[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Thu Oct 6 11:03:57 CDT 2016


Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net	(revision 147056)
+++ configs/maysville-es.client.onenet.net	(working copy)
@@ -614,6 +614,7 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show bfd session 
+quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/dewar-ps-srx340.client.onenet.net
===================================================================
--- configs/dewar-ps-srx340.client.onenet.net	(revision 147034)
+++ configs/dewar-ps-srx340.client.onenet.net	(working copy)
@@ -1,6 +1,7 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at DEWAR-PS-LR-5273> show system commit 
+#   2016-10-06 10:50:04 CDT by sean via cli
 #   2016-09-29 22:47:26 CDT by root via cli
 #   2016-07-25 23:43:08 CDT by root via other
 #   2016-06-26 02:29:28 CDT by root via other
@@ -118,7 +119,7 @@
 # Time Source:  NTP CLOCK 
 # System booted: 2016-10-05 11:10 CDT 
 # Protocols started: 2016-10-05 11:10 CDT 
-# Last configured: 2016-09-29 22:47 CDT  by root
+# Last configured: 2016-10-06 10:50 CDT  by sean
 # 
 # grnoc-mon at DEWAR-PS-LR-5273> show interface terse 
 #Interface Admin Link
@@ -172,7 +173,7 @@
 #vlan up down
 #vtep up up
 # grnoc-mon at DEWAR-PS-LR-5273> show configuration 
-## Last commit: 2016-09-29 22:47:26 CDT by root
+## Last commit: 2016-10-06 10:50:04 CDT by sean
 version 15.1X49-D50.3;
 system {
     host-name DEWAR-PS-LR-5273;
@@ -307,6 +308,14 @@
     }
 }
 security {
+    address-book {
+        global {
+            address NAT-1 192.168.0.3/32;
+            address NAT-2 192.168.0.9/32;
+            address NAT-3 192.168.0.10/32;
+            address NAT-4 192.168.0.75/32;
+        }
+    }
     forwarding-options {
         family {
             inet6 {
@@ -366,6 +375,66 @@
                 }
             }
         }
+        static {
+            rule-set NATS {
+                from zone UNTRUST;
+                rule r1 {
+                    match {
+                        destination-address 156.110.0.57/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                192.168.0.3/32;
+                            }
+                        }
+                    }
+                }
+                rule r2 {
+                    match {
+                        destination-address 156.110.0.58/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                192.168.0.9/32;
+                            }
+                        }
+                    }
+                }
+                rule r3 {
+                    match {
+                        destination-address 156.110.0.59/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                192.168.0.10/32;
+                            }
+                        }
+                    }
+                }
+                rule r4 {
+                    match {
+                        destination-address 156.110.0.60/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                192.168.0.75/32;
+                            }
+                        }
+                    }
+                }
+            }
+        }
+        proxy-arp {
+            interface ge-0/0/0.0 {
+                address {
+                    156.110.39.154/30;
+                }
+            }
+        }
     }
     policies {
         from-zone TRUST to-zone UNTRUST {
@@ -379,6 +448,16 @@
                     permit;
                 }
             }
+            policy permit-all {
+                match {
+                    source-address [ NAT-1 NAT-2 NAT-3 NAT-4 ];
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
         }
         from-zone TEST to-zone UNTRUST {
             policy ALLOW-ALL-OUT {
@@ -392,6 +471,18 @@
                 }
             }
         }
+        from-zone UNTRUST to-zone TRUST {
+            policy server-access {
+                match {
+                    source-address any;
+                    destination-address [ NAT-1 NAT-2 NAT-3 NAT-4 ];
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
     }
     zones {
         security-zone TRUST {
Index: configs/hub.bar.onenet.net
===================================================================
--- configs/hub.bar.onenet.net	(revision 147056)
+++ configs/hub.bar.onenet.net	(working copy)
@@ -308,10 +308,10 @@
 #ct3-2/0/2 up up
 #t1-2/0/2:1 up up
 #t1-2/0/2:1.0 up up
-#t1-2/0/2:2 up up
-#t1-2/0/2:2.16 up up
-#t1-2/0/2:2.17 up up
-#t1-2/0/2:2.30 up up
+#t1-2/0/2:2 up down
+#t1-2/0/2:2.16 up down
+#t1-2/0/2:2.17 up down
+#t1-2/0/2:2.30 up down
 #t1-2/0/2:3 up up
 #t1-2/0/2:3.0 up up
 #t1-2/0/2:4 up up
@@ -337,8 +337,8 @@
 #t1-2/0/2:19 down down
 #t1-2/0/2:20 up up
 #t1-2/0/2:20.0 up up
-#t1-2/0/2:21 up down
-#t1-2/0/2:21.0 up down
+#t1-2/0/2:21 up up
+#t1-2/0/2:21.0 up up
 #t1-2/0/2:22 up up
 #t1-2/0/2:22.0 up up
 #t1-2/0/2:23 up up
Index: configs/vici-public-schools.client.onenet.net
===================================================================
--- configs/vici-public-schools.client.onenet.net	(revision 147057)
+++ configs/vici-public-schools.client.onenet.net	(working copy)
@@ -114,8 +114,8 @@
 #sp-0/0/0.16383 up up
 #ge-0/0/1 up up
 #ge-0/0/1.0 up up
-#ge-0/0/2 up down
-#ge-0/0/2.0 up down
+#ge-0/0/2 up up
+#ge-0/0/2.0 up up
 #ge-0/0/3 down down
 #ge-0/0/4 down down
 #ge-0/0/5 down down
Index: configs/core.sem.onenet.net
===================================================================
--- configs/core.sem.onenet.net	(revision 147046)
+++ configs/core.sem.onenet.net	(working copy)
@@ -353,16 +353,16 @@
 #lsi.1048740 up up
 #lsi.1048746 up up
 #lsi.1048764 up up
-#lsi.1048788 up up
 #lsi.1048790 up up
 #lsi.1048794 up up
 #lsi.1048797 up up
-#lsi.1048802 up up
 #lsi.1048805 up up
 #lsi.1048806 up up
 #lsi.1048807 up up
 #lsi.1048810 up up
 #lsi.1048811 up up
+#lsi.1048814 up up
+#lsi.1048815 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/odmhsas-camhc-idabel.client.onenet.net
===================================================================
--- configs/odmhsas-camhc-idabel.client.onenet.net	(revision 147055)
+++ configs/odmhsas-camhc-idabel.client.onenet.net	(working copy)
@@ -148,7 +148,7 @@
 #ppe0 up up
 #st0 up up
 #st0.1 up up
-#st0.2 up up
+#st0.2 up down
 #tap up up
 #vlan up up
 #vlan.4 up up
Index: configs/core.ada.onenet.net
===================================================================
--- configs/core.ada.onenet.net	(revision 147046)
+++ configs/core.ada.onenet.net	(working copy)
@@ -409,7 +409,6 @@
 #lsi.1049217 up up
 #lsi.1049220 up up
 #lsi.1049223 up up
-#lsi.1049228 up up
 #lsi.1049229 up up
 #lsi.1049232 up up
 #lsi.1049233 up up
@@ -417,6 +416,7 @@
 #lsi.1049235 up up
 #lsi.1049238 up up
 #lsi.1049239 up up
+#lsi.1049241 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net	(revision 147054)
+++ configs/hub.dur.onenet.net	(working copy)
@@ -329,7 +329,7 @@
 #fe-2/1/1.0 up up
 #fe-2/1/2 up up
 #fe-2/1/2.0 up up
-#fe-2/1/3 down down
+#fe-2/1/3 down up
 #ge-2/2/0 down down
 #pc-2/2/0 up up
 #pc-2/2/0.16383 up up
Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net	(revision 147057)
+++ configs/core5.tul.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show system commit 
+#   2016-10-06 10:03:00 CDT by aberrios via cli commit synchronize
 #   2016-10-06 09:03:08 CDT by andrew via cli commit synchronize
 #   2016-10-05 11:20:26 CDT by sean via cli commit synchronize
 #   2016-10-04 14:42:30 CDT by sean via cli commit synchronize
 #   2016-10-04 14:23:35 CDT by andrew via cli commit synchronize
 #   2016-10-04 12:09:49 CDT by andrew via cli commit synchronize
-#   2016-10-04 12:01:48 CDT by andrew via cli commit synchronize
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -391,7 +391,7 @@
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show system uptime 
 # System booted: 2016-08-15 04:47 CDT 
 # Protocols started: 2016-08-15 04:53 CDT 
-# Last configured: 2016-10-06 09:03 CDT  by andrew
+# Last configured: 2016-10-06 10:03 CDT  by aberrios
 # 
 # {master}
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show interface terse 
@@ -764,7 +764,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at TULSA-CORE5-MX480-RE0> show configuration 
-## Last commit: 2016-10-06 09:03:08 CDT by andrew
+## Last commit: 2016-10-06 10:03:00 CDT by aberrios
 version 13.3R9.13;
 groups {
     re0 {
@@ -3948,9 +3948,6 @@
             vlan-id 178;
             family inet {
                 rpf-check;
-                filter {
-                    output OILTON-ISD-OUTBOUND;
-                }
                 policer {
                     input 200M-POL;
                     output 200M-POL;
Index: configs/stringtown-high-school.client.onenet.net
===================================================================
--- configs/stringtown-high-school.client.onenet.net	(revision 147056)
+++ configs/stringtown-high-school.client.onenet.net	(working copy)
@@ -674,6 +674,7 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at STRINGTOWN-HIGH-SCHOOL-TAG-004909> show bfd session 
+quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/core1.ptc.onenet.net
===================================================================
--- configs/core1.ptc.onenet.net	(revision 147038)
+++ configs/core1.ptc.onenet.net	(working copy)
@@ -445,8 +445,8 @@
 #lsi.0 up up
 #lsi.1 up up
 #lsi.1048581 up up
-#lsi.1048614 up up
 #lsi.1048615 up up
+#lsi.1048617 up up
 #mtun up up
 #pimd up up
 #pime up up
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net	(revision 147057)
+++ configs/maysville-hs.client.onenet.net	(working copy)
@@ -598,6 +598,7 @@
 # OSPF instance is not running
 # 
 # grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show bfd session 
+quit
 
 0 sessions, 0 clients
 Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps



More information about the Nocrancid mailing list