[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Tue Jun 28 01:03:04 CDT 2016
Index: configs/eodls-stilwell-public-library.client.onenet.net
===================================================================
--- configs/eodls-stilwell-public-library.client.onenet.net (revision 144032)
+++ configs/eodls-stilwell-public-library.client.onenet.net (working copy)
@@ -1,6 +1,7 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show system commit
+# show chassis firmware
# 2016-02-19 14:28:52 CST by sky via cli commit confirmed, rollback in 2mins
# 2015-12-08 13:24:19 CST by onenet via cli commit confirmed, rollback in 5mins
# 2015-02-03 11:41:15 CST by onenet via cli
@@ -8,6 +9,8 @@
# 2014-08-15 22:48:09 CDT by root via cli
# 2014-06-10 21:11:56 CDT by root via other
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show chassis environment
+# show chassis firmware
+# show chassis fpc detail
# Class Item Status Measurement
# Temp Routing Engine OK
# Routing Engine CPU Absent
@@ -16,11 +19,14 @@
# Power Power Supply 0 OK
#
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show chassis firmware
+# show chassis hardware
# Part Type Version
# FPC 0 O/S Version 12.1X44-D30.4 by builder on 2014-01
# FWDD O/S Version 12.1X44-D30.4 by builder on 2014-01
#
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show chassis fpc detail
+# show chassis hardware
+# show chassis hardware models
# Slot 0 information:
# State Online
# Total CPU DRAM ---- CPU less FPC ----
@@ -43,6 +49,8 @@
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show chassis sfm detail
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show chassis ssb
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show system boot-messages
+# show version
+# file list /var/tmp detail
# kld_map_v: 0x8ff80000, kld_map_p: 0x0
# Copyright (c) 1996-2014, Juniper Networks, Inc.
# All rights reserved.
@@ -95,6 +103,7 @@
# total files: 1
#
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show system uptime
+# show configuration
# System booted: 2015-01-09 11:20 CST
# Protocols started: 2015-01-09 11:22 CST
# Last configured: 2016-02-19 14:28 CST by sky
@@ -144,6 +153,7 @@
#vlan up up
#vlan.999 up down
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show configuration
+show bfd session
## Last commit: 2016-02-19 14:28:52 CST by sky
version 12.1X44-D30.4;
system {
@@ -667,6 +677,8 @@
}
}
# grnoc-mon at EODLS-Stilwell-Public-Library-ASSET-004360> show ospf neighbor
+# show bfd session
+# quit
# Address Interface State ID Pri Dead
# 10.0.0.37 gr-0/0/0.109 Full 10.0.0.1
# 10.0.2.37 gr-0/0/0.209 Full 10.0.0.30
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net (revision 144063)
+++ configs/maysville-es.client.onenet.net (working copy)
@@ -1,6 +1,7 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system commit
+# show chassis environment
# 2016-03-25 14:17:43 CDT by joel via cli
# 2015-10-26 13:12:04 CDT by admin via cli
# 2015-10-26 13:08:26 CDT by admin via cli
@@ -13,6 +14,7 @@
# Routing Engine CPU OK
# Fans SRX240 PowerSupply fan 1 OK
# SRX240 PowerSupply fan 2 OK
+# show chassis firmware
# SRX240 CPU fan 1 OK
# SRX240 CPU fan 2 OK
# SRX240 IO fan 1 OK
@@ -25,6 +27,7 @@
# FWDD O/S Version 12.1X44-D35.5 by builder on 2014-05
#
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis fpc detail
+# show chassis hardware
# Slot 0 information:
# State Online
# Total CPU DRAM ---- CPU less FPC ----
@@ -44,10 +47,8 @@
# Serial ID ACDT6307
#
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis scb
-# show chassis sfm detail
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis sfm detail
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis ssb
-# show system boot-messages
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system boot-messages
# kld_map_v: 0x8ff80000, kld_map_p: 0x0
# Copyright (c) 1996-2014, Juniper Networks, Inc.
@@ -116,6 +117,7 @@
# total files: 1
#
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system uptime
+# show interface terse
# System booted: 2016-06-13 13:19 CDT
# Protocols started: 2016-06-13 13:22 CDT
# Last configured: 2016-03-25 14:17 CDT by joel
@@ -171,6 +173,7 @@
#vlan up up
#vlan.999 up down
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show configuration
+show ospf neighbor
## Last commit: 2016-03-25 14:17:43 CDT by joel
version 12.1X44-D35.5;
system {
Index: configs/core8.tul.onenet.net
===================================================================
--- configs/core8.tul.onenet.net (revision 144047)
+++ configs/core8.tul.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE8-MX480-RE0> show system commit
+# 2016-06-28 00:45:30 CDT by andrew via cli commit synchronize
# 2016-06-26 21:06:15 CDT by andrew via cli commit synchronize
# 2016-04-27 15:09:01 CDT by andrew via cli commit synchronize
# 2016-04-27 13:28:08 CDT by andrew via cli commit synchronize
# 2016-04-27 13:09:13 CDT by andrew via cli commit synchronize
# 2016-04-27 13:06:47 CDT by andrew via cli commit synchronize
-# 2016-04-27 13:05:55 CDT by andrew via cli commit confirmed, rollback in 5mins synchronize
# grnoc-mon at TULSA-CORE8-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -311,7 +311,7 @@
# grnoc-mon at TULSA-CORE8-MX480-RE0> show system uptime
# System booted: 2016-03-20 01:06 CDT
# Protocols started: 2016-03-20 01:08 CDT
-# Last configured: 2016-06-26 21:06 CDT by andrew
+# Last configured: 2016-06-28 00:45 CDT by andrew
#
# {master}
# grnoc-mon at TULSA-CORE8-MX480-RE0> show interface terse
@@ -400,9 +400,9 @@
#lo0.16384 up up
#lo0.16385 up up
#lsi up up
-#lsi.1048832 up up
#lsi.1048833 up up
#lsi.1048834 up up
+#lsi.1048836 up up
#mtun up up
#pimd up up
#pime up up
@@ -410,7 +410,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE8-MX480-RE0> show configuration
-## Last commit: 2016-06-26 21:06:15 CDT by andrew
+## Last commit: 2016-06-28 00:45:30 CDT by andrew
version 13.3R8.7;
groups {
re0 {
@@ -1681,10 +1681,11 @@
ignore-mtu-mismatch;
}
}
- neighbor 164.58.199.224 {
+ neighbor 164.58.199.222 {
interface et-0/3/0.3920 {
virtual-circuit-id 3920;
- mtu 9000;
+ ignore-encapsulation-mismatch;
+ ignore-mtu-mismatch;
}
}
local-switching {
Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net (revision 144045)
+++ configs/core5.tul.onenet.net (working copy)
@@ -705,8 +705,8 @@
#lsi.1414307 up up
#lsi.1414308 up up
#lsi.1414309 up up
-#lsi.1414311 up up
#lsi.1414312 up up
+#lsi.1414314 up up
#mtun up up
#pimd up up
#pime up up
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net (revision 144063)
+++ configs/stringtown-high-school.client.onenet.net (working copy)
@@ -1,6 +1,7 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system commit
+# show chassis environment
# 2016-02-17 16:01:39 CST by sean via cli commit confirmed, rollback in 3mins
# 2016-01-19 09:16:22 CST by joel via cli
# 2016-01-11 10:33:48 CST by joel via cli
@@ -8,6 +9,7 @@
# 2016-01-07 22:35:26 CST by root via cli
# 2016-01-07 22:33:58 CST by root via cli
# grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show chassis environment
+# show chassis firmware
# Class Item Status Measurement
# Temp Routing Engine OK
# Routing Engine CPU OK
@@ -25,6 +27,7 @@
# FWDD O/S Version 12.1X44-D35.5 by builder on 2014-05
#
# grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show chassis fpc detail
+# show chassis hardware
# Slot 0 information:
# State Online
# Total CPU DRAM ---- CPU less FPC ----
@@ -35,6 +38,7 @@
# Chassis BU2115AK0252 SRX240H2
# Routing Engine REV 14 750-043609 ACMK4816 RE-SRX240H2
# FPC 0 FPC
+# show chassis hardware models
# PIC 0 16x GE Base PIC
# Power Supply 0
#
@@ -114,6 +118,7 @@
# total files: 1
#
# grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system uptime
+# show interface terse
# System booted: 2016-06-20 13:06 CDT
# Protocols started: 2016-06-20 13:09 CDT
# Last configured: 2016-02-17 16:01 CST by sean
@@ -173,6 +178,7 @@
#vlan.3 up down
#vlan.999 up down
# grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show configuration
+show ospf neighbor
## Last commit: 2016-02-17 16:01:39 CST by sean
version 12.1X44-D35.5;
system {
@@ -672,6 +678,7 @@
}
# grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show ospf neighbor
# OSPF instance is not running
+# show bfd session
#
# grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show bfd session
Index: configs/core4.tul.onenet.net
===================================================================
--- configs/core4.tul.onenet.net (revision 144031)
+++ configs/core4.tul.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE4-MX480-RE0> show system commit
+# 2016-06-28 00:45:06 CDT by andrew via cli commit confirmed, rollback in 10mins synchronize
# 2016-06-26 21:03:29 CDT by andrew via cli commit synchronize
# 2016-06-23 14:31:54 CDT by aberrios via cli commit synchronize
# 2016-06-23 14:30:33 CDT by aberrios via cli commit synchronize
# 2016-06-23 14:25:10 CDT by aberrios via cli commit synchronize
# 2016-06-22 13:31:15 CDT by aberrios via cli commit synchronize
-# 2016-06-21 23:00:23 CDT by andrew via cli commit synchronize
# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -393,7 +393,7 @@
# grnoc-mon at TULSA-CORE4-MX480-RE0> show system uptime
# System booted: 2014-12-03 03:18 CST
# Protocols started: 2014-12-03 03:19 CST
-# Last configured: 2016-06-26 21:03 CDT by andrew
+# Last configured: 2016-06-28 00:45 CDT by andrew
#
# {master}
# grnoc-mon at TULSA-CORE4-MX480-RE0> show interface terse
@@ -409,20 +409,7 @@
#xe-0/0/0.32767 up up
#xe-0/0/1 up up
#xe-0/0/1.0 up up
-#xe-0/1/0 up up
-#xe-0/1/0.101 up up
-#xe-0/1/0.250 up up
-#xe-0/1/0.251 up up
-#xe-0/1/0.252 up up
-#xe-0/1/0.257 up up
-#xe-0/1/0.258 up up
-#xe-0/1/0.982 up up
-#xe-0/1/0.993 up up
-#xe-0/1/0.996 up up
-#xe-0/1/0.997 up up
-#xe-0/1/0.998 up up
-#xe-0/1/0.3920 up up
-#xe-0/1/0.32767 up up
+#xe-0/1/0 down down
#xe-0/1/1 up up
#xe-0/1/1.148 up up
#xe-0/1/1.32767 up up
@@ -555,20 +542,7 @@
#pfe-2/0/0.16383 up up
#pfh-2/0/0 up up
#pfh-2/0/0.16383 up up
-#xe-2/0/0 up up
-#xe-2/0/0.101 up up
-#xe-2/0/0.250 up up
-#xe-2/0/0.251 up up
-#xe-2/0/0.252 up up
-#xe-2/0/0.257 up up
-#xe-2/0/0.258 up up
-#xe-2/0/0.982 up up
-#xe-2/0/0.993 up up
-#xe-2/0/0.996 up up
-#xe-2/0/0.997 up up
-#xe-2/0/0.998 up up
-#xe-2/0/0.3920 up up
-#xe-2/0/0.32767 up up
+#xe-2/0/0 down down
#xe-2/0/1 up up
#xe-2/0/1.132 up up
#xe-2/0/1.32767 up up
@@ -632,20 +606,7 @@
#ae1.80 up up
#ae1.2000 up up
#ae1.32767 up up
-#ae2 up up
-#ae2.101 up up
-#ae2.250 up up
-#ae2.251 up up
-#ae2.252 up up
-#ae2.257 up up
-#ae2.258 up up
-#ae2.982 up up
-#ae2.993 up up
-#ae2.996 up up
-#ae2.997 up up
-#ae2.998 up up
-#ae2.3920 up up
-#ae2.32767 up up
+#ae2 up down
#ae3 up up
#ae3.2520 up up
#ae3.32767 up up
@@ -697,7 +658,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE4-MX480-RE0> show configuration
-## Last commit: 2016-06-26 21:03:29 CDT by andrew
+## Last commit: 2016-06-28 00:45:06 CDT by andrew
version 13.3R4.6;
groups {
re0 {
@@ -970,10 +931,7 @@
}
}
xe-0/1/0 {
- description "PEER L2 10GE to tuls-core1-aeron.net xe-0/1/0 ^ AREON BGP PEER ^ CIR000xxxx";
- gigether-options {
- 802.3ad ae2;
- }
+ disable;
}
xe-0/1/1 {
description "CORE 10GE to core5.tul xe-0/1/1 | OneNet-TUL-TUL-XE-4474";
@@ -1798,10 +1756,7 @@
}
}
xe-2/0/0 {
- description "PEER L2 10GE to tuls-core1-aeron.net xe-2/0/0 ^ AREON BGP PEER ^ CIR000xxxx";
- gigether-options {
- 802.3ad ae2;
- }
+ disable;
}
xe-2/0/1 {
description "CORE 10GE to core2.tul xe-2/0/1 | OneNet-TUL-TUL-XE-XXXX";
@@ -2157,143 +2112,7 @@
}
}
ae2 {
- description "UPSTREAM 10GE to ^ AREON ^ devicexxx int-?/?/? CIR0005062";
- vlan-tagging;
- mtu 9174;
- encapsulation flexible-ethernet-services;
- aggregated-ether-options {
- link-speed 10g;
- lacp {
- active;
- periodic fast;
- }
- }
- unit 101 {
- description "L2-CROSS 10GE to AREON-QWEST CIR000XXXX";
- encapsulation vlan-ccc;
- vlan-id 101;
- }
- unit 250 {
- description "UPSTREAM L3 XX to ^ AREON Commodity ^ CIR000XXXX";
- vlan-id 250;
- family inet {
- sampling {
- input;
- }
- address 164.58.16.241/30;
- }
- }
- unit 251 {
- description "FUTURE NETFLIX IPV4 [NO-MONITOR]";
- vlan-id 251;
- family inet {
- mtu 9000;
- sampling {
- input;
- }
- address 164.58.16.5/30;
- }
- }
- unit 252 {
- description "FUTURE NETFLIX IPV6 [NO-MONITOR]";
- vlan-id 252;
- family inet6 {
- mtu 9000;
- sampling {
- input;
- }
- address 2610:1d8:2600::8/127;
- }
- }
- unit 257 {
- description "UPSTREAM L3 XX to ^ AREON(NETFX - DALLAS - V4) ^ CIR000XXXX [NO-MONITOR]";
- vlan-id 257;
- family inet {
- sampling {
- input;
- }
- address 198.45.55.21/31;
- }
- }
- unit 258 {
- description "UPSTREAM L3 XX to ^ AREON(NETFX - DALLAS - V6) ^ CIR000XXXX [NO-MONITOR]";
- vlan-id 258;
- family inet6 {
- sampling {
- input;
- }
- address 2620:10c:700b:14::2/126;
- }
- }
- unit 982 {
- vlan-id 982;
- family inet {
- sampling {
- input;
- }
- address 10.10.10.1/30;
- }
- }
- unit 993 {
- description "UPSTREAM L3 XX to ^ AREON BGP IPv4 ^ CIR0004482";
- vlan-id 993;
- family inet {
- mtu 9000;
- sampling {
- input;
- }
- address 156.110.202.157/30;
- }
- }
- unit 996 {
- description "UPSTREAM L3 XX to ^ AREON BGP IPv6 ^ CIR0005067";
- vlan-id 996;
- family inet {
- sampling {
- input;
- }
- }
- family inet6 {
- mtu 9000;
- sampling {
- input;
- }
- address 2610:1d8:2600::/127;
- }
- }
- unit 997 {
- description "UPSTREAM L3 XX to ^ COGENT IPv4 (via AREON) ^ CIR0005068";
- vlan-id 997;
- family inet {
- filter {
- input ABUSE-BCP38-INBOUND;
- }
- sampling {
- input;
- }
- address 38.104.198.70/30;
- }
- }
- unit 998 {
- description "UPSTREAM L3 XX to ^ COGENT-IPv6 (via AREON) ^ CIR0005069";
- vlan-id 998;
- family inet {
- sampling {
- input;
- }
- }
- family inet6 {
- mtu 9000;
- sampling {
- input;
- }
- address 2001:550:2:2e::e/126;
- }
- }
- unit 3920 {
- encapsulation vlan-ccc;
- vlan-id-range 3920-3939;
- }
+ description "NOT-USED [NO-MONITOR]";
}
ae3 {
description HEI-UNIVERSITY-of-OKLAHOMA-VPLS-20G-CIR000XXXX;
@@ -2637,104 +2456,6 @@
description TUL-CORE6-IBGP-V6;
}
}
- group EBGP-AREON-V4 {
- type external;
- description EBGP-AREON-V4-82005aCd;
- import [ EBGP-AREON-IMPORT EBGP-REJECT-IMPORT ];
- family inet {
- any;
- }
-# authentication-#key <removed>;
- export EBGP-AREON-EXPORT;
- neighbor 156.110.202.158 {
- remove-private;
- peer-as 40581;
- }
- }
- group EBGP-AREON-V6 {
- type external;
- description EBGP-AREON-V6-82005aCd;
- import EBGP-AREON-V6-IMPORT;
- family inet6 {
- any;
- }
-# authentication-#key <removed>;
- export EBGP-AREON-V6-EXPORT;
- neighbor 2610:1d8:2600::1 {
- remove-private;
- peer-as 40581;
- }
- }
- group EBGP-COGENT-AS174 {
- type external;
- description EBGP-COGENT-AS174;
- import [ EBGP-COGENT-IMPORT EBGP-REJECT-IMPORT ];
- family inet {
- any;
- }
-# authentication-#key <removed>;
- export EBGP-COGENT-EXPORT;
- neighbor 38.104.198.69 {
- remove-private;
- peer-as 174;
- }
- }
- group EBGP-COGENT-AS174-V6 {
- type external;
- description EBGP-COGENT-AS174-V6;
- import EBGP-COGENT-V6-IMPORT;
- family inet6 {
- any;
- }
- export EBGP-COGENT-V6-EXPORT;
- neighbor 2001:550:2:2e::d {
- remove-private;
- peer-as 174;
- }
- }
- group EBGP-AREON-COMMODITY-V4 {
- type external;
- description EBGP-AREON-COMMODITY-V4;
- import EBGP-AREON-COMMODITY-V4-IMPORT;
- family inet {
- any;
- }
-# authentication-#key <removed>;
- export EBGP-AREON-COMMODITY-V4-EXPORT;
- neighbor 164.58.16.242 {
- remove-private;
- peer-as 40581;
- }
- }
- group EBGP-NETFLIX-AS2906 {
- type external;
- family inet {
- any;
- }
- export EBGP-NETFLIX-EXPORT;
- remove-private;
- peer-as 2906;
- neighbor 164.58.16.6 {
- passive;
- }
- neighbor 198.45.55.20 {
- passive;
- }
- }
- group EBGP-NETFLIX-AS2906-V6 {
- type external;
- family inet6 {
- any;
- }
- export EBGP-NETFLIX-EXPORT-V6;
- peer-as 2906;
- neighbor 2610:1d8:2600::9 {
- passive;
- }
- neighbor 2620:10c:700b:14::1 {
- passive;
- }
- }
group EBGP-MBO-V4 {
type external;
accept-remote-nexthop;
@@ -2980,19 +2701,6 @@
description CCC-FOR-OSU-20MB;
}
}
- neighbor 164.58.199.228 {
- interface ae2.3920 {
- virtual-circuit-id 3920;
- mtu 9000;
- }
- }
- neighbor 164.58.199.214 {
- interface ae2.101 {
- virtual-circuit-id 2544;
- description "L2-CROSS 10GE to AREON-QWEST CIR000XXXX";
- ignore-mtu-mismatch;
- }
- }
}
lldp {
interface xe-0/0/0;
@@ -3001,7 +2709,6 @@
interface xe-1/1/0;
interface xe-1/2/0;
interface ge-0/3/1;
- interface xe-0/1/0;
interface xe-2/0/1;
}
}
@@ -3134,82 +2841,6 @@
prefix-list PRE-L0-SOURCES {
apply-path "interfaces lo0 unit <*> family inet address <164.*>";
}
- prefix-list VIDEO-ABUSE {
- 4.59.116.99/32;
- 5.135.127.38/32;
- 8.26.191.15/32;
- 27.251.106.77/32;
- 27.251.150.44/32;
- 41.72.146.236/32;
- 46.170.123.99/32;
- 50.57.99.176/32;
- 50.63.58.104/32;
- 54.225.86.175/32;
- 62.68.135.112/32;
- 62.75.189.212/32;
- 64.221.57.243/32;
- 65.23.95.226/32;
- 66.241.103.37/32;
- 68.235.34.138/32;
- 69.11.252.171/32;
- 69.156.233.135/32;
- 70.166.27.17/32;
- 70.182.140.72/32;
- 72.249.45.157/32;
- 74.95.24.49/32;
- 75.101.143.102/32;
- 80.45.167.51/32;
- 82.35.15.107/32;
- 82.146.33.58/32;
- 82.188.213.26/32;
- 83.16.211.90/32;
- 85.9.50.130/32;
- 85.25.109.205/32;
- 85.116.199.189/32;
- 85.214.216.176/32;
- 85.236.48.60/32;
- 89.36.133.86/32;
- 89.175.189.244/32;
- 92.39.60.91/32;
- 92.87.37.56/32;
- 94.143.64.9/32;
- 94.180.115.53/32;
- 98.109.76.36/32;
- 123.30.145.15/32;
- 123.30.180.151/32;
- 155.210.153.18/32;
- 157.86.6.21/32;
- 180.42.38.252/32;
- 190.144.8.146/32;
- 190.210.97.99/32;
- 192.73.243.62/32;
- 192.198.85.133/32;
- 192.241.216.209/32;
- 194.54.9.11/32;
- 194.186.1.25/32;
- 195.120.220.31/32;
- 199.27.89.22/32;
- 200.23.251.182/32;
- 200.43.140.19/32;
- 201.33.235.198/32;
- 201.174.78.62/32;
- 202.57.32.35/32;
- 202.65.119.162/32;
- 202.65.121.186/32;
- 202.215.5.237/32;
- 203.143.104.114/32;
- 203.162.79.155/32;
- 203.171.242.251/32;
- 206.191.192.4/32;
- 209.177.93.2/32;
- 210.125.64.233/32;
- 212.48.68.23/32;
- 212.152.181.211/32;
- 212.182.57.150/32;
- 213.21.169.14/32;
- 217.17.48.129/32;
- 219.146.12.180/32;
- }
prefix-list EBGP-MBO-V4-PREFIXES {
64.111.224.0/19;
66.212.32.0/20;
@@ -3417,156 +3048,6 @@
then reject;
}
}
- policy-statement EBGP-AREON-COMMODITY-V4-EXPORT {
- term COMMODITY-PREFIX-LIST {
- from policy COMMODITY-PREFIXES-LIST;
- then accept;
- }
- term MORE-SPECIFIC {
- from {
- route-filter 164.58.172.0/24 exact;
- }
- then accept;
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-AREON-COMMODITY-V4-IMPORT {
- term REJECT-DEFAULT {
- from {
- route-filter 0.0.0.0/0 exact;
- }
- then reject;
- }
- term APPLE {
- from {
- route-filter 17.0.0.0/8 orlonger;
- }
- then {
- community set 5078:40581;
- accept;
- }
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-AREON-EXPORT {
- term STEP-1 {
- from policy COMMODITY-PREFIXES-LIST;
- then accept;
- }
- term STEP-2 {
- from community 5078:19401;
- then accept;
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-AREON-IMPORT {
- term ASU-PREPEND {
- then {
- community set 5078:40581;
- as-path-prepend "5078 5078 5078 5078 5078 5078";
- accept;
- }
- }
- term STEP-1 {
- then {
- community set 5078:40581;
- accept;
- }
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-AREON-V6-EXPORT {
- term STEP-1 {
- from {
- route-filter 2610:1d8::/32 exact;
- }
- then accept;
- }
- term STEP-2 {
- from protocol aggregate;
- then accept;
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-AREON-V6-IMPORT {
- term STEP-1 {
- then {
- community set 5078:40581;
- accept;
- }
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-COGENT-EXPORT {
- term STEP-1 {
- from policy COMMODITY-PREFIXES-LIST;
- then {
- community add 174:3001;
- as-path-prepend "5078 5078 5078";
- accept;
- }
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-COGENT-IMPORT {
- term STEP-1 {
- then {
- local-preference subtract 20;
- community set 5078:174;
- accept;
- }
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-COGENT-V6-EXPORT {
- term FAA {
- from {
- route-filter 2001:19e8:8041::/48 exact;
- }
- then {
- as-path-expand 3923;
- accept;
- }
- }
- term STEP-1 {
- from policy COMMODITY-PREFIXES-LIST-V6;
- then accept;
- }
- term STEP-2 {
- from protocol aggregate;
- then accept;
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-COGENT-V6-IMPORT {
- term STEP-1 {
- then {
- community set 5078:174;
- accept;
- }
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
policy-statement EBGP-FACEBOOK-V4-EXPORT {
term DONT-SEND {
from community ONENET_NOFACEBOOK;
@@ -3714,30 +3195,6 @@
then reject;
}
}
- policy-statement EBGP-NETFLIX-EXPORT {
- term ONENET {
- from policy COMMODITY-PREFIXES-LIST;
- then {
- metric 10;
- accept;
- }
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
- policy-statement EBGP-NETFLIX-EXPORT-V6 {
- term STEP-1 {
- from policy COMMODITY-PREFIXES-LIST-V6;
- then {
- metric 10;
- accept;
- }
- }
- term REJECT-ALL-ELSE {
- then reject;
- }
- }
policy-statement EBGP-OUSS-EXPORT {
term static {
from protocol static;
@@ -4415,14 +3872,11 @@
then reject;
}
}
- community 174:3001 members 174:3001;
community 5078:11164 members 5078:11164;
community 5078:11317 members 5078:11317;
community 5078:11537 members 5078:11537;
community 5078:13359 members 5078:13359;
community 5078:16922 members 5078:16922;
- community 5078:174 members 5078:174;
- community 5078:19401 members 5078:19401;
community 5078:2381 members 5078:2381;
community 5078:40581 members 5078:40581;
community 65000:6939 members 65000:6939;
@@ -4765,41 +4219,6 @@
}
}
}
- filter ABUSE-BCP38-INBOUND {
- term 1 {
- from {
- source-address {
- 164.58.0.0/16;
- 156.110.0.0/16;
- }
- }
- then {
- discard;
- }
- }
- term 1.5 {
- from {
- source-port 19;
- destination-port 19;
- }
- then policer CHARGEN;
- }
- term VIDEO {
- from {
- source-prefix-list {
- VIDEO-ABUSE;
- }
- destination-port [ 1720 5060 5061 1719 ];
- }
- then {
- count VIDEO-ABUSE;
- discard;
- }
- }
- term 2 {
- then accept;
- }
- }
filter DRUMRIGHT-PL-INBOUND {
term ALLOW-OPENDNS {
from {
@@ -4981,13 +4400,6 @@
}
then discard;
}
- policer CHARGEN {
- if-exceeding {
- bandwidth-limit 400k;
- burst-size-limit 100k;
- }
- then discard;
- }
policer 90M-POL {
logical-interface-policer;
if-exceeding {
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net (revision 144063)
+++ configs/acx.cai.hart-acx2100.onenet.net (working copy)
@@ -72,6 +72,7 @@
# grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis sfm detail
# grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis ssb
# grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system boot-messages
+# show version
# platform_early_bootinit: MX-PPC Series Early Boot Initialization
# mxppc_set_re_type: hw.board.type is ACX-2100
# WDOG initialized
@@ -140,7 +141,8 @@
# WARNING: /var was not properly dismounted
#
# grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show version
-# Hostname: HARTSHORNE-PUBLIC-LIBRARY-ACX2100 # Model: acx2100 # JUNOS Crypto Software Suite [12.3X54-D10.6] # JUNOS Base OS Software Suite [12.3X54-D10.6] # JUNOS Kernel Software Suite [12.3X54-D10.6] # JUNOS Base OS boot [12.3X54-D10.6] # JUNOS Packet Forwarding Engine Support (ACX) [12.3X54-D10.6] # JUNOS Online Documentation [12.3X54-D10.6] # JUNOS Routing Software Suite [12.3X54-D10.6] # # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> file list /var/tmp detail #
+# Hostname: HARTSHORNE-PUBLIC-LIBRARY-ACX2100 # Model: acx2100 # JUNOS Crypto Software Suite [12.3X54-D10.6] # JUNOS Base OS Software Suite [12.3X54-D10.6] # JUNOS Kernel Software Suite [12.3X54-D10.6] # JUNOS Base OS boot [12.3X54-D10.6] # JUNOS Packet Forwarding Engine Support (ACX) [12.3X54-D10.6] # JUNOS Online Documentation [12.3X54-D10.6] # JUNOS Routing Software Suite [12.3X54-D10.6] # # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> file list /var/tmp detail # show system uptime
+#
# /var/tmp:
# total blocks: 291872
# drwxr-xr-x 2 root field 512 Dec 31 2009 gres-tp/
Index: configs/core.hut.gra.onenet.net
===================================================================
--- configs/core.hut.gra.onenet.net (revision 144063)
+++ configs/core.hut.gra.onenet.net (working copy)
@@ -28,6 +28,16 @@
# TFEB 0 TBB PFE Chip OK
# TFEB 0 TFEB PCIE TSen OK
# TFEB 0 TFEB PCIE Chip OK
+# TFEB 0 QX 0 TSen OK
+# TFEB 0 QX 0 Chip OK
+# TFEB 0 LU 0 TSen OK
+# TFEB 0 LU 0 Chip OK
+# TFEB 0 MQ 0 TSen OK
+# TFEB 0 MQ 0 Chip OK
+# TFEB 0 TBB PFE TSen OK
+# TFEB 0 TBB PFE Chip OK
+# TFEB 0 TFEB PCIE TSen OK
+# TFEB 0 TFEB PCIE Chip OK
# Fans Fan 1 OK
# Fan 2 OK
# Fan 3 OK
Index: configs/choctaw-head-start-battiest.client.onenet.net
===================================================================
--- configs/choctaw-head-start-battiest.client.onenet.net (revision 144061)
+++ configs/choctaw-head-start-battiest.client.onenet.net (working copy)
@@ -1,6 +1,7 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at CHOCTAW-HEAD-START-BATTIEST-TAG-004329> show system commit
+# show chassis environment
# 2016-06-01 13:29:23 CDT by sean via cli
# 2016-06-01 12:28:10 CDT by sean via cli
# 2016-06-01 12:26:37 CDT by sean via cli
Index: configs/core4.okc.onenet.net
===================================================================
--- configs/core4.okc.onenet.net (revision 144063)
+++ configs/core4.okc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE4-MX480-RE0> show system commit
+# 2016-06-28 00:45:38 CDT by andrew via cli commit synchronize
# 2016-06-26 21:00:14 CDT by andrew via cli commit synchronize
# 2016-06-25 00:27:38 CDT by andrew via cli commit synchronize
# 2016-06-24 20:57:50 CDT by andrew via cli commit confirmed, rollback in 3mins synchronize
# 2016-06-24 20:21:53 CDT by andrew via cli commit synchronize
# 2016-06-24 10:58:36 CDT by andrew via cli commit synchronize
-# 2016-06-23 16:21:58 CDT by andrew via cli commit synchronize
# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -430,7 +430,7 @@
# grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime
# System booted: 2014-09-16 23:49 CDT
# Protocols started: 2014-09-16 23:51 CDT
-# Last configured: 2016-06-26 21:00 CDT by andrew
+# Last configured: 2016-06-28 00:45 CDT by andrew
#
# {master}
# grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse
@@ -993,7 +993,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE4-MX480-RE0> show configuration
-## Last commit: 2016-06-26 21:00:14 CDT by andrew
+## Last commit: 2016-06-28 00:45:38 CDT by andrew
version 12.3R7.7;
groups {
re0 {
@@ -6594,9 +6594,10 @@
interface lo0.0;
}
l2circuit {
- neighbor 164.58.199.224 {
+ neighbor 164.58.199.222 {
interface xe-0/1/1.101 {
virtual-circuit-id 2544;
+ ignore-encapsulation-mismatch;
ignore-mtu-mismatch;
}
}
@@ -11673,6 +11674,7 @@
# 172.23.4.130 xe-0/0/1.206 Full 10.199.2.21
# 172.23.3.2 xe-0/0/1.207 Full 10.199.2.20
# 172.23.5.14 xe-0/0/1.208 Full 10.199.2.24
+# 172.23.3.38 xe-0/0/1.266 Full 10.199.2.26
# 172.23.0.54 xe-2/0/1.803 Full 10.199.2.127
# 172.23.0.98 xe-2/0/1.804 Full 10.199.2.79
# 172.23.4.50 xe-2/0/1.805 Full 10.199.2.116
Index: configs/core2.tul-mx960.onenet.net
===================================================================
--- configs/core2.tul-mx960.onenet.net (revision 144061)
+++ configs/core2.tul-mx960.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE2-MX960-RE0> show system commit
+# 2016-06-28 00:45:27 CDT by andrew via cli commit confirmed, rollback in 10mins synchronize
# 2016-06-27 21:33:40 CDT by andrew via cli commit synchronize
# 2016-06-26 22:13:55 CDT by andrew via cli commit synchronize
# 2016-04-05 20:31:31 CDT by andrew via cli commit synchronize
# 2016-04-05 20:29:34 CDT by andrew via cli commit synchronize
# 2016-04-05 20:18:34 CDT by andrew via cli commit synchronize
-# 2016-04-05 19:23:44 CDT by andrew via cli commit synchronize
# grnoc-mon at TULSA-CORE2-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -478,7 +478,7 @@
# grnoc-mon at TULSA-CORE2-MX960-RE0> show system uptime
# System booted: 2016-03-20 01:35 CDT
# Protocols started: 2016-03-20 01:37 CDT
-# Last configured: 2016-06-27 21:33 CDT by andrew
+# Last configured: 2016-06-28 00:45 CDT by andrew
#
# {master}
# grnoc-mon at TULSA-CORE2-MX960-RE0> show interface terse
@@ -623,8 +623,20 @@
#et-3/3/0 up up
#et-3/3/0.42 up up
#et-3/3/0.32767 up up
-#et-7/0/0 up down
-#et-7/0/0.32767 up down
+#et-7/0/0 up up
+#et-7/0/0.101 up up
+#et-7/0/0.250 up up
+#et-7/0/0.251 up up
+#et-7/0/0.252 up up
+#et-7/0/0.257 up up
+#et-7/0/0.258 up up
+#et-7/0/0.982 up up
+#et-7/0/0.993 up up
+#et-7/0/0.996 up up
+#et-7/0/0.997 up up
+#et-7/0/0.998 up up
+#et-7/0/0.3920 up up
+#et-7/0/0.32767 up up
#lc-7/0/0 up up
#lc-7/0/0.32769 up up
#pfe-7/0/0 up up
@@ -683,7 +695,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE2-MX960-RE0> show configuration
-## Last commit: 2016-06-27 21:33:40 CDT by andrew
+## Last commit: 2016-06-28 00:45:27 CDT by andrew
version 13.3R8.7;
groups {
re0 {
@@ -1319,6 +1331,132 @@
flexible-vlan-tagging;
mtu 9192;
encapsulation flexible-ethernet-services;
+ unit 101 {
+ description "L2-CROSS 10GE to AREON-QWEST CIR000XXXX";
+ encapsulation vlan-ccc;
+ vlan-id 101;
+ }
+ unit 250 {
+ description "UPSTREAM L3 XX to ^ AREON Commodity ^ CIR000XXXX";
+ vlan-id 250;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.16.241/30;
+ }
+ }
+ unit 251 {
+ description "FUTURE NETFLIX IPV4 [NO-MONITOR]";
+ vlan-id 251;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.16.5/30;
+ }
+ }
+ unit 252 {
+ description "FUTURE NETFLIX IPV6 [NO-MONITOR]";
+ vlan-id 252;
+ family inet6 {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 2610:1d8:2600::8/127;
+ }
+ }
+ unit 257 {
+ description "UPSTREAM L3 XX to ^ AREON(NETFX - DALLAS - V4) ^ CIR000XXXX [NO-MONITOR]";
+ vlan-id 257;
+ family inet {
+ sampling {
+ input;
+ }
+ address 198.45.55.21/31;
+ }
+ }
+ unit 258 {
+ description "UPSTREAM L3 XX to ^ AREON(NETFX - DALLAS - V6) ^ CIR000XXXX [NO-MONITOR]";
+ vlan-id 258;
+ family inet6 {
+ sampling {
+ input;
+ }
+ address 2620:10c:700b:14::2/126;
+ }
+ }
+ unit 982 {
+ vlan-id 982;
+ family inet {
+ sampling {
+ input;
+ }
+ address 10.10.10.1/30;
+ }
+ }
+ unit 993 {
+ description "UPSTREAM L3 XX to ^ AREON BGP IPv4 ^ CIR0004482";
+ vlan-id 993;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 156.110.202.157/30;
+ }
+ }
+ unit 996 {
+ description "UPSTREAM L3 XX to ^ AREON BGP IPv6 ^ CIR0005067";
+ vlan-id 996;
+ family inet {
+ sampling {
+ input;
+ }
+ }
+ family inet6 {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 2610:1d8:2600::/127;
+ }
+ }
+ unit 997 {
+ description "UPSTREAM L3 XX to ^ COGENT IPv4 (via AREON) ^ CIR0005068";
+ vlan-id 997;
+ family inet {
+ filter {
+ input ABUSE-BCP38-INBOUND;
+ }
+ sampling {
+ input;
+ }
+ address 38.104.198.70/30;
+ }
+ }
+ unit 998 {
+ description "UPSTREAM L3 XX to ^ COGENT-IPv6 (via AREON) ^ CIR0005069";
+ vlan-id 998;
+ family inet {
+ sampling {
+ input;
+ }
+ }
+ family inet6 {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 2001:550:2:2e::e/126;
+ }
+ }
+ unit 3920 {
+ encapsulation vlan-ccc;
+ vlan-id-range 3920-3939;
+ }
}
ae0 {
description "CORE 20GE to core2.okc AE2";
@@ -1715,6 +1853,104 @@
description TUL-CORE6-IBGP-V4;
}
}
+ group EBGP-AREON-COMMODITY-V4 {
+ type external;
+ description EBGP-AREON-COMMODITY-V4;
+ import EBGP-AREON-COMMODITY-V4-IMPORT;
+ family inet {
+ any;
+ }
+# authentication-#key <removed>;
+ export EBGP-AREON-COMMODITY-V4-EXPORT;
+ neighbor 164.58.16.242 {
+ remove-private;
+ peer-as 40581;
+ }
+ }
+ group EBGP-NETFLIX-AS2906 {
+ type external;
+ family inet {
+ any;
+ }
+ export EBGP-NETFLIX-EXPORT;
+ remove-private;
+ peer-as 2906;
+ neighbor 164.58.16.6 {
+ passive;
+ }
+ neighbor 198.45.55.20 {
+ passive;
+ }
+ }
+ group EBGP-NETFLIX-AS2906-V6 {
+ type external;
+ family inet6 {
+ any;
+ }
+ export EBGP-NETFLIX-EXPORT-V6;
+ peer-as 2906;
+ neighbor 2610:1d8:2600::9 {
+ passive;
+ }
+ neighbor 2620:10c:700b:14::1 {
+ passive;
+ }
+ }
+ group EBGP-AREON-V4 {
+ type external;
+ description EBGP-AREON-V4-82005aCd;
+ import [ EBGP-AREON-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+# authentication-#key <removed>;
+ export EBGP-AREON-EXPORT;
+ neighbor 156.110.202.158 {
+ remove-private;
+ peer-as 40581;
+ }
+ }
+ group EBGP-COGENT-AS174 {
+ type external;
+ description EBGP-COGENT-AS174;
+ import [ EBGP-COGENT-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+# authentication-#key <removed>;
+ export EBGP-COGENT-EXPORT;
+ neighbor 38.104.198.69 {
+ remove-private;
+ peer-as 174;
+ }
+ }
+ group EBGP-AREON-V6 {
+ type external;
+ description EBGP-AREON-V6-82005aCd;
+ import EBGP-AREON-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+# authentication-#key <removed>;
+ export EBGP-AREON-V6-EXPORT;
+ neighbor 2610:1d8:2600::1 {
+ remove-private;
+ peer-as 40581;
+ }
+ }
+ group EBGP-COGENT-AS174-V6 {
+ type external;
+ description EBGP-COGENT-AS174-V6;
+ import EBGP-COGENT-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+ export EBGP-COGENT-V6-EXPORT;
+ neighbor 2001:550:2:2e::d {
+ remove-private;
+ peer-as 174;
+ }
+ }
}
isis {
apply-groups ISIS-LEVEL2;
@@ -1969,6 +2205,22 @@
version 2;
}
}
+ l2circuit {
+ neighbor 164.58.199.228 {
+ interface et-7/0/0.3920 {
+ virtual-circuit-id 3920;
+ ignore-encapsulation-mismatch;
+ ignore-mtu-mismatch;
+ }
+ }
+ neighbor 164.58.199.214 {
+ interface et-7/0/0.101 {
+ virtual-circuit-id 2544;
+ ignore-encapsulation-mismatch;
+ ignore-mtu-mismatch;
+ }
+ }
+ }
lldp {
interface xe-0/0/0;
interface xe-0/0/1;
@@ -2032,6 +2284,97 @@
prefix-list PRE-L0-SOURCES {
apply-path "interfaces lo0 unit <*> family inet address <164.*>";
}
+ prefix-list VIDEO-ABUSE {
+ 4.59.116.99/32;
+ 5.135.127.38/32;
+ 8.26.191.15/32;
+ 27.251.106.77/32;
+ 27.251.150.44/32;
+ 41.72.146.236/32;
+ 46.170.123.99/32;
+ 50.57.99.176/32;
+ 50.63.58.104/32;
+ 54.225.86.175/32;
+ 62.68.135.112/32;
+ 62.75.189.212/32;
+ 64.221.57.243/32;
+ 65.23.95.226/32;
+ 66.241.103.37/32;
+ 68.235.34.138/32;
+ 69.11.252.171/32;
+ 69.156.233.135/32;
+ 70.166.27.17/32;
+ 70.182.140.72/32;
+ 72.249.45.157/32;
+ 74.95.24.49/32;
+ 75.101.143.102/32;
+ 80.45.167.51/32;
+ 82.35.15.107/32;
+ 82.146.33.58/32;
+ 82.188.213.26/32;
+ 83.16.211.90/32;
+ 85.9.50.130/32;
+ 85.25.109.205/32;
+ 85.116.199.189/32;
+ 85.214.216.176/32;
+ 85.236.48.60/32;
+ 89.36.133.86/32;
+ 89.175.189.244/32;
+ 92.39.60.91/32;
+ 92.87.37.56/32;
+ 94.143.64.9/32;
+ 94.180.115.53/32;
+ 98.109.76.36/32;
+ 123.30.145.15/32;
+ 123.30.180.151/32;
+ 155.210.153.18/32;
+ 157.86.6.21/32;
+ 180.42.38.252/32;
+ 190.144.8.146/32;
+ 190.210.97.99/32;
+ 192.73.243.62/32;
+ 192.198.85.133/32;
+ 192.241.216.209/32;
+ 194.54.9.11/32;
+ 194.186.1.25/32;
+ 195.120.220.31/32;
+ 199.27.89.22/32;
+ 200.23.251.182/32;
+ 200.43.140.19/32;
+ 201.33.235.198/32;
+ 201.174.78.62/32;
+ 202.57.32.35/32;
+ 202.65.119.162/32;
+ 202.65.121.186/32;
+ 202.215.5.237/32;
+ 203.143.104.114/32;
+ 203.162.79.155/32;
+ 203.171.242.251/32;
+ 206.191.192.4/32;
+ 209.177.93.2/32;
+ 210.125.64.233/32;
+ 212.48.68.23/32;
+ 212.152.181.211/32;
+ 212.182.57.150/32;
+ 213.21.169.14/32;
+ 217.17.48.129/32;
+ 219.146.12.180/32;
+ }
+ prefix-list MARTIANS-IPV4 {
+ 0.0.0.0/8;
+ 10.0.0.0/8;
+ 127.0.0.0/8;
+ 169.254.0.0/16;
+ 172.16.0.0/12;
+ 192.0.0.0/24;
+ 192.0.2.0/24;
+ 192.168.0.0/16;
+ 198.18.0.0/15;
+ 198.51.100.0/24;
+ 203.0.113.0/24;
+ 224.0.0.0/4;
+ 240.0.0.0/4;
+ }
policy-statement COMANCHE-PS-VRF-EXPORT {
term 1 {
from protocol static;
@@ -2074,6 +2417,319 @@
then reject;
}
}
+ policy-statement COMMODITY-PREFIXES-LIST {
+ term PREFIXES {
+ from {
+ route-filter 64.112.240.0/20 exact;
+ route-filter 66.186.144.0/20 exact;
+ route-filter 129.15.0.0/16 exact;
+ route-filter 129.15.0.0/17 exact;
+ route-filter 129.15.128.0/17 exact;
+ route-filter 129.244.0.0/16 exact;
+ route-filter 129.244.0.0/17 exact;
+ route-filter 129.244.128.0/17 exact;
+ route-filter 139.78.0.0/16 exact;
+ route-filter 152.123.8.0/21 exact;
+ route-filter 155.178.0.0/16 exact;
+ route-filter 155.178.32.0/23 exact;
+ route-filter 155.178.34.0/24 exact;
+ route-filter 156.110.0.0/16 exact;
+ route-filter 156.110.144.0/20 exact;
+ route-filter 156.110.240.0/20 exact;
+ route-filter 157.142.0.0/16 exact;
+ route-filter 162.58.0.0/16 exact;
+ route-filter 164.58.0.0/16 exact;
+ route-filter 174.77.146.0/24 exact;
+ route-filter 192.31.83.0/24 exact;
+ route-filter 192.35.96.0/24 exact;
+ route-filter 192.35.97.0/24 exact;
+ route-filter 192.35.98.0/24 exact;
+ route-filter 192.78.4.0/24 exact;
+ route-filter 192.135.141.0/24 exact;
+ route-filter 192.146.206.0/24 exact;
+ route-filter 192.149.244.0/24 exact;
+ route-filter 192.153.53.0/24 exact;
+ route-filter 192.173.32.0/19 orlonger;
+ route-filter 192.173.49.0/24 exact;
+ route-filter 192.198.4.0/22 exact;
+ route-filter 192.203.164.0/24 exact;
+ route-filter 192.206.65.0/24 exact;
+ route-filter 192.231.56.0/24 exact;
+ route-filter 192.234.12.0/24 exact;
+ route-filter 192.234.13.0/24 exact;
+ route-filter 198.11.4.0/24 exact;
+ route-filter 198.11.5.0/24 exact;
+ route-filter 198.11.6.0/24 exact;
+ route-filter 198.11.7.0/24 exact;
+ route-filter 198.17.223.0/24 exact;
+ route-filter 198.102.159.0/24 exact;
+ route-filter 198.178.194.0/24 exact;
+ route-filter 198.183.248.0/23 exact;
+ route-filter 198.187.154.0/24 exact;
+ route-filter 198.204.126.0/24 exact;
+ route-filter 199.27.8.0/21 exact;
+ route-filter 199.38.147.0/24 exact;
+ route-filter 199.120.0.0/21 exact;
+ route-filter 199.120.8.0/22 exact;
+ route-filter 199.164.253.0/24 exact;
+ route-filter 199.181.88.0/24 exact;
+ route-filter 199.181.89.0/24 exact;
+ route-filter 199.181.90.0/24 exact;
+ route-filter 199.181.91.0/24 exact;
+ route-filter 199.184.200.0/24 exact;
+ route-filter 199.184.201.0/24 exact;
+ route-filter 199.184.202.0/24 exact;
+ route-filter 199.184.203.0/24 exact;
+ route-filter 199.190.128.0/23 exact;
+ route-filter 199.245.163.0/24 exact;
+ route-filter 199.245.164.0/24 exact;
+ route-filter 199.245.165.0/24 exact;
+ route-filter 199.245.166.0/24 exact;
+ route-filter 199.248.134.0/23 exact;
+ route-filter 199.253.0.0/21 exact;
+ route-filter 199.253.8.0/24 exact;
+ route-filter 199.253.9.0/24 exact;
+ route-filter 204.29.164.0/24 exact;
+ route-filter 204.61.0.0/21 exact;
+ route-filter 204.61.8.0/22 exact;
+ route-filter 204.61.12.0/23 exact;
+ route-filter 204.62.16.0/21 exact;
+ route-filter 204.62.24.0/22 exact;
+ route-filter 204.63.216.0/21 exact;
+ route-filter 204.63.222.0/24 orlonger;
+ route-filter 204.87.64.0/18 exact;
+ route-filter 204.107.242.0/24 exact;
+ route-filter 204.108.2.0/23 exact;
+ route-filter 204.108.2.0/24 exact;
+ route-filter 204.108.3.0/24 exact;
+ route-filter 204.126.138.0/23 exact;
+ route-filter 204.126.144.0/23 exact;
+ route-filter 204.126.162.0/23 exact;
+ route-filter 204.126.186.0/23 exact;
+ route-filter 204.126.188.0/24 exact;
+ route-filter 204.126.189.0/24 exact;
+ route-filter 204.126.190.0/24 exact;
+ route-filter 204.126.191.0/24 exact;
+ route-filter 204.154.112.0/21 exact;
+ route-filter 204.236.32.0/19 exact;
+ route-filter 205.143.216.0/21 exact;
+ route-filter 205.153.220.0/22 exact;
+ route-filter 205.235.88.0/23 exact;
+ route-filter 206.61.156.0/24 exact;
+ route-filter 206.202.192.0/18 exact;
+ route-filter 206.202.208.0/23 exact;
+ route-filter 206.202.208.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement COMMODITY-PREFIXES-LIST-V6 {
+ term PREFIXES {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ route-filter 2001:468:a00::/40 exact;
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-COMMODITY-V4-EXPORT {
+ term COMMODITY-PREFIX-LIST {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term MORE-SPECIFIC {
+ from {
+ route-filter 164.58.172.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-COMMODITY-V4-IMPORT {
+ term REJECT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then reject;
+ }
+ term APPLE {
+ from {
+ route-filter 17.0.0.0/8 orlonger;
+ }
+ then {
+ community set 5078:40581;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term STEP-2 {
+ from community 5078:19401;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-IMPORT {
+ term ASU-PREPEND {
+ then {
+ community set 5078:40581;
+ as-path-prepend "5078 5078 5078 5078 5078 5078";
+ accept;
+ }
+ }
+ term STEP-1 {
+ then {
+ community set 5078:40581;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-V6-EXPORT {
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:40581;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-EXPORT {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ community add 174:3001;
+ as-path-prepend "5078 5078 5078";
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-IMPORT {
+ term STEP-1 {
+ then {
+ local-preference subtract 20;
+ community set 5078:174;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST-V6;
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:174;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NETFLIX-EXPORT {
+ term ONENET {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ metric 10;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NETFLIX-EXPORT-V6 {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST-V6;
+ then {
+ metric 10;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-EXPORT {
+ term STEP-1 {
+ from {
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
+ policy-statement EBGP-REJECT-IMPORT {
+ term STEP-1 {
+ from {
+ route-filter 0.0.0.0/0 through 0.0.0.0/32;
+ prefix-list MARTIANS-IPV4;
+ }
+ then reject;
+ }
+ }
policy-statement LOAD-BALANCE {
then {
load-balance per-packet;
@@ -2135,6 +2791,10 @@
}
}
}
+ community 174:3001 members 174:3001;
+ community 5078:174 members 5078:174;
+ community 5078:19401 members 5078:19401;
+ community 5078:40581 members 5078:40581;
community COMANCHE-PS-VPN members target:5078:2537;
community ONENET-MGMT-VPN members target:5078:2543;
community TULSACORE2 members 5078:222;
@@ -2396,7 +3056,49 @@
}
}
}
+ filter ABUSE-BCP38-INBOUND {
+ term 1 {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ }
+ then {
+ discard;
+ }
+ }
+ term 1.5 {
+ from {
+ source-port 19;
+ destination-port 19;
+ }
+ then policer CHARGEN;
+ }
+ term VIDEO {
+ from {
+ source-prefix-list {
+ VIDEO-ABUSE;
+ }
+ destination-port [ 1720 5060 5061 1719 ];
+ }
+ then {
+ count VIDEO-ABUSE;
+ discard;
+ }
+ }
+ term 2 {
+ then accept;
+ }
+ }
}
+ policer CHARGEN {
+ if-exceeding {
+ bandwidth-limit 400k;
+ burst-size-limit 100k;
+ }
+ then discard;
+ }
}
routing-instances {
COMANCHE-PS-L3VPN {
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net (revision 144063)
+++ configs/maysville-hs.client.onenet.net (working copy)
@@ -1,6 +1,7 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system commit
+# show chassis environment
# 2016-01-27 15:43:17 CST by joel via cli commit confirmed, rollback in 5mins
# 2015-10-26 14:44:11 CDT by admin via cli
# 2015-10-26 18:25:25 CDT by root via cli
@@ -15,6 +16,7 @@
# Routing Engine CPU OK
# Fans SRX240 PowerSupply fan 1 OK
# SRX240 PowerSupply fan 2 OK
+# show chassis firmware
# SRX240 CPU fan 1 OK
# SRX240 CPU fan 2 OK
# SRX240 IO fan 1 OK
@@ -41,15 +43,14 @@
# Power Supply 0
#
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis hardware models
+# show chassis routing-engine
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis routing-engine
# Routing Engine status:
# Serial ID ACLC7669
#
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis scb
-# show chassis sfm detail
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis sfm detail
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show chassis ssb
-# show system boot-messages
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system boot-messages
# kld_map_v: 0x8ff80000, kld_map_p: 0x0
# Copyright (c) 1996-2014, Juniper Networks, Inc.
@@ -114,10 +115,11 @@
# WARNING: / was not properly dismounted
#
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show version
-# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] # file list /var/tmp detail # # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r-- 1 root wheel 11 May 19 2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MAYSVILLE-HS-LEASED-ASSET-TAG-004887 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] # # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> file list /var/tmp detail # lrw-r--r-- 1 root wheel 11 May 19 2014 /var/tmp@ -> /cf/var/tmp
# total files: 1
#
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system uptime
+# show interface terse
# System booted: 2016-06-13 09:40 CDT
# Protocols started: 2016-06-13 09:43 CDT
# Last configured: 2016-01-27 15:43 CST by joel
@@ -598,6 +600,7 @@
}
}
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show ospf neighbor
+# show bfd session
# OSPF instance is not running
#
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show bfd session
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net (revision 144033)
+++ configs/meeker-ps.client.onenet.net (working copy)
@@ -10,6 +10,7 @@
# grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show chassis environment
# Class Item Status Measurement
# Temp Routing Engine OK
+# show chassis firmware
# Routing Engine CPU OK
# Fans SRX240 PowerSupply fan 1 OK
# SRX240 PowerSupply fan 2 OK
@@ -25,6 +26,7 @@
# FWDD O/S Version 12.1X44-D35.5 by builder on 2014-05
#
# grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show chassis fpc detail
+# show chassis hardware
# Slot 0 information:
# State Online
# Total CPU DRAM ---- CPU less FPC ----
More information about the Nocrancid
mailing list