[Nocrancid] autopop-onenet.net/core.hut.cli.onenet.net[0] router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Fri Nov 24 04:21:30 CST 2017
Index: configs/core.hut.cli.onenet.net
===================================================================
--- configs/core.hut.cli.onenet.net (revision 157732)
+++ configs/core.hut.cli.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at CLINTON-MX40> show system commit
-# 2017-09-26 21:08:21 CDT by andrew via cli
-# 2017-09-26 21:07:07 CDT by andrew via cli
-# 2017-09-25 22:27:07 CDT by andrew via cli
-# 2017-09-24 19:32:14 CDT by andrew via cli
-# 2017-09-16 01:04:59 CDT by andrew via cli
-# 2017-07-29 21:14:59 CDT by andrew via cli
+# 2017-11-24 04:19:22 CST by andrew via cli
+# 2017-11-24 03:44:30 CST by andrew via cli
+# 2017-11-24 02:47:29 CST by andrew via cli commit confirmed, rollback in 5mins
+# 2017-11-24 02:16:10 CST by andrew via cli
+# 2017-11-24 02:07:07 CST by root via other
+# 2017-11-24 00:29:31 CST by andrew via cli
# grnoc-mon at CLINTON-MX40> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -24,18 +24,6 @@
# TFEB 0 MQ 0 Chip OK
# TFEB 0 TBB PFE TSen OK
# TFEB 0 TBB PFE Chip OK
-# TFEB 0 TFEB PCIE TSen OK
-# TFEB 0 TFEB PCIE Chip OK
-# TFEB 0 QX 0 TSen OK
-# TFEB 0 QX 0 Chip OK
-# TFEB 0 LU 0 TSen OK
-# TFEB 0 LU 0 Chip OK
-# TFEB 0 MQ 0 TSen OK
-# TFEB 0 MQ 0 Chip OK
-# TFEB 0 TBB PFE TSen OK
-# TFEB 0 TBB PFE Chip OK
-# TFEB 0 TFEB PCIE TSen OK
-# TFEB 0 TFEB PCIE Chip OK
# Fans Fan 1 OK
# Fan 2 OK
# Fan 3 OK
@@ -45,11 +33,11 @@
# grnoc-mon at CLINTON-MX40> show chassis firmware
# Part Type Version
# FPC 0 ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R8.7 by builder on 2015-10-23 1
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# FPC 1 ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R8.7 by builder on 2015-10-23 1
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# TFEB ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R8.7 by builder on 2015-10-23 1
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
#
# grnoc-mon at CLINTON-MX40> show chassis fpc detail
# Slot 0 information:
@@ -119,7 +107,7 @@
# mxppc_set_re_type: hw.board.type is MX40-T
# mxppc_set_re_type: REtype:124, model:mx40-t, model:MX40-T, i2cid:1364
# WDOG initialized
-# Copyright (c) 1996-2015, Juniper Networks, Inc.
+# Copyright (c) 1996-2017, Juniper Networks, Inc.
# All rights reserved.
# Copyright (c) 1992-2007 The FreeBSD Project.
# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
@@ -135,6 +123,7 @@
# MAC/veriexec fingerprint module loaded: SHA256
# MAC/veriexec fingerprint module loaded: SHA1
# ETHERNET SOCKET BRIDGE initialising
+# random: <Software, Yarrow> initialized
# Initializing M/T/EX platform properties ..
# nexus0: <Powerpc Nexus device>
# ocpbus0: <on-chip peripheral bus> on nexus0
@@ -195,77 +184,107 @@
# Setting up M/T interface operations and attributes
# platform_cookie_read not implemented
# Initializing MX-PPC platform mastership..
+# Registered AMT tunnel Encap with UDP Tunnel!
# Loading Redundant LT driver
+# Loading Redundant Virtual Interface driver
# ###PCB Group initialized for udppcbgroup
# ###PCB Group initialized for tcppcbgroup
+# Registering tcp_platform_dependent = tcp_handle_special_ports
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
+# da0: 40.000MB/s transfers
+# da0: 3824MB (7831552 512 byte sectors: 255H 63S/T 487C)
# da1 at umass-sim1 bus 1 target 0 lun 0
# da1: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
# da1: 40.000MB/s transfers
# da1: 3824MB (7831552 512 byte sectors: 255H 63S/T 487C)
-# da0 at umass-sim0 bus 0 target 0 lun 0
-# da0: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
-# da0: 40.000MB/s transfers
-# da0: 3824MB (7831552 512 byte sectors: 255H 63S/T 487C)
-# Kernel thread "wkupdaemon" (pid 55) exited prematurely.
+# random: unblocking device.
+# Kernel thread "wkupdaemon" (pid 56) exited prematurely.
# Trying to mount root from ufs:/dev/da0s1a
#
# grnoc-mon at CLINTON-MX40> show version
# Hostname: CLINTON-MX40
# Model: mx40-t
-# Junos: 13.3R8.7
-# JUNOS Base OS boot [13.3R8.7]
-# JUNOS Base OS Software Suite [13.3R8.7]
-# JUNOS Kernel Software Suite [13.3R8.7]
-# JUNOS Crypto Software Suite [13.3R8.7]
-# JUNOS Packet Forwarding Engine Support (MX80) [13.3R8.7]
-# JUNOS Online Documentation [13.3R8.7]
-# JUNOS Services Application Level Gateways [13.3R8.7]
-# JUNOS Services Jflow Container package [13.3R8.7]
-# JUNOS Services Stateful Firewall [13.3R8.7]
-# JUNOS Services NAT [13.3R8.7]
-# JUNOS Services RPM [13.3R8.7]
-# JUNOS Services Crypto [13.3R8.7]
-# JUNOS Services SSL [13.3R8.7]
-# JUNOS Services IPSec [13.3R8.7]
-# JUNOS Routing Software Suite [13.3R8.7]
+# Junos: 16.1R5.7
+# JUNOS Base OS boot [16.1R5.7]
+# JUNOS Base OS Software Suite [16.1R5.7]
+# JUNOS Crypto Software Suite [16.1R5.7]
+# JUNOS Packet Forwarding Engine Support (MX80) [16.1R5.7]
+# JUNOS Web Management [16.1R5.7]
+# JUNOS Online Documentation [16.1R5.7]
+# JUNOS SDN Software Suite [16.1R5.7]
+# JUNOS Services Application Level Gateways [16.1R5.7]
+# JUNOS Services COS [16.1R5.7]
+# JUNOS Services Jflow Container package [16.1R5.7]
+# JUNOS Services Stateful Firewall [16.1R5.7]
+# JUNOS Services NAT [16.1R5.7]
+# JUNOS Services RPM [16.1R5.7]
+# JUNOS Services Captive Portal and Content Delivery Container package [16.1R5.7]
+# JUNOS Macsec Software Suite [16.1R5.7]
+# JUNOS Services Crypto [16.1R5.7]
+# JUNOS Services IPSec [16.1R5.7]
+# JUNOS DP Crypto Software Software Suite [16.1R5.7]
+# JUNOS py-base-powerpc [16.1R5.7]
+# JUNOS py-extensions-powerpc [16.1R5.7]
+# JUNOS jsd [powerpc-16.1R5.7-jet-1]
+# JUNOS Kernel Software Suite [16.1R5.7]
+# JUNOS Routing Software Suite [16.1R5.7]
#
# grnoc-mon at CLINTON-MX40> show version invoke-on all-routing-engines
# Hostname: CLINTON-MX40
# Model: mx40-t
-# Junos: 13.3R8.7
-# JUNOS Base OS boot [13.3R8.7]
-# JUNOS Base OS Software Suite [13.3R8.7]
-# JUNOS Kernel Software Suite [13.3R8.7]
-# JUNOS Crypto Software Suite [13.3R8.7]
-# JUNOS Packet Forwarding Engine Support (MX80) [13.3R8.7]
-# JUNOS Online Documentation [13.3R8.7]
-# JUNOS Services Application Level Gateways [13.3R8.7]
-# JUNOS Services Jflow Container package [13.3R8.7]
-# JUNOS Services Stateful Firewall [13.3R8.7]
-# JUNOS Services NAT [13.3R8.7]
-# JUNOS Services RPM [13.3R8.7]
-# JUNOS Services Crypto [13.3R8.7]
-# JUNOS Services SSL [13.3R8.7]
-# JUNOS Services IPSec [13.3R8.7]
-# JUNOS Routing Software Suite [13.3R8.7]
+# Junos: 16.1R5.7
+# JUNOS Base OS boot [16.1R5.7]
+# JUNOS Base OS Software Suite [16.1R5.7]
+# JUNOS Crypto Software Suite [16.1R5.7]
+# JUNOS Packet Forwarding Engine Support (MX80) [16.1R5.7]
+# JUNOS Web Management [16.1R5.7]
+# JUNOS Online Documentation [16.1R5.7]
+# JUNOS SDN Software Suite [16.1R5.7]
+# JUNOS Services Application Level Gateways [16.1R5.7]
+# JUNOS Services COS [16.1R5.7]
+# JUNOS Services Jflow Container package [16.1R5.7]
+# JUNOS Services Stateful Firewall [16.1R5.7]
+# JUNOS Services NAT [16.1R5.7]
+# JUNOS Services RPM [16.1R5.7]
+# JUNOS Services Captive Portal and Content Delivery Container package [16.1R5.7]
+# JUNOS Macsec Software Suite [16.1R5.7]
+# JUNOS Services Crypto [16.1R5.7]
+# JUNOS Services IPSec [16.1R5.7]
+# JUNOS DP Crypto Software Software Suite [16.1R5.7]
+# JUNOS py-base-powerpc [16.1R5.7]
+# JUNOS py-extensions-powerpc [16.1R5.7]
+# JUNOS jsd [powerpc-16.1R5.7-jet-1]
+# JUNOS Kernel Software Suite [16.1R5.7]
+# JUNOS Routing Software Suite [16.1R5.7]
#
# grnoc-mon at CLINTON-MX40> file list /var/tmp detail
#
# /var/tmp:
-# total blocks: 501280
-# drwxr-xr-x 2 root field 512 Mar 14 2016 gres-tp/
+# total blocks: 693236
+# -rw-r--r-- 1 root field 0 Nov 24 02:07 LOCK_FILE
+# drwxr-xr-x 2 root field 512 Nov 24 00:33 gres-tp/
+# -rw-r--r-- 1 eng field 47861 Nov 24 00:40 hutcli.20171124.cfg
# drwxrwxrwx 2 root wheel 512 Jun 3 2013 install/
-# -rw-r--r-- 1 eng field 256547761 Mar 13 2016 jinstall-ppc-13.3R8.7-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 341909955 Nov 23 10:02 jinstall-ppc-16.1R5.7-signed.tgz
+# -rw-r--r-- 1 root field 46 Nov 24 02:06 kmdchk.log
+# -rw-r--r-- 1 root field 57 Nov 24 02:07 krt_rpf_filter.txt
+# -rw-r--r-- 1 root field 42 Nov 24 02:06 pfe_debug_commands
# drwxrwxrwx 2 root wheel 512 Jun 3 2013 pics/
-# -r--r--r-- 1 root field 237 Mar 14 2016 preinstall_boot_loader.conf
-# drwxr-xr-x 2 root field 512 Mar 14 2016 rtsdb/
+# -r--r--r-- 1 root field 237 Nov 24 01:52 preinstall_boot_loader.conf
+# -rw-rw---- 1 root field 6645153 Nov 24 00:30 rpd.core.0.gz
+# -rw-rw---- 1 root field 6135601 Nov 24 01:53 rpd.core.1.gz
+# drwxr-xr-x 2 root field 512 Nov 24 00:33 rtsdb/
+# -rw-r----- 1 root field 178 Nov 24 02:16 sampled.pkts
+# drwxr-xr-x 2 root field 512 Nov 24 02:05 sd-upgrade/
# drwxrwxrwt 2 root wheel 512 May 20 2013 vi.recover/
-# total files: 2
+# total files: 10
#
# grnoc-mon at CLINTON-MX40> show system uptime
-# System booted: 2016-03-14 01:36 CDT
-# Protocols started: 2016-03-14 01:38 CDT
-# Last configured: 2017-09-26 21:08 CDT by andrew
+# Time Source: NTP CLOCK
+# System booted: 2017-11-24 02:04 CST
+# Protocols started: 2017-11-24 02:07 CST
+# Last configured: 2017-11-24 04:19 CST by andrew
#
# grnoc-mon at CLINTON-MX40> show interface terse
#Interface Admin Link
@@ -275,6 +294,7 @@
#pfe-0/0/0.16383 up up
#pfh-0/0/0 up up
#pfh-0/0/0.16383 up up
+#pfh-0/0/0.16384 up up
#xe-0/0/0 up up
#xe-0/0/0.40 up up
#xe-0/0/0.32767 up up
@@ -323,10 +343,13 @@
#em0.0 up up
#em1 up down
#em1.0 up down
+#esi up up
#fxp0 up down
#gre up up
#ipip up up
#irb up up
+#jsrv up up
+#jsrv.1 up up
#lo0 up up
#lo0.0 up up
#lo0.16384 up up
@@ -336,31 +359,31 @@
#lsi.1 up up
#lsi.2 up up
#lsi.3 up up
-#lsi.1049184 up up
-#lsi.1049185 up up
-#lsi.1049186 up up
-#lsi.1049188 up up
-#lsi.1049189 up up
-#lsi.1049190 up up
-#lsi.1049194 up up
-#lsi.1049197 up up
-#lsi.1049198 up up
-#lsi.1049200 up up
-#lsi.1049204 up up
-#lsi.1049205 up up
-#lsi.1049206 up up
-#lsi.1049209 up up
-#lsi.1049212 up up
-#lsi.1049215 up up
-#lsi.1049216 up up
-#lsi.1049221 up up
-#lsi.1049222 up up
-#lsi.1049224 up up
-#lsi.1049233 up up
-#lsi.1049243 up up
-#lsi.1049253 up up
-#lsi.1049261 up up
-#lsi.1049263 up up
+#lsi.1048601 up up
+#lsi.1048602 up up
+#lsi.1048603 up up
+#lsi.1048604 up up
+#lsi.1048605 up up
+#lsi.1048607 up up
+#lsi.1048608 up up
+#lsi.1048609 up up
+#lsi.1048610 up up
+#lsi.1048612 up up
+#lsi.1048613 up up
+#lsi.1048614 up up
+#lsi.1048615 up up
+#lsi.1048616 up up
+#lsi.1048617 up up
+#lsi.1048618 up up
+#lsi.1048619 up up
+#lsi.1048620 up up
+#lsi.1048621 up up
+#lsi.1048622 up up
+#lsi.1048623 up up
+#lsi.1048624 up up
+#lsi.1048625 up up
+#lsi.1048626 up up
+#lsi.1048627 up up
#me0 up up
#me0.0 up up
#mtun up up
@@ -368,10 +391,12 @@
#pime up up
#pip0 up up
#pp0 up up
+#rbeb up up
#tap up up
+#vtep up up
# grnoc-mon at CLINTON-MX40> show configuration
-## Last commit: 2017-09-26 21:08:21 CDT by andrew
-version 13.3R8.7;
+## Last commit: 2017-11-24 04:19:22 CST by andrew
+version 16.1R5.7;
groups {
ISIS-L2-INTERFACE {
protocols {
@@ -379,9 +404,11 @@
interface <*> {
point-to-point;
link-protection;
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
+ family inet {
+ bfd-liveness-detection {
+ minimum-interval 400;
+ multiplier 3;
+ }
}
level 2 {
hello-#authentication-#key <removed>;
@@ -466,6 +493,8 @@
root-login deny;
protocol-version v2;
max-sessions-per-connection 32;
+ ciphers [ "chacha20-poly1305 at openssh.com" aes128-ctr aes192-ctr aes256-ctr "aes128-gcm at openssh.com" "aes256-gcm at openssh.com" 3des-cbc ];
+ key-exchange [ curve25519-sha256 ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 group-exchange-sha2 dh-group14-sha1 dh-group1-sha1 ];
}
netconf {
ssh;
@@ -513,25 +542,42 @@
routing-engine {
on-disk-failure disk-failure-action reboot;
}
+ tfeb {
+ slot 0 {
+ inline-services {
+ flow-table-size {
+ ipv4-flow-table-size 5;
+ ipv6-flow-table-size 5;
+ mpls-flow-table-size 5;
+ }
+ }
+ }
+ }
alarm {
management-ethernet {
link-down ignore;
}
}
- network-services all-ethernet;
+ network-services enhanced-ip;
}
-security {
- ipsec {
- security-association OneNet-OSPF3-AUTH {
- mode transport;
- manual {
- direction bidirectional {
- protocol ah;
- spi 256;
- authentication {
- algorithm hmac-md5-96;
-# key <removed>;
- }
+services {
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ template ipv6 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv6-template;
+ }
+ template mpls-ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ mpls-ipv4-template {
+ label-position [ 1 2 3 ];
}
}
}
@@ -548,14 +594,24 @@
vlan-id 40;
family inet {
mtu 9000;
- address 164.58.247.6/30;
+ sampling {
+ input;
+ }
+ address 164.58.244.159/31;
}
family iso;
family inet6 {
mtu 9000;
+ sampling {
+ input;
+ }
address 2610:1d8:4100::5/127;
}
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
ge-1/0/0 {
@@ -590,6 +646,9 @@
input 300M-POL;
output 300M-POL;
}
+ sampling {
+ input;
+ }
address 10.119.40.170/31;
}
}
@@ -602,6 +661,9 @@
input 300M-POL;
output 300M-POL;
}
+ sampling {
+ input;
+ }
address 10.119.24.170/31;
}
}
@@ -638,6 +700,9 @@
input 100M-POL;
output 100M-POL;
}
+ sampling {
+ input;
+ }
address 10.119.40.122/31;
}
}
@@ -650,6 +715,9 @@
input 100M-POL;
output 100M-POL;
}
+ sampling {
+ input;
+ }
address 10.119.24.122/31;
}
}
@@ -832,6 +900,74 @@
}
}
}
+forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1000;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.154;
+ }
+ }
+ }
+ family inet6 {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv6;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.154;
+ }
+ }
+ }
+ family mpls {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ mpls-ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.154;
+ }
+ }
+ }
+ }
+ }
+ }
+}
routing-options {
##
## Warning: statement ignored: unsupported platform (mx40-t)
@@ -949,42 +1085,6 @@
level 1 disable;
}
}
- inactive: ospf {
- reference-bandwidth 100g;
- area 0.0.0.0 {
- interface lo0.0;
- interface fxp0.0 {
- disable;
- }
- interface xe-0/0/0.40 {
- link-protection;
- authentication {
- md5 7# key <removed>;
- }
- bfd-liveness-detection {
- minimum-interval 100;
- multiplier 3;
- }
- }
- }
- }
- inactive: ospf3 {
- reference-bandwidth 100g;
- area 0.0.0.0 {
- interface xe-0/0/0.40 {
- link-protection;
- ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 100;
- multiplier 3;
- }
- }
- interface lo0.0;
- interface fxp0.0 {
- disable;
- }
- }
- }
ldp {
preference 255;
track-igp-metric;
@@ -1648,6 +1748,17 @@
}
}
}
+ family mpls {
+ filter MPLS-SAMPLE {
+ term DEFAULT {
+ then {
+ count mpls-in;
+ sample;
+ accept;
+ }
+ }
+ }
+ }
policer 100M-POL {
if-exceeding {
bandwidth-limit 100m;
@@ -1784,7 +1895,7 @@
# grnoc-mon at CLINTON-MX40> show bfd session
Detect Transmit
Address State Interface Time Interval Multiplier
-164.58.247.5 Up xe-0/0/0.40 1.200 0.400 3
+164.58.244.158 Up xe-0/0/0.40 1.200 0.400 3
1 sessions, 1 clients
Cumulative transmit rate 2.5 pps, cumulative receive rate 2.5 pps
More information about the Nocrancid
mailing list