[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri Aug 19 06:03:53 CDT 2016


Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net	(revision 145693)
+++ configs/core5.tul.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show system commit 
+#   2016-08-19 05:44:47 CDT by joel via cli commit synchronize
+#   2016-08-19 05:38:13 CDT by joel via cli commit synchronize
+#   2016-08-19 05:34:04 CDT by joel via cli commit synchronize
+#   2016-08-19 05:28:19 CDT by joel via cli commit synchronize
 #   2016-08-18 15:27:38 CDT by joel via cli commit synchronize
 #   2016-08-18 14:17:48 CDT by joel via cli commit confirmed, rollback in 3mins synchronize
-#   2016-08-17 12:55:33 CDT by aberrios via cli commit synchronize
-#   2016-08-15 20:48:42 CDT by andrew via cli commit synchronize
-#   2016-08-15 17:56:00 CDT by andrew via cli commit confirmed, rollback in 3mins synchronize
-#   2016-08-15 17:21:16 CDT by andrew via cli commit synchronize
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -391,7 +391,7 @@
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show system uptime 
 # System booted: 2016-08-15 04:47 CDT 
 # Protocols started: 2016-08-15 04:53 CDT 
-# Last configured: 2016-08-18 15:27 CDT  by joel
+# Last configured: 2016-08-19 05:44 CDT  by joel
 # 
 # {master}
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show interface terse 
@@ -735,7 +735,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show configuration 
-## Last commit: 2016-08-18 15:27:38 CDT by joel
+## Last commit: 2016-08-19 05:44:47 CDT by joel
 version 13.3R9.13;
 groups {
     re0 {
Index: configs/langston-hughes-aca-ex-s.client.onenet.net
===================================================================
--- configs/langston-hughes-aca-ex-s.client.onenet.net	(revision 145697)
+++ configs/langston-hughes-aca-ex-s.client.onenet.net	(working copy)
@@ -0,0 +1,558 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show system commit 
+#   2014-03-13 05:09:25 CDT by admin via cli
+#   2014-03-13 08:50:52 CDT by root via cli
+#   2014-03-13 08:48:41 CDT by root via cli
+#   2014-03-13 04:45:20 CDT by root via button
+#   2014-03-13 04:42:53 CDT by root via button
+#   2014-03-13 04:40:45 CDT by root via other
+# rescue  2014-03-13 05:49:08 CDT by admin via cli
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis environment 
+# Class Item                           Status     Measurement
+# Power FPC 0 Power Supply 0           OK        
+# Temp  FPC 0 CPU                      OK        
+#       FPC 0 Exhaust Area             OK        
+#       FPC 0 EX-PFE1                  OK        
+#       FPC 0 Local Intake             OK        
+#       FPC 0 Remote Intake            OK        
+#       FPC 0 GEPHY1                   OK        
+#       FPC 0 GEPHY2                   OK        
+#       FPC 0 GEPHY3                   OK        
+#       FPC 0 GEPHY4                   OK        
+#       FPC 0 GEPHY5                   OK        
+#       FPC 0 GEPHY6                   OK        
+# Fans  FPC 0 Fan 1                    OK
+#       FPC 0 Fan 2                    OK
+#       FPC 0 PSU Fan                  OK
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    uboot      U-Boot 1.1.6 (Jul 26 2011 - 03:19:50)   1.0
+#                          loader     FreeBSD/arm U-Boot loader 1.1              
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                  512 MB
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CV0214390464      EX2200-24P-4G
+# Routing Engine 0 REV 28   750-026464   CV0214390464      EX2200-24P-4G, POE
+# FPC 0            REV 28   750-026464   CV0214390464      EX2200-24P-4G, POE
+#   CPU                     BUILTIN      BUILTIN           FPC CPU
+#   PIC 0                   BUILTIN      BUILTIN           24x 10/100/1000 Base-T
+#   PIC 1          REV 28   750-026464   CV0214390464      4x GE SFP
+#     Xcvr 0       REV 01   740-031851   AM1143SW329       SFP-SX
+# Power Supply 0                                           PS 550W AC
+# Fan Tray                                                 Fan Tray
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis hardware models 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     FRU model number
+# Routing Engine 0 REV 28   750-026464   CV0214390464      EX2200-24P-4G
+# FPC 0            REV 28   750-026464   CV0214390464      EX2200-24P-4G
+#   PIC 0                   BUILTIN      BUILTIN           EX2200-24P-4G
+#   PIC 1          REV 28   750-026464   CV0214390464      EX2200-24P-4G
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis routing-engine 
+# Routing Engine status:
+#   Slot 0:
+#     Current state                  Master
+#     DRAM                       512
+#     Serial ID                      CV0214390464
+# 
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis scb 
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis sfm detail 
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show chassis ssb 
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show system boot-messages 
+# fpc0:
+# --------------------------------------------------------------------------
+# GDB: debug ports: uart
+# GDB: current port: uart
+# KDB: debugger backends: ddb gdb
+# KDB: current backend: ddb
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# can't re-use a leaf (all_slot_serialid)!
+# CPU: Feroceon 88FR131 rev 1 (Marvell core)
+# cpu53: Feroceon 88FR131 revision   WB enabled EABT branch prediction enabled
+#   16KB/32B 4-way Instruction cache
+#   16KB/32B 4-way write-back-locking-C Data cache
+# SOC: Marvell 88F6281 rev A0, TClock 200MHz
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing EXSERIES properties ...
+# mbus0: <Marvell Internal Bus (Mbus)> on motherboard
+# ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
+# timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 1 on mbus0
+# gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 35,36,37,38,39,40,41 on mbus0
+# uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 33 on mbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 34 on mbus0
+# ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 48,19 on mbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x04b4 product 0x6560, class 9/0, rev 2.00/90.15, addr 2
+# uhub1: single transaction translator
+# uhub1: 2 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 12,13,14,11,46 on mbus0
+# mge0: hardware MAC address cc:e1:7f:c7:59:ff
+# miibus0: <MII bus> on mge0
+# e1000phy0: <Marvell 88E1118 Gigabit PHY> on miibus0
+# e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f irq 29 on mbus0
+# syspld0: <SYSPLD> on i2c0
+# 8564 rtc0: <8564 RTC> on i2c0
+# poe0: <POE> on i2c0
+# cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8000000-0xf87fffff irq 23 on mbus0
+# mpfe0: <Juniper EX-series Packet Forwarding Engine> at mem 0xf4000000-0xf7ffffff irq 113 on mbus0
+# pcib0: <Marvell 88F6281 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xefffffff irq 9 on mbus0
+# pci0: <PCI bus> on pcib0
+# Initializing product: 76 ..
+# bmeb: bmeb_lib_init done 0xc3386800, addr 0xc1d5bac0
+# bme0:Virtual BME driver initializing
+# Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
+# Kernel thread "wkupdaemon" (pid 42) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s1a
+# Invalid time in real time clock.
+# Check and reset the date immediately!
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show version 
+# fpc0: # -------------------------------------------------------------------------- # Hostname: LANGSTON-HUGHES-ACA-EX-S-004792 # Model: ex2200-24p-4g # JUNOS Base OS boot [12.3R6.6] # JUNOS Base OS Software Suite [12.3R6.6] # JUNOS Kernel Software Suite [12.3R6.6] # JUNOS Crypto Software Suite [12.3R6.6] # JUNOS Online Documentation [12.3R6.6] # JUNOS Enterprise Software Suite [12.3R6.6] # JUNOS Packet Forwarding Engine Enterprise Software Suite [12.3R6.6] # JUNOS Routing Software Suite [12.3R6.6] # JUNOS Web Management [12.3R6.6] # JUNOS FIPS mode utilities [12.3R6.6] #  # {master:0} # grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> file list /var/tmp detail # 
+# /var/tmp:
+# total blocks: 48
+# drwxrwxr-x  2 root  wheel        512 Nov 15  2011 .snap/
+# -rw-r--r--  1 root  field       3926 Mar 13 04:44 ex_autod_config
+# -rw-r--r--  1 root  field       3026 Mar 13 04:44 ex_autod_rollback_cfg
+# drwxr-xr-x  2 root  wheel        512 Mar 13 04:40 gres-tp/
+# drwxrwxrwx  2 root  wheel        512 Mar 13 04:41 install/
+# drwxrwxrwx  2 root  wheel        512 Mar 13 04:41 pics/
+# drwxr-xr-x  2 root  field        512 Mar 13 04:41 rtsdb/
+# drwxrwxrwt  2 root  wheel        512 Mar 13 04:41 vi.recover/
+# total files: 2
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show system uptime 
+# fpc0:
+# --------------------------------------------------------------------------
+# System booted: 2014-03-13 04:43 CDT 
+# Protocols started: 2014-03-13 04:46 CDT 
+# Last configured: 2014-03-13 05:09 CDT  by admin
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#ge-0/0/1 up up
+#ge-0/0/1.0 up up
+#ge-0/0/2 up up
+#ge-0/0/2.0 up up
+#ge-0/0/3 up up
+#ge-0/0/3.0 up up
+#ge-0/0/4 up up
+#ge-0/0/4.0 up up
+#ge-0/0/5 up up
+#ge-0/0/5.0 up up
+#ge-0/0/6 down down
+#ge-0/0/7 down down
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 down down
+#ge-0/0/15 down down
+#ge-0/0/16 down down
+#ge-0/0/17 down down
+#ge-0/0/18 down down
+#ge-0/0/19 down down
+#ge-0/0/20 down down
+#ge-0/0/21 down down
+#ge-0/0/22 up up
+#ge-0/0/22.0 up up
+#ge-0/0/23 up up
+#ge-0/0/23.0 up up
+#ge-0/1/0 up down
+#ge-0/1/0.0 up down
+#bme0 up up
+#bme0.32768 up up
+#dsc up up
+#gre up up
+#ipip up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lsi up up
+#me0 down down
+#me0.0 up down
+#mtun up up
+#pimd up up
+#pime up up
+#tap up up
+#vlan up up
+#vlan.80 up up
+#vme up down
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show configuration 
+## Last commit: 2014-03-13 05:09:25 CDT by admin
+version 12.3R6.6;
+system {
+    host-name LANGSTON-HUGHES-ACA-EX-S-004792;
+    auto-snapshot;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.198.10;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.199.10.130;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.199.10.130;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+            max-sessions-per-connection 32;
+        }
+        netconf {
+            ssh;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        host 164.58.253.92 {
+            any any;
+        }
+        host 164.58.253.38 {
+            any any;
+        }
+        file messages {
+            any notice;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file traffic {
+            any any;
+            match RT_FLOW_SESSION;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+        source-address 10.199.10.130;
+    }
+    max-configurations-on-flash 20;
+    ##
+    ## Warning: statement ignored: unsupported platform (ex2200-24p-4g)
+    ##
+    max-configuration-rollbacks 20;
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+chassis {
+    alarm {
+        management-ethernet {
+            link-down ignore;
+        }
+    }
+}
+interfaces {
+    interface-range DISABLED {
+        member-range ge-0/0/6 to ge-0/0/21;
+        description DISABLED;
+        disable;
+    }
+    interface-range WIFI {
+        member-range ge-0/0/0 to ge-0/0/5;
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ TRUST-VLAN GUEST-VLAN ];
+                }
+                native-vlan-id ONENET-MGMT-L3VPN-VLAN;
+            }
+        }
+    }
+    ge-0/0/0 {
+        description S-AP-1;
+    }
+    ge-0/0/1 {
+        description S-AP-2;
+    }
+    ge-0/0/2 {
+        description S-AP-3;
+    }
+    ge-0/0/3 {
+        description S-AP-4;
+    }
+    ge-0/0/4 {
+        description S-AP-5;
+    }
+    ge-0/0/5 {
+        description S-AP-6;
+    }
+    ge-0/0/22 {
+        description "TEMP - L2 TRUNK TO EX-NORTH-BLDG";
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ TRUST-VLAN GUEST-VLAN ONENET-MGMT-L3VPN-VLAN ];
+                }
+            }
+        }
+    }
+    ge-0/0/23 {
+        description "L2 TRUNK TO SRX-SOUTH-BLDG";
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ TRUST-VLAN GUEST-VLAN ONENET-MGMT-L3VPN-VLAN ];
+                }
+            }
+        }
+    }
+    ge-0/1/0 {
+        description "L2 TRUNK TO EX-NORTH-BLDG";
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ TRUST-VLAN GUEST-VLAN ONENET-MGMT-L3VPN-VLAN ];
+                }
+            }
+        }
+    }
+    ge-0/1/1 {
+        disable;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    me0 {
+        disable;
+    }
+    vlan {
+        unit 80 {
+            description "L3 INTERFACE - ONENET-MGMT-L3VPN-VLAN - 10.199.10.130/28";
+            family inet {
+                address 10.199.10.130/28;
+            }
+        }
+    }
+}
+snmp {
+    description OneNet;
+    contact "Net Group";
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 10.199.10.129;
+    }
+}
+protocols {
+    igmp-snooping {
+        vlan all;
+    }
+    rstp;
+    lldp {
+        interface all;
+    }
+}
+policy-options {
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-MGMT-SOURCES {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-DNS-SOURCES {
+        apply-path "system name-server <*>";
+    }
+    prefix-list PRE-NTP-SOURCES {
+        apply-path "system ntp server <*>";
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term MGMT {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-DNS-SOURCES;
+                        PRE-NTP-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                }
+                then accept;
+            }
+            term ICMP-ALLOW {
+                from {
+                    protocol icmp;
+                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+                }
+                then accept;
+            }
+            term Reject {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+}
+vlans {
+    GUEST-VLAN {
+        description GUEST-VLAN;
+        vlan-id 300;
+    }
+    ONENET-MGMT-L3VPN-VLAN {
+        description ONENET-MGMT-L3VPN-VLAN;
+        vlan-id 80;
+        l3-interface vlan.80;
+    }
+    TRUST-VLAN {
+        description TRUST-VLAN;
+        vlan-id 100;
+    }
+}
+poe {
+    interface all;
+}
+{master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show ospf neighbor 
+# OSPF instance is not running
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-S-004792> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
+{master:0}
Index: configs/core1.dc.onenet.net
===================================================================
--- configs/core1.dc.onenet.net	(revision 145695)
+++ configs/core1.dc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MX480_DC_01_RE0> show system commit 
+#   2016-08-19 05:54:53 CDT by joel via cli commit synchronize
 #   2016-08-08 22:13:11 CDT by andrew via cli commit confirmed, rollback in 3mins synchronize
 #   2016-08-08 11:48:33 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
 #   2016-07-21 17:49:09 CDT by andrew via cli commit synchronize
 #   2016-07-21 17:45:07 CDT by andrew via cli commit synchronize
 #   2016-07-20 10:12:45 CDT by andrew via cli commit synchronize
-#   2016-07-18 23:00:43 CDT by andrew via cli commit confirmed, rollback in 3mins synchronize
 # grnoc-mon at MX480_DC_01_RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -362,7 +362,7 @@
 # grnoc-mon at MX480_DC_01_RE0> show system uptime 
 # System booted: 2014-08-25 20:38 CDT 
 # Protocols started: 2014-08-25 20:39 CDT 
-# Last configured: 2016-08-08 22:13 CDT  by andrew
+# Last configured: 2016-08-19 05:54 CDT  by joel
 # 
 # {master}
 # grnoc-mon at MX480_DC_01_RE0> show interface terse 
@@ -847,7 +847,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at MX480_DC_01_RE0> show configuration 
-## Last commit: 2016-08-08 22:13:11 CDT by andrew
+## Last commit: 2016-08-19 05:54:53 CDT by joel
 version 12.3R7.7;
 groups {
     re0 {
@@ -3744,9 +3744,9 @@
                 route-filter 10.199.209.0/24 orlonger;
                 route-filter 10.199.208.0/24 orlonger;
                 route-filter 10.199.255.0/24 orlonger;
-                route-filter 10.199.10.0/24 exact;
                 route-filter 10.199.192.0/22 orlonger;
                 route-filter 10.199.7.0/24 orlonger;
+                route-filter 10.199.10.0/24 orlonger;
             }
             then accept;
         }
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 145714)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -598,7 +598,6 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show bfd session 
-quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/langston-hughes-aca-ex-n.client.onenet.net
===================================================================
--- configs/langston-hughes-aca-ex-n.client.onenet.net	(revision 145696)
+++ configs/langston-hughes-aca-ex-n.client.onenet.net	(working copy)
@@ -0,0 +1,505 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show system commit 
+#   2014-03-13 05:03:29 CDT by admin via cli
+#   2014-03-13 09:02:51 CDT by admin via cli
+#   2014-03-13 09:02:18 CDT by admin via cli
+#   2014-03-13 09:00:56 CDT by admin via cli
+#   2015-03-19 18:38:38 CDT by admin via cli
+#   2015-03-19 18:36:58 CDT by admin via cli commit confirmed, rollback in 5mins
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis environment 
+# Class Item                           Status     Measurement
+# Power FPC 0 Power Supply 0           OK        
+# Temp  FPC 0 GEPHY1                   OK        
+#       FPC 0 GEPHY2                   OK        
+#       FPC 0 GEPHY3                   OK        
+#       FPC 0 GEPHY4                   OK        
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    uboot      U-Boot 1.1.6 (Apr  4 2013 - 10:33:10)   1.0
+#                          loader     FreeBSD/arm U-Boot loader 1.1              
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                  512 MB
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                GR0214450572      EX2200-C-12P-2G, POE+
+# Routing Engine 0 REV 10   650-036547   GR0214450572      EX2200-C-12P-2G, POE+
+# FPC 0            REV 10   650-036547   GR0214450572      EX2200-C-12P-2G, POE+
+#   CPU                     BUILTIN      BUILTIN           FPC CPU
+#   PIC 0                   BUILTIN      BUILTIN           12x 10/100/1000 Base-T
+#   PIC 1          REV 10   650-036547   GR0214450572      2x (10/100/1000 Base-T or GE SFP)
+#     Xcvr 0       REV 01   740-031851   AM1144SW5YZ       SFP-SX
+# Power Supply 0                                           PS 180W AC
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis hardware models 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     FRU model number
+# Routing Engine 0 REV 10   650-036547   GR0214450572      EX2200-C-12P-2G
+# FPC 0            REV 10   650-036547   GR0214450572      EX2200-C-12P-2G
+#   PIC 0                   BUILTIN      BUILTIN           EX2200-C-12P-2G
+#   PIC 1          REV 10   650-036547   GR0214450572      EX2200-C-12P-2G
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis routing-engine 
+# Routing Engine status:
+#   Slot 0:
+#     Current state                  Master
+#     DRAM                       512
+#     Serial ID                      GR0214450572
+# 
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis scb 
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis sfm detail 
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show chassis ssb 
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show system boot-messages 
+# fpc0:
+# --------------------------------------------------------------------------
+# GDB: debug ports: uart
+# GDB: current port: uart
+# KDB: debugger backends: ddb gdb
+# KDB: current backend: ddb
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# can't re-use a leaf (all_slot_serialid)!
+# CPU: Feroceon 88FR131 rev 1 (Marvell core)
+# cpu53: Feroceon 88FR131 revision   WB enabled EABT branch prediction enabled
+#   16KB/32B 4-way Instruction cache
+#   16KB/32B 4-way write-back-locking-C Data cache
+# SOC: Marvell 88F6281 rev A0, TClock 200MHz
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing EXSERIES properties ...
+# mbus0: <Marvell Internal Bus (Mbus)> on motherboard
+# ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
+# timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 1 on mbus0
+# gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 35,36,37,38,39,40,41 on mbus0
+# uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 33 on mbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 34 on mbus0
+# ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 48,19 on mbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x04b4 product 0x6560, class 9/0, rev 2.00/90.15, addr 2
+# uhub1: single transaction translator
+# uhub1: 2 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 12,13,14,11,46 on mbus0
+# mge0: hardware MAC address f0:1c:2d:b8:3a:3f
+# miibus0: <MII bus> on mge0
+# e1000phy0: <Marvell 88E1118 Gigabit PHY> on miibus0
+# e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f irq 29 on mbus0
+# syspld0: <SYSPLD> on i2c0
+# poe0: <POE> on i2c0
+# cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8000000-0xf87fffff irq 23 on mbus0
+# mpfe0: <Juniper EX-series Packet Forwarding Engine> at mem 0xf4000000-0xf7ffffff irq 113 on mbus0
+# pcib0: <Marvell 88F6281 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xefffffff irq 9 on mbus0
+# pci0: <PCI bus> on pcib0
+# Initializing product: 119 ..
+# bmeb: bmeb_lib_init done 0xc3386800, addr 0xc1d5bac0
+# bme0:Virtual BME driver initializing
+# Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
+# Kernel thread "wkupdaemon" (pid 42) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s1a
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show version 
+# fpc0: # -------------------------------------------------------------------------- # Hostname: LANGSTON-HUGHES-ACA-EX-N-004784 # Model: ex2200-c-12p-2g # JUNOS Base OS boot [12.3R6.6] # JUNOS Base OS Software Suite [12.3R6.6] # JUNOS Kernel Software Suite [12.3R6.6] # JUNOS Crypto Software Suite [12.3R6.6] # JUNOS Online Documentation [12.3R6.6] # JUNOS Enterprise Software Suite [12.3R6.6] # JUNOS Packet Forwarding Engine Enterprise Software Suite [12.3R6.6] # JUNOS Routing Software Suite [12.3R6.6] # JUNOS Web Management [12.3R6.6] # JUNOS FIPS mode utilities [12.3R6.6] #  # {master:0} # grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> file list /var/tmp detail # 
+# /var/tmp:
+# total blocks: 44
+# drwxrwxr-x  2 root  wheel        512 Dec 31  2009 .snap/
+# -rw-r--r--  1 root  field       2700 Mar 13 04:43 ex_autod_config
+# -rw-r--r--  1 root  field       1796 Mar 13 04:43 ex_autod_rollback_cfg
+# drwxr-xr-x  2 root  wheel        512 Mar 13 04:41 gres-tp/
+# drwxrwxrwx  2 root  wheel        512 Mar 13 04:48 install/
+# drwxrwxrwx  2 root  wheel        512 Mar 13 04:48 pics/
+# drwxr-xr-x  2 root  field        512 Mar 13 04:42 rtsdb/
+# drwxrwxrwt  2 root  wheel        512 Mar 13 04:48 vi.recover/
+# total files: 2
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show system uptime 
+# fpc0:
+# --------------------------------------------------------------------------
+# System booted: 2014-03-13 04:46 CDT 
+# Protocols started: 2014-03-13 04:49 CDT 
+# Last configured: 2014-03-13 05:03 CDT  by admin
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up down
+#ge-0/0/0.0 up down
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 up down
+#ge-0/0/2.0 up down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 down down
+#ge-0/0/7 down down
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 up up
+#ge-0/0/11.0 up up
+#ge-0/1/0 up down
+#ge-0/1/0.0 up down
+#ge-0/1/1 down down
+#bme0 up up
+#bme0.32768 up up
+#dsc up up
+#gre up up
+#ipip up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lsi up up
+#me0 down down
+#me0.0 up down
+#mtun up up
+#pimd up up
+#pime up up
+#tap up up
+#vlan up up
+#vlan.80 up up
+#vme up down
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show configuration 
+## Last commit: 2014-03-13 05:03:29 CDT by admin
+version 12.3R6.6;
+system {
+    host-name LANGSTON-HUGHES-ACA-EX-N-004784;
+    auto-snapshot;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.198.10;
+    }
+    radius-server {
+        156.110.31.11 {
+            port 1812;
+            accounting-port 1813;
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 10.199.10.131;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 10.199.10.131;
+        }
+    }
+    login {
+        message "\n\n************************************ WARNING ****************************************\n\n*                    To protect the system from unauthorized use,                   *\n\n*      activities on this system are monitored,recorded and subject to audit.       *\n\n*     Use of this system is expressed consent to such monitoring and recording.     *\n\n*          Any unauthorized access or use of this system is prohibited and          *\n\n*     is subject to criminal and civil penalties and/or administrative action.      *\n\n******************** UNAUTHORIZED USE IS STRICTLY PROHIBITED ************************\n\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+            max-sessions-per-connection 32;
+        }
+        netconf {
+            ssh;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        host 164.58.253.92 {
+            any any;
+        }
+        host 164.58.253.38 {
+            any any;
+        }
+        file messages {
+            any notice;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file traffic {
+            any any;
+            match RT_FLOW_SESSION;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+        source-address 10.199.10.131;
+    }
+    max-configurations-on-flash 20;
+    ##
+    ## Warning: statement ignored: unsupported platform (ex2200-c-12p-2g)
+    ##
+    max-configuration-rollbacks 20;
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+chassis {
+    alarm {
+        management-ethernet {
+            link-down ignore;
+        }
+    }
+}
+interfaces {
+    interface-range DISABLED {
+        member-range ge-0/0/3 to ge-0/0/10;
+        description DISABLED;
+        disable;
+    }
+    interface-range WIFI {
+        member-range ge-0/0/0 to ge-0/0/2;
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ TRUST-VLAN GUEST-VLAN ];
+                }
+                native-vlan-id ONENET-MGMT-L3VPN-VLAN;
+            }
+        }
+    }
+    ge-0/0/0 {
+        description N-AP-1;
+    }
+    ge-0/0/1 {
+        description N-AP-2;
+    }
+    ge-0/0/2 {
+        description N-AP-3;
+    }
+    ge-0/0/11 {
+        description "TEMP - L2 TRUNK TO SRX-SOUTH-BLDG";
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ TRUST-VLAN GUEST-VLAN ONENET-MGMT-L3VPN-VLAN ];
+                }
+            }
+        }
+    }
+    ge-0/1/0 {
+        description "L2 TRUNK TO SRX-SOUTH-BLDG";
+        media-type fiber;
+        unit 0 {
+            family ethernet-switching {
+                port-mode trunk;
+                vlan {
+                    members [ TRUST-VLAN GUEST-VLAN ONENET-MGMT-L3VPN-VLAN ];
+                }
+            }
+        }
+    }
+    ge-0/1/1 {
+        disable;
+        media-type fiber;
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    me0 {
+        disable;
+    }
+    vlan {
+        unit 80 {
+            description "L3 INTERFACE - ONENET-MGMT-L3VPN-VLAN - 10.199.10.131/28";
+            family inet {
+                address 10.199.10.131/28;
+            }
+        }
+    }
+}
+snmp {
+    description OneNet;
+    contact "Net Group";
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 10.199.10.129;
+    }
+}
+protocols {
+    igmp-snooping {
+        vlan all;
+    }
+    rstp;
+    lldp {
+        interface all;
+    }
+}
+policy-options {
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+    prefix-list PRE-MGMT-SOURCES {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-DNS-SOURCES {
+        apply-path "system name-server <*>";
+    }
+    prefix-list PRE-NTP-SOURCES {
+        apply-path "system ntp server <*>";
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term MGMT {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-DNS-SOURCES;
+                        PRE-NTP-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                }
+                then accept;
+            }
+            term ICMP-ALLOW {
+                from {
+                    protocol icmp;
+                    icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+                }
+                then accept;
+            }
+            term Reject {
+                then {
+                    discard;
+                }
+            }
+        }
+    }
+}
+vlans {
+    GUEST-VLAN {
+        description GUEST-VLAN;
+        vlan-id 300;
+    }
+    ONENET-MGMT-L3VPN-VLAN {
+        description ONENET-MGMT-L3VPN-VLAN;
+        vlan-id 80;
+        l3-interface vlan.80;
+    }
+    TRUST-VLAN {
+        description TRUST-VLAN;
+        vlan-id 100;
+    }
+}
+{master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show ospf neighbor 
+# OSPF instance is not running
+# 
+# {master:0}
+# grnoc-mon at LANGSTON-HUGHES-ACA-EX-N-004784> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
+{master:0}



More information about the Nocrancid mailing list