[Nocrancid] autopop-onenet.net/core.hut.elk.onenet.net[0] router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Fri Nov 24 04:22:14 CST 2017
Index: configs/core.hut.elk.onenet.net
===================================================================
--- configs/core.hut.elk.onenet.net (revision 158208)
+++ configs/core.hut.elk.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at ELK-CITY-MX40> show system commit
-# 2017-09-26 21:10:47 CDT by andrew via cli
-# 2017-09-26 21:09:37 CDT by andrew via cli
-# 2017-09-25 22:27:29 CDT by andrew via cli
-# 2017-09-24 19:32:23 CDT by andrew via cli
-# 2017-09-16 01:15:09 CDT by andrew via cli
-# 2017-07-29 21:15:04 CDT by andrew via cli
+# 2017-11-24 04:19:33 CST by andrew via cli
+# 2017-11-24 03:43:29 CST by andrew via cli
+# 2017-11-24 02:57:43 CST by andrew via cli
+# 2017-11-24 02:50:55 CST by andrew via cli commit confirmed, rollback in 5mins
+# 2017-11-24 02:21:48 CST by root via other
+# 2017-11-24 00:48:40 CST by andrew via cli
# grnoc-mon at ELK-CITY-MX40> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -24,18 +24,6 @@
# TFEB 0 MQ 0 Chip OK
# TFEB 0 TBB PFE TSen OK
# TFEB 0 TBB PFE Chip OK
-# TFEB 0 TFEB PCIE TSen OK
-# TFEB 0 TFEB PCIE Chip OK
-# TFEB 0 QX 0 TSen OK
-# TFEB 0 QX 0 Chip OK
-# TFEB 0 LU 0 TSen OK
-# TFEB 0 LU 0 Chip OK
-# TFEB 0 MQ 0 TSen OK
-# TFEB 0 MQ 0 Chip OK
-# TFEB 0 TBB PFE TSen OK
-# TFEB 0 TBB PFE Chip OK
-# TFEB 0 TFEB PCIE TSen OK
-# TFEB 0 TFEB PCIE Chip OK
# Fans Fan 1 OK
# Fan 2 OK
# Fan 3 OK
@@ -45,11 +33,11 @@
# grnoc-mon at ELK-CITY-MX40> show chassis firmware
# Part Type Version
# FPC 0 ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R8.7 by builder on 2015-10-23 1
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# FPC 1 ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R8.7 by builder on 2015-10-23 1
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# TFEB ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 13.3R8.7 by builder on 2015-10-23 1
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
#
# grnoc-mon at ELK-CITY-MX40> show chassis fpc detail
# Slot 0 information:
@@ -120,7 +108,7 @@
# mxppc_set_re_type: hw.board.type is MX40-T
# mxppc_set_re_type: REtype:124, model:mx40-t, model:MX40-T, i2cid:1364
# WDOG initialized
-# Copyright (c) 1996-2015, Juniper Networks, Inc.
+# Copyright (c) 1996-2017, Juniper Networks, Inc.
# All rights reserved.
# Copyright (c) 1992-2007 The FreeBSD Project.
# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
@@ -136,6 +124,7 @@
# MAC/veriexec fingerprint module loaded: SHA256
# MAC/veriexec fingerprint module loaded: SHA1
# ETHERNET SOCKET BRIDGE initialising
+# random: <Software, Yarrow> initialized
# Initializing M/T/EX platform properties ..
# nexus0: <Powerpc Nexus device>
# ocpbus0: <on-chip peripheral bus> on nexus0
@@ -196,9 +185,12 @@
# Setting up M/T interface operations and attributes
# platform_cookie_read not implemented
# Initializing MX-PPC platform mastership..
+# Registered AMT tunnel Encap with UDP Tunnel!
# Loading Redundant LT driver
+# Loading Redundant Virtual Interface driver
# ###PCB Group initialized for udppcbgroup
# ###PCB Group initialized for tcppcbgroup
+# Registering tcp_platform_dependent = tcp_handle_special_ports
# da0 at umass-sim0 bus 0 target 0 lun 0
# da0: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
# da0: 40.000MB/s transfers
@@ -207,75 +199,93 @@
# da1: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
# da1: 40.000MB/s transfers
# da1: 3824MB (7831552 512 byte sectors: 255H 63S/T 487C)
-# Kernel thread "wkupdaemon" (pid 55) exited prematurely.
+# random: unblocking device.
+# Kernel thread "wkupdaemon" (pid 56) exited prematurely.
# Trying to mount root from ufs:/dev/da0s1a
-# WARNING: /mnt was not properly dismounted
#
# grnoc-mon at ELK-CITY-MX40> show version
# Hostname: ELK-CITY-MX40
# Model: mx40-t
-# Junos: 13.3R8.7
-# JUNOS Base OS boot [13.3R8.7]
-# JUNOS Base OS Software Suite [13.3R8.7]
-# JUNOS Kernel Software Suite [13.3R8.7]
-# JUNOS Crypto Software Suite [13.3R8.7]
-# JUNOS Packet Forwarding Engine Support (MX80) [13.3R8.7]
-# JUNOS Online Documentation [13.3R8.7]
-# JUNOS Services Application Level Gateways [13.3R8.7]
-# JUNOS Services Jflow Container package [13.3R8.7]
-# JUNOS Services Stateful Firewall [13.3R8.7]
-# JUNOS Services NAT [13.3R8.7]
-# JUNOS Services RPM [13.3R8.7]
-# JUNOS Services Crypto [13.3R8.7]
-# JUNOS Services SSL [13.3R8.7]
-# JUNOS Services IPSec [13.3R8.7]
-# JUNOS Routing Software Suite [13.3R8.7]
+# Junos: 16.1R5.7
+# JUNOS Base OS boot [16.1R5.7]
+# JUNOS Base OS Software Suite [16.1R5.7]
+# JUNOS Crypto Software Suite [16.1R5.7]
+# JUNOS Packet Forwarding Engine Support (MX80) [16.1R5.7]
+# JUNOS Web Management [16.1R5.7]
+# JUNOS Online Documentation [16.1R5.7]
+# JUNOS SDN Software Suite [16.1R5.7]
+# JUNOS Services Application Level Gateways [16.1R5.7]
+# JUNOS Services COS [16.1R5.7]
+# JUNOS Services Jflow Container package [16.1R5.7]
+# JUNOS Services Stateful Firewall [16.1R5.7]
+# JUNOS Services NAT [16.1R5.7]
+# JUNOS Services RPM [16.1R5.7]
+# JUNOS Services Captive Portal and Content Delivery Container package [16.1R5.7]
+# JUNOS Macsec Software Suite [16.1R5.7]
+# JUNOS Services Crypto [16.1R5.7]
+# JUNOS Services IPSec [16.1R5.7]
+# JUNOS DP Crypto Software Software Suite [16.1R5.7]
+# JUNOS py-base-powerpc [16.1R5.7]
+# JUNOS py-extensions-powerpc [16.1R5.7]
+# JUNOS jsd [powerpc-16.1R5.7-jet-1]
+# JUNOS Kernel Software Suite [16.1R5.7]
+# JUNOS Routing Software Suite [16.1R5.7]
#
# grnoc-mon at ELK-CITY-MX40> show version invoke-on all-routing-engines
# Hostname: ELK-CITY-MX40
# Model: mx40-t
-# Junos: 13.3R8.7
-# JUNOS Base OS boot [13.3R8.7]
-# JUNOS Base OS Software Suite [13.3R8.7]
-# JUNOS Kernel Software Suite [13.3R8.7]
-# JUNOS Crypto Software Suite [13.3R8.7]
-# JUNOS Packet Forwarding Engine Support (MX80) [13.3R8.7]
-# JUNOS Online Documentation [13.3R8.7]
-# JUNOS Services Application Level Gateways [13.3R8.7]
-# JUNOS Services Jflow Container package [13.3R8.7]
-# JUNOS Services Stateful Firewall [13.3R8.7]
-# JUNOS Services NAT [13.3R8.7]
-# JUNOS Services RPM [13.3R8.7]
-# JUNOS Services Crypto [13.3R8.7]
-# JUNOS Services SSL [13.3R8.7]
-# JUNOS Services IPSec [13.3R8.7]
-# JUNOS Routing Software Suite [13.3R8.7]
+# Junos: 16.1R5.7
+# JUNOS Base OS boot [16.1R5.7]
+# JUNOS Base OS Software Suite [16.1R5.7]
+# JUNOS Crypto Software Suite [16.1R5.7]
+# JUNOS Packet Forwarding Engine Support (MX80) [16.1R5.7]
+# JUNOS Web Management [16.1R5.7]
+# JUNOS Online Documentation [16.1R5.7]
+# JUNOS SDN Software Suite [16.1R5.7]
+# JUNOS Services Application Level Gateways [16.1R5.7]
+# JUNOS Services COS [16.1R5.7]
+# JUNOS Services Jflow Container package [16.1R5.7]
+# JUNOS Services Stateful Firewall [16.1R5.7]
+# JUNOS Services NAT [16.1R5.7]
+# JUNOS Services RPM [16.1R5.7]
+# JUNOS Services Captive Portal and Content Delivery Container package [16.1R5.7]
+# JUNOS Macsec Software Suite [16.1R5.7]
+# JUNOS Services Crypto [16.1R5.7]
+# JUNOS Services IPSec [16.1R5.7]
+# JUNOS DP Crypto Software Software Suite [16.1R5.7]
+# JUNOS py-base-powerpc [16.1R5.7]
+# JUNOS py-extensions-powerpc [16.1R5.7]
+# JUNOS jsd [powerpc-16.1R5.7-jet-1]
+# JUNOS Kernel Software Suite [16.1R5.7]
+# JUNOS Routing Software Suite [16.1R5.7]
#
# grnoc-mon at ELK-CITY-MX40> file list /var/tmp detail
#
# /var/tmp:
-# total blocks: 502164
-# drwxr-xr-x 2 root field 512 Mar 15 2016 gres-tp/
+# total blocks: 691720
+# -rw-r--r-- 1 root field 0 Nov 24 02:22 LOCK_FILE
+# drwxr-xr-x 2 root field 512 Nov 24 00:52 gres-tp/
+# -rw-r--r-- 1 eng field 41012 Nov 24 00:59 hutelk.20171124.cfg
# drwxrwxrwx 2 root wheel 512 Jun 3 2013 install/
-# -rw-r--r-- 1 eng field 256547761 Mar 14 2016 jinstall-ppc-13.3R8.7-domestic-signed.tgz
+# -rw-r--r-- 1 eng field 341909955 Nov 23 10:03 jinstall-ppc-16.1R5.7-signed.tgz
+# -rw-r--r-- 1 root field 46 Nov 24 02:21 kmdchk.log
+# -rw-r--r-- 1 root field 57 Nov 24 02:22 krt_rpf_filter.txt
+# -rw-r--r-- 1 root field 42 Nov 24 02:21 pfe_debug_commands
# drwxrwxrwx 2 root wheel 512 Jun 3 2013 pics/
-# -rw-r--r-- 1 root wheel 4107 Apr 26 2016 ppe_trap_fpc0_LU_0_00.0
-# -r--r--r-- 1 root field 237 Mar 15 2016 preinstall_boot_loader.conf
-# drwxr-xr-x 2 root field 512 Mar 15 2016 rtsdb/
-# -rw-r----- 1 root field 534 Aug 7 14:27 sampled.pkts
-# -rw-r--r-- 1 root wheel 95943 Apr 26 2016 ttrace_fpc0_LU_0_00.0
-# -rw-r--r-- 1 root wheel 96110 Apr 26 2016 ttrace_fpc0_LU_0_01.0
-# -rw-r--r-- 1 root wheel 95935 Apr 26 2016 ttrace_fpc0_LU_0_02.0
-# -rw-r--r-- 1 root wheel 60229 Apr 26 2016 ttrace_fpc0_LU_0_03.0
-# -rw-r--r-- 1 root wheel 60206 Apr 26 2016 ttrace_fpc0_LU_0_04.0
-# -rw-r--r-- 1 root wheel 31452 Apr 26 2016 ttrace_fpc0_LU_0_05.0
+# -r--r--r-- 1 root field 237 Nov 24 02:06 preinstall_boot_loader.conf
+# -rw-rw---- 1 root field 6198418 Nov 24 00:49 rpd.core.0.gz
+# -rw-rw---- 1 root field 5815737 Nov 24 02:08 rpd.core.1.gz
+# drwxr-xr-x 2 root field 512 Nov 24 00:52 rtsdb/
+# -rw-r----- 1 root field 534 Nov 24 02:22 sampled.pkts
+# drwxr-xr-x 2 root field 512 Nov 24 02:20 sd-upgrade/
# drwxrwxrwt 2 root wheel 512 May 21 2013 vi.recover/
# total files: 10
#
# grnoc-mon at ELK-CITY-MX40> show system uptime
-# System booted: 2017-08-07 14:24 CDT
-# Protocols started: 2017-08-07 14:27 CDT
-# Last configured: 2017-09-26 21:10 CDT by andrew
+# Time Source: NTP CLOCK
+# System booted: 2017-11-24 02:19 CST
+# Protocols started: 2017-11-24 02:22 CST
+# Last configured: 2017-11-24 04:19 CST by andrew
#
# grnoc-mon at ELK-CITY-MX40> show interface terse
#Interface Admin Link
@@ -285,6 +295,7 @@
#pfe-0/0/0.16383 up up
#pfh-0/0/0 up up
#pfh-0/0/0.16383 up up
+#pfh-0/0/0.16384 up up
#xe-0/0/0 up up
#xe-0/0/0.40 up up
#xe-0/0/0.32767 up up
@@ -325,10 +336,13 @@
#em0.0 up up
#em1 up down
#em1.0 up down
+#esi up up
#fxp0 up down
#gre up up
#ipip up up
#irb up up
+#jsrv up up
+#jsrv.1 up up
#lo0 up up
#lo0.0 up up
#lo0.16384 up up
@@ -336,31 +350,31 @@
#lsi up up
#lsi.0 up up
#lsi.1 up up
-#lsi.1048576 up up
-#lsi.1048577 up up
-#lsi.1048578 up up
-#lsi.1048579 up up
-#lsi.1048581 up up
-#lsi.1048582 up up
-#lsi.1048583 up up
-#lsi.1048584 up up
-#lsi.1048585 up up
-#lsi.1048586 up up
-#lsi.1048589 up up
-#lsi.1048591 up up
-#lsi.1048592 up up
-#lsi.1048593 up up
-#lsi.1048594 up up
-#lsi.1048598 up up
-#lsi.1048599 up up
+#lsi.1048602 up up
+#lsi.1048603 up up
+#lsi.1048604 up up
#lsi.1048605 up up
#lsi.1048606 up up
#lsi.1048608 up up
+#lsi.1048609 up up
+#lsi.1048610 up up
+#lsi.1048611 up up
+#lsi.1048612 up up
+#lsi.1048613 up up
+#lsi.1048614 up up
+#lsi.1048615 up up
+#lsi.1048616 up up
#lsi.1048617 up up
-#lsi.1048628 up up
-#lsi.1048638 up up
-#lsi.1048646 up up
-#lsi.1048648 up up
+#lsi.1048618 up up
+#lsi.1048619 up up
+#lsi.1048620 up up
+#lsi.1048621 up up
+#lsi.1048622 up up
+#lsi.1048623 up up
+#lsi.1048624 up up
+#lsi.1048625 up up
+#lsi.1048626 up up
+#lsi.1048627 up up
#me0 up up
#me0.0 up up
#mtun up up
@@ -368,10 +382,12 @@
#pime up up
#pip0 up up
#pp0 up up
+#rbeb up up
#tap up up
+#vtep up up
# grnoc-mon at ELK-CITY-MX40> show configuration
-## Last commit: 2017-09-26 21:10:47 CDT by andrew
-version 13.3R8.7;
+## Last commit: 2017-11-24 04:19:33 CST by andrew
+version 16.1R5.7;
groups {
ISIS-L2-INTERFACE {
protocols {
@@ -379,9 +395,11 @@
interface <*> {
point-to-point;
link-protection;
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
+ family inet {
+ bfd-liveness-detection {
+ minimum-interval 400;
+ multiplier 3;
+ }
}
level 2 {
hello-#authentication-#key <removed>;
@@ -466,6 +484,8 @@
root-login deny;
protocol-version v2;
max-sessions-per-connection 32;
+ ciphers [ "chacha20-poly1305 at openssh.com" aes128-ctr aes192-ctr aes256-ctr "aes128-gcm at openssh.com" "aes256-gcm at openssh.com" 3des-cbc ];
+ key-exchange [ curve25519-sha256 ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 group-exchange-sha2 dh-group14-sha1 dh-group1-sha1 ];
}
netconf {
ssh;
@@ -519,6 +539,13 @@
tfeb {
slot 0 {
sampling-instance JFLOW-1;
+ inline-services {
+ flow-table-size {
+ ipv4-flow-table-size 5;
+ ipv6-flow-table-size 5;
+ mpls-flow-table-size 5;
+ }
+ }
}
}
alarm {
@@ -526,7 +553,7 @@
link-down ignore;
}
}
- network-services all-ethernet;
+ network-services enhanced-ip;
}
services {
flow-monitoring {
@@ -536,21 +563,16 @@
flow-inactive-timeout 60;
ipv4-template;
}
- }
- }
-}
-security {
- ipsec {
- security-association OneNet-OSPF3-AUTH {
- mode transport;
- manual {
- direction bidirectional {
- protocol ah;
- spi 256;
- authentication {
- algorithm hmac-md5-96;
-# key <removed>;
- }
+ template ipv6 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv6-template;
+ }
+ template mpls-ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ mpls-ipv4-template {
+ label-position [ 1 2 3 ];
}
}
}
@@ -570,14 +592,21 @@
sampling {
input;
}
- address 164.58.247.10/30;
+ address 164.58.244.161/31;
}
family iso;
family inet6 {
mtu 9000;
+ sampling {
+ input;
+ }
address 2610:1d8:4100::3/127;
}
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
ge-1/0/0 {
@@ -792,9 +821,6 @@
}
forwarding-options {
sampling {
- input {
- rate 1000;
- }
instance {
JFLOW-1 {
input {
@@ -804,8 +830,8 @@
output {
flow-inactive-timeout 60;
flow-active-timeout 60;
- flow-server 164.58.253.36 {
- port 9155;
+ flow-server 164.58.9.10 {
+ port 7000;
autonomous-system-type origin;
no-local-dump;
version-ipfix {
@@ -819,6 +845,44 @@
}
}
}
+ family inet6 {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv6;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.155;
+ }
+ }
+ }
+ family mpls {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ mpls-ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.155;
+ }
+ }
+ }
}
}
}
@@ -940,41 +1004,6 @@
level 1 disable;
}
}
- inactive: ospf {
- reference-bandwidth 100g;
- area 0.0.0.0 {
- interface lo0.0;
- interface fxp0.0 {
- disable;
- }
- interface xe-0/0/0.40 {
- link-protection;
- authentication {
- md5 7# key <removed>;
- }
- bfd-liveness-detection {
- minimum-interval 100;
- multiplier 3;
- }
- }
- }
- }
- inactive: ospf3 {
- reference-bandwidth 100g;
- area 0.0.0.0 {
- interface xe-0/0/0.40 {
- link-protection;
- ipsec-sa OneNet-OSPF3-AUTH;
- bfd-liveness-detection {
- minimum-interval 100;
- multiplier 3;
- }
- }
- interface lo0.0 {
- passive;
- }
- }
- }
ldp {
preference 255;
track-igp-metric;
@@ -1539,6 +1568,17 @@
}
}
}
+ family mpls {
+ filter MPLS-SAMPLE {
+ term DEFAULT {
+ then {
+ count mpls-in;
+ sample;
+ accept;
+ }
+ }
+ }
+ }
policer 100M-POL {
if-exceeding {
bandwidth-limit 100m;
@@ -1615,7 +1655,7 @@
# grnoc-mon at ELK-CITY-MX40> show bfd session
Detect Transmit
Address State Interface Time Interval Multiplier
-164.58.247.9 Up xe-0/0/0.40 1.200 0.400 3
+164.58.244.160 Up xe-0/0/0.40 1.200 0.400 3
1 sessions, 1 clients
Cumulative transmit rate 2.5 pps, cumulative receive rate 2.5 pps
More information about the Nocrancid
mailing list