[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Thu Nov 24 23:03:56 CST 2016
Index: configs/canadian-ps.client.onenet.net
===================================================================
--- configs/canadian-ps.client.onenet.net (revision 148429)
+++ configs/canadian-ps.client.onenet.net (working copy)
@@ -171,7 +171,7 @@
#vlan.3 up up
#vlan.999 up down
# grnoc-mon at CANADIAN-PS-SRX240-LR-004907> show configuration
-warning: error writing(valid) /var/db/feature.db: expecting 9204 bytes, only wrote 0
+warning: error writing(valid) /var/db/feature.db: expecting 9205 bytes, only wrote 0
## Last commit: 2016-06-23 13:05:01 CDT by admin
version 12.1X46-D20.5;
system {
Index: configs/hub.chi.onenet.net
===================================================================
--- configs/hub.chi.onenet.net (revision 148429)
+++ configs/hub.chi.onenet.net (working copy)
@@ -282,7 +282,7 @@
#t1-2/0/2:1 up up
#t1-2/0/2:1.16 up up
#t1-2/0/2:1.17 up up
-#t1-2/0/2:2 down up
+#t1-2/0/2:2 down down
#t1-2/0/2:3 down down
#t1-2/0/2:4 down down
#t1-2/0/2:5 down down
Index: configs/core2.dc.onenet.net
===================================================================
--- configs/core2.dc.onenet.net (revision 148428)
+++ configs/core2.dc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at MX480_DC_02_RE0> show system commit
+# 2016-11-24 22:54:26 CST by andrew via cli commit synchronize
+# 2016-11-24 22:36:57 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
+# 2016-11-24 22:19:36 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
+# 2016-11-24 22:16:27 CST by andrew via cli commit synchronize
# 2016-11-24 20:10:36 CST by andrew via cli commit synchronize
# 2016-11-24 20:05:41 CST by andrew via cli commit synchronize
-# 2016-11-24 19:15:59 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-11-24 19:12:44 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-11-24 19:11:05 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-11-24 18:50:59 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
# grnoc-mon at MX480_DC_02_RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -337,7 +337,7 @@
# grnoc-mon at MX480_DC_02_RE0> show system uptime
# System booted: 2016-09-03 21:49 CDT
# Protocols started: 2016-09-03 21:51 CDT
-# Last configured: 2016-11-24 20:10 CST by andrew
+# Last configured: 2016-11-24 22:54 CST by andrew
#
# {master}
# grnoc-mon at MX480_DC_02_RE0> show interface terse
@@ -433,7 +433,10 @@
#pfe-2/2/0.16383 up up
#xe-2/2/0 up up
#xe-2/2/0.1 up up
+#xe-2/2/0.2531 up up
+#xe-2/2/0.2540 up up
#xe-2/2/0.2550 up up
+#xe-2/2/0.2559 up up
#xe-2/2/0.32767 up up
#xe-2/2/1 down down
#xe-2/3/0 up up
@@ -455,7 +458,10 @@
#ae4 up down
#ae5 up up
#ae5.1 up up
+#ae5.2531 up up
+#ae5.2540 up up
#ae5.2550 up up
+#ae5.2559 up up
#ae5.32767 up up
#ae6 up down
#ae7 up down
@@ -626,7 +632,7 @@
#pp0 up up
#tap up up
# grnoc-mon at MX480_DC_02_RE0> show configuration
-## Last commit: 2016-11-24 20:10:36 CST by andrew
+## Last commit: 2016-11-24 22:54:26 CST by andrew
version 12.3R7.7;
groups {
re0 {
@@ -1069,6 +1075,28 @@
}
family mpls;
}
+ unit 2531 {
+ description "CORE2-DC-TO-TAGNET [ORDERED]";
+ vlan-id 2531;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ address 10.119.254.61/31;
+ }
+ }
+ unit 2540 {
+ description "CORE2-DC-TO-DPS [ORDERED]";
+ vlan-id 2540;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ address 10.119.254.67/31;
+ }
+ }
unit 2550 {
description "CORE2-DC-TO-OMES-MGMT [ORDERED]";
vlan-id 2550;
@@ -1080,6 +1108,17 @@
address 10.119.254.55/31;
}
}
+ unit 2559 {
+ description "CORE2-DC-TO-ODMHSAS [ORDERED]";
+ vlan-id 2559;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ address 10.119.254.73/31;
+ }
+ }
}
ae6 {
description "FUTURE-USE [NO-MONITOR]";
@@ -2303,6 +2342,28 @@
then reject;
}
}
+ policy-statement EBGP-ONENET-DC-TAGNET-V4-EXPORT {
+ term SEND-ONENET-MGMT {
+ from {
+ route-filter 10.119.255.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-ONENET-DC-TAGNET-V4-IMPORT {
+ term ACCEPT-ROUTES {
+ from {
+ route-filter 10.119.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
policy-statement ISIS-STATICS {
term 1 {
from {
@@ -3014,7 +3075,10 @@
customer_l3vpn {
apply-groups OSPF-RI;
instance-type virtual-router;
+ interface ae5.2531;
+ interface ae5.2540;
interface ae5.2550;
+ interface ae5.2559;
interface irb.4032;
routing-options {
router-id 10.119.255.250;
@@ -3034,6 +3098,13 @@
export EBGP-ONENET-DC-OMES-MGMT-V4-EXPORT;
peer-as 5078;
}
+ neighbor 10.119.254.60 {
+ description "ONENET-DC-TO-TAGNET [NO-MONITOR]";
+ import EBGP-ONENET-DC-TAGNET-V4-IMPORT;
+# authentication-#key <removed>;
+ export EBGP-ONENET-DC-TAGNET-V4-EXPORT;
+ peer-as 5078;
+ }
}
}
ospf {
Index: configs/core1.okc-mx960.onenet.net
===================================================================
--- configs/core1.okc-mx960.onenet.net (revision 148426)
+++ configs/core1.okc-mx960.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE1-MX960-RE0> show system commit
+# 2016-11-24 22:50:23 CST by andrew via cli commit synchronize
+# 2016-11-24 22:32:59 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
+# 2016-11-24 22:05:46 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
# 2016-11-24 18:59:38 CST by andrew via cli commit synchronize
# 2016-11-24 18:48:24 CST by andrew via cli commit synchronize
# 2016-11-24 18:47:29 CST by andrew via cli commit synchronize
-# 2016-11-24 18:41:10 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-11-18 23:08:59 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-11-02 16:24:51 CDT by andrew via cli commit synchronize
# grnoc-mon at OKC-CORE1-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -578,7 +578,7 @@
# grnoc-mon at OKC-CORE1-MX960-RE0> show system uptime
# System booted: 2016-10-12 08:15 CDT
# Protocols started: 2016-10-12 08:18 CDT
-# Last configured: 2016-11-24 18:59 CST by andrew
+# Last configured: 2016-11-24 22:50 CST by andrew
#
# {master}
# grnoc-mon at OKC-CORE1-MX960-RE0> show interface terse
@@ -645,7 +645,10 @@
#xe-1/1/0 up up
#xe-1/1/0.69 up up
#xe-1/1/0.195 up up
+#xe-1/1/0.2531 up up
+#xe-1/1/0.2540 up up
#xe-1/1/0.2550 up up
+#xe-1/1/0.2559 up up
#xe-1/1/0.2600 up up
#xe-1/1/0.32767 up up
#xe-1/1/1 up up
@@ -865,6 +868,9 @@
#lsi.2 up up
#lsi.3 up up
#lsi.5 up up
+#lsi.6 up up
+#lsi.7 up up
+#lsi.8 up up
#mtun up up
#pimd up up
#pime up up
@@ -872,7 +878,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE1-MX960-RE0> show configuration
-## Last commit: 2016-11-24 18:59:38 CST by andrew
+## Last commit: 2016-11-24 22:50:23 CST by andrew
version 13.3R8.7;
groups {
re0 {
@@ -1297,6 +1303,36 @@
address 2610:1d8:2:195::1/64;
}
}
+ unit 2531 {
+ description "TAGNET-TO-CORE1-DC [ORDERED]";
+ vlan-id 2531;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ output;
+ }
+ address 10.119.254.58/31;
+ }
+ }
+ unit 2540 {
+ description "DPS-TO-CORE1-DC [ORDERED]";
+ vlan-id 2540;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ output;
+ }
+ address 10.119.254.64/31;
+ }
+ }
unit 2550 {
description "OMES-MGMT-TO-CORE1-DC [ORDERED]";
vlan-id 2550;
@@ -1312,6 +1348,21 @@
address 10.119.254.52/31;
}
}
+ unit 2559 {
+ description "ODMHSAS-TO-CORE1-DC [ORDERED]";
+ vlan-id 2559;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ output;
+ }
+ address 10.119.254.70/31;
+ }
+ }
unit 2600 {
description "ONENET-HOSTED-VOICE-L3VPN [NO-MONITOR]";
vlan-id 2600;
@@ -13119,6 +13170,98 @@
then reject;
}
}
+ policy-statement DPS-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add DPS-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add DPS-VPN;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol ospf;
+ then {
+ community add DPS-VPN;
+ accept;
+ }
+ }
+ term 4 {
+ from protocol bgp;
+ then {
+ community add DPS-VPN;
+ accept;
+ }
+ }
+ }
+ policy-statement DPS-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community DPS-VPN;
+ }
+ then accept;
+ }
+ term 2 {
+ then reject;
+ }
+ }
+ policy-statement EBGP-DPS-ONENET-DC-V4-EXPORT {
+ term SEND-LINKS {
+ from {
+ route-filter 10.119.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-DPS-ONENET-DC-V4-IMPORT {
+ term ONENET-MGMT {
+ from {
+ route-filter 10.119.255.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-ODMHSAS-ONENET-DC-V4-EXPORT {
+ term SEND-LINKS {
+ from {
+ route-filter 10.119.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term SEND-LOOPBACKS {
+ from {
+ route-filter 10.199.11.0/26 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-ODMHSAS-ONENET-DC-V4-IMPORT {
+ term ONENET-MGMT {
+ from {
+ route-filter 10.119.255.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
policy-statement EBGP-OMES-MGMT-ONENET-DC-V4-EXPORT {
term SEND-LINKS {
from {
@@ -13156,6 +13299,28 @@
}
}
}
+ policy-statement EBGP-TAGNET-ONENET-DC-V4-EXPORT {
+ term SEND-LINKS {
+ from {
+ route-filter 10.119.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-TAGNET-ONENET-DC-V4-IMPORT {
+ term ONENET-MGMT {
+ from {
+ route-filter 10.119.255.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
policy-statement FIREPOWER-VRF-EXPORT {
term 1 {
from protocol static;
@@ -13205,6 +13370,48 @@
}
}
}
+ policy-statement ODMHSAS-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add ODMHSAS-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add ODMHSAS-VPN;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol ospf;
+ then {
+ community add ODMHSAS-VPN;
+ accept;
+ }
+ }
+ term 4 {
+ from protocol bgp;
+ then {
+ community add ODMHSAS-VPN;
+ accept;
+ }
+ }
+ }
+ policy-statement ODMHSAS-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community ODMHSAS-VPN;
+ }
+ then accept;
+ }
+ term 2 {
+ then reject;
+ }
+ }
policy-statement OMES-MGMT-VRF-EXPORT {
term 1 {
from protocol static;
@@ -13355,13 +13562,58 @@
}
}
}
+ policy-statement TAGNET-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add TAGNET-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add TAGNET-VPN;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol ospf;
+ then {
+ community add TAGNET-VPN;
+ accept;
+ }
+ }
+ term 4 {
+ from protocol bgp;
+ then {
+ community add TAGNET-VPN;
+ accept;
+ }
+ }
+ }
+ policy-statement TAGNET-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community TAGNET-VPN;
+ }
+ then accept;
+ }
+ term 2 {
+ then reject;
+ }
+ }
community ASA-VPN members target:5078:2620;
+ community DPS-VPN members target:5078:2540;
community FIREPOWER-VPN members target:5078:2617;
+ community ODMHSAS-VPN members target:5078:2559;
community OKCCORE1 members 5078:211;
community OMES-MGMT-VPN members target:5078:2550;
community ONENET-MGMT-VPN members target:5078:2543;
community ONENET-VOIP-VPN members target:5078:2600;
community ONENET_AGGREGATE members 5078:9601;
+ community TAGNET-VPN members target:5078:2531;
}
class-of-service {
classifiers {
@@ -13852,6 +14104,33 @@
}
}
}
+ DPS-L3VPN {
+ description DPS-L3VPN;
+ instance-type vrf;
+ interface xe-1/1/0.2540;
+ route-distinguisher 164.58.199.211:2540;
+ vrf-import DPS-VRF-IMPORT;
+ vrf-export DPS-VRF-EXPORT;
+ vrf-target target:5078:2540;
+ vrf-table-label;
+ protocols {
+ bgp {
+ group EBGP-ONENET-DC {
+ type external;
+ family inet {
+ unicast;
+ }
+ neighbor 10.119.254.65 {
+ description "DPS-TO-CORE1-DC [NO-MONITOR]";
+ import EBGP-DPS-ONENET-DC-V4-IMPORT;
+# authentication-#key <removed>;
+ export EBGP-DPS-ONENET-DC-V4-EXPORT;
+ peer-as 64595;
+ }
+ }
+ }
+ }
+ }
FIREPOWER-L3VPN {
description FIREPOWER-L3VPN;
instance-type vrf;
@@ -13891,6 +14170,33 @@
}
}
}
+ ODMHSAS-L3VPN {
+ description ODMHSAS-L3VPN;
+ instance-type vrf;
+ interface xe-1/1/0.2559;
+ route-distinguisher 164.58.199.211:2559;
+ vrf-import ODMHSAS-VRF-IMPORT;
+ vrf-export ODMHSAS-VRF-EXPORT;
+ vrf-target target:5078:2559;
+ vrf-table-label;
+ protocols {
+ bgp {
+ group EBGP-ONENET-DC {
+ type external;
+ family inet {
+ unicast;
+ }
+ neighbor 10.119.254.71 {
+ description "ODMHSAS-TO-CORE1-DC [NO-MONITOR]";
+ import EBGP-ODMHSAS-ONENET-DC-V4-IMPORT;
+# authentication-#key <removed>;
+ export EBGP-ODMHSAS-ONENET-DC-V4-EXPORT;
+ peer-as 64595;
+ }
+ }
+ }
+ }
+ }
OMES-MGMT-L3VPN {
description OMES-MGMT-L3VPN;
instance-type vrf;
@@ -13944,6 +14250,33 @@
}
}
}
+ TAGNET-L3VPN {
+ description TAGNET-L3VPN;
+ instance-type vrf;
+ interface xe-1/1/0.2531;
+ route-distinguisher 164.58.199.211:2531;
+ vrf-import TAGNET-VRF-IMPORT;
+ vrf-export TAGNET-VRF-EXPORT;
+ vrf-target target:5078:2531;
+ vrf-table-label;
+ protocols {
+ bgp {
+ group EBGP-ONENET-DC {
+ type external;
+ family inet {
+ unicast;
+ }
+ neighbor 10.119.254.59 {
+ description "TAGNET-TO-CORE1-DC [NO-MONITOR]";
+ import EBGP-TAGNET-ONENET-DC-V4-IMPORT;
+# authentication-#key <removed>;
+ export EBGP-TAGNET-ONENET-DC-V4-EXPORT;
+ peer-as 64595;
+ }
+ }
+ }
+ }
+ }
}
{master}
# grnoc-mon at OKC-CORE1-MX960-RE0> show ospf neighbor
Index: configs/core2-okc-mx960.onenet.net
===================================================================
--- configs/core2-okc-mx960.onenet.net (revision 148427)
+++ configs/core2-okc-mx960.onenet.net (working copy)
@@ -1,13 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE2-MX960-RE0> show system commit
+# 2016-11-24 22:50:51 CST by andrew via cli commit synchronize
+# 2016-11-24 22:33:05 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
+# 2016-11-24 22:14:56 CST by andrew via cli commit synchronize
# 2016-11-24 19:13:28 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
# 2016-11-24 18:48:13 CST by andrew via cli commit synchronize
# 2016-11-24 18:46:52 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-10-12 08:19:07 CDT by root via other
-# Synchronization with remote Routing Engine
-# 2016-09-01 17:21:51 CDT by andrew via cli commit synchronize
-# 2016-08-21 18:49:40 CDT by andrew via cli commit synchronize
# grnoc-mon at OKC-CORE2-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -424,7 +423,7 @@
# grnoc-mon at OKC-CORE2-MX960-RE0> show system uptime
# System booted: 2016-10-12 08:15 CDT
# Protocols started: 2016-10-12 08:18 CDT
-# Last configured: 2016-11-24 19:13 CST by andrew
+# Last configured: 2016-11-24 22:50 CST by andrew
#
# {master}
# grnoc-mon at OKC-CORE2-MX960-RE0> show interface terse
@@ -443,7 +442,10 @@
#xe-0/0/1.32767 up up
#xe-0/1/0 up up
#xe-0/1/0.1 up up
+#xe-0/1/0.2531 up up
+#xe-0/1/0.2540 up up
#xe-0/1/0.2550 up up
+#xe-0/1/0.2559 up up
#xe-0/1/0.32767 up up
#xe-0/1/1 up up
#xe-0/1/1.204 up up
@@ -566,7 +568,10 @@
#pfe-3/2/0.16383 up up
#ae0 up up
#ae0.1 up up
+#ae0.2531 up up
+#ae0.2540 up up
#ae0.2550 up up
+#ae0.2559 up up
#ae0.32767 up up
#ae1 up up
#ae1.42 up up
@@ -595,6 +600,9 @@
#lo0.16385 up up
#lsi up up
#lsi.0 up up
+#lsi.1 up up
+#lsi.2 up up
+#lsi.3 up up
#mtun up up
#pimd up up
#pime up up
@@ -602,7 +610,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE2-MX960-RE0> show configuration
-## Last commit: 2016-11-24 19:13:28 CST by andrew
+## Last commit: 2016-11-24 22:50:51 CST by andrew
version 13.3R8.7;
groups {
re0 {
@@ -1331,6 +1339,36 @@
}
family mpls;
}
+ unit 2531 {
+ description "TAGNET-TO-CORE2-DC [ORDERED]";
+ vlan-id 2531;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ output;
+ }
+ address 10.119.254.60/31;
+ }
+ }
+ unit 2540 {
+ description "DPS-TO-CORE2-DC [ORDERED]";
+ vlan-id 2540;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ output;
+ }
+ address 10.119.254.66/31;
+ }
+ }
unit 2550 {
description "OMES-MGMT-TO-CORE2-DC [ORDERED]";
vlan-id 2550;
@@ -1346,6 +1384,21 @@
address 10.119.254.54/31;
}
}
+ unit 2559 {
+ description "ODMHSAS-TO-CORE2-DC [ORDERED]";
+ vlan-id 2559;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ output;
+ }
+ address 10.119.254.72/31;
+ }
+ }
}
ae1 {
description "CORE 30GE to core.rack59 ae0 | OneNet-OKC-RACK59-30GE-XXXX [NO-MONITOR]";
@@ -12252,6 +12305,98 @@
then reject;
}
}
+ policy-statement DPS-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add DPS-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add DPS-VPN;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol ospf;
+ then {
+ community add DPS-VPN;
+ accept;
+ }
+ }
+ term 4 {
+ from protocol bgp;
+ then {
+ community add DPS-VPN;
+ accept;
+ }
+ }
+ }
+ policy-statement DPS-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community DPS-VPN;
+ }
+ then accept;
+ }
+ term 2 {
+ then reject;
+ }
+ }
+ policy-statement EBGP-DPS-ONENET-DC-V4-EXPORT {
+ term SEND-LINKS {
+ from {
+ route-filter 10.119.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-DPS-ONENET-DC-V4-IMPORT {
+ term ONENET-MGMT {
+ from {
+ route-filter 10.119.255.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-ODMHSAS-ONENET-DC-V4-EXPORT {
+ term SEND-LINKS {
+ from {
+ route-filter 10.119.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term SEND-LOOPBACKS {
+ from {
+ route-filter 10.199.11.0/26 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-ODMHSAS-ONENET-DC-V4-IMPORT {
+ term ONENET-MGMT {
+ from {
+ route-filter 10.119.255.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
policy-statement EBGP-OMES-MGMT-ONENET-DC-V4-EXPORT {
term SEND-LINKS {
from {
@@ -12274,11 +12419,75 @@
then reject;
}
}
+ policy-statement EBGP-TAGNET-ONENET-DC-V4-EXPORT {
+ term SEND-LINKS {
+ from {
+ route-filter 10.119.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-TAGNET-ONENET-DC-V4-IMPORT {
+ term ONENET-MGMT {
+ from {
+ route-filter 10.119.255.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
policy-statement LOAD-BALANCE {
then {
load-balance per-packet;
}
}
+ policy-statement ODMHSAS-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add ODMHSAS-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add ODMHSAS-VPN;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol ospf;
+ then {
+ community add ODMHSAS-VPN;
+ accept;
+ }
+ }
+ term 4 {
+ from protocol bgp;
+ then {
+ community add ODMHSAS-VPN;
+ accept;
+ }
+ }
+ }
+ policy-statement ODMHSAS-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community ODMHSAS-VPN;
+ }
+ then accept;
+ }
+ term 2 {
+ then reject;
+ }
+ }
policy-statement OMES-MGMT-VRF-EXPORT {
term 1 {
from protocol static;
@@ -12382,10 +12591,55 @@
}
}
}
+ policy-statement TAGNET-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add TAGNET-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add TAGNET-VPN;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol ospf;
+ then {
+ community add TAGNET-VPN;
+ accept;
+ }
+ }
+ term 4 {
+ from protocol bgp;
+ then {
+ community add TAGNET-VPN;
+ accept;
+ }
+ }
+ }
+ policy-statement TAGNET-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community TAGNET-VPN;
+ }
+ then accept;
+ }
+ term 2 {
+ then reject;
+ }
+ }
community 5078:40628 members 5078:40628;
+ community DPS-VPN members target:5078:2540;
+ community ODMHSAS-VPN members target:5078:2559;
community OKCCORE2 members 5078:212;
community OMES-MGMT-VPN members target:5078:2550;
community ONET-UPS-VPN members target:5078:100;
+ community TAGNET-VPN members target:5078:2531;
}
class-of-service {
classifiers {
@@ -12833,10 +13087,64 @@
}
}
routing-instances {
+ DPS-L3VPN {
+ description DPS-L3VPN;
+ instance-type vrf;
+ interface ae0.2540;
+ route-distinguisher 164.58.199.212:2540;
+ vrf-import DPS-VRF-IMPORT;
+ vrf-export DPS-VRF-EXPORT;
+ vrf-target target:5078:2540;
+ vrf-table-label;
+ protocols {
+ bgp {
+ group EBGP-ONENET-DC {
+ type external;
+ family inet {
+ unicast;
+ }
+ neighbor 10.119.254.67 {
+ description "DPS-TO-CORE1-DC [NO-MONITOR]";
+ import EBGP-DPS-ONENET-DC-V4-IMPORT;
+# authentication-#key <removed>;
+ export EBGP-DPS-ONENET-DC-V4-EXPORT;
+ peer-as 64595;
+ }
+ }
+ }
+ }
+ }
ISOLATE {
instance-type virtual-router;
interface ge-0/3/0.42;
}
+ ODMHSAS-L3VPN {
+ description ODMHSAS-L3VPN;
+ instance-type vrf;
+ interface ae0.2559;
+ route-distinguisher 164.58.199.212:2559;
+ vrf-import ODMHSAS-VRF-IMPORT;
+ vrf-export ODMHSAS-VRF-EXPORT;
+ vrf-target target:5078:2559;
+ vrf-table-label;
+ protocols {
+ bgp {
+ group EBGP-ONENET-DC {
+ type external;
+ family inet {
+ unicast;
+ }
+ neighbor 10.119.254.73 {
+ description "ODMHSAS-TO-CORE1-DC [NO-MONITOR]";
+ import EBGP-ODMHSAS-ONENET-DC-V4-IMPORT;
+# authentication-#key <removed>;
+ export EBGP-ODMHSAS-ONENET-DC-V4-EXPORT;
+ peer-as 64595;
+ }
+ }
+ }
+ }
+ }
OMES-MGMT-L3VPN {
description OMES-MGMT-L3VPN;
instance-type vrf;
@@ -12864,6 +13172,33 @@
}
}
}
+ TAGNET-L3VPN {
+ description TAGNET-L3VPN;
+ instance-type vrf;
+ interface ae0.2531;
+ route-distinguisher 164.58.199.212:2531;
+ vrf-import TAGNET-VRF-IMPORT;
+ vrf-export TAGNET-VRF-EXPORT;
+ vrf-target target:5078:2531;
+ vrf-table-label;
+ protocols {
+ bgp {
+ group EBGP-ONENET-DC {
+ type external;
+ family inet {
+ unicast;
+ }
+ neighbor 10.119.254.61 {
+ description "TAGNET-TO-CORE1-DC [NO-MONITOR]";
+ import EBGP-TAGNET-ONENET-DC-V4-IMPORT;
+# authentication-#key <removed>;
+ export EBGP-TAGNET-ONENET-DC-V4-EXPORT;
+ peer-as 64595;
+ }
+ }
+ }
+ }
+ }
}
{master}
# grnoc-mon at OKC-CORE2-MX960-RE0> show ospf neighbor
Index: configs/osrhe-chancellor-residence.client.onenet.net
===================================================================
--- configs/osrhe-chancellor-residence.client.onenet.net (revision 148420)
+++ configs/osrhe-chancellor-residence.client.onenet.net (working copy)
@@ -145,7 +145,7 @@
#ppe0 up up
#st0 up up
#st0.0 up up
-#st0.1 up up
+#st0.1 up down
#tap up up
#vlan up up
#vlan.4 up up
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net (revision 148427)
+++ configs/stringtown-high-school.client.onenet.net (working copy)
@@ -674,6 +674,7 @@
# OSPF instance is not running
#
# grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show bfd session
+quit
0 sessions, 0 clients
Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/core1.dc.onenet.net
===================================================================
--- configs/core1.dc.onenet.net (revision 148428)
+++ configs/core1.dc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at MX480_DC_01_RE0> show system commit
+# 2016-11-24 22:53:27 CST by andrew via cli commit synchronize
+# 2016-11-24 22:37:20 CST by andrew via cli commit synchronize
+# 2016-11-24 22:19:08 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
+# 2016-11-24 22:08:43 CST by andrew via cli commit synchronize
# 2016-11-24 20:10:10 CST by andrew via cli commit synchronize
# 2016-11-24 20:05:21 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-11-24 19:05:01 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-11-24 19:01:22 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
-# 2016-11-24 18:47:47 CST by andrew via cli commit synchronize
-# 2016-11-24 18:44:00 CST by andrew via cli commit confirmed, rollback in 3mins synchronize
# grnoc-mon at MX480_DC_01_RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -358,7 +358,7 @@
# grnoc-mon at MX480_DC_01_RE0> show system uptime
# System booted: 2014-08-25 20:38 CDT
# Protocols started: 2014-08-25 20:39 CDT
-# Last configured: 2016-11-24 20:10 CST by andrew
+# Last configured: 2016-11-24 22:53 CST by andrew
#
# {master}
# grnoc-mon at MX480_DC_01_RE0> show interface terse
@@ -510,7 +510,10 @@
#xe-2/2/0 up up
#xe-2/2/0.0 up up
#xe-2/2/0.69 up up
+#xe-2/2/0.2531 up up
+#xe-2/2/0.2540 up up
#xe-2/2/0.2550 up up
+#xe-2/2/0.2559 up up
#xe-2/2/0.2600 up up
#xe-2/2/0.32767 up up
#xe-2/2/1 up up
@@ -740,7 +743,7 @@
#pp0 up up
#tap up up
# grnoc-mon at MX480_DC_01_RE0> show configuration
-## Last commit: 2016-11-24 20:10:10 CST by andrew
+## Last commit: 2016-11-24 22:53:27 CST by andrew
version 12.3R7.7;
groups {
re0 {
@@ -1283,6 +1286,34 @@
}
family mpls;
}
+ unit 2531 {
+ description "CORE1-DC-TO-TAGNET [ORDERED]";
+ vlan-id 2531;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 10.119.254.59/31;
+ }
+ }
+ unit 2540 {
+ description "CORE1-DC-TO-DPS [ORDERED]";
+ vlan-id 2540;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 10.119.254.65/31;
+ }
+ }
unit 2550 {
description "CORE1-DC-TO-OMES-MGMT [ORDERED]";
vlan-id 2550;
@@ -1297,6 +1328,20 @@
address 10.119.254.53/31;
}
}
+ unit 2559 {
+ description "CORE1-DC-TO-ODMHSAS [ORDERED]";
+ vlan-id 2559;
+ family inet {
+ rpf-check {
+ mode loose;
+ }
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 10.119.254.71/31;
+ }
+ }
unit 2600 {
description "ONENET-HOSTED-VOICE-L3VPN [ORDERED]";
vlan-id 2600;
@@ -2851,6 +2896,28 @@
then reject;
}
}
+ policy-statement EBGP-ONENET-DC-TAGNET-V4-EXPORT {
+ term SEND-ONENET-MGMT {
+ from {
+ route-filter 10.119.255.0/24 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-ONENET-DC-TAGNET-V4-IMPORT {
+ term ACCEPT-ROUTES {
+ from {
+ route-filter 10.119.0.0/16 orlonger;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
policy-statement ISIS-STATICS {
term 1 {
from {
@@ -3697,7 +3764,10 @@
customer_l3vpn {
apply-groups OSPF-RI;
instance-type virtual-router;
+ interface xe-2/2/0.2531;
+ interface xe-2/2/0.2540;
interface xe-2/2/0.2550;
+ interface xe-2/2/0.2559;
interface irb.4032;
routing-options {
router-id 10.119.255.249;
@@ -3717,6 +3787,13 @@
export EBGP-ONENET-DC-OMES-MGMT-V4-EXPORT;
peer-as 5078;
}
+ neighbor 10.119.254.58 {
+ description "ONENET-DC-TO-TAGNET [NO-MONITOR]";
+ import EBGP-ONENET-DC-TAGNET-V4-IMPORT;
+# authentication-#key <removed>;
+ export EBGP-ONENET-DC-TAGNET-V4-EXPORT;
+ peer-as 5078;
+ }
}
}
ospf {
More information about the Nocrancid
mailing list