[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Aug 31 12:03:53 CDT 2016


Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 146065)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -1100,8 +1100,8 @@
 #t1-3/3/0:2:22.16 up up
 #t1-3/3/0:2:22.17 up up
 #t1-3/3/0:2:23 down down
-#t1-3/3/0:2:24 up up
-#t1-3/3/0:2:24.0 up up
+#t1-3/3/0:2:24 up down
+#t1-3/3/0:2:24.0 up down
 #t1-3/3/0:2:25 down down
 #t1-3/3/0:2:26 down down
 #t1-3/3/0:2:27 down down
Index: configs/hub.chi.onenet.net
===================================================================
--- configs/hub.chi.onenet.net	(revision 146065)
+++ configs/hub.chi.onenet.net	(working copy)
@@ -280,7 +280,7 @@
 #t1-2/0/2:1 up up
 #t1-2/0/2:1.16 up up
 #t1-2/0/2:1.17 up up
-#t1-2/0/2:2 down up
+#t1-2/0/2:2 down down
 #t1-2/0/2:3 down down
 #t1-2/0/2:4 down down
 #t1-2/0/2:5 down down
Index: configs/odot-sand-springs-residence.client.onenet.net
===================================================================
--- configs/odot-sand-springs-residence.client.onenet.net	(revision 146065)
+++ configs/odot-sand-springs-residence.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show system commit 
+#   2016-08-31 11:08:10 CDT by aberrios via cli
 #   2016-08-31 11:02:41 CDT by aberrios via cli
 #   2016-07-27 18:48:48 CDT by andrew via cli
 #   2016-04-27 12:02:23 CDT by andrew via cli
 #   2016-04-27 10:36:59 CDT by admin via cli
 #   2016-04-25 08:16:26 CDT by admin via cli
-#   2016-04-24 18:17:46 CDT by admin via cli commit confirmed, rollback in 10mins
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -110,7 +110,7 @@
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show system uptime 
 # System booted: 2016-08-10 09:47 CDT 
 # Protocols started: 2016-08-10 09:49 CDT 
-# Last configured: 2016-08-31 11:02 CDT  by aberrios
+# Last configured: 2016-08-31 11:08 CDT  by aberrios
 # 
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show interface terse 
 #Interface Admin Link
@@ -140,8 +140,8 @@
 #ge-0/0/5.0 up down
 #ge-0/0/6 up down
 #ge-0/0/6.0 up down
-#ge-0/0/7 up down
-#ge-0/0/7.0 up down
+#ge-0/0/7 up up
+#ge-0/0/7.0 up up
 #t1-1/0/0 up up
 #t1-1/0/0.0 up up
 #t1-2/0/0 up up
@@ -170,7 +170,7 @@
 #vlan.500 up down
 #vlan.501 up down
 # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show configuration 
-## Last commit: 2016-08-31 11:02:41 CDT by aberrios
+## Last commit: 2016-08-31 11:08:10 CDT by aberrios
 version 12.1X46-D20.5;
 system {
     host-name ODOT-SAND-SPRINGS-RESIDENCY-SRX220;
@@ -302,11 +302,8 @@
 interfaces {
     ge-0/0/0 {
         unit 0 {
-            family ethernet-switching {
-                port-mode trunk;
-                vlan {
-                    members 3;
-                }
+            family inet {
+                address 10.254.10.2/30;
             }
         }
     }
@@ -684,6 +681,13 @@
                         }
                     }
                 }
+                ge-0/0/0.0 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                        }
+                    }
+                }
             }
         }
     }
@@ -798,6 +802,7 @@
                 }
             }
         }
+        interface ge-0/0/0.0;
         interface lsq-0/0/0:0.30;
         interface vlan.3;
         routing-options {
Index: configs/okc-vpn-cluster.okc.onenet.net
===================================================================
--- configs/okc-vpn-cluster.okc.onenet.net	(revision 145812)
+++ configs/okc-vpn-cluster.okc.onenet.net	(working copy)
@@ -344,7 +344,7 @@
 #st0.6 up up
 #st0.7 up up
 #st0.8 up up
-#st0.12 up up
+#st0.12 up down
 #st0.13 up up
 #st0.14 up up
 #st0.15 up up
Index: configs/core.hut.pra.onenet.net
===================================================================
--- configs/core.hut.pra.onenet.net	(revision 146026)
+++ configs/core.hut.pra.onenet.net	(working copy)
@@ -28,16 +28,6 @@
 #       TFEB 0 TBB PFE Chip            OK        
 #       TFEB 0 TFEB PCIE TSen          OK        
 #       TFEB 0 TFEB PCIE Chip          OK        
-#       TFEB 0 QX 0 TSen               OK        
-#       TFEB 0 QX 0 Chip               OK        
-#       TFEB 0 LU 0 TSen               OK        
-#       TFEB 0 LU 0 Chip               OK        
-#       TFEB 0 MQ 0 TSen               OK        
-#       TFEB 0 MQ 0 Chip               OK        
-#       TFEB 0 TBB PFE TSen            OK        
-#       TFEB 0 TBB PFE Chip            OK        
-#       TFEB 0 TFEB PCIE TSen          OK        
-#       TFEB 0 TFEB PCIE Chip          OK        
 # Fans  Fan 1                          OK
 #       Fan 2                          OK
 #       Fan 3                          OK
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net	(revision 146061)
+++ configs/hub.dur.onenet.net	(working copy)
@@ -329,7 +329,7 @@
 #fe-2/1/1.0 up up
 #fe-2/1/2 up up
 #fe-2/1/2.0 up up
-#fe-2/1/3 down down
+#fe-2/1/3 down up
 #ge-2/2/0 down down
 #pc-2/2/0 up up
 #pc-2/2/0.16383 up up
Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net	(revision 146052)
+++ configs/core5.tul.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show system commit 
+#   2016-08-31 11:17:07 CDT by aberrios via cli commit synchronize
+#   2016-08-31 11:15:33 CDT by aberrios via cli commit synchronize
 #   2016-08-30 14:37:20 CDT by sky via cli commit synchronize
 #   2016-08-30 14:31:09 CDT by sky via cli commit synchronize
 #   2016-08-30 14:14:08 CDT by sky via cli commit synchronize
 #   2016-08-30 13:55:58 CDT by sky via cli commit synchronize
-#   2016-08-30 13:43:16 CDT by sky via cli commit synchronize
-#   2016-08-30 13:12:37 CDT by sky via cli commit synchronize
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -391,7 +391,7 @@
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show system uptime 
 # System booted: 2016-08-15 04:47 CDT 
 # Protocols started: 2016-08-15 04:53 CDT 
-# Last configured: 2016-08-30 14:37 CDT  by sky
+# Last configured: 2016-08-31 11:17 CDT  by aberrios
 # 
 # {master}
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show interface terse 
@@ -536,6 +536,7 @@
 #xe-1/0/1.252 up up
 #xe-1/0/1.253 up up
 #xe-1/0/1.254 up up
+#xe-1/0/1.255 up up
 #xe-1/0/1.257 up up
 #xe-1/0/1.258 up up
 #xe-1/0/1.259 up up
@@ -744,7 +745,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show configuration 
-## Last commit: 2016-08-30 14:37:20 CDT by sky
+## Last commit: 2016-08-31 11:17:07 CDT by aberrios
 version 13.3R9.13;
 groups {
     re0 {
@@ -2311,6 +2312,20 @@
                 address 10.119.80.28/31;
             }
         }
+        unit 255 {
+            description "ODOT-SANDSPRINGS-RESIDENCE-MGMT-10M-CIR0019370 [ORDERED]";
+            vlan-id 255;
+            family inet {
+                policer {
+                    input 10M-POL;
+                    output 10M-POL;
+                }
+                sampling {
+                    input;
+                    output;
+                }
+            }
+        }
         unit 257 {
             description TAGNET-7277-TULSA-T1-CIR0019381;
             bandwidth 10m;
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net	(revision 146065)
+++ configs/stringtown-high-school.client.onenet.net	(working copy)
@@ -674,7 +674,6 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show bfd session 
-quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/core2.nor-mx80.onenet.net
===================================================================
--- configs/core2.nor-mx80.onenet.net	(revision 145827)
+++ configs/core2.nor-mx80.onenet.net	(working copy)
@@ -26,16 +26,6 @@
 #       TFEB 0 TBB PFE Chip            OK        
 #       TFEB 0 TFEB PCIE TSen          OK        
 #       TFEB 0 TFEB PCIE Chip          OK        
-#       TFEB 0 QX 0 TSen               OK        
-#       TFEB 0 QX 0 Chip               OK        
-#       TFEB 0 LU 0 TSen               OK        
-#       TFEB 0 LU 0 Chip               OK        
-#       TFEB 0 MQ 0 TSen               OK        
-#       TFEB 0 MQ 0 Chip               OK        
-#       TFEB 0 TBB PFE TSen            OK        
-#       TFEB 0 TBB PFE Chip            OK        
-#       TFEB 0 TFEB PCIE TSen          OK        
-#       TFEB 0 TFEB PCIE Chip          OK        
 # Fans  Fan 1                          OK
 #       Fan 2                          OK
 #       Fan 3                          OK
Index: configs/pushmataha-fmc-clayton.client.onenet.net
===================================================================
--- configs/pushmataha-fmc-clayton.client.onenet.net	(revision 145940)
+++ configs/pushmataha-fmc-clayton.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at PUSHMATAHA-FMC-CLAYTON-LR-004932> show system commit 
+#   2016-08-31 12:00:45 CDT by sky via cli
+#   2016-08-31 11:53:54 CDT by sky via cli
+#   2016-08-31 11:44:17 CDT by sky via cli
+#   2016-08-31 11:36:36 CDT by sky via cli
 #   2016-08-24 13:10:31 CDT by admin via cli
 #   2016-08-22 11:35:15 CDT by admin via cli commit confirmed, rollback in 3mins
-#   2016-08-10 19:12:58 CDT by admin via cli
-#   2016-08-11 02:12:58 CDT by root via other
-#   2016-08-11 02:00:22 CDT by root via cli
-#   2016-01-15 18:58:50 CST by root via other
 # grnoc-mon at PUSHMATAHA-FMC-CLAYTON-LR-004932> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -115,7 +115,7 @@
 # grnoc-mon at PUSHMATAHA-FMC-CLAYTON-LR-004932> show system uptime 
 # System booted: 2016-08-18 10:28 CDT 
 # Protocols started: 2016-08-18 10:31 CDT 
-# Last configured: 2016-08-24 13:10 CDT  by admin
+# Last configured: 2016-08-31 12:00 CDT  by sky
 # 
 # grnoc-mon at PUSHMATAHA-FMC-CLAYTON-LR-004932> show interface terse 
 #Interface Admin Link
@@ -164,11 +164,12 @@
 #ppd0 up up
 #ppe0 up up
 #st0 up up
+#st0.0 up down
 #tap up up
 #vlan up up
 #vlan.999 up down
 # grnoc-mon at PUSHMATAHA-FMC-CLAYTON-LR-004932> show configuration 
-## Last commit: 2016-08-24 13:10:31 CDT by admin
+## Last commit: 2016-08-31 12:00:45 CDT by sky
 version 12.1X46-D40.2;
 system {
     host-name PUSHMATAHA-FMC-CLAYTON-LR-004932;
@@ -422,6 +423,15 @@
             }
         }
     }
+    st0 {
+        unit 0 {
+            description "Tunnel to FMC-BOSWELL VPN";
+            family inet {
+                mtu 1440;
+                address 10.10.0.1/30;
+            }
+        }
+    }
     vlan {
         unit 999 {
             description "L3 INTERFACE - TEST-VLAN - 10.1.0.1/24";
@@ -466,6 +476,47 @@
     }
 }
 security {
+    ike {
+        proposal PRE-G2-AES128-SHA {
+            authentication-method pre-shared-keys;
+            dh-group group2;
+            authentication-algorithm sha1;
+            encryption-algorithm aes-128-cbc;
+            lifetime-seconds 28800;
+        }
+        policy IKE-FMC-BOSWELL {
+            mode main;
+            proposals PRE-G2-AES128-SHA;
+#            pre-shared-#key <removed>;
+        }
+        gateway IKE-GATE-FMC-BOSWELL {
+            ike-policy IKE-FMC-BOSWELL;
+            address 40.135.80.170;
+            dead-peer-detection;
+            external-interface ge-0/0/0.0;
+            local-address 164.58.17.183;
+        }
+    }
+    ipsec {
+        proposal ESP-AES128-SHA {
+            description group2;
+            protocol esp;
+            authentication-algorithm hmac-sha1-96;
+            encryption-algorithm aes-128-cbc;
+            lifetime-seconds 3600;
+        }
+        policy VPN-POLICY-FMC-BOSWELL {
+            proposals ESP-AES128-SHA;
+        }
+        vpn IPSEC-VPN-FMC-BOSWELL {
+            bind-interface st0.0;
+            ike {
+                gateway IKE-GATE-FMC-BOSWELL;
+                ipsec-policy VPN-POLICY-FMC-BOSWELL;
+            }
+            establish-tunnels immediately;
+        }
+    }
     screen {
         ids-option UNTRUST-SCREEN {
             icmp {
@@ -544,6 +595,18 @@
                 }
             }
         }
+        from-zone TRUST to-zone TRUST {
+            policy TRUST-TO-TRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
     }
     zones {
         security-zone TRUST {
@@ -557,6 +620,16 @@
                         }
                     }
                 }
+                st0.0 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            snmp;
+                            ssh;
+                            traceroute;
+                        }
+                    }
+                }
             }
         }
         security-zone TEST {
@@ -574,6 +647,11 @@
         }
         security-zone UNTRUST {
             screen UNTRUST-SCREEN;
+            host-inbound-traffic {
+                system-services {
+                    ike;
+                }
+            }
             interfaces {
                 ge-0/0/0.0 {
                     host-inbound-traffic {
Index: configs/calera-ps.client.onenet.net
===================================================================
--- configs/calera-ps.client.onenet.net	(revision 146064)
+++ configs/calera-ps.client.onenet.net	(working copy)
@@ -121,8 +121,8 @@
 #ge-0/0/5 down down
 #ge-0/0/6 up up
 #ge-0/0/6.0 up up
-#ge-0/0/7 up up
-#ge-0/0/7.0 up up
+#ge-0/0/7 up down
+#ge-0/0/7.0 up down
 #fxp2 up up
 #fxp2.0 up up
 #gre up up
Index: configs/core.odmhsas-okc.onenet.net
===================================================================
--- configs/core.odmhsas-okc.onenet.net	(revision 145484)
+++ configs/core.odmhsas-okc.onenet.net	(working copy)
@@ -232,7 +232,7 @@
 #ge-0/0/2 up up
 #ge-0/0/3 up up
 #ge-0/0/3.0 up up
-#ge-0/0/4 up down
+#ge-0/0/4 up up
 #ge-0/0/5 up up
 #ge-0/0/5.0 up up
 #ge-0/0/6 up up



More information about the Nocrancid mailing list