[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Fri Oct 13 13:04:34 CDT 2017


Index: configs/odmhsas-occic-okc.client.onenet.net
===================================================================
--- configs/odmhsas-occic-okc.client.onenet.net	(revision 157651)
+++ configs/odmhsas-occic-okc.client.onenet.net	(working copy)
@@ -151,7 +151,7 @@
 #ppd0 up up
 #ppe0 up up
 #st0 up up
-#st0.1 up down
+#st0.1 up up
 #st0.2 up up
 #tap up up
 #vlan up up
Index: configs/odmhsas-camhc-mcalester.client.onenet.net
===================================================================
--- configs/odmhsas-camhc-mcalester.client.onenet.net	(revision 157408)
+++ configs/odmhsas-camhc-mcalester.client.onenet.net	(working copy)
@@ -151,7 +151,7 @@
 #ppd0 up up
 #ppe0 up up
 #st0 up up
-#st0.1 up up
+#st0.1 up down
 #st0.2 up up
 #tap up up
 #vlan up up
Index: configs/mhsso-ardmore-crisis.client.onenet.net
===================================================================
--- configs/mhsso-ardmore-crisis.client.onenet.net	(revision 157205)
+++ configs/mhsso-ardmore-crisis.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show system commit 
+#   2017-10-13 12:03:26 CDT by root via other
+#   2017-10-13 11:49:32 CDT by root via other
+#   2017-10-13 11:20:49 CDT by sky via cli commit confirmed, rollback in 3mins
 #   2017-09-11 20:19:57 CDT by admin via cli
 #   2017-09-11 19:39:25 CDT by root via cli commit confirmed, rollback in 5mins
 #   2017-09-11 22:59:29 CDT by root via cli commit confirmed, rollback in 3mins
-#   2017-09-11 21:33:54 CDT by root via junoscript
-#   2017-09-08 18:37:29 CDT by root via cli
-#   2017-09-08 18:36:12 CDT by root via cli
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -21,8 +21,8 @@
 # 
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show chassis firmware 
 # Part                     Type       Version
-# FPC 0                    O/S        Version 12.1X44-D35.5 by builder on 2014-05
-# FWDD                     O/S        Version 12.1X44-D35.5 by builder on 2014-05
+# FPC 0                    O/S        Version 12.3X48-D40.5 by builder on 2016-10
+# FWDD                     O/S        Version 12.3X48-D40.5 by builder on 2016-10
 # 
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show chassis fpc detail 
 # Slot 0 information:
@@ -47,30 +47,96 @@
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show chassis sfm detail
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show chassis ssb 
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Copyright (c) 1996-2016, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2006 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 4 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 52XX CPU Rev. 0.8 with no FPU implemented
+#         L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.
+#         L2 Cache: Size 512kb, 8 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# dwc0: <Synopsis DWC OTG Controller Driver> on obio0
+# usb0: <USB Bus for DWC OTG Controller> on dwc0
+# usb0: USB revision 2.0
+# uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub0: 1 port with 1 removable, self powered
+# uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
+# uhub1: single transaction translator
+# uhub1: 3 ports with 2 removable, self powered
+# umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
+# dwc1: <Synopsis DWC OTG Controller Driver> on obio0
+# usb1: <USB Bus for DWC OTG Controller> on dwc1
+# usb1: USB revision 2.0
+# uhub2: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1
+# uhub2: 1 port with 1 removable, self powered
+# cpld0 on obio0
+# pcib1: <Cavium on-chip PCIe HOST bridge> on obio0
+# Disabling Octeon big bar support
+# PCIe: Waiting for port 0 to finish reset
+# PCIe: Port 0 link active, 2 lanes
+# PCIe: Waiting for port 1 to finish reset
+# PCIe: Port 1 link active, 1 lanes
+# pcib1: Initialized controller
+# pci0: <PCI bus> on pcib1
+# pcib2: <PCI-PCI bridge> irq 0 at device 0.0 on pci0
+# pci1: <PCI bus> on pcib2
+# pci1: <serial bus, USB> at device 2.0 (no driver attached)
+# pci1: <serial bus, USB> at device 2.1 (no driver attached)
+# pci1: <network> at device 7.0 (no driver attached)
+# pcib0: <Cavium on-chip PCIe HOST bridge> on obio0
+# pci2: <PCI bus> on pcib0
+# pci2: <processor> at device 0.0 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <AMD/Fujitsu - 4MB> on obio0
+# Timecounter "mips" frequency 600000000 Hz quality 0
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
+# da0: 40.000MB/s transfers
+# da0: 2000MB (4096000 512 byte sectors: 255H 63S/T 254C)
+# Kernel thread "wkupdaemon" (pid 48) exited prematurely.
+# Trying to mount root from ufs:/dev/da0s1a
 # 
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show version 
 # Hostname: MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED 
 # Model: srx240h2 
-# JUNOS Software Release [12.1X44-D35.5] 
+# JUNOS Software Release [12.3X48-D40.5] 
 #  
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show version invoke-on all-routing-engines 
 # Hostname: MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED 
 # Model: srx240h2 
-# JUNOS Software Release [12.1X44-D35.5] 
+# JUNOS Software Release [12.3X48-D40.5] 
 #  
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> file list /var/tmp detail 
-# lrw-r--r--  1 root  wheel         11 May 19  2014 /var/tmp@ -> /cf/var/tmp
+# lrw-r--r--  1 root  wheel         11 Oct 27  2016 /var/tmp@ -> /cf/var/tmp
 # total files: 1
 # 
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show system uptime 
-# System booted: 2017-09-11 19:49 CDT 
-# Protocols started: 2017-09-11 19:52 CDT 
-# Last configured: 2017-09-11 20:19 CDT  by admin
+# System booted: 2017-10-13 12:00 CDT 
+# Protocols started: 2017-10-13 12:05 CDT 
+# Last configured: 2017-10-13 12:03 CDT  by root
 # 
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show interface terse 
 #Interface Admin Link
-#ge-0/0/0 up down
-#ge-0/0/0.0 up down
+#ge-0/0/0 up up
+#ge-0/0/0.500 up up
+#ge-0/0/0.501 up up
+#ge-0/0/0.32767 up up
 #gr-0/0/0 up up
 #ip-0/0/0 up up
 #lsq-0/0/0 up up
@@ -99,10 +165,8 @@
 #ge-0/0/11 down down
 #ge-0/0/12 down down
 #ge-0/0/13 down down
-#ge-0/0/14 up up
-#ge-0/0/14.500 up up
-#ge-0/0/14.501 up up
-#ge-0/0/14.32767 up up
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
 #ge-0/0/15 up up
 #ge-0/0/15.0 up up
 #fxp2 up up
@@ -127,8 +191,8 @@
 #vlan up up
 #vlan.100 up up
 # grnoc-mon at MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED> show configuration 
-## Last commit: 2017-09-11 20:19:57 CDT by admin
-version 12.1X44-D35.5;
+## Last commit: 2017-10-13 12:03:26 CDT by root
+version 12.3X48-D40.5;
 system {
     host-name MHSSO-ARDMORE-CRISIS-MR-CLIENT-OWNED;
     auto-snapshot;
@@ -264,193 +328,6 @@
 chassis {
     config-button no-rescue no-clear;
 }
-interfaces {
-    ge-0/0/0 {
-        description "Link to ATT";
-        speed 100m;
-        link-mode full-duplex;
-        gigether-options {
-            no-auto-negotiation;
-        }
-        unit 0 {
-            family inet {
-                address 12.246.241.54/30;
-            }
-        }
-    }
-    ge-0/0/1 {
-        description "L2 INTERFACE - DMZ";
-        unit 0 {
-            family ethernet-switching {
-                port-mode access;
-                vlan {
-                    members 100;
-                }
-            }
-        }
-    }
-    ge-0/0/2 {
-        description "L2 INTERFACE - DMZ";
-        unit 0 {
-            family ethernet-switching {
-                port-mode access;
-                vlan {
-                    members 100;
-                }
-            }
-        }
-    }
-    ge-0/0/3 {
-        description "L2 INTERFACE - DMZ";
-        unit 0 {
-            family ethernet-switching {
-                port-mode access;
-                vlan {
-                    members 100;
-                }
-            }
-        }
-    }
-    ge-0/0/4 {
-        description "L2 INTERFACE - DMZ";
-        unit 0 {
-            family ethernet-switching {
-                port-mode access;
-                vlan {
-                    members 100;
-                }
-            }
-        }
-    }
-    ge-0/0/5 {
-        description "L2 INTERFACE - DMZ";
-        unit 0 {
-            family ethernet-switching {
-                port-mode access;
-                vlan {
-                    members 100;
-                }
-            }
-        }
-    }
-    ge-0/0/6 {
-        description "L2 INTERFACE - DMZ";
-        unit 0 {
-            family ethernet-switching {
-                port-mode access;
-                vlan {
-                    members 100;
-                }
-            }
-        }
-    }
-    ge-0/0/7 {
-        disable;
-    }
-    ge-0/0/8 {
-        disable;
-    }
-    ge-0/0/9 {
-        disable;
-    }
-    ge-0/0/10 {
-        description "L3 INTERFACE - PHONE SYSTEM - 192.168.250.1/24";
-        unit 0 {
-            family inet {
-                address 192.168.250.1/24;
-            }
-        }
-    }
-    ge-0/0/11 {
-        disable;
-    }
-    ge-0/0/12 {
-        disable;
-    }
-    ge-0/0/13 {
-        disable;
-    }
-    ge-0/0/14 {
-        description "Link to OneNet";
-        vlan-tagging;
-        unit 500 {
-            description "L3 INTERFACE - UNTRUST-WAN - 156.110.26.243/31";
-            vlan-id 500;
-            family inet {
-                address 156.110.26.243/31;
-            }
-        }
-        unit 501 {
-            description "L3 INTERFACE - MPLS-WAN - 10.199.28.67/31";
-            vlan-id 501;
-            family inet {
-                address 10.199.28.67/31;
-            }
-        }
-    }
-    ge-0/0/15 {
-        description "L3 INTERFACE - TRUST - 192.168.2.250/24";
-        unit 0 {
-            family inet {
-                address 192.168.2.250/24;
-            }
-        }
-    }
-    protect: lo0 {
-        unit 0 {
-            family inet {
-                filter {
-                    input PROTECT-RE;
-                }
-            }
-        }
-    }
-    vlan {
-        unit 100 {
-            description "L3 INTERFACE - DMZ - 164.58.1.193/28";
-            family inet {
-                address 164.58.1.193/28;
-            }
-        }
-    }
-}
-snmp {
-    description OneNet-SRX200-Template-3.0.0;
-    contact "Net Group - (888)566-3638";
-    community "<removed>" {
-        authorization read-only;
-    }
-    community "<removed>" {
-        authorization read-only;
-    }
-    community "<removed>" {
-        authorization read-write;
-    }
-}
-routing-options {
-    static {
-        route 0.0.0.0/0 next-hop 156.110.26.242;
-        route 10.0.0.0/8 next-hop 10.199.28.66;
-        route 172.16.0.0/12 next-hop 10.199.28.66;
-        route 192.168.0.0/16 next-hop 10.199.28.66;
-    }
-}
-protocols {
-    lldp {
-        interface all;
-    }
-    stp;
-}
-policy-options {
-    protect: prefix-list PRE-MGMT-SOURCES {
-        156.110.31.0/27;
-        156.110.31.32/28;
-        164.58.253.0/24;
-    }
-    protect: prefix-list PRE-LOCALIPv4-SOURCES {
-        apply-path "interfaces <*> unit <*> family inet address <*>";
-    }
-}
 security {
     alg {
         sip disable;
@@ -620,7 +497,7 @@
         security-zone UNTRUST {
             screen UNTRUST-SCREEN;
             interfaces {
-                ge-0/0/14.500 {
+                ge-0/0/0.500 {
                     host-inbound-traffic {
                         system-services {
                             ping;
@@ -634,7 +511,7 @@
         }
         security-zone MPLS {
             interfaces {
-                ge-0/0/14.501 {
+                ge-0/0/0.501 {
                     host-inbound-traffic {
                         system-services {
                             ping;
@@ -672,7 +549,7 @@
         }
         security-zone ATT-INTERNET {
             interfaces {
-                ge-0/0/0.0 {
+                ge-0/0/14.0 {
                     host-inbound-traffic {
                         system-services {
                             ping;
@@ -684,6 +561,193 @@
         }
     }
 }
+interfaces {
+    ge-0/0/0 {
+        description "Link to OneNet";
+        vlan-tagging;
+        unit 500 {
+            description "L3 INTERFACE - UNTRUST-WAN - 156.110.26.243/31";
+            vlan-id 500;
+            family inet {
+                address 156.110.26.243/31;
+            }
+        }
+        unit 501 {
+            description "L3 INTERFACE - MPLS-WAN - 10.199.28.67/31";
+            vlan-id 501;
+            family inet {
+                address 10.199.28.67/31;
+            }
+        }
+    }
+    ge-0/0/1 {
+        description "L2 INTERFACE - DMZ";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 100;
+                }
+            }
+        }
+    }
+    ge-0/0/2 {
+        description "L2 INTERFACE - DMZ";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 100;
+                }
+            }
+        }
+    }
+    ge-0/0/3 {
+        description "L2 INTERFACE - DMZ";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 100;
+                }
+            }
+        }
+    }
+    ge-0/0/4 {
+        description "L2 INTERFACE - DMZ";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 100;
+                }
+            }
+        }
+    }
+    ge-0/0/5 {
+        description "L2 INTERFACE - DMZ";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 100;
+                }
+            }
+        }
+    }
+    ge-0/0/6 {
+        description "L2 INTERFACE - DMZ";
+        unit 0 {
+            family ethernet-switching {
+                port-mode access;
+                vlan {
+                    members 100;
+                }
+            }
+        }
+    }
+    ge-0/0/7 {
+        disable;
+    }
+    ge-0/0/8 {
+        disable;
+    }
+    ge-0/0/9 {
+        disable;
+    }
+    ge-0/0/10 {
+        description "L3 INTERFACE - PHONE SYSTEM - 192.168.250.1/24";
+        unit 0 {
+            family inet {
+                address 192.168.250.1/24;
+            }
+        }
+    }
+    ge-0/0/11 {
+        disable;
+    }
+    ge-0/0/12 {
+        disable;
+    }
+    ge-0/0/13 {
+        disable;
+    }
+    ge-0/0/14 {
+        description "Link to ATT";
+        speed 100m;
+        link-mode full-duplex;
+        gigether-options {
+            no-auto-negotiation;
+        }
+        unit 0 {
+            family inet {
+                address 12.246.241.54/30;
+            }
+        }
+    }
+    ge-0/0/15 {
+        description "L3 INTERFACE - TRUST - 192.168.2.250/24";
+        unit 0 {
+            family inet {
+                address 192.168.2.250/24;
+            }
+        }
+    }
+    protect: lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+    vlan {
+        unit 100 {
+            description "L3 INTERFACE - DMZ - 164.58.1.193/28";
+            family inet {
+                address 164.58.1.193/28;
+            }
+        }
+    }
+}
+snmp {
+    description OneNet-SRX200-Template-3.0.0;
+    contact "Net Group - (888)566-3638";
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 156.110.26.242;
+        route 10.0.0.0/8 next-hop 10.199.28.66;
+        route 172.16.0.0/12 next-hop 10.199.28.66;
+        route 192.168.0.0/16 next-hop 10.199.28.66;
+    }
+}
+protocols {
+    lldp {
+        interface all;
+    }
+    stp;
+}
+policy-options {
+    protect: prefix-list PRE-MGMT-SOURCES {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+    }
+    protect: prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+}
 firewall {
     family inet {
         protect: filter PROTECT-RE {
@@ -736,7 +800,7 @@
 routing-instances {
     ATT-INTERNET {
         instance-type virtual-router;
-        interface ge-0/0/0.0;
+        interface ge-0/0/14.0;
         routing-options {
             static {
                 route 0.0.0.0/0 next-hop 12.246.241.53;
Index: configs/odmhsas.central-office.okc.client.onenet.net
===================================================================
--- configs/odmhsas.central-office.okc.client.onenet.net	(revision 157651)
+++ configs/odmhsas.central-office.okc.client.onenet.net	(working copy)
@@ -201,17 +201,17 @@
 #st0.24 up up
 #st0.25 up up
 #st0.26 up up
-#st0.27 up up
+#st0.27 up down
 #st0.28 up up
 #st0.29 up up
 #st0.30 up up
 #st0.31 up down
-#st0.32 up down
+#st0.32 up up
 #st0.33 up up
 #st0.34 up up
 #st0.35 up up
 #st0.36 up up
-#st0.37 up up
+#st0.37 up down
 #st0.38 up up
 #st0.63 up up
 #tap up up
Index: configs/lavern-public-schools.client.onenet.net
===================================================================
--- configs/lavern-public-schools.client.onenet.net	(revision 157651)
+++ configs/lavern-public-schools.client.onenet.net	(working copy)
@@ -113,7 +113,7 @@
 # 
 # grnoc-mon at LAVERN-PUBLIC-SCHOOLS-TAG-004351> show interface terse 
 #Interface Admin Link
-#ge-0/0/0 down down
+#ge-0/0/0 down up
 #gr-0/0/0 up up
 #ip-0/0/0 up up
 #lsq-0/0/0 up up
Index: configs/city-of-lawton.client.onenet.net
===================================================================
--- configs/city-of-lawton.client.onenet.net	(revision 157651)
+++ configs/city-of-lawton.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at CITY-OF-LAWTON-005231> show system commit 
+#   2017-10-13 12:45:57 CDT by joel via cli commit confirmed, rollback in 5mins
 #   2017-10-13 11:00:07 CDT by joel via cli commit confirmed, rollback in 5mins
 #   2017-10-13 10:33:08 CDT by joel via cli commit confirmed, rollback in 5mins
 #   2017-10-13 10:08:25 CDT by joel via cli
 #   2017-10-13 09:51:45 CDT by joel via cli
 #   2017-10-13 09:48:21 CDT by joel via cli
-#   2017-10-13 09:39:22 CDT by joel via cli commit confirmed, rollback in 5mins
 # grnoc-mon at CITY-OF-LAWTON-005231> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -135,7 +135,7 @@
 # Time Source:  NTP CLOCK 
 # System booted: 2017-08-25 14:03 CDT 
 # Protocols started: 2017-08-25 14:03 CDT 
-# Last configured: 2017-10-13 11:00 CDT  by joel
+# Last configured: 2017-10-13 12:45 CDT  by joel
 # 
 # grnoc-mon at CITY-OF-LAWTON-005231> show interface terse 
 #Interface Admin Link
@@ -233,7 +233,7 @@
 #vlan up down
 #vtep up up
 # grnoc-mon at CITY-OF-LAWTON-005231> show configuration 
-## Last commit: 2017-10-13 11:00:07 CDT by joel
+## Last commit: 2017-10-13 12:45:57 CDT by joel
 version 15.1X49-D90.7;
 groups {
     ABUSE-DENY {
@@ -2330,19 +2330,6 @@
                     source-address TR-0100-USERS-10.1.0.0/16;
                 }
             }
-            policy TEMP-CREATE-NEW-IT-ZONE {
-                match {
-                    source-address CITY-HALL-ANNEX-10.1.0.0/23;
-                    destination-address any;
-                    application [ junos-ssh NON-STANDARD-SSH ];
-                }
-                then {
-                    permit;
-                    log {
-                        session-init;
-                    }
-                }
-            }
             policy COMMON-APPLICATIONS {
                 match {
                     source-address TR-0100-USERS-10.1.0.0/16;
@@ -2614,6 +2601,19 @@
                     }
                 }
             }
+            policy LAWTONOK-GOV-OUTBOUND {
+                match {
+                    source-address LAWTONOK-GOV-INSIDE-172.16.1.85;
+                    destination-address any;
+                    application [ NON-STANDARD-SSH junos-ssh OPENVPN GIT-HUB junos-ntp SNMP ];
+                }
+                then {
+                    permit;
+                    log {
+                        session-init;
+                    }
+                }
+            }
             policy SSH-DESTINATIONS {
                 match {
                     source-address [ SERVER-LNDMGMT-P-172.16.1.206 SERVER-GEMS-AP-P-172.16.1.28 ];
@@ -3963,6 +3963,12 @@
     application GIT-HUB {
         term tcp-9418 protocol tcp destination-port 9418;
     }
+    application SNMP {
+        term udp-161 protocol udp destination-port 161;
+    }
+    application OPENVPN {
+        term udp-1194 protocol udp destination-port 1194;
+    }
 }
 vlans {
     DMZ-0400-HVAC {
Index: configs/odmhsas-ncbh-woodward.client.onenet.net
===================================================================
--- configs/odmhsas-ncbh-woodward.client.onenet.net	(revision 157557)
+++ configs/odmhsas-ncbh-woodward.client.onenet.net	(working copy)
@@ -151,7 +151,7 @@
 #ppd0 up up
 #ppe0 up up
 #st0 up up
-#st0.1 up up
+#st0.1 up down
 #st0.2 up up
 #tap up up
 #vlan up up
Index: configs/odot-bartlesville-regmaint.client.onenet.net
===================================================================
--- configs/odot-bartlesville-regmaint.client.onenet.net	(revision 157599)
+++ configs/odot-bartlesville-regmaint.client.onenet.net	(working copy)
@@ -136,8 +136,8 @@
 #ge-0/0/3.0 up down
 #ge-0/0/4 up down
 #ge-0/0/4.0 up down
-#ge-0/0/5 up down
-#ge-0/0/5.0 up down
+#ge-0/0/5 up up
+#ge-0/0/5.0 up up
 #ge-0/0/6 up up
 #ge-0/0/6.0 up up
 #ge-0/0/7 up up



More information about the Nocrancid mailing list