[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri May 19 14:05:32 CDT 2017


Index: configs/maud-isd.client.onenet.net
===================================================================
--- configs/maud-isd.client.onenet.net	(revision 153345)
+++ configs/maud-isd.client.onenet.net	(working copy)
@@ -95,8 +95,8 @@
 # total files: 1
 # 
 # grnoc-mon at MAUD-PS-SRX220-LEASED-ASSET-TAG-004627> show system uptime 
-# System booted: 2017-05-18 20:57 CDT 
-# Protocols started: 2017-05-18 21:00 CDT 
+# System booted: 2017-05-19 13:58 CDT 
+# Protocols started: 2017-05-19 14:01 CDT 
 # Last configured: 2016-07-22 09:01 CDT  by joel
 # 
 # grnoc-mon at MAUD-PS-SRX220-LEASED-ASSET-TAG-004627> show interface terse 
Index: configs/allen-public-library.client.onenet.net
===================================================================
--- configs/allen-public-library.client.onenet.net	(revision 153370)
+++ configs/allen-public-library.client.onenet.net	(working copy)
@@ -133,8 +133,8 @@
 #ge-0/0/1.0 up down
 #ge-0/0/2 up up
 #ge-0/0/2.0 up up
-#ge-0/0/3 up down
-#ge-0/0/3.0 up down
+#ge-0/0/3 up up
+#ge-0/0/3.0 up up
 #ge-0/0/4 up up
 #ge-0/0/4.0 up up
 #ge-0/0/5 up up
Index: configs/kiamichi-fmc-battiest.client.onenet.net
===================================================================
--- configs/kiamichi-fmc-battiest.client.onenet.net	(revision 153366)
+++ configs/kiamichi-fmc-battiest.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show system commit 
+#   2017-05-19 13:55:56 CDT by sean via cli
+#   2017-05-19 13:46:18 CDT by sean via cli
+#   2017-05-19 13:38:21 CDT by sean via cli
 #   2017-04-25 12:13:54 CDT by andrew via cli
 #   2017-04-25 11:41:23 CDT by sean via cli commit confirmed, rollback in 4mins
 #   2017-04-22 21:27:11 CDT by andrew via cli
-#   2017-04-05 16:18:07 CDT by andrew via cli
-#   2017-04-05 09:19:50 CDT by joel via cli
-#   2017-04-04 18:17:40 CDT by joel via cli
 # grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -119,7 +119,7 @@
 # Time Source:  NTP CLOCK 
 # System booted: 2017-04-27 15:39 CDT 
 # Protocols started: 2017-04-27 15:39 CDT 
-# Last configured: 2017-04-25 12:13 CDT  by andrew
+# Last configured: 2017-05-19 13:55 CDT  by sean
 # 
 # grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show interface terse 
 #Interface Admin Link
@@ -173,11 +173,12 @@
 #st0 up up
 #st0.0 up down
 #st0.1 up up
+#st0.2 up up
 #tap up up
 #vlan up down
 #vtep up up
 # grnoc-mon at KIAMICHI-FMC-BATTIEST-LR-5230> show configuration 
-## Last commit: 2017-04-25 12:13:54 CDT by andrew
+## Last commit: 2017-05-19 13:55:56 CDT by sean
 version 15.1X49-D50.3;
 system {
     host-name KIAMICHI-FMC-BATTIEST-LR-5230;
@@ -331,6 +332,13 @@
             encryption-algorithm aes-128-cbc;
             lifetime-seconds 28800;
         }
+        proposal PRE-G2-AES256-SHA {
+            authentication-method pre-shared-keys;
+            dh-group group2;
+            authentication-algorithm sha1;
+            encryption-algorithm aes-256-cbc;
+            lifetime-seconds 28800;
+        }
         policy IKE-HUGO-KFMC {
             mode aggressive;
             proposals PRE-G2-AES128-SHA;
@@ -348,6 +356,11 @@
             proposal-set standard;
 #            pre-shared-#key <removed>;
         }
+        policy IKE-POLICY-KFMC-TO-MYHEALTH {
+            mode main;
+            proposals PRE-G2-AES256-SHA;
+#            pre-shared-#key <removed>;
+        }
         gateway IKE-GATE-HUGO-KFMC {
             ike-policy IKE-HUGO-KFMC;
             dynamic user-at-hostname "hugo at kfmc.org";
@@ -374,6 +387,16 @@
             external-interface ge-0/0/0.500;
             xauth access-profile DYN-VPN-ACCESS-PROFILE;
         }
+        gateway IKE-GATE-KFMC-TO-MYHEALTH {
+            ike-policy IKE-POLICY-KFMC-TO-MYHEALTH;
+            address 70.246.162.130;
+            dead-peer-detection {
+                always-send;
+                interval 10;
+                threshold 3;
+            }
+            external-interface ge-0/0/0.500;
+        }
     }
     ipsec {
         proposal G2-ESP-AES128-SHA {
@@ -390,6 +413,13 @@
             encryption-algorithm 3des-cbc;
             lifetime-seconds 3600;
         }
+        proposal IPSEC-PROP-KFMC-TO-MYHEALTH {
+            description group2;
+            protocol esp;
+            authentication-algorithm hmac-sha1-96;
+            encryption-algorithm 3des-cbc;
+            lifetime-seconds 3600;
+        }
         policy VPN-POLICY-HUGO-KFMC {
             proposals G2-ESP-AES128-SHA;
         }
@@ -399,6 +429,9 @@
         policy IPSEC-DYN-VPN-POLICY {
             proposal-set standard;
         }
+        policy IPSEC-POLICY-KFMC-TO-MYHEALTH {
+            proposals IPSEC-PROP-KFMC-TO-MYHEALTH;
+        }
         vpn IPSEC-VPN-HUGO-KFMC {
             bind-interface st0.0;
             ike {
@@ -425,6 +458,18 @@
                 ipsec-policy IPSEC-DYN-VPN-POLICY;
             }
         }
+        vpn IPSEC-VPN-KFMC-TO-MYHEALTH {
+            bind-interface st0.2;
+            ike {
+                gateway IKE-GATE-KFMC-TO-MYHEALTH;
+                ipsec-policy IPSEC-POLICY-KFMC-TO-MYHEALTH;
+            }
+            traffic-selector KFMC-TO-MYHEALTH {
+                local-ip 192.168.0.2/32;
+                remote-ip 70.246.162.130/32;
+            }
+            establish-tunnels immediately;
+        }
     }
     address-book {
         global {
@@ -839,6 +884,10 @@
             description "IPSEC VPN TO KFMC-TO-MCCURTAIN";
             family inet;
         }
+        unit 2 {
+            description "IPSEC VPN TO KFMC-TO-MYHEALTH";
+            family inet;
+        }
     }
 }
 snmp {
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 153372)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -697,10 +697,10 @@
 #t1-2/3/0:7:1.16 up up
 #t1-2/3/0:7:1.17 up up
 #t1-2/3/0:7:1.18 up up
-#t1-2/3/0:7:2 up down
-#t1-2/3/0:7:2.16 up down
-#t1-2/3/0:7:2.17 up down
-#t1-2/3/0:7:2.18 up down
+#t1-2/3/0:7:2 up up
+#t1-2/3/0:7:2.16 up up
+#t1-2/3/0:7:2.17 up up
+#t1-2/3/0:7:2.18 up up
 #t1-2/3/0:7:3 up up
 #t1-2/3/0:7:3.0 up up
 #t1-2/3/0:7:4 up up
Index: configs/doh-muskogee.client.onenet.net
===================================================================
--- configs/doh-muskogee.client.onenet.net	(revision 153370)
+++ configs/doh-muskogee.client.onenet.net	(working copy)
@@ -138,7 +138,7 @@
 #ge-0/0/6 down down
 #ge-0/0/7 down down
 #t1-1/0/0 down down
-#t1-2/0/0 down up
+#t1-2/0/0 down down
 #fxp2 up up
 #fxp2.0 up up
 #gre up up
Index: configs/core.owtcred.onenet.net
===================================================================
--- configs/core.owtcred.onenet.net	(revision 153372)
+++ configs/core.owtcred.onenet.net	(working copy)
@@ -26,6 +26,16 @@
 #       TFEB 0 TBB PFE Chip            OK        
 #       TFEB 0 TFEB PCIE TSen          OK        
 #       TFEB 0 TFEB PCIE Chip          OK        
+#       TFEB 0 QX 0 TSen               OK        
+#       TFEB 0 QX 0 Chip               OK        
+#       TFEB 0 LU 0 TSen               OK        
+#       TFEB 0 LU 0 Chip               OK        
+#       TFEB 0 MQ 0 TSen               OK        
+#       TFEB 0 MQ 0 Chip               OK        
+#       TFEB 0 TBB PFE TSen            OK        
+#       TFEB 0 TBB PFE Chip            OK        
+#       TFEB 0 TFEB PCIE TSen          OK        
+#       TFEB 0 TFEB PCIE Chip          OK        
 # Fans  Fan 1                          OK
 #       Fan 2                          OK
 #       Fan 3                          OK
Index: configs/odot-chandler-regmaint.client.onenet.net
===================================================================
--- configs/odot-chandler-regmaint.client.onenet.net	(revision 153372)
+++ configs/odot-chandler-regmaint.client.onenet.net	(working copy)
@@ -102,8 +102,8 @@
 # total files: 1
 # 
 # grnoc-mon at ODOT-CHANDLER-REGMAINT-SRX220> show system uptime 
-# System booted: 2017-05-18 19:47 CDT 
-# Protocols started: 2017-05-18 19:50 CDT 
+# System booted: 2017-05-19 13:32 CDT 
+# Protocols started: 2017-05-19 13:35 CDT 
 # Last configured: 2016-12-31 18:51 CST  by andrew
 # 
 # grnoc-mon at ODOT-CHANDLER-REGMAINT-SRX220> show interface terse 
Index: configs/doh-walters.client.onenet.net
===================================================================
--- configs/doh-walters.client.onenet.net	(revision 153309)
+++ configs/doh-walters.client.onenet.net	(working copy)
@@ -102,8 +102,8 @@
 # total files: 1
 # 
 # grnoc-mon at DOH-WALTERS-SRX220> show system uptime 
-# System booted: 2017-05-17 09:16 CDT 
-# Protocols started: 2017-05-17 09:18 CDT 
+# System booted: 2017-05-19 05:10 CDT 
+# Protocols started: 2017-05-19 05:12 CDT 
 # Last configured: 2016-07-27 18:20 CDT  by admin
 # 
 # grnoc-mon at DOH-WALTERS-SRX220> show interface terse 
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net	(revision 153355)
+++ configs/hub.dur.onenet.net	(working copy)
@@ -324,7 +324,7 @@
 #fe-2/1/1.0 up up
 #fe-2/1/2 up up
 #fe-2/1/2.0 up up
-#fe-2/1/3 down down
+#fe-2/1/3 down up
 #ge-2/2/0 up up
 #ge-2/2/0.0 up up
 #pc-2/2/0 up up
Index: configs/hub.mus.onenet.net
===================================================================
--- configs/hub.mus.onenet.net	(revision 153368)
+++ configs/hub.mus.onenet.net	(working copy)
@@ -328,7 +328,7 @@
 #t1-2/0/2:21 down down
 #t1-2/0/2:22 down down
 #t1-2/0/2:23 down down
-#t1-2/0/2:24 down up
+#t1-2/0/2:24 down down
 #t1-2/0/2:25 down down
 #t1-2/0/2:26 down down
 #t1-2/0/2:27 down down
Index: configs/odot-stillwater-residence.client.onenet.net
===================================================================
--- configs/odot-stillwater-residence.client.onenet.net	(revision 153363)
+++ configs/odot-stillwater-residence.client.onenet.net	(working copy)
@@ -122,8 +122,8 @@
 #sp-0/0/0.16383 up up
 #ge-0/0/1 up up
 #ge-0/0/1.0 up up
-#ge-0/0/2 up up
-#ge-0/0/2.0 up up
+#ge-0/0/2 up down
+#ge-0/0/2.0 up down
 #ge-0/0/3 up up
 #ge-0/0/3.0 up up
 #ge-0/0/4 up down
Index: configs/wewoka-pl.client.onenet.net
===================================================================
--- configs/wewoka-pl.client.onenet.net	(revision 153290)
+++ configs/wewoka-pl.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at WEWOKA-PL-SRX240-MR-4933> show system commit 
+#   2017-05-19 13:29:17 CDT by andrew via cli
 #   2016-06-21 14:06:26 CDT by admin via cli
 #   2016-01-08 12:40:40 CST by admin via cli commit confirmed, rollback in 5mins
 #   2016-01-08 12:16:18 CST by admin via cli
 #   2016-01-08 12:13:01 CST by admin via cli
 #   2016-01-08 12:11:41 CST by admin via cli
-#   2016-01-08 12:10:57 CST by admin via cli
 # grnoc-mon at WEWOKA-PL-SRX240-MR-4933> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -115,7 +115,7 @@
 # grnoc-mon at WEWOKA-PL-SRX240-MR-4933> show system uptime 
 # System booted: 2017-05-17 03:00 CDT 
 # Protocols started: 2017-05-17 03:03 CDT 
-# Last configured: 2016-06-21 14:06 CDT  by admin
+# Last configured: 2017-05-19 13:29 CDT  by andrew
 # 
 # grnoc-mon at WEWOKA-PL-SRX240-MR-4933> show interface terse 
 #Interface Admin Link
@@ -171,10 +171,11 @@
 #vlan.3 up up
 #vlan.999 up down
 # grnoc-mon at WEWOKA-PL-SRX240-MR-4933> show configuration 
-## Last commit: 2016-06-21 14:06:26 CDT by admin
+## Last commit: 2017-05-19 13:29:17 CDT by andrew
 version 12.1X44-D35.5;
 system {
     host-name WEWOKA-PL-SRX240-MR-4933;
+    auto-snapshot;
     domain-name onenet.net;
     time-zone America/Chicago;
     authentication-order [ radius password ];



More information about the Nocrancid mailing list