[Nocrancid] autopop-onenet.net/core1.ptc.onenet.net[0] router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Sep 30 13:15:47 CDT 2015


Index: configs/core1.ptc.onenet.net
===================================================================
--- configs/core1.ptc.onenet.net	(revision 134924)
+++ configs/core1.ptc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TULSA-PTC1-MX480-RE0> show system commit 
+#   2015-09-30 12:42:43 CDT by andrew via cli commit synchronize
 #   2015-09-28 17:13:58 CDT by andrew via cli commit synchronize
 #   2015-09-25 16:31:34 CDT by andrew via cli commit synchronize
 #   2015-09-25 16:23:07 CDT by andrew via cli commit synchronize
 #   2015-09-25 16:15:35 CDT by andrew via cli commit synchronize
 #   2015-09-25 16:07:57 CDT by andrew via cli commit synchronize
-#   2015-09-25 12:51:48 CDT by rnordmark via cli commit synchronize
 # grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -320,7 +320,7 @@
 # grnoc-mon at TULSA-PTC1-MX480-RE0> show system uptime 
 # System booted: 2015-06-07 23:52 CDT 
 # Protocols started: 2015-06-07 23:55 CDT 
-# Last configured: 2015-09-28 17:13 CDT  by andrew
+# Last configured: 2015-09-30 12:42 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at TULSA-PTC1-MX480-RE0> show interface terse 
@@ -429,7 +429,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at TULSA-PTC1-MX480-RE0> show configuration 
-## Last commit: 2015-09-28 17:13:58 CDT by andrew
+## Last commit: 2015-09-30 12:42:43 CDT by andrew
 version 13.3R6.5;
 groups {
     re0 {
@@ -726,6 +726,9 @@
         description "UPSTREAM L3 10G ^ COGENT-TUL IPv4 ^ CIR000XXXX";
         unit 0 {
             family inet {
+                filter {
+                    input COGENT-INBOUND;
+                }
                 sampling {
                     input;
                 }
@@ -1958,6 +1961,19 @@
                 }
             }
         }
+        filter COGENT-INBOUND {
+            term APPLE-RL {
+                from {
+                    source-address {
+                        17.253.1.0/24;
+                    }
+                }
+                then policer 1G-ABUSE;
+            }
+            term ACCEPT-ALL-ELSE {
+                then accept;
+            }
+        }
     }
     policer 20MB {
         logical-interface-policer;
@@ -1999,6 +2015,13 @@
         }
         then discard;
     }
+    policer 1G-ABUSE {
+        if-exceeding {
+            bandwidth-limit 1g;
+            burst-size-limit 100m;
+        }
+        then discard;
+    }
 }
 routing-instances {
     TAGNET-L3VPN {



More information about the Nocrancid mailing list