[Nocrancid] autopop-onenet.net/core8.tul.onenet.net[0] router config diffs
rancid at rancid.noc.onenet.net
rancid at rancid.noc.onenet.net
Sat Oct 14 05:34:13 CDT 2017
Index: configs/core8.tul.onenet.net
===================================================================
--- configs/core8.tul.onenet.net (revision 157688)
+++ configs/core8.tul.onenet.net (working copy)
@@ -1,13 +1,13 @@
# RANCID-CONTENT-TYPE: juniper
#
# grnoc-mon at TULSA-CORE8-MX480-RE0> show system commit
+# 2017-10-14 05:10:09 CDT by andrew via cli commit synchronize
+# 2017-10-14 05:03:46 CDT by andrew via cli commit synchronize
# 2017-10-14 04:32:13 CDT by andrew via synchronize
# 2017-10-14 04:31:27 CDT by andrew via synchronize
# 2017-10-14 03:33:04 CDT by admin via cli synchronize
# 2017-10-14 03:27:01 CDT by root via other
# Synchronization with remote Routing Engine
-# 2017-10-06 15:29:04 CDT by andrew via cli synchronize
-# 2017-10-06 15:08:35 CDT by andrew via cli synchronize
# grnoc-mon at TULSA-CORE8-MX480-RE0> show chassis environment
# Class Item Status Measurement
# Temp PEM 0 OK
@@ -67,6 +67,20 @@
# FPC 2 Intake OK
# FPC 2 Exhaust A OK
# FPC 2 Exhaust B OK
+# FPC 2 LU 0 TSen OK
+# FPC 2 LU 0 Chip OK
+# FPC 2 LU 1 TSen OK
+# FPC 2 LU 1 Chip OK
+# FPC 2 LU 2 TSen OK
+# FPC 2 LU 2 Chip OK
+# FPC 2 LU 3 TSen OK
+# FPC 2 LU 3 Chip OK
+# FPC 2 XM 0 TSen OK
+# FPC 2 XM 0 Chip OK
+# FPC 2 XF 0 TSen OK
+# FPC 2 XF 0 Chip OK
+# FPC 2 PLX Switch TSen OK
+# FPC 2 PLX Switch Chip OK
# Fans Top Rear Fan OK
# Bottom Rear Fan OK
# Top Middle Fan OK
@@ -81,7 +95,8 @@
# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
# FPC 1 ROM Juniper ROM Monitor Version 10.4b1
# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
-# FPC 2
+# FPC 2 ROM Juniper ROM Monitor Version 10.4b1
+# O/S Version 16.1R5.7 by builder on 2017-08-18 15:31:45 UTC
#
# {master}
# grnoc-mon at TULSA-CORE8-MX480-RE0> show chassis fpc detail
@@ -98,10 +113,10 @@
# Total DDR DRAM 6656 MB
# Max power consumption 485 Watts
# Slot 2 information:
-# State Present
-# Total CPU DRAM 0 MB
-# Total RLDRAM 0 MB
-# Total DDR DRAM 0 MB
+# State Online
+# Total CPU DRAM 2048 MB
+# Total RLDRAM 1036 MB
+# Total DDR DRAM 6656 MB
# Max power consumption 485 Watts
#
# {master}
@@ -135,7 +150,10 @@
# PIC 0 BUILTIN BUILTIN 1X100GE CFP
# Xcvr 0 REV 01 740-032210 CM5001J CFP-100G-LR4
# FPC 2 REV 03 750-045372 CAAC1374 MPCE Type 3 3D
-# CPU
+# CPU REV 08 711-035209 CAAA5255 HMPC PMB 2G
+# MIC 0 REV 17 750-033199 CAAA2087 1X100GE CFP
+# PIC 0 BUILTIN BUILTIN 1X100GE CFP
+# Xcvr 0 REV 01 740-032210 J14H54738 CFP-100G-LR4
# Fan Tray Enhanced Left Fan Tray
#
# {master}
@@ -156,6 +174,7 @@
# FPC 1 REV 03 750-045372 CAAA7952 MX-MPC3E-3D
# MIC 0 REV 17 750-033199 CAAA5639 MIC3-3D-1X100GE-CFP
# FPC 2 REV 03 750-045372 CAAC1374 MX-MPC3E-3D
+# MIC 0 REV 17 750-033199 CAAA2087 MIC3-3D-1X100GE-CFP
# Fan Tray FFANTRAY-MX480-HC-S
#
# {master}
@@ -546,7 +565,7 @@
# Time Source: NTP CLOCK
# System booted: 2017-10-14 04:28 CDT
# Protocols started: 2017-10-14 04:32 CDT
-# Last configured: 2017-10-14 04:32 CDT by andrew
+# Last configured: 2017-10-14 05:10 CDT by andrew
#
# {master}
# grnoc-mon at TULSA-CORE8-MX480-RE0> show interface terse
@@ -559,7 +578,6 @@
#pfh-0/0/0.16383 up up
#pfh-0/0/0.16384 up up
#xe-0/0/0 up down
-#xe-0/0/0.0 up down
#xe-0/0/1 up down
#xe-0/0/2 up down
#xe-0/0/3 up down
@@ -589,7 +607,7 @@
#et-0/3/0.103 up up
#et-0/3/0.115 up up
#et-0/3/0.145 up up
-#et-0/3/0.200 up down
+#et-0/3/0.200 up up
#et-0/3/0.301 up up
#et-0/3/0.302 up up
#et-0/3/0.306 up up
@@ -602,7 +620,7 @@
#et-0/3/0.2362 up up
#et-0/3/0.2520 up up
#et-0/3/0.2529 up up
-#et-0/3/0.3920 up down
+#et-0/3/0.3920 up up
#et-0/3/0.32767 up up
#et-1/0/0 up up
#et-1/0/0.42 up up
@@ -614,6 +632,28 @@
#pfh-1/0/0 up up
#pfh-1/0/0.16383 up up
#pfh-1/0/0.16384 up up
+#et-2/0/0 up up
+#et-2/0/0.101 up up
+#et-2/0/0.200 up up
+#et-2/0/0.250 up up
+#et-2/0/0.251 up up
+#et-2/0/0.252 up up
+#et-2/0/0.257 up up
+#et-2/0/0.258 up up
+#et-2/0/0.982 up up
+#et-2/0/0.993 up up
+#et-2/0/0.996 up up
+#et-2/0/0.997 up up
+#et-2/0/0.998 up up
+#et-2/0/0.3920 up up
+#et-2/0/0.32767 up up
+#lc-2/0/0 up up
+#lc-2/0/0.32769 up up
+#pfe-2/0/0 up up
+#pfe-2/0/0.16383 up up
+#pfh-2/0/0 up up
+#pfh-2/0/0.16383 up up
+#pfh-2/0/0.16384 up up
#cbp0 up up
#demux0 up up
#dsc up up
@@ -635,6 +675,7 @@
#lo0.16385 up up
#lsi up up
#lsi.1048834 up up
+#lsi.1048835 up up
#mtun up up
#pimd up up
#pime up up
@@ -644,7 +685,7 @@
#tap up up
#vtep up up
# grnoc-mon at TULSA-CORE8-MX480-RE0> show configuration
-## Last commit: 2017-10-14 04:32:13 CDT by andrew
+## Last commit: 2017-10-14 05:10:09 CDT by andrew
version 16.1R5.7;
groups {
re0 {
@@ -866,12 +907,8 @@
}
interfaces {
xe-0/0/0 {
- description AREON-TO-DALLAS-10G-CIR0019906;
+ description "AREON-TO-DALLAS-10G-CIR0019906 [DECOM]";
mtu 9192;
- encapsulation ethernet-vpls;
- unit 0 {
- family vpls;
- }
}
et-0/1/0 {
description "CORE 100GE to core1.tul et-3/1/0 | OneNet-TUL-TULLVL3-ET-19862";
@@ -957,7 +994,7 @@
}
unit 200 {
description "AREON-TO-I2-EVC000XXXX [ORDERED]";
- encapsulation vlan-ccc;
+ encapsulation vlan-vpls;
vlan-id-range 200-201;
}
unit 301 {
@@ -1103,7 +1140,7 @@
vlan-id 616;
}
unit 3920 {
- encapsulation vlan-ccc;
+ encapsulation vlan-vpls;
vlan-id-range 3920-3940;
}
}
@@ -1132,6 +1169,143 @@
family mpls;
}
}
+ et-2/0/0 {
+ description "NNI-AREON-100G-CIR000XXXX [ORDERED]";
+ flexible-vlan-tagging;
+ mtu 9192;
+ encapsulation flexible-ethernet-services;
+ unit 101 {
+ description "L2-CROSS 10GE to AREON-QWEST CIR000XXXX";
+ encapsulation vlan-vpls;
+ vlan-id 101;
+ }
+ unit 200 {
+ description "AREON-TO-I2-EVC000XXXX [ORDERED]";
+ encapsulation vlan-vpls;
+ vlan-id-range 200-201;
+ }
+ unit 250 {
+ description "UPSTREAM L3 XX to ^ AREON Commodity ^ CIR000XXXX";
+ vlan-id 250;
+ family inet {
+ sampling {
+ input;
+ }
+ address 164.58.16.241/30;
+ }
+ }
+ unit 251 {
+ description "FUTURE NETFLIX IPV4 [NO-MONITOR]";
+ vlan-id 251;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 164.58.16.5/30;
+ }
+ }
+ unit 252 {
+ description "FUTURE NETFLIX IPV6 [NO-MONITOR]";
+ vlan-id 252;
+ family inet6 {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 2610:1d8:2600::8/127;
+ }
+ }
+ unit 257 {
+ description "UPSTREAM L3 XX to ^ AREON(NETFX - DALLAS - V4) ^ CIR000XXXX [NO-MONITOR]";
+ vlan-id 257;
+ family inet {
+ sampling {
+ input;
+ }
+ address 198.45.55.21/31;
+ }
+ }
+ unit 258 {
+ description "UPSTREAM L3 XX to ^ AREON(NETFX - DALLAS - V6) ^ CIR000XXXX [NO-MONITOR]";
+ vlan-id 258;
+ family inet6 {
+ sampling {
+ input;
+ }
+ address 2620:10c:700b:14::2/126;
+ }
+ }
+ unit 982 {
+ vlan-id 982;
+ family inet {
+ sampling {
+ input;
+ }
+ address 10.10.10.1/30;
+ }
+ }
+ unit 993 {
+ description "UPSTREAM L3 XX to ^ AREON BGP IPv4 ^ CIR0004482";
+ vlan-id 993;
+ family inet {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 156.110.202.157/30;
+ }
+ }
+ unit 996 {
+ description "UPSTREAM L3 XX to ^ AREON BGP IPv6 ^ CIR0005067";
+ vlan-id 996;
+ family inet {
+ sampling {
+ input;
+ }
+ }
+ family inet6 {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 2610:1d8:2600::/127;
+ }
+ }
+ unit 997 {
+ description "UPSTREAM L3 XX to ^ COGENT IPv4 (via AREON) ^ CIR0005068";
+ vlan-id 997;
+ family inet {
+ filter {
+ input ABUSE-BCP38-INBOUND;
+ }
+ sampling {
+ input;
+ }
+ address 38.104.198.70/30;
+ }
+ }
+ unit 998 {
+ description "UPSTREAM L3 XX to ^ COGENT-IPv6 (via AREON) ^ CIR0005069";
+ vlan-id 998;
+ family inet {
+ sampling {
+ input;
+ }
+ }
+ family inet6 {
+ mtu 9000;
+ sampling {
+ input;
+ }
+ address 2001:550:2:2e::e/126;
+ }
+ }
+ unit 3920 {
+ encapsulation vlan-vpls;
+ vlan-id-range 3920-3940;
+ }
+ }
fxp0 {
disable;
}
@@ -1650,6 +1824,105 @@
peer-as 2381;
}
}
+ group EBGP-AREON-COMMODITY-V4 {
+ type external;
+ description EBGP-AREON-COMMODITY-V4;
+ import EBGP-AREON-COMMODITY-V4-IMPORT;
+ family inet {
+ any;
+ }
+# authentication-#key <removed>;
+ export EBGP-AREON-COMMODITY-V4-EXPORT;
+ neighbor 164.58.16.242 {
+ remove-private;
+ peer-as 40581;
+ }
+ }
+ group EBGP-NETFLIX-AS2906 {
+ type external;
+ import EBGP-NETFLIX-IMPORT;
+ family inet {
+ any;
+ }
+ export EBGP-NETFLIX-EXPORT;
+ remove-private;
+ peer-as 2906;
+ neighbor 164.58.16.6 {
+ passive;
+ }
+ neighbor 198.45.55.20 {
+ passive;
+ }
+ }
+ group EBGP-NETFLIX-AS2906-V6 {
+ type external;
+ family inet6 {
+ any;
+ }
+ export EBGP-NETFLIX-EXPORT-V6;
+ peer-as 2906;
+ neighbor 2610:1d8:2600::9 {
+ passive;
+ }
+ neighbor 2620:10c:700b:14::1 {
+ passive;
+ }
+ }
+ group EBGP-AREON-V4 {
+ type external;
+ description EBGP-AREON-V4-82005aCd;
+ import [ EBGP-AREON-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+# authentication-#key <removed>;
+ export EBGP-AREON-EXPORT;
+ neighbor 156.110.202.158 {
+ remove-private;
+ peer-as 40581;
+ }
+ }
+ group EBGP-COGENT-AS174 {
+ type external;
+ description EBGP-COGENT-AS174;
+ import [ EBGP-COGENT-IMPORT EBGP-REJECT-IMPORT ];
+ family inet {
+ any;
+ }
+# authentication-#key <removed>;
+ export EBGP-COGENT-EXPORT;
+ neighbor 38.104.198.69 {
+ remove-private;
+ peer-as 174;
+ }
+ }
+ group EBGP-AREON-V6 {
+ type external;
+ description EBGP-AREON-V6-82005aCd;
+ import EBGP-AREON-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+# authentication-#key <removed>;
+ export EBGP-AREON-V6-EXPORT;
+ neighbor 2610:1d8:2600::1 {
+ remove-private;
+ peer-as 40581;
+ }
+ }
+ group EBGP-COGENT-AS174-V6 {
+ type external;
+ description EBGP-COGENT-AS174-V6;
+ import EBGP-COGENT-V6-IMPORT;
+ family inet6 {
+ any;
+ }
+ export EBGP-COGENT-V6-EXPORT;
+ neighbor 2001:550:2:2e::d {
+ remove-private;
+ peer-as 174;
+ }
+ }
}
isis {
apply-groups ISIS-L2-INTERFACE;
@@ -1734,18 +2007,6 @@
ignore-mtu-mismatch;
}
}
- neighbor 164.58.199.222 {
- interface et-0/3/0.3920 {
- virtual-circuit-id 3920;
- ignore-encapsulation-mismatch;
- ignore-mtu-mismatch;
- }
- interface et-0/3/0.200 {
- virtual-circuit-id 2623;
- ignore-encapsulation-mismatch;
- ignore-mtu-mismatch;
- }
- }
local-switching {
interface et-0/3/0.102 {
end-interface {
@@ -2059,6 +2320,164 @@
then reject;
}
}
+ policy-statement EBGP-AREON-COMMODITY-V4-EXPORT {
+ term UPSTREAM-COMMUNITY {
+ from community ONENET_ADV_UPSTREAM;
+ then accept;
+ }
+ term COMMODITY-PREFIX-LIST {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term MORE-SPECIFIC {
+ from {
+ route-filter 164.58.172.0/24 exact;
+ }
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-COMMODITY-V4-IMPORT {
+ term REJECT-DEFAULT {
+ from {
+ route-filter 0.0.0.0/0 exact;
+ }
+ then reject;
+ }
+ term APPLE {
+ from as-path-group AREON-COMMODITY-ROUTES;
+ then {
+ local-preference 139;
+ community set 5078:40581;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-EXPORT {
+ term UPSTREAM-COMMUNITY {
+ from community ONENET_ADV_UPSTREAM;
+ then accept;
+ }
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then accept;
+ }
+ term STEP-2 {
+ from community 5078:19401;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-IMPORT {
+ term STEP-1 {
+ then {
+ local-preference 140;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-V6-EXPORT {
+ term STEP-1 {
+ from {
+ route-filter 2610:1d8::/32 exact;
+ }
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-AREON-V6-IMPORT {
+ term STEP-1 {
+ then {
+ local-preference 104;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-EXPORT {
+ term UPSTREAM-COMMUNITY {
+ from community ONENET_ADV_UPSTREAM;
+ then {
+ community add 174:3001;
+ as-path-prepend "5078 5078 5078 5078 5078 5078";
+ accept;
+ }
+ }
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ community add 174:3001;
+ as-path-prepend "5078 5078 5078 5078 5078 5078";
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-IMPORT {
+ term STEP-1 {
+ then {
+ local-preference subtract 20;
+ community set 5078:174;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-V6-EXPORT {
+ term FAA {
+ from {
+ route-filter 2001:19e8:8041::/48 exact;
+ }
+ then {
+ as-path-expand 3923;
+ accept;
+ }
+ }
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST-V6;
+ then accept;
+ }
+ term STEP-2 {
+ from protocol aggregate;
+ then accept;
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-COGENT-V6-IMPORT {
+ term STEP-1 {
+ then {
+ community set 5078:174;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
policy-statement EBGP-I2-RE-EXPORT {
term STEP-1 {
from policy RE-PREFIXES-LIST;
@@ -2544,11 +2963,51 @@
then reject;
}
}
+ policy-statement EBGP-NETFLIX-EXPORT {
+ term UPSTREAM-COMMUNITY {
+ from community ONENET_ADV_UPSTREAM;
+ then {
+ metric 10;
+ accept;
+ }
+ }
+ term ONENET {
+ from policy COMMODITY-PREFIXES-LIST;
+ then {
+ metric 10;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NETFLIX-EXPORT-V6 {
+ term STEP-1 {
+ from policy COMMODITY-PREFIXES-LIST-V6;
+ then {
+ metric 10;
+ accept;
+ }
+ }
+ term REJECT-ALL-ELSE {
+ then reject;
+ }
+ }
+ policy-statement EBGP-NETFLIX-IMPORT {
+ term ACCEPT-ROUTES {
+ then {
+ local-preference 140;
+ accept;
+ }
+ }
+ }
policy-statement EBGP-REJECT-EXPORT {
term STEP-1 {
from {
prefix-list MARTIANS-IPV4;
}
+ then reject;
}
}
policy-statement EBGP-REJECT-IMPORT {
@@ -3326,9 +3785,12 @@
community 11164:53666 members 11164:53666;
community 11537:53666 members 11537:53666;
community 11537:911 members 11537:911;
+ community 174:3001 members 174:3001;
community 5078:11164 members 5078:11164;
community 5078:11317 members 5078:11317;
community 5078:11537 members 5078:11537;
+ community 5078:174 members 5078:174;
+ community 5078:19401 members 5078:19401;
community 5078:2381 members 5078:2381;
community 5078:2495 members 5078:2495;
community 5078:293 members 5078:293;
@@ -3377,6 +3839,9 @@
as-path TRCPS-MICROSOFT "11164 8075";
as-path TRCPS-AMAZON "11164 16509 14618";
}
+ as-path-group AREON-COMMODITY-ROUTES {
+ as-path APPLE "40581+ 714+ .*";
+ }
}
firewall {
family inet {
@@ -3602,14 +4067,60 @@
then accept;
}
}
+ filter ABUSE-BCP38-INBOUND {
+ term 1 {
+ from {
+ source-address {
+ 164.58.0.0/16;
+ 156.110.0.0/16;
+ }
+ }
+ then {
+ discard;
+ }
+ }
+ term 1.5 {
+ from {
+ source-port 19;
+ destination-port 19;
+ }
+ then policer CHARGEN;
+ }
+ term VIDEO {
+ from {
+ source-prefix-list {
+ VIDEO-ABUSE;
+ }
+ destination-port [ 1720 5060 5061 1719 ];
+ }
+ then {
+ count VIDEO-ABUSE;
+ discard;
+ }
+ }
+ term 2 {
+ then accept;
+ }
+ }
}
+ policer CHARGEN {
+ if-exceeding {
+ bandwidth-limit 400k;
+ burst-size-limit 100k;
+ }
+ then discard;
+ }
}
routing-instances {
- VPLS-AREON {
+ AREON-VPLS {
description AREON-VPLS-INSTANCE;
instance-type vpls;
vlan-id all;
- interface xe-0/0/0.0;
+ interface et-0/3/0.200;
+ interface et-0/3/0.3920;
+ interface et-2/0/0.101;
+ interface et-2/0/0.200;
+ interface et-2/0/0.3920;
route-distinguisher 164.58.199.228:2539;
vrf-target target:5078:2539;
protocols {
@@ -3618,10 +4129,14 @@
3000;
packet-action drop;
}
- interface xe-0/0/0.0;
no-tunnel-services;
- site AREON {
- site-identifier 1;
+ site TULCORE8 {
+ site-identifier 9228;
+ interface et-2/0/0.200;
+ interface et-0/3/0.200;
+ interface et-0/3/0.3920;
+ interface et-2/0/0.3920;
+ interface et-2/0/0.101;
}
}
}
More information about the Nocrancid
mailing list