[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Apr 27 13:03:10 CDT 2016


Index: router.db
===================================================================
--- router.db	(revision 142085)
+++ router.db	(working copy)
@@ -325,6 +325,7 @@
 odot-stigler-regmaint.client.onenet.net:juniper:up
 odot-stillwater-residence.client.onenet.net:juniper:up
 odot-tahlequah-regmaint.client.onenet.net:juniper:up
+odot-walters-regmiant.client.onenet.net:juniper:up
 odot.elreno.residency.client.onenet.net:juniper:up
 oeta-alva-tower.nid.onenet.net:fsp150:up
 oeta-beaver-tower.nid.onenet.net:fsp150:up
Index: routers.up
===================================================================
--- routers.up	(revision 142084)
+++ routers.up	(working copy)
@@ -265,6 +265,7 @@
 odot-stigler-regmaint.client.onenet.net:juniper
 odot-stillwater-residence.client.onenet.net:juniper
 odot-tahlequah-regmaint.client.onenet.net:juniper
+odot-walters-regmiant.client.onenet.net:juniper
 odot.elreno.residency.client.onenet.net:juniper
 oeta-alva-tower.nid.onenet.net:fsp150
 oeta-beaver-tower.nid.onenet.net:fsp150
Index: configs/hub.sem.onenet.net
===================================================================
--- configs/hub.sem.onenet.net	(revision 142066)
+++ configs/hub.sem.onenet.net	(working copy)
@@ -314,8 +314,8 @@
 #t1-2/0/2:3.0 up up
 #t1-2/0/2:4 up up
 #t1-2/0/2:4.0 up up
-#t1-2/0/2:5 up down
-#t1-2/0/2:5.0 up down
+#t1-2/0/2:5 up up
+#t1-2/0/2:5.0 up up
 #t1-2/0/2:6 up up
 #t1-2/0/2:6.0 up up
 #t1-2/0/2:7 up up
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 142084)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -1,7 +1,6 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system commit 
-# show chassis environment
 #   2016-03-25 14:17:43 CDT by joel via cli
 #   2015-10-26 13:12:04 CDT by admin via cli
 #   2015-10-26 13:08:26 CDT by admin via cli
Index: configs/faye.okcdc.onenet.net
===================================================================
--- configs/faye.okcdc.onenet.net	(revision 142084)
+++ configs/faye.okcdc.onenet.net	(working copy)
@@ -24,6 +24,12 @@
 #       AFEB 0 AFEB Processor          OK        
 #       AFEB 0 LU Temp                 OK        
 #       AFEB 0 MQ Temp                 OK        
+#       AFEB 0 AFEB Processor          OK        
+#       AFEB 0 LU Temp                 OK        
+#       AFEB 0 MQ Temp                 OK        
+#       AFEB 0 AFEB Processor          OK        
+#       AFEB 0 LU Temp                 OK        
+#       AFEB 0 MQ Temp                 OK        
 #       AFEB 0 QX Temp                 OK        
 # Fans  Fan 1                          OK
 #       Fan 2                          OK
Index: configs/odot-sayre-regmaint.client.onenet.net
===================================================================
--- configs/odot-sayre-regmaint.client.onenet.net	(revision 142077)
+++ configs/odot-sayre-regmaint.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ODOT-SAYRE-REGMAINT-SRX210> show system commit 
+#   2016-04-27 12:02:41 CDT by andrew via cli
 #   2016-04-27 10:46:05 CDT by admin via cli
 #   2016-04-21 04:25:56 CDT by admin via cli commit confirmed, rollback in 10mins
 #   2015-07-01 21:41:56 CDT by admin via cli commit confirmed, rollback in 5mins
 #   2015-06-05 22:50:42 CDT by root via cli
 #   2015-06-05 22:42:32 CDT by root via other
-#   2015-06-04 17:18:08 CDT by root via other
 # grnoc-mon at ODOT-SAYRE-REGMAINT-SRX210> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -105,7 +105,7 @@
 # grnoc-mon at ODOT-SAYRE-REGMAINT-SRX210> show system uptime 
 # System booted: 2016-03-01 08:19 CST 
 # Protocols started: 2016-03-01 08:22 CST 
-# Last configured: 2016-04-27 10:46 CDT  by admin
+# Last configured: 2016-04-27 12:02 CDT  by andrew
 # 
 # grnoc-mon at ODOT-SAYRE-REGMAINT-SRX210> show interface terse 
 #Interface Admin Link
@@ -152,7 +152,7 @@
 #vlan.500 up up
 #vlan.501 up up
 # grnoc-mon at ODOT-SAYRE-REGMAINT-SRX210> show configuration 
-## Last commit: 2016-04-27 10:46:05 CDT by admin
+## Last commit: 2016-04-27 12:02:41 CDT by andrew
 version 12.1X44-D35.5;
 system {
     host-name ODOT-SAYRE-REGMAINT-SRX210;
@@ -364,6 +364,12 @@
     community "<removed>" {
         authorization read-only;
     }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
 }
 routing-options {
     autonomous-system 64591;
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 142084)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -569,8 +569,8 @@
 #t1-2/3/0:4:12.0 up up
 #t1-2/3/0:4:13 down down
 #t1-2/3/0:4:14 down down
-#t1-2/3/0:4:15 up down
-#t1-2/3/0:4:15.0 up down
+#t1-2/3/0:4:15 up up
+#t1-2/3/0:4:15.0 up up
 #t1-2/3/0:4:16 up up
 #t1-2/3/0:4:16.0 up up
 #t1-2/3/0:4:17 up up
@@ -1218,8 +1218,8 @@
 #t1-3/3/0:6:17.0 up up
 #t1-3/3/0:6:18 down down
 #t1-3/3/0:6:19 down down
-#t1-3/3/0:6:20 up down
-#t1-3/3/0:6:20.0 up down
+#t1-3/3/0:6:20 up up
+#t1-3/3/0:6:20.0 up up
 #t1-3/3/0:6:21 down down
 #t1-3/3/0:6:22 up up
 #t1-3/3/0:6:22.0 up up
@@ -11703,6 +11703,7 @@
 # 172.23.4.6       t1-3/3/0:4:1.0         Full      10.199.2.129
 # 172.23.2.138     t1-3/3/0:5:20.0        Full      10.199.2.109
 # 172.23.5.66      t1-3/3/0:6:17.0        Full      10.199.2.45
+# 172.23.5.98      t1-3/3/0:6:20.0        Full      10.199.2.81
 # 172.23.4.210     t1-3/3/0:6:28.0        Full      10.199.2.93
 # 172.23.5.10      t1-3/3/0:6:3.0         Full      10.199.2.113
 # 172.23.1.22      t1-3/3/0:7:14.0        Full      10.199.2.119
Index: configs/tul-adva.p.onenet.net
===================================================================
--- configs/tul-adva.p.onenet.net	(revision 142077)
+++ configs/tul-adva.p.onenet.net	(working copy)
@@ -462,6 +462,7 @@
         <part name="PL-6-11-C1" description="XFP-G" hw_version="" part_id="XFP-G" part_num="" serial_number="FA94154302983" slot="PL-6-11-C1" vendor_id="ADVA"></part>
         <part name="PL-6-11-NE" description="XFPT-D" hw_version="" part_id="XFPT-D" part_num="" serial_number="FA27153832426" slot="PL-6-11-NE" vendor_id="ADVA"></part>
       </part>
+      <part name="MOD-6-12" description="DCF" hw_version="" part_id="DCF" part_num="" serial_number="FA70131703457" slot="MOD-6-12" vendor_id="ADVA"></part>
       <part name="MOD-6-19" description="PSU9HU-DC" hw_version="" part_id="PSU9HU-DC" part_num="" serial_number="FA93153901149" slot="MOD-6-19" vendor_id="ADVA"></part>
       <part name="MOD-6-B" description="SCU" hw_version="" part_id="SCU" part_num="" serial_number="FA71153806591" slot="MOD-6-B" vendor_id="ADVA"></part>
     </part>
Index: configs/swi.cai.sei.onenet.net
===================================================================
--- configs/swi.cai.sei.onenet.net	(revision 142084)
+++ configs/swi.cai.sei.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at SWI-SEI-MUNICIPAL-HOSPITAL-EX-3300> show system commit 
+# show chassis environment
 #   2016-03-22 00:14:45 CDT by root via other
 #   2012-06-28 07:03:48 CDT by root via button
 #   2012-06-28 06:49:23 CDT by root via button
@@ -36,7 +37,6 @@
 # 
 # {master:0}
 # grnoc-mon at SWI-SEI-MUNICIPAL-HOSPITAL-EX-3300> show chassis hardware 
-# show chassis hardware models
 # Hardware inventory:
 # Item             Version  Part number  Serial number     Description
 # Chassis                                GD0211402252      EX3300-24T
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 142084)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -436,8 +436,8 @@
 #ge-0/0/15.0 up down
 #ge-0/0/16 up up
 #ge-0/0/16.0 up up
-#ge-0/0/17 up down
-#ge-0/0/17.0 up down
+#ge-0/0/17 up up
+#ge-0/0/17.0 up up
 #ge-0/0/18 up up
 #ge-0/0/18.0 up up
 #ge-0/0/19 up up
@@ -532,8 +532,8 @@
 #ge-1/0/14.0 up down
 #ge-1/0/15 up down
 #ge-1/0/15.0 up down
-#ge-1/0/16 up up
-#ge-1/0/16.0 up up
+#ge-1/0/16 up down
+#ge-1/0/16.0 up down
 #ge-1/0/17 up down
 #ge-1/0/17.0 up down
 #ge-1/0/18 up down
@@ -544,8 +544,8 @@
 #ge-1/0/20.0 up down
 #ge-1/0/21 up up
 #ge-1/0/21.0 up up
-#ge-1/0/22 up down
-#ge-1/0/22.0 up down
+#ge-1/0/22 up up
+#ge-1/0/22.0 up up
 #ge-1/0/23 up down
 #ge-1/0/23.0 up down
 #ge-1/0/24 up down
@@ -677,7 +677,7 @@
 #ge-2/0/39 up up
 #ge-2/0/39.0 up up
 #ge-2/0/40 up up
-#ge-2/0/40.0 up up
+#ge-2/0/40.0 up down
 #ge-2/0/41 up down
 #ge-2/0/41.0 up down
 #ge-2/0/42 up down
Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net	(revision 142084)
+++ configs/core5.tul.onenet.net	(working copy)
@@ -531,9 +531,9 @@
 #pfe-1/2/0.16383 up up
 #ut-1/2/0 up up
 #vt-1/2/0 up up
-#xe-1/2/0 up down
-#xe-1/2/0.80 up down
-#xe-1/2/0.32767 up down
+#xe-1/2/0 up up
+#xe-1/2/0.80 up up
+#xe-1/2/0.32767 up up
 #xe-1/2/1 up up
 #xe-1/2/1.0 up up
 #xe-1/3/0 down down
@@ -5960,6 +5960,7 @@
 Address                  State     Interface      Time     Interval  Multiplier
 10.119.20.135            Up        xe-2/3/0.170   6.000     2.000        3   
 10.119.20.149            Up        xe-1/0/1.216   6.000     2.000        3   
+10.119.20.151            Up        xe-2/3/0.164   6.000     2.000        3   
 10.119.20.153            Up        xe-2/3/0.165   6.000     2.000        3   
 164.58.15.149            Up        xe-0/1/1.148   1.200     0.400        3   
 164.58.244.19            Up        xe-2/3/0.175   1.200     0.400        3   
@@ -5975,7 +5976,7 @@
 fe80::2ac0:daff:fe4e:cef8 Up       ge-0/3/8.0     1.200     0.400        3   
 fe80::8618:8800:2aee:4fc3 Up       ae2.42         1.200     0.400        3   
 
-16 sessions, 19 clients
-Cumulative transmit rate 32.5 pps, cumulative receive rate 31.5 pps
+17 sessions, 20 clients
+Cumulative transmit rate 33.0 pps, cumulative receive rate 32.0 pps
 
 {master}
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net	(revision 142071)
+++ configs/stringtown-high-school.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system commit 
+# show chassis environment
 #   2016-02-17 16:01:39 CST by sean via cli commit confirmed, rollback in 3mins
 #   2016-01-19 09:16:22 CST by joel via cli
 #   2016-01-11 10:33:48 CST by joel via cli
Index: configs/core1.ptc.onenet.net
===================================================================
--- configs/core1.ptc.onenet.net	(revision 142065)
+++ configs/core1.ptc.onenet.net	(working copy)
@@ -137,6 +137,7 @@
 #       Xcvr 3     REV 01   740-031850   PQE10LP           SFP-LX10
 #       Xcvr 4     REV 01   740-031850   PLS51FW           SFP-LX10
 #       Xcvr 5     REV 01   740-031851   AM1041SU15G       SFP-SX
+#       Xcvr 6     REV 01   740-013111   USOTX27702        SFP-T
 #       Xcvr 8     REV 01   740-011614   PJ62FKA           SFP-LX10
 #       Xcvr 9     REV 02   740-011613   PJH27ZL           SFP-SX
 #   QXM 0          REV 05   711-028408   YZ8744            MPC QXM
Index: configs/odot-walters-regmiant.client.onenet.net
===================================================================
--- configs/odot-walters-regmiant.client.onenet.net	(revision 142086)
+++ configs/odot-walters-regmiant.client.onenet.net	(working copy)
@@ -0,0 +1,622 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show system commit 
+#   2016-04-27 12:05:15 CDT by admin via cli
+#   2016-04-23 01:01:01 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2015-11-03 16:52:21 CST by admin via cli commit confirmed, rollback in 5mins
+#   2015-10-28 07:43:24 CDT by admin via cli commit confirmed, rollback in 3mins
+#   2015-10-28 07:19:35 CDT by admin via cli commit confirmed, rollback in 3mins
+#   2015-10-28 06:38:18 CDT by admin via cli commit confirmed, rollback in 3mins
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX210 Chassis fan             OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CE0314AK0180      SRX210HE2-POE
+# Routing Engine   REV 05   750-048704   ACKX7962          RE-SRX210HE2-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  2x GE, 6x FE, 1x 3G
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis hardware models 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACKX7962
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis scb 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis sfm detail
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show chassis ssb 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.1 (no driver attached)
+# pci0: <serial bus, USB> at device 2.2 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s2a
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show version 
+# Hostname: ODOT-WALTERS-REGMAINT-SRX210 # Model: srx210he2-poe # JUNOS Software Release [12.1X46-D20.5] #  # grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 14  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show system uptime 
+# System booted: 2015-10-28 00:08 CDT 
+# Protocols started: 2015-10-28 00:11 CDT 
+# Last configured: 2016-04-27 12:05 CDT  by admin
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.505 up up
+#ge-0/0/0.1505 up up
+#ge-0/0/0.32767 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#fe-0/0/2 down down
+#fe-0/0/3 down down
+#fe-0/0/4 down down
+#fe-0/0/5 down down
+#fe-0/0/6 down down
+#fe-0/0/7 up up
+#fe-0/0/7.0 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.500 up up
+#vlan.501 up up
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show configuration 
+## Last commit: 2016-04-27 12:05:15 CDT by admin
+version 12.1X46-D20.5;
+system {
+    host-name ODOT-WALTERS-REGMAINT-SRX210;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.131;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.131;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        stacked-vlan-tagging;
+        unit 505 {
+            vlan-tags outer 505 inner 500;
+            family inet {
+                address 10.119.80.131/31;
+            }
+        }
+        unit 1505 {
+            vlan-tags outer 505 inner 501;
+            family inet {
+                address 10.119.88.131/31;
+            }
+        }
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    fe-0/0/2 {
+        disable;
+    }
+    fe-0/0/3 {
+        disable;
+    }
+    fe-0/0/4 {
+        disable;
+    }
+    fe-0/0/5 {
+        disable;
+    }
+    fe-0/0/6 {
+        disable;
+    }
+    fe-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+            }
+        }
+    }
+    t1-1/0/0 {
+        disable;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.41.74/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.25.74/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.130 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.41.74 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                ge-0/0/0.1505 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                ge-0/0/0.505 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface ge-0/0/0.1505;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.130 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.25.74 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+}
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 10.119.41.75     vlan.500               Full      10.119.41.75
+# 
+# grnoc-mon at ODOT-WALTERS-REGMAINT-SRX210> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/odot-sand-springs-residence.client.onenet.net
===================================================================
--- configs/odot-sand-springs-residence.client.onenet.net	(revision 142077)
+++ configs/odot-sand-springs-residence.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show system commit 
+#   2016-04-27 12:02:23 CDT by andrew via cli
 #   2016-04-27 10:36:59 CDT by admin via cli
 #   2016-04-25 08:16:26 CDT by admin via cli
 #   2016-04-24 18:17:46 CDT by admin via cli commit confirmed, rollback in 10mins
 #   2014-10-30 14:56:09 CDT by onenet via cli
 #   2014-10-28 15:15:29 CDT by onenet via cli
-#   2014-10-28 13:19:28 CDT by onenet via cli
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -110,7 +110,7 @@
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show system uptime 
 # System booted: 2015-03-25 22:01 CDT 
 # Protocols started: 2015-03-25 22:03 CDT 
-# Last configured: 2016-04-27 10:36 CDT  by admin
+# Last configured: 2016-04-27 12:02 CDT  by andrew
 # 
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show interface terse 
 #Interface Admin Link
@@ -170,7 +170,7 @@
 #vlan.500 up down
 #vlan.501 up down
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show configuration 
-## Last commit: 2016-04-27 10:36:59 CDT by admin
+## Last commit: 2016-04-27 12:02:23 CDT by andrew
 version 12.1X46-D20.5;
 system {
     host-name ODOT-SAND-SPRINGS-RESIDENCY-SRX220;
@@ -472,6 +472,12 @@
     community "<removed>" {
         authorization read-only;
     }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
 }
 routing-options {
     autonomous-system 64591;
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 142084)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -46,7 +46,6 @@
 #     Serial ID                      ACLC7669
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis scb 
-# show chassis sfm detail
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis sfm detail
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis ssb 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system boot-messages 
@@ -113,11 +112,10 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show version 
-# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # file list /var/tmp detail # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system uptime 
-# show interface terse
 # System booted: 2016-04-26 11:51 CDT 
 # Protocols started: 2016-04-26 11:54 CDT 
 # Last configured: 2016-01-27 15:43 CST  by joel
@@ -173,7 +171,6 @@
 #vlan up up
 #vlan.999 up down
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show configuration 
-show ospf neighbor
 ## Last commit: 2016-01-27 15:43:17 CST by joel
 version 12.1X44-D35.5;
 system {
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 142084)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -145,8 +145,8 @@
 #ge-0/0/11 down down
 #ge-0/0/12 down down
 #ge-0/0/13 down down
-#ge-0/0/14 up down
-#ge-0/0/14.0 up down
+#ge-0/0/14 up up
+#ge-0/0/14.0 up up
 #ge-0/0/15 up up
 #ge-0/0/15.0 up up
 #fxp2 up up
Index: routers.all
===================================================================
--- routers.all	(revision 142084)
+++ routers.all	(working copy)
@@ -336,6 +336,7 @@
 odot-stigler-regmaint.client.onenet.net:juniper
 odot-stillwater-residence.client.onenet.net:juniper
 odot-tahlequah-regmaint.client.onenet.net:juniper
+odot-walters-regmiant.client.onenet.net:juniper
 odot.elreno.residency.client.onenet.net:juniper
 oeta-alva-tower.nid.onenet.net:fsp150
 oeta-beaver-tower.nid.onenet.net:fsp150



More information about the Nocrancid mailing list