[Nocrancid] autopop-onenet.net/faye.okcdc.onenet.net[0] router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Fri Nov 24 04:25:15 CST 2017
Index: configs/faye.okcdc.onenet.net
===================================================================
--- configs/faye.okcdc.onenet.net (revision 155839)
+++ configs/faye.okcdc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at FAYE-RP3F2-MX40> show system commit
-# 2017-08-16 22:10:25 CDT by andrew via cli
-# 2017-08-16 20:36:15 CDT by andrew via cli
-# 2017-08-11 14:07:45 CDT by andrew via cli
-# 2017-08-10 16:59:15 CDT by andrew via cli
-# 2017-08-03 17:40:40 CDT by andrew via cli
-# 2017-08-02 16:28:46 CDT by sky via cli
+# 2017-11-24 04:19:58 CST by andrew via cli
+# 2017-11-24 03:41:09 CST by andrew via cli
+# 2017-11-22 15:28:45 CST by andrew via cli
+# 2017-11-21 13:28:57 CST by andrew via cli
+# 2017-11-15 21:51:17 CST by andrew via cli
+# 2017-11-15 21:49:20 CST by andrew via cli
# grnoc-mon at FAYE-RP3F2-MX40> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -33,11 +33,11 @@
# grnoc-mon at FAYE-RP3F2-MX40> show chassis firmware
# Part Type Version
# FPC 0 ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 15.1R6.7 by builder on 2017-04-22 23:27:43 UTC
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# FPC 1 ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 15.1R6.7 by builder on 2017-04-22 23:27:43 UTC
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# TFEB ROM Juniper ROM Monitor Version 11.3b1
-# O/S Version 15.1R6.7 by builder on 2017-04-22 23:27:43 UTC
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
#
# grnoc-mon at FAYE-RP3F2-MX40> show chassis fpc detail
# Slot 0 information:
@@ -54,12 +54,12 @@
# grnoc-mon at FAYE-RP3F2-MX40> show chassis hardware
# Hardware inventory:
# Item Version Part number Serial number Description
-# Chassis T6359 MX40-T
-# Midplane REV 08 711-038211 ABCE4637 MX40-T
+# Chassis T6167 MX40-T
+# Midplane REV 08 711-038211 ABCA2754 MX40-T
# PEM 0 Rev 04 740-028288 VJ08673 AC Power Entry Module
# Routing Engine BUILTIN BUILTIN Routing Engine
# TFEB 0 BUILTIN BUILTIN Forwarding Engine Processor
-# QXM 0 REV 06 711-028408 ABCB7268 MPC QXM
+# QXM 0 REV 05 711-028408 ABCC4299 MPC QXM
# FPC 0 BUILTIN BUILTIN MPC BUILTIN
# MIC 0 BUILTIN BUILTIN 4x 10GE XFP
# PIC 0 BUILTIN BUILTIN 4x 10GE XFP
@@ -71,19 +71,19 @@
# Xcvr 0 REV 02 740-013111 A475240 SFP-T
# Xcvr 1 REV 02 740-013111 B436674 SFP-T
# Xcvr 2 REV 02 740-013111 B436653 SFP-T
-# Xcvr 3 REV 02 740-013111 B436489 SFP-T
# Xcvr 9 REV 01 740-031851 AM1143SW326 SFP-SX
# PIC 1 BUILTIN BUILTIN 10x 1GE(LAN) SFP
# Xcvr 1 REV 02 740-013111 A476464 SFP-T
-# Xcvr 2 REV 02 740-013111 B436508 SFP-T
-# Xcvr 8 REV 01 740-031851 AM1144SW6RN SFP-SX
+# Xcvr 3 REV 02 740-013111 B436508 SFP-T
+# Xcvr 7 REV 01 740-031851 AM1144SW6RN SFP-SX
+# Xcvr 8 REV 02 740-013111 B436489 SFP-T
# Xcvr 9 REV 01 740-031851 PUP0U09 SFP-SX
# Fan Tray Fan Tray
#
# grnoc-mon at FAYE-RP3F2-MX40> show chassis hardware models
# Hardware inventory:
# Item Version Part number Serial number FRU model number
-# Midplane REV 08 711-038211 ABCE4637 CHAS-MX40-T-S
+# Midplane REV 08 711-038211 ABCA2754 CHAS-MX40-T-S
# PEM 0 Rev 04 740-028288 VJ08673 PWR-MX80-AC-S
# Routing Engine BUILTIN BUILTIN
# TFEB 0 BUILTIN BUILTIN
@@ -95,7 +95,7 @@
# grnoc-mon at FAYE-RP3F2-MX40> show chassis routing-engine
# Routing Engine status:
# DRAM 2048 MB (2048 MB installed)
-# Serial ID S/N ABCE4637
+# Serial ID S/N ABCA2754
#
# grnoc-mon at FAYE-RP3F2-MX40> show chassis scb
# grnoc-mon at FAYE-RP3F2-MX40> show chassis sfm detail
@@ -121,6 +121,7 @@
# MAC/veriexec fingerprint module loaded: SHA256
# MAC/veriexec fingerprint module loaded: SHA1
# ETHERNET SOCKET BRIDGE initialising
+# random: <Software, Yarrow> initialized
# Initializing M/T/EX platform properties ..
# nexus0: <Powerpc Nexus device>
# ocpbus0: <on-chip peripheral bus> on nexus0
@@ -149,7 +150,7 @@
# gentbi1: <Generic ten-bit interface> on miibus1
# gentbi1: 1000baseSX-FDX, 1000baseT-FDX, auto
# tsec2: <eTSEC ethernet controller> iomem 0xf7f26000-0xf7f26fff irq 47,48,49 on ocpbus0
-# tsec2: hardware MAC address 54:e0:32:c8:5f:ff
+# tsec2: hardware MAC address 88:e0:f3:7f:0f:ff
# miibus2: <MII bus> on tsec2
# e1000phy0: <Marvell 88E1112 Gigabit PHY> on miibus2
# e1000phy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
@@ -183,8 +184,10 @@
# Initializing MX-PPC platform mastership..
# Registered AMT tunnel Encap with UDP Tunnel!
# Loading Redundant LT driver
+# Loading Redundant Virtual Interface driver
# ###PCB Group initialized for udppcbgroup
# ###PCB Group initialized for tcppcbgroup
+# Registering tcp_platform_dependent = tcp_handle_special_ports
# da0 at umass-sim0 bus 0 target 0 lun 0
# da0: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
# da0: 40.000MB/s transfers
@@ -193,71 +196,92 @@
# da1: <UNIGEN QYR4000F4 PMAP> Removable Direct Access SCSI-0 device
# da1: 40.000MB/s transfers
# da1: 3824MB (7831552 512 byte sectors: 255H 63S/T 487C)
+# random: unblocking device.
# Kernel thread "wkupdaemon" (pid 56) exited prematurely.
# Trying to mount root from ufs:/dev/da0s1a
#
# grnoc-mon at FAYE-RP3F2-MX40> show version
# Hostname: FAYE-RP3F2-MX40
# Model: mx40-t
-# Junos: 15.1R6.7
-# JUNOS Base OS boot [15.1R6.7]
-# JUNOS Base OS Software Suite [15.1R6.7]
-# JUNOS Crypto Software Suite [15.1R6.7]
-# JUNOS Packet Forwarding Engine Support (MX80) [15.1R6.7]
-# JUNOS Web Management [15.1R6.7]
-# JUNOS Online Documentation [15.1R6.7]
-# JUNOS Services Application Level Gateways [15.1R6.7]
-# JUNOS Services Jflow Container package [15.1R6.7]
-# JUNOS Services Stateful Firewall [15.1R6.7]
-# JUNOS Services NAT [15.1R6.7]
-# JUNOS Services RPM [15.1R6.7]
-# JUNOS Services Captive Portal and Content Delivery Container package [15.1R6.7]
-# JUNOS Macsec Software Suite [15.1R6.7]
-# JUNOS Services Crypto [15.1R6.7]
-# JUNOS Services IPSec [15.1R6.7]
-# JUNOS Kernel Software Suite [15.1R6.7]
-# JUNOS Routing Software Suite [15.1R6.7]
+# Junos: 16.1R5.7
+# JUNOS Base OS boot [16.1R5.7]
+# JUNOS Base OS Software Suite [16.1R5.7]
+# JUNOS Crypto Software Suite [16.1R5.7]
+# JUNOS Packet Forwarding Engine Support (MX80) [16.1R5.7]
+# JUNOS Web Management [16.1R5.7]
+# JUNOS Online Documentation [16.1R5.7]
+# JUNOS SDN Software Suite [16.1R5.7]
+# JUNOS Services Application Level Gateways [16.1R5.7]
+# JUNOS Services COS [16.1R5.7]
+# JUNOS Services Jflow Container package [16.1R5.7]
+# JUNOS Services Stateful Firewall [16.1R5.7]
+# JUNOS Services NAT [16.1R5.7]
+# JUNOS Services RPM [16.1R5.7]
+# JUNOS Services Captive Portal and Content Delivery Container package [16.1R5.7]
+# JUNOS Macsec Software Suite [16.1R5.7]
+# JUNOS Services Crypto [16.1R5.7]
+# JUNOS Services IPSec [16.1R5.7]
+# JUNOS DP Crypto Software Software Suite [16.1R5.7]
+# JUNOS py-base-powerpc [16.1R5.7]
+# JUNOS py-extensions-powerpc [16.1R5.7]
+# JUNOS jsd [powerpc-16.1R5.7-jet-1]
+# JUNOS Kernel Software Suite [16.1R5.7]
+# JUNOS Routing Software Suite [16.1R5.7]
#
# grnoc-mon at FAYE-RP3F2-MX40> show version invoke-on all-routing-engines
# Hostname: FAYE-RP3F2-MX40
# Model: mx40-t
-# Junos: 15.1R6.7
-# JUNOS Base OS boot [15.1R6.7]
-# JUNOS Base OS Software Suite [15.1R6.7]
-# JUNOS Crypto Software Suite [15.1R6.7]
-# JUNOS Packet Forwarding Engine Support (MX80) [15.1R6.7]
-# JUNOS Web Management [15.1R6.7]
-# JUNOS Online Documentation [15.1R6.7]
-# JUNOS Services Application Level Gateways [15.1R6.7]
-# JUNOS Services Jflow Container package [15.1R6.7]
-# JUNOS Services Stateful Firewall [15.1R6.7]
-# JUNOS Services NAT [15.1R6.7]
-# JUNOS Services RPM [15.1R6.7]
-# JUNOS Services Captive Portal and Content Delivery Container package [15.1R6.7]
-# JUNOS Macsec Software Suite [15.1R6.7]
-# JUNOS Services Crypto [15.1R6.7]
-# JUNOS Services IPSec [15.1R6.7]
-# JUNOS Kernel Software Suite [15.1R6.7]
-# JUNOS Routing Software Suite [15.1R6.7]
+# Junos: 16.1R5.7
+# JUNOS Base OS boot [16.1R5.7]
+# JUNOS Base OS Software Suite [16.1R5.7]
+# JUNOS Crypto Software Suite [16.1R5.7]
+# JUNOS Packet Forwarding Engine Support (MX80) [16.1R5.7]
+# JUNOS Web Management [16.1R5.7]
+# JUNOS Online Documentation [16.1R5.7]
+# JUNOS SDN Software Suite [16.1R5.7]
+# JUNOS Services Application Level Gateways [16.1R5.7]
+# JUNOS Services COS [16.1R5.7]
+# JUNOS Services Jflow Container package [16.1R5.7]
+# JUNOS Services Stateful Firewall [16.1R5.7]
+# JUNOS Services NAT [16.1R5.7]
+# JUNOS Services RPM [16.1R5.7]
+# JUNOS Services Captive Portal and Content Delivery Container package [16.1R5.7]
+# JUNOS Macsec Software Suite [16.1R5.7]
+# JUNOS Services Crypto [16.1R5.7]
+# JUNOS Services IPSec [16.1R5.7]
+# JUNOS DP Crypto Software Software Suite [16.1R5.7]
+# JUNOS py-base-powerpc [16.1R5.7]
+# JUNOS py-extensions-powerpc [16.1R5.7]
+# JUNOS jsd [powerpc-16.1R5.7-jet-1]
+# JUNOS Kernel Software Suite [16.1R5.7]
+# JUNOS Routing Software Suite [16.1R5.7]
#
# grnoc-mon at FAYE-RP3F2-MX40> file list /var/tmp detail
#
# /var/tmp:
-# total blocks: 36
-# drwxrwxrwx 2 root wheel 512 Dec 16 2016 install/
-# drwxr-xr-x 2 root field 512 Jul 30 13:21 mgdBbeIpc/
-# drwxrwxrwx 2 root wheel 512 Dec 16 2016 pics/
-# -r--r--r-- 1 root field 237 Jul 30 14:02 preinstall_boot_loader.conf
-# drwxr-xr-x 2 root field 512 Jul 30 14:32 rtsdb/
-# drwxr-xr-x 2 root field 512 Dec 16 2016 sd-upgrade/
-# drwxrwxrwt 2 root wheel 512 Dec 16 2016 vi.recover/
-# total files: 1
+# total blocks: 488
+# -rw-r--r-- 1 root field 0 Sep 7 15:35 LOCK_FILE
+# -rw-r--r-- 1 eng field 39369 Nov 24 00:17 hut.elr.20171124.cfg
+# -rw-r--r-- 1 eng field 47861 Nov 24 00:40 hutcli.20171124.cfg
+# -rw-r--r-- 1 eng field 41012 Nov 24 00:59 hutelk.20171124.cfg
+# -rw-r--r-- 1 eng field 46911 Nov 24 01:00 hutgra.20171124.cfg
+# drwxrwxrwx 2 root wheel 512 Sep 7 14:04 install/
+# -rw-r--r-- 1 root field 46 Oct 21 01:23 kmdchk.log
+# -rw-r--r-- 1 root field 57 Sep 10 16:42 krt_rpf_filter.txt
+# -rw-r--r-- 1 root field 42 Sep 7 15:34 pfe_debug_commands
+# drwxrwxrwx 2 root wheel 512 Sep 7 14:04 pics/
+# drwxr-xr-x 2 root field 512 Sep 7 15:35 rtsdb/
+# -rw-r----- 1 root field 356 Sep 10 16:42 sampled.pkts
+# drwxr-xr-x 2 root field 512 Sep 7 15:33 sd-upgrade/
+# -rw-r--r-- 1 eng field 45116 Nov 24 00:25 toward.20171124.cfg
+# drwxrwxrwt 2 root wheel 512 Sep 7 14:04 vi.recover/
+# total files: 10
#
# grnoc-mon at FAYE-RP3F2-MX40> show system uptime
# Time Source: NTP CLOCK
-# System booted: 2017-07-30 14:13 CDT
-# Protocols started: 2017-07-30 14:15 CDT
-# Last configured: 2017-08-16 22:10 CDT by andrew
+# System booted: 2017-09-10 16:38 CDT
+# Protocols started: 2017-09-10 16:41 CDT
+# Last configured: 2017-11-24 04:19 CST by andrew
#
# grnoc-mon at FAYE-RP3F2-MX40> show interface terse
#Interface Admin Link
@@ -283,13 +307,15 @@
#ge-1/0/0.42 up up
#ge-1/0/0.80 up up
#ge-1/0/0.155 up up
+#ge-1/0/0.253 up up
#ge-1/0/0.300 up up
#ge-1/0/0.316 up up
#ge-1/0/0.317 up up
#ge-1/0/0.400 up up
#ge-1/0/0.500 up up
#ge-1/0/0.501 up down
-#ge-1/0/0.502 up down
+#ge-1/0/0.502 up up
+#ge-1/0/0.503 up up
#ge-1/0/0.504 up up
#ge-1/0/0.505 up up
#ge-1/0/0.510 up down
@@ -297,6 +323,7 @@
#ge-1/0/0.520 up up
#ge-1/0/0.550 up up
#ge-1/0/0.600 up up
+#ge-1/0/0.999 up up
#ge-1/0/0.2518 up up
#ge-1/0/0.32767 up up
#ge-1/0/1 up down
@@ -321,17 +348,22 @@
#ge-1/1/2.501 up down
#ge-1/1/2.2518 up down
#ge-1/1/2.32767 up down
-#ge-1/1/3 down down
+#ge-1/1/3 up up
+#ge-1/1/3.550 up up
+#ge-1/1/3.551 up up
+#ge-1/1/3.600 up up
+#ge-1/1/3.32767 up up
#ge-1/1/4 down down
#ge-1/1/5 down down
#ge-1/1/6 down down
-#ge-1/1/7 down down
+#ge-1/1/7 up up
+#ge-1/1/7.80 up up
+#ge-1/1/7.32767 up up
#ge-1/1/8 up up
-#ge-1/1/8.80 up up
-#ge-1/1/8.32767 up up
+#ge-1/1/8.0 up up
#ge-1/1/9 up up
#ge-1/1/9.80 up up
-#ge-1/1/9.81 up up
+#ge-1/1/9.500 up up
#ge-1/1/9.2518 up up
#ge-1/1/9.32767 up up
#cbp0 up up
@@ -346,7 +378,6 @@
#gre up up
#ipip up up
#irb up up
-#irb.2518 up up
#jsrv up up
#jsrv.1 up up
#lo0 up up
@@ -358,36 +389,40 @@
#lsi.1 up up
#lsi.2 up up
#lsi.3 up up
-#lsi.1048576 up up
-#lsi.1048577 up up
-#lsi.1048578 up up
-#lsi.1048579 up up
-#lsi.1048580 up up
-#lsi.1048581 up up
-#lsi.1048582 up up
-#lsi.1048583 up up
-#lsi.1048584 up up
-#lsi.1048585 up up
-#lsi.1048586 up up
-#lsi.1048588 up up
-#lsi.1048590 up up
-#lsi.1048591 up up
-#lsi.1048593 up up
-#lsi.1048594 up up
-#lsi.1048595 up up
-#lsi.1048596 up up
-#lsi.1048597 up up
-#lsi.1048599 up up
-#lsi.1048601 up up
-#lsi.1048602 up up
-#lsi.1048603 up up
-#lsi.1048604 up up
-#lsi.1048605 up up
-#lsi.1048606 up up
-#lsi.1048607 up up
-#lsi.1048608 up up
-#lsi.1048612 up up
-#lsi.1048613 up up
+#lsi.4 up up
+#lsi.1048865 up up
+#lsi.1048866 up up
+#lsi.1048867 up up
+#lsi.1048868 up up
+#lsi.1048869 up up
+#lsi.1048870 up up
+#lsi.1048871 up up
+#lsi.1048872 up up
+#lsi.1048873 up up
+#lsi.1048874 up up
+#lsi.1048875 up up
+#lsi.1048876 up up
+#lsi.1048877 up up
+#lsi.1048878 up up
+#lsi.1048879 up up
+#lsi.1048881 up up
+#lsi.1048882 up up
+#lsi.1048883 up up
+#lsi.1048884 up up
+#lsi.1048885 up up
+#lsi.1048888 up up
+#lsi.1048889 up up
+#lsi.1048890 up up
+#lsi.1048891 up up
+#lsi.1048892 up up
+#lsi.1048893 up up
+#lsi.1048894 up up
+#lsi.1048895 up up
+#lsi.1048896 up up
+#lsi.1048897 up up
+#lsi.1048914 up up
+#lsi.1048915 up up
+#lsi.1048916 up up
#me0 up up
#me0.0 up up
#mtun up up
@@ -395,11 +430,12 @@
#pime up up
#pip0 up up
#pp0 up up
+#rbeb up up
#tap up up
#vtep up up
# grnoc-mon at FAYE-RP3F2-MX40> show configuration
-## Last commit: 2017-08-16 22:10:25 CDT by andrew
-version 15.1R6.7;
+## Last commit: 2017-11-24 04:19:58 CST by andrew
+version 16.1R5.7;
groups {
ISIS-L2-INTERFACE {
protocols {
@@ -407,9 +443,11 @@
interface <*> {
point-to-point;
link-protection;
- bfd-liveness-detection {
- minimum-interval 400;
- multiplier 3;
+ family inet {
+ bfd-liveness-detection {
+ minimum-interval 400;
+ multiplier 3;
+ }
}
level 2 {
hello-#authentication-#key <removed>;
@@ -496,6 +534,8 @@
root-login deny;
protocol-version v2;
max-sessions-per-connection 32;
+ ciphers [ "chacha20-poly1305 at openssh.com" aes128-ctr aes192-ctr aes256-ctr "aes128-gcm at openssh.com" "aes256-gcm at openssh.com" 3des-cbc ];
+ key-exchange [ curve25519-sha256 ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 group-exchange-sha2 dh-group14-sha1 dh-group1-sha1 ];
}
netconf {
ssh;
@@ -540,9 +580,90 @@
}
}
chassis {
+ routing-engine {
+ on-disk-failure disk-failure-action reboot;
+ }
+ tfeb {
+ slot 0 {
+ sampling-instance JFLOW-1;
+ inline-services {
+ flow-table-size {
+ ipv4-flow-table-size 5;
+ ipv6-flow-table-size 5;
+ mpls-flow-table-size 5;
+ }
+ }
+ }
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
network-services enhanced-ip;
}
services {
+ analytics {
+ streaming-server docker {
+ remote-address 164.58.253.28;
+ remote-port 50000;
+ }
+ export-profile opennti {
+ local-address 164.58.199.69;
+ reporting-rate 10;
+ format gpb;
+ transport udp;
+ }
+ sensor interface-1 {
+ server-name docker;
+ export-name opennti;
+ resource /junos/system/linecard/interface/;
+ resource-filter "ge-*|xe-*";
+ }
+ sensor interface-logical-1 {
+ server-name docker;
+ export-name opennti;
+ resource /junos/system/linecard/interface/logical/usage/;
+ resource-filter "ge-*|xe-*";
+ }
+ sensor cpu-1 {
+ server-name docker;
+ export-name opennti;
+ resource /junos/system/linecard/cpu/memory/;
+ }
+ sensor queue-1 {
+ server-name docker;
+ export-name opennti;
+ resource /junos/system/linecard/qmon/;
+ resource-filter "ge-*|xe-*";
+ }
+ sensor optics-1 {
+ server-name docker;
+ export-name opennti;
+ resource /junos/system/linecard/optics/;
+ }
+ }
+ flow-monitoring {
+ version-ipfix {
+ template ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv4-template;
+ }
+ template mpls-ipv4 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ mpls-ipv4-template {
+ label-position [ 1 2 3 ];
+ }
+ }
+ template ipv6 {
+ flow-active-timeout 60;
+ flow-inactive-timeout 60;
+ ipv6-template;
+ }
+ }
+ }
rpm;
}
security {
@@ -573,14 +694,24 @@
vlan-id 42;
family inet {
mtu 9000;
+ sampling {
+ input;
+ }
address 164.58.244.21/31;
}
family iso;
family inet6 {
mtu 9000;
+ sampling {
+ input;
+ }
address 2610:1d8:1000::29/127;
}
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
xe-0/0/1 {
@@ -606,8 +737,8 @@
}
ge-1/0/0 {
description "USER - D-102-C - FLOOR 1 - ANDREW";
+ per-unit-scheduler;
flexible-vlan-tagging;
- speed 100m;
mtu 9192;
encapsulation flexible-ethernet-services;
unit 14 {
@@ -638,6 +769,10 @@
encapsulation vlan-ccc;
vlan-id 155;
}
+ unit 253 {
+ encapsulation vlan-vpls;
+ vlan-id 253;
+ }
unit 300 {
vlan-id 300;
family inet {
@@ -672,6 +807,13 @@
address 164.58.242.1/24;
address 156.110.88.1/24;
address 156.110.224.1/24;
+ address 156.110.48.1/24;
+ address 164.58.228.1/24;
+ address 164.58.234.1/24;
+ address 164.58.238.1/24;
+ address 164.58.96.1/24;
+ address 164.58.154.1/24;
+ address 199.184.104.1/24;
}
}
unit 316 {
@@ -713,6 +855,12 @@
address 2610:1d8:6900::2/127;
}
}
+ unit 503 {
+ vlan-id 503;
+ family inet {
+ address 10.199.208.197/30;
+ }
+ }
unit 504 {
encapsulation vlan-ccc;
vlan-id 504;
@@ -741,6 +889,9 @@
vlan-id 520;
family inet {
mtu 1500;
+ sampling {
+ input;
+ }
address 172.22.114.193/27;
}
}
@@ -754,6 +905,12 @@
encapsulation vlan-ccc;
vlan-id 600;
}
+ unit 999 {
+ vlan-id 999;
+ family inet {
+ address 10.119.55.16/31;
+ }
+ }
unit 2518 {
encapsulation vlan-vpls;
vlan-id 2518;
@@ -826,7 +983,11 @@
mtu 9000;
address 2610:1d8:6900::1/127;
}
- family mpls;
+ family mpls {
+ filter {
+ input MPLS-SAMPLE;
+ }
+ }
}
}
ge-1/1/0 {
@@ -856,7 +1017,30 @@
}
}
ge-1/1/3 {
- disable;
+ description NORTH-LAB-D-102-D;
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 550 {
+ vlan-id 550;
+ family inet {
+ mtu 1500;
+ address 164.58.18.133/30;
+ }
+ }
+ unit 551 {
+ vlan-id 551;
+ family inet {
+ mtu 1500;
+ address 164.58.22.45/30;
+ }
+ }
+ unit 600 {
+ vlan-id 600;
+ family inet {
+ address 10.199.208.233/29;
+ }
+ }
}
ge-1/1/4 {
disable;
@@ -868,9 +1052,6 @@
disable;
}
ge-1/1/7 {
- disable;
- }
- ge-1/1/8 {
description "Stillwater nid test [NO-MONITOR]";
flexible-vlan-tagging;
unit 80 {
@@ -880,6 +1061,14 @@
}
}
}
+ ge-1/1/8 {
+ speed 100m;
+ unit 0 {
+ family inet {
+ address 10.199.192.1/30;
+ }
+ }
+ }
ge-1/1/9 {
description "NETGROUP-LAB-SWITCH [NO-MONITOR]";
flexible-vlan-tagging;
@@ -892,12 +1081,20 @@
address 10.199.208.36/31;
}
}
- unit 81 {
- vlan-id 81;
+ unit 500 {
+ vlan-id 500;
family inet {
- rpf-check;
- address 10.199.192.1/30;
+ sampling {
+ input;
+ }
+ address 164.58.1.252/31;
}
+ family inet6 {
+ sampling {
+ input;
+ }
+ address 2610:1d8:6900::4/127;
+ }
}
unit 2518 {
encapsulation vlan-vpls;
@@ -907,19 +1104,6 @@
fxp0 {
disable;
}
- irb {
- unit 2518 {
- description NETGROUP-TEST-NETWORK;
- family inet {
- mtu 1500;
- address 156.110.54.129/27;
- }
- family inet6 {
- mtu 1500;
- address 2610:1d8:6901::1/64;
- }
- }
- }
lo0 {
unit 0 {
family inet {
@@ -967,13 +1151,86 @@
}
}
}
+forwarding-options {
+ sampling {
+ instance {
+ JFLOW-1 {
+ input {
+ rate 1000;
+ }
+ family inet {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.69;
+ }
+ }
+ }
+ family inet6 {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ ipv6;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.69;
+ }
+ }
+ }
+ family mpls {
+ output {
+ flow-inactive-timeout 60;
+ flow-active-timeout 60;
+ flow-server 164.58.9.10 {
+ port 7000;
+ autonomous-system-type origin;
+ no-local-dump;
+ version-ipfix {
+ template {
+ mpls-ipv4;
+ }
+ }
+ }
+ inline-jflow {
+ source-address 164.58.199.69;
+ }
+ }
+ }
+ }
+ }
+ }
+}
routing-options {
interface-routes {
- rib-group inet INET0-INTERNET-V4;
+ rib-group {
+ inet INET0-INTERNET-V4;
+ inet6 INET0-INTERNET-V6;
+ }
}
rib inet6.0 {
static {
+ rib-group INET0-INTERNET-V6;
route 2610:1d8:6901:1::/64 next-hop 2610:1d8:6900::3;
+ route 2610:1d8:6901::/64 next-hop 2610:1d8:6900::5;
}
}
static {
@@ -986,6 +1243,12 @@
route 156.110.28.48/29 next-hop 156.110.46.234;
route 164.58.0.68/31 next-hop 156.110.46.234;
route 164.58.0.196/30 next-hop 164.58.244.251;
+ route 156.110.54.128/27 next-hop 164.58.1.253;
+ route 156.110.28.0/29 next-hop 164.58.18.134;
+ route 192.35.97.0/24 {
+ next-hop 164.58.1.253;
+ tag 5000;
+ }
}
rib-groups {
INET0-INTERNET-V4 {
@@ -994,19 +1257,19 @@
INTERNET-INET0-V4 {
import-rib [ INTERNET-L3VPN.inet.0 inet.0 ];
}
+ INET0-INTERNET-V6 {
+ import-rib [ inet6.0 INTERNET-L3VPN.inet6.0 ];
+ }
+ INTERNET-INET0-V6 {
+ import-rib [ INTERNET-L3VPN.inet6.0 inet6.0 ];
+ }
}
router-id 164.58.199.69;
autonomous-system 5078;
}
protocols {
- router-advertisement {
- interface irb.2518 {
- no-managed-configuration;
- no-other-stateful-configuration;
- dns-server-address 2610:1d8::164:58:200:200;
- dns-server-address 2610:1d8::156:110:200:200;
- prefix 2610:1d8:6901::/64;
- }
+ igmp {
+ interface irb.2518;
}
mpls {
icmp-tunneling;
@@ -1034,7 +1297,7 @@
}
family route-target;
# authentication-#key <removed>;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ export IBGP-CORE-RR-V4-EXPORT;
peer-as 5078;
neighbor 164.58.199.216 {
description OKC-CORE6-IBGP-V4;
@@ -1057,7 +1320,7 @@
}
family route-target;
# authentication-#key <removed>;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ export IBGP-CORE-RR-V4-EXPORT;
peer-as 5078;
neighbor 164.58.199.226 {
description TUL-CORE6-IBGP-V4;
@@ -1070,7 +1333,7 @@
any;
}
# authentication-#key <removed>;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ export IBGP-CORE-RR-V6-EXPORT;
peer-as 5078;
neighbor 2610:1d8::164:58:199:216 {
description OKC-CORE6-IBGP-V6;
@@ -1083,7 +1346,7 @@
any;
}
# authentication-#key <removed>;
- export [ REDISTRIBUTE-DIRECTS REDISTRIBUTE-STATICS ];
+ export IBGP-CORE-RR-V6-EXPORT;
peer-as 5078;
neighbor 2610:1d8::164:58:199:226 {
description TUL-CORE6-IBGP-V6;
@@ -1282,7 +1545,7 @@
ignore-mtu-mismatch;
}
}
- neighbor 164.58.199.225 {
+ neighbor 164.58.199.224 {
interface xe-0/0/1.402 {
virtual-circuit-id 402;
description "SKYS-NID-TESTING [NO-MONITOR]";
@@ -1461,6 +1724,158 @@
then reject;
}
}
+ policy-statement IBGP-CORE-RR-V4-EXPORT {
+ term UPSTREAM-AGGREGATES {
+ from {
+ protocol aggregate;
+ tag 5000;
+ }
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ community add ONENET_ADV_UPSTREAM;
+ next-hop self;
+ accept;
+ }
+ }
+ term INTERAL-ONLY-AGGREGATES {
+ from protocol aggregate;
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ next-hop self;
+ accept;
+ }
+ }
+ term UPSTREAM-STATICS {
+ from {
+ protocol static;
+ tag 5000;
+ }
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ community add ONENET_ADV_UPSTREAM;
+ next-hop self;
+ accept;
+ }
+ }
+ term INTERNAL-ONLY-STATICS {
+ from protocol static;
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ next-hop self;
+ accept;
+ }
+ }
+ term INTERNAL-ONLY-DIRECTS {
+ from protocol direct;
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ next-hop self;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ term BLACKHOLE-BGP {
+ from {
+ protocol bgp;
+ community ONENET_BLACKHOLE;
+ }
+ then {
+ community add ONENET_LO0;
+ accept;
+ }
+ }
+ term REDISTRIBUTE-BGP {
+ from protocol bgp;
+ then {
+ community add ONENET_LO0;
+ next-hop self;
+ accept;
+ }
+ }
+ }
+ policy-statement IBGP-CORE-RR-V6-EXPORT {
+ term UPSTREAM-AGGREGATES {
+ from {
+ protocol aggregate;
+ tag 5000;
+ }
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ community add ONENET_ADV_UPSTREAM;
+ next-hop self;
+ accept;
+ }
+ }
+ term INTERAL-ONLY-AGGREGATES {
+ from protocol aggregate;
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ next-hop self;
+ accept;
+ }
+ }
+ term UPSTREAM-STATICS {
+ from {
+ protocol static;
+ tag 5000;
+ }
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ community add ONENET_ADV_UPSTREAM;
+ next-hop self;
+ accept;
+ }
+ }
+ term INTERNAL-ONLY-STATICS {
+ from protocol static;
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ next-hop self;
+ accept;
+ }
+ }
+ term INTERNAL-ONLY-DIRECTS {
+ from protocol direct;
+ then {
+ local-preference 200;
+ community add ONENET_LO0;
+ next-hop self;
+ external {
+ type 1;
+ }
+ accept;
+ }
+ }
+ term BLACKHOLE-BGP {
+ from {
+ protocol bgp;
+ community ONENET_BLACKHOLE;
+ }
+ then {
+ community add ONENET_LO0;
+ accept;
+ }
+ }
+ term REDISTRIBUTE-BGP {
+ from protocol bgp;
+ then {
+ community add ONENET_LO0;
+ next-hop self;
+ accept;
+ }
+ }
+ }
policy-statement INTERNET-VRF-EXPORT {
term EXPORT-STATIC {
from protocol static;
@@ -1506,6 +1921,48 @@
then reject;
}
}
+ policy-statement OESC-DATA-VRF-EXPORT {
+ term 1 {
+ from protocol static;
+ then {
+ community add OESC-DATA-VPN;
+ accept;
+ }
+ }
+ term 2 {
+ from protocol direct;
+ then {
+ community add OESC-DATA-VPN;
+ accept;
+ }
+ }
+ term 3 {
+ from protocol ospf;
+ then {
+ community add OESC-DATA-VPN;
+ accept;
+ }
+ }
+ term 4 {
+ from protocol bgp;
+ then {
+ community add OESC-DATA-VPN;
+ accept;
+ }
+ }
+ }
+ policy-statement OESC-DATA-VRF-IMPORT {
+ term 1 {
+ from {
+ protocol bgp;
+ community OESC-DATA-VPN;
+ }
+ then accept;
+ }
+ term 2 {
+ then reject;
+ }
+ }
policy-statement ONENET-MGMT-VRF-EXPORT {
term 1 {
from protocol static;
@@ -1582,7 +2039,11 @@
community DPS-VPN members target:5078:2540;
community FAYE members 5078:9069;
community INTERNET members target:5078:1000;
+ community OESC-DATA-VPN members target:5078:2645;
community ONENET-MGMT-VPN members target:5078:2543;
+ community ONENET_ADV_UPSTREAM members 5078:5000;
+ community ONENET_BLACKHOLE members 5078:911;
+ community ONENET_LO0 members 5078:9069;
}
class-of-service {
classifiers {
@@ -1861,6 +2322,17 @@
}
}
}
+ family mpls {
+ filter MPLS-SAMPLE {
+ term DEFAULT {
+ then {
+ count mpls-in;
+ sample;
+ accept;
+ }
+ }
+ }
+ }
family vpls {
filter 10M-FLOOD-FILTER {
term BROADCAST-TRAFFIC {
@@ -1898,6 +2370,13 @@
}
then discard;
}
+ policer 2M-POL {
+ if-exceeding {
+ bandwidth-limit 2m;
+ burst-size-limit 400k;
+ }
+ then discard;
+ }
}
routing-instances {
ANDREW-VPLS-2590 {
@@ -1928,6 +2407,27 @@
}
}
}
+ CANADIAN-VALLEY-VPLS {
+ description "CANADIAN VVALLEY VPLS";
+ instance-type vpls;
+ vlan-id all;
+ interface ge-1/0/0.253;
+ route-distinguisher 164.58.199.69:2523;
+ vrf-target target:5078:2523;
+ protocols {
+ vpls {
+ mac-table-size {
+ 10000;
+ packet-action drop;
+ }
+ no-tunnel-services;
+ site FAYE {
+ site-identifier 9069;
+ interface ge-1/0/0.253;
+ }
+ }
+ }
+ }
COMANCHE-PS-L3VPN {
description COMANCHE-PS-L3VPN;
instance-type vrf;
@@ -1959,8 +2459,16 @@
vrf-table-label;
routing-options {
interface-routes {
- rib-group inet INTERNET-INET0-V4;
+ rib-group {
+ inet INTERNET-INET0-V4;
+ inet6 INTERNET-INET0-V6;
+ }
}
+ rib INTERNET-L3VPN.inet6.0 {
+ static {
+ rib-group INTERNET-INET0-V6;
+ }
+ }
static {
rib-group INTERNET-INET0-V4;
}
@@ -1973,7 +2481,6 @@
interface ge-1/0/0.2518;
interface ge-1/1/2.2518;
interface ge-1/1/9.2518;
- routing-interface irb.2518;
route-distinguisher 164.58.199.69:2518;
vrf-target target:5078:2518;
protocols {
@@ -1992,20 +2499,31 @@
interface ge-1/1/9.2518;
interface ge-1/1/2.2518;
}
- connectivity-type irb;
}
}
}
+ OESC-DATA-L3VPN {
+ description OESC-DATA-L3VPN;
+ instance-type vrf;
+ interface ge-1/0/0.999;
+ route-distinguisher 164.58.199.69:2645;
+ vrf-import OESC-DATA-VRF-IMPORT;
+ vrf-export OESC-DATA-VRF-EXPORT;
+ vrf-target target:5078:2645;
+ vrf-table-label;
+ }
ONENET-MGMT-L3VPN {
description ONENET-MGMT-L3VPN;
instance-type vrf;
interface ge-1/0/0.80;
+ interface ge-1/0/0.503;
interface ge-1/0/0.550;
interface ge-1/0/1.3800;
interface ge-1/1/2.80;
- interface ge-1/1/8.80;
+ interface ge-1/1/3.600;
+ interface ge-1/1/7.80;
+ interface ge-1/1/8.0;
interface ge-1/1/9.80;
- interface ge-1/1/9.81;
route-distinguisher 164.58.199.69:2543;
vrf-import ONENET-MGMT-VRF-IMPORT;
vrf-export ONENET-MGMT-VRF-EXPORT;
More information about the Nocrancid
mailing list