[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri Jul 15 15:03:15 CDT 2016


Index: router.db
===================================================================
--- router.db	(revision 144666)
+++ router.db	(working copy)
@@ -27,6 +27,7 @@
 bearden-ps.client.onenet.net:juniper:up
 bennington-ps-srx220.client.onenet.net:juniper:up
 BERRYHILL-PUBLIC-SCHOOLS.client.onenet.net:juniper:up
+BIllings-PS.client.onenet.net:juniper:up
 blackwell-pl.client.onenet.net:juniper:up
 blackwell-ps.client.onenet.net:juniper:up
 buffalo-valley-ps-ge112.nid.onenet.net:fsp150:up
Index: routers.up
===================================================================
--- routers.up	(revision 144619)
+++ routers.up	(working copy)
@@ -26,6 +26,7 @@
 bearden-ps.client.onenet.net:juniper
 bennington-ps-srx220.client.onenet.net:juniper
 berryhill-public-schools.client.onenet.net:juniper
+billings-ps.client.onenet.net:juniper
 blackwell-pl.client.onenet.net:juniper
 blackwell-ps.client.onenet.net:juniper
 buffalo-valley-ps-ge112.nid.onenet.net:fsp150
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 144665)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -614,7 +614,6 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show bfd session 
-quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/wilburton-ps.client.onenet.net
===================================================================
--- configs/wilburton-ps.client.onenet.net	(revision 144612)
+++ configs/wilburton-ps.client.onenet.net	(working copy)
@@ -121,8 +121,8 @@
 # total files: 1
 # 
 # grnoc-mon at WILBURTON-PS-LR-ASSET-004948> show system uptime 
-# System booted: 2016-07-14 05:20 CDT 
-# Protocols started: 2016-07-14 05:23 CDT 
+# System booted: 2016-07-15 14:43 CDT 
+# Protocols started: 2016-07-15 14:46 CDT 
 # Last configured: 2016-01-11 14:59 CST  by sky
 # 
 # grnoc-mon at WILBURTON-PS-LR-ASSET-004948> show interface terse 
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net	(revision 144665)
+++ configs/hub.dur.onenet.net	(working copy)
@@ -329,7 +329,7 @@
 #fe-2/1/1.0 up up
 #fe-2/1/2 up up
 #fe-2/1/2.0 up up
-#fe-2/1/3 down up
+#fe-2/1/3 down down
 #ge-2/2/0 down down
 #pc-2/2/0 up up
 #pc-2/2/0.16383 up up
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 144665)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -911,8 +911,8 @@
 #t1-2/3/0:11:23 down down
 #t1-2/3/0:11:24 up up
 #t1-2/3/0:11:24.0 up up
-#t1-2/3/0:11:25 up down
-#t1-2/3/0:11:25.0 up down
+#t1-2/3/0:11:25 up up
+#t1-2/3/0:11:25.0 up up
 #t1-2/3/0:11:26 up down
 #t1-2/3/0:11:26.0 up down
 #t1-2/3/0:11:27 up up
@@ -1556,8 +1556,8 @@
 #t1-4/0/2:19 down down
 #t1-4/0/2:20 up down
 #t1-4/0/2:20.0 up down
-#t1-4/0/2:21 up down
-#t1-4/0/2:21.0 up down
+#t1-4/0/2:21 up up
+#t1-4/0/2:21.0 up up
 #t1-4/0/2:22 down down
 #t1-4/0/2:23 up down
 #t1-4/0/2:23.0 up down
Index: configs/billings-ps.client.onenet.net
===================================================================
--- configs/billings-ps.client.onenet.net	(revision 144667)
+++ configs/billings-ps.client.onenet.net	(working copy)
@@ -0,0 +1,724 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at BILLINGS-PS-004885> show system commit 
+#   2016-07-15 14:56:02 CDT by admin via cli
+#   2016-07-15 12:12:52 CDT by admin via cli
+#   2016-07-15 12:06:20 CDT by admin via cli commit confirmed, rollback in 2mins
+#   2016-07-15 12:02:44 CDT by admin via cli
+#   2016-07-15 11:57:23 CDT by admin via cli
+#   2016-07-15 11:39:16 CDT by admin via cli
+# grnoc-mon at BILLINGS-PS-004885> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             OK        
+# Fans  SRX240 PowerSupply fan 1       OK
+#       SRX240 PowerSupply fan 2       OK
+#       SRX240 CPU fan 1               OK
+#       SRX240 CPU fan 2               OK
+#       SRX240 IO  fan 1               OK
+#       SRX240 IO  fan 2               OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at BILLINGS-PS-004885> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X44-D35.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X44-D35.5 by builder on 2014-05
+# 
+# grnoc-mon at BILLINGS-PS-004885> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at BILLINGS-PS-004885> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                BU1214AK0496      SRX240H2
+# Routing Engine   REV 10   750-043609   ACLC8023          RE-SRX240H2
+# FPC 0                                                    FPC
+#   PIC 0                                                  16x GE Base PIC
+# Power Supply 0  
+# 
+# grnoc-mon at BILLINGS-PS-004885> show chassis hardware models 
+# grnoc-mon at BILLINGS-PS-004885> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACLC8023
+# 
+# grnoc-mon at BILLINGS-PS-004885> show chassis scb 
+# grnoc-mon at BILLINGS-PS-004885> show chassis sfm detail
+# grnoc-mon at BILLINGS-PS-004885> show chassis ssb 
+# grnoc-mon at BILLINGS-PS-004885> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 4 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 52XX CPU Rev. 0.8 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 512kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# dwc1: <Synopsis DWC OTG Controller Driver> on obio0
+# usb1: <USB Bus for DWC OTG Controller> on dwc1
+# usb1: USB revision 2.0
+# uhub2: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub2: 1 port with 1 removable, self powered
+# cpld0 on obio0
+# pcib1: <Cavium on-chip PCIe HOST bridge> on obio0
+# Disabling Octeon big bar support
+# PCIe: Waiting for port 0 to finish reset
+# PCIe: Port 0 link active, 2 lanes
+# PCIe: Waiting for port 1 to finish reset
+# PCIe: Port 1 link active, 1 lanes
+# pcib1: Initialized controller
+# pci0: <PCI bus> on pcib1
+# pcib2: <PCI-PCI bridge> irq 0 at device 0.0 on pci0
+# pci1: <PCI bus> on pcib2
+# pci1: <serial bus, USB> at device 2.0 (no driver attached)
+# pci1: <serial bus, USB> at device 2.1 (no driver attached)
+# pci1: <network> at device 7.0 (no driver attached)
+# pcib0: <Cavium on-chip PCIe HOST bridge> on obio0
+# pci2: <PCI bus> on pcib0
+# pci2: <processor> at device 0.0 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s1a
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at BILLINGS-PS-004885> show version 
+# Hostname: BILLINGS-PS-004885 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at BILLINGS-PS-004885> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at BILLINGS-PS-004885> show system uptime 
+# System booted: 2016-07-15 10:59 CDT 
+# Protocols started: 2016-07-15 11:02 CDT 
+# Last configured: 2016-07-15 14:56 CDT  by admin
+# 
+# grnoc-mon at BILLINGS-PS-004885> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 down down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 down down
+#ge-0/0/7 down down
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
+#ge-0/0/15 up up
+#ge-0/0/15.0 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.3 up up
+#vlan.999 up down
+# grnoc-mon at BILLINGS-PS-004885> show configuration 
+## Last commit: 2016-07-15 14:56:02 CDT by admin
+version 12.1X44-D35.5;
+system {
+    host-name BILLINGS-PS-004885;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.198.10;
+    }
+    radius-server {
+        156.110.31.11 {
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 156.110.34.50;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 156.110.34.50;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+        dhcp {
+            pool 10.1.0.0/24 {
+                address-range low 10.1.0.2 high 10.1.0.254;
+                domain-name test.local;
+                name-server {
+                    164.58.253.10;
+                    164.58.198.10;
+                }
+                router {
+                    10.1.0.1;
+                }
+            }
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any notice;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file traffic {
+            any any;
+            match RT_FLOW_SESSION;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        description "L3 INTERFACE - UNTRUST-WAN - 156.110.34.50/30";
+        speed 100m;
+        link-mode full-duplex;
+        gigether-options {
+            no-auto-negotiation;
+        }
+        unit 0 {
+            family inet {
+                address 156.110.34.50/30;
+            }
+        }
+    }
+    ge-0/0/1 {
+        description "L2 INTERFACE - TEST-VLAN";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members TEST-VLAN;
+                }
+            }
+        }
+    }
+    ge-0/0/2 {
+        disable;
+    }
+    ge-0/0/3 {
+        disable;
+    }
+    ge-0/0/4 {
+        disable;
+    }
+    ge-0/0/5 {
+        disable;
+    }
+    ge-0/0/6 {
+        disable;
+    }
+    ge-0/0/7 {
+        disable;
+    }
+    ge-0/0/8 {
+        disable;
+    }
+    ge-0/0/9 {
+        disable;
+    }
+    ge-0/0/10 {
+        disable;
+    }
+    ge-0/0/11 {
+        disable;
+    }
+    ge-0/0/12 {
+        disable;
+    }
+    ge-0/0/13 {
+        disable;
+    }
+    ge-0/0/14 {
+        description "L2 INTERFACE - TRUST-VLAN";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members TRUST-VLAN;
+                }
+            }
+        }
+    }
+    ge-0/0/15 {
+        description "L2 INTERFACE - TRUST-VLAN";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members TRUST-VLAN;
+                }
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 3 {
+            description "L3 INTERFACE - TRUST-VLAN - 10.10.5.2/24 - 10.10.2.2/16";
+            family inet {
+                address 10.10.5.2/24;
+                address 10.10.2.2/24;
+            }
+        }
+        unit 999 {
+            description "L3 INTERFACE - TEST-VLAN - 10.1.0.1/24";
+            family inet {
+                address 10.1.0.1/24;
+            }
+        }
+    }
+}
+snmp {
+    description OneNet;
+    contact "Net Group";
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 156.110.34.49;
+    }
+}
+protocols {
+    lldp {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+}
+security {
+    address-book {
+        global {
+            address host-10.10.5.5 10.10.5.5/32;
+            address host-10.10.5.4 10.10.5.3/32;
+            address host-10.10.5.3 10.10.5.4/32;
+            address host-10.10.5.11 10.10.5.11/32;
+        }
+    }
+    screen {
+        ids-option UNTRUST-SCREEN {
+            icmp {
+                ping-death;
+            }
+            ip {
+                source-route-option;
+                tear-drop;
+            }
+            tcp {
+                syn-flood {
+                    alarm-threshold 1024;
+                    attack-threshold 200;
+                    source-threshold 1024;
+                    destination-threshold 2048;
+                    timeout 20;
+                }
+                land;
+            }
+        }
+    }
+    nat {
+        source {
+            rule-set TRUST-TO-UNTRUST-NAT {
+                from zone TRUST;
+                to zone UNTRUST;
+                rule NAT-TRUST-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
+            rule-set TEST-TO-UNTRUST-NAT {
+                from zone TEST;
+                to zone UNTRUST;
+                rule NAT-TEST-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
+        }
+        static {
+            rule-set UNTRUST-NAT {
+                from interface ge-0/0/0.0;
+                rule R-164-58-23-33 {
+                    match {
+                        destination-address 164.58.23.33/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                10.10.5.5/32;
+                            }
+                        }
+                    }
+                }
+                rule R-164-58-23-34 {
+                    match {
+                        destination-address 164.58.23.34/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                10.10.5.3/32;
+                            }
+                        }
+                    }
+                }
+                rule R-164-58-23-35 {
+                    match {
+                        destination-address 164.58.23.35/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                10.10.5.4/32;
+                            }
+                        }
+                    }
+                }
+                rule R-164-58-23-36 {
+                    match {
+                        destination-address 164.58.23.36/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                10.10.5.11/32;
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }
+    policies {
+        from-zone TRUST to-zone UNTRUST {
+            policy TRUST-TO-UNTRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone TEST to-zone UNTRUST {
+            policy ALLOW-ALL-OUT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone UNTRUST to-zone TRUST {
+            policy server-access {
+                match {
+                    source-address any;
+                    destination-address [ host-10.10.5.5 host-10.10.5.4 host-10.10.5.3 host-10.10.5.11 ];
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone TRUST {
+            interfaces {
+                vlan.3 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone TEST {
+            interfaces {
+                vlan.999 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone UNTRUST {
+            screen UNTRUST-SCREEN;
+            interfaces {
+                ge-0/0/0.0 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            snmp;
+                            ssh;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+ethernet-switching-options {
+    secure-access-port {
+        interface ge-0/0/1.0 {
+            mac-limit 3 action shutdown;
+        }
+    }
+    bpdu-block {
+        interface ge-0/0/1.0;
+    }
+}
+vlans {
+    TEST-VLAN {
+        description "Test VLAN 999 for TESTING ONLY";
+        vlan-id 999;
+        l3-interface vlan.999;
+    }
+    TRUST-VLAN {
+        description TRUST-VLAN;
+        vlan-id 3;
+        l3-interface vlan.3;
+    }
+}
+# grnoc-mon at BILLINGS-PS-004885> show ospf neighbor 
+# OSPF instance is not running
+# 
+# grnoc-mon at BILLINGS-PS-004885> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/core5.okc.onenet.net
===================================================================
--- configs/core5.okc.onenet.net	(revision 144657)
+++ configs/core5.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system commit 
+#   2016-07-15 14:46:10 CDT by sean via cli commit synchronize
 #   2016-07-15 09:01:30 CDT by sean via cli commit synchronize
 #   2016-07-14 09:20:04 CDT by aberrios via cli commit synchronize
 #   2016-07-14 09:18:38 CDT by aberrios via cli commit synchronize
 #   2016-07-12 10:14:57 CDT by sky via cli commit synchronize
 #   2016-07-11 11:28:53 CDT by andrew via cli commit synchronize
-#   2016-07-08 16:06:57 CDT by sean via cli commit synchronize
 # grnoc-mon at OKC-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -480,7 +480,7 @@
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system uptime 
 # System booted: 2014-09-16 23:50 CDT 
 # Protocols started: 2014-09-16 23:51 CDT 
-# Last configured: 2016-07-15 09:01 CDT  by sean
+# Last configured: 2016-07-15 14:46 CDT  by sean
 # 
 # {master}
 # grnoc-mon at OKC-CORE5-MX480-RE0> show interface terse 
@@ -924,7 +924,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE5-MX480-RE0> show configuration 
-## Last commit: 2016-07-15 09:01:30 CDT by sean
+## Last commit: 2016-07-15 14:46:10 CDT by sean
 version 12.3R7.7;
 groups {
     re0 {
@@ -3311,7 +3311,7 @@
             }
         }
         unit 527 {
-            description "BILLINGS-PS-100M-CIR0019338 [ORDERED]";
+            description "BILLINGS-PS-100M-CIR0019338 ";
             vlan-id 527;
             family inet {
                 rpf-check;
Index: configs/central-tech-sapulpa.client.onenet.net
===================================================================
--- configs/central-tech-sapulpa.client.onenet.net	(revision 142676)
+++ configs/central-tech-sapulpa.client.onenet.net	(working copy)
@@ -96,8 +96,8 @@
 # total files: 1
 # 
 # grnoc-mon at CENTRAL-TECH-SAPULPA-LR-004622> show system uptime 
-# System booted: 2016-05-13 16:49 CDT 
-# Protocols started: 2016-05-13 16:51 CDT 
+# System booted: 2016-07-15 14:12 CDT 
+# Protocols started: 2016-07-15 14:14 CDT 
 # Last configured: 2016-04-20 13:28 CDT  by sean
 # 
 # grnoc-mon at CENTRAL-TECH-SAPULPA-LR-004622> show interface terse 
Index: configs/core4.okc.onenet.net
===================================================================
--- configs/core4.okc.onenet.net	(revision 144665)
+++ configs/core4.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE4-MX480-RE0> show system commit 
+#   2016-07-15 14:27:27 CDT by sky via cli commit synchronize
 #   2016-07-15 13:47:27 CDT by sky via cli commit synchronize
 #   2016-07-15 13:46:28 CDT by sky via cli commit synchronize
 #   2016-07-15 13:41:09 CDT by sky via cli commit synchronize
 #   2016-07-15 13:22:49 CDT by sky via cli commit synchronize
 #   2016-07-12 20:07:15 CDT by sky via cli commit synchronize
-#   2016-07-12 19:58:48 CDT by sky via cli commit synchronize
 # grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -430,7 +430,7 @@
 # grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime 
 # System booted: 2014-09-16 23:49 CDT 
 # Protocols started: 2014-09-16 23:51 CDT 
-# Last configured: 2016-07-15 13:47 CDT  by sky
+# Last configured: 2016-07-15 14:27 CDT  by sky
 # 
 # {master}
 # grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse 
@@ -1025,7 +1025,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE4-MX480-RE0> show configuration 
-## Last commit: 2016-07-15 13:47:27 CDT by sky
+## Last commit: 2016-07-15 14:27:27 CDT by sky
 version 12.3R7.7;
 groups {
     re0 {
@@ -2796,7 +2796,7 @@
             }
         }
         unit 1131 {
-            description "CLEVELAND-COUNTY-DA-COLOCATION-100M-CIR0019268 [NO-MONITOR]";
+            description "CLEVELAND-COUNTY-DA-L3VPN-100M-CIR0019268 [NO-MONITOR]";
             bandwidth 100m;
             vlan-tags outer 131 inner 501;
             family inet {
Index: configs/wainwright-isd.client.onenet.net
===================================================================
--- configs/wainwright-isd.client.onenet.net	(revision 144626)
+++ configs/wainwright-isd.client.onenet.net	(working copy)
@@ -96,8 +96,8 @@
 # total files: 1
 # 
 # grnoc-mon at WAINWRIGHT-ISD-SRX220-LEASED-4659-005783> show system uptime 
-# System booted: 2016-07-14 12:49 CDT 
-# Protocols started: 2016-07-14 12:51 CDT 
+# System booted: 2016-07-15 14:02 CDT 
+# Protocols started: 2016-07-15 14:04 CDT 
 # Last configured: 2016-05-09 16:39 CDT  by andrew
 # 
 # grnoc-mon at WAINWRIGHT-ISD-SRX220-LEASED-4659-005783> show interface terse 
Index: configs/rpswi1.okc.onenet.net
===================================================================
--- configs/rpswi1.okc.onenet.net	(revision 144657)
+++ configs/rpswi1.okc.onenet.net	(working copy)
@@ -265,8 +265,8 @@
 #ge-0/0/44.0 up down
 #ge-0/0/45 up down
 #ge-0/0/45.0 up down
-#ge-0/0/46 up down
-#ge-0/0/46.0 up down
+#ge-0/0/46 up up
+#ge-0/0/46.0 up up
 #ge-0/0/47 up down
 #ge-0/0/47.0 up down
 #xe-0/1/0 up up
Index: routers.all
===================================================================
--- routers.all	(revision 144619)
+++ routers.all	(working copy)
@@ -1,6 +1,7 @@
 ACCELE-BIO.client.onenet.net:juniper
 ALLEN-PUBLIC-LIBRARY.client.onenet.net:juniper
 BERRYHILL-PUBLIC-SCHOOLS.client.onenet.net:juniper
+BIllings-PS.client.onenet.net:juniper
 CHOCTAW-HEAD-START-BATTIEST.client.onenet.net:juniper
 CHOCTAW-NATION-HEAD-START-WILBURTON.client.onenet.net:juniper
 CITY-OF-LAWTON.client.onenet.net:juniper



More information about the Nocrancid mailing list