[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Mon Dec 5 12:04:05 CST 2016


Index: configs/kiamichi-fmc-battiest.client.onenet.net
===================================================================
--- configs/kiamichi-fmc-battiest.client.onenet.net	(revision 148632)
+++ configs/kiamichi-fmc-battiest.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show system commit 
+#   2016-12-05 11:59:51 CST by sky via cli
+#   2016-12-05 11:07:25 CST by sky via cli
 #   2016-11-22 15:22:37 CST by sky via cli
 #   2016-11-22 15:20:16 CST by sky via cli
 #   2016-11-22 15:17:22 CST by sky via cli
 #   2016-11-22 15:16:37 CST by sky via cli
-#   2016-11-22 14:51:04 CST by sky via cli
-#   2016-11-22 14:36:45 CST by sky via cli commit confirmed, rollback in 5mins
 # grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -118,7 +118,7 @@
 # Time Source:  NTP CLOCK 
 # System booted: 2016-11-14 15:47 CST 
 # Protocols started: 2016-11-14 15:47 CST 
-# Last configured: 2016-11-22 15:22 CST  by sky
+# Last configured: 2016-12-05 11:59 CST  by sky
 # 
 # grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show interface terse 
 #Interface Admin Link
@@ -170,11 +170,12 @@
 #ppd0 up up
 #ppe0 up up
 #st0 up up
+#st0.0 up up
 #tap up up
 #vlan up down
 #vtep up up
 # grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show configuration 
-## Last commit: 2016-11-22 15:22:37 CST by sky
+## Last commit: 2016-12-05 11:59:51 CST by sky
 version 15.1X49-D50.3;
 system {
     host-name KIAMICHI-FMC-BATTIEST-LR-5230;
@@ -320,6 +321,50 @@
     }
 }
 security {
+    ike {
+        proposal PRE-G2-AES128-SHA {
+            authentication-method pre-shared-keys;
+            dh-group group2;
+            authentication-algorithm sha1;
+            encryption-algorithm aes-128-cbc;
+            lifetime-seconds 28800;
+        }
+        policy IKE-HUGO-KFMC {
+            mode aggressive;
+            proposals PRE-G2-AES128-SHA;
+#            pre-shared-#key <removed>;
+        }
+        gateway IKE-GATE-HUGO-KFMC {
+            ike-policy IKE-HUGO-KFMC;
+            dynamic user-at-hostname "hugo at kfmc.org";
+            external-interface ge-0/0/0.500;
+            local-address 164.58.22.151;
+        }
+    }
+    ipsec {
+        proposal G2-ESP-AES128-SHA {
+            description group2;
+            protocol esp;
+            authentication-algorithm hmac-sha1-96;
+            encryption-algorithm aes-128-cbc;
+            lifetime-seconds 3600;
+        }
+        policy VPN-POLICY-HUGO-KFMC {
+            proposals G2-ESP-AES128-SHA;
+        }
+        vpn IPSEC-VPN-HUGO-KFMC {
+            bind-interface st0.0;
+            ike {
+                gateway IKE-GATE-HUGO-KFMC;
+                ipsec-policy VPN-POLICY-HUGO-KFMC;
+            }
+            traffic-selector KFMC-VPN {
+                local-ip 192.168.0.0/24;
+                remote-ip 192.168.3.0/24;
+            }
+            establish-tunnels immediately;
+        }
+    }
     forwarding-options {
         family {
             inet6 {
@@ -574,6 +619,15 @@
             }
         }
     }
+    st0 {
+        unit 0 {
+            description VPN-TO-HUGO;
+            family inet {
+                mtu 1440;
+                address 164.58.58.64/31;
+            }
+        }
+    }
 }
 snmp {
     description OneNet;
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 148699)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -687,10 +687,10 @@
 #t1-2/3/0:6:20.17 up up
 #t1-2/3/0:6:21 up up
 #t1-2/3/0:6:21.0 up up
-#t1-2/3/0:6:22 up down
-#t1-2/3/0:6:22.16 up down
-#t1-2/3/0:6:22.17 up down
-#t1-2/3/0:6:22.18 up down
+#t1-2/3/0:6:22 up up
+#t1-2/3/0:6:22.16 up up
+#t1-2/3/0:6:22.17 up up
+#t1-2/3/0:6:22.18 up up
 #t1-2/3/0:6:23 down down
 #t1-2/3/0:6:24 up up
 #t1-2/3/0:6:24.0 up up
Index: configs/baptist-girls-home-srx220.client.onenet.net
===================================================================
--- configs/baptist-girls-home-srx220.client.onenet.net	(revision 148701)
+++ configs/baptist-girls-home-srx220.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at BAPTIST-GIRLS-HOME-LR-004663> show system commit 
+#   2016-12-05 11:18:24 CST by sean via cli
+#   2016-12-05 11:15:05 CST by sean via cli
+#   2016-12-05 11:13:13 CST by sean via cli commit confirmed, rollback in 3mins
 #   2016-12-05 10:28:56 CST by sean via cli
 #   2016-12-05 10:18:14 CST by sean via cli commit confirmed, rollback in 3mins
 #   2015-10-02 22:09:22 CDT by andrew via cli
-#   2015-08-14 08:52:01 CDT by andrew via cli
-#   2015-07-20 15:02:47 CDT by joel via cli
-#   2015-04-17 19:41:03 CDT by admin via cli
 # grnoc-mon at BAPTIST-GIRLS-HOME-LR-004663> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -98,7 +98,7 @@
 # grnoc-mon at BAPTIST-GIRLS-HOME-LR-004663> show system uptime 
 # System booted: 2016-04-07 06:59 CDT 
 # Protocols started: 2016-04-07 07:02 CDT 
-# Last configured: 2016-12-05 10:28 CST  by sean
+# Last configured: 2016-12-05 11:18 CST  by sean
 # 
 # grnoc-mon at BAPTIST-GIRLS-HOME-LR-004663> show interface terse 
 #Interface Admin Link
@@ -117,7 +117,8 @@
 #ge-0/0/2 down down
 #ge-0/0/3 down down
 #ge-0/0/4 down down
-#ge-0/0/5 down down
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
 #ge-0/0/6 up up
 #ge-0/0/6.0 up up
 #ge-0/0/7 up up
@@ -142,9 +143,10 @@
 #st0 up up
 #tap up up
 #vlan up up
+#vlan.3 up up
 #vlan.999 up down
 # grnoc-mon at BAPTIST-GIRLS-HOME-LR-004663> show configuration 
-## Last commit: 2016-12-05 10:28:56 CST by sean
+## Last commit: 2016-12-05 11:18:24 CST by sean
 version 12.1X46-D20.5;
 system {
     host-name BAPTIST-GIRLS-HOME-LR-004663;
@@ -303,13 +305,24 @@
         disable;
     }
     ge-0/0/5 {
-        disable;
+        description "UNTRUST WAN Interface - 156.110.43.97/29";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members UNTRUST-VLAN;
+                }
+            }
+        }
     }
     ge-0/0/6 {
         description "UNTRUST WAN Interface - 156.110.43.97/29";
         unit 0 {
-            family inet {
-                address 156.110.43.97/29;
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members UNTRUST-VLAN;
+                }
             }
         }
     }
@@ -331,6 +344,12 @@
         }
     }
     vlan {
+        unit 3 {
+            description UNTRUST-LAN;
+            family inet {
+                address 156.110.43.97/29;
+            }
+        }
         unit 999 {
             description "L3 INTERFACE - TEST-VLAN - 10.1.0.1/24";
             family inet {
@@ -483,6 +502,15 @@
                         }
                     }
                 }
+                vlan.3 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
             }
         }
     }
@@ -552,6 +580,11 @@
         vlan-id 999;
         l3-interface vlan.999;
     }
+    UNTRUST-VLAN {
+        description UNTRUST-VLAN;
+        vlan-id 3;
+        l3-interface vlan.3;
+    }
 }
 # grnoc-mon at BAPTIST-GIRLS-HOME-LR-004663> show ospf neighbor 
 # OSPF instance is not running
Index: configs/core.dun.onenet.net
===================================================================
--- configs/core.dun.onenet.net	(revision 148580)
+++ configs/core.dun.onenet.net	(working copy)
@@ -246,8 +246,8 @@
 # -rw-r--r--  1 root  field          4 Mar 15  2016 idp_license_info
 # drwxrwxrwx  2 root  wheel        512 Jul 10  2012 install/
 # -rw-r--r--  1 eng   field  761060262 Mar 14  2016 jinstall-13.3R8.7-domestic-signed.tgz
-# -rw-r--r--  1 root  wheel     307861 Jun 8  12:12 pfe_debug_info_NPC0.0
-# -rw-r--r--  1 root  wheel     308029 Jun 8  12:12 pfe_debug_info_NPC0.1
+# -rw-r--r--  1 root  wheel     307861 Jun 8   2016 pfe_debug_info_NPC0.0
+# -rw-r--r--  1 root  wheel     308029 Jun 8   2016 pfe_debug_info_NPC0.1
 # drwxrwxrwx  2 root  wheel        512 Jul 10  2012 pics/
 # -r--r--r--  1 root  field        667 Mar 15  2016 preinstall_boot_loader.conf
 # drwxr-xr-x  2 root  field        512 Mar 15  2016 rtsdb/
Index: configs/lavern-public-schools.client.onenet.net
===================================================================
--- configs/lavern-public-schools.client.onenet.net	(revision 148699)
+++ configs/lavern-public-schools.client.onenet.net	(working copy)
@@ -102,7 +102,7 @@
 # 
 # grnoc-mon at LAVERN-PUBLIC-SCHOOLS-TAG-004351> show interface terse 
 #Interface Admin Link
-#ge-0/0/0 down up
+#ge-0/0/0 down down
 #gr-0/0/0 up up
 #ip-0/0/0 up up
 #lsq-0/0/0 up up
Index: configs/calera-ps.client.onenet.net
===================================================================
--- configs/calera-ps.client.onenet.net	(revision 148699)
+++ configs/calera-ps.client.onenet.net	(working copy)
@@ -121,8 +121,8 @@
 #ge-0/0/5 down down
 #ge-0/0/6 up up
 #ge-0/0/6.0 up up
-#ge-0/0/7 up up
-#ge-0/0/7.0 up up
+#ge-0/0/7 up down
+#ge-0/0/7.0 up down
 #fxp2 up up
 #fxp2.0 up up
 #gre up up



More information about the Nocrancid mailing list