[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Apr 27 17:03:10 CDT 2016


Index: router.db
===================================================================
--- router.db	(revision 142098)
+++ router.db	(working copy)
@@ -320,7 +320,11 @@
 odot-boise-city-regmaint.client.onenet.net:juniper:up
 odot-cheyenne-regmaint.client.onenet.net:juniper:up
 odot-claremore-regmaint.client.onenet.net:juniper:up
+odot-claremore-residence.client.onenet.net:juniper:up
+odot-cordell-regmaint.client.onenet.net:juniper:up
 odot-davis-regmaint.client.onetnet.net:juniper:up
+odot-el-reno-survey.client.onenet.net:juniper:up
+odot-elk-city.client.onenet.net:juniper:up
 odot-elreno-residency.client.onenet.net:juniper:up
 odot-purcell-regmaint.client.onenet.net:juniper:up
 odot-sallisaw-residency.client.onenet.net:juniper:up
Index: routers.up
===================================================================
--- routers.up	(revision 142097)
+++ routers.up	(working copy)
@@ -260,7 +260,11 @@
 odot-boise-city-regmaint.client.onenet.net:juniper
 odot-cheyenne-regmaint.client.onenet.net:juniper
 odot-claremore-regmaint.client.onenet.net:juniper
+odot-claremore-residence.client.onenet.net:juniper
+odot-cordell-regmaint.client.onenet.net:juniper
 odot-davis-regmaint.client.onetnet.net:juniper
+odot-el-reno-survey.client.onenet.net:juniper
+odot-elk-city.client.onenet.net:juniper
 odot-elreno-residency.client.onenet.net:juniper
 odot-purcell-regmaint.client.onenet.net:juniper
 odot-sallisaw-residency.client.onenet.net:juniper
Index: configs/odot-cordell-regmaint.client.onenet.net
===================================================================
--- configs/odot-cordell-regmaint.client.onenet.net	(revision 142100)
+++ configs/odot-cordell-regmaint.client.onenet.net	(working copy)
@@ -0,0 +1,641 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show system commit 
+#   2016-04-27 15:36:28 CDT by admin via cli
+#   2016-04-27 15:35:40 CDT by admin via cli
+#   2016-04-22 05:01:25 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2015-07-01 21:12:23 CDT by admin via cli commit confirmed, rollback in 5mins
+#   2015-06-08 17:05:24 CDT by root via cli
+#   2015-06-06 00:02:35 CDT by root via other
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX210 Chassis fan             OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X44-D35.5 by builder on 2014-05
+# FPC 1                    O/S        Version 12.1X44-D35.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X44-D35.5 by builder on 2014-05
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CE0314AK0172      SRX210HE2-POE
+# Routing Engine   REV 05   750-048704   ACKX7957          RE-SRX210HE2-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  2x GE, 6x FE, 1x 3G
+# FPC 1            REV 07   750-023367   ACLB8695          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis hardware models 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACKX7957
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis scb 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis sfm detail
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show chassis ssb 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.1 (no driver attached)
+# pci0: <serial bus, USB> at device 2.2 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s2a
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show version 
+# Hostname: ODOT-CORDELL-REGMAINT-SRX210 # Model: srx210he2-poe # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show system uptime 
+# System booted: 2015-12-28 13:05 CST 
+# Protocols started: 2015-12-28 13:09 CST 
+# Last configured: 2016-04-27 15:36 CDT  by admin
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 down down
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#fe-0/0/2 down down
+#fe-0/0/3 down down
+#fe-0/0/4 down down
+#fe-0/0/5 down down
+#fe-0/0/6 down down
+#fe-0/0/7 up up
+#fe-0/0/7.0 up up
+#t1-1/0/0 up up
+#t1-1/0/0.16 up up
+#t1-1/0/0.17 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.500 up up
+#vlan.501 up up
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show configuration 
+## Last commit: 2016-04-27 15:36:28 CDT by admin
+version 12.1X44-D35.5;
+system {
+    host-name ODOT-CORDELL-REGMAINT-SRX210;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.31;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.31;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        disable;
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    fe-0/0/2 {
+        disable;
+    }
+    fe-0/0/3 {
+        disable;
+    }
+    fe-0/0/4 {
+        disable;
+    }
+    fe-0/0/5 {
+        disable;
+    }
+    fe-0/0/6 {
+        disable;
+    }
+    fe-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+            }
+        }
+    }
+    t1-1/0/0 {
+        clocking external;
+        encapsulation frame-relay;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 16 {
+            description DATACOMM-MGMT-T1;
+            dlci 16;
+            family inet {
+                address 10.119.80.31/31;
+            }
+        }
+        unit 17 {
+            description AGENCY-DATA-T1;
+            dlci 17;
+            family inet {
+                address 10.119.88.31/31;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.40.220/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.24.220/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.30 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.40.220 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                t1-1/0/0.17 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                t1-1/0/0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface t1-1/0/0.17;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.30 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.24.220 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+}
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 10.119.40.221    vlan.500               Full      10.119.40.221
+# 
+# grnoc-mon at ODOT-CORDELL-REGMAINT-SRX210> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/odot-claremore-residence.client.onenet.net
===================================================================
--- configs/odot-claremore-residence.client.onenet.net	(revision 142099)
+++ configs/odot-claremore-residence.client.onenet.net	(working copy)
@@ -0,0 +1,829 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show system commit 
+#   2016-04-27 14:37:49 CDT by admin via cli
+#   2016-04-27 13:52:09 CDT by admin via cli
+#   2016-04-25 08:16:03 CDT by admin via cli
+#   2016-04-24 19:37:53 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2014-10-30 14:55:56 CDT by onenet via cli
+#   2014-10-28 15:15:12 CDT by onenet via cli
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX220 Chassis fan 0           OK
+#       SRX220 Chassis fan 1           OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FPC 1                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FPC 2                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 2 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                AR3212AA0018      SRX220H-POE
+# Routing Engine   REV 20   750-031177   AAEY4190          RE-SRX220H-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  8x GE Base PIC
+# FPC 1            REV 07   750-023367   ACLH4875          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# FPC 2            REV 07   750-023367   ACLB8628          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis hardware models 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      AAEY4190
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis scb 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis sfm detail
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show chassis ssb 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# atapci0: <SiI 0680 UDMA133 controller> port 0x8-0xb,0x10-0x17,0x18-0x1b,0x20-0x2f mem 0x8020000-0x80200ff irq 0 at device 2.0 on pci0
+# ata2: <ATA channel 0> on atapci0
+# ata3: <ATA channel 1> on atapci0
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 8MB> on obio0
+# Timecounter "mips" frequency 700000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# ad0: Device does not support APM
+# ad0: 1006MB <CF 1GB 20080112> at ata2-master WDMA2
+# Trying to mount root from ufs:/dev/ad0s2a
+# WARNING: / was not properly dismounted
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show version 
+# Hostname: ODOT-CLAREMORE-RESIDENCY-SRX220 # Model: srx220h-poe # JUNOS Software Release [12.1X46-D20.5] #  # grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 14  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show system uptime 
+# System booted: 2016-03-30 19:51 CDT 
+# Protocols started: 2016-03-30 19:54 CDT 
+# Last configured: 2016-04-27 14:37 CDT  by admin
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#lsq-0/0/0:0 up up
+#lsq-0/0/0:0.16 up up
+#lsq-0/0/0:0.17 up up
+#lsq-0/0/0:0.30 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 up down
+#ge-0/0/2.0 up down
+#ge-0/0/3 up down
+#ge-0/0/3.0 up down
+#ge-0/0/4 up down
+#ge-0/0/4.0 up down
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
+#ge-0/0/6 up down
+#ge-0/0/6.0 up down
+#ge-0/0/7 up down
+#ge-0/0/7.0 up down
+#t1-1/0/0 up up
+#t1-1/0/0.0 up up
+#t1-2/0/0 up up
+#t1-2/0/0.0 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.3 up up
+#vlan.500 up down
+#vlan.501 up down
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show configuration 
+## Last commit: 2016-04-27 14:37:49 CDT by admin
+version 12.1X46-D20.5;
+system {
+    host-name ODOT-CLAREMORE-RESIDENCY-SRX220;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.29;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.29;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+chassis {
+    fpc 0 {
+        pic 0 {
+            mlfr-uni-nni-bundles 1;
+        }
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    lsq-0/0/0:0 {
+        encapsulation multilink-frame-relay-uni-nni;
+        unit 16 {
+            description DATACOMM-MGMT-T1;
+            dlci 16;
+            family inet {
+                address 10.119.80.29/31;
+            }
+        }
+        unit 17 {
+            description AGENCY-DATA-T1;
+            dlci 17;
+            family inet {
+                address 10.119.88.29/31;
+            }
+        }
+        unit 30 {
+            description ODOT-T1;
+            dlci 30;
+            family inet {
+                address 10.119.9.10/30;
+            }
+        }
+    }
+    ge-0/0/1 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/2 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/3 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/4 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/5 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/6 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+                native-vlan-id 3;
+            }
+        }
+    }
+    t1-1/0/0 {
+        clocking external;
+        encapsulation multilink-frame-relay-uni-nni;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 0 {
+            family mlfr-uni-nni {
+                bundle lsq-0/0/0:0;
+            }
+        }
+    }
+    t1-2/0/0 {
+        clocking external;
+        encapsulation multilink-frame-relay-uni-nni;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 0 {
+            family mlfr-uni-nni {
+                bundle lsq-0/0/0:0;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 3 {
+            description ODOT-VLAN;
+            family inet {
+                address 172.25.168.1/24;
+            }
+        }
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.41.84/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.25.84/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.28 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.41.84 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone ODOT to-zone ODOT {
+            policy ODOT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                lsq-0/0/0:0.17 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                lsq-0/0/0:0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone ODOT {
+            interfaces {
+                lsq-0/0/0:0.30 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                    }
+                }
+                vlan.3 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                            dhcp;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface lsq-0/0/0:0.17;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.28 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.25.84 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+    ODOT {
+        instance-type virtual-router;
+        system {
+            services {
+                dhcp-local-server {
+                    inactive: group ODOT {
+                        interface vlan.3;
+                    }
+                }
+            }
+        }
+        access {
+            address-assignment {
+                inactive: pool ODOT-POOL {
+                    family inet {
+                        network 172.25.168.0/24;
+                        range ODOT-RANGE {
+                            low 172.25.168.51;
+                            high 172.25.168.200;
+                        }
+                        dhcp-attributes {
+                            domain-name agency.ok.local;
+                            name-server {
+                                10.36.36.46;
+                                10.36.36.47;
+                            }
+                            router {
+                                172.25.168.1;
+                            }
+                        }
+                    }
+                }
+            }
+        }
+        interface lsq-0/0/0:0.30;
+        interface vlan.3;
+        routing-options {
+            static {
+                route 0.0.0.0/0 next-hop 10.119.9.9;
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+    VLAN-ODOT {
+        vlan-id 3;
+        l3-interface vlan.3;
+    }
+}
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show ospf neighbor 
+# 
+# grnoc-mon at ODOT-CLAREMORE-RESIDENCY-SRX220> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 142097)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system commit 
+# show chassis environment
 #   2016-03-25 14:17:43 CDT by joel via cli
 #   2015-10-26 13:12:04 CDT by admin via cli
 #   2015-10-26 13:08:26 CDT by admin via cli
Index: configs/odot-elk-city.client.onenet.net
===================================================================
--- configs/odot-elk-city.client.onenet.net	(revision 142102)
+++ configs/odot-elk-city.client.onenet.net	(working copy)
@@ -0,0 +1,642 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show system commit 
+#   2016-04-27 16:20:06 CDT by admin via cli
+#   2016-04-21 04:37:29 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2016-02-19 17:31:07 CST by root via cli
+#   2016-02-15 23:22:37 CST by root via other
+#   2014-01-13 11:23:08 CST by root via other
+# rescue  2016-04-21 04:39:31 CDT by admin via cli
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX210 Chassis fan             OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X44-D20.3 by builder on 2013-07
+# FPC 1                    O/S        Version 12.1X44-D20.3 by builder on 2013-07
+# FWDD                     O/S        Version 12.1X44-D20.3 by builder on 2013-07
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CE0314AK0134      SRX210HE2-POE
+# Routing Engine   REV 05   750-048704   ACKX8025          RE-SRX210HE2-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  2x GE, 6x FE, 1x 3G
+# FPC 1            REV 07   750-023367   ACMH6930          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis hardware models 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACKX8025
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis scb 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis sfm detail
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show chassis ssb 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.1 (no driver attached)
+# pci0: <serial bus, USB> at device 2.2 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s1a
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show version 
+# Hostname: ODOT-ELK-CITY-SRX210 # Model: srx210he2-poe # JUNOS Software Release [12.1X44-D20.3] #  # grnoc-mon at ODOT-ELK-CITY-SRX210> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 Jul 19  2013 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show system uptime 
+# System booted: 2016-03-09 10:03 CST 
+# Protocols started: 2016-03-09 10:07 CST 
+# Last configured: 2016-04-27 16:20 CDT  by admin
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 down down
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#fe-0/0/2 down down
+#fe-0/0/3 down down
+#fe-0/0/4 down down
+#fe-0/0/5 down down
+#fe-0/0/6 down down
+#fe-0/0/7 up up
+#fe-0/0/7.0 up up
+#t1-1/0/0 up up
+#t1-1/0/0.16 up up
+#t1-1/0/0.17 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.500 up up
+#vlan.501 up up
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show configuration 
+## Last commit: 2016-04-27 16:20:06 CDT by admin
+version 12.1X44.3;
+system {
+    host-name ODOT-ELK-CITY-SRX210;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.41;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.41;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        disable;
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    fe-0/0/2 {
+        disable;
+    }
+    fe-0/0/3 {
+        disable;
+    }
+    fe-0/0/4 {
+        disable;
+    }
+    fe-0/0/5 {
+        disable;
+    }
+    fe-0/0/6 {
+        disable;
+    }
+    fe-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+            }
+        }
+    }
+    t1-1/0/0 {
+        clocking external;
+        encapsulation frame-relay;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 16 {
+            description DATACOMM-MGMT-T1;
+            dlci 16;
+            family inet {
+                address 10.119.80.41/31;
+            }
+        }
+        unit 17 {
+            description AGENCY-DATA-T1;
+            dlci 17;
+            family inet {
+                address 10.119.88.41/31;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.41.98/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.25.98/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.40 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.41.98 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                t1-1/0/0.17 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                t1-1/0/0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface t1-1/0/0.17;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.40 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.25.98 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+}
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 10.119.41.99     vlan.500               Full      10.119.41.99
+# 
+# grnoc-mon at ODOT-ELK-CITY-SRX210> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/oja-sw-youth-academy-manitou.client.onenet.net
===================================================================
--- configs/oja-sw-youth-academy-manitou.client.onenet.net	(revision 142097)
+++ configs/oja-sw-youth-academy-manitou.client.onenet.net	(working copy)
@@ -1,7 +1,6 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OJA-SW-YOUTH-ACADEMY-MANITOU-LR-004653> show system commit 
-# show chassis environment
 #   2015-11-09 09:44:06 CST by sky via cli
 #   2015-11-09 09:19:03 CST by sky via cli
 #   2015-11-02 20:09:28 CST by joel via cli
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net	(revision 142093)
+++ configs/hub.dur.onenet.net	(working copy)
@@ -302,8 +302,8 @@
 #t1-2/0/2:12 up up
 #t1-2/0/2:12.0 up up
 #t1-2/0/2:13 down down
-#t1-2/0/2:14 up down
-#t1-2/0/2:14.0 up down
+#t1-2/0/2:14 up up
+#t1-2/0/2:14.0 up up
 #t1-2/0/2:15 up up
 #t1-2/0/2:15.0 up up
 #t1-2/0/2:16 up down
@@ -357,7 +357,7 @@
 #fe-2/1/1.0 up up
 #fe-2/1/2 up up
 #fe-2/1/2.0 up up
-#fe-2/1/3 down down
+#fe-2/1/3 down up
 #ge-2/2/0 down down
 #pc-2/2/0 up up
 #pc-2/2/0.16383 up up
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 142093)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE3-M120-RE0> show system commit 
+#   2016-04-27 16:04:21 CDT by andrew via cli commit synchronize
 #   2016-04-27 14:02:00 CDT by andrew via cli commit synchronize
 #   2016-04-27 08:40:15 CDT by sean via cli commit synchronize
 #   2016-04-24 17:46:42 CDT by andrew via cli commit synchronize
 #   2016-04-24 17:27:12 CDT by andrew via cli commit synchronize
 #   2016-04-24 16:58:16 CDT by andrew via cli commit synchronize
-#   2016-04-23 17:03:33 CDT by andrew via cli commit synchronize
 # grnoc-mon at OKC-CORE3-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -367,7 +367,7 @@
 # grnoc-mon at OKC-CORE3-M120-RE0> show system uptime 
 # System booted: 2015-05-06 01:06 CDT 
 # Protocols started: 2015-05-06 01:08 CDT 
-# Last configured: 2016-04-27 14:02 CDT  by andrew
+# Last configured: 2016-04-27 16:04 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at OKC-CORE3-M120-RE0> show interface terse 
@@ -734,10 +734,8 @@
 #t1-2/3/0:8:3 down down
 #t1-2/3/0:8:4 down down
 #t1-2/3/0:8:5 down down
-#t1-2/3/0:8:6 up down
-#t1-2/3/0:8:6.0 up down
-#t1-2/3/0:8:7 up down
-#t1-2/3/0:8:7.0 up down
+#t1-2/3/0:8:6 down down
+#t1-2/3/0:8:7 down down
 #t1-2/3/0:8:8 up up
 #t1-2/3/0:8:8.16 up up
 #t1-2/3/0:8:8.17 up up
@@ -1791,7 +1789,6 @@
 #ip-5/1/0 up up
 #lsq-5/1/0 up up
 #lsq-5/1/0.11 up up
-#lsq-5/1/0.18 up down
 #lsq-5/1/0.30 up up
 #lsq-5/1/0.31 up up
 #lsq-5/1/0.37 up up
@@ -1883,7 +1880,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE3-M120-RE0> show configuration 
-## Last commit: 2016-04-27 14:02:00 CDT by andrew
+## Last commit: 2016-04-27 16:04:21 CDT by andrew
 version 12.3R7.7;
 groups {
     re0 {
@@ -3808,22 +3805,10 @@
         disable;
     }
     t1-2/3/0:8:6 {
-        description "Forgan-School-T1-CIR0002662-lsq-5/1/0.18 [NO-MONITOR]";
-        encapsulation ppp;
-        unit 0 {
-            family mlppp {
-                bundle lsq-5/1/0.18;
-            }
-        }
+        disable;
     }
     t1-2/3/0:8:7 {
-        description "Forgan-School-T1-CIR0002663-lsq-5/1/0.18 [NO-MONITOR]";
-        encapsulation ppp;
-        unit 0 {
-            family mlppp {
-                bundle lsq-5/1/0.18;
-            }
-        }
+        disable;
     }
     t1-2/3/0:8:8 {
         description ODOT-FAIRVIEW-REGMAINT-T1-CIR0006227;
@@ -8452,13 +8437,6 @@
                 address 164.58.58.65/30;
             }
         }
-        unit 18 {
-            description "Forgan-PS-lsq-5/1/0.18 [NO-MONITOR]";
-            encapsulation multilink-ppp;
-            family inet {
-                address 156.110.25.89/30;
-            }
-        }
         unit 30 {
             description DIA-Cherokee-Nation-Stilwell-lsq-5/1/0.30;
             encapsulation multilink-ppp;
@@ -8891,7 +8869,6 @@
     static {
         route 156.110.25.200/30 next-hop 164.58.11.214;
         route 156.110.26.188/30 next-hop 156.110.26.2;
-        route 156.110.28.40/29 next-hop 156.110.25.90;
         route 156.110.31.56/29 next-hop 164.58.69.98;
         route 156.110.42.240/30 next-hop 164.58.156.62;
         route 156.110.50.100/30 next-hop 156.110.50.98;
Index: configs/core1.nor.onenet.net
===================================================================
--- configs/core1.nor.onenet.net	(revision 142097)
+++ configs/core1.nor.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at NORMAN1-MX480-RE0> show system commit 
+#   2016-04-27 16:27:40 CDT by andrew via cli commit synchronize
+#   2016-04-27 16:27:10 CDT by andrew via cli commit synchronize
 #   2016-04-27 15:10:01 CDT by andrew via cli commit synchronize
 #   2016-04-25 14:47:36 CDT by sean via cli commit synchronize
 #   2016-04-25 13:06:51 CDT by sean via cli commit synchronize
 #   2016-04-20 09:52:55 CDT by andrew via cli commit synchronize
-#   2016-04-12 22:53:41 CDT by andrew via cli commit synchronize
-#   2016-04-03 01:48:15 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
 # grnoc-mon at NORMAN1-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -382,7 +382,7 @@
 # grnoc-mon at NORMAN1-MX480-RE0> show system uptime 
 # System booted: 2016-04-03 01:22 CDT 
 # Protocols started: 2016-04-03 01:28 CDT 
-# Last configured: 2016-04-27 15:10 CDT  by andrew
+# Last configured: 2016-04-27 16:27 CDT  by andrew
 # 
 # {master}
 # grnoc-mon at NORMAN1-MX480-RE0> show interface terse 
@@ -595,7 +595,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at NORMAN1-MX480-RE0> show configuration 
-## Last commit: 2016-04-27 15:10:01 CDT by andrew
+## Last commit: 2016-04-27 16:27:40 CDT by andrew
 version 13.3R9.13;
 groups {
     re0 {
@@ -1357,7 +1357,7 @@
         }
     }
     xe-2/0/1 {
-        description HEI-UNIVERSITY-of-OKLAHOMA-DYNES-TO-I2-CCC-XE-CIR000xxxx;
+        description HEI-UNIVERSITY-OF-OKLAHOMA-RESEARCH-ROUTER-XE-CIR000XXXX;
         flexible-vlan-tagging;
         mtu 9192;
         encapsulation flexible-ethernet-services;
@@ -1368,7 +1368,7 @@
             family ccc;
         }
         unit 2520 {
-            description HEI-VPLS-OU-2520;
+            description HEI-UNIVERSITY-OF-OKLAHOMA-DYNES-XE-CIR000XXXX;
             encapsulation vlan-vpls;
             vlan-id-range 3010-3012;
             family vpls;
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 142097)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -430,8 +430,8 @@
 #ge-0/0/12.0 up up
 #ge-0/0/13 up down
 #ge-0/0/13.0 up down
-#ge-0/0/14 up up
-#ge-0/0/14.0 up up
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
 #ge-0/0/15 up down
 #ge-0/0/15.0 up down
 #ge-0/0/16 up up
@@ -532,8 +532,8 @@
 #ge-1/0/14.0 up down
 #ge-1/0/15 up down
 #ge-1/0/15.0 up down
-#ge-1/0/16 up down
-#ge-1/0/16.0 up down
+#ge-1/0/16 up up
+#ge-1/0/16.0 up up
 #ge-1/0/17 up down
 #ge-1/0/17.0 up down
 #ge-1/0/18 up down
@@ -642,8 +642,8 @@
 #ge-2/0/21.0 up up
 #ge-2/0/22 up up
 #ge-2/0/22.0 up up
-#ge-2/0/23 up up
-#ge-2/0/23.0 up up
+#ge-2/0/23 up down
+#ge-2/0/23.0 up down
 #ge-2/0/24 up up
 #ge-2/0/24.0 up up
 #ge-2/0/25 up up
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net	(revision 142097)
+++ configs/stringtown-high-school.client.onenet.net	(working copy)
@@ -3,7 +3,6 @@
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system commit 
 #   2016-02-17 16:01:39 CST by sean via cli commit confirmed, rollback in 3mins
 #   2016-01-19 09:16:22 CST by joel via cli
-# show chassis environment
 #   2016-01-11 10:33:48 CST by joel via cli
 #   2016-01-07 22:36:29 CST by root via cli
 #   2016-01-07 22:35:26 CST by root via cli
@@ -45,6 +44,7 @@
 #     Serial ID                      ACMK4816
 # 
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show chassis scb 
+# show chassis sfm detail
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show chassis sfm detail
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show chassis ssb 
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system boot-messages 
@@ -115,6 +115,7 @@
 # total files: 1
 # 
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system uptime 
+# show interface terse
 # System booted: 2016-04-07 01:22 CDT 
 # Protocols started: 2016-04-07 01:25 CDT 
 # Last configured: 2016-02-17 16:01 CST  by sean
@@ -174,6 +175,7 @@
 #vlan.3 up down
 #vlan.999 up down
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show configuration 
+show ospf neighbor
 ## Last commit: 2016-02-17 16:01:39 CST by sean
 version 12.1X44-D35.5;
 system {
@@ -675,6 +677,7 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show bfd session 
+quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 142097)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -73,7 +73,6 @@
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis ssb 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system boot-messages 
 # platform_early_bootinit: MX-PPC Series Early Boot Initialization
-# show version
 # mxppc_set_re_type: hw.board.type is ACX-2100
 # WDOG initialized
 # Copyright (c) 1996-2014, Juniper Networks, Inc.
Index: configs/odot-el-reno-survey.client.onenet.net
===================================================================
--- configs/odot-el-reno-survey.client.onenet.net	(revision 142101)
+++ configs/odot-el-reno-survey.client.onenet.net	(working copy)
@@ -0,0 +1,792 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show system commit 
+#   2016-04-27 16:14:13 CDT by admin via cli
+#   2016-04-25 08:13:50 CDT by admin via cli
+#   2016-04-24 20:26:35 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2014-10-30 14:55:23 CDT by onenet via cli
+#   2014-10-28 15:14:20 CDT by onenet via cli
+#   2014-10-28 13:16:59 CDT by onenet via cli
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX220 Chassis fan 0           OK
+#       SRX220 Chassis fan 1           OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FPC 1                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                AQ4212AA0044      SRX220H
+# Routing Engine   REV 21   750-031175   AAFB2986          RE-SRX220H
+# FPC 0                                                    FPC
+#   PIC 0                                                  8x GE Base PIC
+# FPC 1            REV 07   750-023367   ACLH1418          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis hardware models 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      AAFB2986
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis scb 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis sfm detail
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show chassis ssb 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# atapci0: <SiI 0680 UDMA133 controller> port 0x8-0xb,0x10-0x17,0x18-0x1b,0x20-0x2f mem 0x8020000-0x80200ff irq 0 at device 2.0 on pci0
+# ata2: <ATA channel 0> on atapci0
+# ata3: <ATA channel 1> on atapci0
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 8MB> on obio0
+# Timecounter "mips" frequency 700000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# ad0: Device does not support APM
+# ad0: 1006MB <CF 1GB 20100924> at ata2-master WDMA2
+# Trying to mount root from ufs:/dev/ad0s2a
+# WARNING: / was not properly dismounted
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show version 
+# Hostname: ODOT-EL-RENO-SURVEY-SRX220 # Model: srx220h # JUNOS Software Release [12.1X46-D20.5] #  # grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 14  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show system uptime 
+# System booted: 2016-04-25 08:04 CDT 
+# Protocols started: 2016-04-25 08:06 CDT 
+# Last configured: 2016-04-27 16:14 CDT  by admin
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 up down
+#ge-0/0/2.0 up down
+#ge-0/0/3 up down
+#ge-0/0/3.0 up down
+#ge-0/0/4 up down
+#ge-0/0/4.0 up down
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
+#ge-0/0/6 up down
+#ge-0/0/6.0 up down
+#ge-0/0/7 up down
+#ge-0/0/7.0 up down
+#t1-1/0/0 up up
+#t1-1/0/0.16 up up
+#t1-1/0/0.17 up up
+#t1-1/0/0.30 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.3 up up
+#vlan.500 up down
+#vlan.501 up down
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show configuration 
+## Last commit: 2016-04-27 16:14:13 CDT by admin
+version 12.1X46-D20.5;
+system {
+    host-name ODOT-EL-RENO-SURVEY-SRX220;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.39;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.39;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/1 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/2 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/3 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/4 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/5 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/6 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 3;
+                }
+            }
+        }
+    }
+    ge-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+                native-vlan-id 3;
+            }
+        }
+    }
+    t1-1/0/0 {
+        clocking external;
+        encapsulation frame-relay;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 16 {
+            description DATACOMM-MGMT-T1;
+            dlci 16;
+            family inet {
+                address 10.119.80.39/31;
+            }
+        }
+        unit 17 {
+            description AGENCY-DATA-T1;
+            dlci 17;
+            family inet {
+                address 10.119.88.39/31;
+            }
+        }
+        unit 30 {
+            description ODOT-T1;
+            dlci 30;
+            family inet {
+                address 10.119.8.234/30;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 3 {
+            description ODOT-VLAN;
+            family inet {
+                address 172.25.160.1/24;
+            }
+        }
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.41.24/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.25.24/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.38 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.41.24 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone ODOT to-zone ODOT {
+            policy ODOT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                t1-1/0/0.17 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                t1-1/0/0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone ODOT {
+            interfaces {
+                t1-1/0/0.30 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                    }
+                }
+                vlan.3 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                            dhcp;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface t1-1/0/0.17;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.38 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.25.24 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+    ODOT {
+        instance-type virtual-router;
+        system {
+            services {
+                dhcp-local-server {
+                    inactive: group ODOT {
+                        interface vlan.3;
+                    }
+                }
+            }
+        }
+        access {
+            address-assignment {
+                inactive: pool ODOT-POOL {
+                    family inet {
+                        network 172.25.160.0/24;
+                        range ODOT-RANGE {
+                            low 172.25.160.51;
+                            high 172.25.160.200;
+                        }
+                        dhcp-attributes {
+                            domain-name agency.ok.local;
+                            name-server {
+                                10.36.36.46;
+                                10.36.36.47;
+                            }
+                            router {
+                                172.25.160.1;
+                            }
+                        }
+                    }
+                }
+            }
+        }
+        interface t1-1/0/0.30;
+        interface vlan.3;
+        routing-options {
+            static {
+                route 0.0.0.0/0 next-hop 10.119.8.233;
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+    VLAN-ODOT {
+        vlan-id 3;
+        l3-interface vlan.3;
+    }
+}
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show ospf neighbor 
+# 
+# grnoc-mon at ODOT-EL-RENO-SURVEY-SRX220> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 142097)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -46,7 +46,6 @@
 #     Serial ID                      ACLC7669
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis scb 
-# show chassis sfm detail
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis sfm detail
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis ssb 
 # show system boot-messages
@@ -114,10 +113,11 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show version 
-# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] # file list /var/tmp detail #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # file list /var/tmp detail # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system uptime 
+# show interface terse
 # System booted: 2016-04-26 11:51 CDT 
 # Protocols started: 2016-04-26 11:54 CDT 
 # Last configured: 2016-01-27 15:43 CST  by joel
@@ -173,6 +173,7 @@
 #vlan up up
 #vlan.999 up down
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show configuration 
+show ospf neighbor
 ## Last commit: 2016-01-27 15:43:17 CST by joel
 version 12.1X44-D35.5;
 system {
Index: configs/smithville-ps.client.onenet.net
===================================================================
--- configs/smithville-ps.client.onenet.net	(revision 142059)
+++ configs/smithville-ps.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at SMITHVILLE-PS-LR-004893> show system commit 
+#   2016-04-27 16:09:16 CDT by andrew via cli
 #   2015-10-06 21:43:38 CDT by andrew via cli
 #   2015-08-13 10:56:32 CDT by joel via cli
 #   2015-08-06 16:58:14 CDT by joel via cli commit confirmed, rollback in 3mins
 #   2015-08-06 23:54:16 CDT by admin via cli
 #   2015-08-06 23:30:02 CDT by admin via cli
-#   2015-08-06 23:28:11 CDT by admin via cli
 # grnoc-mon at SMITHVILLE-PS-LR-004893> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -115,7 +115,7 @@
 # grnoc-mon at SMITHVILLE-PS-LR-004893> show system uptime 
 # System booted: 2016-04-27 00:42 CDT 
 # Protocols started: 2016-04-27 00:45 CDT 
-# Last configured: 2015-10-06 21:43 CDT  by andrew
+# Last configured: 2016-04-27 16:09 CDT  by andrew
 # 
 # grnoc-mon at SMITHVILLE-PS-LR-004893> show interface terse 
 #Interface Admin Link
@@ -168,10 +168,11 @@
 #vlan up up
 #vlan.999 up down
 # grnoc-mon at SMITHVILLE-PS-LR-004893> show configuration 
-## Last commit: 2015-10-06 21:43:38 CDT by andrew
+## Last commit: 2016-04-27 16:09:16 CDT by andrew
 version 12.1X44-D35.5;
 system {
     host-name SMITHVILLE-PS-LR-004893;
+    auto-snapshot;
     domain-name onenet.net;
     time-zone America/Chicago;
     authentication-order [ radius password ];
Index: configs/mid-america-tech-ctr.client.onenet.net
===================================================================
--- configs/mid-america-tech-ctr.client.onenet.net	(revision 141895)
+++ configs/mid-america-tech-ctr.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MID-AMERICA-TECH-CTR-SRX240-LR-004891> show system commit 
+# show chassis environment
 #   2016-03-21 10:12:59 CDT by andrew via cli commit confirmed, rollback in 3mins
 #   2016-03-21 10:11:08 CDT by andrew via cli
 #   2015-08-19 14:01:33 CDT by joel via cli
Index: configs/rpswi1.okc.onenet.net
===================================================================
--- configs/rpswi1.okc.onenet.net	(revision 142093)
+++ configs/rpswi1.okc.onenet.net	(working copy)
@@ -263,8 +263,8 @@
 #ge-0/0/43.0 up down
 #ge-0/0/44 up down
 #ge-0/0/44.0 up down
-#ge-0/0/45 up up
-#ge-0/0/45.0 up up
+#ge-0/0/45 up down
+#ge-0/0/45.0 up down
 #ge-0/0/46 up down
 #ge-0/0/46.0 up down
 #ge-0/0/47 up up
Index: routers.all
===================================================================
--- routers.all	(revision 142097)
+++ routers.all	(working copy)
@@ -331,7 +331,11 @@
 odot-boise-city-regmaint.client.onenet.net:juniper
 odot-cheyenne-regmaint.client.onenet.net:juniper
 odot-claremore-regmaint.client.onenet.net:juniper
+odot-claremore-residence.client.onenet.net:juniper
+odot-cordell-regmaint.client.onenet.net:juniper
 odot-davis-regmaint.client.onetnet.net:juniper
+odot-el-reno-survey.client.onenet.net:juniper
+odot-elk-city.client.onenet.net:juniper
 odot-elreno-residency.client.onenet.net:juniper
 odot-purcell-regmaint.client.onenet.net:juniper
 odot-sallisaw-residency.client.onenet.net:juniper



More information about the Nocrancid mailing list