[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Mon Jul 24 10:04:55 CDT 2017
Index: configs/odot-chandler-regmaint.client.onenet.net
===================================================================
--- configs/odot-chandler-regmaint.client.onenet.net (revision 155173)
+++ configs/odot-chandler-regmaint.client.onenet.net (working copy)
@@ -128,8 +128,8 @@
#sp-0/0/0 up up
#sp-0/0/0.0 up up
#sp-0/0/0.16383 up up
-#ge-0/0/1 up up
-#ge-0/0/1.0 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
#ge-0/0/2 up down
#ge-0/0/2.0 up down
#ge-0/0/3 up down
Index: configs/core.tah.onenet.net
===================================================================
--- configs/core.tah.onenet.net (revision 155174)
+++ configs/core.tah.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TAHLEQUAH-MX80> show system commit
+# 2017-07-24 09:01:47 CDT by andrew via cli commit confirmed, rollback in 3mins
# 2017-02-10 14:08:19 CST by admin via netconf
# 2017-01-29 00:12:01 CST by andrew via cli
# 2016-11-08 08:28:56 CST by andrew via cli
# 2016-11-04 18:36:26 CDT by andrew via cli
# 2016-11-04 18:33:33 CDT by andrew via cli
-# 2016-11-02 19:07:44 CDT by admin via cli
# grnoc-mon at TAHLEQUAH-MX80> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -264,7 +264,7 @@
# grnoc-mon at TAHLEQUAH-MX80> show system uptime
# System booted: 2016-11-02 13:30 CDT
# Protocols started: 2016-11-02 13:32 CDT
-# Last configured: 2017-02-10 14:08 CST by admin
+# Last configured: 2017-07-24 09:01 CDT by andrew
#
# grnoc-mon at TAHLEQUAH-MX80> show interface terse
#Interface Admin Link
@@ -334,7 +334,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TAHLEQUAH-MX80> show configuration
-## Last commit: 2017-02-10 14:08:19 CST by admin
+## Last commit: 2017-07-24 09:01:47 CDT by andrew
version 13.3R9.13;
groups {
ISIS-L2-INTERFACE {
@@ -834,7 +834,7 @@
level 1 disable;
}
}
- ospf {
+ inactive: ospf {
reference-bandwidth 100g;
area 0.0.0.0 {
interface lo0.0;
@@ -870,7 +870,7 @@
}
}
}
- ospf3 {
+ inactive: ospf3 {
reference-bandwidth 100g;
area 0.0.0.0 {
interface xe-0/0/0.0 {
@@ -1470,9 +1470,7 @@
}
}
# grnoc-mon at TAHLEQUAH-MX80> show ospf neighbor
-# Address Interface State ID Pri Dead
-# 164.58.244.18 ge-1/1/8.0 Full 164.58.199.225
-# 164.58.245.90 xe-0/0/0.0 Full 164.58.199.225
+# OSPF instance is not running
#
# grnoc-mon at TAHLEQUAH-MX80> show bfd session
Detect Transmit
@@ -1480,9 +1478,7 @@
164.58.244.18 Up ge-1/1/8.0 1.200 0.400 3
164.58.245.90 Up xe-0/0/0.0 1.200 0.400 3
164.58.245.93 Up ge-1/1/9.42 1.200 0.400 3
-fe80::2ac0:da00:af05:778a Up ge-1/1/8.0 1.200 0.400 3
-fe80::2ac0:da01:505:754b Up xe-0/0/0.0 1.200 0.400 3
-5 sessions, 7 clients
-Cumulative transmit rate 12.5 pps, cumulative receive rate 12.5 pps
+3 sessions, 3 clients
+Cumulative transmit rate 7.5 pps, cumulative receive rate 7.5 pps
Index: configs/oja-sw-youth-academy-manitou.client.onenet.net
===================================================================
--- configs/oja-sw-youth-academy-manitou.client.onenet.net (revision 155153)
+++ configs/oja-sw-youth-academy-manitou.client.onenet.net (working copy)
@@ -147,7 +147,7 @@
#ppd0 up up
#ppe0 up up
#st0 up up
-#st0.1 up up
+#st0.1 up down
#tap up up
#vlan up up
#vlan.3 up up
Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net (revision 155074)
+++ configs/core5.tul.onenet.net (working copy)
@@ -10355,8 +10355,6 @@
# 164.58.245.218 ge-0/3/8.0 Full 164.58.199.134
# 164.58.15.149 xe-0/1/1.148 Full 164.58.199.224
# 164.58.244.215 xe-1/0/1.260 Full 164.58.199.142
-# 164.58.245.91 xe-1/0/1.261 Full 164.58.199.129
-# 164.58.244.19 xe-2/3/0.175 Full 164.58.199.129
#
# {master}
# grnoc-mon at TULSA-CORE5-MX480-RE0> show bfd session
@@ -10374,11 +10372,9 @@
164.58.245.218 Up ge-0/3/8.0 1.200 0.400 3
164.58.245.229 Up ae0.116 1.200 0.400 3
fe80::2ac0:daff:fe4e:cef8 Up ge-0/3/8.0 1.200 0.400 3
-fe80::5e5e:abff:fed8:4e00 Up xe-1/0/1.261 1.200 0.400 3
-fe80::5e5e:abff:fed8:4e80 Up xe-2/3/0.175 1.200 0.400 3
fe80::8618:8800:2aee:4fc3 Up ae2.42 1.200 0.400 3
-15 sessions, 21 clients
-Cumulative transmit rate 29.5 pps, cumulative receive rate 29.5 pps
+13 sessions, 17 clients
+Cumulative transmit rate 24.5 pps, cumulative receive rate 24.5 pps
{master}
Index: configs/city-of-lawton.client.onenet.net
===================================================================
--- configs/city-of-lawton.client.onenet.net (revision 154500)
+++ configs/city-of-lawton.client.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at CITY-OF-LAWTON-TAG-005231> show system commit
-# 2017-06-01 16:29:52 CDT by joel via cli commit confirmed, rollback in 5mins
-# 2017-05-19 11:19:09 CDT by joel via cli commit confirmed, rollback in 5mins
-# 2017-05-16 15:45:41 CDT by joel via cli
-# 2017-05-16 15:43:51 CDT by joel via cli
-# 2017-05-16 15:39:25 CDT by joel via cli
-# 2017-05-16 15:37:28 CDT by joel via cli commit confirmed, rollback in 5mins
+# 2017-07-24 09:42:36 CDT by joel via cli
+# 2017-07-24 09:35:07 CDT by joel via cli
+# 2017-07-24 09:29:42 CDT by joel via cli
+# 2017-07-24 09:24:29 CDT by joel via cli
+# 2017-07-24 09:20:28 CDT by joel via cli
+# 2017-07-24 09:14:50 CDT by joel via cli
# grnoc-mon at CITY-OF-LAWTON-TAG-005231> show chassis environment
# Class Item Status Measurement
# Temp Routing Engine OK
@@ -128,7 +128,7 @@
# Time Source: NTP CLOCK
# System booted: 2016-07-27 15:02 CDT
# Protocols started: 2016-07-27 15:02 CDT
-# Last configured: 2017-06-01 16:29 CDT by joel
+# Last configured: 2017-07-24 09:42 CDT by joel
#
# grnoc-mon at CITY-OF-LAWTON-TAG-005231> show interface terse
#Interface Admin Link
@@ -146,7 +146,8 @@
#ge-0/0/1.0 up down
#ge-0/0/2 down down
#ge-0/0/3 down down
-#ge-0/0/4 down down
+#ge-0/0/4 up up
+#ge-0/0/4.0 up up
#ge-0/0/5 up up
#ge-0/0/5.0 up up
#ge-0/0/6 up up
@@ -184,7 +185,7 @@
#vlan up down
#vtep up up
# grnoc-mon at CITY-OF-LAWTON-TAG-005231> show configuration
-## Last commit: 2017-06-01 16:29:52 CDT by joel
+## Last commit: 2017-07-24 09:42:36 CDT by joel
version 15.1X49-D50.3;
system {
host-name CITY-OF-LAWTON-TAG-005231;
@@ -858,6 +859,22 @@
}
}
}
+ rule-set TESTING-TO-UNTRUST {
+ from zone TESTING;
+ to zone UNTRUST;
+ rule NAT-TESTING-TO-UNTRUST {
+ match {
+ source-address 0.0.0.0/0;
+ }
+ then {
+ source-nat {
+ pool {
+ CITY-OF-LAWTON-OUTSIDE;
+ }
+ }
+ }
+ }
+ }
}
static {
rule-set STATIC-NAT {
@@ -1116,6 +1133,38 @@
}
}
}
+ from-zone TESTING to-zone UNTRUST {
+ policy TESTING-TO-UNTRUST {
+ match {
+ source-address any;
+ destination-address any;
+ application any;
+ }
+ then {
+ permit;
+ log {
+ session-init;
+ session-close;
+ }
+ }
+ }
+ }
+ from-zone TESTING to-zone TESTING {
+ policy TESTING-TO-TESTING {
+ match {
+ source-address any;
+ destination-address any;
+ application any;
+ }
+ then {
+ permit;
+ log {
+ session-init;
+ session-close;
+ }
+ }
+ }
+ }
from-zone UNTRUST to-zone TRUST {
policy ABUSE-DENY {
match {
@@ -1512,6 +1561,18 @@
}
}
}
+ security-zone TESTING {
+ interfaces {
+ ge-0/0/4.0 {
+ host-inbound-traffic {
+ system-services {
+ ping;
+ traceroute;
+ }
+ }
+ }
+ }
+ }
}
}
interfaces {
@@ -1541,7 +1602,12 @@
disable;
}
ge-0/0/4 {
- disable;
+ description "TESTING-ROUTE-INSTANCE 172.16.1.2/12";
+ unit 0 {
+ family inet {
+ address 172.16.1.2/12;
+ }
+ }
}
ge-0/0/5 {
description "L3 INTERFACE - DMZ - 192.168.100.1/24";
@@ -1619,8 +1685,15 @@
}
routing-options {
static {
+ rib-group TESTING-RIB;
route 0.0.0.0/0 next-hop 164.58.58.117;
}
+ rib-groups {
+ TESTING-RIB {
+ import-rib [ inet.0 TESTING.inet.0 ];
+ import-policy TESTING-RIB-IMPORT;
+ }
+ }
}
policy-options {
prefix-list PRE-MGMT-SOURCES {
@@ -1631,6 +1704,17 @@
prefix-list PRE-LOCALIPv4-SOURCES {
apply-path "interfaces <*> unit <*> family inet address <*>";
}
+ policy-statement TESTING-RIB-IMPORT {
+ term IMPORT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
}
firewall {
family inet {
@@ -1681,6 +1765,12 @@
}
}
}
+routing-instances {
+ TESTING {
+ instance-type virtual-router;
+ interface ge-0/0/4.0;
+ }
+}
applications {
application CAD-MS-UDP {
description "Response CAD Message Switch UDP Ports";
Index: configs/opt.okc.onenet.net
===================================================================
--- configs/opt.okc.onenet.net (revision 154965)
+++ configs/opt.okc.onenet.net (working copy)
@@ -221,7 +221,6 @@
<interface name="CHAN-3-3-9-RX" abbr_name="CHAN-3-3-9-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
<interface name="CHAN-3-3-10-RX" abbr_name="CHAN-3-3-10-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
<interface name="CHAN-3-3-11-RX" abbr_name="CHAN-3-3-11-RX" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="monitor"></interface>
- <interface name="CHAN-3-3-12-RX" abbr_name="CHAN-3-3-12-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
<interface name="CHAN-3-3-13-RX" abbr_name="CHAN-3-3-13-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
<interface name="CHAN-3-3-14-RX" abbr_name="CHAN-3-3-14-RX" admin_state="up" spanning_tree_metric="" description="" type="MUX" monitoring_state="monitor"></interface>
<interface name="CHAN-3-3-15-RX" abbr_name="CHAN-3-3-15-RX" admin_state="down" spanning_tree_metric="" description="" type="MUX" monitoring_state="no-monitor"></interface>
Index: configs/odot-bartlesville-regmaint.client.onenet.net
===================================================================
--- configs/odot-bartlesville-regmaint.client.onenet.net (revision 155173)
+++ configs/odot-bartlesville-regmaint.client.onenet.net (working copy)
@@ -136,8 +136,8 @@
#ge-0/0/3.0 up down
#ge-0/0/4 up down
#ge-0/0/4.0 up down
-#ge-0/0/5 up up
-#ge-0/0/5.0 up up
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
#ge-0/0/6 up up
#ge-0/0/6.0 up up
#ge-0/0/7 up up
More information about the Nocrancid
mailing list