[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Apr 13 16:03:03 CDT 2016


Index: configs/allen-public-library.client.onenet.net
===================================================================
--- configs/allen-public-library.client.onenet.net	(revision 141660)
+++ configs/allen-public-library.client.onenet.net	(working copy)
@@ -141,8 +141,8 @@
 #ge-0/0/4.0 up up
 #ge-0/0/5 up up
 #ge-0/0/5.0 up up
-#ge-0/0/6 up up
-#ge-0/0/6.0 up up
+#ge-0/0/6 up down
+#ge-0/0/6.0 up down
 #ge-0/0/7 up down
 #ge-0/0/7.0 up down
 #ge-0/0/8 up down
Index: configs/choctaw-interlocal-coop.client.onenet.net
===================================================================
--- configs/choctaw-interlocal-coop.client.onenet.net	(revision 141627)
+++ configs/choctaw-interlocal-coop.client.onenet.net	(working copy)
@@ -8,6 +8,7 @@
 # rescue  2016-02-17 10:58:22 CST by root via recovery-mgmt
 # 
 # grnoc-mon at CHOCTAW-INTERLOCAL-SRX240-004878-LR> show chassis environment 
+# show chassis firmware
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
 #       Routing Engine CPU             OK        
Index: configs/wewoka-public-schools.client.onenet.net
===================================================================
--- configs/wewoka-public-schools.client.onenet.net	(revision 141070)
+++ configs/wewoka-public-schools.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at WEWOKA-PUBLIC-SCHOOLS-ASSET-004889> show system commit 
+# show chassis environment
 #   2015-12-30 13:42:47 CST by joel via cli
 #   2015-12-30 21:35:24 CST by joel via cli
 #   2015-12-30 16:49:51 CST by root via other
Index: configs/swi.cai.law.onenet.net
===================================================================
--- configs/swi.cai.law.onenet.net	(revision 141447)
+++ configs/swi.cai.law.onenet.net	(working copy)
@@ -36,6 +36,7 @@
 # 
 # {master:0}
 # grnoc-mon at SWI-Lawton-Indian-Hospital-EX-3300> show chassis hardware 
+# show chassis hardware models
 # Hardware inventory:
 # Item             Version  Part number  Serial number     Description
 # Chassis                                GD0211401984      EX3300-24T
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 141663)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -427,8 +427,8 @@
 #t1-2/3/0:1:11.0 up up
 #t1-2/3/0:1:12 up up
 #t1-2/3/0:1:12.0 up up
-#t1-2/3/0:1:13 up down
-#t1-2/3/0:1:13.0 up down
+#t1-2/3/0:1:13 up up
+#t1-2/3/0:1:13.0 up up
 #t1-2/3/0:1:14 up up
 #t1-2/3/0:1:14.0 up up
 #t1-2/3/0:1:15 up up
@@ -11601,6 +11601,7 @@
 # 172.23.3.194     lsq-5/1/0.137          Full      10.199.2.22
 # 172.23.3.6       lsq-5/1/0.37           Full      10.199.2.27
 # 172.23.3.102     lsq-5/1/0.97           Full      10.199.2.125
+# 172.23.0.162     t1-2/3/0:1:13.0        Full      10.199.2.59
 # 172.23.2.134     t1-2/3/0:1:16.0        Full      10.199.2.108
 # 172.23.4.150     t1-2/3/0:2:28.0        Full      10.199.2.29
 # 172.23.0.230     t1-2/3/0:2:8.0         Full      10.199.2.111
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 141662)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -552,8 +552,8 @@
 #ge-1/0/24.0 up down
 #ge-1/0/25 up up
 #ge-1/0/25.0 up up
-#ge-1/0/26 up up
-#ge-1/0/26.0 up up
+#ge-1/0/26 up down
+#ge-1/0/26.0 up down
 #ge-1/0/27 up down
 #ge-1/0/27.0 up down
 #ge-1/0/28 up down
@@ -600,8 +600,8 @@
 #ge-2/0/0.0 up down
 #ge-2/0/1 up down
 #ge-2/0/1.0 up down
-#ge-2/0/2 up up
-#ge-2/0/2.0 up up
+#ge-2/0/2 up down
+#ge-2/0/2.0 up down
 #ge-2/0/3 up down
 #ge-2/0/3.0 up down
 #ge-2/0/4 up down
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net	(revision 141663)
+++ configs/stringtown-high-school.client.onenet.net	(working copy)
@@ -1,8 +1,8 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system commit 
+#   2016-02-17 16:01:39 CST by sean via cli commit confirmed, rollback in 3mins
 # show chassis environment
-#   2016-02-17 16:01:39 CST by sean via cli commit confirmed, rollback in 3mins
 #   2016-01-19 09:16:22 CST by joel via cli
 #   2016-01-11 10:33:48 CST by joel via cli
 #   2016-01-07 22:36:29 CST by root via cli
Index: configs/berryhill-public-schools.client.onenet.net
===================================================================
--- configs/berryhill-public-schools.client.onenet.net	(revision 141663)
+++ configs/berryhill-public-schools.client.onenet.net	(working copy)
@@ -3,7 +3,6 @@
 # grnoc-mon at BERRYHILL-PUBLIC-SCHOOLS-TAG-004350> show system commit 
 #   2015-12-04 13:30:09 CST by onenet via cli commit confirmed, rollback in 5mins
 #   2014-11-04 12:13:31 CST by onenet via cli
-# show chassis environment
 #   2014-11-04 12:04:16 CST by onenet via cli
 #   2014-11-04 11:57:08 CST by onenet via cli
 #   2014-11-03 14:08:07 CST by root via cli
Index: configs/okc-vpn-cluster.okc.onenet.net
===================================================================
--- configs/okc-vpn-cluster.okc.onenet.net	(revision 141663)
+++ configs/okc-vpn-cluster.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show system commit 
+#   2016-04-13 15:14:35 CDT by sky via cli
 #   2016-04-13 14:36:35 CDT by sky via cli
 #   2016-04-13 14:35:25 CDT by sky via cli
 #   2016-04-13 14:15:36 CDT by sky via cli
 #   2016-04-13 13:58:08 CDT by sky via cli
 #   2016-04-13 13:50:20 CDT by sky via cli
-#   2016-04-13 13:47:30 CDT by sky via cli
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show chassis environment 
 # node0:
 # --------------------------------------------------------------------------
@@ -234,12 +234,12 @@
 # --------------------------------------------------------------------------
 # System booted: 2016-03-01 19:49 CST 
 # Protocols started: 2016-03-01 20:04 CST 
-# Last configured: 2016-04-13 14:36 CDT  by sky
+# Last configured: 2016-04-13 15:14 CDT  by sky
 # 
 # node1:
 # --------------------------------------------------------------------------
 # System booted: 2016-03-01 19:35 CST 
-# Last configured: 2016-04-13 14:36 CDT  by root
+# Last configured: 2016-04-13 15:14 CDT  by root
 # 
 # {primary:node0}
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show interface terse 
@@ -349,12 +349,14 @@
 #st0.12 up up
 #st0.13 up up
 #st0.14 up up
+#st0.15 up up
+#st0.16 up up
 #swfab0 up down
 #swfab1 up down
 #tap up up
 #vlan up up
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show configuration 
-## Last commit: 2016-04-13 14:36:35 CDT by sky
+## Last commit: 2016-04-13 15:14:35 CDT by sky
 version 12.1X46-D40.2;
 groups {
     node0 {
@@ -765,6 +767,20 @@
                 address 10.119.11.12/31;
             }
         }
+        unit 15 {
+            description "ODOT-ALTUS-MGMT [NO-MONITOR]";
+            family inet {
+                mtu 1440;
+                address 10.119.8.14/31;
+            }
+        }
+        unit 16 {
+            description "ODOT-ALTUS-AGENCY-DATA [NO-MONITOR]";
+            family inet {
+                mtu 1440;
+                address 10.119.11.14/31;
+            }
+        }
     }
 }
 snmp {
@@ -1000,6 +1016,16 @@
             proposals PRE-G2-AES128-SHA;
 #            pre-shared-#key <removed>;
         }
+        policy IKE-ODOT-DATA-ALTUS {
+            mode aggressive;
+            proposals PRE-G2-AES128-SHA;
+#            pre-shared-#key <removed>;
+        }
+        policy IKE-ODOT-MGMT-ALTUS {
+            mode aggressive;
+            proposals PRE-G2-AES128-SHA;
+#            pre-shared-#key <removed>;
+        }
         gateway IKE-GATE-COMANCHE-PS {
             ike-policy IKE-COMANCHE-PS;
             address 166.141.5.145;
@@ -1091,6 +1117,18 @@
             external-interface lo0.0;
             local-address 164.58.0.253;
         }
+        gateway IKE-GATE-ODOT-DATA-ALTUS {
+            ike-policy IKE-ODOT-DATA-ALTUS;
+            dynamic user-at-hostname "altusdata at odot.ok.gov";
+            external-interface lo0.0;
+            local-address 164.58.0.253;
+        }
+        gateway IKE-GATE-ODOT-MGMT-ALTUS {
+            ike-policy IKE-ODOT-MGMT-ALTUS;
+            dynamic user-at-hostname "altusmgmt at odot.ok.gov";
+            external-interface lo0.0;
+            local-address 164.58.0.252;
+        }
     }
     ipsec {
         proposal ESP-AES128-SHA {
@@ -1144,6 +1182,12 @@
         policy VPN-POLICY-ODOT-DATA-ATOKA {
             proposals ESP-AES128-SHA;
         }
+        policy VPN-POLICY-ODOT-DATA-ALTUS {
+            proposals ESP-AES128-SHA;
+        }
+        policy VPN-POLICY-ODOT-MGMT-ALTUS {
+            proposals ESP-AES128-SHA;
+        }
         vpn IPSEC-VPN-COMANCHE-PS {
             bind-interface st0.0;
             ike {
@@ -1289,6 +1333,22 @@
             }
             establish-tunnels immediately;
         }
+        vpn IPSEC-VPN-ODOT-DATA-ALTUS {
+            bind-interface st0.16;
+            ike {
+                gateway IKE-GATE-ODOT-DATA-ALTUS;
+                ipsec-policy VPN-POLICY-ODOT-DATA-ALTUS;
+            }
+            establish-tunnels immediately;
+        }
+        vpn IPSEC-VPN-ODOT-MGMT-ALTUS {
+            bind-interface st0.15;
+            ike {
+                gateway IKE-GATE-ODOT-MGMT-ALTUS;
+                ipsec-policy VPN-POLICY-ODOT-MGMT-ALTUS;
+            }
+            establish-tunnels immediately;
+        }
     }
     alg {
         msrpc disable;
@@ -1554,6 +1614,18 @@
                         }
                     }
                 }
+                st0.15 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                        protocols {
+                            bgp;
+                            ospf;
+                        }
+                    }
+                }
             }
         }
         security-zone OMES-AGENCY-DATA {
@@ -1594,6 +1666,18 @@
                         }
                     }
                 }
+                st0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                        protocols {
+                            bgp;
+                            ospf;
+                        }
+                    }
+                }
             }
         }
         security-zone DHS-DATA {
@@ -1815,12 +1899,14 @@
         interface reth1.601;
         interface st0.2;
         interface st0.14;
+        interface st0.16;
         protocols {
             ospf {
                 area 0.0.0.0 {
                     interface reth1.601;
                     interface st0.2;
                     interface st0.14;
+                    interface st0.16;
                 }
             }
         }
@@ -1833,6 +1919,7 @@
         interface st0.6;
         interface st0.9;
         interface st0.13;
+        interface st0.15;
         protocols {
             ospf {
                 area 0.0.0.0 {
@@ -1842,6 +1929,7 @@
                     interface st0.6;
                     inactive: interface st0.9;
                     interface st0.13;
+                    interface st0.15;
                 }
             }
         }
Index: configs/odmhsas.central-office.okc.client.onenet.net
===================================================================
--- configs/odmhsas.central-office.okc.client.onenet.net	(revision 141594)
+++ configs/odmhsas.central-office.okc.client.onenet.net	(working copy)
@@ -187,7 +187,7 @@
 #st0.21 up up
 #st0.22 up up
 #st0.23 up up
-#st0.24 up up
+#st0.24 up down
 #st0.25 up up
 #st0.26 up up
 #st0.27 up up



More information about the Nocrancid mailing list