[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Thu Dec 29 12:03:56 CST 2016


Index: router.db
===================================================================
--- router.db	(revision 149361)
+++ router.db	(working copy)
@@ -402,7 +402,7 @@
 lawton-ps.client.onenet.net:juniper:up
 LAWTON-PUBLIC-LIBRARY.client.onenet.net:juniper:up
 leflore-ps.client.onenet.net:juniper:up
-legal-aid-tulsa.client.onenet.net:juniper:down
+legal-aid-tulsa.client.onenet.net:juniper:up
 lone-wolf-ps.client.onenet.net:juniper:up
 lowery-ps.client.onenet.net:juniper:up
 lukfata-ps.client.onenet.net:juniper:up
Index: routers.up
===================================================================
--- routers.up	(revision 148795)
+++ routers.up	(working copy)
@@ -334,6 +334,7 @@
 lawton-ps.client.onenet.net:juniper
 lawton-public-library.client.onenet.net:juniper
 leflore-ps.client.onenet.net:juniper
+legal-aid-tulsa.client.onenet.net:juniper
 lone-wolf-ps.client.onenet.net:juniper
 lowery-ps.client.onenet.net:juniper
 lukfata-ps.client.onenet.net:juniper
Index: configs/allen-public-library.client.onenet.net
===================================================================
--- configs/allen-public-library.client.onenet.net	(revision 149341)
+++ configs/allen-public-library.client.onenet.net	(working copy)
@@ -135,10 +135,10 @@
 #ge-0/0/1.0 up down
 #ge-0/0/2 up up
 #ge-0/0/2.0 up up
-#ge-0/0/3 up down
-#ge-0/0/3.0 up down
-#ge-0/0/4 up down
-#ge-0/0/4.0 up down
+#ge-0/0/3 up up
+#ge-0/0/3.0 up up
+#ge-0/0/4 up up
+#ge-0/0/4.0 up up
 #ge-0/0/5 up up
 #ge-0/0/5.0 up up
 #ge-0/0/6 up up
Index: configs/legal-aid-tulsa.client.onenet.net
===================================================================
--- configs/legal-aid-tulsa.client.onenet.net	(revision 149362)
+++ configs/legal-aid-tulsa.client.onenet.net	(working copy)
@@ -0,0 +1,780 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show system commit 
+#   2016-12-29 11:31:12 CST by admin via cli
+#   2016-12-20 17:26:02 CST by admin via cli
+#   2016-12-20 17:20:44 CST by admin via cli
+#   2016-12-20 17:12:29 CST by admin via cli
+#   2016-12-20 17:07:41 CST by admin via cli
+#   2016-12-20 16:18:43 CST by admin via cli
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             OK        
+# Fans  SRX240 PowerSupply fan 1       OK
+#       SRX240 PowerSupply fan 2       OK
+#       SRX240 CPU fan 1               OK
+#       SRX240 CPU fan 2               OK
+#       SRX240 IO  fan 1               OK
+#       SRX240 IO  fan 2               OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.3X48-D35.7 by builder on 2016-08
+# FWDD                     O/S        Version 12.3X48-D35.7 by builder on 2016-08
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                BU2815AK0683      SRX240H2
+# Routing Engine   REV 14   750-043609   ACML8781          RE-SRX240H2
+# FPC 0                                                    FPC
+#   PIC 0                                                  16x GE Base PIC
+# Power Supply 0  
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis hardware models 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACML8781
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis scb 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis sfm detail
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show chassis ssb 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2016, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 4 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 52XX CPU Rev. 0.8 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 512kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# dwc1: <Synopsis DWC OTG Controller Driver> on obio0
+# usb1: <USB Bus for DWC OTG Controller> on dwc1
+# usb1: USB revision 2.0
+# uhub2: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub2: 1 port with 1 removable, self powered
+# cpld0 on obio0
+# pcib1: <Cavium on-chip PCIe HOST bridge> on obio0
+# Disabling Octeon big bar support
+# PCIe: Waiting for port 0 to finish reset
+# PCIe: Port 0 link active, 2 lanes
+# PCIe: Waiting for port 1 to finish reset
+# PCIe: Port 1 link active, 1 lanes
+# pcib1: Initialized controller
+# pci0: <PCI bus> on pcib1
+# pcib2: <PCI-PCI bridge> irq 0 at device 0.0 on pci0
+# pci1: <PCI bus> on pcib2
+# pci1: <serial bus, USB> at device 2.0 (no driver attached)
+# pci1: <serial bus, USB> at device 2.1 (no driver attached)
+# pci1: <network> at device 7.0 (no driver attached)
+# pcib0: <Cavium on-chip PCIe HOST bridge> on obio0
+# pci2: <PCI bus> on pcib0
+# pci2: <processor> at device 0.0 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Kernel thread "wkupdaemon" (pid 48) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s2a
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show version 
+# Hostname: LEGAL-AID-TULSA-SRX240-LR-004955 # Model: srx240h2 # JUNOS Software Release [12.3X48-D35.7] #  # grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 Aug 4  23:47 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show system uptime 
+# System booted: 2016-12-29 11:23 CST 
+# Protocols started: 2016-12-29 11:27 CST 
+# Last configured: 2016-12-29 11:31 CST  by admin
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.500 up up
+#ge-0/0/0.501 up up
+#ge-0/0/0.32767 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 down down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 down down
+#ge-0/0/7 down down
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 up down
+#ge-0/0/15 up up
+#ge-0/0/15.1 up up
+#ge-0/0/15.10 up up
+#ge-0/0/15.11 up up
+#ge-0/0/15.12 up up
+#ge-0/0/15.13 up up
+#ge-0/0/15.14 up up
+#ge-0/0/15.32767 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show configuration 
+## Last commit: 2016-12-29 11:31:12 CST by admin
+version 12.3X48-D35.7;
+system {
+    host-name LEGAL-AID-TULSA-SRX240-LR-004955;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.200.200;
+        156.110.200.200;
+    }
+    radius-server {
+        156.110.31.11 {
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.0.81;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 164.58.0.81;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+        dhcp-local-server {
+            group CLIENT-DHCP {
+                interface ge-0/0/1.0;
+            }
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any notice;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file traffic {
+            any any;
+            match RT_FLOW_SESSION;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+security {
+    screen {
+        ids-option UNTRUST-SCREEN {
+            icmp {
+                ping-death;
+            }
+            ip {
+                source-route-option;
+                tear-drop;
+            }
+            tcp {
+                syn-flood {
+                    alarm-threshold 1024;
+                    attack-threshold 200;
+                    source-threshold 1024;
+                    destination-threshold 2048;
+                    timeout 20;
+                }
+                land;
+            }
+        }
+    }
+    nat {
+        source {
+            rule-set TRUST-TO-UNTRUST-NAT {
+                from zone TRUST;
+                to zone UNTRUST;
+                rule NAT-TRUST-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
+            rule-set TEST-TO-UNTRUST-NAT {
+                from zone TEST;
+                to zone UNTRUST;
+                rule NAT-TEST-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
+            rule-set MPLS-TO-UNTRUST-NAT {
+                from zone MPLS;
+                to zone UNTRUST;
+                rule NAT-MPLS-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
+        }
+    }
+    policies {
+        from-zone TRUST to-zone UNTRUST {
+            policy TRUST-TO-UNTRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone TEST to-zone UNTRUST {
+            policy ALLOW-ALL-OUT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone MPLS to-zone TRUST {
+            policy MPLS-TO-TRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone MPLS to-zone UNTRUST {
+            policy MPLS-TO-UNTRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone TRUST to-zone MPLS {
+            policy TRUST-TO-MPLS {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone TRUST to-zone TRUST {
+            policy TRUST-TO-TRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone TRUST {
+            interfaces {
+                ge-0/0/15.1 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+                ge-0/0/15.10 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+                ge-0/0/15.11 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+                ge-0/0/15.12 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+                ge-0/0/15.13 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+                ge-0/0/15.14 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone TEST {
+            interfaces {
+                ge-0/0/1.0 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone UNTRUST {
+            screen UNTRUST-SCREEN;
+            interfaces {
+                ge-0/0/0.500 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            snmp;
+                            ssh;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone MPLS {
+            interfaces {
+                ge-0/0/0.501 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            traceroute;
+                            ssh;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        description "Link to OneNet";
+        vlan-tagging;
+        unit 500 {
+            description "L3 INTERFACE - UNTRUST-WAN - 164.58.0.81/31";
+            vlan-id 500;
+            family inet {
+                address 164.58.0.81/31;
+            }
+        }
+        unit 501 {
+            description "L3 INTERFACE - MPLS - 10.199.6.14/30";
+            vlan-id 501;
+            family inet {
+                address 10.199.6.14/30;
+            }
+        }
+    }
+    ge-0/0/1 {
+        description "L3 INTERFACE - TEST - 10.1.0.1/24";
+        unit 0 {
+            family inet {
+                address 10.1.0.1/24;
+            }
+        }
+    }
+    ge-0/0/2 {
+        disable;
+    }
+    ge-0/0/3 {
+        disable;
+    }
+    ge-0/0/4 {
+        disable;
+    }
+    ge-0/0/5 {
+        disable;
+    }
+    ge-0/0/6 {
+        disable;
+    }
+    ge-0/0/7 {
+        disable;
+    }
+    ge-0/0/8 {
+        disable;
+    }
+    ge-0/0/9 {
+        disable;
+    }
+    ge-0/0/10 {
+        disable;
+    }
+    ge-0/0/11 {
+        disable;
+    }
+    ge-0/0/12 {
+        disable;
+    }
+    ge-0/0/13 {
+        disable;
+    }
+    ge-0/0/14 {
+        description "Link to Cox TLAN";
+    }
+    ge-0/0/15 {
+        description "Link to LAOK Lan";
+        vlan-tagging;
+        unit 1 {
+            description "L3 INTERFACE - Default - 192.168.2.1/24";
+            vlan-id 1;
+            family inet {
+                address 192.168.2.1/24;
+            }
+        }
+        unit 10 {
+            description "L3 INTERFACE - Server - 192.168.10.1/24";
+            vlan-id 10;
+            family inet {
+                address 192.168.10.1/24;
+            }
+        }
+        unit 11 {
+            description "L3 INTERFACE - Client - 192.168.11.1/24";
+            vlan-id 11;
+            family inet {
+                address 192.168.11.1/24;
+            }
+        }
+        unit 12 {
+            description "L3 INTERFACE - Phones - 192.168.12.1/24";
+            vlan-id 12;
+            family inet {
+                address 192.168.12.1/24;
+            }
+        }
+        unit 13 {
+            description "L3 INTERFACE - Mgmt - 192.168.13.1/24";
+            vlan-id 13;
+            family inet {
+                address 192.168.13.1/24;
+            }
+        }
+        unit 14 {
+            description "L3 INTERFACE - ESX Mgmt - 192.168.14.1/24";
+            vlan-id 14;
+            family inet {
+                address 192.168.14.1/24;
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+}
+snmp {
+    description OneNet;
+    contact "Net Group";
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 164.58.0.80;
+    }
+}
+protocols {
+    lldp {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+access {
+    address-assignment {
+        pool TEST-LAN {
+            family inet {
+                network 10.1.0.0/24;
+                range TEST-RANGE {
+                    low 10.1.0.100;
+                    high 10.1.0.199;
+                }
+                dhcp-attributes {
+                    domain-name test.local;
+                    name-server {
+                        164.58.200.200;
+                        156.110.200.200;
+                    }
+                    router {
+                        10.1.0.1;
+                    }
+                }
+            }
+        }
+    }
+}
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show ospf neighbor 
+# OSPF instance is not running
+# 
+# grnoc-mon at LEGAL-AID-TULSA-SRX240-LR-004955> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 149360)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -614,6 +614,7 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show bfd session 
+quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/hub.dun.onenet.net
===================================================================
--- configs/hub.dun.onenet.net	(revision 149361)
+++ configs/hub.dun.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at DUNCAN-M120-RE0> show system commit 
+#   2016-12-29 11:08:43 CST by andrew via cli commit synchronize
 #   2016-12-29 09:04:42 CST by andrew via cli commit synchronize
 #   2016-10-07 10:20:35 CDT by sean via cli commit synchronize
 #   2016-09-30 11:44:58 CDT by sky via cli commit synchronize
 #   2016-08-31 10:26:17 CDT by aberrios via cli commit synchronize
 #   2016-08-29 16:08:00 CDT by aberrios via cli commit synchronize
-#   2016-08-22 14:26:46 CDT by andrew via cli commit synchronize
 # grnoc-mon at DUNCAN-M120-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -263,7 +263,7 @@
 # grnoc-mon at DUNCAN-M120-RE0> show system uptime 
 # System booted: 2016-03-15 01:19 CDT 
 # Protocols started: 2016-03-15 01:24 CDT 
-# Last configured: 2016-12-29 09:04 CST  by andrew
+# Last configured: 2016-12-29 11:08 CST  by andrew
 # 
 # {master}
 # grnoc-mon at DUNCAN-M120-RE0> show interface terse 
@@ -411,7 +411,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at DUNCAN-M120-RE0> show configuration 
-## Last commit: 2016-12-29 09:04:42 CST by andrew
+## Last commit: 2016-12-29 11:08:43 CST by andrew
 version 13.3R8.7;
 groups {
     re0 {
@@ -1190,9 +1190,7 @@
 routing-options {
     nonstop-routing;
     static {
-        route 156.110.35.192/29 next-hop 156.110.54.42;
         route 164.58.63.144/29 next-hop 164.58.11.162;
-        route 164.58.109.96/28 next-hop 156.110.54.42;
         route 164.58.155.88/29 next-hop 164.58.11.162;
         route 192.0.2.1/32 {
             discard;
Index: configs/odmhsas-camhc-idabel.client.onenet.net
===================================================================
--- configs/odmhsas-camhc-idabel.client.onenet.net	(revision 149351)
+++ configs/odmhsas-camhc-idabel.client.onenet.net	(working copy)
@@ -148,7 +148,7 @@
 #ppe0 up up
 #st0 up up
 #st0.1 up up
-#st0.2 up up
+#st0.2 up down
 #tap up up
 #vlan up up
 #vlan.4 up up
Index: configs/core.dun.onenet.net
===================================================================
--- configs/core.dun.onenet.net	(revision 149361)
+++ configs/core.dun.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at DUNCAN-MX480-RE0> show system commit 
+#   2016-12-29 11:08:29 CST by andrew via cli commit synchronize
+#   2016-12-29 11:05:57 CST by andrew via cli commit synchronize
 #   2016-12-29 10:12:00 CST by andrew via cli commit synchronize
 #   2016-12-21 13:12:33 CST by andrew via cli commit synchronize
 #   2016-12-19 11:34:38 CST by andrew via cli commit synchronize
 #   2016-12-19 11:17:41 CST by andrew via cli commit synchronize
-#   2016-12-09 21:14:07 CST by andrew via cli commit synchronize
-#   2016-12-09 10:24:25 CST by sky via cli commit synchronize
 # grnoc-mon at DUNCAN-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -260,7 +260,7 @@
 # grnoc-mon at DUNCAN-MX480-RE0> show system uptime 
 # System booted: 2016-03-15 01:19 CDT 
 # Protocols started: 2016-03-15 01:24 CDT 
-# Last configured: 2016-12-29 10:12 CST  by andrew
+# Last configured: 2016-12-29 11:08 CST  by andrew
 # 
 # {master}
 # grnoc-mon at DUNCAN-MX480-RE0> show interface terse 
@@ -376,7 +376,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at DUNCAN-MX480-RE0> show configuration 
-## Last commit: 2016-12-29 10:12:00 CST by andrew
+## Last commit: 2016-12-29 11:08:29 CST by andrew
 version 13.3R8.7;
 groups {
     re0 {
@@ -793,7 +793,7 @@
         unit 995 {
             description "DUNCAN-REGIONAL-HOSPIAL-100M-CIR0019602 [ORDERED]";
             bandwidth 100m;
-            vlan-id 955;
+            vlan-id 995;
             family inet {
                 rpf-check;
                 mtu 1500;
@@ -1017,6 +1017,8 @@
             discard;
             no-readvertise;
         }
+        route 156.110.35.192/29 next-hop 156.110.24.138;
+        route 164.58.109.96/28 next-hop 156.110.24.138;
     }
     router-id 164.58.199.19;
     autonomous-system 5078;
Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net	(revision 149361)
+++ configs/core5.tul.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show system commit 
+#   2016-12-29 11:32:21 CST by andrew via cli commit synchronize
 #   2016-12-29 10:59:27 CST by andrew via cli commit synchronize
 #   2016-12-29 10:43:58 CST by andrew via cli commit synchronize
 #   2016-12-27 19:36:23 CST by andrew via cli commit synchronize
 #   2016-12-21 17:10:47 CST by sky via cli commit synchronize
 #   2016-12-21 16:15:21 CST by andrew via cli commit synchronize
-#   2016-12-21 08:56:03 CST by andrew via cli commit synchronize
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -392,7 +392,7 @@
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show system uptime 
 # System booted: 2016-08-15 04:47 CDT 
 # Protocols started: 2016-08-15 04:53 CDT 
-# Last configured: 2016-12-29 10:59 CST  by andrew
+# Last configured: 2016-12-29 11:32 CST  by andrew
 # 
 # {master}
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show interface terse 
@@ -815,7 +815,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show configuration 
-## Last commit: 2016-12-29 10:59:27 CST by andrew
+## Last commit: 2016-12-29 11:32:21 CST by andrew
 version 13.3R9.13;
 groups {
     re0 {
@@ -2614,7 +2614,7 @@
                 sampling {
                     input;
                 }
-                address 164.58.0.81/31;
+                address 164.58.0.80/31;
             }
         }
         unit 278 {
Index: configs/lavern-public-schools.client.onenet.net
===================================================================
--- configs/lavern-public-schools.client.onenet.net	(revision 149361)
+++ configs/lavern-public-schools.client.onenet.net	(working copy)
@@ -102,7 +102,7 @@
 # 
 # grnoc-mon at LAVERN-PUBLIC-SCHOOLS-TAG-004351> show interface terse 
 #Interface Admin Link
-#ge-0/0/0 down up
+#ge-0/0/0 down down
 #gr-0/0/0 up up
 #ip-0/0/0 up up
 #lsq-0/0/0 up up
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 149361)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -598,7 +598,6 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show bfd session 
-quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: routers.down
===================================================================
--- routers.down	(revision 149127)
+++ routers.down	(working copy)
@@ -72,7 +72,6 @@
 hub.sti.onenet.net:cisco:down
 hub.war7304.onenet.net:cisco:down
 idabel-head-start.client.onenet.net:juniper:down
-legal-aid-tulsa.client.onenet.net:juniper:down
 mercy-hospital-ada.client.onenet.net:juniper:down
 mwc-2912switch:cisco:down
 ne-area-votech-pryor.client.onenet.net:juniper:down



More information about the Nocrancid mailing list