[Nocrancid] autopop-onenet.net/core.toward.onenet.net[0] router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Fri Nov 24 04:21:14 CST 2017
Index: configs/core.toward.onenet.net
===================================================================
--- configs/core.toward.onenet.net (revision 158587)
+++ configs/core.toward.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at ARDMORE-TOWER-MX40> show system commit
-# 2017-10-21 00:16:20 CDT by andrew via cli
-# 2017-09-26 18:01:20 CDT by andrew via cli
-# 2017-09-25 22:17:28 CDT by andrew via cli
-# 2017-09-24 19:28:32 CDT by andrew via cli
-# 2017-09-22 10:14:56 CDT by andrew via cli
-# 2017-09-21 10:52:45 CDT by andrew via cli
+# 2017-11-24 04:19:11 CST by andrew via cli
+# 2017-11-24 03:45:06 CST by andrew via cli
+# 2017-11-24 02:36:03 CST by andrew via cli
+# 2017-11-24 02:12:24 CST by andrew via cli
+# 2017-11-24 02:08:32 CST by andrew via cli
+# 2017-11-24 01:38:55 CST by andrew via cli
# grnoc-mon at ARDMORE-TOWER-MX40> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -24,18 +24,6 @@
# TFEB 0 MQ 0 Chip OK
# TFEB 0 TBB PFE TSen OK
# TFEB 0 TBB PFE Chip OK
-# TFEB 0 TFEB PCIE TSen OK
-# TFEB 0 TFEB PCIE Chip OK
-# TFEB 0 QX 0 TSen OK
-# TFEB 0 QX 0 Chip OK
-# TFEB 0 LU 0 TSen OK
-# TFEB 0 LU 0 Chip OK
-# TFEB 0 MQ 0 TSen OK
-# TFEB 0 MQ 0 Chip OK
-# TFEB 0 TBB PFE TSen OK
-# TFEB 0 TBB PFE Chip OK
-# TFEB 0 TFEB PCIE TSen OK
-# TFEB 0 TFEB PCIE Chip OK
# Fans Fan 1 OK
# Fan 2 OK
# Fan 3 OK
@@ -45,11 +33,11 @@
# grnoc-mon at ARDMORE-TOWER-MX40> show chassis firmware
# Part Type Version
# FPC 0 ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R9.13 by builder on 2016-03-01
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# FPC 1 ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R9.13 by builder on 2016-03-01
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# TFEB ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R9.13 by builder on 2016-03-01
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
#
# grnoc-mon at ARDMORE-TOWER-MX40> show chassis fpc detail
# Slot 0 information:
@@ -122,7 +110,7 @@
# mxppc_set_re_type: hw.board.type is MX40-T
# mxppc_set_re_type: REtype:124, model:mx40-t, model:MX40-T, i2cid:1364
# WDOG initialized
-# Copyright (c) 1996-2016, Juniper Networks, Inc.
+# Copyright (c) 1996-2017, Juniper Networks, Inc.
# All rights reserved.
# Copyright (c) 1992-2007 The FreeBSD Project.
# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
@@ -138,6 +126,7 @@
# MAC/veriexec fingerprint module loaded: SHA256
# MAC/veriexec fingerprint module loaded: SHA1
# ETHERNET SOCKET BRIDGE initialising
+# random: <Software, Yarrow> initialized
# Initializing M/T/EX platform properties ..
# nexus0: <Powerpc Nexus device>
# ocpbus0: <on-chip peripheral bus> on nexus0
@@ -198,81 +187,105 @@
# Setting up M/T interface operations and attributes
# platform_cookie_read not implemented
# Initializing MX-PPC platform mastership..
+# Registered AMT tunnel Encap with UDP Tunnel!
# Loading Redundant LT driver
+# Loading Redundant Virtual Interface driver
# ###PCB Group initialized for udppcbgroup
# ###PCB Group initialized for tcppcbgroup
+# Registering tcp_platform_dependent = tcp_handle_special_ports
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
+# da0: 40.000MB/s transfers
+# da0: 3824MB (7831552 512 byte sectors: 255H 63S/T 487C)
# da1 at umass-sim1 bus 1 target 0 lun 0
# da1: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
# da1: 40.000MB/s transfers
# da1: 3824MB (7831552 512 byte sectors: 255H 63S/T 487C)
-# da0 at umass-sim0 bus 0 target 0 lun 0
-# da0: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
-# da0: 40.000MB/s transfers
-# da0: 3824MB (7831552 512 byte sectors: 255H 63S/T 487C)
-# Kernel thread "wkupdaemon" (pid 55) exited prematurely.
+# random: unblocking device.
+# Kernel thread "wkupdaemon" (pid 56) exited prematurely.
# Trying to mount root from ufs:/dev/da0s1a
#
# grnoc-mon at ARDMORE-TOWER-MX40> show version
# Hostname: ARDMORE-TOWER-MX40
# Model: mx40-t
-# Junos: 13.3R9.13
-# JUNOS Base OS boot [13.3R9.13]
-# JUNOS Base OS Software Suite [13.3R9.13]
-# JUNOS Kernel Software Suite [13.3R9.13]
-# JUNOS Crypto Software Suite [13.3R9.13]
-# JUNOS Packet Forwarding Engine Support (MX80) [13.3R9.13]
-# JUNOS Online Documentation [13.3R9.13]
-# JUNOS Services Application Level Gateways [13.3R9.13]
-# JUNOS Services Jflow Container package [13.3R9.13]
-# JUNOS Services Stateful Firewall [13.3R9.13]
-# JUNOS Services NAT [13.3R9.13]
-# JUNOS Services RPM [13.3R9.13]
-# JUNOS Services Crypto [13.3R9.13]
-# JUNOS Services SSL [13.3R9.13]
-# JUNOS Services IPSec [13.3R9.13]
-# JUNOS Routing Software Suite [13.3R9.13]
+# Junos: 16.1R5.7
+# JUNOS Base OS boot [16.1R5.7]
+# JUNOS Base OS Software Suite [16.1R5.7]
+# JUNOS Crypto Software Suite [16.1R5.7]
+# JUNOS Packet Forwarding Engine Support (MX80) [16.1R5.7]
+# JUNOS Web Management [16.1R5.7]
+# JUNOS Online Documentation [16.1R5.7]
+# JUNOS SDN Software Suite [16.1R5.7]
+# JUNOS Services Application Level Gateways [16.1R5.7]
+# JUNOS Services COS [16.1R5.7]
+# JUNOS Services Jflow Container package [16.1R5.7]
+# JUNOS Services Stateful Firewall [16.1R5.7]
+# JUNOS Services NAT [16.1R5.7]
+# JUNOS Services RPM [16.1R5.7]
+# JUNOS Services Captive Portal and Content Delivery Container package [16.1R5.7]
+# JUNOS Macsec Software Suite [16.1R5.7]
+# JUNOS Services Crypto [16.1R5.7]
+# JUNOS Services IPSec [16.1R5.7]
+# JUNOS DP Crypto Software Software Suite [16.1R5.7]
+# JUNOS py-base-powerpc [16.1R5.7]
+# JUNOS py-extensions-powerpc [16.1R5.7]
+# JUNOS jsd [powerpc-16.1R5.7-jet-1]
+# JUNOS Kernel Software Suite [16.1R5.7]
+# JUNOS Routing Software Suite [16.1R5.7]
#
# grnoc-mon at ARDMORE-TOWER-MX40> show version invoke-on all-routing-engines
# Hostname: ARDMORE-TOWER-MX40
# Model: mx40-t
-# Junos: 13.3R9.13
-# JUNOS Base OS boot [13.3R9.13]
-# JUNOS Base OS Software Suite [13.3R9.13]
-# JUNOS Kernel Software Suite [13.3R9.13]
-# JUNOS Crypto Software Suite [13.3R9.13]
-# JUNOS Packet Forwarding Engine Support (MX80) [13.3R9.13]
-# JUNOS Online Documentation [13.3R9.13]
-# JUNOS Services Application Level Gateways [13.3R9.13]
-# JUNOS Services Jflow Container package [13.3R9.13]
-# JUNOS Services Stateful Firewall [13.3R9.13]
-# JUNOS Services NAT [13.3R9.13]
-# JUNOS Services RPM [13.3R9.13]
-# JUNOS Services Crypto [13.3R9.13]
-# JUNOS Services SSL [13.3R9.13]
-# JUNOS Services IPSec [13.3R9.13]
-# JUNOS Routing Software Suite [13.3R9.13]
+# Junos: 16.1R5.7
+# JUNOS Base OS boot [16.1R5.7]
+# JUNOS Base OS Software Suite [16.1R5.7]
+# JUNOS Crypto Software Suite [16.1R5.7]
+# JUNOS Packet Forwarding Engine Support (MX80) [16.1R5.7]
+# JUNOS Web Management [16.1R5.7]
+# JUNOS Online Documentation [16.1R5.7]
+# JUNOS SDN Software Suite [16.1R5.7]
+# JUNOS Services Application Level Gateways [16.1R5.7]
+# JUNOS Services COS [16.1R5.7]
+# JUNOS Services Jflow Container package [16.1R5.7]
+# JUNOS Services Stateful Firewall [16.1R5.7]
+# JUNOS Services NAT [16.1R5.7]
+# JUNOS Services RPM [16.1R5.7]
+# JUNOS Services Captive Portal and Content Delivery Container package [16.1R5.7]
+# JUNOS Macsec Software Suite [16.1R5.7]
+# JUNOS Services Crypto [16.1R5.7]
+# JUNOS Services IPSec [16.1R5.7]
+# JUNOS DP Crypto Software Software Suite [16.1R5.7]
+# JUNOS py-base-powerpc [16.1R5.7]
+# JUNOS py-extensions-powerpc [16.1R5.7]
+# JUNOS jsd [powerpc-16.1R5.7-jet-1]
+# JUNOS Kernel Software Suite [16.1R5.7]
+# JUNOS Routing Software Suite [16.1R5.7]
#
# grnoc-mon at ARDMORE-TOWER-MX40> file list /var/tmp detail
#
# /var/tmp:
-# total blocks: 517796
-# -rw------- 1 eng field 1464670 May 19 14:37 LOGS-20170519-TOWARD.tgz
-# -rw-r--r-- 1 eng field 293889 May 19 14:35 RSI-20170519-TOWARD.txt
-# drwxr-xr-x 2 root wheel 512 Apr 4 2017 gres-tp/
+# total blocks: 668176
+# -rw-r--r-- 1 root field 0 Nov 24 01:33 LOCK_FILE
+# drwxr-xr-x 2 root wheel 512 Nov 23 09:56 gres-tp/
# drwxrwxrwx 2 root wheel 512 Apr 4 2017 install/
-# -rw-r--r-- 1 eng wheel 256753758 Apr 4 2017 jinstall-ppc-13.3R9.13-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 341909955 Nov 23 09:59 jinstall-ppc-16.1R5.7-signed.tgz
+# -rw-r--r-- 1 root field 46 Nov 24 01:32 kmdchk.log
+# -rw-r--r-- 1 root field 57 Nov 24 01:33 krt_rpf_filter.txt
+# -rw-r--r-- 1 root field 42 Nov 24 01:32 pfe_debug_commands
# drwxrwxrwx 2 root wheel 512 Apr 4 2017 pics/
-# -r--r--r-- 1 root wheel 237 Apr 4 2017 preinstall_boot_loader.conf
-# -rw-rw---- 1 root field 6419394 May 19 09:14 rpd.core-tarball.0.tgz
-# drwxr-xr-x 2 root wheel 512 Apr 4 2017 rtsdb/
-# -rw-r----- 1 root wheel 534 May 19 09:25 sampled.pkts
+# -r--r--r-- 1 root wheel 237 Nov 24 01:18 preinstall_boot_loader.conf
+# drwxr-xr-x 2 root wheel 512 Nov 24 01:33 rtsdb/
+# -rw-r----- 1 root field 178 Nov 24 01:34 sampled.pkts
+# drwxr-xr-x 2 root field 512 Nov 24 01:31 sd-upgrade/
+# -rw-r--r-- 1 eng field 45116 Nov 24 00:25 toward.20171124.cfg
# drwxrwxrwt 2 root wheel 512 Apr 4 2017 vi.recover/
-# total files: 6
+# total files: 8
#
# grnoc-mon at ARDMORE-TOWER-MX40> show system uptime
-# System booted: 2017-05-19 09:22 CDT
-# Protocols started: 2017-05-19 09:24 CDT
-# Last configured: 2017-10-21 00:16 CDT by andrew
+# Time Source: NTP CLOCK
+# System booted: 2017-11-24 01:30 CST
+# Protocols started: 2017-11-24 01:33 CST
+# Last configured: 2017-11-24 04:19 CST by andrew
#
# grnoc-mon at ARDMORE-TOWER-MX40> show interface terse
#Interface Admin Link
@@ -282,6 +295,7 @@
#pfe-0/0/0.16383 up up
#pfh-0/0/0 up up
#pfh-0/0/0.16383 up up
+#pfh-0/0/0.16384 up up
#xe-0/0/0 up up
#xe-0/0/0.42 up up
#xe-0/0/0.32767 up up
@@ -330,10 +344,13 @@
#em0.0 up up
#em1 up down
#em1.0 up down
+#esi up up
#fxp0 up down
#gre up up
#ipip up up
#irb up up
+#jsrv up up
+#jsrv.1 up up
#lo0 up up
#lo0.0 up up
#lo0.16384 up up
@@ -349,10 +366,12 @@
#pime up up
#pip0 up up
#pp0 up up
+#rbeb up up
#tap up up
+#vtep up up
# grnoc-mon at ARDMORE-TOWER-MX40> show configuration
-## Last commit: 2017-10-21 00:16:20 CDT by andrew
-version 13.3R9.13;
+## Last commit: 2017-11-24 04:19:11 CST by andrew
+version 16.1R5.7;
groups {
ISIS-L2-INTERFACE {
protocols {
@@ -360,9 +379,11 @@
interface <*> {
point-to-point;
link-protection;
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
+ family inet {
+ bfd-liveness-detection {
+ minimum-interval 400;
+ multiplier 3;
+ }
}
level 2 {
hello-#authentication-#key <removed>;
@@ -447,6 +468,8 @@
root-login deny;
protocol-version v2;
max-sessions-per-connection 32;
+ ciphers [ "chacha20-poly1305 at openssh.com" aes128-ctr aes192-ctr aes256-ctr "aes128-gcm at openssh.com" "aes256-gcm at openssh.com" 3des-cbc ];
+ key-exchange [ curve25519-sha256 ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 group-exchange-sha2 dh-group14-sha1 dh-group1-sha1 ];
}
netconf {
ssh;
@@ -497,6 +520,13 @@
tfeb {
slot 0 {
sampling-instance JFLOW-1;
+ inline-services {
+ flow-table-size {
+ ipv4-flow-table-size 5;
+ ipv6-flow-table-size 5;
+ mpls-flow-table-size 5;
+ }
+ }
}
}
alarm {
@@ -514,21 +544,16 @@
flow-inactive-timeout 60;
ipv4-template;
}
- }
- }
-}
-security {
- ipsec {
- security-association OneNet-OSPF3-AUTH {
- mode transport;
- manual {
- direction bidirectional {
- protocol ah;
- spi 256;
- authentication {
- algorithm hmac-md5-96;
-# key <removed>;
- }
+ template ipv6 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv6-template;
+ }
+ template mpls-ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ mpls-ipv4-template {
+ label-position [ 1 2 3 ];
}
}
}
@@ -552,9 +577,16 @@
family iso;
family inet6 {
mtu 9100;
+ sampling {
+ input;
+ }
address 2610:1d8:1000::3b/127;
}
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
xe-0/0/1 {
@@ -574,9 +606,16 @@
family iso;
family inet6 {
mtu 9100;
+ sampling {
+ input;
+ }
address 2610:1d8:3100::9/127;
}
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
ge-1/0/0 {
@@ -603,7 +642,6 @@
}
sampling {
input;
- output;
}
address 10.119.16.44/31;
}
@@ -646,9 +684,16 @@
family iso;
family inet6 {
mtu 9100;
+ sampling {
+ input;
+ }
address 2610:1d8:5400::4/127;
}
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
ge-1/0/8 {
@@ -671,9 +716,16 @@
family iso;
family inet6 {
mtu 9000;
+ sampling {
+ input;
+ }
address 2610:1d8:5400::/127;
}
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
ge-1/1/0 {
@@ -688,7 +740,11 @@
address 164.58.247.81/30;
}
family iso;
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
ge-1/1/4 {
@@ -858,6 +914,44 @@
}
}
}
+ family inet6 {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv6;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.12;
+ }
+ }
+ }
+ family mpls {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ mpls-ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.12;
+ }
+ }
+ }
}
}
}
@@ -983,100 +1077,6 @@
level 1 disable;
}
}
- inactive: ospf {
- reference-bandwidth 100g;
- area 0.0.0.0 {
- interface lo0.0;
- interface fxp0.0 {
- disable;
- }
- interface ge-1/0/9.42 {
- link-protection;
- authentication {
- md5 7# key <removed>;
- }
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
- }
- }
- interface ge-1/1/0.0 {
- authentication {
- md5 7# key <removed>;
- }
- }
- interface xe-0/0/0.42 {
- link-protection;
- authentication {
- md5 7# key <removed>;
- }
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
- }
- }
- interface xe-0/0/1.42 {
- link-protection;
- authentication {
- md5 7# key <removed>;
- }
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
- }
- }
- interface ge-1/0/7.42 {
- link-protection;
- authentication {
- md5 7# key <removed>;
- }
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
- }
- }
- }
- }
- inactive: ospf3 {
- reference-bandwidth 100g;
- area 0.0.0.0 {
- interface lo0.0 {
- passive;
- }
- interface ge-1/0/9.42 {
- link-protection;
- ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
- }
- }
- interface xe-0/0/0.42 {
- link-protection;
- ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
- }
- }
- interface xe-0/0/1.42 {
- link-protection;
- ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
- }
- }
- interface ge-1/0/7.42 {
- link-protection;
- ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
- }
- }
- }
- }
ldp {
preference 255;
track-igp-metric;
@@ -1689,6 +1689,17 @@
}
}
}
+ family mpls {
+ filter MPLS-SAMPLE {
+ term DEFAULT {
+ then {
+ count mpls-in;
+ sample;
+ accept;
+ }
+ }
+ }
+ }
policer 100M-POL {
logical-interface-policer;
if-exceeding {
More information about the Nocrancid
mailing list