[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Sun Oct 1 22:04:38 CDT 2017
Index: configs/core8.tul.onenet.net
===================================================================
--- configs/core8.tul.onenet.net (revision 156916)
+++ configs/core8.tul.onenet.net (working copy)
@@ -385,7 +385,8 @@
# grnoc-mon at TULSA-CORE8-MX480-RE0> file list /var/tmp detail
#
# /var/tmp:
-# total blocks: 2282304
+# total blocks: 2282312
+# -rw-r--r-- 1 eng field 4069 Oct 1 21:53 andrewbgp.100117.cfg
# -rw-rw---- 1 eng field 52383711 Aug 13 2015 core8.tul.varlog.081315.tgz
# -rw-rw---- 1 eng field 52427010 Aug 18 2015 core8.tul.varlog.081815.tgz
# -rw-rw---- 1 eng field 259253373 Sep 15 2015 core8_tul_varlog_20150915.tar.gz.tgz
@@ -418,7 +419,7 @@
# -rw-r--r-- 1 root wheel 45728 Jul 20 2015 ttrace_fpc1_LU_0_2_06.0
# -rw-r--r-- 1 root wheel 48608 Jul 20 2015 ttrace_fpc1_LU_0_2_07.0
# drwxrwxrwt 2 root wheel 512 Nov 25 2014 vi.recover/
-# total files: 26
+# total files: 27
#
# {master}
# grnoc-mon at TULSA-CORE8-MX480-RE0> show system uptime
Index: configs/core4.okc.onenet.net
===================================================================
--- configs/core4.okc.onenet.net (revision 156992)
+++ configs/core4.okc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE4-MX480-RE0> show system commit
+# 2017-10-01 21:21:25 CDT by andrew via cli commit synchronize
# 2017-09-29 17:45:52 CDT by sky via cli commit synchronize
# 2017-09-28 19:55:45 CDT by andrew via cli commit synchronize
# 2017-09-28 17:42:56 CDT by andrew via cli commit synchronize
# 2017-09-28 17:33:46 CDT by andrew via cli commit synchronize
# 2017-09-28 11:40:26 CDT by sean via cli commit synchronize
-# 2017-09-27 22:29:59 CDT by andrew via cli commit synchronize
# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -557,7 +557,7 @@
# grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime
# System booted: 2016-10-12 18:12 CDT
# Protocols started: 2016-10-12 18:14 CDT
-# Last configured: 2017-09-29 17:45 CDT by sky
+# Last configured: 2017-10-01 21:21 CDT by andrew
#
# {master}
# grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse
@@ -1528,7 +1528,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE4-MX480-RE0> show configuration
-## Last commit: 2017-09-29 17:45:52 CDT by sky
+## Last commit: 2017-10-01 21:21:25 CDT by andrew
version 13.3R9.13;
groups {
re0 {
@@ -9932,7 +9932,6 @@
}
}
group EBGP-COX-AS22773 {
- import EBGP-COX-IMPORT;
family inet {
unicast {
prefix-limit {
@@ -9941,9 +9940,10 @@
}
}
}
- export EBGP-COX-EXPORT;
neighbor 24.249.238.129 {
description EBGP-PEER-COX-OKC-1G-CIR0006045;
+ import EBGP-COX-V4-IMPORT;
+ export EBGP-COX-V4-EXPORT;
remove-private;
peer-as 22773;
}
@@ -11556,12 +11556,52 @@
then reject;
}
}
- policy-statement EBGP-COX-EXPORT {
- term STEP-0 {
+ policy-statement EBGP-COX-V4-EXPORT {
+ term REJECT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then reject;
+ }
+ term REJECT-BOGONS {
+ from {
+ prefix-list-filter BOGONS-V4-PREFIXES orlonger;
+ }
+ then reject;
+ }
+ term REJECT-25-ORLONGER {
+ from {
+ route-filter 0.0.0.0/0 prefix-length-range /25-/32;
+ }
+ then reject;
+ }
+ term REJECT-NO-ADVERTISE-COMMUNITY {
+ from community ONENET_E_NO_ADVERTISE;
+ then reject;
+ }
+ term REJECT-NO-COMMODITY-COMMUNITY {
+ from community ONENET_E_NO_COMMODITY;
+ then reject;
+ }
+ term SEND-UPSTREAM-COMMUNITY {
from community ONENET_ADV_UPSTREAM;
then accept;
}
- term STEP-1 {
+ term SEND-LOCAL-AGGREGATES {
+ from {
+ protocol aggregate;
+ tag 5000;
+ }
+ then accept;
+ }
+ term SEND-LOCAL-STATICS {
+ from {
+ protocol static;
+ tag 5000;
+ }
+ then accept;
+ }
+ term EXPORT-INTERNAL {
from policy COMMODITY-PREFIXES-LIST;
then accept;
}
@@ -11569,18 +11609,45 @@
then reject;
}
}
- policy-statement EBGP-COX-IMPORT {
- term REJECT-NO-EXPORT {
+ policy-statement EBGP-COX-V4-IMPORT {
+ term REJECT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then reject;
+ }
+ term REJECT-BOGONS {
+ from {
+ prefix-list-filter BOGONS-V4-PREFIXES orlonger;
+ }
+ then reject;
+ }
+ term REJECT-25-ORLONGER {
+ from {
+ route-filter 0.0.0.0/0 prefix-length-range /25-/32;
+ }
+ then reject;
+ }
+ term COX-SHOULDNT-EXPORT {
from community no-export;
then reject;
}
- term REJECTED-AS-PATHS {
- from as-path-group REJECTED-COX-AS-PATHS;
+ term COX-REJECTED-AS-PATHS {
+ from as-path-group COX-REJECTED-AS-PATHS;
then reject;
}
- term STEP-1 {
+ term DELETE-PROHIBITED-COMMUNITIES {
then {
- community add 5078:22773;
+ community delete NON_ONENET;
+ community delete ONENET_ENGINEERING;
+ next term;
+ }
+ }
+ term ACCEPT-ROUTES {
+ then {
+ local-preference 130;
+ community add ONENET_SRC_COMMODITY;
+ next-hop peer-address;
accept;
}
}
@@ -14886,7 +14953,7 @@
as-path 21357 21357;
as-path 209 209;
as-path 65535 65535;
- as-path-group REJECTED-COX-AS-PATHS {
+ as-path-group COX-REJECTED-AS-PATHS {
as-path LEVEL3 "22773+ 3356+ .*";
as-path NTT "22773+ 2914+ .*";
as-path INSIC2 "22773+ 4321+ .*";
Index: configs/core2.tul-mx960.onenet.net
===================================================================
--- configs/core2.tul-mx960.onenet.net (revision 156915)
+++ configs/core2.tul-mx960.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE2-MX960-RE0> show system commit
+# 2017-10-01 21:48:12 CDT by andrew via cli commit synchronize
+# 2017-10-01 21:45:34 CDT by andrew via cli commit synchronize
# 2017-09-26 18:34:26 CDT by andrew via cli commit synchronize
# 2017-09-25 23:08:05 CDT by andrew via cli commit synchronize
# 2017-09-24 14:02:40 CDT by andrew via cli commit synchronize
# 2017-09-23 15:01:28 CDT by andrew via cli commit synchronize
-# 2017-09-22 23:04:48 CDT by andrew via cli commit synchronize
-# 2017-09-22 23:03:21 CDT by andrew via cli commit synchronize
# grnoc-mon at TULSA-CORE2-MX960-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -592,7 +592,7 @@
# grnoc-mon at TULSA-CORE2-MX960-RE0> show system uptime
# System booted: 2016-03-20 01:35 CDT
# Protocols started: 2016-03-20 01:37 CDT
-# Last configured: 2017-09-26 18:34 CDT by andrew
+# Last configured: 2017-10-01 21:48 CDT by andrew
#
# {master}
# grnoc-mon at TULSA-CORE2-MX960-RE0> show interface terse
@@ -790,7 +790,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE2-MX960-RE0> show configuration
-## Last commit: 2017-09-26 18:34:26 CDT by andrew
+## Last commit: 2017-10-01 21:48:12 CDT by andrew
version 13.3R8.7;
groups {
re0 {
@@ -1920,6 +1920,7 @@
}
group EBGP-NETFLIX-AS2906 {
type external;
+ import EBGP-NETFLIX-IMPORT;
family inet {
any;
}
@@ -2593,10 +2594,9 @@
then reject;
}
term APPLE {
- from {
- route-filter 17.0.0.0/8 orlonger;
- }
+ from as-path-group AREON-COMMODITY-ROUTES;
then {
+ local-preference 139;
community set 5078:40581;
accept;
}
@@ -2625,7 +2625,7 @@
policy-statement EBGP-AREON-IMPORT {
term STEP-1 {
then {
- local-preference 104;
+ local-preference 140;
accept;
}
}
@@ -2756,6 +2756,14 @@
then reject;
}
}
+ policy-statement EBGP-NETFLIX-IMPORT {
+ term ACCEPT-ROUTES {
+ then {
+ local-preference 140;
+ accept;
+ }
+ }
+ }
policy-statement EBGP-REJECT-EXPORT {
term STEP-1 {
from {
@@ -2959,6 +2967,9 @@
community ONENET_BLACKHOLE members 5078:911;
community ONENET_LO0 members 5078:9222;
community TULSACORE2 members 5078:222;
+ as-path-group AREON-COMMODITY-ROUTES {
+ as-path APPLE "40581+ 714+ .*";
+ }
}
class-of-service {
classifiers {
Index: configs/mhsso-norman.client.onenet.net
===================================================================
--- configs/mhsso-norman.client.onenet.net (revision 156978)
+++ configs/mhsso-norman.client.onenet.net (working copy)
@@ -145,8 +145,8 @@
#sp-0/0/0 up up
#sp-0/0/0.0 up up
#sp-0/0/0.16383 up up
-#ge-0/0/1 up up
-#ge-0/0/1.0 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
#ge-0/0/2 up down
#ge-0/0/2.0 up down
#ge-0/0/3 up down
@@ -189,7 +189,7 @@
#st0 up up
#tap up up
#vlan up up
-#vlan.100 up up
+#vlan.100 up down
# grnoc-mon at MHSSO-NORMAN-MR-CLIENT-OWNED> show configuration
## Last commit: 2017-09-12 13:34:32 CDT by root
version 12.3X48-D40.5;
Index: configs/core5.tul.onenet.net
===================================================================
--- configs/core5.tul.onenet.net (revision 156941)
+++ configs/core5.tul.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE5-MX480-RE0> show system commit
+# 2017-10-01 21:21:20 CDT by andrew via cli commit synchronize
# 2017-09-27 21:59:21 CDT by andrew via cli commit synchronize
# 2017-09-27 20:28:53 CDT by andrew via cli commit synchronize
# 2017-09-26 21:42:27 CDT by andrew via cli commit synchronize
# 2017-09-26 21:41:43 CDT by andrew via cli commit synchronize
# 2017-09-25 23:09:59 CDT by andrew via cli commit synchronize
-# 2017-09-25 19:46:15 CDT by andrew via cli commit synchronize
# grnoc-mon at TULSA-CORE5-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -502,7 +502,7 @@
# grnoc-mon at TULSA-CORE5-MX480-RE0> show system uptime
# System booted: 2016-08-15 04:47 CDT
# Protocols started: 2016-08-15 04:53 CDT
-# Last configured: 2017-09-27 21:59 CDT by andrew
+# Last configured: 2017-10-01 21:21 CDT by andrew
#
# {master}
# grnoc-mon at TULSA-CORE5-MX480-RE0> show interface terse
@@ -991,7 +991,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE5-MX480-RE0> show configuration
-## Last commit: 2017-09-27 21:59:21 CDT by andrew
+## Last commit: 2017-10-01 21:21:20 CDT by andrew
version 13.3R9.13;
groups {
re0 {
@@ -6668,7 +6668,6 @@
}
}
group EBGP-COX-AS22773 {
- import EBGP-COX-IMPORT;
family inet {
unicast {
prefix-limit {
@@ -6677,9 +6676,10 @@
}
}
}
- export EBGP-COX-EXPORT;
neighbor 72.194.133.121 {
description EBGP-PEER-COX-TULSA-1G-CIR0006046;
+ import EBGP-COX-V4-IMPORT;
+ export EBGP-COX-V4-EXPORT;
remove-private;
peer-as 22773;
}
@@ -7526,12 +7526,52 @@
then reject;
}
}
- policy-statement EBGP-COX-EXPORT {
- term STEP-0 {
+ policy-statement EBGP-COX-V4-EXPORT {
+ term REJECT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then reject;
+ }
+ term REJECT-BOGONS {
+ from {
+ prefix-list-filter BOGONS-V4-PREFIXES orlonger;
+ }
+ then reject;
+ }
+ term REJECT-25-ORLONGER {
+ from {
+ route-filter 0.0.0.0/0 prefix-length-range /25-/32;
+ }
+ then reject;
+ }
+ term REJECT-NO-ADVERTISE-COMMUNITY {
+ from community ONENET_E_NO_ADVERTISE;
+ then reject;
+ }
+ term REJECT-NO-COMMODITY-COMMUNITY {
+ from community ONENET_E_NO_COMMODITY;
+ then reject;
+ }
+ term SEND-UPSTREAM-COMMUNITY {
from community ONENET_ADV_UPSTREAM;
then accept;
}
- term STEP-1 {
+ term SEND-LOCAL-AGGREGATES {
+ from {
+ protocol aggregate;
+ tag 5000;
+ }
+ then accept;
+ }
+ term SEND-LOCAL-STATICS {
+ from {
+ protocol static;
+ tag 5000;
+ }
+ then accept;
+ }
+ term EXPORT-INTERNAL {
from policy COMMODITY-PREFIXES-LIST;
then accept;
}
@@ -7539,10 +7579,45 @@
then reject;
}
}
- policy-statement EBGP-COX-IMPORT {
- term STEP-1 {
+ policy-statement EBGP-COX-V4-IMPORT {
+ term REJECT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then reject;
+ }
+ term REJECT-BOGONS {
+ from {
+ prefix-list-filter BOGONS-V4-PREFIXES orlonger;
+ }
+ then reject;
+ }
+ term REJECT-25-ORLONGER {
+ from {
+ route-filter 0.0.0.0/0 prefix-length-range /25-/32;
+ }
+ then reject;
+ }
+ term COX-SHOULDNT-EXPORT {
+ from community no-export;
+ then reject;
+ }
+ term COX-REJECTED-AS-PATHS {
+ from as-path-group COX-REJECTED-AS-PATHS;
+ then reject;
+ }
+ term DELETE-PROHIBITED-COMMUNITIES {
then {
- community add 5078:22773;
+ community delete NON_ONENET;
+ community delete ONENET_ENGINEERING;
+ next term;
+ }
+ }
+ term ACCEPT-ROUTES {
+ then {
+ local-preference 130;
+ community add ONENET_SRC_COMMODITY;
+ next-hop peer-address;
accept;
}
}
@@ -8889,6 +8964,16 @@
community TAGNET-VPN members target:5078:2531;
community TULSACORE5 members 5078:225;
community no-advertise members 5078:no-advertise;
+ community no-export members no-export;
+ as-path-group COX-REJECTED-AS-PATHS {
+ as-path LEVEL3 "22773+ 3356+ .*";
+ as-path NTT "22773+ 2914+ .*";
+ as-path INSIC2 "22773+ 4321+ .*";
+ as-path HURRICANE-ELECTRIC "22773+ 6939+ .*";
+ as-path ZAYO "22773+ 6461+ .*";
+ as-path COMCAST "22773+ 7922+ .*";
+ as-path SUDDENLINK "22773+ 19108+ .*";
+ }
}
class-of-service {
classifiers {
Index: configs/opt.okc.onenet.net
===================================================================
--- configs/opt.okc.onenet.net (revision 157042)
+++ configs/opt.okc.onenet.net (working copy)
@@ -196,6 +196,7 @@
<interface name="VFAC-2-17-3-1" abbr_name="VFAC-2-17-3-1" admin_state="up" spanning_tree_metric="" description="" type="VFAC" monitoring_state="monitor"></interface>
<interface name="VFAC-2-17-4-1" abbr_name="VFAC-2-17-4-1" admin_state="up" spanning_tree_metric="" description="" type="VFAC" monitoring_state="monitor"></interface>
</part>
+ <part name="AIP-2" description="AIP" hw_version="B1" part_id="AIP" part_num="73-7665-05" serial_number="SPE1550011D" slot="AIP-2" vendor_id="Cisco"></part>
<part name="FAN-2-1" description="FTA" hw_version="C0" part_id="FTA" part_num="800-27558-02" serial_number="SMG1604F024" slot="FAN-2-1" vendor_id="Cisco"></part>
</part>
<part name="BP-3" description="15454-SA-ANSI" hw_version="A0" part_id="15454-SA-ANSI" part_num="800-19857-05" serial_number="SMA07500713" slot="BP-3" vendor_id="Cisco">
More information about the Nocrancid
mailing list