[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Thu Apr 28 12:03:29 CDT 2016


Index: router.db
===================================================================
--- router.db	(revision 142140)
+++ router.db	(working copy)
@@ -337,6 +337,10 @@
 odot-hugo-regmaint.client.onenet.net:juniper:up
 odot-jay-regmaint.client.onenet.net:juniper:up
 odot-kingfisher-regmaint.client.onenet.net:juniper:up
+odot-marietta-regmaint.client.onenet.net:juniper:up
+odot-medford-regmaint.client.onenet.net:juniper:up
+odot-okc:juniper:up
+odot-pryor-regmaint.client.onenet.net:juniper:up
 odot-purcell-regmaint.client.onenet.net:juniper:up
 odot-sallisaw-residency.client.onenet.net:juniper:up
 odot-sand-springs-residence.client.onenet.net:juniper:up
Index: routers.up
===================================================================
--- routers.up	(revision 142140)
+++ routers.up	(working copy)
@@ -277,6 +277,10 @@
 odot-hugo-regmaint.client.onenet.net:juniper
 odot-jay-regmaint.client.onenet.net:juniper
 odot-kingfisher-regmaint.client.onenet.net:juniper
+odot-marietta-regmaint.client.onenet.net:juniper
+odot-medford-regmaint.client.onenet.net:juniper
+odot-okc:juniper
+odot-pryor-regmaint.client.onenet.net:juniper
 odot-purcell-regmaint.client.onenet.net:juniper
 odot-sallisaw-residency.client.onenet.net:juniper
 odot-sand-springs-residence.client.onenet.net:juniper
Index: configs/odot-pryor-regmaint.client.onenet.net
===================================================================
--- configs/odot-pryor-regmaint.client.onenet.net	(revision 142144)
+++ configs/odot-pryor-regmaint.client.onenet.net	(working copy)
@@ -0,0 +1,642 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show system commit 
+#   2016-04-28 11:34:22 CDT by admin via cli
+#   2016-04-23 01:40:42 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2015-07-08 21:08:08 CDT by admin via cli commit confirmed, rollback in 5mins
+#   2015-07-02 18:28:36 CDT by root via cli
+#   2015-06-27 00:49:21 CDT by root via other
+#   2015-06-27 00:38:56 CDT by root via other
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX210 Chassis fan             OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FPC 1                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CE4113AK0130      SRX210HE2-POE
+# Routing Engine   REV 05   750-048704   ACKJ6970          RE-SRX210HE2-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  2x GE, 6x FE, 1x 3G
+# FPC 1            REV 07   750-023367   ACKY5725          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis hardware models 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACKJ6970
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis scb 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis sfm detail
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show chassis ssb 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.1 (no driver attached)
+# pci0: <serial bus, USB> at device 2.2 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s2a
+# WARNING: / was not properly dismounted
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show version 
+# Hostname: ODOT-PRYOR-REGMAINT-SRX210 # Model: srx210he2-poe # JUNOS Software Release [12.1X46-D20.5] #  # grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 14  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show system uptime 
+# System booted: 2015-07-08 12:19 CDT 
+# Protocols started: 2015-07-08 12:23 CDT 
+# Last configured: 2016-04-28 11:34 CDT  by admin
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 down down
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#fe-0/0/2 down down
+#fe-0/0/3 down down
+#fe-0/0/4 down down
+#fe-0/0/5 down down
+#fe-0/0/6 down down
+#fe-0/0/7 up up
+#fe-0/0/7.0 up up
+#t1-1/0/0 up up
+#t1-1/0/0.16 up up
+#t1-1/0/0.17 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.500 up up
+#vlan.501 up up
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show configuration 
+## Last commit: 2016-04-28 11:34:22 CDT by admin
+version 12.1X46-D20.5;
+system {
+    host-name ODOT-PRYOR-REGMAINT-SRX210;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.97;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.97;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        disable;
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    fe-0/0/2 {
+        disable;
+    }
+    fe-0/0/3 {
+        disable;
+    }
+    fe-0/0/4 {
+        disable;
+    }
+    fe-0/0/5 {
+        disable;
+    }
+    fe-0/0/6 {
+        disable;
+    }
+    fe-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+            }
+        }
+    }
+    t1-1/0/0 {
+        clocking external;
+        encapsulation frame-relay;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 16 {
+            description DATACOMM-MGMT-T1;
+            dlci 16;
+            family inet {
+                address 10.119.80.97/31;
+            }
+        }
+        unit 17 {
+            description AGENCY-DATA-T1;
+            dlci 17;
+            family inet {
+                address 10.119.88.97/31;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.41.22/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.25.22/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.96 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.41.22 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                t1-1/0/0.17 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                t1-1/0/0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface t1-1/0/0.17;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.96 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.25.22 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+}
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 10.119.41.23     vlan.500               Full      10.119.41.23
+# 
+# grnoc-mon at ODOT-PRYOR-REGMAINT-SRX210> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 142140)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -17,7 +17,6 @@
 #       SRX240 CPU fan 1               OK
 #       SRX240 CPU fan 2               OK
 #       SRX240 IO  fan 1               OK
-# show chassis firmware
 #       SRX240 IO  fan 2               OK
 # Power Power Supply 0                 OK        
 # 
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 142140)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE3-M120-RE0> show system commit 
+#   2016-04-28 11:04:25 CDT by sean via cli commit synchronize
 #   2016-04-27 19:19:28 CDT by andrew via cli commit synchronize
 #   2016-04-27 19:01:41 CDT by andrew via cli commit synchronize
 #   2016-04-27 18:59:33 CDT by andrew via cli commit synchronize
 #   2016-04-27 18:48:32 CDT by andrew via cli commit synchronize
 #   2016-04-27 16:04:21 CDT by andrew via cli commit synchronize
-#   2016-04-27 14:02:00 CDT by andrew via cli commit synchronize
 # grnoc-mon at OKC-CORE3-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -367,7 +367,7 @@
 # grnoc-mon at OKC-CORE3-M120-RE0> show system uptime 
 # System booted: 2015-05-06 01:06 CDT 
 # Protocols started: 2015-05-06 01:08 CDT 
-# Last configured: 2016-04-27 19:19 CDT  by andrew
+# Last configured: 2016-04-28 11:04 CDT  by sean
 # 
 # {master}
 # grnoc-mon at OKC-CORE3-M120-RE0> show interface terse 
@@ -1886,7 +1886,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE3-M120-RE0> show configuration 
-## Last commit: 2016-04-27 19:19:28 CDT by andrew
+## Last commit: 2016-04-28 11:04:25 CDT by sean
 version 12.3R7.7;
 groups {
     re0 {
@@ -4659,7 +4659,7 @@
         }
     }
     t1-2/3/0:12:13 {
-        description TAGNET-4920-LOCUSTGROVE-T1-CIR0005866;
+        description TAGNET-4920-LOCUSTGROVE-T1-CIR0019171;
         encapsulation cisco-hdlc;
         unit 0 {
             family inet {
Index: configs/odot-medford-regmaint.client.onenet.net
===================================================================
--- configs/odot-medford-regmaint.client.onenet.net	(revision 142142)
+++ configs/odot-medford-regmaint.client.onenet.net	(working copy)
@@ -0,0 +1,640 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show system commit 
+#   2016-04-28 11:11:52 CDT by admin via cli
+#   2016-04-21 04:49:46 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2015-08-07 17:12:24 CDT by admin via cli
+#   2015-08-07 17:08:51 CDT by admin via cli commit confirmed, rollback in 10mins
+# rescue  2016-04-21 04:52:32 CDT by admin via cli
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX210 Chassis fan             OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FPC 1                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CE0314AK0151      SRX210HE2-POE
+# Routing Engine   REV 05   750-048704   ACKX8053          RE-SRX210HE2-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  2x GE, 6x FE, 1x 3G
+# FPC 1            REV 07   750-023367   ACKY5645          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis hardware models 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACKX8053
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis scb 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis sfm detail
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show chassis ssb 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.1 (no driver attached)
+# pci0: <serial bus, USB> at device 2.2 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s2a
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show version 
+# Hostname: ODOT-MEDFORD-REGMAINT-SRX210 # Model: srx210he2-poe # JUNOS Software Release [12.1X46-D20.5] #  # grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 14  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show system uptime 
+# System booted: 2015-09-24 07:21 CDT 
+# Protocols started: 2015-09-24 07:24 CDT 
+# Last configured: 2016-04-28 11:11 CDT  by admin
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 down down
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#fe-0/0/2 down down
+#fe-0/0/3 down down
+#fe-0/0/4 down down
+#fe-0/0/5 down down
+#fe-0/0/6 down down
+#fe-0/0/7 up up
+#fe-0/0/7.0 up up
+#t1-1/0/0 up up
+#t1-1/0/0.16 up up
+#t1-1/0/0.17 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.500 up up
+#vlan.501 up up
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show configuration 
+## Last commit: 2016-04-28 11:11:52 CDT by admin
+version 12.1X46-D20.5;
+system {
+    host-name ODOT-MEDFORD-REGMAINT-SRX210;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.79;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.79;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        disable;
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    fe-0/0/2 {
+        disable;
+    }
+    fe-0/0/3 {
+        disable;
+    }
+    fe-0/0/4 {
+        disable;
+    }
+    fe-0/0/5 {
+        disable;
+    }
+    fe-0/0/6 {
+        disable;
+    }
+    fe-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+            }
+        }
+    }
+    t1-1/0/0 {
+        clocking external;
+        encapsulation frame-relay;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 16 {
+            description DATACOMM-MGMT-T1;
+            dlci 16;
+            family inet {
+                address 10.119.80.79/31;
+            }
+        }
+        unit 17 {
+            description AGENCY-DATA-T1;
+            dlci 17;
+            family inet {
+                address 10.119.88.79/31;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.41.14/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.25.14/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.78 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.41.14 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                t1-1/0/0.17 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                t1-1/0/0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface t1-1/0/0.17;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.78 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.25.14 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+}
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 10.119.41.15     vlan.500               Full      10.119.41.15
+# 
+# grnoc-mon at ODOT-MEDFORD-REGMAINT-SRX210> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 142140)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -430,14 +430,14 @@
 #ge-0/0/12.0 up up
 #ge-0/0/13 up up
 #ge-0/0/13.0 up up
-#ge-0/0/14 up up
-#ge-0/0/14.0 up up
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
 #ge-0/0/15 up down
 #ge-0/0/15.0 up down
 #ge-0/0/16 up up
 #ge-0/0/16.0 up up
-#ge-0/0/17 up up
-#ge-0/0/17.0 up up
+#ge-0/0/17 up down
+#ge-0/0/17.0 up down
 #ge-0/0/18 up up
 #ge-0/0/18.0 up up
 #ge-0/0/19 up up
@@ -532,8 +532,8 @@
 #ge-1/0/14.0 up down
 #ge-1/0/15 up down
 #ge-1/0/15.0 up down
-#ge-1/0/16 up down
-#ge-1/0/16.0 up down
+#ge-1/0/16 up up
+#ge-1/0/16.0 up up
 #ge-1/0/17 up down
 #ge-1/0/17.0 up down
 #ge-1/0/18 up down
@@ -544,8 +544,8 @@
 #ge-1/0/20.0 up down
 #ge-1/0/21 up up
 #ge-1/0/21.0 up up
-#ge-1/0/22 up down
-#ge-1/0/22.0 up down
+#ge-1/0/22 up up
+#ge-1/0/22.0 up up
 #ge-1/0/23 up down
 #ge-1/0/23.0 up down
 #ge-1/0/24 up down
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net	(revision 142140)
+++ configs/stringtown-high-school.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system commit 
+# show chassis environment
 #   2016-02-17 16:01:39 CST by sean via cli commit confirmed, rollback in 3mins
 #   2016-01-19 09:16:22 CST by joel via cli
 #   2016-01-11 10:33:48 CST by joel via cli
@@ -14,7 +15,6 @@
 # Fans  SRX240 PowerSupply fan 1       OK
 #       SRX240 PowerSupply fan 2       OK
 #       SRX240 CPU fan 1               OK
-# show chassis firmware
 #       SRX240 CPU fan 2               OK
 #       SRX240 IO  fan 1               OK
 #       SRX240 IO  fan 2               OK
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 142140)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -72,12 +72,12 @@
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis sfm detail 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis ssb 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system boot-messages 
+# show version
 # platform_early_bootinit: MX-PPC Series Early Boot Initialization
 # mxppc_set_re_type: hw.board.type is ACX-2100
 # WDOG initialized
 # Copyright (c) 1996-2014, Juniper Networks, Inc.
 # All rights reserved.
-# show version
 # Copyright (c) 1992-2006 The FreeBSD Project.
 # Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
 # 	The Regents of the University of California. All rights reserved.
Index: configs/wainwright-isd.client.onenet.net
===================================================================
--- configs/wainwright-isd.client.onenet.net	(revision 142133)
+++ configs/wainwright-isd.client.onenet.net	(working copy)
@@ -11,6 +11,8 @@
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
 #       Routing Engine CPU             Absent    
+# show chassis firmware
+# show chassis fpc detail
 # Fans  SRX220 Chassis fan 0           OK
 #       SRX220 Chassis fan 1           OK
 # Power Power Supply 0                 OK        
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 142140)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -48,7 +48,6 @@
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis scb 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis sfm detail
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis ssb 
-# show system boot-messages
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system boot-messages 
 # kld_map_v: 0x8ff80000, kld_map_p: 0x0
 # Copyright (c) 1996-2014, Juniper Networks, Inc.
@@ -113,11 +112,10 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show version 
-# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # file list /var/tmp detail # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system uptime 
-# show interface terse
 # System booted: 2016-04-26 11:51 CDT 
 # Protocols started: 2016-04-26 11:54 CDT 
 # Last configured: 2016-01-27 15:43 CST  by joel
@@ -173,7 +171,6 @@
 #vlan up up
 #vlan.999 up down
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show configuration 
-show ospf neighbor
 ## Last commit: 2016-01-27 15:43:17 CST by joel
 version 12.1X44-D35.5;
 system {
@@ -598,11 +595,9 @@
     }
 }
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show ospf neighbor 
-# show bfd session
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show bfd session 
-quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/atoka-ps-srx240.client.onenet.net
===================================================================
--- configs/atoka-ps-srx240.client.onenet.net	(revision 141016)
+++ configs/atoka-ps-srx240.client.onenet.net	(working copy)
@@ -144,8 +144,8 @@
 #ge-0/0/11 down down
 #ge-0/0/12 down down
 #ge-0/0/13 down down
-#ge-0/0/14 up up
-#ge-0/0/14.0 up up
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
 #ge-0/0/15 up up
 #ge-0/0/15.0 up up
 #fxp2 up up
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 142133)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -3,6 +3,7 @@
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show system commit 
 #   2015-12-14 15:34:07 CST by sean via cli
 #   2015-11-20 10:50:09 CST by joel via cli
+# show chassis environment
 #   2015-11-20 10:48:21 CST by joel via cli
 #   2015-10-28 12:35:21 CDT by root via other
 #   2015-10-28 12:24:40 CDT by joel via cli commit confirmed, rollback in 10mins
Index: configs/opt.okc.onenet.net
===================================================================
--- configs/opt.okc.onenet.net	(revision 142140)
+++ configs/opt.okc.onenet.net	(working copy)
@@ -239,6 +239,7 @@
         <interface name="CHAN-3-3-27-RX" abbr_name="CHAN-3-3-27-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-3-3-28-RX" abbr_name="CHAN-3-3-28-RX" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="monitor"></interface>
         <interface name="CHAN-3-3-29-RX" abbr_name="CHAN-3-3-29-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
+        <interface name="CHAN-3-3-30-RX" abbr_name="CHAN-3-3-30-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-3-3-31-RX" abbr_name="CHAN-3-3-31-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-3-3-32-RX" abbr_name="CHAN-3-3-32-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-3-3-33-RX" abbr_name="CHAN-3-3-33-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
Index: configs/swi1.norman-ps.onenet.net
===================================================================
--- configs/swi1.norman-ps.onenet.net	(revision 142044)
+++ configs/swi1.norman-ps.onenet.net	(working copy)
@@ -3,6 +3,7 @@
 # grnoc-mon at NORMAN-PS-EX3300-ASSET-TAG-003231> show system commit 
 #   2016-03-09 14:05:29 CST by admin via netconf
 #   2016-02-27 13:19:03 CST by andrew via cli commit confirmed, rollback in 5mins
+# show chassis environment
 #   2016-02-27 01:50:12 CST by andrew via cli
 #   2016-02-27 01:46:43 CST by andrew via cli commit confirmed, rollback in 3mins
 #   2016-02-27 01:37:46 CST by andrew via cli commit confirmed, rollback in 10mins
Index: configs/odot-marietta-regmaint.client.onenet.net
===================================================================
--- configs/odot-marietta-regmaint.client.onenet.net	(revision 142141)
+++ configs/odot-marietta-regmaint.client.onenet.net	(working copy)
@@ -0,0 +1,642 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show system commit 
+#   2016-04-28 11:07:54 CDT by admin via cli
+#   2016-04-22 20:43:23 CDT by admin via cli commit confirmed, rollback in 10mins
+#   2015-06-25 22:50:31 CDT by admin via cli commit confirmed, rollback in 5mins
+#   2015-06-05 23:45:35 CDT by root via cli
+#   2015-06-05 22:47:49 CDT by root via other
+#   2015-06-04 17:21:44 CDT by root via other
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             Absent    
+# Fans  SRX210 Chassis fan             OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FPC 1                    O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X46-D20.5 by builder on 2014-05
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# Slot 1 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CE0314AK0192      SRX210HE2-POE
+# Routing Engine   REV 05   750-048704   ACKX8003          RE-SRX210HE2-POE
+# FPC 0                                                    FPC
+#   PIC 0                                                  2x GE, 6x FE, 1x 3G
+# FPC 1            REV 07   750-023367   ACKY5594          FPC
+#   PIC 0                                                  1x T1E1 mPIM
+# Power Supply 0  
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis hardware models 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACKX8003
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis scb 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis sfm detail
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show chassis ssb 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.0 (no driver attached)
+# pci0: <serial bus, USB> at device 2.1 (no driver attached)
+# pci0: <serial bus, USB> at device 2.2 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s2a
+# WARNING: / was not properly dismounted
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show version 
+# Hostname: ODOT-MARIETTA-REGMAINT-SRX210 # Model: srx210he2-poe # JUNOS Software Release [12.1X46-D20.5] #  # grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 14  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show system uptime 
+# System booted: 2016-02-23 05:59 CST 
+# Protocols started: 2016-02-23 06:02 CST 
+# Last configured: 2016-04-28 11:07 CDT  by admin
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 down down
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 down down
+#fe-0/0/2 down down
+#fe-0/0/3 down down
+#fe-0/0/4 down down
+#fe-0/0/5 down down
+#fe-0/0/6 down down
+#fe-0/0/7 up up
+#fe-0/0/7.0 up up
+#t1-1/0/0 up up
+#t1-1/0/0.16 up up
+#t1-1/0/0.17 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.500 up up
+#vlan.501 up up
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show configuration 
+## Last commit: 2016-04-28 11:07:54 CDT by admin
+version 12.1X46-D20.5;
+system {
+    host-name ODOT-MARIETTA-REGMAINT-SRX210;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ password radius ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        10.119.255.3;
+        10.119.255.4;
+    }
+    radius-server {
+        10.119.255.7 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.119.80.77;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.119.80.77;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any critical;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    license {
+        autoupdate {
+            url https://ae1.juniper.net/junos/key_retrieval;
+        }
+    }
+    ntp {
+        server 10.119.255.5 prefer;
+        server 10.119.255.6;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        disable;
+    }
+    ge-0/0/1 {
+        disable;
+    }
+    fe-0/0/2 {
+        disable;
+    }
+    fe-0/0/3 {
+        disable;
+    }
+    fe-0/0/4 {
+        disable;
+    }
+    fe-0/0/5 {
+        disable;
+    }
+    fe-0/0/6 {
+        disable;
+    }
+    fe-0/0/7 {
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ 500 501 ];
+                }
+            }
+        }
+    }
+    t1-1/0/0 {
+        clocking external;
+        encapsulation frame-relay;
+        t1-options {
+            remote-loopback-respond;
+        }
+        unit 16 {
+            description DATACOMM-MGMT-T1;
+            dlci 16;
+            family inet {
+                address 10.119.80.77/31;
+            }
+        }
+        unit 17 {
+            description AGENCY-DATA-T1;
+            dlci 17;
+            family inet {
+                address 10.119.88.77/31;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 500 {
+            description DATACOMM-MGMT-VLAN;
+            family inet {
+                address 10.119.41.10/31;
+            }
+        }
+        unit 501 {
+            description AGENCY-DATA-VLAN;
+            family inet {
+                address 10.119.25.10/31;
+            }
+        }
+    }
+}
+snmp {
+    client-list snmp-management {
+        10.119.255.0/24;
+        204.61.5.128/27;
+        0.0.0.0/0 {
+            restrict;
+        }
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    autonomous-system 64591;
+}
+protocols {
+    bgp {
+        group EBGP-DATACOMM-MGMT-ONENET {
+            type external;
+            family inet {
+                unicast;
+            }
+            neighbor 10.119.80.76 {
+                import IMPORT-DEFAULT;
+#                authentication-#key <removed>;
+                export EXPORT-ROUTES;
+                peer-as 5078;
+            }
+        }
+    }
+    ospf {
+        export EXPORT-DEFAULT;
+        area 10.119.41.10 {
+            interface vlan.500;
+        }
+    }
+    lldp {
+        interface all;
+    }
+    lldp-med {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        10.119.255.0/24;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-SNMP-SOURCES {
+        10.119.255.0/24;
+        204.61.5.128/27;
+    }
+    policy-statement EXPORT-DEFAULT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EXPORT-ROUTES {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term SEND-ALL-ELSE {
+            then accept;
+        }
+    }
+    policy-statement IMPORT-DEFAULT {
+        term ACCEPT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+}
+security {
+    policies {
+        from-zone AGENCY-DATA to-zone AGENCY-DATA {
+            policy AGENCY-DATA {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+            policy DATACOMM-MGMT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone AGENCY-DATA {
+            interfaces {
+                t1-1/0/0.17 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone DATACOMM-MGMT {
+            interfaces {
+                t1-1/0/0.16 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                            snmp;
+                        }
+                        protocols {
+                            bgp;
+                        }
+                    }
+                }
+                vlan.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            snmp;
+                        }
+                        protocols {
+                            ospf;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-SNMP-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+routing-instances {
+    AGENCY-DATA {
+        instance-type virtual-router;
+        interface t1-1/0/0.17;
+        interface vlan.501;
+        protocols {
+            bgp {
+                group EBGP-AGENCY-DATA-ONENET {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    neighbor 10.119.88.76 {
+                        import IMPORT-DEFAULT;
+#                        authentication-#key <removed>;
+                        export EXPORT-ROUTES;
+                        peer-as 5078;
+                    }
+                }
+            }
+            ospf {
+                export EXPORT-DEFAULT;
+                area 10.119.25.10 {
+                    interface vlan.501;
+                }
+            }
+        }
+    }
+}
+vlans {
+    VLAN-AGENCY-DATA {
+        vlan-id 501;
+        l3-interface vlan.501;
+    }
+    VLAN-DATACOMM-MGMT {
+        vlan-id 500;
+        l3-interface vlan.500;
+    }
+}
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show ospf neighbor 
+# Address          Interface              State     ID               Pri  Dead
+# 10.119.41.11     vlan.500               Full      10.119.41.11
+# 
+# grnoc-mon at ODOT-MARIETTA-REGMAINT-SRX210> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: routers.all
===================================================================
--- routers.all	(revision 142140)
+++ routers.all	(working copy)
@@ -348,6 +348,10 @@
 odot-hugo-regmaint.client.onenet.net:juniper
 odot-jay-regmaint.client.onenet.net:juniper
 odot-kingfisher-regmaint.client.onenet.net:juniper
+odot-marietta-regmaint.client.onenet.net:juniper
+odot-medford-regmaint.client.onenet.net:juniper
+odot-okc:juniper
+odot-pryor-regmaint.client.onenet.net:juniper
 odot-purcell-regmaint.client.onenet.net:juniper
 odot-sallisaw-residency.client.onenet.net:juniper
 odot-sand-springs-residence.client.onenet.net:juniper



More information about the Nocrancid mailing list