[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Wed Jul 27 20:03:50 CDT 2016
Index: router.db
===================================================================
--- router.db (revision 145073)
+++ router.db (working copy)
@@ -261,6 +261,7 @@
gatekeeper-backup-3725:cisco:down
ge-global-research-okc.nid.onenet.net:fsp150:up
geronimo-ps.client.onenet.net:juniper:down
+GLOVER-PUBLIC-SCHOOLS.client.onenet.net:juniper:down
GRACE-PICKENS-LIBRARY.client.onenet.net:juniper:up
GRANITE-PUBLIC-SCHOOLS.client.onenet.net:juniper:up
great-plains-votech.nid.onenet.net:fsp150:up
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net (revision 145073)
+++ configs/core3.okc-m120.onenet.net (working copy)
@@ -715,10 +715,10 @@
#t1-2/3/0:7:7 up up
#t1-2/3/0:7:7.0 up up
#t1-2/3/0:7:8 down down
-#t1-2/3/0:7:9 up down
-#t1-2/3/0:7:9.16 up down
-#t1-2/3/0:7:9.17 up down
-#t1-2/3/0:7:9.18 up down
+#t1-2/3/0:7:9 up up
+#t1-2/3/0:7:9.16 up up
+#t1-2/3/0:7:9.17 up up
+#t1-2/3/0:7:9.18 up up
#t1-2/3/0:7:10 up up
#t1-2/3/0:7:10.0 up up
#t1-2/3/0:7:11 down down
Index: configs/core6.okc.onenet.net
===================================================================
--- configs/core6.okc.onenet.net (revision 145057)
+++ configs/core6.okc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at ROUTE-REFLECTOR-OKC-RE0> show system commit
+# 2016-07-27 19:36:44 CDT by andrew via cli commit synchronize
# 2016-07-27 15:38:29 CDT by sky via cli commit synchronize
# 2016-07-26 20:35:31 CDT by andrew via cli commit synchronize
# 2016-07-26 13:21:05 CDT by sky via cli commit synchronize
# 2016-07-20 19:38:19 CDT by andrew via cli commit synchronize
# 2016-07-20 11:35:05 CDT by sky via cli commit synchronize
-# 2016-07-20 10:11:12 CDT by andrew via cli commit synchronize
# grnoc-mon at ROUTE-REFLECTOR-OKC-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -381,7 +381,7 @@
# Time Source: NTP CLOCK
# System booted: 2016-07-04 15:26 CDT
# Protocols started: 2016-07-04 15:28 CDT
-# Last configured: 2016-07-27 15:38 CDT by sky
+# Last configured: 2016-07-27 19:36 CDT by andrew
#
# {master}
# grnoc-mon at ROUTE-REFLECTOR-OKC-RE0> show interface terse
@@ -461,7 +461,7 @@
#tap up up
#vtep up up
# grnoc-mon at ROUTE-REFLECTOR-OKC-RE0> show configuration
-## Last commit: 2016-07-27 15:38:29 CDT by sky
+## Last commit: 2016-07-27 19:36:44 CDT by andrew
version 15.1F5.15;
groups {
re0 {
@@ -1501,9 +1501,6 @@
export IBGP-DOH-EXPORT;
cluster 164.58.199.216;
peer-as 5078;
- neighbor 10.199.2.22 {
- description "DOH-SHAWNEE [DECOM]";
- }
neighbor 10.199.2.27 {
description DOH-OCCHD-23;
}
@@ -1516,60 +1513,24 @@
neighbor 10.199.2.48 {
description DOH-CHANDLER;
}
- neighbor 10.199.2.57 {
- description "DOH-WILBURTON [DECOM]";
- }
- neighbor 10.199.2.68 {
- description "DOH-WALTERS [DECOM]";
- }
neighbor 10.199.2.70 {
description DOH-ALTUS;
}
- neighbor 10.199.2.75 {
- description "DOH-WEATHERFORD [DECOM]";
- }
neighbor 10.199.2.84 {
description DOH-SALLISAW;
}
- neighbor 10.199.2.85 {
- description "DOH-STILWELL [DECOM]";
- }
neighbor 10.199.2.86 {
description DOH-TAHLEQUAH;
}
- neighbor 10.199.2.87 {
- description "DOH-STIGLER [DECOM]";
- }
- neighbor 10.199.2.88 {
- description "DOH-CLAYTON [DECOM]";
- }
neighbor 10.199.2.92 {
description DOH-MUSKOGEE;
}
- neighbor 10.199.2.103 {
- description "DOH-PAWNEE [DECOM]";
- }
neighbor 10.199.2.106 {
description DOH-BARTLESVILLE;
}
neighbor 10.199.2.110 {
description DOH-PRYOR;
}
- neighbor 10.199.2.113 {
- description "DOH-WATONGA [DECOM]";
- }
- neighbor 10.199.2.114 {
- description "DOH-WOODWARD [DECOM]";
- }
- neighbor 10.199.2.123 {
- description "DOH-BLACKWELL [DECOM]";
- }
- neighbor 10.199.2.124 {
- description "DOH-KINGFISHER [DECOM]";
- }
- neighbor 10.199.2.130 {
- description "DOH-CORDELL [DECOM]";
- }
neighbor 10.199.2.132 {
description DOH-TULSA-NORTH-REGIONAL;
}
Index: configs/odot-sand-springs-residence.client.onenet.net
===================================================================
--- configs/odot-sand-springs-residence.client.onenet.net (revision 145073)
+++ configs/odot-sand-springs-residence.client.onenet.net (working copy)
@@ -99,15 +99,15 @@
# ###PCB Group initialized for tcppcbgroup
# ad0: Device does not support APM
# ad0: 1006MB <CF 1GB 20080112> at ata2-master WDMA2
-# Trying to mount root from ufs:/dev/ad0s1a
+# Trying to mount root from ufs:/dev/ad0s2a
#
# grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show version
# Hostname: ODOT-SAND-SPRINGS-RESIDENCY-SRX220 # Model: srx220h-poe # JUNOS Software Release [12.1X46-D20.5] # # grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> file list /var/tmp detail # lrw-r--r-- 1 root wheel 11 May 14 2014 /var/tmp@ -> /cf/var/tmp
# total files: 1
#
# grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show system uptime
-# System booted: 2016-07-27 17:58 CDT
-# Protocols started: 2016-07-27 18:01 CDT
+# System booted: 2016-07-27 19:24 CDT
+# Protocols started: 2016-07-27 19:26 CDT
# Last configured: 2016-07-27 18:48 CDT by andrew
#
# grnoc-mon at ODOT-SAND-SPRINGS-RESIDENCY-SRX220> show interface terse
Index: configs/core6.tul-m7i.onenet.net
===================================================================
--- configs/core6.tul-m7i.onenet.net (revision 145057)
+++ configs/core6.tul-m7i.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show system commit
+# 2016-07-27 19:36:55 CDT by andrew via cli
# 2016-07-27 15:38:51 CDT by sky via cli
# 2016-07-26 20:35:51 CDT by andrew via cli
# 2016-07-26 13:24:05 CDT by sky via cli
# 2016-07-20 19:38:51 CDT by andrew via cli
# 2016-07-20 11:36:59 CDT by sky via cli
-# 2016-07-20 10:10:37 CDT by andrew via cli
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show chassis environment
# Class Item Status Measurement
# Power Power Supply 0 OK
@@ -201,7 +201,7 @@
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show system uptime
# System booted: 2015-06-09 14:58 CDT
# Protocols started: 2015-06-09 15:00 CDT
-# Last configured: 2016-07-27 15:38 CDT by sky
+# Last configured: 2016-07-27 19:36 CDT by andrew
#
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show interface terse
#Interface Admin Link
@@ -245,7 +245,7 @@
#pime up up
#tap up up
# grnoc-mon at ROUTE-REFLECTOR-TULSA-M7i> show configuration
-## Last commit: 2016-07-27 15:38:51 CDT by sky
+## Last commit: 2016-07-27 19:36:55 CDT by andrew
version 14.2R3.8;
groups {
re0 {
@@ -1253,9 +1253,6 @@
export IBGP-DOH-EXPORT;
cluster 164.58.199.226;
peer-as 5078;
- neighbor 10.199.2.22 {
- description "DOH-SHAWNEE [DECOM]";
- }
neighbor 10.199.2.27 {
description DOH-OCCHD-23;
}
@@ -1268,60 +1265,24 @@
neighbor 10.199.2.48 {
description DOH-CHANDLER;
}
- neighbor 10.199.2.57 {
- description "DOH-WILBURTON [DECOM]";
- }
- neighbor 10.199.2.68 {
- description "DOH-WALTERS [DECOM]";
- }
neighbor 10.199.2.70 {
description DOH-ALTUS;
}
- neighbor 10.199.2.75 {
- description "DOH-WEATHERFORD [DECOM]";
- }
neighbor 10.199.2.84 {
description DOH-SALLISAW;
}
- neighbor 10.199.2.85 {
- description "DOH-STILWELL [DECOM]";
- }
neighbor 10.199.2.86 {
description DOH-TAHLEQUAH;
}
- neighbor 10.199.2.87 {
- description "DOH-STIGLER [DECOM]";
- }
- neighbor 10.199.2.88 {
- description "DOH-CLAYTON [DECOM]";
- }
neighbor 10.199.2.92 {
description DOH-MUSKOGEE;
}
- neighbor 10.199.2.103 {
- description "DOH-PAWNEE [DECOM]";
- }
neighbor 10.199.2.106 {
description DOH-BARTLESVILLE;
}
neighbor 10.199.2.110 {
description DOH-PRYOR;
}
- neighbor 10.199.2.113 {
- description "DOH-WATONGA [DECOM]";
- }
- neighbor 10.199.2.114 {
- description "DOH-WOODWARD [DECOM]";
- }
- neighbor 10.199.2.123 {
- description "DOH-BLACKWELL [DECOM]";
- }
- neighbor 10.199.2.124 {
- description "DOH-KINGFISHER [DECOM]";
- }
- neighbor 10.199.2.130 {
- description "DOH-CORDELL [DECOM]";
- }
neighbor 10.199.2.132 {
description DOH-TULSA-NORTH-REGIONAL;
}
Index: configs/wanette-ps.client.onenet.net
===================================================================
--- configs/wanette-ps.client.onenet.net (revision 144715)
+++ configs/wanette-ps.client.onenet.net (working copy)
@@ -96,8 +96,8 @@
# total files: 1
#
# grnoc-mon at WANETTE-PS-LR-004667> show system uptime
-# System booted: 2016-07-17 08:15 CDT
-# Protocols started: 2016-07-17 08:18 CDT
+# System booted: 2016-07-27 19:34 CDT
+# Protocols started: 2016-07-27 19:36 CDT
# Last configured: 2016-07-11 08:41 CDT by andrew
#
# grnoc-mon at WANETTE-PS-LR-004667> show interface terse
Index: configs/hub.ton.onenet.net
===================================================================
--- configs/hub.ton.onenet.net (revision 145073)
+++ configs/hub.ton.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TONKAWA-M120-RE0> show system commit
+# 2016-07-27 19:17:17 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
# 2016-07-27 18:43:02 CDT by andrew via cli commit synchronize
# 2016-07-27 15:30:19 CDT by sky via cli commit synchronize
# 2016-07-20 18:43:48 CDT by andrew via cli commit synchronize
# 2016-07-20 14:09:37 CDT by andrew via cli commit synchronize
# 2016-05-19 13:40:27 CDT by andrew via cli commit synchronize
-# 2016-05-19 13:39:18 CDT by andrew via cli commit synchronize
# grnoc-mon at TONKAWA-M120-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -287,7 +287,7 @@
# grnoc-mon at TONKAWA-M120-RE0> show system uptime
# System booted: 2016-03-20 00:48 CDT
# Protocols started: 2016-03-20 00:54 CDT
-# Last configured: 2016-07-27 18:43 CDT by andrew
+# Last configured: 2016-07-27 19:17 CDT by andrew
#
# {master}
# grnoc-mon at TONKAWA-M120-RE0> show interface terse
@@ -429,7 +429,8 @@
#sp-3/3/0.16383 up up
#vt-3/3/0 up up
#ge-4/0/0 up up
-#ge-4/0/0.0 up up
+#ge-4/0/0.42 up up
+#ge-4/0/0.32767 up up
#pc-4/0/0 up up
#pc-4/0/0.16383 up up
#pfh-4/0/0 up up
@@ -466,7 +467,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TONKAWA-M120-RE0> show configuration
-## Last commit: 2016-07-27 18:43:02 CDT by andrew
+## Last commit: 2016-07-27 19:17:17 CDT by andrew
version 13.3R8.7;
groups {
re0 {
@@ -1331,15 +1332,21 @@
}
ge-4/0/0 {
description "CORE 1GE to core.ponc ge-0/0/0 [DARK FIBER KAMO] | OneNet-TON-PONC-GE-4815";
- unit 0 {
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 42 {
+ vlan-id 42;
family inet {
+ mtu 9000;
sampling {
input;
}
- address 164.58.245.165/30;
+ address 164.58.244.155/31;
}
family inet6 {
- address 2001:468:aff:ffff:ff92::2/80;
+ mtu 9000;
+ address 2610:1d8:3c00::1/127;
}
family mpls;
}
@@ -1484,11 +1491,8 @@
protocols {
mpls {
icmp-tunneling;
- interface ge-4/0/0.0;
interface lo0.0;
- interface ge-4/0/3.402;
- interface ge-4/0/3.403;
- interface ge-4/0/3.406;
+ interface ge-4/0/0.42;
}
bgp {
group CORE-RR-OKC-V6 {
@@ -1569,76 +1573,26 @@
disable;
}
interface lo0.0;
- interface ge-4/0/0.0 {
+ interface ge-4/0/0.42 {
authentication {
md5 7# key <removed>;
}
}
- interface ge-4/0/3.402 {
- metric 1000;
- authentication {
- md5 7# key <removed>;
- }
- }
- interface ge-4/0/3.403 {
- link-protection;
- metric 1000;
- authentication {
- md5 7# key <removed>;
- }
- bfd-liveness-detection {
- minimum-interval 100;
- multiplier 3;
- }
- }
- interface ge-4/0/3.406 {
- metric 10;
- authentication {
- md5 7# key <removed>;
- }
- }
}
}
ospf3 {
reference-bandwidth 100g;
area 0.0.0.0 {
- interface ge-4/0/0.0;
- interface ge-4/0/3.406 {
- link-protection;
+ interface lo0.0;
+ interface ge-4/0/0.42 {
ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 100;
- multiplier 3;
- }
}
- interface ge-4/0/3.402 {
- link-protection;
- metric 1000;
- ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 100;
- multiplier 3;
- }
- }
- interface ge-4/0/3.403 {
- link-protection;
- metric 1000;
- ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 100;
- multiplier 3;
- }
- }
- interface lo0.0;
}
}
ldp {
preference 255;
track-igp-metric;
- interface ge-4/0/0.0;
- interface ge-4/0/3.402;
- interface ge-4/0/3.403;
- interface ge-4/0/3.406;
+ interface ge-4/0/0.42;
interface lo0.0;
}
}
@@ -2263,7 +2217,7 @@
{master}
# grnoc-mon at TONKAWA-M120-RE0> show ospf neighbor
# Address Interface State ID Pri Dead
-# 164.58.245.166 ge-4/0/0.0 Full 164.58.199.186
+# 164.58.244.154 ge-4/0/0.42 Full 164.58.199.186
#
# {master}
# grnoc-mon at TONKAWA-M120-RE0> show bfd session
Index: configs/core.ponc.onenet.net
===================================================================
--- configs/core.ponc.onenet.net (revision 144946)
+++ configs/core.ponc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at PONCA-CITY-MX40> show system commit
+# 2016-07-27 19:17:09 CDT by andrew via cli
# 2016-07-20 10:13:45 CDT by andrew via cli
# 2016-04-14 10:57:57 CDT by andrew via cli
# 2016-03-20 00:19:23 CDT by root via other
# 2016-01-27 13:25:34 CST by joel via cli
# 2016-01-27 13:20:39 CST by joel via cli
-# 2016-01-27 13:08:16 CST by joel via cli
# grnoc-mon at PONCA-CITY-MX40> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -224,7 +224,7 @@
# grnoc-mon at PONCA-CITY-MX40> show system uptime
# System booted: 2016-03-20 00:17 CDT
# Protocols started: 2016-03-20 00:19 CDT
-# Last configured: 2016-07-20 10:13 CDT by andrew
+# Last configured: 2016-07-27 19:17 CDT by andrew
#
# grnoc-mon at PONCA-CITY-MX40> show interface terse
#Interface Admin Link
@@ -257,7 +257,8 @@
#ge-1/0/8 up down
#ge-1/0/9 up down
#ge-1/1/0 up up
-#ge-1/1/0.0 up up
+#ge-1/1/0.42 up up
+#ge-1/1/0.32767 up up
#ge-1/1/1 down down
#ge-1/1/2 up up
#ge-1/1/2.399 up up
@@ -327,7 +328,7 @@
#pp0 up up
#tap up up
# grnoc-mon at PONCA-CITY-MX40> show configuration
-## Last commit: 2016-07-20 10:13:45 CDT by andrew
+## Last commit: 2016-07-27 19:17:09 CDT by andrew
version 13.3R8.7;
system {
host-name PONCA-CITY-MX40;
@@ -622,15 +623,21 @@
}
ge-1/1/0 {
description "CORE 1GE to hub.ton ge-4/0/0 [DARK FIBER KAMO] | OneNet-TON-PONC-GE-4815";
- unit 0 {
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 42 {
+ vlan-id 42;
family inet {
+ mtu 9000;
sampling {
input;
}
- address 164.58.245.166/30;
+ address 164.58.244.154/31;
}
family inet6 {
- address 2001:468:aff:ffff:ff92::1/80;
+ mtu 9000;
+ address 2610:1d8:3c00::/127;
}
family mpls;
}
@@ -885,9 +892,9 @@
protocols {
mpls {
icmp-tunneling;
- interface ge-1/1/0.0;
interface lo0.0;
interface xe-0/0/0.42;
+ interface ge-1/1/0.42;
}
bgp {
group CORE-RR {
@@ -954,11 +961,6 @@
ospf {
reference-bandwidth 100g;
area 0.0.0.0 {
- interface ge-1/1/0.0 {
- authentication {
- md5 7# key <removed>;
- }
- }
interface fxp0.0 {
disable;
}
@@ -968,23 +970,30 @@
md5 7# key <removed>;
}
}
+ interface ge-1/1/0.42 {
+ authentication {
+ md5 7# key <removed>;
+ }
+ }
}
}
ospf3 {
reference-bandwidth 100g;
area 0.0.0.0 {
- interface ge-1/1/0.0;
interface lo0.0;
interface xe-0/0/0.42 {
ipsec-sa OneNet-OSPF3-AUTH;
}
+ interface ge-1/1/0.42 {
+ ipsec-sa OneNet-OSPF3-AUTH;
+ }
}
}
ldp {
preference 255;
track-igp-metric;
interface xe-0/0/0.42;
- interface ge-1/1/0.0;
+ interface ge-1/1/0.42;
interface lo0.0;
}
lldp {
@@ -1676,7 +1685,7 @@
}
# grnoc-mon at PONCA-CITY-MX40> show ospf neighbor
# Address Interface State ID Pri Dead
-# 164.58.245.165 ge-1/1/0.0 Full 164.58.199.70
+# 164.58.244.155 ge-1/1/0.42 Full 164.58.199.70
# 164.58.244.82 xe-0/0/0.42 Full 164.58.199.232
#
# grnoc-mon at PONCA-CITY-MX40> show bfd session
Index: configs/doh-kingfisher.client.onenet.net
===================================================================
--- configs/doh-kingfisher.client.onenet.net (revision 145061)
+++ configs/doh-kingfisher.client.onenet.net (working copy)
@@ -0,0 +1,785 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show system commit
+# 2016-07-27 18:55:32 CDT by admin via cli commit confirmed, rollback in 5mins
+# 2014-11-07 15:47:20 CST by admin via netconf
+# 2014-09-02 21:41:59 CDT by root via other
+# 2014-09-02 19:51:19 CDT by andrew via cli
+# 2014-09-02 15:47:16 CDT by rnordmark via cli
+# 2014-09-01 23:40:27 CDT by rnordmark via cli
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis environment
+# Class Item Status Measurement
+# Temp Routing Engine OK
+# Routing Engine CPU Absent
+# Fans SRX220 Chassis fan 0 OK
+# SRX220 Chassis fan 1 OK
+# Power Power Supply 0 OK
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis firmware
+# Part Type Version
+# FPC 0 O/S Version 12.1X46-D20.5 by builder on 2014-05
+# FPC 1 O/S Version 12.1X46-D20.5 by builder on 2014-05
+# FWDD O/S Version 12.1X46-D20.5 by builder on 2014-05
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM ---- CPU less FPC ----
+# Slot 1 information:
+# State Online
+# Total CPU DRAM ---- CPU less FPC ----
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis AR3312AA0004 SRX220H-POE
+# Routing Engine REV 20 750-031177 AAEY4180 RE-SRX220H-POE
+# FPC 0 FPC
+# PIC 0 8x GE Base PIC
+# FPC 1 REV 07 750-023367 AAEY7030 FPC
+# PIC 0 1x T1E1 mPIM
+# Power Supply 0
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis hardware models
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis routing-engine
+# Routing Engine status:
+# Serial ID AAEY4180
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis scb
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis sfm detail
+# grnoc-mon at DOH-KINGFISHER-SRX220> show chassis ssb
+# grnoc-mon at DOH-KINGFISHER-SRX220> show system boot-messages
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 2 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 5020 CPU Rev. 0.1 with no FPU implemented
+# L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+# L2 Cache: Size 128kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCI bridge> on obio0
+# Disabling Octeon big bar support
+# PCI Status: PCI 32-bit: 0xc041b
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <simple comms> at device 1.0 (no driver attached)
+# atapci0: <SiI 0680 UDMA133 controller> port 0x8-0xb,0x10-0x17,0x18-0x1b,0x20-0x2f mem 0x8020000-0x80200ff irq 0 at device 2.0 on pci0
+# ata2: <ATA channel 0> on atapci0
+# ata3: <ATA channel 1> on atapci0
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 8MB> on obio0
+# Timecounter "mips" frequency 700000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# ad0: Device does not support APM
+# ad0: 1006MB <CF 1GB 20080112> at ata2-master WDMA2
+# Trying to mount root from ufs:/dev/ad0s1a
+# WARNING: / was not properly dismounted
+# WARNING: / was not properly dismounted
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show version
+# Hostname: DOH-KINGFISHER-SRX220 # Model: srx220h-poe # JUNOS Software Release [12.1X46-D20.5] # # grnoc-mon at DOH-KINGFISHER-SRX220> file list /var/tmp detail # lrw-r--r-- 1 root wheel 11 May 14 2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show system uptime
+# System booted: 2016-07-27 18:59 CDT
+# Protocols started: 2016-07-27 19:01 CDT
+# Last configured: 2016-07-27 18:55 CDT by admin
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show interface terse
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 up up
+#ge-0/0/1.0 up up
+#ge-0/0/2 down down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 down down
+#ge-0/0/7 down down
+#t1-1/0/0 up up
+#t1-1/0/0.16 up up
+#t1-1/0/0.17 up up
+#t1-1/0/0.18 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+# grnoc-mon at DOH-KINGFISHER-SRX220> show configuration
+## Last commit: 2016-07-27 18:55:32 CDT by admin
+version 12.1X46-D20.5;
+system {
+ host-name DOH-KINGFISHER-SRX220;
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ password radius ];
+ ports {
+ console log-out-on-disconnect;
+ }
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 10.119.255.3;
+ 10.119.255.4;
+ }
+ radius-server {
+ 10.119.255.7 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 10.119.78.233;
+ }
+ }
+ radius-options {
+ attributes {
+ nas-ip-address 10.119.78.233;
+ }
+ }
+ login {
+ message "\n+----------------------------------------------------------------------------+\n| |\n| Managed by Oklahoma State Regents for Higher Education |\n| Oklahoma Network for Education Enrichment (ONENET) |\n| |\n| *** Unauthorized Use or Access Prohibited *** |\n| |\n| For more information, contact: |\n| |\n| Oklahoma State Regents for Higher Education |\n| Educational Telecommunications Network -- ONENET |\n| (888) 566-3638 |\n| !
info at onenet.net |\n| |\n+----------------------------------------------------------------------------+\n";
+ class admin {
+ idle-timeout 30;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user client {
+ uid 2000;
+ class admin;
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ user upgrades {
+ uid 2003;
+ class operator;
+ authentication {
+# ssh-rsa <removed>;
+ }
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ }
+ syslog {
+ archive size 10m files 5;
+ user * {
+ any emergency;
+ }
+ file messages {
+ any critical;
+ authorization info;
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+ }
+ }
+ max-configurations-on-flash 20;
+ max-configuration-rollbacks 20;
+ license {
+ autoupdate {
+ url https://ae1.juniper.net/junos/key_retrieval;
+ }
+ }
+ ntp {
+ server 10.119.255.5 prefer;
+ server 10.119.255.6;
+ }
+}
+interfaces {
+ ge-0/0/0 {
+ description DOH-DATA;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ filter {
+ input DOH-COS;
+ }
+ address 172.23.112.65/26;
+ }
+ }
+ }
+ ge-0/0/1 {
+ description DOH-PUBLIC;
+ speed 100m;
+ link-mode full-duplex;
+ unit 0 {
+ family inet {
+ filter {
+ input DOH-COS;
+ }
+ address 156.110.66.113/30;
+ }
+ }
+ }
+ ge-0/0/2 {
+ disable;
+ }
+ ge-0/0/3 {
+ disable;
+ }
+ ge-0/0/4 {
+ disable;
+ }
+ ge-0/0/5 {
+ disable;
+ }
+ ge-0/0/6 {
+ disable;
+ }
+ ge-0/0/7 {
+ disable;
+ }
+ t1-1/0/0 {
+ description "Link to OneNet";
+ per-unit-scheduler;
+ clocking external;
+ encapsulation frame-relay;
+ t1-options {
+ remote-loopback-respond;
+ }
+ unit 16 {
+ description "DATACOMM-MGMT to OneNet";
+ dlci 16;
+ family inet {
+ filter {
+ output DOH-COS;
+ }
+ address 10.119.78.233/31;
+ }
+ }
+ unit 17 {
+ description "DOH-DATA to OneNet";
+ dlci 17;
+ family inet {
+ filter {
+ output DOH-COS;
+ }
+ address 10.119.76.233/31;
+ }
+ }
+ unit 18 {
+ description "DOH-PUBLIC to OneNet";
+ dlci 18;
+ family inet {
+ filter {
+ output DOH-COS;
+ }
+ address 172.23.5.6/30;
+ }
+ }
+ }
+ t1-2/0/0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ }
+ }
+ }
+}
+snmp {
+ client-list snmp-management {
+ 10.119.255.0/24;
+ 204.61.5.128/27;
+ 0.0.0.0/0 {
+ restrict;
+ }
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+}
+routing-options {
+ static {
+ route 0.0.0.0/0 next-hop 10.119.78.232;
+ }
+}
+protocols {
+ lldp {
+ interface all;
+ }
+ lldp-med {
+ interface all;
+ }
+}
+policy-options {
+ prefix-list PRE-MGMT-SOURCES {
+ 10.119.255.0/24;
+ 164.58.253.0/24;
+ }
+ prefix-list PRE-LOCALIPv4-SOURCES {
+ apply-path "interfaces <*> unit <*> family inet address <*>";
+ }
+ prefix-list PRE-SNMP-SOURCES {
+ 10.119.255.0/24;
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ 204.61.5.128/27;
+ }
+ prefix-list DOH-TIME-SEN-LOW-BW {
+ 172.23.32.70/32;
+ 172.23.32.72/32;
+ 172.23.32.73/32;
+ 172.23.48.10/32;
+ 172.23.48.49/32;
+ 172.23.48.210/32;
+ 172.23.49.158/32;
+ 172.23.49.160/32;
+ 172.23.49.167/32;
+ 172.23.49.208/32;
+ 204.87.86.20/32;
+ }
+ prefix-list TIME-SEN-TRANS {
+ 172.23.48.13/32;
+ 172.23.48.20/32;
+ 172.23.48.72/32;
+ 172.23.48.105/32;
+ 172.23.48.156/32;
+ 172.23.48.193/32;
+ 172.23.49.4/32;
+ 172.23.49.9/32;
+ 172.23.49.39/32;
+ 172.23.49.70/32;
+ 172.23.49.72/32;
+ }
+}
+class-of-service {
+ classifiers {
+ dscp dscp-default {
+ import default;
+ forwarding-class scavenger-service {
+ loss-priority high code-points ss;
+ }
+ }
+ }
+ code-point-aliases {
+ dscp {
+ ss 001000;
+ }
+ exp {
+ ss 001;
+ }
+ }
+ forwarding-classes {
+ queue 0 best-effort;
+ queue 1 assured-forwarding;
+ queue 2 expedited-forwarding;
+ queue 3 network-control;
+ queue 4 scavenger-service;
+ }
+ interfaces {
+ ge-* {
+ scheduler-map t1-sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ t1-* {
+ scheduler-map t1-sch-map;
+ unit * {
+ classifiers {
+ dscp dscp-default;
+ }
+ }
+ }
+ }
+ rewrite-rules {
+ exp exp-inet-table {
+ forwarding-class best-effort {
+ loss-priority low code-point 000;
+ loss-priority high code-point 001;
+ }
+ forwarding-class assured-forwarding {
+ loss-priority low code-point 010;
+ loss-priority high code-point 011;
+ }
+ forwarding-class expedited-forwarding {
+ loss-priority low code-point 111;
+ loss-priority high code-point 110;
+ }
+ forwarding-class network-control {
+ loss-priority low code-point 100;
+ loss-priority high code-point 101;
+ }
+ }
+ }
+ scheduler-maps {
+ t1-sch-map {
+ forwarding-class best-effort scheduler best-effort-sch;
+ forwarding-class expedited-forwarding scheduler t1-expedited-forwarding-sch;
+ forwarding-class network-control scheduler network-control-sch;
+ forwarding-class assured-forwarding scheduler t1-assured-forwarding-sch;
+ forwarding-class scavenger-service scheduler scavenger-service-sch;
+ }
+ }
+ schedulers {
+ best-effort-sch {
+ transmit-rate {
+ remainder;
+ }
+ buffer-size {
+ remainder;
+ }
+ priority low;
+ }
+ network-control-sch {
+ transmit-rate percent 5;
+ buffer-size percent 5;
+ priority high;
+ }
+ scavenger-service-sch {
+ transmit-rate percent 0;
+ buffer-size percent 0;
+ priority low;
+ }
+ t1-assured-forwarding-sch {
+ transmit-rate percent 45;
+ buffer-size percent 5;
+ priority high;
+ }
+ t1-expedited-forwarding-sch {
+ transmit-rate percent 35;
+ buffer-size percent 5;
+ priority high;
+ }
+ }
+}
+security {
+ policies {
+ from-zone DOH-DATA to-zone DOH-DATA {
+ policy DOH-DATA {
+ match {
+ source-address any;
+ destination-address any;
+ application any;
+ }
+ then {
+ permit;
+ }
+ }
+ }
+ from-zone DOH-PUBLIC to-zone DOH-PUBLIC {
+ policy DOH-PUBLIC {
+ match {
+ source-address any;
+ destination-address any;
+ application any;
+ }
+ then {
+ permit;
+ }
+ }
+ }
+ from-zone DATACOMM-MGMT to-zone DATACOMM-MGMT {
+ policy DATACOMM-MGMT {
+ match {
+ source-address any;
+ destination-address any;
+ application any;
+ }
+ then {
+ permit;
+ }
+ }
+ }
+ }
+ zones {
+ security-zone DOH-DATA {
+ interfaces {
+ t1-1/0/0.17 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ ssh;
+ snmp;
+ }
+ }
+ }
+ ge-0/0/0.0 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ snmp;
+ }
+ }
+ }
+ }
+ }
+ security-zone DOH-PUBLIC {
+ interfaces {
+ t1-1/0/0.18 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ ssh;
+ snmp;
+ }
+ }
+ }
+ ge-0/0/1.0 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ snmp;
+ }
+ }
+ }
+ }
+ }
+ security-zone DATACOMM-MGMT {
+ interfaces {
+ t1-1/0/0.16 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ ssh;
+ snmp;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SSH-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-MGMT-SOURCES;
+ PRE-LOCALIPv4-SOURCES;
+ }
+ protocol tcp;
+ destination-port ssh;
+ }
+ then accept;
+ }
+ term SSH-DENY {
+ from {
+ protocol tcp;
+ destination-port ssh;
+ }
+ then {
+ discard;
+ }
+ }
+ term SNMP-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-SNMP-SOURCES;
+ }
+ protocol udp;
+ destination-port snmp;
+ }
+ then accept;
+ }
+ term SNMP-DENY {
+ from {
+ protocol udp;
+ destination-port snmp;
+ }
+ then {
+ discard;
+ }
+ }
+ term ALL-TRAFFIC {
+ then accept;
+ }
+ }
+ }
+ filter DOH-COS {
+ term expedited-forwarding {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ }
+ then {
+ forwarding-class expedited-forwarding;
+ accept;
+ }
+ }
+ term assured-forwarding-low {
+ from {
+ prefix-list {
+ DOH-TIME-SEN-LOW-BW;
+ }
+ destination-port [ 1433 80 139 445 9100 443 ];
+ }
+ then {
+ loss-priority low;
+ forwarding-class assured-forwarding;
+ accept;
+ }
+ }
+ term assured-forwarding-high {
+ from {
+ prefix-list {
+ TIME-SEN-TRANS;
+ }
+ destination-port [ 80 135 139 445 1433 5088 5089 6087 ];
+ }
+ then {
+ loss-priority high;
+ forwarding-class assured-forwarding;
+ accept;
+ }
+ }
+ term accept-all {
+ then {
+ forwarding-class best-effort;
+ accept;
+ }
+ }
+ }
+}
+routing-instances {
+ DOH-DATA {
+ instance-type virtual-router;
+ interface ge-0/0/0.0;
+ interface t1-1/0/0.17;
+ routing-options {
+ static {
+ route 0.0.0.0/0 next-hop 10.119.76.232;
+ }
+ }
+ }
+ DOH-PUBLIC {
+ instance-type virtual-router;
+ interface ge-0/0/1.0;
+ interface t1-1/0/0.18;
+ routing-options {
+ static {
+ route 0.0.0.0/0 next-hop 172.23.5.5;
+ }
+ }
+ }
+}
+# grnoc-mon at DOH-KINGFISHER-SRX220> show ospf neighbor
+# OSPF instance is not running
+#
+# grnoc-mon at DOH-KINGFISHER-SRX220> show bfd session
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/doh-watonga.client.onenet.net
===================================================================
--- configs/doh-watonga.client.onenet.net (revision 145073)
+++ configs/doh-watonga.client.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at DOH-WATONGA-SRX220> show system commit
+# 2016-07-27 20:00:23 CDT by andrew via cli commit confirmed, rollback in 3mins
# 2016-07-27 18:46:56 CDT by admin via cli commit confirmed, rollback in 5mins
# 2014-11-07 15:47:06 CST by admin via netconf
# 2014-09-03 21:25:47 CDT by root via other
# 2014-09-02 20:52:47 CDT by andrew via cli
# 2014-09-01 23:38:53 CDT by rnordmark via cli
-# 2014-09-01 12:36:18 CDT by rnordmark via cli
# grnoc-mon at DOH-WATONGA-SRX220> show chassis environment
# Class Item Status Measurement
# Temp Routing Engine OK
@@ -104,7 +104,7 @@
# grnoc-mon at DOH-WATONGA-SRX220> show system uptime
# System booted: 2016-07-27 18:53 CDT
# Protocols started: 2016-07-27 18:54 CDT
-# Last configured: 2016-07-27 18:46 CDT by admin
+# Last configured: 2016-07-27 20:00 CDT by andrew
#
# grnoc-mon at DOH-WATONGA-SRX220> show interface terse
#Interface Admin Link
@@ -123,7 +123,8 @@
#ge-0/0/2 down down
#ge-0/0/3 down down
#ge-0/0/4 down down
-#ge-0/0/5 down down
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
#ge-0/0/6 down down
#ge-0/0/7 down down
#t1-1/0/0 up up
@@ -151,7 +152,7 @@
#tap up up
#vlan up up
# grnoc-mon at DOH-WATONGA-SRX220> show configuration
-## Last commit: 2016-07-27 18:46:56 CDT by admin
+## Last commit: 2016-07-27 20:00:23 CDT by andrew
version 12.1X46-D20.5;
system {
host-name DOH-WATONGA-SRX220;
@@ -309,7 +310,15 @@
disable;
}
ge-0/0/5 {
- disable;
+ description OJA-ROUTER;
+ unit 0 {
+ family inet {
+ filter {
+ input DOH-COS;
+ }
+ address 156.110.39.185/30;
+ }
+ }
}
ge-0/0/6 {
disable;
@@ -641,6 +650,14 @@
}
}
}
+ ge-0/0/5.0 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ }
+ }
+ }
}
}
security-zone DATACOMM-MGMT {
@@ -767,6 +784,7 @@
DOH-PUBLIC {
instance-type virtual-router;
interface ge-0/0/1.0;
+ interface ge-0/0/5.0;
interface t1-1/0/0.18;
routing-options {
static {
Index: configs/city-of-lawton.client.onenet.net
===================================================================
--- configs/city-of-lawton.client.onenet.net (revision 145056)
+++ configs/city-of-lawton.client.onenet.net (working copy)
@@ -1,10 +1,11 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at CITY-OF-LAWTON-TAG-005231> show system commit
+# 2016-07-27 18:51:57 CDT by joel via cli
# 2016-07-27 19:10:23 CDT by root via cli
# 2016-07-27 18:52:45 CDT by root via other
# 2016-07-26 18:11:18 CDT by root via other
-# rescue 2016-07-27 19:16:02 CDT by root via cli
+# rescue 2016-07-27 18:56:39 CDT by joel via cli
#
# grnoc-mon at CITY-OF-LAWTON-TAG-005231> show chassis environment
# Class Item Status Measurement
@@ -115,7 +116,7 @@
# Time Source: NTP CLOCK
# System booted: 2016-07-27 15:02 CDT
# Protocols started: 2016-07-27 15:02 CDT
-# Last configured: 2016-07-27 19:10 CDT by root
+# Last configured: 2016-07-27 18:51 CDT by joel
#
# grnoc-mon at CITY-OF-LAWTON-TAG-005231> show interface terse
#Interface Admin Link
@@ -147,7 +148,7 @@
#ge-0/0/13 down down
#ge-0/0/14 down down
#ge-0/0/15 down down
-#fxp0 up down
+#fxp0 down down
#fxp2 up up
#fxp2.0 up up
#gre up up
@@ -170,10 +171,11 @@
#vlan up down
#vtep up up
# grnoc-mon at CITY-OF-LAWTON-TAG-005231> show configuration
-## Last commit: 2016-07-27 19:10:23 CDT by root
+## Last commit: 2016-07-27 18:51:57 CDT by joel
version 15.1X49-D50.3;
system {
host-name CITY-OF-LAWTON-TAG-005231;
+ auto-snapshot;
domain-name onenet.net;
time-zone America/Chicago;
authentication-order [ radius password ];
@@ -1443,6 +1445,9 @@
ge-0/0/15 {
disable;
}
+ fxp0 {
+ disable;
+ }
lo0 {
unit 0 {
family inet {
Index: configs/hub.wil.onenet.net
===================================================================
--- configs/hub.wil.onenet.net (revision 145073)
+++ configs/hub.wil.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at WILBURTON-M120-RE0> show system commit
+# 2016-07-27 19:24:50 CDT by sky via cli commit synchronize
# 2016-07-27 18:47:55 CDT by sean via cli commit synchronize
# 2016-07-27 18:45:49 CDT by sean via cli commit synchronize
# 2016-07-27 18:30:20 CDT by sean via cli commit synchronize
# 2016-07-27 18:17:19 CDT by sean via cli commit synchronize
# 2016-07-27 18:14:17 CDT by sean via cli commit synchronize
-# 2016-07-27 15:26:44 CDT by sky via cli commit synchronize
# grnoc-mon at WILBURTON-M120-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -263,7 +263,7 @@
# grnoc-mon at WILBURTON-M120-RE0> show system uptime
# System booted: 2016-03-13 01:23 CST
# Protocols started: 2016-03-13 01:28 CST
-# Last configured: 2016-07-27 18:47 CDT by sean
+# Last configured: 2016-07-27 19:24 CDT by sky
#
# {master}
# grnoc-mon at WILBURTON-M120-RE0> show interface terse
@@ -415,7 +415,7 @@
#pp0 up up
#tap up up
# grnoc-mon at WILBURTON-M120-RE0> show configuration
-## Last commit: 2016-07-27 18:47:55 CDT by sean
+## Last commit: 2016-07-27 19:24:50 CDT by sky
version 13.3R8.7;
groups {
re0 {
@@ -950,7 +950,7 @@
disable;
}
t1-2/0/3:10 {
- description "DOH-Pushmataha-Clayton-T1-CIR0000971-OCS ";
+ description DOH-CLAYTON-T1-CIR0000971-OCS;
dce;
encapsulation frame-relay;
unit 16 {
@@ -2147,7 +2147,7 @@
routing-options {
static {
route 172.23.28.0/26 next-hop 10.119.76.99;
- route 172.23.28.128/26 next-hop 10.119.76.99;
+ route 172.23.28.128/26 next-hop 10.119.76.161;
}
}
}
Index: configs/core.ida.onenet.net
===================================================================
--- configs/core.ida.onenet.net (revision 144946)
+++ configs/core.ida.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at IDABEL-MX480-RE0> show system commit
+# 2016-07-27 19:55:35 CDT by joel via cli commit synchronize
+# 2016-07-27 19:35:27 CDT by joel via cli commit synchronize
# 2016-07-20 14:05:39 CDT by andrew via cli commit synchronize
# 2016-06-26 20:33:37 CDT by andrew via cli commit synchronize
# 2016-06-22 23:25:48 CDT by andrew via cli commit synchronize
# 2016-06-22 23:24:29 CDT by andrew via cli commit synchronize
-# 2016-05-03 11:46:23 CDT by sean via cli commit synchronize
-# 2016-03-20 13:52:36 CDT by andrew via cli commit synchronize
# grnoc-mon at IDABEL-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -259,7 +259,7 @@
# grnoc-mon at IDABEL-MX480-RE0> show system uptime
# System booted: 2016-03-16 00:54 CDT
# Protocols started: 2016-03-16 01:01 CDT
-# Last configured: 2016-07-20 14:05 CDT by andrew
+# Last configured: 2016-07-27 19:55 CDT by joel
#
# {master}
# grnoc-mon at IDABEL-MX480-RE0> show interface terse
@@ -287,6 +287,7 @@
#ge-0/2/1.1201 up up
#ge-0/2/1.1202 up up
#ge-0/2/1.1204 up up
+#ge-0/2/1.1205 up up
#ge-0/2/1.32767 up up
#ge-0/2/2 up up
#ge-0/2/2.0 up up
@@ -382,7 +383,7 @@
#pp0 up up
#tap up up
# grnoc-mon at IDABEL-MX480-RE0> show configuration
-## Last commit: 2016-07-20 14:05:39 CDT by andrew
+## Last commit: 2016-07-27 19:55:35 CDT by joel
version 13.3R8.7;
groups {
re0 {
@@ -710,6 +711,25 @@
address 164.58.28.209/30;
}
}
+ unit 1205 {
+ description "GLOVER-PUBLIC-SCHOOLS-5M-CIR0019415-LR [ORDERED]";
+ bandwidth 5m;
+ vlan-id 1205;
+ family inet {
+ rpf-check;
+ filter {
+ input GLOVER-PUBLIC-SCHOOLS-5M-CIR0019415-LR;
+ }
+ policer {
+ input 5M-POL;
+ output 5M-POL;
+ }
+ sampling {
+ input;
+ }
+ address 156.110.24.154/31;
+ }
+ }
}
ge-0/2/2 {
description "CORE 1GE to core.dur ge-0/3/1.200 | OneNet-DUR-IDA-XE-5532";
@@ -1120,6 +1140,7 @@
route 164.58.82.128/28 next-hop 156.110.82.46;
route 164.58.153.126/32 next-hop 164.58.198.122;
route 164.58.80.104/29 next-hop 156.110.24.194;
+ route 164.58.72.0/29 next-hop 156.110.24.155;
}
router-id 164.58.199.103;
autonomous-system 5078;
@@ -1742,6 +1763,39 @@
}
}
}
+ filter GLOVER-PUBLIC-SCHOOLS-5M-CIR0019415-LR {
+ term ALLOW-OPENDNS {
+ from {
+ destination-address {
+ 208.67.222.222/32;
+ 208.67.220.220/32;
+ }
+ destination-port 53;
+ }
+ then accept;
+ }
+ term ALLOW-ONENET-DNS {
+ from {
+ destination-address {
+ 164.58.253.10/32;
+ 164.58.198.10/32;
+ }
+ destination-port 53;
+ }
+ then accept;
+ }
+ term DENY-OTHER-DNS {
+ from {
+ destination-port 53;
+ }
+ then {
+ reject;
+ }
+ }
+ term ALLOW-ALL-ELSE {
+ then accept;
+ }
+ }
}
policer 10M-POL {
logical-interface-policer;
@@ -1791,6 +1845,14 @@
}
then discard;
}
+ policer 5M-POL {
+ logical-interface-policer;
+ if-exceeding {
+ bandwidth-limit 5m;
+ burst-size-limit 1m;
+ }
+ then discard;
+ }
}
routing-instances {
ONENET-MGMT-L3VPN {
Index: routers.down
===================================================================
--- routers.down (revision 145071)
+++ routers.down (working copy)
@@ -1,6 +1,7 @@
BERRYHILL-PUBLIC-SCHOOLS.client.onenet.net:juniper:down
Capitol-3550.onenet.net:cisco:down
EODLS-Muskogee-Main-Office.client.onenet.net:juniper:down
+GLOVER-PUBLIC-SCHOOLS.client.onenet.net:juniper:down
GROVE-ELEM-DIST-63-SRX220.client.onenet.net:juniper:down
HARRY-S-TRUMAN-BLDG-4700.client.onenet.net:juniper:down
NEWKIRK-PUBLIC-LIBRARY.client.onenet.net:juniper:down
Index: routers.all
===================================================================
--- routers.all (revision 145051)
+++ routers.all (working copy)
@@ -14,6 +14,7 @@
EODLS-Muldrow-Public-Library.client.onenet.net:juniper
EODLS-Muskogee-Main-Office.client.onenet.net:juniper
EODLS-Stilwell-Public-Library.client.onenet.net:juniper
+GLOVER-PUBLIC-SCHOOLS.client.onenet.net:juniper
GRACE-PICKENS-LIBRARY.client.onenet.net:juniper
GRANITE-PUBLIC-SCHOOLS.client.onenet.net:juniper
GROVE-ELEM-DIST-63-SRX220.client.onenet.net:juniper
More information about the Nocrancid
mailing list