[Nocrancid] autopop-onenet.net router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Tue Oct 10 10:04:36 CDT 2017
Index: router.db
===================================================================
--- router.db (revision 157471)
+++ router.db (working copy)
@@ -766,6 +766,7 @@
terral-ps.client.onenet.net:juniper:up
TRI-COUNTY-INTERLOCAL.client.onenet.net:juniper:up
tul-adva.p.onenet.net:fsp3000:up
+tulsa-city-county-library.client.onenet.net:juniper:up
tulsa-city-county-library.nid.onenet.net:fsp150:up
tushka-ps.client.onenet.net:juniper:up
tuskahoma-ps.client.onenet.net:juniper:up
Index: routers.up
===================================================================
--- routers.up (revision 157434)
+++ routers.up (working copy)
@@ -618,6 +618,7 @@
terral-ps.client.onenet.net:juniper
tri-county-interlocal.client.onenet.net:juniper
tul-adva.p.onenet.net:fsp3000
+tulsa-city-county-library.client.onenet.net:juniper
tulsa-city-county-library.nid.onenet.net:fsp150
tushka-ps.client.onenet.net:juniper
tuskahoma-ps.client.onenet.net:juniper
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net (revision 157453)
+++ configs/core3.okc-m120.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE3-M120-RE0> show system commit
+# 2017-10-10 09:20:56 CDT by sean via cli commit synchronize
# 2017-10-09 10:31:29 CDT by sean via cli commit synchronize
# 2017-10-05 12:23:16 CDT by sean via cli commit synchronize
# 2017-10-05 11:09:54 CDT by aberrios via cli commit synchronize
# 2017-10-04 10:39:12 CDT by andrew via cli commit synchronize
# 2017-10-04 10:30:10 CDT by andrew via cli commit synchronize
-# 2017-10-03 13:49:05 CDT by joel via cli commit synchronize
# grnoc-mon at OKC-CORE3-M120-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -480,7 +480,7 @@
# grnoc-mon at OKC-CORE3-M120-RE0> show system uptime
# System booted: 2016-10-12 08:15 CDT
# Protocols started: 2016-10-12 08:19 CDT
-# Last configured: 2017-10-09 10:31 CDT by sean
+# Last configured: 2017-10-10 09:20 CDT by sean
#
# {master}
# grnoc-mon at OKC-CORE3-M120-RE0> show interface terse
@@ -1681,7 +1681,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE3-M120-RE0> show configuration
-## Last commit: 2017-10-09 10:31:29 CDT by sean
+## Last commit: 2017-10-10 09:20:56 CDT by sean
version 13.3R9.13;
groups {
re0 {
@@ -3521,7 +3521,7 @@
partition 1-28 interface-type t1;
}
t1-2/3/0:8:1 {
- description TAGNET-4015-ARKOMA-T1-CIR0002762;
+ description "TAGNET-4015-ARKOMA-T1-CIR0002762 [NO-MONITOR]";
encapsulation cisco-hdlc;
unit 0 {
family inet {
Index: configs/core4.tul.onenet.net
===================================================================
--- configs/core4.tul.onenet.net (revision 157266)
+++ configs/core4.tul.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE4-MX480-RE0> show system commit
+# 2017-10-10 09:54:07 CDT by andrew via cli commit synchronize
# 2017-10-06 16:10:19 CDT by aberrios via cli commit synchronize
# 2017-10-06 11:38:11 CDT by aberrios via cli commit synchronize
# 2017-10-04 16:24:09 CDT by andrew via cli commit synchronize
# 2017-10-03 18:16:07 CDT by andrew via cli commit synchronize
# 2017-10-03 14:48:21 CDT by andrew via cli commit synchronize
-# 2017-09-27 20:24:35 CDT by andrew via cli commit synchronize
# grnoc-mon at TULSA-CORE4-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -507,7 +507,7 @@
# grnoc-mon at TULSA-CORE4-MX480-RE0> show system uptime
# System booted: 2016-08-15 04:31 CDT
# Protocols started: 2016-08-15 04:34 CDT
-# Last configured: 2017-10-06 16:10 CDT by aberrios
+# Last configured: 2017-10-10 09:54 CDT by andrew
#
# {master}
# grnoc-mon at TULSA-CORE4-MX480-RE0> show interface terse
@@ -866,7 +866,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-CORE4-MX480-RE0> show configuration
-## Last commit: 2017-10-06 16:10:19 CDT by aberrios
+## Last commit: 2017-10-10 09:54:07 CDT by andrew
version 13.3R9.13;
groups {
re0 {
@@ -1600,8 +1600,8 @@
family inet {
mtu 1500;
policer {
- input 2M-POL;
- output 2M-POL;
+ input 5M-POL;
+ output 5M-POL;
}
sampling {
input;
Index: configs/tulsa-city-county-library.nid.onenet.net
===================================================================
--- configs/tulsa-city-county-library.nid.onenet.net (revision 157239)
+++ configs/tulsa-city-county-library.nid.onenet.net (working copy)
@@ -36,7 +36,7 @@
telnet disabled
scp enabled
sftp enabled
- security-banner "This is a private system. Unauthorized access or use may lead to prosecution."
+ security-banner "WARNING: UNAUTHORIZED USE IS STRICTLY PROHIBITED\\n\\nTo protect the system from unauthorized use,\\nactivities on this system are monitored,recorded and subject to audit.\\nUse of this system is expressed consent to such monitoring and recording.\\nAny unauthorized access or use of this system is prohibited and\\nis subject to criminal and civil penalties and/or administrative action."
security-prompt disabled
ssh enabled
snmp-engine-id "800009f0030080ea7a39b0"
@@ -507,6 +507,7 @@
home
network-element ne-1
prompt "NE-1"
+ name "Tulsa-City-County-Library-GE112Pro"
contact ""
location ""
pm-interval 15min
@@ -829,7 +830,7 @@
jdsu-lpbk-control disabled
swap-sada none
back
- alias ""
+ alias "TULSA-CITY-COUNTY-LIBRARY-1G-CIR0019955"
auto-diagnostic enabled
mtu 9600
afp all-afp
@@ -1885,10 +1886,12 @@
back
configure mgmttnl mgmt_tnl-1
rip2Pkts-control disabled
+ dhcp-client-id-control enabled
dhcp-class-id-control enabled
dhcp-host-name-control enabled
dhcp-log-server-control disabled
dhcp-ntp-server-control disabled
+ dhcp-client-id-type mac-addr
dhcp-host-name-type system-name
#
#CLI:IP SYSTEM Edit
@@ -1898,6 +1901,7 @@
configure eth0 ip-mode ipv4-only
configure eth0 dhcp-control disabled 192.168.0.2 255.255.255.0
configure eth0 dhcp-role dhcp-client
+ configure eth0 dhcp-client-id-type mac-addr
configure eth0 dhcp-class-id-control enabled
configure eth0 dhcp-host-name-control enabled
configure eth0 dhcp-host-name-type system-name
@@ -1905,27 +1909,6 @@
configure eth0 dhcp-ntp-server-control disabled
configure eth0 rip2Pkts-control disabled
#
-#CLI:NE-1 Edit
-#
-home
-network-element ne-1
- name "FSP 150-GE112Pro"
-#
-#CLI:MANAGEMENT TUNNEL-1 Edit
-#
-home
-configure communication
- configure mgmttnl mgmt_tnl-1
- dhcp-client-id-type mac-addr
- dhcp-client-id-control enabled
-#
-#CLI:IP SYSTEM Edit
-#
-home
-configure communication
- configure eth0 dhcp-client-id-type mac-addr
- configure eth0 dhcp-client-id-control enabled
-#
#CLI:IP SOURCE ADDR CONFIG Edit
#
home
Index: configs/core4.okc.onenet.net
===================================================================
--- configs/core4.okc.onenet.net (revision 157468)
+++ configs/core4.okc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at OKC-CORE4-MX480-RE0> show system commit
+# 2017-10-10 09:42:27 CDT by andrew via cli commit synchronize
# 2017-10-09 16:15:20 CDT by aberrios via cli commit synchronize
# 2017-10-09 15:09:20 CDT by andrew via cli commit synchronize
# 2017-10-09 13:46:32 CDT by sean via cli commit synchronize
# 2017-10-09 13:34:07 CDT by sean via cli commit synchronize
# 2017-10-09 13:08:15 CDT by sean via cli commit synchronize
-# 2017-10-09 12:44:30 CDT by andrew via cli commit synchronize
# grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -557,7 +557,7 @@
# grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime
# System booted: 2016-10-12 18:12 CDT
# Protocols started: 2016-10-12 18:14 CDT
-# Last configured: 2017-10-09 16:15 CDT by aberrios
+# Last configured: 2017-10-10 09:42 CDT by andrew
#
# {master}
# grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse
@@ -1532,7 +1532,7 @@
#pp0 up up
#tap up up
# grnoc-mon at OKC-CORE4-MX480-RE0> show configuration
-## Last commit: 2017-10-09 16:15:20 CDT by aberrios
+## Last commit: 2017-10-10 09:42:27 CDT by andrew
version 13.3R9.13;
groups {
re0 {
@@ -16993,7 +16993,7 @@
route 172.23.86.192/26 next-hop 10.119.76.51;
route 172.23.132.128/25 next-hop 10.119.76.235;
route 172.23.105.192/26 next-hop 10.119.76.47;
- route 10.119.76.164/31 next-hop 10.119.77.7;
+ route 10.119.76.44/31 next-hop 10.119.77.7;
}
}
protocols {
@@ -17768,6 +17768,7 @@
route 172.30.101.204/31 next-hop 10.119.40.25;
route 172.30.101.206/31 next-hop 10.119.40.25;
route 172.30.101.62/31 next-hop 10.119.72.213;
+ route 10.119.78.44/31 next-hop 10.119.79.7;
}
}
protocols {
@@ -17902,7 +17903,7 @@
route 172.21.127.0/24 next-hop 10.119.32.33;
route 172.21.146.64/26 next-hop 10.119.32.103;
route 172.21.188.32/27 next-hop 10.119.99.7;
- route 172.23.2.100/30 next-hop 10.119.99.7;
+ route 10.119.98.44/31 next-hop 10.119.99.7;
}
autonomous-system 64569 loops 3;
}
Index: configs/core.hut.elr.onenet.net
===================================================================
--- configs/core.hut.elr.onenet.net (revision 157471)
+++ configs/core.hut.elr.onenet.net (working copy)
@@ -26,6 +26,16 @@
# TFEB 0 TBB PFE Chip OK
# TFEB 0 TFEB PCIE TSen OK
# TFEB 0 TFEB PCIE Chip OK
+# TFEB 0 QX 0 TSen OK
+# TFEB 0 QX 0 Chip OK
+# TFEB 0 LU 0 TSen OK
+# TFEB 0 LU 0 Chip OK
+# TFEB 0 MQ 0 TSen OK
+# TFEB 0 MQ 0 Chip OK
+# TFEB 0 TBB PFE TSen OK
+# TFEB 0 TBB PFE Chip OK
+# TFEB 0 TFEB PCIE TSen OK
+# TFEB 0 TFEB PCIE Chip OK
# Fans Fan 1 OK
# Fan 2 OK
# Fan 3 OK
Index: configs/hub.dur.onenet.net
===================================================================
--- configs/hub.dur.onenet.net (revision 157471)
+++ configs/hub.dur.onenet.net (working copy)
@@ -427,7 +427,7 @@
#fe-2/1/1 up up
#fe-2/1/1.0 up up
#fe-2/1/2 up down
-#fe-2/1/3 down up
+#fe-2/1/3 down down
#ge-2/2/0 up up
#ge-2/2/0.0 up up
#pc-2/2/0 up up
Index: configs/lavern-public-schools.client.onenet.net
===================================================================
--- configs/lavern-public-schools.client.onenet.net (revision 157465)
+++ configs/lavern-public-schools.client.onenet.net (working copy)
@@ -113,7 +113,7 @@
#
# grnoc-mon at LAVERN-PUBLIC-SCHOOLS-TAG-004351> show interface terse
#Interface Admin Link
-#ge-0/0/0 down up
+#ge-0/0/0 down down
#gr-0/0/0 up up
#ip-0/0/0 up up
#lsq-0/0/0 up up
Index: configs/tulsa-city-county-library.client.onenet.net
===================================================================
--- configs/tulsa-city-county-library.client.onenet.net (revision 157472)
+++ configs/tulsa-city-county-library.client.onenet.net (working copy)
@@ -0,0 +1,677 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show system commit
+# 2017-10-10 09:31:10 CDT by admin via cli
+# 2017-09-20 23:13:48 CDT by admin via cli commit confirmed, rollback in 3mins
+# 2017-09-01 11:03:50 CDT by admin via cli
+# 2017-09-01 11:03:27 CDT by admin via cli
+# 2017-09-01 06:43:23 CDT by admin via cli
+# 2017-08-31 17:53:48 CDT by admin via cli
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis environment
+# Class Item Status Measurement
+# Temp Routing Engine OK
+# Routing Engine CPU OK
+# Fans SRX340 Chassis fan 0 OK
+# SRX340 Chassis fan 1 OK
+# SRX340 Chassis fan 2 OK
+# SRX340 Chassis fan 3 OK
+# Power Power Supply 0 OK
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis firmware
+# Part Type Version
+# FPC 0 O/S Version 15.1X49-D90.7 by builder on 2017-04-29 06:10:41 UTC
+# FWDD O/S Version 15.1X49-D90.7 by builder on 2017-04-29 06:10:41 UTC
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis fpc detail
+# Slot 0 information:
+# State Online
+# Total CPU DRAM ---- CPU less FPC ----
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis hardware
+# Hardware inventory:
+# Item Version Part number Serial number Description
+# Chassis CY2017AF1266 SRX340
+# Routing Engine REV 0x08 650-065043 CY2017AF1266 RE-SRX340
+# FPC 0 FPC
+# PIC 0 8xGE,8xGE SFP Base PIC
+# Power Supply 0
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis hardware models
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis routing-engine
+# Routing Engine status:
+# Serial ID CY2017AF1266
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis scb
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis sfm detail
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show chassis ssb
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show system boot-messages
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Running in PARTITIONED TLB MODE
+# Copyright (c) 1996-2017, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2007 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# The Regents of the University of California. All rights reserved.
+# FreeBSD is a registered trademark of The FreeBSD Foundation.
+# can't re-use a leaf (debug)!
+# FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 4 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 70XX/71XX CPU Rev. 0.2 with no FPU implemented
+# L1 Cache: I size 78kb(128 line), D size 32kb(128 line), thirty two way.
+# L2 Cache: Size 512kb, 4 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# set clock 0x58
+# xhci0: <Cavium Octeon 7xxx xHCI Host Driver> on obio0
+# usb0: <USB bus for xHCI Controller> on xhci0
+# usb0: USB revision 3.0
+# uhub0: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# xhci1: <Cavium Octeon 7xxx xHCI Host Driver> on obio0
+# usb1: <USB bus for xHCI Controller> on xhci1
+# usb1: USB revision 3.0
+# uhub1: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1
+# uhub1: 2 ports with 2 removable, self powered
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCIe HOST bridge> on obio0
+# Disabling Octeon big bar support
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <network, ethernet> at device 0.0 (no driver attached)
+# pci0: <network, ethernet> at device 0.1 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <Macronix MX25L64 - 8MB> on obio0
+# cfi1: <Macronix MX25L64 - 8MB> on obio0
+# octagl0: <Octeon AGL> on obio0
+# umass0: ATP Electronics ATP CG eUSB, rev 2.00/11.00, addr 2
+# miibus0: <MII bus> on octagl0
+# brgphy0: <BCM54616S 10/100/1000baseTX PHY> on miibus0
+# brgphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
+# Timecounter "mips" frequency 1200000000 Hz quality 0
+# Registered AMT tunnel Encap with UDP Tunnel!
+# Loading Redundant LT driver
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# Kernel thread "wkupdaemon" (pid 48) exited prematurely.
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ATP ATP CG eUSB 1100> Fixed Direct Access SCSI-4 device
+# da0: 40.000MB/s transfers
+# da0: 7672MB (15712256 512 byte sectors: 255H 63S/T 978C)
+# Trying to mount root from ufs:/dev/da0s2a
+# WARNING: / was not properly dismounted
+# WARNING: / was not properly dismounted
+#
+# LPC bus driver
+# lpcbus0 on cpld0
+# tpm0: <Trusted Platform Module> on lpcbus0
+# tpm: IFX SLB 9660 TT 1.2 rev 0x10
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show version
+# Hostname: TULSA-CITY-COUNTY-LIBRARY-LR-005457
+# Model: srx340
+# Junos: 15.1X49-D90.7
+# JUNOS Software Release [15.1X49-D90.7]
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show version invoke-on all-routing-engines
+# Hostname: TULSA-CITY-COUNTY-LIBRARY-LR-005457
+# Model: srx340
+# Junos: 15.1X49-D90.7
+# JUNOS Software Release [15.1X49-D90.7]
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> file list /var/tmp detail
+# lrw-r--r-- 1 root wheel 11 Apr 29 02:34 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show system uptime
+# Time Source: LOCAL CLOCK
+# System booted: 2017-07-26 13:33 CDT
+# Protocols started: 2017-07-26 13:33 CDT
+# Last configured: 2017-10-10 09:31 CDT by admin
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show interface terse
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 up up
+#ge-0/0/1.0 up up
+#ge-0/0/2 down down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 up up
+#ge-0/0/6.0 up up
+#ge-0/0/7 up up
+#ge-0/0/7.0 up up
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 down down
+#ge-0/0/15 down down
+#fxp0 down down
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#jsrv up up
+#jsrv.1 up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up down
+#vtep up up
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show configuration
+## Last commit: 2017-10-10 09:31:10 CDT by admin
+version 15.1X49-D90.7;
+system {
+ host-name TULSA-CITY-COUNTY-LIBRARY-LR-005457;
+ auto-snapshot;
+ domain-name onenet.net;
+ time-zone America/Chicago;
+ authentication-order [ radius password ];
+ ports {
+ console log-out-on-disconnect;
+ }
+ root-authentication {
+# encrypted-password <removed>;
+ }
+ name-server {
+ 164.58.200.200;
+ 156.110.200.200;
+ }
+ radius-server {
+ 156.110.31.11 {
+# secret "<removed>"; ## SECRET-DATA
+ source-address 164.58.0.219;
+ }
+ }
+ radius-options {
+ attributes {
+ nas-ip-address 164.58.0.219;
+ }
+ }
+ login {
+ message "\n+----------------------------------------------------------------------------+\n| |\n| Managed by Oklahoma State Regents for Higher Education |\n| Oklahoma Network for Education Enrichment (ONENET) |\n| |\n| *** Unauthorized Use or Access Prohibited *** |\n| |\n| For more information, contact: |\n| |\n| Oklahoma State Regents for Higher Education |\n| Educational Telecommunications Network -- ONENET |\n| (888) 566-3638 |\n| !
info at onenet.net |\n| |\n+----------------------------------------------------------------------------+\n";
+ class admin {
+ idle-timeout 30;
+ permissions all;
+ }
+ class customer-admin {
+ idle-timeout 30;
+ permissions all;
+ deny-commands "load|shell";
+ deny-configuration "(system login)|(system root-authentication)";
+ }
+ class lockdown {
+ idle-timeout 2;
+ permissions view;
+ deny-commands .*;
+ deny-configuration .*;
+ }
+ class operator-local {
+ idle-timeout 15;
+ permissions [ access admin configure firewall interface network routing snmp system trace view ];
+ allow-commands "show log messages";
+ }
+ class robot {
+ idle-timeout 10;
+ permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+ }
+ user admin {
+ uid 1000;
+ class super-user;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user client {
+ uid 2000;
+ class customer-admin;
+ authentication {
+# encrypted-password <removed>;
+ }
+ }
+ user eng {
+ uid 2018;
+ class admin;
+ }
+ user rancid {
+ uid 2001;
+ class robot;
+ }
+ user remote {
+ uid 2002;
+ class operator-local;
+ }
+ user upgrades {
+ uid 2003;
+ class operator;
+ authentication {
+# ssh-rsa <removed>;
+ }
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ }
+ }
+ syslog {
+ archive size 10m files 5;
+ user * {
+ any emergency;
+ }
+ file messages {
+ any notice;
+ authorization info;
+ }
+ file interactive-commands {
+ interactive-commands any;
+ }
+ file PROTECT-RE {
+ firewall any;
+ archive no-world-readable;
+ }
+ file traffic {
+ any any;
+ match RT_FLOW_SESSION;
+ }
+ file updown {
+ any any;
+ match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+ }
+ }
+ max-configurations-on-flash 20;
+ max-configuration-rollbacks 20;
+ ntp {
+ server 164.58.3.98 prefer;
+ }
+}
+chassis {
+ config-button no-rescue no-clear;
+}
+security {
+ forwarding-options {
+ family {
+ inet6 {
+ mode packet-based;
+ }
+ mpls {
+ mode packet-based;
+ }
+ }
+ }
+ flow {
+ enhanced-routing-mode;
+ }
+}
+interfaces {
+ ge-0/0/0 {
+ description "L3 INTERFACE - ONENET-WAN - 164.58.0.219/31";
+ unit 0 {
+ family inet {
+ address 164.58.0.219/31;
+ }
+ }
+ }
+ ge-0/0/1 {
+ description "L3 INTERFACE - COX-WAN - 98.175.228.234/29";
+ unit 0 {
+ family inet {
+ address 98.175.228.234/29;
+ }
+ }
+ }
+ ge-0/0/2 {
+ disable;
+ }
+ ge-0/0/3 {
+ disable;
+ }
+ ge-0/0/4 {
+ disable;
+ }
+ ge-0/0/5 {
+ disable;
+ }
+ ge-0/0/6 {
+ description "L3 INTERFACE - JUNIPER-SRX550 - 198.207.222.1/30";
+ unit 0 {
+ family inet {
+ address 198.207.222.1/30;
+ }
+ }
+ }
+ ge-0/0/7 {
+ description "L3 INTERFACE - LIBRARY-LAN - 198.207.222.25/29";
+ unit 0 {
+ family inet {
+ address 198.207.222.25/29;
+ }
+ }
+ }
+ ge-0/0/8 {
+ disable;
+ }
+ ge-0/0/9 {
+ disable;
+ }
+ ge-0/0/10 {
+ disable;
+ }
+ ge-0/0/11 {
+ disable;
+ }
+ ge-0/0/12 {
+ disable;
+ }
+ ge-0/0/13 {
+ disable;
+ }
+ ge-0/0/14 {
+ disable;
+ }
+ ge-0/0/15 {
+ disable;
+ }
+ fxp0 {
+ disable;
+ }
+ protect: lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input PROTECT-RE;
+ }
+ }
+ }
+ }
+}
+snmp {
+ description OneNet-SRX300-Template-3.0.0;
+ contact "Net Group - (888)566-3638";
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-only;
+ }
+ community "<removed>" {
+ authorization read-write;
+ }
+}
+routing-options {
+ static {
+ route 198.207.222.4/30 next-hop 198.207.222.26;
+ route 198.207.222.8/29 next-hop 198.207.222.26;
+ route 198.207.222.16/29 next-hop 198.207.222.26;
+ route 198.207.222.32/27 next-hop 198.207.222.26;
+ route 198.207.222.64/26 next-hop 198.207.222.26;
+ route 198.207.222.128/25 next-hop 198.207.222.26;
+ }
+ aggregate {
+ route 198.207.222.0/24 {
+ as-path {
+ origin igp;
+ atomic-aggregate;
+ }
+ }
+ }
+ autonomous-system 17236;
+}
+protocols {
+ bgp {
+ group EBGP-COX-V4 {
+ type external;
+ neighbor 98.175.228.233 {
+ description "EBGP-COX-COMMUNICATIONS [CUSTOMER-MAINTAINS]";
+ import EBGP-COX-V4-IMPORT;
+ family inet {
+ unicast;
+ }
+ export EBGP-COX-V4-EXPORT;
+ remove-private {
+ all;
+ }
+ peer-as 22773;
+ }
+ }
+ group EBGP-ONENET-V4 {
+ type external;
+ neighbor 164.58.0.218 {
+ description "EBGP-ONENET [ORDERED]";
+ import EBGP-ONENET-V4-IMPORT;
+ family inet {
+ unicast;
+ }
+# authentication-#key <removed>;
+ export EBGP-ONENET-V4-EXPORT;
+ remove-private {
+ all;
+ }
+ peer-as 5078;
+ }
+ }
+ }
+}
+policy-options {
+ protect: prefix-list PRE-MGMT-SOURCES {
+ 156.110.31.0/27;
+ 156.110.31.32/28;
+ 164.58.0.218/31;
+ 164.58.253.0/24;
+ 198.207.222.26/32;
+ }
+ prefix-list PRE-NTP-SOURCES {
+ apply-path "system ntp server <*>";
+ }
+ prefix-list PRE-BGP-ALLOW {
+ apply-path "protocols bgp group <*> neighbor <*>";
+ }
+ prefix-list PRE-DNS-SOURCES {
+ apply-path "system name-server <*>";
+ }
+ prefix-list PRE-RADIUS-SOURCES {
+ apply-path "system radius-server <*>";
+ }
+ policy-statement EBGP-COX-V4-EXPORT {
+ term SEND-ROUTES {
+ from {
+ route-filter 198.207.222.0/24 exact;
+ }
+ then {
+ as-path-expand "17236 17236 17236";
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COX-V4-IMPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then {
+ as-path-expand "22773 22773 22773";
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-ONENET-V4-EXPORT {
+ term SEND-ROUTES {
+ from {
+ route-filter 198.207.222.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-ONENET-V4-IMPORT {
+ term ACCEPT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+}
+firewall {
+ family inet {
+ protect: filter PROTECT-RE {
+ term SSH-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-MGMT-SOURCES;
+ }
+ protocol tcp;
+ destination-port ssh;
+ }
+ then accept;
+ }
+ term BGP-ALLOW {
+ from {
+ prefix-list {
+ PRE-BGP-ALLOW;
+ }
+ protocol tcp;
+ port 179;
+ }
+ then accept;
+ }
+ term RADIUS-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-RADIUS-SOURCES;
+ }
+ protocol [ udp tcp ];
+ port [ radius radacct ];
+ }
+ then accept;
+ }
+ term NTP-ALLOW {
+ from {
+ source-address {
+ 127.0.0.1/32;
+ }
+ source-prefix-list {
+ PRE-NTP-SOURCES;
+ }
+ protocol udp;
+ port ntp;
+ }
+ then accept;
+ }
+ term DOMAIN-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-DNS-SOURCES;
+ }
+ port domain;
+ }
+ then accept;
+ }
+ term SYSLOG-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-MGMT-SOURCES;
+ }
+ port syslog;
+ }
+ then accept;
+ }
+ term SNMP-ALLOW {
+ from {
+ source-prefix-list {
+ PRE-MGMT-SOURCES;
+ }
+ protocol [ tcp udp ];
+ port [ snmp snmptrap ];
+ }
+ then accept;
+ }
+ term ICMP-ALLOW {
+ from {
+ protocol icmp;
+ icmp-type [ echo-reply echo-request unreachable time-exceeded ];
+ }
+ then accept;
+ }
+ term TRACEROUTE-ALLOW {
+ from {
+ protocol udp;
+ destination-port 33434-33523;
+ }
+ then accept;
+ }
+ term DENY-SERVICES-INBOUND {
+ from {
+ destination-port [ ssh telnet http https snmp ntp domain ];
+ }
+ then {
+ discard;
+ }
+ }
+ term SERVICES-OUTBOUND {
+ from {
+ source-port [ ssh telnet ];
+ }
+ then accept;
+ }
+ term DENY-ALL-ELSE {
+ then {
+ discard;
+ }
+ }
+ }
+ }
+}
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show ospf neighbor
+# OSPF instance is not running
+#
+# grnoc-mon at TULSA-CITY-COUNTY-LIBRARY-LR-005457> show bfd session
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: configs/core1.ptc.onenet.net
===================================================================
--- configs/core1.ptc.onenet.net (revision 157465)
+++ configs/core1.ptc.onenet.net (working copy)
@@ -1,12 +1,12 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-PTC1-MX480-RE0> show system commit
+# 2017-10-10 09:24:33 CDT by andrew via cli commit synchronize
# 2017-10-10 06:33:48 CDT by andrew via cli commit synchronize
# 2017-10-09 10:50:31 CDT by andrew via cli commit synchronize
# 2017-10-06 14:58:02 CDT by sean via cli commit confirmed, rollback in 3mins synchronize
# 2017-10-05 14:48:23 CDT by sean via cli commit synchronize
# 2017-10-05 14:28:39 CDT by sean via cli commit synchronize
-# 2017-10-05 14:27:02 CDT by sean via cli commit synchronize
# grnoc-mon at TULSA-PTC1-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -421,7 +421,7 @@
# grnoc-mon at TULSA-PTC1-MX480-RE0> show system uptime
# System booted: 2016-03-17 00:52 CDT
# Protocols started: 2016-03-17 01:01 CDT
-# Last configured: 2017-10-10 06:33 CDT by andrew
+# Last configured: 2017-10-10 09:24 CDT by andrew
#
# {master}
# grnoc-mon at TULSA-PTC1-MX480-RE0> show interface terse
@@ -614,7 +614,7 @@
#pp0 up up
#tap up up
# grnoc-mon at TULSA-PTC1-MX480-RE0> show configuration
-## Last commit: 2017-10-10 06:33:48 CDT by andrew
+## Last commit: 2017-10-10 09:24:33 CDT by andrew
version 13.3R8.7;
groups {
re0 {
@@ -2428,7 +2428,7 @@
unicast;
}
neighbor 164.58.0.219 {
- description "EBGP-TULSA-CITY-COUNTY-LIBRARY-CIR0019955 [NO-MONITOR]";
+ description EBGP-TULSA-CITY-COUNTY-LIBRARY-CIR0019955;
import EBGP-TULSA-CITY-COUNTY-LIBRARY-V4-IMPORT;
# authentication-#key <removed>;
export EBGP-TULSA-CITY-COUNTY-LIBRARY-V4-EXPORT;
Index: configs/sayre-public-library-ex.client.onenet.net
===================================================================
--- configs/sayre-public-library-ex.client.onenet.net (revision 157313)
+++ configs/sayre-public-library-ex.client.onenet.net (working copy)
@@ -220,10 +220,10 @@
#ge-0/0/10.0 up down
#ge-0/0/11 up down
#ge-0/0/11.0 up down
-#ge-0/0/12 up down
-#ge-0/0/12.0 up down
-#ge-0/0/13 up down
-#ge-0/0/13.0 up down
+#ge-0/0/12 up up
+#ge-0/0/12.0 up up
+#ge-0/0/13 up up
+#ge-0/0/13.0 up up
#ge-0/0/14 up up
#ge-0/0/14.0 up up
#ge-0/0/15 up down
@@ -232,8 +232,8 @@
#ge-0/0/16.0 up down
#ge-0/0/17 up down
#ge-0/0/17.0 up down
-#ge-0/0/18 up down
-#ge-0/0/18.0 up down
+#ge-0/0/18 up up
+#ge-0/0/18.0 up up
#ge-0/0/19 up down
#ge-0/0/19.0 up down
#ge-0/0/20 up down
Index: configs/pushmataha-fmc-clayton.client.onenet.net
===================================================================
--- configs/pushmataha-fmc-clayton.client.onenet.net (revision 157456)
+++ configs/pushmataha-fmc-clayton.client.onenet.net (working copy)
@@ -181,7 +181,7 @@
#st0 up up
#st0.0 up up
#st0.1 up up
-#st0.2 up up
+#st0.2 up down
#tap up up
#vlan up up
#vlan.999 up down
Index: configs/odmhsas-camhc-stigler.client.onenet.net
===================================================================
--- configs/odmhsas-camhc-stigler.client.onenet.net (revision 157155)
+++ configs/odmhsas-camhc-stigler.client.onenet.net (working copy)
@@ -112,8 +112,8 @@
# total files: 1
#
# grnoc-mon at ODMHSAS-CARL-ALBERT-MHC-STIGLER-SRX220> show system uptime
-# System booted: 2016-10-17 14:03 CDT
-# Protocols started: 2016-10-17 14:06 CDT
+# System booted: 2017-10-10 09:36 CDT
+# Protocols started: 2017-10-10 09:38 CDT
# Last configured: 2017-09-05 14:45 CDT by sky
#
# grnoc-mon at ODMHSAS-CARL-ALBERT-MHC-STIGLER-SRX220> show interface terse
Index: configs/rpswi1.okc.onenet.net
===================================================================
--- configs/rpswi1.okc.onenet.net (revision 157468)
+++ configs/rpswi1.okc.onenet.net (working copy)
@@ -247,8 +247,8 @@
#ge-0/0/18.0 up up
#ge-0/0/19 up up
#ge-0/0/19.0 up up
-#ge-0/0/20 up up
-#ge-0/0/20.0 up up
+#ge-0/0/20 up down
+#ge-0/0/20.0 up down
#ge-0/0/21 up up
#ge-0/0/21.0 up up
#ge-0/0/22 up up
Index: routers.all
===================================================================
--- routers.all (revision 156785)
+++ routers.all (working copy)
@@ -769,6 +769,7 @@
tecumseh-pl.nid.onenet.net:fsp150
terral-ps.client.onenet.net:juniper
tul-adva.p.onenet.net:fsp3000
+tulsa-city-county-library.client.onenet.net:juniper
tulsa-city-county-library.nid.onenet.net:fsp150
tushka-ps.client.onenet.net:juniper
tuskahoma-ps.client.onenet.net:juniper
More information about the Nocrancid
mailing list