[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Apr 27 16:03:12 CDT 2016


Index: router.db
===================================================================
--- router.db	(revision 142093)
+++ router.db	(working copy)
@@ -315,10 +315,13 @@
 odmhsas-tmhc-lawton-pact.client.onenet.net:juniper:up
 odmhsas.central-office.okc.client.onenet.net:juniper:up
 odot-alva-regmaint.client.onenet.net:juniper:up
+odot-anadarko-regmaint.client.onenet.net:juniper:up
 odot-beaver-regmaint.client.onenet.net:juniper:up
 odot-boise-city-regmaint.client.onenet.net:juniper:up
 odot-cheyenne-regmaint.client.onenet.net:juniper:up
 odot-claremore-regmaint.client.onenet.net:juniper:up
+odot-davis-regmaint.client.onetnet.net:juniper:up
+odot-elreno-residency.client.onenet.net:juniper:up
 odot-purcell-regmaint.client.onenet.net:juniper:up
 odot-sallisaw-residency.client.onenet.net:juniper:up
 odot-sand-springs-residence.client.onenet.net:juniper:up
@@ -329,7 +332,6 @@
 odot-tahlequah-regmaint.client.onenet.net:juniper:up
 odot-walters-regmiant.client.onenet.net:juniper:up
 odot-watonga-regmaint.client.onenet.net:juniper:up
-odot.elreno.residency.client.onenet.net:juniper:up
 oeta-alva-tower.nid.onenet.net:fsp150:up
 oeta-beaver-tower.nid.onenet.net:fsp150:up
 oeta-boise-city-tower.nid.onenet.net:fsp150:up
Index: routers.up
===================================================================
--- routers.up	(revision 142092)
+++ routers.up	(working copy)
@@ -255,10 +255,13 @@
 odmhsas-tmhc-lawton-pact.client.onenet.net:juniper
 odmhsas.central-office.okc.client.onenet.net:juniper
 odot-alva-regmaint.client.onenet.net:juniper
+odot-anadarko-regmaint.client.onenet.net:juniper
 odot-beaver-regmaint.client.onenet.net:juniper
 odot-boise-city-regmaint.client.onenet.net:juniper
 odot-cheyenne-regmaint.client.onenet.net:juniper
 odot-claremore-regmaint.client.onenet.net:juniper
+odot-davis-regmaint.client.onetnet.net:juniper
+odot-elreno-residency.client.onenet.net:juniper
 odot-purcell-regmaint.client.onenet.net:juniper
 odot-sallisaw-residency.client.onenet.net:juniper
 odot-sand-springs-residence.client.onenet.net:juniper
@@ -269,7 +272,6 @@
 odot-tahlequah-regmaint.client.onenet.net:juniper
 odot-walters-regmiant.client.onenet.net:juniper
 odot-watonga-regmaint.client.onenet.net:juniper
-odot.elreno.residency.client.onenet.net:juniper
 oeta-alva-tower.nid.onenet.net:fsp150
 oeta-beaver-tower.nid.onenet.net:fsp150
 oeta-boise-city-tower.nid.onenet.net:fsp150
Index: configs/allen-public-library.client.onenet.net
===================================================================
--- configs/allen-public-library.client.onenet.net	(revision 142093)
+++ configs/allen-public-library.client.onenet.net	(working copy)
@@ -141,12 +141,12 @@
 #ge-0/0/4.0 up up
 #ge-0/0/5 up up
 #ge-0/0/5.0 up up
-#ge-0/0/6 up down
-#ge-0/0/6.0 up down
+#ge-0/0/6 up up
+#ge-0/0/6.0 up up
 #ge-0/0/7 up down
 #ge-0/0/7.0 up down
-#ge-0/0/8 up down
-#ge-0/0/8.0 up down
+#ge-0/0/8 up up
+#ge-0/0/8.0 up up
 #ge-0/0/9 up down
 #ge-0/0/9.0 up down
 #ge-0/0/10 up down
Index: configs/swi1.odot.ton-intmaint.onenet.net
===================================================================
--- configs/swi1.odot.ton-intmaint.onenet.net	(revision 142093)
+++ configs/swi1.odot.ton-intmaint.onenet.net	(working copy)
@@ -8,7 +8,6 @@
 #   2014-03-13 04:38:59 CDT by root via other
 #   2015-03-10 16:30:33 CDT by admin via cli commit confirmed, rollback in 3mins
 # grnoc-mon at SWI1-ODOT-TONKAWA-INTMAINT-EX4200> show chassis environment 
-# show chassis firmware
 # Class Item                           Status     Measurement
 # Power FPC 0 Power Supply 0           OK        
 #       FPC 0 Power Supply 1           OK        
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 142092)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -1,7 +1,6 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system commit 
-# show chassis environment
 #   2016-03-25 14:17:43 CDT by joel via cli
 #   2015-10-26 13:12:04 CDT by admin via cli
 #   2015-10-26 13:08:26 CDT by admin via cli
Index: configs/core8.tul.onenet.net
===================================================================
--- configs/core8.tul.onenet.net	(revision 142092)
+++ configs/core8.tul.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TULSA-CORE8-MX480-RE0> show system commit 
+#   2016-04-27 15:09:01 CDT by andrew via cli commit synchronize
 #   2016-04-27 13:28:08 CDT by andrew via cli commit synchronize
 #   2016-04-27 13:09:13 CDT by andrew via cli commit synchronize
 #   2016-04-27 13:06:47 CDT by andrew via cli commit synchronize
 #   2016-04-27 13:05:55 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
 #   2016-04-26 22:41:27 CDT by andrew via cli commit synchronize
-#   2016-04-14 16:33:52 CDT by andrew via cli commit synchronize
 # grnoc-mon at TULSA-CORE8-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -311,7 +311,7 @@
 # grnoc-mon at TULSA-CORE8-MX480-RE0> show system uptime 
 # System booted: 2016-03-20 01:06 CDT 
 # Protocols started: 2016-03-20 01:08 CDT 
-# Last configured: 2016-04-27 13:28 CDT  by andrew
+# Last configured: 2016-04-27 15:09 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at TULSA-CORE8-MX480-RE0> show interface terse 
@@ -367,6 +367,7 @@
 #et-0/3/0.682 up up
 #et-0/3/0.710 up up
 #et-0/3/0.900 up up
+#et-0/3/0.1300 up up
 #et-0/3/0.2362 up up
 #et-0/3/0.2364 up up
 #et-0/3/0.2520 up up
@@ -409,7 +410,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at TULSA-CORE8-MX480-RE0> show configuration 
-## Last commit: 2016-04-27 13:28:08 CDT by andrew
+## Last commit: 2016-04-27 15:09:01 CDT by andrew
 version 13.3R8.7;
 groups {
     re0 {
@@ -929,6 +930,12 @@
                 address 156.110.26.21/30;
             }
         }
+        unit 1300 {
+            description "ESNET to OU [ORDERED]";
+            encapsulation vlan-ccc;
+            vlan-id 1300;
+            family ccc;
+        }
         unit 2362 {
             description "UPSTREAM L3 10GE to ^ WiscNet Peering Service ^ CIR0005051";
             vlan-id 2362;
@@ -1674,6 +1681,11 @@
                 virtual-circuit-id 497;
                 mtu 9000;
             }
+            interface et-0/3/0.1300 {
+                virtual-circuit-id 2584;
+                ignore-encapsulation-mismatch;
+                ignore-mtu-mismatch;
+            }
         }
         neighbor 164.58.199.224 {
             interface et-0/3/0.3920 {
Index: configs/oja-sw-youth-academy-manitou.client.onenet.net
===================================================================
--- configs/oja-sw-youth-academy-manitou.client.onenet.net	(revision 142055)
+++ configs/oja-sw-youth-academy-manitou.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OJA-SW-YOUTH-ACADEMY-MANITOU-LR-004653> show system commit 
+# show chassis environment
 #   2015-11-09 09:44:06 CST by sky via cli
 #   2015-11-09 09:19:03 CST by sky via cli
 #   2015-11-02 20:09:28 CST by joel via cli
Index: configs/odot-anadarko-regmaint.client.onenet.net
===================================================================
--- configs/odot-anadarko-regmaint.client.onenet.net	(revision 142094)
+++ configs/odot-anadarko-regmaint.client.onenet.net	(working copy)
@@ -0,0 +1,630 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show system commit 
+#   2016-04-27 15:29:52 CDT by admin via cli
+#   2016-04-27 15:29:19 CDT by admin via cli
+#   2016-04-23 00:27:08 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2016-01-25 17:59:17 CST by admin via cli
+#   2016-01-25 17:45:42 CST by admin via cli
+#   2016-01-09 01:00:52 CST by root via cli
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX210 Chassis fan             OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CE0314AK0213      SRX210HE2-POE
+# Routing Engine   REV 05   750-048704   ACKX7983          RE-SRX210HE2-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  2x GE, 6x FE, 1x 3G
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis hardware models 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACKX7983
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis scb 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis sfm detail
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show chassis ssb 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.1 (no driver attached)
+# pci0: <serial bus, USB> at device 2.2 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s2a
+# WARNING: / was not properly dismounted
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show version 
+# Hostname: ODOT-ANADARKO-REGMAINT-SRX210 # Model: srx210he2-poe # JUNOS Software Release [12.1X46-D20.5] #  # grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 14  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show system uptime 
+# System booted: 2016-01-25 11:21 CST 
+# Protocols started: 2016-01-25 11:24 CST 
+# Last configured: 2016-04-27 15:29 CDT  by admin
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.502 up up
+#ge-0/0/0.1502 up up
+#ge-0/0/0.32767 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#fe-0/0/2 down down
+#fe-0/0/3 down down
+#fe-0/0/4 down down
+#fe-0/0/5 down down
+#fe-0/0/6 down down
+#fe-0/0/7 up up
+#fe-0/0/7.0 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.500 up up
+#vlan.501 up up
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show configuration 
+## Last commit: 2016-04-27 15:29:52 CDT by admin
+version 12.1X46-D20.5;
+system {
+    host-name ODOT-ANADARKO-REGMAINT-SRX210;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.3;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.3;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        stacked-vlan-tagging;
+        unit 502 {
+            vlan-tags outer 502 inner 500;
+            family inet {
+                address 10.119.80.3/31;
+            }
+        }
+        unit 1502 {
+            vlan-tags outer 502 inner 501;
+            family inet {
+                address 10.119.88.3/31;
+            }
+        }
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    fe-0/0/2 {
+        disable;
+    }
+    fe-0/0/3 {
+        disable;
+    }
+    fe-0/0/4 {
+        disable;
+    }
+    fe-0/0/5 {
+        disable;
+    }
+    fe-0/0/6 {
+        disable;
+    }
+    fe-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+            }
+        }
+    }
+    t1-1/0/0 {
+        disable;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.41.90/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.25.90/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.2 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.41.90 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                ge-0/0/0.1502 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                ge-0/0/0.502 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface ge-0/0/0.1502;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.2 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.25.90 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+}
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 10.119.41.91     vlan.500               Full      10.119.41.91
+# 
+# grnoc-mon at ODOT-ANADARKO-REGMAINT-SRX210> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/core1.nor.onenet.net
===================================================================
--- configs/core1.nor.onenet.net	(revision 142061)
+++ configs/core1.nor.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at NORMAN1-MX480-RE0> show system commit 
+#   2016-04-27 15:10:01 CDT by andrew via cli commit synchronize
 #   2016-04-25 14:47:36 CDT by sean via cli commit synchronize
 #   2016-04-25 13:06:51 CDT by sean via cli commit synchronize
 #   2016-04-20 09:52:55 CDT by andrew via cli commit synchronize
 #   2016-04-12 22:53:41 CDT by andrew via cli commit synchronize
 #   2016-04-03 01:48:15 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
-#   2016-04-03 01:37:58 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
 # grnoc-mon at NORMAN1-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -382,7 +382,7 @@
 # grnoc-mon at NORMAN1-MX480-RE0> show system uptime 
 # System booted: 2016-04-03 01:22 CDT 
 # Protocols started: 2016-04-03 01:28 CDT 
-# Last configured: 2016-04-25 14:47 CDT  by sean
+# Last configured: 2016-04-27 15:10 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at NORMAN1-MX480-RE0> show interface terse 
@@ -501,6 +501,7 @@
 #xe-2/0/0 up up
 #xe-2/0/0.0 up up
 #xe-2/0/1 up up
+#xe-2/0/1.1300 up up
 #xe-2/0/1.2520 up up
 #xe-2/0/1.32767 up up
 #xe-2/1/0 up up
@@ -594,7 +595,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at NORMAN1-MX480-RE0> show configuration 
-## Last commit: 2016-04-25 14:47:36 CDT by sean
+## Last commit: 2016-04-27 15:10:01 CDT by andrew
 version 13.3R9.13;
 groups {
     re0 {
@@ -1360,6 +1361,12 @@
         flexible-vlan-tagging;
         mtu 9192;
         encapsulation flexible-ethernet-services;
+        unit 1300 {
+            description "ESNet to OU [ORDERED]";
+            encapsulation vlan-ccc;
+            vlan-id 1300;
+            family ccc;
+        }
         unit 2520 {
             description HEI-VPLS-OU-2520;
             encapsulation vlan-vpls;
@@ -1832,6 +1839,11 @@
                 virtual-circuit-id 616;
                 mtu 9000;
             }
+            interface xe-2/0/1.1300 {
+                virtual-circuit-id 2584;
+                ignore-encapsulation-mismatch;
+                ignore-mtu-mismatch;
+            }
         }
         neighbor 164.58.199.215 {
             interface xe-1/2/0.502 {
Index: configs/swi.cai.sei.onenet.net
===================================================================
--- configs/swi.cai.sei.onenet.net	(revision 142093)
+++ configs/swi.cai.sei.onenet.net	(working copy)
@@ -1,7 +1,6 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at SWI-SEI-MUNICIPAL-HOSPITAL-EX-3300> show system commit 
-# show chassis environment
 #   2016-03-22 00:14:45 CDT by root via other
 #   2012-06-28 07:03:48 CDT by root via button
 #   2012-06-28 06:49:23 CDT by root via button
@@ -28,7 +27,6 @@
 # Part                     Type       Version
 # FPC 0                    uboot      U-Boot 1.1.6 (Aug 21 2011 - 01:45:26)   1.0
 #                          loader     FreeBSD/arm U-Boot loader 1.1              
-# show chassis fpc detail
 # 
 # {master:0}
 # grnoc-mon at SWI-SEI-MUNICIPAL-HOSPITAL-EX-3300> show chassis fpc detail 
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 142093)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -544,8 +544,8 @@
 #ge-1/0/20.0 up down
 #ge-1/0/21 up up
 #ge-1/0/21.0 up up
-#ge-1/0/22 up down
-#ge-1/0/22.0 up down
+#ge-1/0/22 up up
+#ge-1/0/22.0 up up
 #ge-1/0/23 up down
 #ge-1/0/23.0 up down
 #ge-1/0/24 up down
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net	(revision 142093)
+++ configs/stringtown-high-school.client.onenet.net	(working copy)
@@ -3,9 +3,9 @@
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system commit 
 #   2016-02-17 16:01:39 CST by sean via cli commit confirmed, rollback in 3mins
 #   2016-01-19 09:16:22 CST by joel via cli
+# show chassis environment
 #   2016-01-11 10:33:48 CST by joel via cli
 #   2016-01-07 22:36:29 CST by root via cli
-# show chassis environment
 #   2016-01-07 22:35:26 CST by root via cli
 #   2016-01-07 22:33:58 CST by root via cli
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show chassis environment 
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 142077)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -73,6 +73,7 @@
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis ssb 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system boot-messages 
 # platform_early_bootinit: MX-PPC Series Early Boot Initialization
+# show version
 # mxppc_set_re_type: hw.board.type is ACX-2100
 # WDOG initialized
 # Copyright (c) 1996-2014, Juniper Networks, Inc.
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 142093)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -32,7 +32,6 @@
 #   Total CPU DRAM                      ---- CPU less FPC ----
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis hardware 
-# show chassis hardware models
 # Hardware inventory:
 # Item             Version  Part number  Serial number     Description
 # Chassis                                BU1214AK0530      SRX240H2
@@ -115,11 +114,10 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show version 
-# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # file list /var/tmp detail # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] # file list /var/tmp detail #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system uptime 
-# show interface terse
 # System booted: 2016-04-26 11:51 CDT 
 # Protocols started: 2016-04-26 11:54 CDT 
 # Last configured: 2016-01-27 15:43 CST  by joel
@@ -175,7 +173,6 @@
 #vlan up up
 #vlan.999 up down
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show configuration 
-show ospf neighbor
 ## Last commit: 2016-01-27 15:43:17 CST by joel
 version 12.1X44-D35.5;
 system {
@@ -603,7 +600,6 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show bfd session 
-quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 142092)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -5,6 +5,7 @@
 #   2015-11-20 10:50:09 CST by joel via cli
 #   2015-11-20 10:48:21 CST by joel via cli
 #   2015-10-28 12:35:21 CDT by root via other
+# show chassis environment
 #   2015-10-28 12:24:40 CDT by joel via cli commit confirmed, rollback in 10mins
 #   2015-10-28 20:20:23 CDT by root via cli commit confirmed, rollback in 5mins
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show chassis environment 
Index: routers.all
===================================================================
--- routers.all	(revision 142092)
+++ routers.all	(working copy)
@@ -326,10 +326,13 @@
 odmhsas-tmhc-lawton-pact.client.onenet.net:juniper
 odmhsas.central-office.okc.client.onenet.net:juniper
 odot-alva-regmaint.client.onenet.net:juniper
+odot-anadarko-regmaint.client.onenet.net:juniper
 odot-beaver-regmaint.client.onenet.net:juniper
 odot-boise-city-regmaint.client.onenet.net:juniper
 odot-cheyenne-regmaint.client.onenet.net:juniper
 odot-claremore-regmaint.client.onenet.net:juniper
+odot-davis-regmaint.client.onetnet.net:juniper
+odot-elreno-residency.client.onenet.net:juniper
 odot-purcell-regmaint.client.onenet.net:juniper
 odot-sallisaw-residency.client.onenet.net:juniper
 odot-sand-springs-residence.client.onenet.net:juniper
@@ -340,7 +343,6 @@
 odot-tahlequah-regmaint.client.onenet.net:juniper
 odot-walters-regmiant.client.onenet.net:juniper
 odot-watonga-regmaint.client.onenet.net:juniper
-odot.elreno.residency.client.onenet.net:juniper
 oeta-alva-tower.nid.onenet.net:fsp150
 oeta-beaver-tower.nid.onenet.net:fsp150
 oeta-boise-city-tower.nid.onenet.net:fsp150



More information about the Nocrancid mailing list