[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Jan 27 14:02:30 CST 2016


Index: configs/core.goo.onenet.net
===================================================================
--- configs/core.goo.onenet.net	(revision 138958)
+++ configs/core.goo.onenet.net	(working copy)
@@ -318,6 +318,7 @@
 #lsi.1048644 up up
 #lsi.1048647 up up
 #lsi.1048648 up up
+#lsi.1048649 up up
 #me0 up up
 #mtun up up
 #pimd up up
Index: configs/core.woo.onenet.net
===================================================================
--- configs/core.woo.onenet.net	(revision 138958)
+++ configs/core.woo.onenet.net	(working copy)
@@ -360,6 +360,7 @@
 #lsi.1076582 up up
 #lsi.1076585 up up
 #lsi.1076586 up up
+#lsi.1076587 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.end.onenet.net
===================================================================
--- configs/core.end.onenet.net	(revision 139201)
+++ configs/core.end.onenet.net	(working copy)
@@ -409,6 +409,7 @@
 #lsi.1076997 up up
 #lsi.1076998 up up
 #lsi.1076999 up up
+#lsi.1077000 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.law.onenet.net
===================================================================
--- configs/core.law.onenet.net	(revision 139178)
+++ configs/core.law.onenet.net	(working copy)
@@ -587,6 +587,7 @@
 #lsi.1056774 up up
 #lsi.1056777 up up
 #lsi.1056778 up up
+#lsi.1056779 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.dur.onenet.net
===================================================================
--- configs/core.dur.onenet.net	(revision 139201)
+++ configs/core.dur.onenet.net	(working copy)
@@ -410,6 +410,7 @@
 #lsi.1078629 up up
 #lsi.1078630 up up
 #lsi.1078631 up up
+#lsi.1078632 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.say.onenet.net
===================================================================
--- configs/core.say.onenet.net	(revision 139201)
+++ configs/core.say.onenet.net	(working copy)
@@ -372,6 +372,7 @@
 #lsi.1077385 up up
 #lsi.1077386 up up
 #lsi.1077387 up up
+#lsi.1077388 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.ponc.onenet.net
===================================================================
--- configs/core.ponc.onenet.net	(revision 139239)
+++ configs/core.ponc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at PONCA-CITY-MX40> show system commit 
+#   2016-01-27 13:25:34 CST by joel via cli
+#   2016-01-27 13:20:39 CST by joel via cli
+#   2016-01-27 13:08:16 CST by joel via cli
+#   2016-01-27 13:06:25 CST by joel via cli
 #   2015-12-07 20:49:51 CST by andrew via cli
 #   2015-12-01 16:54:11 CST by joel via cli
-#   2015-10-24 00:53:02 CDT by andrew via cli commit confirmed, rollback in 3mins
-#   2015-10-23 23:56:03 CDT by andrew via cli
-#   2015-10-16 09:28:51 CDT by andrew via cli
-#   2015-10-09 21:58:24 CDT by andrew via cli
 # grnoc-mon at PONCA-CITY-MX40> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -231,7 +231,7 @@
 # grnoc-mon at PONCA-CITY-MX40> show system uptime 
 # System booted: 2013-11-01 00:53 CDT 
 # Protocols started: 2013-11-01 00:55 CDT 
-# Last configured: 2015-12-07 20:49 CST  by andrew
+# Last configured: 2016-01-27 13:25 CST  by joel
 # 
 # grnoc-mon at PONCA-CITY-MX40> show interface terse 
 #Interface Admin Link
@@ -244,7 +244,8 @@
 #xe-0/0/0 up up
 #xe-0/0/0.42 up up
 #xe-0/0/0.32767 up up
-#xe-0/0/1 up down
+#xe-0/0/1 up up
+#xe-0/0/1.0 up up
 #ge-1/0/0 up up
 #ge-1/0/0.0 up up
 #ge-1/0/1 up up
@@ -270,7 +271,8 @@
 #ge-1/1/2.400 up up
 #ge-1/1/2.401 up up
 #ge-1/1/2.32767 up up
-#ge-1/1/3 down down
+#ge-1/1/3 up up
+#ge-1/1/3.0 up up
 #ge-1/1/4 down down
 #ge-1/1/4.0 up down
 #ge-1/1/5 down down
@@ -300,6 +302,29 @@
 #lsi.0 up up
 #lsi.1 up up
 #lsi.2 up up
+#lsi.1048576 up up
+#lsi.1048577 up up
+#lsi.1048578 up up
+#lsi.1048579 up up
+#lsi.1048580 up up
+#lsi.1048581 up up
+#lsi.1048582 up up
+#lsi.1048583 up up
+#lsi.1048584 up up
+#lsi.1048585 up up
+#lsi.1048586 up up
+#lsi.1048587 up up
+#lsi.1048588 up up
+#lsi.1048589 up up
+#lsi.1048590 up up
+#lsi.1048591 up up
+#lsi.1048592 up up
+#lsi.1048593 up up
+#lsi.1048594 up up
+#lsi.1048595 up up
+#lsi.1048596 up up
+#lsi.1048597 up up
+#lsi.1048598 up up
 #me0 up up
 #me0.0 up up
 #mtun up up
@@ -309,7 +334,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at PONCA-CITY-MX40> show configuration 
-## Last commit: 2015-12-07 20:49:51 CST by andrew
+## Last commit: 2016-01-27 13:25:34 CST by joel
 version 12.3R2.5;
 system {
     host-name PONCA-CITY-MX40;
@@ -513,6 +538,17 @@
             family mpls;
         }
     }
+    xe-0/0/1 {
+        description "IPERF - RESERVED [NO-MONITOR]";
+        mtu 9192;
+        unit 0 {
+            family inet {
+                rpf-check;
+                mtu 9000;
+                address 164.58.63.85/30;
+            }
+        }
+    }
     ge-1/0/0 {
         description Ponca-City-PS-CIR0004412;
         gigether-options {
@@ -653,13 +689,17 @@
         }
     }
     ge-1/1/3 {
-        description "Hub Appliance - RESERVED [NO-MONITOR]";
-        disable;
+        description "IPERF MGMT - RESERVED [NO-MONITOR]";
         speed 100m;
+        mtu 9192;
         link-mode full-duplex;
+        encapsulation ethernet-vpls;
         gigether-options {
             no-auto-negotiation;
         }
+        unit 0 {
+            family vpls;
+        }
     }
     ge-1/1/4 {
         description "Hub Appliance - Camera #1 - PONC";
@@ -1559,7 +1599,6 @@
     ONENET-PoP-APPLIANCES-L3VPN {
         description ONENET-PoP-APPLIANCES-L3VPN;
         instance-type vrf;
-        interface ge-1/1/3.0; ## 'ge-1/1/3.0' is not defined
         interface ge-1/1/4.0;
         interface ge-1/1/5.0;
         interface ge-1/1/6.0; ## 'ge-1/1/6.0' is not defined
@@ -1623,6 +1662,26 @@
             }
         }
     }
+    VPLS-ONENET-IPERF {
+        description ONENET-IPERF-MGMT;
+        instance-type vpls;
+        vlan-id 2011;
+        interface ge-1/1/3.0;
+        route-distinguisher 164.58.199.186:2011;
+        vrf-target target:5078:2011;
+        protocols {
+            vpls {
+                mac-table-size {
+                    3000;
+                    packet-action drop;
+                }
+                no-tunnel-services;
+                site PONC-IPERF {
+                    site-identifier 9186;
+                }
+            }
+        }
+    }
 }
 # grnoc-mon at PONCA-CITY-MX40> show ospf neighbor 
 # Address          Interface              State     ID               Pri  Dead
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 139239)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -28,6 +28,7 @@
 # Slot 0 information:
 #   State                               Online    
 #   Total CPU DRAM                      ---- CPU less FPC ----
+# show chassis hardware
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis hardware 
 # Hardware inventory:
@@ -44,8 +45,10 @@
 #     Serial ID                      ACDT6307
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis scb 
+# show chassis sfm detail
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis sfm detail
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis ssb 
+# show system boot-messages
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system boot-messages 
 # kld_map_v: 0x8ff80000, kld_map_p: 0x0
 # Copyright (c) 1996-2014, Juniper Networks, Inc.
@@ -109,10 +112,11 @@
 # Trying to mount root from ufs:/dev/da0s1a
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show version 
-# Hostname: MAYSVILLE-ES-LEASED-ASSET-TAG-004945 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MAYSVILLE-ES-LEASED-ASSET-TAG-004945 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] # file list /var/tmp detail #  # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system uptime 
+# show interface terse
 # System booted: 2016-01-07 00:16 CST 
 # Protocols started: 2016-01-07 00:19 CST 
 # Last configured: 2015-10-26 13:12 CDT  by admin
@@ -168,6 +172,7 @@
 #vlan up up
 #vlan.999 up down
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show configuration 
+show ospf neighbor
 ## Last commit: 2015-10-26 13:12:04 CDT by admin
 version 12.1X44-D35.5;
 system {
@@ -613,6 +618,7 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show bfd session 
+quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/core.mus.onenet.net
===================================================================
--- configs/core.mus.onenet.net	(revision 139201)
+++ configs/core.mus.onenet.net	(working copy)
@@ -406,6 +406,7 @@
 #lsi.1050046 up up
 #lsi.1050047 up up
 #lsi.1050048 up up
+#lsi.1050049 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.ada.onenet.net
===================================================================
--- configs/core.ada.onenet.net	(revision 139201)
+++ configs/core.ada.onenet.net	(working copy)
@@ -424,6 +424,7 @@
 #lsi.1049055 up up
 #lsi.1049056 up up
 #lsi.1049057 up up
+#lsi.1049058 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.mca.onenet.net
===================================================================
--- configs/core.mca.onenet.net	(revision 139201)
+++ configs/core.mca.onenet.net	(working copy)
@@ -406,6 +406,7 @@
 #lsi.1074487 up up
 #lsi.1074488 up up
 #lsi.1074489 up up
+#lsi.1074490 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.alt.onenet.net
===================================================================
--- configs/core.alt.onenet.net	(revision 139201)
+++ configs/core.alt.onenet.net	(working copy)
@@ -419,6 +419,7 @@
 #lsi.1048696 up up
 #lsi.1048697 up up
 #lsi.1048698 up up
+#lsi.1048699 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.chi.onenet.net
===================================================================
--- configs/core.chi.onenet.net	(revision 138958)
+++ configs/core.chi.onenet.net	(working copy)
@@ -349,6 +349,7 @@
 #lsi.1077067 up up
 #lsi.1077070 up up
 #lsi.1077071 up up
+#lsi.1077072 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 139239)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -718,7 +718,7 @@
 #t1-2/3/0:7:16.0 up up
 #t1-2/3/0:7:17 up up
 #t1-2/3/0:7:17.0 up up
-#t1-2/3/0:7:18 up down
+#t1-2/3/0:7:18 up up
 #t1-2/3/0:7:18.0 up up
 #t1-2/3/0:7:19 up up
 #t1-2/3/0:7:19.0 up up
Index: configs/core1.nor.onenet.net
===================================================================
--- configs/core1.nor.onenet.net	(revision 139146)
+++ configs/core1.nor.onenet.net	(working copy)
@@ -605,6 +605,7 @@
 #lsi.1055171 up up
 #lsi.1055174 up up
 #lsi.1055175 up up
+#lsi.1055176 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/tul-adva.p.onenet.net
===================================================================
--- configs/tul-adva.p.onenet.net	(revision 139173)
+++ configs/tul-adva.p.onenet.net	(working copy)
@@ -424,10 +424,8 @@
       </part>
       <part name="MOD-6-6" description="DCG" hw_version="" part_id="DCG" part_num="" serial_number="FA70154001498" slot="MOD-6-6" vendor_id="ADVA"></part>
       <part name="MOD-6-7" description="8ROADM-C40" hw_version="" part_id="8ROADM-C40" part_num="" serial_number="FA72153603255" slot="MOD-6-7" vendor_id="ADVA">
-        <interface name="VCH-6-7-C23" abbr_name="VCH-6-7-C23" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="VCH-6-7-C24" abbr_name="VCH-6-7-C24" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="VCH-6-7-C25" abbr_name="VCH-6-7-C25" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
-        <interface name="VCH-6-7-N23" abbr_name="VCH-6-7-N23" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="VCH-6-7-N24" abbr_name="VCH-6-7-N24" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="VCH-6-7-N25" abbr_name="VCH-6-7-N25" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="OM-6-7-C1" abbr_name="OM-6-7-C1" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
@@ -449,7 +447,6 @@
       <part name="MOD-6-11" description="2WCC10G" hw_version="" part_id="2WCC10G" part_num="" serial_number="FA71154206390" slot="MOD-6-11" vendor_id="ADVA">
         <part name="PL-6-11-C1" description="XFP-G" hw_version="" part_id="XFP-G" part_num="" serial_number="FA94154302983" slot="PL-6-11-C1" vendor_id="ADVA"></part>
         <part name="PL-6-11-NE" description="XFPT-D" hw_version="" part_id="XFPT-D" part_num="" serial_number="FA27153832426" slot="PL-6-11-NE" vendor_id="ADVA"></part>
-        <interface name="CH-6-11-C1" abbr_name="CH-6-11-C1" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CH-6-11-NE" abbr_name="CH-6-11-NE" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
       </part>
       <part name="MOD-6-19" description="PSU9HU-DC" hw_version="" part_id="PSU9HU-DC" part_num="" serial_number="FA93153901149" slot="MOD-6-19" vendor_id="ADVA"></part>
Index: configs/rpswi2.rp1f3.onenet.net
===================================================================
--- configs/rpswi2.rp1f3.onenet.net	(revision 139239)
+++ configs/rpswi2.rp1f3.onenet.net	(working copy)
@@ -430,8 +430,8 @@
 #ge-0/0/12.0 up up
 #ge-0/0/13 up down
 #ge-0/0/13.0 up down
-#ge-0/0/14 up down
-#ge-0/0/14.0 up down
+#ge-0/0/14 up up
+#ge-0/0/14.0 up up
 #ge-0/0/15 up down
 #ge-0/0/15.0 up down
 #ge-0/0/16 up up
@@ -600,8 +600,8 @@
 #ge-2/0/0.0 up down
 #ge-2/0/1 up down
 #ge-2/0/1.0 up down
-#ge-2/0/2 up up
-#ge-2/0/2.0 up up
+#ge-2/0/2 up down
+#ge-2/0/2.0 up down
 #ge-2/0/3 up down
 #ge-2/0/3.0 up down
 #ge-2/0/4 up down
Index: configs/core.wil.onenet.net
===================================================================
--- configs/core.wil.onenet.net	(revision 139201)
+++ configs/core.wil.onenet.net	(working copy)
@@ -394,6 +394,7 @@
 #lsi.1068203 up up
 #lsi.1068204 up up
 #lsi.1068205 up up
+#lsi.1068206 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core1.lan.onenet.net
===================================================================
--- configs/core1.lan.onenet.net	(revision 139043)
+++ configs/core1.lan.onenet.net	(working copy)
@@ -334,6 +334,7 @@
 #lsi.1048666 up up
 #lsi.1048667 up up
 #lsi.1048668 up up
+#lsi.1048669 up up
 #me0 up up
 #mtun up up
 #pimd up up
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 139238)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system commit 
+# show chassis environment
 #   2015-10-16 09:22:41 CDT by andrew via cli
 #   2015-05-28 22:37:23 CDT by andrew via cli commit confirmed, rollback in 3mins
 #   2015-05-06 18:53:44 CDT by andrew via cli commit confirmed, rollback in 3mins
@@ -73,7 +74,6 @@
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis sfm detail 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis ssb 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system boot-messages 
-# show version
 # platform_early_bootinit: MX-PPC Series Early Boot Initialization
 # mxppc_set_re_type: hw.board.type is ACX-2100
 # WDOG initialized
Index: configs/core5.okc.onenet.net
===================================================================
--- configs/core5.okc.onenet.net	(revision 139215)
+++ configs/core5.okc.onenet.net	(working copy)
@@ -846,6 +846,7 @@
 #lsi.1524652 up up
 #lsi.1524653 up up
 #lsi.1524654 up up
+#lsi.1524655 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core1.dc.onenet.net
===================================================================
--- configs/core1.dc.onenet.net	(revision 139094)
+++ configs/core1.dc.onenet.net	(working copy)
@@ -967,6 +967,7 @@
 #lsi.1075510 up up
 #lsi.1075513 up up
 #lsi.1075514 up up
+#lsi.1075515 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/wainwright-isd.client.onenet.net
===================================================================
--- configs/wainwright-isd.client.onenet.net	(revision 139237)
+++ configs/wainwright-isd.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at WAINWRIGHT-ISD-SRX220-LEASED-4659-005783> show system commit 
+#   2016-01-27 13:10:56 CST by sean via cli commit confirmed, rollback in 2mins
 #   2016-01-27 11:31:12 CST by joel via cli
 #   2016-01-24 12:05:51 CST by sean via cli commit confirmed, rollback in 3mins
 #   2016-01-22 18:54:01 CST by sean via cli commit confirmed, rollback in 2mins
 #   2016-01-22 18:37:01 CST by sean via cli
 #   2016-01-22 17:45:04 CST by sean via cli commit confirmed, rollback in 2mins
-#   2015-10-06 20:19:56 CDT by andrew via cli
 # grnoc-mon at WAINWRIGHT-ISD-SRX220-LEASED-4659-005783> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -98,7 +98,7 @@
 # grnoc-mon at WAINWRIGHT-ISD-SRX220-LEASED-4659-005783> show system uptime 
 # System booted: 2016-01-26 23:32 CST 
 # Protocols started: 2016-01-26 23:34 CST 
-# Last configured: 2016-01-27 11:31 CST  by joel
+# Last configured: 2016-01-27 13:10 CST  by sean
 # 
 # grnoc-mon at WAINWRIGHT-ISD-SRX220-LEASED-4659-005783> show interface terse 
 #Interface Admin Link
@@ -118,7 +118,8 @@
 #ge-0/0/3 down down
 #ge-0/0/4 down down
 #ge-0/0/5 down down
-#ge-0/0/6 down down
+#ge-0/0/6 up down
+#ge-0/0/6.0 up down
 #ge-0/0/7 up up
 #ge-0/0/7.0 up up
 #fxp2 up up
@@ -143,9 +144,10 @@
 #vlan up up
 #vlan.3 up up
 #vlan.4 up up
+#vlan.5 up down
 #vlan.999 up down
 # grnoc-mon at WAINWRIGHT-ISD-SRX220-LEASED-4659-005783> show configuration 
-## Last commit: 2016-01-27 11:31:12 CST by joel
+## Last commit: 2016-01-27 13:10:56 CST by sean
 version 12.1X46-D20.5;
 system {
     host-name WAINWRIGHT-ISD-SRX220-LEASED-4659-005783;
@@ -238,8 +240,8 @@
                     10.1.0.1;
                 }
             }
-            pool 172.16.0.0/16 {
-                address-range low 172.16.1.1 high 172.16.255.254;
+            pool 172.16.1.1/16 {
+                address-range low 172.16.1.100 high 172.16.255.254;
                 domain-name onenet.net;
                 name-server {
                     164.58.253.10;
@@ -316,14 +318,21 @@
         disable;
     }
     ge-0/0/6 {
-        disable;
+        description "TRUST LAN Interface";
+        unit 0 {
+            family ethernet-switching {
+                vlan {
+                    members TRUST-VLAN;
+                }
+            }
+        }
     }
     ge-0/0/7 {
         description "TRUST LAN Interface";
         unit 0 {
             family ethernet-switching {
                 vlan {
-                    members TRUST-VLAN;
+                    members UNTRUST-LAN-VLAN;
                 }
             }
         }
@@ -345,14 +354,17 @@
             }
         }
         unit 4 {
-            description "L3 INTERFACE - TRUST-VLAN - 172.16.0.1/16";
+            description "L3 INTERFACE - UNTRUST-VLAN - 172.16.0.1/16";
             family inet {
                 address 156.110.222.77/30;
-                address 172.16.1.1/16 {
-                    preferred;
-                }
             }
         }
+        unit 5 {
+            description "L3 INTERFACE - TRUST-VLAN - 172.16.0.1/16";
+            family inet {
+                address 172.16.1.1/16;
+            }
+        }
         unit 999 {
             description "L3 INTERFACE - TEST-VLAN - 10.1.0.1/24";
             family inet {
@@ -419,6 +431,20 @@
     }
     nat {
         source {
+            rule-set TRUST-TO-UNTRUST-NAT {
+                from zone TRUST;
+                to zone UNTRUST;
+                rule NAT-TRUST-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
             rule-set TEST-TO-UNTRUST-NAT {
                 from zone TEST;
                 to zone UNTRUST;
@@ -482,6 +508,16 @@
                     traceroute;
                 }
             }
+            interfaces {
+                vlan.5 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            dns;
+                        }
+                    }
+                }
+            }
         }
         security-zone TEST {
             host-inbound-traffic {
@@ -525,10 +561,16 @@
                         }
                     }
                 }
-                vlan.4;
+                vlan.4 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            dns;
+                        }
+                    }
+                }
             }
         }
-        security-zone qqq;
     }
 }
 firewall {
@@ -588,6 +630,11 @@
     }
     TRUST-VLAN {
         description TRUST-VLAN;
+        vlan-id 5;
+        l3-interface vlan.5;
+    }
+    UNTRUST-LAN-VLAN {
+        description UNTRUST-VLAN;
         vlan-id 4;
         l3-interface vlan.4;
     }
Index: configs/core.ida.onenet.net
===================================================================
--- configs/core.ida.onenet.net	(revision 139236)
+++ configs/core.ida.onenet.net	(working copy)
@@ -375,6 +375,7 @@
 #lsi.1073268 up up
 #lsi.1073271 up up
 #lsi.1073272 up up
+#lsi.1073273 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 139239)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -110,7 +110,7 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show version 
-# file list /var/tmp detail # Hostname: MEEKER-PS-LEASED-ASSET-TAG-004947 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MEEKER-PS-LEASED-ASSET-TAG-004947 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show system uptime 
@@ -144,8 +144,8 @@
 #ge-0/0/11 down down
 #ge-0/0/12 down down
 #ge-0/0/13 down down
-#ge-0/0/14 up up
-#ge-0/0/14.0 up up
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
 #ge-0/0/15 up up
 #ge-0/0/15.0 up up
 #fxp2 up up
Index: configs/core.pot.onenet.net
===================================================================
--- configs/core.pot.onenet.net	(revision 139201)
+++ configs/core.pot.onenet.net	(working copy)
@@ -400,6 +400,7 @@
 #lsi.1076523 up up
 #lsi.1076524 up up
 #lsi.1076525 up up
+#lsi.1076526 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.ard.onenet.net
===================================================================
--- configs/core.ard.onenet.net	(revision 138958)
+++ configs/core.ard.onenet.net	(working copy)
@@ -362,6 +362,7 @@
 #lsi.1079013 up up
 #lsi.1079016 up up
 #lsi.1079017 up up
+#lsi.1079018 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/hub.tsb.onenet.net
===================================================================
--- configs/hub.tsb.onenet.net	(revision 139239)
+++ configs/hub.tsb.onenet.net	(working copy)
@@ -199,7 +199,7 @@
 # -rw-rw----  1 root  field   51994624 Oct 24  2013 ifinfo.core.1
 # -rw-rw----  1 root  field   51974144 Oct 24  2013 ifinfo.core.2
 # -rw-rw----  1 root  field   52744192 Oct 24  2013 ifinfo.core.3
-# -rw-rw----  1 root  field   52727808 Jan 27 12:57 ifinfo.core.4
+# -rw-rw----  1 root  field   52727808 Jan 27 13:57 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Oct 12  2012 install/
 # -rw-rw----  1 root  field   33464320 Mar 3   2014 jdiameterd.core.0
 # -rw-r--r--  1 eng   field   99542994 Apr 23  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz
Index: configs/core1.sti-mx960.onenet.net
===================================================================
--- configs/core1.sti-mx960.onenet.net	(revision 139180)
+++ configs/core1.sti-mx960.onenet.net	(working copy)
@@ -779,6 +779,7 @@
 #lsi.1084743 up up
 #lsi.1084746 up up
 #lsi.1084747 up up
+#lsi.1084748 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/rpswi1.okc.onenet.net
===================================================================
--- configs/rpswi1.okc.onenet.net	(revision 139235)
+++ configs/rpswi1.okc.onenet.net	(working copy)
@@ -261,8 +261,8 @@
 #ge-0/0/42.0 up down
 #ge-0/0/43 up up
 #ge-0/0/43.0 up up
-#ge-0/0/44 up down
-#ge-0/0/44.0 up down
+#ge-0/0/44 up up
+#ge-0/0/44.0 up up
 #ge-0/0/45 up up
 #ge-0/0/45.0 up up
 #ge-0/0/46 up down
Index: configs/core.wea.onenet.net
===================================================================
--- configs/core.wea.onenet.net	(revision 138958)
+++ configs/core.wea.onenet.net	(working copy)
@@ -353,6 +353,7 @@
 #lsi.1049032 up up
 #lsi.1049035 up up
 #lsi.1049036 up up
+#lsi.1049037 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/core.sem.onenet.net
===================================================================
--- configs/core.sem.onenet.net	(revision 139033)
+++ configs/core.sem.onenet.net	(working copy)
@@ -366,6 +366,7 @@
 #lsi.1073092 up up
 #lsi.1073095 up up
 #lsi.1073096 up up
+#lsi.1073097 up up
 #mtun up up
 #pimd up up
 #pime up up



More information about the Nocrancid mailing list