[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed May 11 11:03:27 CDT 2016


Index: router.db
===================================================================
--- router.db	(revision 142592)
+++ router.db	(working copy)
@@ -37,6 +37,7 @@
 cfh-adva.p.onenet.net:fsp3000:up
 chisholm-ps.client.onenet.net:juniper:up
 choctaw-interlocal-coop.client.onenet.net:juniper:up
+CHOCTAW-NATION-HEAD-START-WILBURTON.client.onenet.net:juniper:up
 choctaw-nation-tuskahoma.nid.onenet.net:fsp150:up
 ChoctawMemorialHospital-SRX.onenent.net:juniper:up
 city-of-lawton-ge114.nid.onenet.net:fsp150:up
Index: routers.up
===================================================================
--- routers.up	(revision 142521)
+++ routers.up	(working copy)
@@ -35,6 +35,7 @@
 cfh-adva.p.onenet.net:fsp3000
 chisholm-ps.client.onenet.net:juniper
 choctaw-interlocal-coop.client.onenet.net:juniper
+choctaw-nation-head-start-wilburton.client.onenet.net:juniper
 choctaw-nation-tuskahoma.nid.onenet.net:fsp150
 choctawmemorialhospital-srx.onenent.net:juniper
 city-of-lawton-ge114.nid.onenet.net:fsp150
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 142590)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -47,6 +47,7 @@
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis sfm detail
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show chassis ssb 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show system boot-messages 
+# show version
 # kld_map_v: 0x8ff80000, kld_map_p: 0x0
 # Copyright (c) 1996-2014, Juniper Networks, Inc.
 # All rights reserved.
Index: configs/odmhsas-camhc-hugo.client.onenet.net
===================================================================
--- configs/odmhsas-camhc-hugo.client.onenet.net	(revision 142590)
+++ configs/odmhsas-camhc-hugo.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at ODMHSAS-CARL-ALBERT-MHC-HUGO-SRX220> show system commit 
-# show chassis environment
 #   2016-05-02 09:33:16 CDT by admin via cli
 #   2015-04-21 19:18:58 CDT by admin via cli commit confirmed, rollback in 3mins
 #   2015-04-17 17:47:53 CDT by admin via cli commit confirmed, rollback in 10mins
 #   2015-04-16 22:43:28 CDT by admin via cli commit confirmed, rollback in 3mins
 #   2015-03-03 00:28:54 CST by root via cli
+# show chassis environment
 #   2015-03-02 22:44:09 CST by root via other
 # grnoc-mon at ODMHSAS-CARL-ALBERT-MHC-HUGO-SRX220> show chassis environment 
 # Class Item                           Status     Measurement
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 142585)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -1082,8 +1082,8 @@
 #t1-3/3/0:2:22.16 up up
 #t1-3/3/0:2:22.17 up up
 #t1-3/3/0:2:23 down down
-#t1-3/3/0:2:24 up down
-#t1-3/3/0:2:24.0 up down
+#t1-3/3/0:2:24 up up
+#t1-3/3/0:2:24.0 up up
 #t1-3/3/0:2:25 down down
 #t1-3/3/0:2:26 down down
 #t1-3/3/0:2:27 down down
@@ -1563,7 +1563,7 @@
 #t1-4/0/2:17 down down
 #t1-4/0/2:18 down down
 #t1-4/0/2:19 down down
-#t1-4/0/2:20 up up
+#t1-4/0/2:20 up down
 #t1-4/0/2:20.0 up up
 #t1-4/0/2:21 up down
 #t1-4/0/2:21.0 up down
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net	(revision 142590)
+++ configs/stringtown-high-school.client.onenet.net	(working copy)
@@ -113,7 +113,6 @@
 # total files: 1
 # 
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show system uptime 
-# show interface terse
 # System booted: 2016-04-29 11:42 CDT 
 # Protocols started: 2016-04-29 11:44 CDT 
 # Last configured: 2016-02-17 16:01 CST  by sean
@@ -173,7 +172,6 @@
 #vlan.3 up down
 #vlan.999 up down
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show configuration 
-show ospf neighbor
 ## Last commit: 2016-02-17 16:01:39 CST by sean
 version 12.1X44-D35.5;
 system {
@@ -675,7 +673,6 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show bfd session 
-quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/choctaw-nation-head-start-wilburton.client.onenet.net
===================================================================
--- configs/choctaw-nation-head-start-wilburton.client.onenet.net	(revision 142593)
+++ configs/choctaw-nation-head-start-wilburton.client.onenet.net	(working copy)
@@ -0,0 +1,615 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show system commit 
+#   2016-05-11 10:45:35 CDT by admin via cli
+#   2016-01-04 22:21:27 CST by admin via cli
+#   2016-01-04 16:15:10 CST by admin via cli
+#   2015-12-31 23:23:49 CST by root via cli
+#   2015-12-31 23:23:15 CST by root via cli
+#   2015-12-31 23:19:43 CST by root via cli
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             OK        
+# Fans  SRX240 PowerSupply fan 1       OK
+#       SRX240 PowerSupply fan 2       OK
+#       SRX240 CPU fan 1               OK
+#       SRX240 CPU fan 2               OK
+#       SRX240 IO  fan 1               OK
+#       SRX240 IO  fan 2               OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 12.1X44-D35.5 by builder on 2014-05
+# FWDD                     O/S        Version 12.1X44-D35.5 by builder on 2014-05
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                BU2615AK0776      SRX240H2
+# Routing Engine   REV 14   750-043609   ACMP4196          RE-SRX240H2
+# FPC 0                                                    FPC
+#   PIC 0                                                  16x GE Base PIC
+# Power Supply 0  
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis hardware models 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      ACMP4196
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis scb 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis sfm detail
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show chassis ssb 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2014, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 4 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 52XX CPU Rev. 0.8 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 512kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# dwc1: <Synopsis DWC OTG Controller Driver> on obio0
+# usb1: <USB Bus for DWC OTG Controller> on dwc1
+# usb1: USB revision 2.0
+# uhub2: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub2: 1 port with 1 removable, self powered
+# cpld0 on obio0
+# pcib1: <Cavium on-chip PCIe HOST bridge> on obio0
+# Disabling Octeon big bar support
+# PCIe: Waiting for port 0 to finish reset
+# PCIe: Port 0 link active, 2 lanes
+# PCIe: Waiting for port 1 to finish reset
+# PCIe: Port 1 link active, 1 lanes
+# pcib1: Initialized controller
+# pci0: <PCI bus> on pcib1
+# pcib2: <PCI-PCI bridge> irq 0 at device 0.0 on pci0
+# pci1: <PCI bus> on pcib2
+# pci1: <serial bus, USB> at device 2.0 (no driver attached)
+# pci1: <serial bus, USB> at device 2.1 (no driver attached)
+# pci1: <network> at device 7.0 (no driver attached)
+# pcib0: <Cavium on-chip PCIe HOST bridge> on obio0
+# pci2: <PCI bus> on pcib0
+# pci2: <processor> at device 0.0 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Trying to mount root from ufs:/dev/da0s1a
+# WARNING: / was not properly dismounted
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show version 
+# Hostname: CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show system uptime 
+# System booted: 2016-01-04 14:18 CST 
+# Protocols started: 2016-01-04 14:21 CST 
+# Last configured: 2016-05-11 10:45 CDT  by admin
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 up down
+#ge-0/0/2.0 up down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 down down
+#ge-0/0/7 down down
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 down down
+#ge-0/0/15 up up
+#ge-0/0/15.0 up up
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vlan.3 up up
+#vlan.999 up down
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show configuration 
+## Last commit: 2016-05-11 10:45:35 CDT by admin
+version 12.1X44-D35.5;
+system {
+    host-name CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.253.10;
+        164.58.198.10;
+    }
+    radius-server {
+        156.110.31.11 {
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.22.134;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 164.58.22.134;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class admin;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any notice;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file traffic {
+            any any;
+            match RT_FLOW_SESSION;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        description "L3 INTERFACE - UNTRUST-WAN - 164.58.22.134/30";
+        speed 100m;
+        link-mode full-duplex;
+        gigether-options {
+            no-auto-negotiation;
+        }
+        unit 0 {
+            family inet {
+                address 164.58.22.134/30;
+            }
+        }
+    }
+    ge-0/0/1 {
+        description "L2 INTERFACE - TEST-VLAN";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members TEST-VLAN;
+                }
+            }
+        }
+    }
+    ge-0/0/2 {
+        unit 0 {
+            family inet {
+                address 156.110.42.81/30;
+            }
+        }
+    }
+    ge-0/0/3 {
+        disable;
+    }
+    ge-0/0/4 {
+        disable;
+    }
+    ge-0/0/5 {
+        disable;
+    }
+    ge-0/0/6 {
+        disable;
+    }
+    ge-0/0/7 {
+        disable;
+    }
+    ge-0/0/8 {
+        disable;
+    }
+    ge-0/0/9 {
+        disable;
+    }
+    ge-0/0/10 {
+        disable;
+    }
+    ge-0/0/11 {
+        disable;
+    }
+    ge-0/0/12 {
+        disable;
+    }
+    ge-0/0/13 {
+        disable;
+    }
+    ge-0/0/14 {
+        disable;
+    }
+    ge-0/0/15 {
+        description "L2 INTERFACE - TRUST-VLAN";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members TRUST-VLAN;
+                }
+            }
+        }
+    }
+    lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 3 {
+            description "L3 INTERFACE - TRUST-VLAN -164.58.22.201/29";
+            family inet {
+                address 164.58.22.201/29;
+            }
+        }
+        unit 999 {
+            description "L3 INTERFACE - TEST-VLAN - 10.1.0.1/24";
+            family inet {
+                address 10.1.0.1/24;
+            }
+        }
+    }
+}
+snmp {
+    description OneNet;
+    contact "Net Group";
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 164.58.22.133;
+    }
+}
+protocols {
+    lldp {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    prefix-list PRE-MGMT-SOURCES {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+    }
+    prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+}
+security {
+    screen {
+        ids-option UNTRUST-SCREEN {
+            icmp {
+                ping-death;
+            }
+            ip {
+                source-route-option;
+                tear-drop;
+            }
+            tcp {
+                syn-flood {
+                    alarm-threshold 1024;
+                    attack-threshold 200;
+                    source-threshold 1024;
+                    destination-threshold 2048;
+                    timeout 20;
+                }
+                land;
+            }
+        }
+    }
+    nat {
+        source {
+            rule-set TEST-TO-UNTRUST-NAT {
+                from zone TEST;
+                to zone UNTRUST;
+                rule NAT-TEST-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
+        }
+    }
+    policies {
+        from-zone UNTRUST to-zone UNTRUST {
+            policy TRUST-TO-UNTRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone TEST to-zone UNTRUST {
+            policy ALLOW-ALL-OUT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone UNTRUST {
+            screen UNTRUST-SCREEN;
+            interfaces {
+                vlan.3 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+                ge-0/0/0.0 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            snmp;
+                            ssh;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone TEST {
+            interfaces {
+                vlan.999 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+firewall {
+    family inet {
+        filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+ethernet-switching-options {
+    secure-access-port {
+        interface ge-0/0/1.0 {
+            mac-limit 3 action shutdown;
+        }
+    }
+    bpdu-block {
+        interface ge-0/0/1.0;
+    }
+}
+vlans {
+    TEST-VLAN {
+        description "Test VLAN 999 for TESTING ONLY";
+        vlan-id 999;
+        l3-interface vlan.999;
+    }
+    TRUST-VLAN {
+        description TRUST-VLAN;
+        vlan-id 3;
+        l3-interface vlan.3;
+    }
+}
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show ospf neighbor 
+# OSPF instance is not running
+# 
+# grnoc-mon at CHOCTAW-NATION-HEAD-START-WILBURTON-SRX240-LEASED-004935> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/acx.cai.hart-acx2100.onenet.net
===================================================================
--- configs/acx.cai.hart-acx2100.onenet.net	(revision 142590)
+++ configs/acx.cai.hart-acx2100.onenet.net	(working copy)
@@ -72,7 +72,6 @@
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis sfm detail 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show chassis ssb 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show system boot-messages 
-# show version
 # platform_early_bootinit: MX-PPC Series Early Boot Initialization
 # mxppc_set_re_type: hw.board.type is ACX-2100
 # WDOG initialized
@@ -141,8 +140,7 @@
 # WARNING: /var was not properly dismounted
 # 
 # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> show version 
-# Hostname: HARTSHORNE-PUBLIC-LIBRARY-ACX2100 # Model: acx2100 # JUNOS Crypto Software Suite [12.3X54-D10.6] # JUNOS Base OS Software Suite [12.3X54-D10.6] # JUNOS Kernel Software Suite [12.3X54-D10.6] # JUNOS Base OS boot [12.3X54-D10.6] # JUNOS Packet Forwarding Engine Support (ACX) [12.3X54-D10.6] # JUNOS Online Documentation [12.3X54-D10.6] # JUNOS Routing Software Suite [12.3X54-D10.6] #  # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> file list /var/tmp detail # show system uptime
-# 
+# Hostname: HARTSHORNE-PUBLIC-LIBRARY-ACX2100 # Model: acx2100 # JUNOS Crypto Software Suite [12.3X54-D10.6] # JUNOS Base OS Software Suite [12.3X54-D10.6] # JUNOS Kernel Software Suite [12.3X54-D10.6] # JUNOS Base OS boot [12.3X54-D10.6] # JUNOS Packet Forwarding Engine Support (ACX) [12.3X54-D10.6] # JUNOS Online Documentation [12.3X54-D10.6] # JUNOS Routing Software Suite [12.3X54-D10.6] #  # grnoc-mon at HARTSHORNE-PUBLIC-LIBRARY-ACX2100> file list /var/tmp detail # 
 # /var/tmp:
 # total blocks: 291872
 # drwxr-xr-x  2 root  field        512 Dec 31  2009 gres-tp/
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 142590)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -110,7 +110,7 @@
 # WARNING: / was not properly dismounted
 # 
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show version 
-# file list /var/tmp detail # Hostname: MEEKER-PS-LEASED-ASSET-TAG-004947 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# Hostname: MEEKER-PS-LEASED-ASSET-TAG-004947 # Model: srx240h2 # JUNOS Software Release [12.1X44-D35.5] #  # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> file list /var/tmp detail # lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MEEKER-PS-LEASED-ASSET-TAG-004947> show system uptime 
Index: configs/opt.okc.onenet.net
===================================================================
--- configs/opt.okc.onenet.net	(revision 142412)
+++ configs/opt.okc.onenet.net	(working copy)
@@ -115,7 +115,6 @@
         <part name="PPM-1-13-1" description="ONS-XC-10G-S1" hw_version="06" part_id="ONS-XC-10G-S1" part_num="10-2012-03" serial_number="ONT134310E0" slot="PPM-1-13-1" vendor_id="Cisco"></part>
         <interface name="CHAN-1-13-2" abbr_name="CHAN-1-13-2" admin_state="up" spanning_tree_metric="" description="" type="TXP" monitoring_state="monitor"></interface>
         <interface name="FAC-1-13-1-1" abbr_name="FAC-1-13-1-1" admin_state="up" spanning_tree_metric="" description="" type="FAC" monitoring_state="monitor"></interface>
-        <interface name="VFAC-1-13-2" abbr_name="VFAC-1-13-2" admin_state="up" spanning_tree_metric="" description="" type="VFAC" monitoring_state="monitor"></interface>
       </part>
       <part name="SLOT-1-14" description="15454-OTU2-XP=" hw_version="D0" part_id="15454-OTU2-XP=" part_num="800-29414-01" serial_number="CA61438B00F" slot="SLOT-1-14" vendor_id="Cisco" temp_channel="1540.56">
         <part name="PPM-1-14-1" description="ONS-XC-10G-S1" hw_version="A" part_id="ONS-XC-10G-S1" part_num="10-2012-02" serial_number="ECL115101FD" slot="PPM-1-14-1" vendor_id="Cisco"></part>
@@ -221,7 +220,6 @@
         <interface name="CHAN-3-3-9-RX" abbr_name="CHAN-3-3-9-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-3-3-10-RX" abbr_name="CHAN-3-3-10-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-3-3-11-RX" abbr_name="CHAN-3-3-11-RX" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="monitor"></interface>
-        <interface name="CHAN-3-3-12-RX" abbr_name="CHAN-3-3-12-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-3-3-13-RX" abbr_name="CHAN-3-3-13-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
         <interface name="CHAN-3-3-14-RX" abbr_name="CHAN-3-3-14-RX" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="monitor"></interface>
         <interface name="CHAN-3-3-15-RX" abbr_name="CHAN-3-3-15-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
Index: routers.all
===================================================================
--- routers.all	(revision 142521)
+++ routers.all	(working copy)
@@ -1,6 +1,7 @@
 ACCELE-BIO.client.onenet.net:juniper
 ALLEN-PUBLIC-LIBRARY.client.onenet.net:juniper
 BERRYHILL-PUBLIC-SCHOOLS.client.onenet.net:juniper
+CHOCTAW-NATION-HEAD-START-WILBURTON.client.onenet.net:juniper
 CITY-OF-LAWTON.client.onenet.net:juniper
 CITY-OF-NEWCASTLE.client.onenet.net:juniper
 CLI-adva.p.onenet.net:fsp3000



More information about the Nocrancid mailing list