[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Mar 23 01:03:19 CDT 2016


Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 140995)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -1078,8 +1078,8 @@
 #t1-3/3/0:3:1 down down
 #t1-3/3/0:3:2 up up
 #t1-3/3/0:3:2.0 up up
-#t1-3/3/0:3:3 up down
-#t1-3/3/0:3:3.0 up down
+#t1-3/3/0:3:3 up up
+#t1-3/3/0:3:3.0 up up
 #t1-3/3/0:3:4 down down
 #t1-3/3/0:3:5 down down
 #t1-3/3/0:3:6 up up
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 140995)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -1,7 +1,6 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system commit 
-# show chassis environment
 #   2016-01-29 13:21:47 CST by sky via cli
 #   2015-10-16 09:22:41 CDT by andrew via cli
 #   2015-05-28 22:37:23 CDT by andrew via cli commit confirmed, rollback in 3mins
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 140993)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show system commit 
+# show chassis environment
 #   2016-01-27 15:43:17 CST by joel via cli commit confirmed, rollback in 5mins
 #   2015-10-26 14:44:11 CDT by admin via cli
 #   2015-10-26 18:25:25 CDT by root via cli
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 140994)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -110,7 +110,7 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show version 
-# Hostname: MEEKER-PS-LEASED-ASSET-TAG-004947 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# file list /var/tmp detail # Hostname: MEEKER-PS-LEASED-ASSET-TAG-004947 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show system uptime 
Index: configs/okc-vpn-cluster.okc.onenet.net
===================================================================
--- configs/okc-vpn-cluster.okc.onenet.net	(revision 140935)
+++ configs/okc-vpn-cluster.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show system commit 
+#   2016-03-23 00:25:52 CDT by andrew via cli
 #   2016-03-06 02:05:45 CST by andrew via cli
 #   2016-03-02 10:23:11 CST by andrew via cli commit confirmed, rollback in 3mins
 #   2016-03-01 23:35:59 CST by andrew via cli
 #   2016-03-01 23:26:20 CST by andrew via cli commit confirmed, rollback in 10mins
 #   2016-03-01 22:54:10 CST by andrew via cli commit confirmed, rollback in 10mins
-#   2016-03-01 22:48:17 CST by andrew via cli commit confirmed, rollback in 10mins
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show chassis environment 
 # node0:
 # --------------------------------------------------------------------------
@@ -234,12 +234,12 @@
 # --------------------------------------------------------------------------
 # System booted: 2016-03-01 19:49 CST 
 # Protocols started: 2016-03-01 20:04 CST 
-# Last configured: 2016-03-06 02:05 CST  by andrew
+# Last configured: 2016-03-23 00:25 CDT  by andrew
 # 
 # node1:
 # --------------------------------------------------------------------------
 # System booted: 2016-03-01 19:35 CST 
-# Last configured: 2016-03-06 02:05 CST  by root
+# Last configured: 2016-03-23 00:25 CDT  by root
 # 
 # {primary:node0}
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show interface terse 
@@ -352,7 +352,7 @@
 #tap up up
 #vlan up up
 # grnoc-mon at OKC-VPN-CLUSTER-NODE0> show configuration 
-## Last commit: 2016-03-06 02:05:45 CST by andrew
+## Last commit: 2016-03-23 00:25:52 CDT by andrew
 version 12.1X46-D40.2;
 groups {
     node0 {
@@ -1708,7 +1708,7 @@
             ospf {
                 area 0.0.0.0 {
                     interface reth1.602;
-                    interface st0.10;
+                    inactive: interface st0.10;
                 }
             }
         }
@@ -1721,7 +1721,7 @@
             ospf {
                 area 0.0.0.0 {
                     interface reth1.603;
-                    interface st0.11;
+                    inactive: interface st0.11;
                 }
             }
         }
@@ -1753,7 +1753,7 @@
                     interface st0.1;
                     interface st0.3;
                     interface st0.6;
-                    interface st0.9;
+                    inactive: interface st0.9;
                 }
             }
         }
Index: configs/core.hut.ard.onenet.net
===================================================================
--- configs/core.hut.ard.onenet.net	(revision 140984)
+++ configs/core.hut.ard.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ARDMORE-MX40> show system commit 
+#   2016-03-23 00:25:33 CDT by andrew via cli
+#   2016-03-23 00:18:59 CDT by andrew via cli
+#   2016-03-23 00:17:41 CDT by andrew via cli
+#   2016-03-23 00:16:40 CDT by andrew via cli commit confirmed, rollback in 3mins
 #   2016-03-22 13:59:01 CDT by andrew via cli
 #   2016-03-22 13:57:42 CDT by andrew via cli
-#   2016-03-21 15:01:15 CDT by andrew via cli
-#   2016-03-16 17:48:38 CDT by andrew via cli
-#   2016-03-16 17:48:11 CDT by andrew via cli
-#   2016-03-16 17:01:47 CDT by andrew via cli
 # grnoc-mon at ARDMORE-MX40> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -230,7 +230,7 @@
 # grnoc-mon at ARDMORE-MX40> show system uptime 
 # System booted: 2016-03-14 01:34 CDT 
 # Protocols started: 2016-03-14 01:36 CDT 
-# Last configured: 2016-03-22 13:59 CDT  by andrew
+# Last configured: 2016-03-23 00:25 CDT  by andrew
 # 
 # grnoc-mon at ARDMORE-MX40> show interface terse 
 #Interface Admin Link
@@ -245,6 +245,8 @@
 #xe-0/0/0.32767 up up
 #xe-0/0/1 up up
 #xe-0/0/1.302 up up
+#xe-0/0/1.1302 up up
+#xe-0/0/1.2302 up up
 #xe-0/0/1.32767 up up
 #ge-1/0/0 up up
 #ge-1/0/0.80 up up
@@ -309,6 +311,8 @@
 #lsi.1 up up
 #lsi.2 up up
 #lsi.3 up up
+#lsi.4 up up
+#lsi.5 up up
 #lsi.1048583 up up
 #lsi.1048584 up up
 #lsi.1048585 up up
@@ -338,7 +342,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at ARDMORE-MX40> show configuration 
-## Last commit: 2016-03-22 13:59:01 CDT by andrew
+## Last commit: 2016-03-23 00:25:33 CDT by andrew
 version 13.3R8.7;
 system {
     host-name ARDMORE-MX40;
@@ -522,17 +526,58 @@
         }
     }
     xe-0/0/1 {
-        description "NNI-TO-CABLE-ONE-10G-CIR000XXXX [ORDERED]";
+        description NNI-TO-CABLE-ONE-10G-CIR000XXXX;
         flexible-vlan-tagging;
         mtu 9192;
         encapsulation flexible-ethernet-services;
         unit 302 {
-            description "DHS-CARTER-COUNTY [ORDERED]";
+            description DHS-CARTER-COUNTY-MGMT-10M-CIR0019051;
+            bandwidth 10m;
             vlan-tags outer 302 inner 600;
             family inet {
+                rpf-check {
+                    mode loose;
+                }
+                mtu 1500;
+                policer {
+                    input 10M-POL;
+                    output 10M-POL;
+                }
                 address 10.119.72.34/31;
             }
         }
+        unit 1302 {
+            description DHS-CARTER-COUNTY-OKC-DATA-10M-CIR0019051;
+            bandwidth 10m;
+            vlan-tags outer 302 inner 601;
+            family inet {
+                rpf-check {
+                    mode loose;
+                }
+                mtu 1500;
+                policer {
+                    input 10M-POL;
+                    output 10M-POL;
+                }
+                address 10.119.52.34/31;
+            }
+        }
+        unit 2302 {
+            description DHS-CARTER-COUNTY-GUEST-10M-CIR0019051;
+            bandwidth 10m;
+            vlan-tags outer 302 inner 602;
+            family inet {
+                rpf-check {
+                    mode loose;
+                }
+                mtu 1500;
+                policer {
+                    input 10M-POL;
+                    output 10M-POL;
+                }
+                address 10.119.56.34/31;
+            }
+        }
     }
     ge-1/0/0 {
         description ODOT-ARDMORE-RESIDENCY-OCAN-DARK-FIBER-CIR0018910;
@@ -1062,6 +1107,186 @@
     prefix-list PRE-L0-SOURCES {
         apply-path "interfaces lo0 unit <*> family inet address <164.*>";
     }
+    prefix-list PRE-BGP-RI-ALLOW {
+        apply-path "routing-instances <*> protocols bgp group <*> neighbor <*>";
+    }
+    policy-statement DHS-DATA-VRF-EXPORT {
+        term 1 {
+            from protocol static;
+            then {
+                community add DHS-DATA-VPN;
+                accept;
+            }
+        }
+        term 2 {
+            from protocol direct;
+            then {
+                community add DHS-DATA-VPN;
+                accept;
+            }
+        }
+        term 3 {
+            from protocol ospf;
+            then {
+                community add DHS-DATA-VPN;
+                accept;
+            }
+        }
+        term 4 {
+            from protocol bgp;
+            then {
+                community add DHS-DATA-VPN;
+                accept;
+            }
+        }
+    }
+    policy-statement DHS-DATA-VRF-IMPORT {
+        term 1 {
+            from {
+                protocol bgp;
+                community DHS-DATA-VPN;
+            }
+            then accept;
+        }
+        term 2 {
+            then reject;
+        }
+    }
+    policy-statement DHS-GUEST-VRF-EXPORT {
+        term 1 {
+            from protocol static;
+            then {
+                community add DHS-GUEST-VPN;
+                accept;
+            }
+        }
+        term 2 {
+            from protocol direct;
+            then {
+                community add DHS-GUEST-VPN;
+                accept;
+            }
+        }
+        term 3 {
+            from protocol ospf;
+            then {
+                community add DHS-GUEST-VPN;
+                accept;
+            }
+        }
+        term 4 {
+            from protocol bgp;
+            then {
+                community add DHS-GUEST-VPN;
+                accept;
+            }
+        }
+    }
+    policy-statement DHS-GUEST-VRF-IMPORT {
+        term 1 {
+            from {
+                protocol bgp;
+                community DHS-GUEST-VPN;
+            }
+            then accept;
+        }
+        term 2 {
+            then reject;
+        }
+    }
+    policy-statement EBGP-DHS-DATA-SITE-EXPORT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EBGP-DHS-DATA-SITE-IMPORT {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term ACCEPT-ALL {
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EBGP-DHS-GUEST-SITE-EXPORT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EBGP-DHS-GUEST-SITE-IMPORT {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term ACCEPT-ALL {
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EBGP-OMES-MGMT-SITE-EXPORT {
+        term SEND-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then accept;
+        }
+        term ONENET-MGMT {
+            from {
+                route-filter 10.119.255.0/24 orlonger;
+            }
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
+    policy-statement EBGP-OMES-MGMT-SITE-IMPORT {
+        term REJECT-DEFAULT {
+            from {
+                route-filter 0.0.0.0/0 exact;
+            }
+            then reject;
+        }
+        term ACCEPT-ALL {
+            then accept;
+        }
+        term REJECT-ALL-ELSE {
+            then reject;
+        }
+    }
     policy-statement EXPORT-DEFAULT {
         term DEFAULT {
             from {
@@ -1303,6 +1528,8 @@
         }
     }
     community Ardmore members 5078:160;
+    community DHS-DATA-VPN members target:5078:2570;
+    community DHS-GUEST-VPN members target:5078:2571;
     community ODOT-VPN members target:5078:2538;
     community OMES-AGENCY-DATA-VPN members target:5078:2548;
     community OMES-MGMT-VPN members target:5078:2550;
@@ -1408,6 +1635,7 @@
                 from {
                     prefix-list {
                         PRE-BGP-ALLOW;
+                        PRE-BGP-RI-ALLOW;
                     }
                     protocol tcp;
                     port 179;
@@ -1552,8 +1780,71 @@
         }
         then discard;
     }
+    policer 10M-POL {
+        if-exceeding {
+            bandwidth-limit 10m;
+            burst-size-limit 2m;
+        }
+        then discard;
+    }
 }
 routing-instances {
+    DHS-DATA-L3VPN {
+        description DHS-DATA-L3VPN;
+        instance-type vrf;
+        interface xe-0/0/1.1302;
+        route-distinguisher 164.58.199.160:2570;
+        vrf-import DHS-DATA-VRF-IMPORT;
+        vrf-export DHS-DATA-VRF-EXPORT;
+        vrf-target target:5078:2570;
+        vrf-table-label;
+        protocols {
+            bgp {
+                group EBGP-DHS-DATA-SITE {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    local-as 64569 loops 3 no-prepend-global-as;
+                    neighbor 10.119.52.35 {
+                        description EBGP-DHS-CARTER-COUNTY-DATA-10M-CIR0019051;
+                        import EBGP-DHS-DATA-SITE-IMPORT;
+#                        authentication-#key <removed>;
+                        export EBGP-DHS-DATA-SITE-EXPORT;
+                        peer-as 64591;
+                    }
+                }
+            }
+        }
+    }
+    DHS-GUEST-L3VPN {
+        description DHS-GUEST-L3VPN;
+        instance-type vrf;
+        interface xe-0/0/1.2302;
+        route-distinguisher 164.58.199.160:2571;
+        vrf-import DHS-GUEST-VRF-IMPORT;
+        vrf-export DHS-GUEST-VRF-EXPORT;
+        vrf-target target:5078:2571;
+        vrf-table-label;
+        protocols {
+            bgp {
+                group EBGP-DHS-GUEST-SITE {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    local-as 64569 loops 3 no-prepend-global-as;
+                    neighbor 10.119.56.35 {
+                        description EBGP-DHS-CARTER-COUNTY-GUEST-10M-CIR0019051;
+                        import EBGP-DHS-DATA-SITE-IMPORT;
+#                        authentication-#key <removed>;
+                        export EBGP-DHS-DATA-SITE-EXPORT;
+                        peer-as 64591;
+                    }
+                }
+            }
+        }
+    }
     ODOT-L3VPN {
         description ODOT-L3VPN;
         instance-type vrf;
@@ -1620,6 +1911,7 @@
     OMES-MGMT-L3VPN {
         description OMES-MGMT-L3VPN;
         instance-type vrf;
+        interface xe-0/0/1.302;
         interface ge-1/0/0.500;
         interface ge-1/0/1.500;
         interface ge-1/0/3.500;
@@ -1629,6 +1921,22 @@
         vrf-target target:5078:2550;
         vrf-table-label;
         protocols {
+            bgp {
+                group EBGP-OMES-MGMT-SITE {
+                    type external;
+                    family inet {
+                        unicast;
+                    }
+                    local-as 64569 loops 3 no-prepend-global-as;
+                    neighbor 10.119.72.35 {
+                        description EBGP-DHS-CARTER-COUNTY-MGMT-10M-CIR0019051;
+                        import EBGP-OMES-MGMT-SITE-IMPORT;
+#                        authentication-#key <removed>;
+                        export EBGP-OMES-MGMT-SITE-EXPORT;
+                        peer-as 64591;
+                    }
+                }
+            }
             ospf {
                 export OMES-EXPORT-BGP-TO-OSPF;
                 area 10.119.40.136 {
Index: configs/hub.tsb.onenet.net
===================================================================
--- configs/hub.tsb.onenet.net	(revision 140995)
+++ configs/hub.tsb.onenet.net	(working copy)
@@ -198,7 +198,7 @@
 # -rw-rw----  1 root  field   51994624 Oct 24  2013 ifinfo.core.1
 # -rw-rw----  1 root  field   51974144 Oct 24  2013 ifinfo.core.2
 # -rw-rw----  1 root  field   52744192 Oct 24  2013 ifinfo.core.3
-# -rw-rw----  1 root  field   52727808 Mar 23 00:00 ifinfo.core.4
+# -rw-rw----  1 root  field   52727808 Mar 23 01:00 ifinfo.core.4
 # drwxrwxrwx  2 root  wheel        512 Oct 12  2012 install/
 # -rw-rw----  1 root  field   33464320 Mar 3   2014 jdiameterd.core.0
 # -rw-r--r--  1 eng   field   99542994 Apr 23  2013 jinstall-ppc-11.4R7.5-domestic-signed.tgz



More information about the Nocrancid mailing list