[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Fri Sep 16 14:03:58 CDT 2016
Index: configs/core.goo.onenet.net
===================================================================
--- configs/core.goo.onenet.net (revision 146448)
+++ configs/core.goo.onenet.net (working copy)
@@ -353,6 +353,7 @@
#lsi.1051763 up up
#lsi.1051764 up up
#lsi.1051771 up up
+#lsi.1051772 up up
#me0 up up
#mtun up up
#pimd up up
Index: configs/core.end.onenet.net
===================================================================
--- configs/core.end.onenet.net (revision 146448)
+++ configs/core.end.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at ENID-MX480-RE0> show system commit
+# 2016-09-16 13:49:14 CDT by andrew via cli commit synchronize
# 2016-09-13 12:43:28 CDT by sky via cli commit synchronize
# 2016-09-13 12:36:55 CDT by sky via cli commit synchronize
# 2016-09-13 12:36:22 CDT by sky via cli commit synchronize
# 2016-09-13 12:34:56 CDT by sky via cli commit synchronize
# 2016-09-12 17:27:09 CDT by andrew via cli commit synchronize
-# 2016-09-06 10:16:31 CDT by andrew via cli commit synchronize
# grnoc-mon at ENID-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -255,7 +255,7 @@
# grnoc-mon at ENID-MX480-RE0> show system uptime
# System booted: 2016-03-15 02:19 CDT
# Protocols started: 2016-03-15 02:24 CDT
-# Last configured: 2016-09-13 12:43 CDT by sky
+# Last configured: 2016-09-16 13:49 CDT by andrew
#
# {master}
# grnoc-mon at ENID-MX480-RE0> show interface terse
@@ -304,7 +304,7 @@
#xe-0/1/1.1416 up up
#xe-0/1/1.1429 up up
#xe-0/1/1.1430 up up
-#xe-0/1/1.2414 up down
+#xe-0/1/1.2414 up up
#xe-0/1/1.2429 up up
#xe-0/1/1.3414 up up
#xe-0/1/1.3416 up up
@@ -430,6 +430,7 @@
#lsi.1049290 up up
#lsi.1049291 up up
#lsi.1049292 up up
+#lsi.1049293 up up
#mtun up up
#pimd up up
#pime up up
@@ -437,7 +438,7 @@
#pp0 up up
#tap up up
# grnoc-mon at ENID-MX480-RE0> show configuration
-## Last commit: 2016-09-13 12:43:28 CDT by sky
+## Last commit: 2016-09-16 13:49:14 CDT by andrew
version 13.3R8.7;
groups {
re0 {
@@ -2040,6 +2041,7 @@
from {
route-filter 10.199.5.0/26 orlonger;
route-filter 192.168.160.0/22 exact;
+ route-filter 192.168.250.0/24 exact;
}
then accept;
}
Index: configs/faye.okcdc.onenet.net
===================================================================
--- configs/faye.okcdc.onenet.net (revision 146432)
+++ configs/faye.okcdc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at FAYE-RP3F2-MX80> show system commit
+# 2016-09-16 13:42:28 CDT by sky via cli
+# 2016-09-16 13:31:14 CDT by sky via cli
+# 2016-09-16 13:20:35 CDT by sky via cli
# 2016-09-13 12:48:06 CDT by sky via cli
# 2016-09-13 10:20:03 CDT by andrew via cli
# 2016-08-26 11:49:14 CDT by andrew via cli
-# 2016-08-25 14:37:17 CDT by andrew via cli
-# 2016-08-25 13:30:43 CDT by andrew via cli
-# 2016-08-25 13:22:33 CDT by andrew via cli
# grnoc-mon at FAYE-RP3F2-MX80> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -225,7 +225,7 @@
# grnoc-mon at FAYE-RP3F2-MX80> show system uptime
# System booted: 2016-07-09 02:31 CDT
# Protocols started: 2016-07-09 02:34 CDT
-# Last configured: 2016-09-13 12:48 CDT by sky
+# Last configured: 2016-09-16 13:42 CDT by sky
#
# grnoc-mon at FAYE-RP3F2-MX80> show interface terse
#Interface Admin Link
@@ -241,35 +241,36 @@
#xe-0/0/1 up down
#xe-0/0/2 up down
#xe-0/0/3 up down
-#ge-1/0/0 up down
-#ge-1/0/0.42 up down
-#ge-1/0/0.80 up down
-#ge-1/0/0.81 up down
-#ge-1/0/0.82 up down
-#ge-1/0/0.300 up down
-#ge-1/0/0.400 up down
-#ge-1/0/0.401 up down
-#ge-1/0/0.444 up down
-#ge-1/0/0.500 up down
+#ge-1/0/0 up up
+#ge-1/0/0.42 up up
+#ge-1/0/0.80 up up
+#ge-1/0/0.81 up up
+#ge-1/0/0.82 up up
+#ge-1/0/0.300 up up
+#ge-1/0/0.400 up up
+#ge-1/0/0.401 up up
+#ge-1/0/0.444 up up
+#ge-1/0/0.500 up up
#ge-1/0/0.501 up down
-#ge-1/0/0.510 up down
-#ge-1/0/0.600 up down
-#ge-1/0/0.610 up down
-#ge-1/0/0.611 up down
-#ge-1/0/0.612 up down
-#ge-1/0/0.613 up down
-#ge-1/0/0.614 up down
-#ge-1/0/0.615 up down
-#ge-1/0/0.616 up down
-#ge-1/0/0.617 up down
-#ge-1/0/0.618 up down
-#ge-1/0/0.619 up down
-#ge-1/0/0.620 up down
-#ge-1/0/0.621 up down
-#ge-1/0/0.622 up down
-#ge-1/0/0.2518 up down
-#ge-1/0/0.3600 up down
-#ge-1/0/0.32767 up down
+#ge-1/0/0.510 up up
+#ge-1/0/0.511 up up
+#ge-1/0/0.600 up up
+#ge-1/0/0.610 up up
+#ge-1/0/0.611 up up
+#ge-1/0/0.612 up up
+#ge-1/0/0.613 up up
+#ge-1/0/0.614 up up
+#ge-1/0/0.615 up up
+#ge-1/0/0.616 up up
+#ge-1/0/0.617 up up
+#ge-1/0/0.618 up up
+#ge-1/0/0.619 up up
+#ge-1/0/0.620 up up
+#ge-1/0/0.621 up up
+#ge-1/0/0.622 up up
+#ge-1/0/0.2518 up up
+#ge-1/0/0.3600 up up
+#ge-1/0/0.32767 up up
#ge-1/0/1 up down
#ge-1/0/1.2518 up down
#ge-1/0/1.32767 up down
@@ -310,7 +311,7 @@
#gre up up
#ipip up up
#irb up up
-#irb.2518 up down
+#irb.2518 up up
#lo0 up up
#lo0.0 up up
#lo0.16384 up up
@@ -318,6 +319,15 @@
#lsi up up
#lsi.0 up up
#lsi.1 up up
+#lsi.2 up up
+#lsi.1050624 up up
+#lsi.1050625 up up
+#lsi.1050626 up up
+#lsi.1050627 up up
+#lsi.1050628 up up
+#lsi.1050629 up up
+#lsi.1050630 up up
+#lsi.1050631 up up
#me0 up up
#me0.0 up up
#mtun up up
@@ -327,7 +337,7 @@
#pp0 up up
#tap up up
# grnoc-mon at FAYE-RP3F2-MX80> show configuration
-## Last commit: 2016-09-13 12:48:06 CDT by sky
+## Last commit: 2016-09-16 13:42:28 CDT by sky
version 13.3R9.13;
system {
host-name FAYE-RP3F2-MX80;
@@ -498,6 +508,7 @@
ge-1/0/0 {
description "USER - D-102-C - FLOOR 1 - ANDREW";
flexible-vlan-tagging;
+ native-vlan-id 511;
mtu 9192;
encapsulation flexible-ethernet-services;
unit 42 {
@@ -582,6 +593,13 @@
encapsulation vlan-ccc;
vlan-id 510;
}
+ unit 511 {
+ description COMANCHE-L3VPN;
+ vlan-id 511;
+ family inet {
+ address 192.168.250.1/24;
+ }
+ }
unit 600 {
description "Andrew BGP Test";
vlan-tags outer 600 inner 500;
@@ -1093,6 +1111,48 @@
prefix-list PRE-L0-SOURCES {
apply-path "interfaces lo0 unit <*> family inet address <164.*>";
}
+ policy-statement COMANCHE-PS-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add COMANCHE-PS-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add COMANCHE-PS-VPN;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol ospf;
+ then {
+ community add COMANCHE-PS-VPN;
+ accept;
+ }
+ }
+ term 4 {
+ from protocol bgp;
+ then {
+ community add COMANCHE-PS-VPN;
+ accept;
+ }
+ }
+ }
+ policy-statement COMANCHE-PS-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community COMANCHE-PS-VPN;
+ }
+ then accept;
+ }
+ term 2 {
+ then reject;
+ }
+ }
policy-statement ODMHSAS-VRF-EXPORT {
term 1 {
from protocol static;
@@ -1184,6 +1244,7 @@
}
}
}
+ community COMANCHE-PS-VPN members target:5078:2537;
community FAYE members 5078:9069;
community ODMHSAS-VPN members target:5078:2559;
community ONENET-MGMT-VPN members target:5078:2543;
@@ -1522,6 +1583,16 @@
}
}
}
+ COMANCHE-PS-L3VPN {
+ description COMANCHE-PS-L3VPN;
+ instance-type vrf;
+ interface ge-1/0/0.511;
+ route-distinguisher 164.58.199.69:2537;
+ vrf-import COMANCHE-PS-VRF-IMPORT;
+ vrf-export COMANCHE-PS-VRF-EXPORT;
+ vrf-target target:5078:2537;
+ vrf-table-label;
+ }
NETGROUP-TEST-VPLS {
description NETGROUP-TEST-VPLS;
instance-type vpls;
Index: configs/core.alt.onenet.net
===================================================================
--- configs/core.alt.onenet.net (revision 146448)
+++ configs/core.alt.onenet.net (working copy)
@@ -411,6 +411,7 @@
#lsi.1050226 up up
#lsi.1050227 up up
#lsi.1050234 up up
+#lsi.1050235 up up
#mtun up up
#pimd up up
#pime up up
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net (revision 146512)
+++ configs/core3.okc-m120.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE3-M120-RE0> show system commit
+# 2016-09-16 13:09:56 CDT by sky via cli commit synchronize
# 2016-09-16 09:43:10 CDT by andrew via cli commit synchronize
# 2016-09-16 09:13:38 CDT by andrew via cli commit synchronize
# 2016-09-15 14:38:26 CDT by aberrios via cli commit synchronize
# 2016-09-13 16:06:11 CDT by sky via cli commit synchronize
# 2016-09-13 15:33:56 CDT by sky via cli commit synchronize
-# 2016-09-13 15:27:02 CDT by sky via cli commit synchronize
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -368,7 +368,7 @@
# grnoc-mon at OKC-CORE3-M120-RE0> show system uptime
# System booted: 2016-08-15 03:03 CDT
# Protocols started: 2016-08-15 03:16 CDT
-# Last configured: 2016-09-16 09:43 CDT by andrew
+# Last configured: 2016-09-16 13:09 CDT by sky
#
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show interface terse
@@ -1859,7 +1859,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE3-M120-RE0> show configuration
-## Last commit: 2016-09-16 09:43:10 CDT by andrew
+## Last commit: 2016-09-16 13:09:56 CDT by sky
version 13.3R9.13;
groups {
re0 {
@@ -4101,7 +4101,7 @@
}
}
t1-2/3/0:8:17 {
- description "DOH-BLANCHARD-T1-CIR0002821-OCS [NO-MONITOR]";
+ description DOH-BLANCHARD-T1-CIR0019407-OCS;
dce;
encapsulation frame-relay;
unit 16 {
Index: configs/core4.tul.onenet.net
===================================================================
--- configs/core4.tul.onenet.net (revision 146432)
+++ configs/core4.tul.onenet.net (working copy)
@@ -653,6 +653,7 @@
#lsi.1048596 up up
#lsi.1048597 up up
#lsi.1048598 up up
+#lsi.1048603 up up
#mtun up up
#pimd up up
#pime up up
Index: configs/comanche-ps.client.onenet.net
===================================================================
--- configs/comanche-ps.client.onenet.net (revision 145900)
+++ configs/comanche-ps.client.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at COMANCHE-PS-LR> show system commit
+# 2016-09-16 13:55:54 CDT by andrew via cli
+# 2016-09-16 13:49:47 CDT by andrew via cli
# 2016-08-25 09:23:24 CDT by andrew via cli commit confirmed, rollback in 3mins
# 2016-08-24 14:26:20 CDT by andrew via cli
# 2016-07-18 09:57:07 CDT by andrew via cli commit confirmed, rollback in 3mins
# 2016-07-06 13:14:18 CDT by andrew via cli
-# 2016-07-05 15:35:04 CDT by andrew via cli
-# 2016-06-25 00:29:33 CDT by andrew via cli commit confirmed, rollback in 5mins
# grnoc-mon at COMANCHE-PS-LR> show chassis environment
# Class Item Status Measurement
# Temp Routing Engine OK
@@ -131,7 +131,7 @@
# grnoc-mon at COMANCHE-PS-LR> show system uptime
# System booted: 2016-07-05 14:19 CDT
# Protocols started: 2016-07-05 14:21 CDT
-# Last configured: 2016-08-25 09:23 CDT by andrew
+# Last configured: 2016-09-16 13:55 CDT by andrew
#
# grnoc-mon at COMANCHE-PS-LR> show interface terse
#Interface Admin Link
@@ -202,7 +202,7 @@
#tap up up
#vlan up down
# grnoc-mon at COMANCHE-PS-LR> show configuration
-## Last commit: 2016-08-25 09:23:24 CDT by andrew
+## Last commit: 2016-09-16 13:55:54 CDT by andrew
version 12.1X46-D20.5;
system {
host-name COMANCHE-PS-LR;
@@ -591,6 +591,7 @@
from {
route-filter 10.199.5.0/26 orlonger;
route-filter 192.168.160.0/22 exact;
+ route-filter 192.168.250.0/24 exact;
}
then {
metric 100;
@@ -1134,7 +1135,7 @@
rule 192_168_160_000 {
description "OneNet Server Farm";
match {
- source-address 192.168.160.0/22;
+ source-address [ 192.168.160.0/22 192.168.250.0/24 ];
}
then {
source-nat {
Index: configs/oologah-talala-school.client.onenet.net
===================================================================
--- configs/oologah-talala-school.client.onenet.net (revision 146453)
+++ configs/oologah-talala-school.client.onenet.net (working copy)
@@ -0,0 +1,576 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show system commit
+# 2016-09-14 20:07:56 CDT by root via cli
+# 2016-09-14 19:10:03 CDT by root via cli
+# 2016-09-14 17:07:18 CDT by root via other
+# rescue 2016-09-14 19:55:14 CDT by root via recovery-mgmt
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis environment
+# Class Item Status Measurement
+# Temp Routing Engine OK
+# Routing Engine CPU OK
+# Fans SRX340 Chassis fan 0 OK
+# SRX340 Chassis fan 1 OK
+# SRX340 Chassis fan 2 OK
+# SRX340 Chassis fan 3 OK
+# Power Power Supply 0 OK
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis firmware
+# Part Type Version
+# FPC 0 O/S Version 15.1X49-D35 by builder on 2016-02-02 07:10:51 UTC
+# FWDD O/S Version 15.1X49-D35 by builder on 2016-02-02 07:10:51 UTC
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM ---- CPU less FPC ----
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis CY1716AF0967 SRX340
+# Routing Engine REV 0x06 650-065043 CY1716AF0967 RE-SRX340
+# FPC 0 FPC
+# PIC 0 8xGE,8xGE SFP Base PIC
+# Power Supply 0
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis hardware models
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis routing-engine
+# Routing Engine status:
+# Serial ID CY1716AF0967
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis scb
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis sfm detail
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show chassis ssb
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show system boot-messages
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Running in PARTITIONED TLB MODE
+# Copyright (c) 1996-2016, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2007 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# FreeBSD is a registered trademark of The FreeBSD Foundation.
+# can't re-use a leaf (debug)!
+# FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 4 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 70XX/71XX CPU Rev. 0.2 with no FPU implemented
+# L1 Cache: I size 78kb(128 line), D size 32kb(128 line), thirty two way.
+# L2 Cache: Size 512kb, 4 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# set clock 0x58
+# xhci0: <Cavium Octeon 7xxx xHCI Host Driver> on obio0
+# usb0: <USB bus for xHCI Controller> on xhci0
+# usb0: USB revision 3.0
+# uhub0: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# xhci1: <Cavium Octeon 7xxx xHCI Host Driver> on obio0
+# usb1: <USB bus for xHCI Controller> on xhci1
+# usb1: USB revision 3.0
+# uhub1: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1
+# uhub1: 2 ports with 2 removable, self powered
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCIe HOST bridge> on obio0
+# Disabling Octeon big bar support
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <network, ethernet> at device 0.0 (no driver attached)
+# pci0: <network, ethernet> at device 0.1 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <Macronix MX25L64 - 8MB> on obio0
+# cfi1: <Macronix MX25L64 - 8MB> on obio0
+# octagl0: <Octeon AGL> on obio0
+# umass0: ATP Electronics ATP CG eUSB, rev 2.00/11.00, addr 2
+# miibus0: <MII bus> on octagl0
+# brgphy0: <BCM54616S 10/100/1000baseTX PHY> on miibus0
+# brgphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
+# Timecounter "mips" frequency 1200000000 Hz quality 0
+# Registered AMT tunnel Encap with UDP Tunnel!
+# Loading Redundant LT driver
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# Kernel thread "wkupdaemon" (pid 48) exited prematurely.
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ATP ATP CG eUSB 1100> Fixed Direct Access SCSI-4 device
+# da0: 40.000MB/s transfers
+# da0: 7672MB (15712256 512 byte sectors: 255H 63S/T 978C)
+# Trying to mount root from ufs:/dev/da0s1a
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show version
+# Hostname: OOLOGAH-TALALA-SCHOOL-LR-5244 # Model: srx340 # Junos: 15.1X49-D35 # JUNOS Software Release [15.1X49-D35] # # grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> file list /var/tmp detail # lrw-r--r-- 1 root wheel 11 Feb 2 2016 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show system uptime
+# Time Source: NTP CLOCK
+# System booted: 2016-09-16 11:22 CDT
+# Protocols started: 2016-09-16 11:22 CDT
+# Last configured: 2016-09-14 20:07 CDT by root
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show interface terse
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 down down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 down down
+#ge-0/0/7 up down
+#ge-0/0/7.0 up down
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 down down
+#ge-0/0/15 down down
+#fxp0 down down
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up up
+#vtep up up
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show configuration
+## Last commit: 2016-09-14 20:07:56 CDT by root
+version 15.1X49-D35;
+system {
+ host-name OOLOGAH-TALALA-SCHOOL-LR-5244;
+ auto-snapshot;
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ ports {
+ console log-out-on-disconnect;
+ }
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.198.10;
+ }
+ radius-server {
+ 156.110.31.11 {
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.58.71;
+ }
+ }
+ radius-options {
+ attributes {
+ nas-ip-address 164.58.58.71;
+ }
+ }
+ login {
+ message "\n+----------------------------------------------------------------------------+\n| |\n| Managed by Oklahoma State Regents for Higher Education |\n| Oklahoma Network for Education Enrichment (ONENET) |\n| |\n| *** Unauthorized Use or Access Prohibited *** |\n| |\n| For more information, contact: |\n| |\n| Oklahoma State Regents for Higher Education |\n| Educational Telecommunications Network -- ONENET |\n| (888) 566-3638 |\n| !
info at onenet.net |\n| |\n+----------------------------------------------------------------------------+\n";
+ class admin {
+ idle-timeout 30;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user client {
+ uid 2000;
+ class admin;
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ user upgrades {
+ uid 2003;
+ class operator;
+ authentication {
+# ssh-rsa <removed>;
+ }
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ dhcp {
+ pool 10.1.0.0/24 {
+ address-range low 10.1.0.2 high 10.1.0.254;
+ domain-name test.local;
+ name-server {
+ 164.58.253.10;
+ 164.58.198.10;
+ }
+ router {
+ 10.1.0.1;
+ }
+ }
+ }
+ }
+ syslog {
+ archive size 10m files 5;
+ user * {
+ any emergency;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file traffic {
+ any any;
+ match RT_FLOW_SESSION;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+ }
+ }
+ max-configurations-on-flash 20;
+ max-configuration-rollbacks 20;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+security {
+ forwarding-options {
+ family {
+ inet6 {
+ mode flow-based;
+ }
+ }
+ }
+ screen {
+ ids-option UNTRUST-SCREEN {
+ icmp {
+ ping-death;
+ }
+ ip {
+ source-route-option;
+ tear-drop;
+ }
+ tcp {
+ syn-flood {
+ alarm-threshold 1024;
+ attack-threshold 200;
+ source-threshold 1024;
+ destination-threshold 2048;
+ timeout 20;
+ }
+ land;
+ }
+ }
+ }
+ nat {
+ source {
+ rule-set TEST-TO-UNTRUST-NAT {
+ from zone TEST;
+ to zone UNTRUST;
+ rule NAT-TEST-TO-UNTRUST {
+ match {
+ source-address 0.0.0.0/0;
+ }
+ then {
+ source-nat {
+ interface;
+ }
+ }
+ }
+ }
+ }
+ }
+ policies {
+ from-zone UNTRUST to-zone UNTRUST {
+ policy UNTRUST-TO-UNTRUST {
+ match {
+ source-address any;
+ destination-address any;
+ application any;
+ }
+ then {
+ permit;
+ }
+ }
+ }
+ from-zone TEST to-zone UNTRUST {
+ policy ALLOW-ALL-OUT {
+ match {
+ source-address any;
+ destination-address any;
+ application any;
+ }
+ then {
+ permit;
+ }
+ }
+ }
+ }
+ zones {
+ security-zone UNTRUST {
+ screen UNTRUST-SCREEN;
+ interfaces {
+ ge-0/0/7.0 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ }
+ }
+ }
+ ge-0/0/0.0 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ snmp;
+ ssh;
+ traceroute;
+ }
+ }
+ }
+ }
+ }
+ security-zone TEST {
+ interfaces {
+ ge-0/0/1.0 {
+ host-inbound-traffic {
+ system-services {
+ dhcp;
+ ping;
+ traceroute;
+ }
+ }
+ }
+ }
+ }
+ }
+}
+interfaces {
+ ge-0/0/0 {
+ description "L3 INTERFACE - UNTRUST-WAN - 164.58.58.71/31";
+ unit 0 {
+ family inet {
+ address 164.58.58.71/31;
+ }
+ }
+ }
+ ge-0/0/1 {
+ description "TEST - 10.1.0.1/24";
+ unit 0 {
+ family inet {
+ address 10.1.0.1/24;
+ }
+ }
+ }
+ ge-0/0/2 {
+ disable;
+ }
+ ge-0/0/3 {
+ disable;
+ }
+ ge-0/0/4 {
+ disable;
+ }
+ ge-0/0/5 {
+ disable;
+ }
+ ge-0/0/6 {
+ disable;
+ }
+ ge-0/0/7 {
+ unit 0 {
+ description "UNTRUST - 156.110.54.113/28";
+ family inet {
+ address 156.110.54.113/28;
+ }
+ }
+ }
+ ge-0/0/8 {
+ disable;
+ }
+ ge-0/0/9 {
+ disable;
+ }
+ ge-0/0/10 {
+ disable;
+ }
+ ge-0/0/11 {
+ disable;
+ }
+ ge-0/0/12 {
+ disable;
+ }
+ ge-0/0/13 {
+ disable;
+ }
+ ge-0/0/14 {
+ disable;
+ }
+ ge-0/0/15 {
+ disable;
+ }
+ fxp0 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ }
+ }
+ }
+}
+snmp {
+ description OneNet;
+ contact "Net Group";
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+}
+routing-options {
+ static {
+ route 0.0.0.0/0 next-hop 164.58.58.70;
+ }
+}
+policy-options {
+ prefix-list PRE-MGMT-SOURCES {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ }
+ prefix-list PRE-LOCALIPv4-SOURCES {
+ apply-path "interfaces <*> unit <*> family inet address <*>";
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term SSH-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-MGMT-SOURCES;
+ PRE-LOCALIPv4-SOURCES;
+ }
+ protocol tcp;
+ destination-port ssh;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-MGMT-SOURCES;
+ PRE-LOCALIPv4-SOURCES;
+ }
+ protocol udp;
+ destination-port snmp;
+ }
+ then accept;
+ }
+ term SSH-DENY {
+ from {
+ protocol tcp;
+ destination-port ssh;
+ }
+ then {
+ discard;
+ }
+ }
+ term SNMP-DENY {
+ from {
+ protocol udp;
+ destination-port snmp;
+ }
+ then {
+ discard;
+ }
+ }
+ term ALL-TRAFFIC {
+ then accept;
+ }
+ }
+ }
+}
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show ospf neighbor
+# OSPF instance is not running
+#
+# grnoc-mon at OOLOGAH-TALALA-SCHOOL-LR-5244> show bfd session
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/core4.okc.onenet.net
===================================================================
--- configs/core4.okc.onenet.net (revision 146484)
+++ configs/core4.okc.onenet.net (working copy)
@@ -994,6 +994,7 @@
#lsi.1048865 up up
#lsi.1048866 up up
#lsi.1048867 up up
+#lsi.1048872 up up
#mtun up up
#pimd up up
#pime up up
Index: configs/core.pot.onenet.net
===================================================================
--- configs/core.pot.onenet.net (revision 146448)
+++ configs/core.pot.onenet.net (working copy)
@@ -1,13 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at POTEAU-MX480-RE0> show system commit
+# 2016-09-16 13:42:49 CDT by joel via cli commit synchronize
+# 2016-09-16 13:40:24 CDT by joel via cli commit synchronize
# 2016-09-08 18:07:44 CDT by andrew via cli commit synchronize
# 2016-09-08 14:24:51 CDT by andrew via cli commit synchronize
# 2016-09-08 13:35:54 CDT by andrew via cli commit synchronize
# 2016-08-31 13:18:32 CDT by joel via cli commit synchronize
-# 2016-08-19 15:06:56 CDT by andrew via cli commit synchronize
-# 2016-08-18 10:48:35 CDT by root via other
-# Synchronization with remote Routing Engine
# grnoc-mon at POTEAU-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -259,7 +258,7 @@
# grnoc-mon at POTEAU-MX480-RE0> show system uptime
# System booted: 2016-08-18 10:44 CDT
# Protocols started: 2016-08-18 10:48 CDT
-# Last configured: 2016-09-08 18:07 CDT by andrew
+# Last configured: 2016-09-16 13:42 CDT by joel
#
# {master}
# grnoc-mon at POTEAU-MX480-RE0> show interface terse
@@ -308,7 +307,6 @@
#ge-0/3/1 up up
#ge-0/3/1.0 up up
#ge-0/3/2 up up
-#ge-0/3/2.975 up up
#ge-0/3/2.1090 up up
#ge-0/3/2.1186 up up
#ge-0/3/2.1199 up up
@@ -415,7 +413,7 @@
#pp0 up up
#tap up up
# grnoc-mon at POTEAU-MX480-RE0> show configuration
-## Last commit: 2016-09-08 18:07:44 CDT by andrew
+## Last commit: 2016-09-16 13:42:49 CDT by joel
version 13.3R8.7;
groups {
re0 {
@@ -858,22 +856,6 @@
gigether-options {
no-auto-negotiation;
}
- unit 975 {
- description "TECUMSEH-PUBLIC-SCHOOLS-200M-CIR0019321-LR [ORDERED]";
- bandwidth 200m;
- vlan-id 975;
- family inet {
- rpf-check;
- policer {
- input 200M-POL;
- output 200M-POL;
- }
- sampling {
- input;
- }
- address 156.110.39.157/30;
- }
- }
unit 1090 {
description Smithville-Public-School-50M-CIR0006196-LR;
bandwidth 50m;
@@ -2308,14 +2290,6 @@
}
then discard;
}
- policer 200M-POL {
- logical-interface-policer;
- if-exceeding {
- bandwidth-limit 200m;
- burst-size-limit 20m;
- }
- then discard;
- }
}
routing-instances {
ODOT-VPLS-2527 {
Index: configs/odmhsas.central-office.okc.client.onenet.net
===================================================================
--- configs/odmhsas.central-office.okc.client.onenet.net (revision 146512)
+++ configs/odmhsas.central-office.okc.client.onenet.net (working copy)
@@ -181,7 +181,7 @@
#st0.15 up up
#st0.16 up down
#st0.17 up up
-#st0.18 up up
+#st0.18 up down
#st0.19 up up
#st0.20 up up
#st0.21 up up
Index: configs/core.law.onenet.net
===================================================================
--- configs/core.law.onenet.net (revision 146465)
+++ configs/core.law.onenet.net (working copy)
@@ -592,6 +592,7 @@
#lsi.1048962 up up
#lsi.1048964 up up
#lsi.1048971 up up
+#lsi.1048972 up up
#mtun up up
#pimd up up
#pime up up
Index: configs/odmhsas-ncbh-fairview.client.onenet.net
===================================================================
--- configs/odmhsas-ncbh-fairview.client.onenet.net (revision 146512)
+++ configs/odmhsas-ncbh-fairview.client.onenet.net (working copy)
@@ -148,8 +148,8 @@
#ppd0 up up
#ppe0 up up
#st0 up up
-#st0.1 up up
-#st0.2 up up
+#st0.1 up down
+#st0.2 up down
#tap up up
#vlan up up
#vlan.4 up down
Index: configs/lavern-public-schools.client.onenet.net
===================================================================
--- configs/lavern-public-schools.client.onenet.net (revision 146512)
+++ configs/lavern-public-schools.client.onenet.net (working copy)
@@ -102,7 +102,7 @@
#
# grnoc-mon at LAVERN-PUBLIC-SCHOOLS-TAG-004351> show interface terse
#Interface Admin Link
-#ge-0/0/0 down down
+#ge-0/0/0 down up
#gr-0/0/0 up up
#ip-0/0/0 up up
#lsq-0/0/0 up up
Index: configs/core1.ptc.onenet.net
===================================================================
--- configs/core1.ptc.onenet.net (revision 146419)
+++ configs/core1.ptc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-PTC1-MX480-RE0> show system commit
+# 2016-09-16 13:43:00 CDT by joel via cli commit synchronize
# 2016-09-02 12:23:08 CDT by joel via cli commit synchronize
# 2016-08-30 22:54:33 CDT by joel via cli commit synchronize
# 2016-08-30 16:20:41 CDT by joel via cli commit synchronize
# 2016-08-30 14:46:05 CDT by joel via cli commit synchronize
# 2016-08-29 13:52:12 CDT by joel via cli commit synchronize
-# 2016-08-29 13:06:59 CDT by joel via cli commit confirmed, rollback in 5mins synchronize
# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -307,7 +307,7 @@
# grnoc-mon at TULSA-PTC1-MX480-RE0> show system uptime
# System booted: 2016-03-17 00:52 CDT
# Protocols started: 2016-03-17 01:01 CDT
-# Last configured: 2016-09-02 12:23 CDT by joel
+# Last configured: 2016-09-16 13:43 CDT by joel
#
# {master}
# grnoc-mon at TULSA-PTC1-MX480-RE0> show interface terse
@@ -346,6 +346,7 @@
#ge-0/2/5 up up
#ge-0/2/5.500 up up
#ge-0/2/5.965 up up
+#ge-0/2/5.975 up up
#ge-0/2/5.1216 up up
#ge-0/2/5.1498 up up
#ge-0/2/5.1576 up up
@@ -445,7 +446,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-PTC1-MX480-RE0> show configuration
-## Last commit: 2016-09-02 12:23:08 CDT by joel
+## Last commit: 2016-09-16 13:43:00 CDT by joel
version 13.3R8.7;
groups {
re0 {
@@ -861,6 +862,22 @@
address 164.58.9.96/31;
}
}
+ unit 975 {
+ description "TECUMSEH-PUBLIC-SCHOOLS-200M-CIR0019321-LR [ORDERED]";
+ bandwidth 200m;
+ vlan-id 975;
+ family inet {
+ rpf-check;
+ policer {
+ input 200M-POL;
+ output 200M-POL;
+ }
+ sampling {
+ input;
+ }
+ address 156.110.39.157/30;
+ }
+ }
unit 1216 {
description Barnsdall-Public-Schools-300M-CIR0006207-LR;
bandwidth 300m;
@@ -2685,6 +2702,14 @@
}
then discard;
}
+ policer 200M-POL {
+ logical-interface-policer;
+ if-exceeding {
+ bandwidth-limit 200m;
+ burst-size-limit 20m;
+ }
+ then discard;
+ }
}
routing-instances {
ONENET-MGMT-L3VPN {
Index: configs/core5.okc.onenet.net
===================================================================
--- configs/core5.okc.onenet.net (revision 146490)
+++ configs/core5.okc.onenet.net (working copy)
@@ -907,6 +907,8 @@
#lsi.1048670 up up
#lsi.1048671 up up
#lsi.1048682 up up
+#lsi.1048683 up up
+#lsi.1048684 up up
#mtun up up
#pimd up up
#pime up up
Index: configs/hub.wil.onenet.net
===================================================================
--- configs/hub.wil.onenet.net (revision 146483)
+++ configs/hub.wil.onenet.net (working copy)
@@ -322,7 +322,7 @@
#t1-2/0/3:5 down down
#t1-2/0/3:6 down down
#t1-2/0/3:7 up up
-#t1-2/0/3:7.0 up up
+#t1-2/0/3:7.0 up down
#t1-2/0/3:8 down down
#t1-2/0/3:9 down down
#t1-2/0/3:10 up up
Index: configs/maysville-hs.client.onenet.net
===================================================================
--- configs/maysville-hs.client.onenet.net (revision 146509)
+++ configs/maysville-hs.client.onenet.net (working copy)
@@ -598,8 +598,8 @@
# OSPF instance is not running
#
# grnoc-mon at MAYSVILLE-HS-LEASED-ASSET-TAG-004887> show bfd session
+
quit
-
0 sessions, 0 clients
Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
More information about the Nocrancid
mailing list