[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Wed Sep 21 13:04:04 CDT 2016
Index: configs/allen-public-library.client.onenet.net
===================================================================
--- configs/allen-public-library.client.onenet.net (revision 146637)
+++ configs/allen-public-library.client.onenet.net (working copy)
@@ -137,8 +137,8 @@
#ge-0/0/2.0 up up
#ge-0/0/3 up down
#ge-0/0/3.0 up down
-#ge-0/0/4 up down
-#ge-0/0/4.0 up down
+#ge-0/0/4 up up
+#ge-0/0/4.0 up up
#ge-0/0/5 up up
#ge-0/0/5.0 up up
#ge-0/0/6 up up
Index: configs/maysville-es.client.onenet.net
===================================================================
--- configs/maysville-es.client.onenet.net (revision 146658)
+++ configs/maysville-es.client.onenet.net (working copy)
@@ -614,6 +614,7 @@
# OSPF instance is not running
#
# grnoc-mon at MAYSVILLE-ES-LEASED-ASSET-TAG-004945> show bfd session
+quit
0 sessions, 0 clients
Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
Index: configs/hub.ada.onenet.net
===================================================================
--- configs/hub.ada.onenet.net (revision 146564)
+++ configs/hub.ada.onenet.net (working copy)
@@ -301,10 +301,10 @@
#t1-2/0/2:11.16 up up
#t1-2/0/2:11.17 up up
#t1-2/0/2:11.18 up up
-#t1-2/0/2:12 up up
-#t1-2/0/2:12.16 up up
-#t1-2/0/2:12.17 up up
-#t1-2/0/2:12.18 up up
+#t1-2/0/2:12 up down
+#t1-2/0/2:12.16 up down
+#t1-2/0/2:12.17 up down
+#t1-2/0/2:12.18 up down
#t1-2/0/2:13 down down
#t1-2/0/2:14 up up
#t1-2/0/2:14.0 up up
Index: configs/okc-vpn-cluster.okc.onenet.net
===================================================================
--- configs/okc-vpn-cluster.okc.onenet.net (revision 146658)
+++ configs/okc-vpn-cluster.okc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-VPN-CLUSTER-NODE0> show system commit
+# 2016-09-21 12:43:10 CDT by sky via cli
# 2016-09-21 11:22:23 CDT by sky via cli
# 2016-09-20 16:24:05 CDT by sky via cli
# 2016-08-22 14:23:22 CDT by sky via cli
# 2016-07-27 20:43:25 CDT by andrew via cli commit confirmed, rollback in 3mins
# 2016-07-27 20:28:29 CDT by andrew via cli commit confirmed, rollback in 3mins
-# 2016-07-26 13:56:06 CDT by sean via cli
# grnoc-mon at OKC-VPN-CLUSTER-NODE0> show chassis environment
# node0:
# --------------------------------------------------------------------------
@@ -234,12 +234,12 @@
# --------------------------------------------------------------------------
# System booted: 2016-03-01 19:49 CST
# Protocols started: 2016-03-01 20:04 CST
-# Last configured: 2016-09-21 11:22 CDT by sky
+# Last configured: 2016-09-21 12:43 CDT by sky
#
# node1:
# --------------------------------------------------------------------------
# System booted: 2016-03-01 19:35 CST
-# Last configured: 2016-09-21 11:23 CDT by root
+# Last configured: 2016-09-21 12:44 CDT by root
#
# {primary:node0}
# grnoc-mon at OKC-VPN-CLUSTER-NODE0> show interface terse
@@ -358,14 +358,14 @@
#st0.23 up down
#st0.25 up up
#st0.26 up down
-#st0.27 up down
+#st0.27 up up
#st0.28 up up
#swfab0 up down
#swfab1 up down
#tap up up
#vlan up up
# grnoc-mon at OKC-VPN-CLUSTER-NODE0> show configuration
-## Last commit: 2016-09-21 11:22:23 CDT by sky
+## Last commit: 2016-09-21 12:43:10 CDT by sky
version 12.1X46-D40.2;
groups {
node0 {
@@ -861,6 +861,7 @@
route 164.58.63.160/28 next-hop 156.110.24.153;
route 156.110.86.244/30 next-hop 156.110.24.153;
route 156.110.87.160/29 next-hop 164.58.73.249;
+ route 156.110.34.80/29 next-hop 164.58.73.245;
}
router-id 164.58.0.255;
autonomous-system 64520;
Index: configs/leflore-ps.client.onenet.net
===================================================================
--- configs/leflore-ps.client.onenet.net (revision 146598)
+++ configs/leflore-ps.client.onenet.net (working copy)
@@ -96,8 +96,8 @@
# total files: 1
#
# grnoc-mon at LEFLORE-PS-LR-004337> show system uptime
-# System booted: 2016-09-19 09:42 CDT
-# Protocols started: 2016-09-19 09:44 CDT
+# System booted: 2016-09-21 12:37 CDT
+# Protocols started: 2016-09-21 12:39 CDT
# Last configured: 2016-09-13 11:01 CDT by andrew
#
# grnoc-mon at LEFLORE-PS-LR-004337> show interface terse
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net (revision 146654)
+++ configs/hub.dur.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at DURANT-M120-RE0> show system commit
+# 2016-09-21 12:42:23 CDT by sky via cli commit synchronize
# 2016-08-12 09:22:07 CDT by andrew via cli commit synchronize
# 2016-07-20 10:03:28 CDT by andrew via cli commit synchronize
# 2016-07-13 19:09:08 CDT by andrew via cli commit synchronize
# 2016-07-13 16:15:07 CDT by sky via cli commit synchronize
# 2016-07-12 21:12:00 CDT by sky via cli commit synchronize
-# 2016-07-12 21:06:56 CDT by sky via cli commit synchronize
# grnoc-mon at DURANT-M120-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -264,7 +264,7 @@
# grnoc-mon at DURANT-M120-RE0> show system uptime
# System booted: 2016-03-15 00:55 CDT
# Protocols started: 2016-03-15 01:02 CDT
-# Last configured: 2016-08-12 09:22 CDT by andrew
+# Last configured: 2016-09-21 12:42 CDT by sky
#
# {master}
# grnoc-mon at DURANT-M120-RE0> show interface terse
@@ -395,7 +395,7 @@
#pp0 up up
#tap up up
# grnoc-mon at DURANT-M120-RE0> show configuration
-## Last commit: 2016-08-12 09:22:07 CDT by andrew
+## Last commit: 2016-09-21 12:42:23 CDT by sky
version 13.3R8.7;
groups {
re0 {
@@ -1171,7 +1171,6 @@
route 164.58.212.104/30 next-hop 164.58.225.126;
route 156.110.46.240/30 next-hop 156.110.58.86;
route 156.110.211.160/30 next-hop 156.110.58.210;
- route 156.110.34.80/29 next-hop 156.110.24.174;
route 192.0.2.1/32 {
discard;
no-readvertise;
Index: configs/keota-hs.client.onenet.net
===================================================================
--- configs/keota-hs.client.onenet.net (revision 146629)
+++ configs/keota-hs.client.onenet.net (working copy)
@@ -95,8 +95,8 @@
# total files: 1
#
# grnoc-mon at KEOTA-HS-LR-003942> show system uptime
-# System booted: 2016-09-20 11:16 CDT
-# Protocols started: 2016-09-20 11:18 CDT
+# System booted: 2016-09-21 12:30 CDT
+# Protocols started: 2016-09-21 12:32 CDT
# Last configured: 2015-10-02 13:52 CDT by andrew
#
# grnoc-mon at KEOTA-HS-LR-003942> show interface terse
Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net (revision 146658)
+++ configs/core5.tul.onenet.net (working copy)
@@ -7734,6 +7734,7 @@
Address State Interface Time Interval Multiplier
10.119.20.135 Up xe-2/3/0.170 6.000 2.000 3
10.119.20.149 Up xe-1/0/1.216 6.000 2.000 3
+10.119.20.151 Up xe-2/3/0.164 6.000 2.000 3
10.119.20.153 Up xe-2/3/0.165 6.000 2.000 3
164.58.15.149 Up xe-0/1/1.148 1.200 0.400 3
164.58.244.96 Up ae2.42 1.200 0.400 3
@@ -7743,7 +7744,7 @@
fe80::2ac0:daff:fe4e:cef8 Up ge-0/3/8.0 1.200 0.400 3
fe80::8618:8800:2aee:4fc3 Up ae2.42 1.200 0.400 3
-10 sessions, 13 clients
-Cumulative transmit rate 17.0 pps, cumulative receive rate 16.5 pps
+11 sessions, 14 clients
+Cumulative transmit rate 17.5 pps, cumulative receive rate 17.0 pps
{master}
Index: configs/core1.lan.onenet.net
===================================================================
--- configs/core1.lan.onenet.net (revision 146656)
+++ configs/core1.lan.onenet.net (working copy)
@@ -24,12 +24,6 @@
# AFEB 0 AFEB Processor OK
# AFEB 0 LU Temp OK
# AFEB 0 MQ Temp OK
-# AFEB 0 AFEB Processor OK
-# AFEB 0 LU Temp OK
-# AFEB 0 MQ Temp OK
-# AFEB 0 AFEB Processor OK
-# AFEB 0 LU Temp OK
-# AFEB 0 MQ Temp OK
# AFEB 0 QX Temp OK
# Fans Fan 1 OK
# Fan 2 OK
Index: configs/sayre-public-library-ex.client.onenet.net
===================================================================
--- configs/sayre-public-library-ex.client.onenet.net (revision 146485)
+++ configs/sayre-public-library-ex.client.onenet.net (working copy)
@@ -0,0 +1,572 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show system commit
+# 2015-02-18 08:32:22 CST by admin via cli commit confirmed, rollback in 5mins
+# 2015-02-12 10:47:49 CST by admin via cli
+# 2015-02-12 10:08:55 CST by admin via cli
+# 2015-02-12 09:41:25 CST by admin via cli
+# 2015-02-12 08:39:29 CST by admin via cli
+# 2015-02-12 08:07:30 CST by admin via cli
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis environment
+# Class Item Status Measurement
+# Power FPC 0 Power Supply 0 OK
+# Temp FPC 0 CPU OK
+# FPC 0 Exhaust Area OK
+# FPC 0 EX-PFE1 OK
+# FPC 0 Local Intake OK
+# FPC 0 Remote Intake OK
+# FPC 0 GEPHY1 OK
+# FPC 0 GEPHY2 OK
+# FPC 0 GEPHY3 OK
+# FPC 0 GEPHY4 OK
+# FPC 0 GEPHY5 OK
+# FPC 0 GEPHY6 OK
+# Fans FPC 0 Fan 1 OK
+# FPC 0 Fan 2 OK
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis firmware
+# Part Type Version
+# FPC 0 uboot U-Boot 1.1.6 (Jul 26 2011 - 03:49:27) 1.0
+# loader FreeBSD/arm U-Boot loader 1.1
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM 512 MB
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis CW0215530378 EX2200-24T-4G
+# Routing Engine 0 REV 27 750-026468 CW0215530378 EX2200-24T-4G
+# FPC 0 REV 27 750-026468 CW0215530378 EX2200-24T-4G
+# CPU BUILTIN BUILTIN FPC CPU
+# PIC 0 BUILTIN BUILTIN 24x 10/100/1000 Base-T
+# PIC 1 REV 27 750-026468 CW0215530378 4x GE SFP
+# Power Supply 0 PS 100W AC
+# Fan Tray Fan Tray
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis hardware models
+# Hardware inventory:
+# Item Version Part number Serial number FRU model number
+# Routing Engine 0 REV 27 750-026468 CW0215530378 EX2200-24T-4G
+# FPC 0 REV 27 750-026468 CW0215530378 EX2200-24T-4G
+# PIC 0 BUILTIN BUILTIN EX2200-24T-4G
+# PIC 1 REV 27 750-026468 CW0215530378 EX2200-24T-4G
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis routing-engine
+# Routing Engine status:
+# Slot 0:
+# Current state Master
+# DRAM 512
+# Serial ID CW0215530378
+#
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis scb
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis sfm detail
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show chassis ssb
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show system boot-messages
+# fpc0:
+# --------------------------------------------------------------------------
+# GDB: debug ports: uart
+# GDB: current port: uart
+# KDB: debugger backends: ddb gdb
+# KDB: current backend: ddb
+# Copyright (c) 1996-2015, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# can't re-use a leaf (all_slot_serialid)!
+# CPU: Feroceon 88FR131 rev 1 (Marvell core)
+# cpu53: Feroceon 88FR131 revision WB enabled EABT branch prediction enabled
+# 16KB/32B 4-way Instruction cache
+# 16KB/32B 4-way write-back-locking-C Data cache
+# SOC: Marvell 88F6281 rev A0, TClock 200MHz
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# ETHERNET SOCKET BRIDGE initialising
+# Initializing EXSERIES properties ...
+# mbus0: <Marvell Internal Bus (Mbus)> on motherboard
+# ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on mbus0
+# timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 1 on mbus0
+# gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 35,36,37,38,39,40,41 on mbus0
+# uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 33 on mbus0
+# uart0: console (9600,n,8,1)
+# uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 34 on mbus0
+# ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq 48,19 on mbus0
+# usb0: EHCI version 1.0
+# usb0 on ehci0
+# usb0: USB revision 2.0
+# uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x04b4 product 0x6560, class 9/0, rev 2.00/90.15, addr 2
+# uhub1: single transaction translator
+# uhub1: 2 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682 High Speed Mode, rev 2.00/2.10, addr 3
+# mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 12,13,14,11,46 on mbus0
+# mge0: hardware MAC address 80:ac:ac:f6:06:3f
+# miibus0: <MII bus> on mge0
+# e1000phy0: <Marvell 88E1118 Gigabit PHY> on miibus0
+# e1000phy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
+# i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f irq 29 on mbus0
+# syspld0: <SYSPLD> on i2c0
+# 8564 rtc0: <8564 RTC> on i2c0
+# poe0: <POE> on i2c0
+# device_attach: poe0 attach returned 19
+# cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8000000-0xf87fffff irq 23 on mbus0
+# mpfe0: <Juniper EX-series Packet Forwarding Engine> at mem 0xf4000000-0xf7ffffff irq 113 on mbus0
+# pcib0: <Marvell 88F6281 PCI-Express host controller> at mem 0xf1040000-0xf1041fff,0xe8000000-0xefffffff irq 9 on mbus0
+# pci0: <PCI bus> on pcib0
+# Initializing product: 75 ..
+# bmeb: bmeb_lib_init done 0xc338a800, addr 0xc1d60064
+# bme0:Virtual BME driver initializing
+# Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
+# Kernel thread "wkupdaemon" (pid 42) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s1a
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show version
+# fpc0: # -------------------------------------------------------------------------- # Hostname: SAYRE-LIB-EX-CLIENT-OWNED # Model: ex2200-24t-4g # JUNOS Base OS boot [12.3R9.4] # JUNOS Base OS Software Suite [12.3R9.4] # JUNOS Kernel Software Suite [12.3R9.4] # JUNOS Crypto Software Suite [12.3R9.4] # JUNOS Online Documentation [12.3R9.4] # JUNOS Enterprise Software Suite [12.3R9.4] # JUNOS Packet Forwarding Engine Enterprise Software Suite [12.3R9.4] # JUNOS Routing Software Suite [12.3R9.4] # JUNOS Web Management [12.3R9.4] # JUNOS FIPS mode utilities [12.3R9.4] # # {master:0} # grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> file list /var/tmp detail #
+# /var/tmp:
+# total blocks: 48
+# drwxrwxr-x 2 root wheel 512 Nov 15 2011 .snap/
+# -rw-r--r-- 1 root field 3898 Feb 12 07:59 ex_autod_config
+# -rw-r--r-- 1 root field 2998 Feb 12 07:59 ex_autod_rollback_cfg
+# drwxr-xr-x 2 root wheel 512 Feb 12 07:55 gres-tp/
+# drwxrwxrwx 2 root wheel 512 Feb 12 07:55 install/
+# drwxrwxrwx 2 root wheel 512 Feb 12 07:55 pics/
+# drwxr-xr-x 2 root field 512 Feb 12 07:55 rtsdb/
+# drwxrwxrwt 2 root wheel 512 Feb 12 07:55 vi.recover/
+# total files: 2
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show system uptime
+# fpc0:
+# --------------------------------------------------------------------------
+# System booted: 2015-02-12 11:04 CST
+# Protocols started: 2015-02-12 11:08 CST
+# Last configured: 2015-02-18 08:32 CST by admin
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show interface terse
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 up up
+#ge-0/0/2.0 up up
+#ge-0/0/3 up down
+#ge-0/0/3.0 up down
+#ge-0/0/4 up down
+#ge-0/0/4.0 up down
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
+#ge-0/0/6 up down
+#ge-0/0/6.0 up down
+#ge-0/0/7 up down
+#ge-0/0/7.0 up down
+#ge-0/0/8 up down
+#ge-0/0/8.0 up down
+#ge-0/0/9 up down
+#ge-0/0/9.0 up down
+#ge-0/0/10 up down
+#ge-0/0/10.0 up down
+#ge-0/0/11 up down
+#ge-0/0/11.0 up down
+#ge-0/0/12 up up
+#ge-0/0/12.0 up up
+#ge-0/0/13 up up
+#ge-0/0/13.0 up up
+#ge-0/0/14 up up
+#ge-0/0/14.0 up up
+#ge-0/0/15 up down
+#ge-0/0/15.0 up down
+#ge-0/0/16 up down
+#ge-0/0/16.0 up down
+#ge-0/0/17 up down
+#ge-0/0/17.0 up down
+#ge-0/0/18 up up
+#ge-0/0/18.0 up up
+#ge-0/0/19 up down
+#ge-0/0/19.0 up down
+#ge-0/0/20 up down
+#ge-0/0/20.0 up down
+#ge-0/0/21 up down
+#ge-0/0/21.0 up down
+#ge-0/0/22 up down
+#ge-0/0/22.0 up down
+#ge-0/0/23 up up
+#ge-0/0/23.0 up up
+#bme0 up up
+#bme0.32768 up up
+#dsc up up
+#gre up up
+#ipip up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lsi up up
+#me0 down down
+#me0.0 up down
+#mtun up up
+#pimd up up
+#pime up up
+#tap up up
+#vlan up up
+#vlan.80 up up
+#vme up down
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show configuration
+## Last commit: 2015-02-18 08:32:22 CST by admin
+version 12.3R9.4;
+system {
+ host-name SAYRE-LIB-EX-CLIENT-OWNED;
+ auto-snapshot;
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ ports {
+ console log-out-on-disconnect;
+ }
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.253.10;
+ 164.58.198.10;
+ }
+ radius-server {
+ 156.110.31.11 {
+ port 1812;
+ accounting-port 1813;
+# secret "<removed>"; ## SECRET-DATA
+ source-address 10.199.255.5;
+ }
+ }
+ radius-options {
+ attributes {
+ nas-ip-address 10.199.255.5;
+ }
+ }
+ login {
+ message "\n+----------------------------------------------------------------------------+\n| |\n| Managed by Oklahoma State Regents for Higher Education |\n| Oklahoma Network for Education Enrichment (ONENET) |\n| |\n| *** Unauthorized Use or Access Prohibited *** |\n| |\n| For more information, contact: |\n| |\n| Oklahoma State Regents for Higher Education |\n| Educational Telecommunications Network -- ONENET |\n| (888) 566-3638 |\n| !
info at onenet.net |\n| |\n+----------------------------------------------------------------------------+\n";
+ class admin {
+ idle-timeout 30;
+ permissions all;
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user client {
+ uid 2000;
+ class admin;
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ user upgrades {
+ uid 2003;
+ class operator;
+ authentication {
+# ssh-rsa <removed>;
+ }
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ max-sessions-per-connection 32;
+ }
+ netconf {
+ ssh;
+ }
+ }
+ syslog {
+ archive size 10m files 5;
+ user * {
+ any emergency;
+ }
+ host 164.58.253.92 {
+ any any;
+ }
+ host 164.58.253.38 {
+ any any;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file traffic {
+ any any;
+ match RT_FLOW_SESSION;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+ }
+ source-address 10.199.255.5;
+ }
+ max-configurations-on-flash 20;
+ ##
+ ## Warning: statement ignored: unsupported platform (ex2200-24t-4g)
+ ##
+ max-configuration-rollbacks 20;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+interfaces {
+ interface-range TRUST-INTERACES {
+ member-range ge-0/0/1 to ge-0/0/11;
+ description TRUST-INTERFACES;
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members TRUST-VLAN;
+ }
+ }
+ }
+ }
+ interface-range GUEST-INTERFACES {
+ member-range ge-0/0/12 to ge-0/0/22;
+ description GUEST-INTERFACES;
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members GUEST-VLAN;
+ }
+ }
+ }
+ }
+ ge-0/0/0 {
+ description Wireless-Access-Point;
+ unit 0 {
+ family ethernet-switching {
+ port-mode trunk;
+ vlan {
+ members GUEST-VLAN;
+ }
+ native-vlan-id TRUST-VLAN;
+ }
+ }
+ }
+ ge-0/0/23 {
+ description "L2 TRUNK TO SRX";
+ unit 0 {
+ family ethernet-switching {
+ port-mode trunk;
+ vlan {
+ members [ TRUST-VLAN GUEST-VLAN ONENET-MGMT-L3VPN-VLAN ];
+ }
+ }
+ }
+ }
+ ge-0/1/0 {
+ disable;
+ }
+ ge-0/1/1 {
+ disable;
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ }
+ }
+ }
+ me0 {
+ disable;
+ }
+ vlan {
+ unit 80 {
+ description "L3 INTERFACE - ONENET-MGMT-L3VPN-VLAN - 10.199.255.5/31";
+ family inet {
+ address 10.199.255.5/31;
+ }
+ }
+ }
+}
+snmp {
+ description OneNet;
+ contact "Net Group";
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+}
+routing-options {
+ static {
+ route 0.0.0.0/0 next-hop 10.199.255.4;
+ }
+}
+protocols {
+ igmp-snooping {
+ vlan all;
+ }
+ rstp {
+ interface TRUST-INTERACES {
+ edge;
+ }
+ bpdu-block-on-edge;
+ }
+ lldp {
+ interface all;
+ }
+}
+policy-options {
+ prefix-list PRE-LOCALIPv4-SOURCES {
+ apply-path "interfaces <*> unit <*> family inet address <*>";
+ }
+ prefix-list PRE-MGMT-SOURCES {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.253.0/24;
+ }
+ prefix-list PRE-DNS-SOURCES {
+ apply-path "system name-server <*>";
+ }
+ prefix-list PRE-NTP-SOURCES {
+ apply-path "system ntp server <*>";
+ }
+}
+firewall {
+ family inet {
+ filter PROTECT-RE {
+ term MGMT {
+ from {
+ source-prefix-list {
+ PRE-MGMT-SOURCES;
+ PRE-DNS-SOURCES;
+ PRE-NTP-SOURCES;
+ PRE-LOCALIPv4-SOURCES;
+ }
+ }
+ then accept;
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term Reject {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+ethernet-switching-options {
+ secure-access-port {
+ interface TRUST-INTERACES {
+ mac-limit 3 action log;
+ no-dhcp-trusted;
+ }
+ }
+ storm-control {
+ action-shutdown;
+ interface all {
+ bandwidth 15000;
+ }
+ }
+ bpdu-block {
+ interface TRUST-INTERACES {
+ shutdown;
+ }
+ }
+}
+vlans {
+ GUEST-VLAN {
+ description GUEST-VLAN;
+ vlan-id 300;
+ }
+ ONENET-MGMT-L3VPN-VLAN {
+ description ONENET-MGMT-L3VPN-VLAN;
+ vlan-id 80;
+ l3-interface vlan.80;
+ }
+ TRUST-VLAN {
+ description TRUST-VLAN;
+ vlan-id 100;
+ }
+}
+poe {
+ interface all;
+}
+{master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show ospf neighbor
+# OSPF instance is not running
+#
+# {master:0}
+# grnoc-mon at SAYRE-LIB-EX-CLIENT-OWNED> show bfd session
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
+{master:0}
More information about the Nocrancid
mailing list