[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Wed Jan 4 16:03:59 CST 2017
Index: configs/allen-public-library.client.onenet.net
===================================================================
--- configs/allen-public-library.client.onenet.net (revision 149496)
+++ configs/allen-public-library.client.onenet.net (working copy)
@@ -137,8 +137,8 @@
#ge-0/0/2.0 up up
#ge-0/0/3 up down
#ge-0/0/3.0 up down
-#ge-0/0/4 up down
-#ge-0/0/4.0 up down
+#ge-0/0/4 up up
+#ge-0/0/4.0 up up
#ge-0/0/5 up up
#ge-0/0/5.0 up up
#ge-0/0/6 up up
Index: configs/kiamichi-fmc-battiest.client.onenet.net
===================================================================
--- configs/kiamichi-fmc-battiest.client.onenet.net (revision 149000)
+++ configs/kiamichi-fmc-battiest.client.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show system commit
+# 2017-01-04 15:59:25 CST by joel via cli commit confirmed, rollback in 3mins
# 2016-12-16 09:31:32 CST by sky via cli
# 2016-12-12 14:32:26 CST by sky via cli
# 2016-12-12 14:29:09 CST by sky via cli
# 2016-12-12 14:22:09 CST by sky via cli
# 2016-12-12 10:37:51 CST by sky via cli commit confirmed, rollback in 3mins
-# 2016-12-12 10:21:14 CST by sky via cli
# grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show chassis environment
# Class Item Status Measurement
# Temp Routing Engine OK
@@ -118,7 +118,7 @@
# Time Source: NTP CLOCK
# System booted: 2016-11-14 15:47 CST
# Protocols started: 2016-11-14 15:47 CST
-# Last configured: 2016-12-16 09:31 CST by sky
+# Last configured: 2017-01-04 15:59 CST by joel
#
# grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show interface terse
#Interface Admin Link
@@ -171,11 +171,12 @@
#ppe0 up up
#st0 up up
#st0.0 up up
+#st0.1 up down
#tap up up
#vlan up down
#vtep up up
# grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show configuration
-## Last commit: 2016-12-16 09:31:32 CST by sky
+## Last commit: 2017-01-04 15:59:25 CST by joel
version 15.1X49-D50.3;
system {
host-name KIAMICHI-FMC-BATTIEST-LR-5230;
@@ -334,12 +335,27 @@
proposals PRE-G2-AES128-SHA;
# pre-shared-#key <removed>;
}
+ policy IKE-STANDARD-POLICY {
+ mode main;
+ proposal-set standard;
+# pre-shared-#key <removed>;
+ }
gateway IKE-GATE-HUGO-KFMC {
ike-policy IKE-HUGO-KFMC;
dynamic user-at-hostname "hugo at kfmc.org";
external-interface ge-0/0/0.500;
local-address 164.58.22.151;
}
+ gateway IKE-GATE-KFMC-TO-MCCURTAIN-MED {
+ ike-policy IKE-STANDARD-POLICY;
+ address 164.58.29.203;
+ dead-peer-detection {
+ always-send;
+ interval 10;
+ threshold 3;
+ }
+ external-interface ge-0/0/0.500;
+ }
}
ipsec {
proposal G2-ESP-AES128-SHA {
@@ -352,6 +368,9 @@
policy VPN-POLICY-HUGO-KFMC {
proposals G2-ESP-AES128-SHA;
}
+ policy IPSEC-STANDARD-POLICY {
+ proposal-set standard;
+ }
vpn IPSEC-VPN-HUGO-KFMC {
bind-interface st0.0;
ike {
@@ -360,10 +379,24 @@
}
establish-tunnels immediately;
}
+ vpn IPSEC-VPN-KFMC-TO-MCCURTAIN-MED {
+ bind-interface st0.1;
+ ike {
+ gateway IKE-GATE-KFMC-TO-MCCURTAIN-MED;
+ ipsec-policy IPSEC-STANDARD-POLICY;
+ }
+ traffic-selector KFMC-TO-MCCURTAIN-MED {
+ local-ip 192.168.0.2/32;
+ remote-ip 10.3.87.86/32;
+ }
+ establish-tunnels immediately;
+ }
}
address-book {
global {
address MITEL-PHONES 192.168.0.230/32;
+ address net-192.168.0.2 192.168.0.2/32;
+ address net-10.3.87.86 10.3.87.86/32;
}
}
forwarding-options {
@@ -373,6 +406,13 @@
}
}
}
+ flow {
+ tcp-mss {
+ ipsec-vpn {
+ mss 1360;
+ }
+ }
+ }
screen {
ids-option UNTRUST-SCREEN {
icmp {
@@ -515,6 +555,16 @@
permit;
}
}
+ policy KFMC-TO-MCCURTAIN-MED {
+ match {
+ source-address net-192.168.0.2;
+ destination-address net-10.3.87.86;
+ application any;
+ }
+ then {
+ permit;
+ }
+ }
}
}
zones {
@@ -537,6 +587,14 @@
}
}
}
+ st0.1 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ }
+ }
+ }
}
}
security-zone TEST {
@@ -678,6 +736,10 @@
address 164.58.58.64/31;
}
}
+ unit 1 {
+ description "IPSEC VPN TO KFMC-TO-MCCURTAIN-MED";
+ family inet;
+ }
}
}
snmp {
Index: configs/lawton-public-library.client.onenet.net
===================================================================
--- configs/lawton-public-library.client.onenet.net (revision 149361)
+++ configs/lawton-public-library.client.onenet.net (working copy)
@@ -139,8 +139,8 @@
#ge-0/0/3 down down
#ge-0/0/4 down down
#ge-0/0/5 down down
-#ge-0/0/6 up down
-#ge-0/0/6.0 up down
+#ge-0/0/6 up up
+#ge-0/0/6.0 up up
#ge-0/0/7 up up
#ge-0/0/7.0 up up
#ge-0/0/8 down down
Index: configs/odmhsas-ncbh-alva.client.onenet.net
===================================================================
--- configs/odmhsas-ncbh-alva.client.onenet.net (revision 149517)
+++ configs/odmhsas-ncbh-alva.client.onenet.net (working copy)
@@ -148,7 +148,7 @@
#ppd0 up up
#ppe0 up up
#st0 up up
-#st0.1 up up
+#st0.1 up down
#st0.2 up up
#tap up up
#vlan up up
Index: configs/hub.bar.onenet.net
===================================================================
--- configs/hub.bar.onenet.net (revision 149517)
+++ configs/hub.bar.onenet.net (working copy)
@@ -312,7 +312,7 @@
#t1-2/0/2:2.16 up up
#t1-2/0/2:2.17 up up
#t1-2/0/2:3 up up
-#t1-2/0/2:3.0 up down
+#t1-2/0/2:3.0 up up
#t1-2/0/2:4 up up
#t1-2/0/2:4.0 up up
#t1-2/0/2:5 down down
Index: configs/core.owtcred.onenet.net
===================================================================
--- configs/core.owtcred.onenet.net (revision 149517)
+++ configs/core.owtcred.onenet.net (working copy)
@@ -300,7 +300,7 @@
#lsi.1048679 up up
#lsi.1048680 up up
#lsi.1049416 up up
-#lsi.1049421 up up
+#lsi.1049424 up up
#me0 up up
#me0.0 up up
#mtun up up
Index: configs/odmhsas.central-office.okc.client.onenet.net
===================================================================
--- configs/odmhsas.central-office.okc.client.onenet.net (revision 149517)
+++ configs/odmhsas.central-office.okc.client.onenet.net (working copy)
@@ -177,7 +177,7 @@
#st0.0 up up
#st0.12 up up
#st0.13 up up
-#st0.14 up up
+#st0.14 up down
#st0.15 up up
#st0.16 up down
#st0.17 up up
Index: configs/core.law.onenet.net
===================================================================
--- configs/core.law.onenet.net (revision 149517)
+++ configs/core.law.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at LAWTON-MX480-RE0> show system commit
+# 2017-01-04 15:31:18 CST by andrew via cli commit synchronize
+# 2017-01-04 15:30:42 CST by andrew via cli commit synchronize
# 2017-01-04 14:39:43 CST by andrew via cli commit synchronize
# 2017-01-04 14:38:41 CST by andrew via cli commit synchronize
# 2017-01-04 11:06:15 CST by andrew via cli commit synchronize
# 2017-01-04 11:00:12 CST by andrew via cli commit synchronize
-# 2017-01-03 13:54:49 CST by andrew via cli commit synchronize
-# 2017-01-03 13:43:10 CST by andrew via cli commit synchronize
# grnoc-mon at LAWTON-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -347,7 +347,7 @@
# grnoc-mon at LAWTON-MX480-RE0> show system uptime
# System booted: 2016-03-16 01:11 CDT
# Protocols started: 2016-03-16 01:22 CDT
-# Last configured: 2017-01-04 14:39 CST by andrew
+# Last configured: 2017-01-04 15:31 CST by andrew
#
# {master}
# grnoc-mon at LAWTON-MX480-RE0> show interface terse
@@ -592,7 +592,7 @@
#pp0 up up
#tap up up
# grnoc-mon at LAWTON-MX480-RE0> show configuration
-## Last commit: 2017-01-04 14:39:43 CST by andrew
+## Last commit: 2017-01-04 15:31:18 CST by andrew
version 13.3R8.7;
groups {
re0 {
Index: configs/odot-hobart-regmaint.client.onenet.net
===================================================================
--- configs/odot-hobart-regmaint.client.onenet.net (revision 149515)
+++ configs/odot-hobart-regmaint.client.onenet.net (working copy)
@@ -126,8 +126,8 @@
#ge-0/0/3.0 up down
#ge-0/0/4 up up
#ge-0/0/4.0 up up
-#ge-0/0/5 up up
-#ge-0/0/5.0 up up
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
#ge-0/0/6 up up
#ge-0/0/6.0 up up
#ge-0/0/7 up down
More information about the Nocrancid
mailing list