[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Thu Apr 28 09:03:13 CDT 2016


Index: router.db
===================================================================
--- router.db	(revision 142126)
+++ router.db	(working copy)
@@ -326,6 +326,7 @@
 odot-el-reno-survey.client.onenet.net:juniper:up
 odot-elk-city.client.onenet.net:juniper:up
 odot-elreno-residency.client.onenet.net:juniper:up
+odot-eufaula-regmaint.client.onenet.net:juniper:up
 odot-purcell-regmaint.client.onenet.net:juniper:up
 odot-sallisaw-residency.client.onenet.net:juniper:up
 odot-sand-springs-residence.client.onenet.net:juniper:up
Index: routers.up
===================================================================
--- routers.up	(revision 142103)
+++ routers.up	(working copy)
@@ -266,6 +266,7 @@
 odot-el-reno-survey.client.onenet.net:juniper
 odot-elk-city.client.onenet.net:juniper
 odot-elreno-residency.client.onenet.net:juniper
+odot-eufaula-regmaint.client.onenet.net:juniper
 odot-purcell-regmaint.client.onenet.net:juniper
 odot-sallisaw-residency.client.onenet.net:juniper
 odot-sand-springs-residence.client.onenet.net:juniper
Index: configs/maud-isd.client.onenet.net
===================================================================
--- configs/maud-isd.client.onenet.net	(revision 142126)
+++ configs/maud-isd.client.onenet.net	(working copy)
@@ -2,7 +2,6 @@
 #
 # grnoc-mon at MAUD-PS-SRX220-LEASED-ASSET-TAG-004627> show system commit 
 #   2015-07-20 15:50:42 CDT by joel via cli commit confirmed, rollback in 3mins
-# show chassis environment
 #   2015-02-09 11:08:44 CST by admin via cli
 #   2015-02-06 15:40:25 CST by admin via cli
 #   2015-02-06 15:16:19 CST by admin via cli
Index: configs/vinita-public-library.client.onenet.net
===================================================================
--- configs/vinita-public-library.client.onenet.net	(revision 142124)
+++ configs/vinita-public-library.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at VINITA-PUBLIC-LIBRARY-CLIENT-OWNED> show system commit 
+#   2016-04-28 09:01:25 CDT by sean via cli
 #   2016-04-27 10:39:45 CDT by sean via cli
 #   2016-04-27 10:33:48 CDT by sean via cli
 #   2016-04-27 10:32:18 CDT by andrew via cli
 #   2016-04-27 10:31:47 CDT by andrew via cli
 #   2016-04-27 10:24:32 CDT by andrew via cli
-#   2016-04-27 10:07:01 CDT by sean via cli
 # grnoc-mon at VINITA-PUBLIC-LIBRARY-CLIENT-OWNED> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -115,7 +115,7 @@
 # grnoc-mon at VINITA-PUBLIC-LIBRARY-CLIENT-OWNED> show system uptime 
 # System booted: 2016-03-15 09:57 CDT 
 # Protocols started: 2016-03-15 10:00 CDT 
-# Last configured: 2016-04-27 10:39 CDT  by sean
+# Last configured: 2016-04-28 09:01 CDT  by sean
 # 
 # grnoc-mon at VINITA-PUBLIC-LIBRARY-CLIENT-OWNED> show interface terse 
 #Interface Admin Link
@@ -173,7 +173,7 @@
 #vlan up up
 #vlan.1 up up
 # grnoc-mon at VINITA-PUBLIC-LIBRARY-CLIENT-OWNED> show configuration 
-## Last commit: 2016-04-27 10:39:45 CDT by sean
+## Last commit: 2016-04-28 09:01:25 CDT by sean
 version 12.1X44-D30;
 system {
     host-name VINITA-PUBLIC-LIBRARY-CLIENT-OWNED;
@@ -538,7 +538,6 @@
                             moderately-safe permit;
                             fairly-safe permit;
                             suspicious log-and-permit;
-                            harmful block;
                         }
                         default permit;
                         fallback-settings {
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 142125)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -3,6 +3,7 @@
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system commit 
 #   2016-03-25 14:17:43 CDT by joel via cli
 #   2015-10-26 13:12:04 CDT by admin via cli
+# show chassis environment
 #   2015-10-26 13:08:26 CDT by admin via cli
 #   2015-10-26 12:58:03 CDT by admin via cli
 #   2015-10-26 19:28:56 CDT by root via cli
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net	(revision 142126)
+++ configs/hub.dur.onenet.net	(working copy)
@@ -357,7 +357,7 @@
 #fe-2/1/1.0 up up
 #fe-2/1/2 up up
 #fe-2/1/2.0 up up
-#fe-2/1/3 down down
+#fe-2/1/3 down up
 #ge-2/2/0 down down
 #pc-2/2/0 up up
 #pc-2/2/0.16383 up up
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 142110)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -871,8 +871,8 @@
 #t1-2/3/0:11:2 down down
 #t1-2/3/0:11:3 down down
 #t1-2/3/0:11:4 down down
-#t1-2/3/0:11:5 up down
-#t1-2/3/0:11:5.0 up down
+#t1-2/3/0:11:5 up up
+#t1-2/3/0:11:5.0 up up
 #t1-2/3/0:11:6 down down
 #t1-2/3/0:11:7 up up
 #t1-2/3/0:11:7.0 up up
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 142126)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -436,10 +436,10 @@
 #ge-0/0/15.0 up down
 #ge-0/0/16 up up
 #ge-0/0/16.0 up up
-#ge-0/0/17 up up
-#ge-0/0/17.0 up up
-#ge-0/0/18 up up
-#ge-0/0/18.0 up up
+#ge-0/0/17 up down
+#ge-0/0/17.0 up down
+#ge-0/0/18 up down
+#ge-0/0/18.0 up down
 #ge-0/0/19 up up
 #ge-0/0/19.0 up up
 #ge-0/0/20 up up
@@ -600,8 +600,8 @@
 #ge-2/0/0.0 up down
 #ge-2/0/1 up down
 #ge-2/0/1.0 up down
-#ge-2/0/2 up down
-#ge-2/0/2.0 up down
+#ge-2/0/2 up up
+#ge-2/0/2.0 up up
 #ge-2/0/3 up down
 #ge-2/0/3.0 up down
 #ge-2/0/4 up down
@@ -642,8 +642,8 @@
 #ge-2/0/21.0 up up
 #ge-2/0/22 up up
 #ge-2/0/22.0 up up
-#ge-2/0/23 up down
-#ge-2/0/23.0 up down
+#ge-2/0/23 up up
+#ge-2/0/23.0 up up
 #ge-2/0/24 up up
 #ge-2/0/24.0 up up
 #ge-2/0/25 up up
Index: configs/odot-eufaula-regmaint.client.onenet.net
===================================================================
--- configs/odot-eufaula-regmaint.client.onenet.net	(revision 142127)
+++ configs/odot-eufaula-regmaint.client.onenet.net	(working copy)
@@ -0,0 +1,641 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show system commit 
+#   2016-04-28 08:53:59 CDT by admin via cli
+#   2016-04-23 23:55:46 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2015-06-25 03:17:30 CDT by admin via cli commit confirmed, rollback in 3mins
+#   2015-06-25 03:11:39 CDT by admin via cli commit confirmed, rollback in 3mins
+#   2015-06-24 21:31:29 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2015-06-24 21:26:27 CDT by root via other
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX210 Chassis fan             OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X44-D20.3 by builder on 2013-07
+# FPC 1                    O/S        Version 12.1X44-D20.3 by builder on 2013-07
+# FWDD                     O/S        Version 12.1X44-D20.3 by builder on 2013-07
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CE0314AK0189      SRX210HE2-POE
+# Routing Engine   REV 05   750-048704   ACKX8044          RE-SRX210HE2-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  2x GE, 6x FE, 1x 3G
+# FPC 1            REV 07   750-023367   ACKY5994          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis hardware models 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACKX8044
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis scb 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis sfm detail
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show chassis ssb 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2013, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.1 (no driver attached)
+# pci0: <serial bus, USB> at device 2.2 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s2a
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show version 
+# Hostname: ODOT-EUFAULA-REGMAINT-SRX210 # Model: srx210he2-poe # JUNOS Software Release [12.1X44-D20.3] #  # grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 Jul 19  2013 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show system uptime 
+# System booted: 2015-10-29 09:25 CDT 
+# Protocols started: 2015-10-29 09:28 CDT 
+# Last configured: 2016-04-28 08:53 CDT  by admin
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 down down
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#fe-0/0/2 down down
+#fe-0/0/3 down down
+#fe-0/0/4 down down
+#fe-0/0/5 down down
+#fe-0/0/6 down down
+#fe-0/0/7 up up
+#fe-0/0/7.0 up up
+#t1-1/0/0 up up
+#t1-1/0/0.16 up up
+#t1-1/0/0.17 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.500 up up
+#vlan.501 up up
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show configuration 
+## Last commit: 2016-04-28 08:53:59 CDT by admin
+version 12.1X44.3;
+system {
+    host-name ODOT-EUFAULA-REGMAINT-SRX210;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.45;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.45;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        disable;
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    fe-0/0/2 {
+        disable;
+    }
+    fe-0/0/3 {
+        disable;
+    }
+    fe-0/0/4 {
+        disable;
+    }
+    fe-0/0/5 {
+        disable;
+    }
+    fe-0/0/6 {
+        disable;
+    }
+    fe-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+            }
+        }
+    }
+    t1-1/0/0 {
+        clocking external;
+        encapsulation frame-relay;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 16 {
+            description DATACOMM-MGMT-T1;
+            dlci 16;
+            family inet {
+                address 10.119.80.45/31;
+            }
+        }
+        unit 17 {
+            description AGENCY-DATA-T1;
+            dlci 17;
+            family inet {
+                address 10.119.88.45/31;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    inactive: input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.40.234/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.24.234/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.44 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.40.234 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                t1-1/0/0.17 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                t1-1/0/0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface t1-1/0/0.17;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.44 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.24.234 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+}
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 10.119.40.235    vlan.500               Full      10.119.40.235
+# 
+# grnoc-mon at ODOT-EUFAULA-REGMAINT-SRX210> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/wainwright-isd.client.onenet.net
===================================================================
--- configs/wainwright-isd.client.onenet.net	(revision 142124)
+++ configs/wainwright-isd.client.onenet.net	(working copy)
@@ -11,6 +11,7 @@
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
 #       Routing Engine CPU             Absent    
+# show chassis firmware
 # Fans  SRX220 Chassis fan 0           OK
 #       SRX220 Chassis fan 1           OK
 # Power Power Supply 0                 OK        
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 142126)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -31,7 +31,6 @@
 #   State                               Online    
 #   Total CPU DRAM                      ---- CPU less FPC ----
 # 
-# show chassis hardware
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis hardware 
 # Hardware inventory:
 # Item             Version  Part number  Serial number     Description
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 142126)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -110,7 +110,7 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show version 
-# Hostname: MEEKER-PS-LEASED-ASSET-TAG-004947 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# file list /var/tmp detail # Hostname: MEEKER-PS-LEASED-ASSET-TAG-004947 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show system uptime 
@@ -144,8 +144,8 @@
 #ge-0/0/11 down down
 #ge-0/0/12 down down
 #ge-0/0/13 down down
-#ge-0/0/14 up up
-#ge-0/0/14.0 up up
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
 #ge-0/0/15 up up
 #ge-0/0/15.0 up up
 #fxp2 up up
Index: configs/opt.occ.onenet.net
===================================================================
--- configs/opt.occ.onenet.net	(revision 142000)
+++ configs/opt.occ.onenet.net	(working copy)
@@ -51,7 +51,6 @@
         <interface name="CHAN-1-3-37-RX" abbr_name="CHAN-1-3-37-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-1-3-38-RX" abbr_name="CHAN-1-3-38-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-1-3-39-RX" abbr_name="CHAN-1-3-39-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
-        <interface name="CHAN-1-3-40-RX" abbr_name="CHAN-1-3-40-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="LINE-1-3-2" abbr_name="LINE-1-3-2" admin_state="up" spanning_tree_metric="" description="Unknown" type="COM" monitoring_state="monitor"></interface>
         <interface name="LINE-1-3-3-TX" abbr_name="LINE-1-3-3-TX" admin_state="up" spanning_tree_metric="" description="" type="DROP" monitoring_state="monitor"></interface>
         <interface name="LINE-1-3-1" abbr_name="LINE-1-3-1" admin_state="up" spanning_tree_metric="" description="Unknown" type="EXP" monitoring_state="monitor"></interface>
Index: configs/tri-county-interlocal.client.onenet.net
===================================================================
--- configs/tri-county-interlocal.client.onenet.net	(revision 142029)
+++ configs/tri-county-interlocal.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TRI-COUNTY-INTERLOCAL-COOP-TAG-004665> show system commit 
+# show chassis environment
 #   2015-12-02 14:57:18 CST by admin via cli
 #   2015-12-02 14:49:49 CST by admin via cli
 #   2015-12-02 14:38:36 CST by admin via cli
Index: configs/rpswi1.okc.onenet.net
===================================================================
--- configs/rpswi1.okc.onenet.net	(revision 142126)
+++ configs/rpswi1.okc.onenet.net	(working copy)
@@ -263,10 +263,10 @@
 #ge-0/0/43.0 up down
 #ge-0/0/44 up down
 #ge-0/0/44.0 up down
-#ge-0/0/45 up down
-#ge-0/0/45.0 up down
-#ge-0/0/46 up up
-#ge-0/0/46.0 up up
+#ge-0/0/45 up up
+#ge-0/0/45.0 up up
+#ge-0/0/46 up down
+#ge-0/0/46.0 up down
 #ge-0/0/47 up up
 #ge-0/0/47.0 up up
 #xe-0/1/0 up up
Index: routers.all
===================================================================
--- routers.all	(revision 142103)
+++ routers.all	(working copy)
@@ -337,6 +337,7 @@
 odot-el-reno-survey.client.onenet.net:juniper
 odot-elk-city.client.onenet.net:juniper
 odot-elreno-residency.client.onenet.net:juniper
+odot-eufaula-regmaint.client.onenet.net:juniper
 odot-purcell-regmaint.client.onenet.net:juniper
 odot-sallisaw-residency.client.onenet.net:juniper
 odot-sand-springs-residence.client.onenet.net:juniper



More information about the Nocrancid mailing list