[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri Apr 15 12:03:13 CDT 2016


Index: configs/allen-public-library.client.onenet.net
===================================================================
--- configs/allen-public-library.client.onenet.net	(revision 141696)
+++ configs/allen-public-library.client.onenet.net	(working copy)
@@ -141,8 +141,8 @@
 #ge-0/0/4.0 up up
 #ge-0/0/5 up up
 #ge-0/0/5.0 up up
-#ge-0/0/6 up down
-#ge-0/0/6.0 up down
+#ge-0/0/6 up up
+#ge-0/0/6.0 up up
 #ge-0/0/7 up down
 #ge-0/0/7.0 up down
 #ge-0/0/8 up up
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 141717)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -20,7 +20,6 @@
 # Power Power Supply 0                 OK        
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis firmware 
-# show chassis fpc detail
 # Part                     Type       Version
 # FPC 0                    O/S        Version 12.1X44-D35.5 by builder on 2014-05
 # FWDD                     O/S        Version 12.1X44-D35.5 by builder on 2014-05
Index: configs/oja-sw-youth-academy-manitou.client.onenet.net
===================================================================
--- configs/oja-sw-youth-academy-manitou.client.onenet.net	(revision 141684)
+++ configs/oja-sw-youth-academy-manitou.client.onenet.net	(working copy)
@@ -139,7 +139,7 @@
 #ppd0 up up
 #ppe0 up up
 #st0 up up
-#st0.1 up up
+#st0.1 up down
 #tap up up
 #vlan up up
 #vlan.3 up up
Index: configs/tul-adva.p.onenet.net
===================================================================
--- configs/tul-adva.p.onenet.net	(revision 141707)
+++ configs/tul-adva.p.onenet.net	(working copy)
@@ -461,8 +461,8 @@
         <part name="PL-6-11-C1" description="XFP-G" hw_version="" part_id="XFP-G" part_num="" serial_number="FA94154302983" slot="PL-6-11-C1" vendor_id="ADVA"></part>
         <part name="PL-6-11-NE" description="XFPT-D" hw_version="" part_id="XFPT-D" part_num="" serial_number="FA27153832426" slot="PL-6-11-NE" vendor_id="ADVA"></part>
         <part name="PL-6-11-NW" description="XFPT-D" hw_version="" part_id="XFPT-D" part_num="" serial_number="FA86121900167" slot="PL-6-11-NW" vendor_id="ADVA"></part>
-        <interface name="CH-6-11-C1" abbr_name="CH-6-11-C1" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
-        <interface name="CH-6-11-NE" abbr_name="CH-6-11-NE" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
+        <interface name="CH-6-11-C1" abbr_name="CH-6-11-C1" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
+        <interface name="CH-6-11-NE" abbr_name="CH-6-11-NE" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CH-6-11-NW" abbr_name="CH-6-11-NW" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
       </part>
       <part name="MOD-6-19" description="PSU9HU-DC" hw_version="" part_id="PSU9HU-DC" part_num="" serial_number="FA93153901149" slot="MOD-6-19" vendor_id="ADVA"></part>
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 141717)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -428,10 +428,10 @@
 #ge-0/0/11.0 up up
 #ge-0/0/12 up up
 #ge-0/0/12.0 up up
-#ge-0/0/13 up down
-#ge-0/0/13.0 up down
-#ge-0/0/14 up up
-#ge-0/0/14.0 up up
+#ge-0/0/13 up up
+#ge-0/0/13.0 up up
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
 #ge-0/0/15 up down
 #ge-0/0/15.0 up down
 #ge-0/0/16 up up
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 141717)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -72,6 +72,7 @@
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis sfm detail 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis ssb 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system boot-messages 
+# show version
 # platform_early_bootinit: MX-PPC Series Early Boot Initialization
 # mxppc_set_re_type: hw.board.type is ACX-2100
 # WDOG initialized
Index: configs/core5.okc.onenet.net
===================================================================
--- configs/core5.okc.onenet.net	(revision 141716)
+++ configs/core5.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system commit 
+#   2016-04-15 11:53:38 CDT by andrew via cli commit synchronize
+#   2016-04-15 11:50:19 CDT by andrew via cli commit synchronize
+#   2016-04-15 11:48:40 CDT by andrew via cli commit synchronize
+#   2016-04-15 11:31:22 CDT by andrew via cli commit synchronize
 #   2016-04-14 15:43:18 CDT by andrew via cli commit synchronize
 #   2016-04-14 09:58:12 CDT by sean via cli commit synchronize
-#   2016-04-14 09:48:30 CDT by andrew via cli commit synchronize
-#   2016-04-13 17:30:04 CDT by andrew via cli commit synchronize
-#   2016-04-13 11:15:09 CDT by sean via cli commit synchronize
-#   2016-04-13 08:41:17 CDT by andrew via cli commit synchronize
 # grnoc-mon at OKC-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -480,7 +480,7 @@
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system uptime 
 # System booted: 2014-09-16 23:50 CDT 
 # Protocols started: 2014-09-16 23:51 CDT 
-# Last configured: 2016-04-14 15:43 CDT  by andrew
+# Last configured: 2016-04-15 11:53 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at OKC-CORE5-MX480-RE0> show interface terse 
@@ -803,6 +803,7 @@
 #irb.603 up up
 #irb.604 up up
 #irb.605 up up
+#irb.606 up up
 #lo0 up up
 #lo0.0 up up
 #lo0.16384 up up
@@ -885,7 +886,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE5-MX480-RE0> show configuration 
-## Last commit: 2016-04-14 15:43:18 CDT by andrew
+## Last commit: 2016-04-15 11:53:38 CDT by andrew
 version 12.3R7.7;
 groups {
     re0 {
@@ -2760,7 +2761,7 @@
         unit 0 {
             family bridge {
                 interface-mode trunk;
-                vlan-id-list 600-605;
+                vlan-id-list 600-606;
             }
         }
     }
@@ -2769,7 +2770,7 @@
         unit 0 {
             family bridge {
                 interface-mode trunk;
-                vlan-id-list 600-605;
+                vlan-id-list 600-606;
             }
         }
     }
@@ -3079,6 +3080,13 @@
                 address 10.119.48.138/31;
             }
         }
+        unit 606 {
+            description OKC-VPN-CLUSTER-TAGNET;
+            family inet {
+                mtu 1500;
+                address 10.119.0.20/31;
+            }
+        }
     }
     lo0 {
         description OKC-CORE5-MX480-Loopback;
@@ -5035,6 +5043,34 @@
             then reject;
         }
     }
+    policy-statement EBGP-ONENET-VPN-TAGNET-EXPORT {
+        term SEND-FIRST-26 {
+            from {
+                route-filter 10.119.0.0/26 orlonger;
+            }
+            then reject;
+        }
+        term SEND-ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EBGP-ONENET-VPN-TAGNET-IMPORT {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term ACCEPT-ROUTES {
+            then accept;
+        }
+    }
     policy-statement EBGP-OSF-IMPORT {
         term prefixes {
             from {
@@ -12682,6 +12718,7 @@
         instance-type vrf;
         interface xe-2/0/1.1102;
         interface xe-2/0/1.1106;
+        interface irb.606;
         route-distinguisher 164.58.199.215:2531;
         vrf-import TAGNET-VRF-IMPORT;
         vrf-export TAGNET-VRF-EXPORT;
@@ -12703,6 +12740,19 @@
                         peer-as 40628;
                     }
                 }
+                group EBGP-ONENET-VPN {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.0.21 {
+                        description "EBGP-TAGNET-L3VPN-TO-ONENET-VPN [NO-MONITOR]";
+                        import EBGP-ONENET-VPN-TAGNET-IMPORT;
+#                        authentication-#key <removed>;
+                        export EBGP-ONENET-VPN-TAGNET-EXPORT;
+                        peer-as 64520;
+                    }
+                }
             }
         }
     }
@@ -12827,6 +12877,10 @@
         vlan-id 605;
         routing-interface irb.605;
     }
+    VLAN-606 {
+        vlan-id 606;
+        routing-interface irb.606;
+    }
     VLAN_233 {
         domain-type bridge;
         vlan-id 233;
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 141717)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -32,8 +32,8 @@
 #   Total CPU DRAM                      ---- CPU less FPC ----
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis hardware 
-# show chassis hardware models
 # Hardware inventory:
+# show chassis hardware models
 # Item             Version  Part number  Serial number     Description
 # Chassis                                BU1214AK0530      SRX240H2
 # Routing Engine   REV 10   750-043609   ACLC7669          RE-SRX240H2
@@ -50,7 +50,6 @@
 # show chassis sfm detail
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis sfm detail
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis ssb 
-# show system boot-messages
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system boot-messages 
 # kld_map_v: 0x8ff80000, kld_map_p: 0x0
 # Copyright (c) 1996-2014, Juniper Networks, Inc.
@@ -115,7 +114,7 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show version 
-# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # file list /var/tmp detail # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system uptime 
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 141717)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show system commit 
+# show chassis environment
 #   2015-12-14 15:34:07 CST by sean via cli
 #   2015-11-20 10:50:09 CST by joel via cli
 #   2015-11-20 10:48:21 CST by joel via cli
@@ -8,7 +9,6 @@
 #   2015-10-28 12:24:40 CDT by joel via cli commit confirmed, rollback in 10mins
 #   2015-10-28 20:20:23 CDT by root via cli commit confirmed, rollback in 5mins
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show chassis environment 
-# show chassis firmware
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
 #       Routing Engine CPU             OK        
Index: configs/okc-vpn-cluster.okc.onenet.net
===================================================================
--- configs/okc-vpn-cluster.okc.onenet.net	(revision 141686)
+++ configs/okc-vpn-cluster.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show system commit 
+#   2016-04-15 11:39:32 CDT by andrew via cli
 #   2016-04-14 10:33:48 CDT by sky via cli
 #   2016-04-14 10:19:08 CDT by sky via cli
 #   2016-04-13 15:14:35 CDT by sky via cli
 #   2016-04-13 14:36:35 CDT by sky via cli
 #   2016-04-13 14:35:25 CDT by sky via cli
-#   2016-04-13 14:15:36 CDT by sky via cli
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show chassis environment 
 # node0:
 # --------------------------------------------------------------------------
@@ -234,12 +234,12 @@
 # --------------------------------------------------------------------------
 # System booted: 2016-03-01 19:49 CST 
 # Protocols started: 2016-03-01 20:04 CST 
-# Last configured: 2016-04-14 10:33 CDT  by sky
+# Last configured: 2016-04-15 11:39 CDT  by andrew
 # 
 # node1:
 # --------------------------------------------------------------------------
 # System booted: 2016-03-01 19:35 CST 
-# Last configured: 2016-04-14 10:33 CDT  by root
+# Last configured: 2016-04-15 11:39 CDT  by root
 # 
 # {primary:node0}
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show interface terse 
@@ -271,6 +271,7 @@
 #ge-0/0/15.603 up up
 #ge-0/0/15.604 up up
 #ge-0/0/15.605 up up
+#ge-0/0/15.606 up up
 #ge-0/0/15.32767 up up
 #ge-5/0/0 up down
 #ge-5/0/1 up up
@@ -297,6 +298,7 @@
 #ge-5/0/15.603 up up
 #ge-5/0/15.604 up up
 #ge-5/0/15.605 up up
+#ge-5/0/15.606 up up
 #ge-5/0/15.32767 up up
 #fab0 up up
 #fab0.0 up up
@@ -332,6 +334,7 @@
 #reth1.603 up up
 #reth1.604 up up
 #reth1.605 up up
+#reth1.606 up up
 #reth1.32767 up up
 #st0 up up
 #st0.0 up up
@@ -356,7 +359,7 @@
 #tap up up
 #vlan up up
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show configuration 
-## Last commit: 2016-04-14 10:33:48 CDT by sky
+## Last commit: 2016-04-15 11:39:32 CDT by andrew
 version 12.1X46-D40.2;
 groups {
     node0 {
@@ -662,6 +665,14 @@
                 address 10.119.48.139/31;
             }
         }
+        unit 606 {
+            description "CORE5-OKC-TAGNET [NO-MONITOR]";
+            vlan-id 606;
+            family inet {
+                mtu 1500;
+                address 10.119.0.21/31;
+            }
+        }
     }
     st0 {
         unit 0 {
@@ -931,6 +942,22 @@
             then reject;
         }
     }
+    policy-statement EBGP-TAGNET-L3VPN-EXPORT {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ROUTES {
+            then accept;
+        }
+    }
+    policy-statement EBGP-TAGNET-L3VPN-IMPORT {
+        term ACCEPT-ROUTES {
+            then accept;
+        }
+    }
 }
 security {
     ike {
@@ -1484,6 +1511,18 @@
                 }
             }
         }
+        from-zone TAGNET to-zone TAGNET {
+            policy 201604151135 {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
     }
     zones {
         security-zone UNTRUST {
@@ -1816,6 +1855,21 @@
                 }
             }
         }
+        security-zone TAGNET {
+            interfaces {
+                reth1.606 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+            }
+        }
     }
 }
 firewall {
@@ -1964,6 +2018,27 @@
             }
         }
     }
+    TAGNET {
+        instance-type virtual-router;
+        interface reth1.606;
+        protocols {
+            bgp {
+                group ONENET-CORE {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.0.20 {
+                        description "EBGP-ONENET-VPN-TO-TAGNET-L3VPN [NO-MONITOR]";
+                        import EBGP-TAGNET-L3VPN-IMPORT;
+#                        authentication-#key <removed>;
+                        export EBGP-TAGNET-L3VPN-EXPORT;
+                        peer-as 5078;
+                    }
+                }
+            }
+        }
+    }
 }
 applications {
     application CUSTOM-TCP-50000 {



More information about the Nocrancid mailing list