signaling;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 164.58.199.216 {
+                description OKC-CORE6-IBGP-V4;
+            }
+        }
+        group CORE-RR-TUL-V4 {
+            type internal;
+            local-address 164.58.199.235;
+            family inet {
+                any;
+            }
+            family inet-vpn {
+                unicast;
+            }
+            family inet6-vpn {
+                unicast;
+            }
+            family l2vpn {
+                signaling;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 164.58.199.226 {
+                description TUL-CORE6-IBGP-V4;
+            }
+        }
+        group CORE-RR-OKC-V6 {
+            type internal;
+            local-address 2610:1d8::164:58:199:235;
+            family inet6 {
+                any;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 2610:1d8::164:58:199:216 {
+                description OKC-CORE6-IBGP-V6;
+            }
+        }
+        group CORE-RR-TUL-V6 {
+            type internal;
+            local-address 2610:1d8::164:58:199:235;
+            family inet6 {
+                any;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 2610:1d8::164:58:199:226 {
+                description TUL-CORE6-IBGP-V6;
+            }
+        }
+    }
+    ospf {
+        reference-bandwidth 100g;
+        area 0.0.0.0 {
+            interface lo0.0 {
+                passive;
+            }
+            interface fxp0.0 {
+                disable;
+            }
+            interface xe-2/0/0.76 {
+                link-protection;
+                authentication {
+                    md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+                }
+                bfd-liveness-detection {
+                    minimum-interval 400;
+                    multiplier 3;
+                }
+            }
+            interface xe-2/0/1.42 {
+                link-protection;
+                authentication {
+                    md5 7 key "$9$7FNwYoJDjkPJZPQFnu08Xx7b2aZUiqfYgZjHqf5"; ## SECRET-DATA
+                }
+                bfd-liveness-detection {
+                    minimum-interval 400;
+                    multiplier 3;
+                }
+            }
+        }
+    }
+    ospf3 {
+        reference-bandwidth 100g;
+        area 0.0.0.0 {
+            interface lo0.0 {
+                passive;
+            }
+            interface xe-2/0/0.76 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+            }
+            inactive: interface xe-2/0/1.42 {
+                link-protection;
+                ipsec-sa OneNet-OSPF3-AUTH;
+                bfd-liveness-detection {
+                    minimum-interval 400;
+                    multiplier 3;
+                }
+            }
+        }
+    }
+    ldp {
+        preference 255;
+        track-igp-metric;
+        interface xe-2/0/0.76;
+        interface xe-2/0/1.42;
+        interface lo0.0;
+    }
+    l2circuit {
+        neighbor 164.58.199.214 {
+            interface ge-0/1/3.0 {
+                virtual-circuit-id 2555;
+                ignore-mtu-mismatch;
+            }
+        }
+    }
+    lldp {
+        interface xe-2/0/0;
+        interface xe-2/0/1;
+        interface xe-2/0/2;
+    }
+}
+policy-options {
+    prefix-list PRE-LDP-SOURCES {
+        10.199.0.0/16;
+        164.58.198.0/23;
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-MGMT-SOURCES {
+        64.207.244.14/32;
+        66.129.224.37/32;
+        129.15.127.96/28;
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.10.0/24;
+        164.58.15.0/24;
+        164.58.244.0/22;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-RADIUS-SOURCES {
+        apply-path "system radius-server <*>";
+    }
+    prefix-list PRE-NTP-SOURCES {
+        apply-path "system ntp server <*>";
+    }
+    prefix-list PRE-DNS-SOURCES {
+        apply-path "system name-server <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        apply-path "snmp client-list snmp-management <1*>";
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-BGP-ALLOW {
+        apply-path "protocols bgp group <*> neighbor <*>";
+    }
+    prefix-list PRE-L0-SOURCES {
+        apply-path "interfaces lo0 unit <*> family inet address <164.*>";
+    }
+    policy-statement LOAD-BALANCE {
+        then {
+            load-balance per-packet;
+        }
+    }
+    policy-statement OFFN-VRF-EXPORT {
+        term 1 {
+            from protocol static;
+            then {
+                community add OFFN-VPN;
+                accept;
+            }
+        }
+        term 2 {
+            from protocol direct;
+            then {
+                community add OFFN-VPN;
+                accept;
+            }
+        }
+        term 3 {
+            from protocol ospf;
+            then {
+                community add OFFN-VPN;
+                accept;
+            }
+        }
+        term 4 {
+            from protocol bgp;
+            then {
+                community add OFFN-VPN;
+                accept;
+            }
+        }
+    }
+    policy-statement OFFN-VRF-IMPORT {
+        term 1 {
+            from {
+                protocol bgp;
+                community OFFN-VPN;
+            }
+            then accept;
+        }
+        term 2 {
+            then reject;
+        }
+    }
+    policy-statement ONENET-MGMT-VRF-EXPORT {
+        term 1 {
+            from protocol static;
+            then {
+                community add ONENET-MGMT-VPN;
+                accept;
+            }
+        }
+        term 2 {
+            from protocol direct;
+            then {
+                community add ONENET-MGMT-VPN;
+                accept;
+            }
+        }
+        term 3 {
+            from protocol ospf;
+            then {
+                community add ONENET-MGMT-VPN;
+                accept;
+            }
+        }
+    }
+    policy-statement ONENET-MGMT-VRF-IMPORT {
+        term 1 {
+            from {
+                protocol bgp;
+                community ONENET-MGMT-VPN;
+            }
+            then accept;
+        }
+        term 2 {
+            then reject;
+        }
+    }
+    policy-statement OSBI-VRF-EXPORT {
+        term 1 {
+            from protocol static;
+            then {
+                community add OSBI-VPN;
+                accept;
+            }
+        }
+        term 2 {
+            from protocol direct;
+            then {
+                community add OSBI-VPN;
+                accept;
+            }
+        }
+        term 3 {
+            from protocol ospf;
+            then {
+                community add OSBI-VPN;
+                accept;
+            }
+        }
+    }
+    policy-statement OSBI-VRF-IMPORT {
+        term 1 {
+            from {
+                protocol bgp;
+                community OSBI-VPN;
+            }
+            then accept;
+        }
+        term 2 {
+            then reject;
+        }
+    }
+    policy-statement REDISTRIBUTE-DIRECTS {
+        term 1 {
+            from protocol direct;
+            then {
+                community add EDMOND;
+                external {
+                    type 1;
+                }
+                accept;
+            }
+        }
+    }
+    policy-statement REDISTRIBUTE-STATICS {
+        term 1 {
+            from protocol static;
+            then {
+                community add EDMOND;
+                accept;
+            }
+        }
+    }
+    policy-statement UCO-VRF-EXPORT {
+        term 1 {
+            from protocol static;
+            then {
+                community add UCO-VPN;
+                accept;
+            }
+        }
+        term 2 {
+            from protocol direct;
+            then {
+                community add UCO-VPN;
+                accept;
+            }
+        }
+        term reject {
+            then reject;
+        }
+    }
+    policy-statement UCO-VRF-IMPORT {
+        term 1 {
+            from {
+                protocol bgp;
+                community UCO-VPN;
+            }
+            then accept;
+        }
+        term reject {
+            then reject;
+        }
+    }
+    community EDMOND members 5078:;
+    community OFFN-VPN members target:5078:2572;
+    community ONENET-MGMT-VPN members target:5078:2543;
+    community OSBI-VPN members target:5078:2546;
+    community UCO-VPN members target:5078:3001;
+}
+class-of-service {
+    classifiers {
+        dscp dscp-default {
+            import default;
+        }
+    }
+    forwarding-classes {
+        class data queue-num 0;
+        class voice queue-num 1;
+        class video queue-num 2;
+        class network-control queue-num 3;
+    }
+    interfaces {
+        all {
+            scheduler-map sch-map;
+            unit * {
+                classifiers {
+                    dscp dscp-default;
+                }
+            }
+        }
+    }
+    scheduler-maps {
+        sch-map {
+            forwarding-class data scheduler data-sch;
+            forwarding-class voice scheduler voice-sch;
+            forwarding-class video scheduler video-sch;
+            forwarding-class network-control scheduler network-control-sch;
+        }
+    }
+    schedulers {
+        data-sch {
+            transmit-rate {
+                remainder;
+            }
+            buffer-size {
+                remainder;
+            }
+            priority low;
+        }
+        voice-sch {
+            transmit-rate percent 5;
+            buffer-size percent 5;
+            priority high;
+        }
+        video-sch {
+            transmit-rate percent 5;
+            buffer-size percent 5;
+            priority high;
+        }
+        network-control-sch {
+            transmit-rate percent 5;
+            buffer-size percent 5;
+            priority high;
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term FIRST-FRAG {
+                from {
+                    first-fragment;
+                }
+                then {
+                    discard;
+                }
+            }
+            term NEXT-FRAG {
+                from {
+                    is-fragment;
+                }
+                then {
+                    discard;
+                }
+            }
+            term OSPF-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol ospf;
+                }
+                then accept;
+            }
+            term BGP-ALLOW {
+                from {
+                    prefix-list {
+                        PRE-BGP-ALLOW;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
+            term RADIUS-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-RADIUS-SOURCES;
+                    }
+                    protocol [ udp tcp ];
+                    port [ radius radacct ];
+                }
+                then accept;
+            }
+            term NTP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-NTP-SOURCES;
+                        PRE-L0-SOURCES;
+                    }
+                    protocol udp;
+                    port ntp;
+                }
+                then accept;
+            }
+            term DOMAIN-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-DNS-SOURCES;
+                    }
+                    port domain;
+                }
+                then accept;
+            }
+            term SYSLOG-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    port syslog;
+                }
+                then accept;
+            }
+            term FTP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    port ftp;
+                }
+                then accept;
+            }
+            term JSPACE-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    source-port 7408;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol [ tcp udp ];
+                    port [ snmp snmptrap ];
+                }
+                then accept;
+            }
+            term LDP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LDP-SOURCES;
+                    }
+                    port ldp;
+                }
+                then accept;
+            }
+            term PIM-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol pim;
+                }
+                then accept;
+            }
+            term BFD-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol udp;
+                    port [ 3784 3785 ];
+                }
+                then accept;
+            }
+            term ICMP-ALLOW {
+                from {
+                    protocol icmp;
+                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+                }
+                then accept;
+            }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
+            term DENY-SERVICES-INBOUND {
+                from {
+                    destination-port [ ssh telnet http https snmp ntp domain ];
+                }
+                then {
+                    discard;
+                }
+            }
+            term SERVICES-OUTBOUND {
+                from {
+                    source-port [ ssh telnet ];
+                }
+                then accept;
+            }
+            term DENY_ALL {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+    policer 100M-POL {
+        if-exceeding {
+            bandwidth-limit 100m;
+            burst-size-limit 20m;
+        }
+        then discard;
+    }
+    policer 500M-POL {
+        if-exceeding {
+            bandwidth-limit 500m;
+            burst-size-limit 100m;
+        }
+        then discard;
+    }
+}
+routing-instances {
+    OFFN-MGMT-L3VPN {
+        description OFFN-MGMT-L3VPN;
+        instance-type vrf;
+        interface ge-0/1/5.0;
+        route-distinguisher 164.58.199.235:2572;
+        vrf-import OFFN-VRF-IMPORT;
+        vrf-export OFFN-VRF-EXPORT;
+        vrf-target target:5078:2572;
+        vrf-table-label;
+    }
+    ONENET-MGMT-L3VPN {
+        description ONENET-MGMT-L3VPN;
+        instance-type vrf;
+        interface ge-0/1/4.80;
+        route-distinguisher 164.58.199.235:2543;
+        vrf-import ONENET-MGMT-VRF-IMPORT;
+        vrf-export ONENET-MGMT-VRF-EXPORT;
+        vrf-target target:5078:2543;
+        vrf-table-label;
+    }
+    OSBI-L3VPN {
+        description OSBI-L3VPN;
+        instance-type vrf;
+        interface ge-0/1/4.500;
+        route-distinguisher 164.58.199.235:2546;
+        vrf-import OSBI-VRF-IMPORT;
+        vrf-export OSBI-VRF-EXPORT;
+        vrf-target target:5078:2532;
+        vrf-table-label;
+    }
+    UCO-L3VPN {
+        description UCO-L3VPN;
+        instance-type vrf;
+        interface ge-0/0/9.0;
+        route-distinguisher 164.58.199.235:3001;
+        vrf-import UCO-VRF-IMPORT;
+        vrf-export UCO-VRF-EXPORT;
+        vrf-target target:5078:3001;
+        vrf-table-label;
+        routing-options {
+            static {
+                route 0.0.0.0/0 next-hop 10.100.100.1;
+            }
+        }
+    }
+}
+{master}
+# grnoc-mon at EDMOND-MX104-RE0> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 164.58.15.77     xe-2/0/0.76            Full      164.58.199.212
+# 164.58.244.201   xe-2/0/1.42            Full      164.58.199.236
+# 
+# {master}
+# grnoc-mon at EDMOND-MX104-RE0> show bfd session 
+                                                  Detect   Transmit
+Address                  State     Interface      Time     Interval  Multiplier
+164.58.15.77             Up        xe-2/0/0.76    1.200     0.400        3   
+164.58.244.201           Up        xe-2/0/1.42    1.200     0.400        3   
+
+2 sessions, 2 clients
+Cumulative transmit rate 5.0 pps, cumulative receive rate 5.0 pps
+
+{master}
+# grnoc-mon at EDMOND-MX104-RE0> show system snapshot media internal
+#                                                        ^
+# syntax error, expecting <data>.
+# 
+# {master}
Index: configs/core.chi.onenet.net
===================================================================
--- configs/core.chi.onenet.net	(revision 134655)
+++ configs/core.chi.onenet.net	(working copy)
@@ -347,8 +347,8 @@
 #lsi.1076587 up up
 #lsi.1076588 up up
 #lsi.1076589 up up
-#lsi.1076590 up up
 #lsi.1076591 up up
+#lsi.1076592 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.hut.wea.onenet.net
===================================================================
--- configs/core.hut.wea.onenet.net	(revision 134652)
+++ configs/core.hut.wea.onenet.net	(working copy)
@@ -316,7 +316,7 @@
 #lsi.1052129 up up
 #lsi.1052131 up up
 #lsi.1052132 up up
-#lsi.1052133 up up
+#lsi.1052134 up up
 #me0 up up
 #me0.0 up up
 #mtun up up
Index: configs/core.wea.onenet.net
===================================================================
--- configs/core.wea.onenet.net	(revision 134655)
+++ configs/core.wea.onenet.net	(working copy)
@@ -347,8 +347,8 @@
 #lsi.1077460 up up
 #lsi.1077461 up up
 #lsi.1077462 up up
-#lsi.1077463 up up
 #lsi.1077464 up up
+#lsi.1077465 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.wless.velm.onenet.net
===================================================================
--- configs/core.wless.velm.onenet.net	(revision 134661)
+++ configs/core.wless.velm.onenet.net	(working copy)
@@ -0,0 +1,693 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at VELMA-TOWER-SRX220> show system commit 
+#   2015-04-14 15:58:51 CDT by admin via netconf
+#     %crId:1474929%changeType:inband%moduleName:CMP.updateDeviceSNMPTrapTarget%
+#   2015-04-14 15:43:06 CDT by admin via netconf
+#     %crId:1474777%changeType:inband%moduleName:CMP.updateDeviceSNMPTrapTarget%
+#   2015-03-29 01:06:50 CDT by andrew via cli commit confirmed, rollback in 5mins
+#   2015-03-29 00:30:53 CDT by root via other
+#   2015-03-16 09:37:12 CDT by sean via cli
+#   2014-11-07 15:22:39 CST by admin via netconf
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX220 Chassis fan 0           OK
+#       SRX220 Chassis fan 1           OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                AR4811AA0002      SRX220H-POE
+# Routing Engine   REV 20   750-031177   AAEA7537          RE-SRX220H-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  8x GE Base PIC
+# Power Supply 0  
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis hardware models 
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      AAEA7537
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis scb 
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis sfm detail
+# grnoc-mon at VELMA-TOWER-SRX220> show chassis ssb 
+# grnoc-mon at VELMA-TOWER-SRX220> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# atapci0: <SiI 0680 UDMA133 controller> port 0x8-0xb,0x10-0x17,0x18-0x1b,0x20-0x2f mem 0x8020000-0x80200ff irq 0 at device 2.0 on pci0
+# ata2: <ATA channel 0> on atapci0
+# ata3: <ATA channel 1> on atapci0
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 8MB> on obio0
+# Timecounter "mips" frequency 700000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# ad0: Device does not support APM
+# ad0: 1006MB <CF 1GB 20080112> at ata2-master WDMA2
+# Trying to mount root from ufs:/dev/ad0s1a
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show version 
+# Hostname: VELMA-TOWER-SRX220 # Model: srx220h-poe # JUNOS Software Release [12.1X46-D20.5] #  # grnoc-mon at VELMA-TOWER-SRX220> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 14  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show system uptime 
+# System booted: 2015-03-29 00:29 CDT 
+# Protocols started: 2015-03-29 00:31 CDT 
+# Last configured: 2015-04-14 15:58 CDT  by admin
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#ge-0/0/2 down down
+#ge-0/0/3 up up
+#ge-0/0/3.0 up up
+#ge-0/0/4 up up
+#ge-0/0/4.0 up up
+#ge-0/0/5 down down
+#ge-0/0/6 down down
+#ge-0/0/7 down down
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+# grnoc-mon at VELMA-TOWER-SRX220> show configuration 
+## Last commit: 2015-04-14 15:58:51 CDT by admin
+version 12.1X46-D20.5;
+system {
+    host-name VELMA-TOWER-SRX220;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.253.4;
+        164.58.198.10;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.199.125;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+        class admin {
+            idle-timeout 1044;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+            max-sessions-per-connection 32;
+        }
+        telnet {
+            connection-limit 4;
+        }
+        netconf {
+            ssh;
+        }
+    }
+    syslog {
+        archive size 10m files 20;
+        user * {
+            any emergency;
+        }
+        host 164.58.253.92 {
+            any any;
+        }
+        host 164.58.253.38 {
+            any any;
+        }
+        file messages {
+            any notice;
+            authorization info;
+            match "!(.*LI Packet length.*|.* grnoc-mon.*|.*Connection closed by 164.58.253.113.*|.* exited, status 255.*)";
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file default-log-messages {
+            any info;
+            match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|CFMD_CCM_DEFECT| LFMD_3AH | RPD_MPLS_PATH_BFD|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)";
+            structured-data;
+        }
+        file updown {
+            any any;
+            match "(TRAP_LINK)";
+        }
+    }
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        description "CORE FE to Velma-7200 FastEthernet0/1 | OneNet-VELM-VELM-FE-15464";
+        unit 0 {
+            family inet {
+                address 164.58.247.82/30;
+            }
+        }
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    ge-0/0/2 {
+        disable;
+    }
+    ge-0/0/3 {
+        description Velma-Argus-DC-Plant;
+        unit 0 {
+            family inet {
+                address 156.110.27.153/30;
+            }
+        }
+    }
+    ge-0/0/4 {
+        description Velma-Alma-Public-Schools-3Mb-WIRELESS-CIR0004253-LEASE;
+        unit 0 {
+            family inet {
+                address 156.110.46.25/30 {
+                    preferred;
+                }
+                address 156.110.47.41/29;
+                address 164.58.27.237/30;
+            }
+        }
+    }
+    ge-0/0/5 {
+        disable;
+    }
+    ge-0/0/6 {
+        disable;
+    }
+    ge-0/0/7 {
+        disable;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+                address 164.58.199.125/32;
+            }
+            family inet6 {
+                address 2610:1d8::164:58:199:125/128;
+            }
+        }
+    }
+}
+snmp {
+    location "Velma, OK";
+    contact "Net Group";
+    client-list snmp-management {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+    trap-group "<removed>" {
+        version v2;
+        targets {
+            164.58.253.34;
+            164.58.253.35;
+        }
+    }
+}
+routing-options {
+    router-id 164.58.199.125;
+    autonomous-system 5078;
+    forwarding-table {
+        export LOAD-BALANCE;
+    }
+}
+protocols {
+    mpls {
+        interface lo0.0;
+        interface ge-0/0/0.0;
+    }
+    bgp {
+        group CORE-RR-OKC-V4 {
+            type internal;
+            local-address 164.58.199.125;
+            family inet {
+                unicast;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 164.58.199.216 {
+                description OKC-CORE6-IBGP-V4;
+            }
+        }
+        group CORE-RR-TUL-V4 {
+            type internal;
+            local-address 164.58.199.125;
+            family inet {
+                unicast;
+            }
+#            authentication-key <removed>;
+            export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+            peer-as 5078;
+            neighbor 164.58.199.226 {
+                description TUL-CORE6-IBGP-V4;
+            }
+        }
+    }
+    ospf {
+        reference-bandwidth 100g;
+        area 0.0.0.0 {
+            interface lo0.0 {
+                passive;
+            }
+            interface ge-0/0/0.0;
+        }
+    }
+}
+policy-options {
+    prefix-list PRE-LDP-SOURCES {
+        10.199.0.0/16;
+        164.58.198.0/23;
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-MGMT-SOURCES {
+        64.207.244.14/32;
+        66.129.224.37/32;
+        129.15.127.96/28;
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.10.0/24;
+        164.58.15.0/24;
+        164.58.244.0/22;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-RADIUS-SOURCES {
+        apply-path "system radius-server <*>";
+    }
+    prefix-list PRE-NTP-SOURCES {
+        apply-path "system ntp server <*>";
+    }
+    prefix-list PRE-DNS-SOURCES {
+        apply-path "system name-server <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        apply-path "snmp client-list snmp-management <1*>";
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-BGP-ALLOW {
+        apply-path "protocols bgp group <*> neighbor <*>";
+    }
+    prefix-list PRE-L0-SOURCES {
+        apply-path "interfaces lo0 unit <*> family inet address <164.*>";
+    }
+    policy-statement LOAD-BALANCE {
+        then {
+            load-balance per-packet;
+        }
+    }
+    policy-statement REDISTRIBUTE-DIRECTS {
+        term 1 {
+            from protocol direct;
+            then {
+                community add VELMA;
+                external {
+                    type 1;
+                }
+                accept;
+            }
+        }
+    }
+    policy-statement REDISTRIBUTE-STATICS {
+        term 1 {
+            from protocol static;
+            then {
+                community add VELMA;
+                accept;
+            }
+        }
+    }
+    community VELMA members 5078:9125;
+}
+security {
+    forwarding-options {
+        family {
+            inet6 {
+                mode packet-based;
+            }
+            mpls {
+                mode packet-based;
+            }
+            iso {
+                mode packet-based;
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term FIRST-FRAG {
+                from {
+                    first-fragment;
+                }
+                then {
+                    discard;
+                }
+            }
+            term NEXT-FRAG {
+                from {
+                    is-fragment;
+                }
+                then {
+                    discard;
+                }
+            }
+            term OSPF-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol ospf;
+                }
+                then accept;
+            }
+            term BGP-ALLOW {
+                from {
+                    prefix-list {
+                        PRE-BGP-ALLOW;
+                    }
+                    protocol tcp;
+                    port 179;
+                }
+                then accept;
+            }
+            term RADIUS-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-RADIUS-SOURCES;
+                    }
+                    protocol [ udp tcp ];
+                    port [ radius radacct ];
+                }
+                then accept;
+            }
+            term NTP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-NTP-SOURCES;
+                        PRE-L0-SOURCES;
+                    }
+                    protocol udp;
+                    port ntp;
+                }
+                then accept;
+            }
+            term DOMAIN-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-DNS-SOURCES;
+                    }
+                    port domain;
+                }
+                then accept;
+            }
+            term SYSLOG-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    port syslog;
+                }
+                then accept;
+            }
+            term FTP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    port ftp;
+                }
+                then accept;
+            }
+            term JSPACE-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                    }
+                    source-port 7408;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol [ tcp udp ];
+                    port [ snmp snmptrap ];
+                }
+                then accept;
+            }
+            term LDP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LDP-SOURCES;
+                    }
+                    port ldp;
+                }
+                then accept;
+            }
+            term PIM-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol pim;
+                }
+                then accept;
+            }
+            term BFD-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol udp;
+                    port [ 3784 3785 ];
+                }
+                then accept;
+            }
+            term ICMP-ALLOW {
+                from {
+                    protocol icmp;
+                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+                }
+                then accept;
+            }
+            term TRACEROUTE-ALLOW {
+                from {
+                    protocol udp;
+                    destination-port 33434-33523;
+                }
+                then accept;
+            }
+            term DENY-SERVICES-INBOUND {
+                from {
+                    destination-port [ ssh telnet http https snmp ntp domain ];
+                }
+                then {
+                    discard;
+                }
+            }
+            term SERVICES-OUTBOUND {
+                from {
+                    source-port [ ssh telnet ];
+                }
+                then accept;
+            }
+            term DENY_ALL {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+    policer 10M-POL {
+        logical-interface-policer;
+        if-exceeding {
+            bandwidth-limit 10m;
+            burst-size-limit 300k;
+        }
+        then discard;
+    }
+    policer 15M-POL {
+        logical-interface-policer;
+        if-exceeding {
+            bandwidth-limit 15m;
+            burst-size-limit 300k;
+        }
+        then discard;
+    }
+}
+# grnoc-mon at VELMA-TOWER-SRX220> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 164.58.247.81    ge-0/0/0.0             Full      164.58.199.185
+# 
+# grnoc-mon at VELMA-TOWER-SRX220> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
+# grnoc-mon at VELMA-TOWER-SRX220> show system snapshot media internal 
+# Information for snapshot on       internal (/dev/ad0s1a) (primary)
+# Creation date: Mar 29 00:29:16 2015
+# JUNOS version on snapshot:
+#   junos  : 12.1X46-D20.5-domestic
+# Information for snapshot on       internal (/dev/ad0s2a) (backup)
+# Creation date: Mar 29 01:13:13 2015
+# JUNOS version on snapshot:
+#   junos  : 12.1X46-D20.5-domestic
+# 



More information about the Nocrancid mailing list