[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Sep 13 10:04:51 CDT 2017


Index: configs/kiamichi-fmc-battiest.client.onenet.net
===================================================================
--- configs/kiamichi-fmc-battiest.client.onenet.net	(revision 156565)
+++ configs/kiamichi-fmc-battiest.client.onenet.net	(working copy)
@@ -187,7 +187,7 @@
 #ppd0 up up
 #ppe0 up up
 #st0 up up
-#st0.1 up down
+#st0.1 up up
 #st0.2 up up
 #tap up up
 #vlan up down
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 156560)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -1324,10 +1324,10 @@
 #t1-3/3/0:7:20 down down
 #t1-3/3/0:7:21 down down
 #t1-3/3/0:7:22 down down
-#t1-3/3/0:7:23 up up
-#t1-3/3/0:7:23.16 up up
-#t1-3/3/0:7:23.17 up up
-#t1-3/3/0:7:23.18 up up
+#t1-3/3/0:7:23 up down
+#t1-3/3/0:7:23.16 up down
+#t1-3/3/0:7:23.17 up down
+#t1-3/3/0:7:23.18 up down
 #t1-3/3/0:7:24 down down
 #t1-3/3/0:7:25 down down
 #t1-3/3/0:7:26 down down
Index: configs/core2.dc.onenet.net
===================================================================
--- configs/core2.dc.onenet.net	(revision 156529)
+++ configs/core2.dc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at MX480_DC_02_RE0> show system commit 
+#   2017-09-13 09:09:59 CDT by joel via cli commit confirmed, rollback in 2mins synchronize
 #   2017-09-11 20:21:32 CDT by joel via cli commit confirmed, rollback in 5mins synchronize
 #   2017-08-30 15:23:00 CDT by andrew via cli commit synchronize
 #   2017-08-30 15:12:56 CDT by andrew via cli commit synchronize
 #   2017-08-30 15:04:36 CDT by andrew via cli commit confirmed, rollback in 3mins synchronize
 #   2017-08-30 14:27:45 CDT by andrew via cli commit synchronize
-#   2017-08-30 14:21:44 CDT by andrew via cli commit synchronize
 # grnoc-mon at MX480_DC_02_RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -421,7 +421,7 @@
 # grnoc-mon at MX480_DC_02_RE0> show system uptime 
 # System booted: 2016-09-03 21:49 CDT 
 # Protocols started: 2016-09-03 21:51 CDT 
-# Last configured: 2017-09-11 20:21 CDT  by joel
+# Last configured: 2017-09-13 09:09 CDT  by joel
 # 
 # {master}
 # grnoc-mon at MX480_DC_02_RE0> show interface terse 
@@ -672,6 +672,7 @@
 #lo0.16384 up up
 #lo0.16385 up up
 #lsi up up
+#lsi.256 up up
 #mtun up up
 #pimd up up
 #pime up up
@@ -679,7 +680,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at MX480_DC_02_RE0> show configuration 
-## Last commit: 2017-09-11 20:21:32 CDT by joel
+## Last commit: 2017-09-13 09:09:59 CDT by joel
 version 12.3R7.7;
 groups {
     re0 {
@@ -2472,6 +2473,41 @@
             then reject;
         }
     }
+    policy-statement PRYOR-PL-VRF-EXPORT {
+        term 1 {
+            from protocol static;
+            then {
+                community add PRYOR-PL-VPN;
+                accept;
+            }
+        }
+        term 2 {
+            from protocol direct;
+            then {
+                community add PRYOR-PL-VPN;
+                accept;
+            }
+        }
+        term 3 {
+            from protocol bgp;
+            then {
+                community add PRYOR-PL-VPN;
+                accept;
+            }
+        }
+    }
+    policy-statement PRYOR-PL-VRF-IMPORT {
+        term 1 {
+            from {
+                protocol bgp;
+                community PRYOR-PL-VPN;
+            }
+            then accept;
+        }
+        term 2 {
+            then reject;
+        }
+    }
     policy-statement REDISTRIBUTE-BGP {
         term BLACKHOLE {
             from community ONENET_BLACKHOLE;
@@ -2540,6 +2576,7 @@
     community MX480_DC_02 members 5078:196;
     community ONENET-PoP-APPLIANCES members target:5078:2012;
     community ONENET_BLACKHOLE members 5078:911;
+    community PRYOR-PL-VPN members target:5078:2617;
 }
 firewall {
     family inet {
@@ -3274,8 +3311,13 @@
         }
     }
     dmz_pryor {
-        instance-type virtual-router;
+        instance-type vrf;
         interface irb.2024;
+        route-distinguisher 164.58.199.196:2617;
+        vrf-import PRYOR-PL-VRF-IMPORT;
+        vrf-export PRYOR-PL-VRF-EXPORT;
+        vrf-target target:5078:2617;
+        vrf-table-label;
     }
     dmz_sysgrp_test {
         apply-groups OSPF-RI;
Index: configs/core4.okc.onenet.net
===================================================================
--- configs/core4.okc.onenet.net	(revision 156565)
+++ configs/core4.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE4-MX480-RE0> show system commit 
+#   2017-09-13 09:39:56 CDT by sean via cli commit synchronize
 #   2017-09-13 00:37:24 CDT by joel via cli commit confirmed, rollback in 5mins synchronize
 #   2017-09-12 23:25:24 CDT by joel via cli commit synchronize
 #   2017-09-12 20:23:40 CDT by aberrios via cli commit synchronize
 #   2017-09-12 20:22:20 CDT by andrew via cli commit synchronize
 #   2017-09-12 20:10:46 CDT by andrew via cli commit synchronize
-#   2017-09-12 20:09:29 CDT by andrew via cli commit synchronize
 # grnoc-mon at OKC-CORE4-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -556,7 +556,7 @@
 # grnoc-mon at OKC-CORE4-MX480-RE0> show system uptime 
 # System booted: 2016-10-12 18:12 CDT 
 # Protocols started: 2016-10-12 18:14 CDT 
-# Last configured: 2017-09-13 00:37 CDT  by joel
+# Last configured: 2017-09-13 09:39 CDT  by sean
 # 
 # {master}
 # grnoc-mon at OKC-CORE4-MX480-RE0> show interface terse 
@@ -862,7 +862,6 @@
 #pfe-1/2/0 up up
 #pfe-1/2/0.16383 up up
 #ge-1/2/1 up up
-#ge-1/2/1.340 up up
 #ge-1/2/1.32767 up up
 #ge-1/2/2 up up
 #ge-1/2/2.0 up up
@@ -1511,7 +1510,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE4-MX480-RE0> show configuration 
-## Last commit: 2017-09-13 00:37:24 CDT by joel
+## Last commit: 2017-09-13 09:39:56 CDT by sean
 version 13.3R9.13;
 groups {
     re0 {
@@ -5206,21 +5205,6 @@
         gigether-options {
             auto-negotiation;
         }
-        unit 340 {
-            description "Bowlegs-PS-50Mb-CIR0019250 [DECOM]";
-            bandwidth 50m;
-            vlan-id 340;
-            family inet {
-                policer {
-                    input 50M-POL;
-                    output 50M-POL;
-                }
-                sampling {
-                    input;
-                }
-                address 156.110.114.25/30;
-            }
-        }
     }
     ge-1/2/2 {
         description "HEI-REDLANDS-VPLS-CIR0006023 [NO-MONITOR]";
@@ -9468,7 +9452,6 @@
         route 222.128.198.6/32 reject;
         route 164.58.74.224/29 next-hop 156.110.72.94;
         route 164.58.149.112/29 next-hop 156.110.130.18;
-        route 164.58.25.96/28 next-hop 156.110.114.26;
         route 164.58.1.96/30 next-hop 164.58.17.134;
         route 156.110.0.64/26 next-hop 156.110.25.162;
         route 156.110.31.136/29 next-hop 156.110.24.254;
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 156542)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -158,8 +158,8 @@
 #ge-0/0/11 down down
 #ge-0/0/12 down down
 #ge-0/0/13 down down
-#ge-0/0/14 up up
-#ge-0/0/14.0 up up
+#ge-0/0/14 up down
+#ge-0/0/14.0 up down
 #ge-0/0/15 up up
 #ge-0/0/15.0 up up
 #fxp2 up up
Index: configs/lavern-public-schools.client.onenet.net
===================================================================
--- configs/lavern-public-schools.client.onenet.net	(revision 156565)
+++ configs/lavern-public-schools.client.onenet.net	(working copy)
@@ -110,7 +110,7 @@
 # 
 # grnoc-mon at LAVERN-PUBLIC-SCHOOLS-TAG-004351> show interface terse 
 #Interface Admin Link
-#ge-0/0/0 down up
+#ge-0/0/0 down down
 #gr-0/0/0 up up
 #ip-0/0/0 up up
 #lsq-0/0/0 up up
Index: configs/sayre-public-library-ex.client.onenet.net
===================================================================
--- configs/sayre-public-library-ex.client.onenet.net	(revision 156550)
+++ configs/sayre-public-library-ex.client.onenet.net	(working copy)
@@ -220,10 +220,10 @@
 #ge-0/0/10.0 up down
 #ge-0/0/11 up down
 #ge-0/0/11.0 up down
-#ge-0/0/12 up down
-#ge-0/0/12.0 up down
-#ge-0/0/13 up down
-#ge-0/0/13.0 up down
+#ge-0/0/12 up up
+#ge-0/0/12.0 up up
+#ge-0/0/13 up up
+#ge-0/0/13.0 up up
 #ge-0/0/14 up up
 #ge-0/0/14.0 up up
 #ge-0/0/15 up down
@@ -232,8 +232,8 @@
 #ge-0/0/16.0 up down
 #ge-0/0/17 up down
 #ge-0/0/17.0 up down
-#ge-0/0/18 up down
-#ge-0/0/18.0 up down
+#ge-0/0/18 up up
+#ge-0/0/18.0 up up
 #ge-0/0/19 up down
 #ge-0/0/19.0 up down
 #ge-0/0/20 up down
Index: configs/swi2-swink-elementary.client.onenet.net
===================================================================
--- configs/swi2-swink-elementary.client.onenet.net	(revision 156142)
+++ configs/swi2-swink-elementary.client.onenet.net	(working copy)
@@ -201,8 +201,8 @@
 #ge-0/0/0.0 up down
 #ge-0/0/1 up down
 #ge-0/0/1.0 up down
-#ge-0/0/2 up down
-#ge-0/0/2.0 up down
+#ge-0/0/2 up up
+#ge-0/0/2.0 up up
 #ge-0/0/3 up down
 #ge-0/0/3.0 up down
 #ge-0/0/4 up up
Index: configs/perkins-tyron-ps.client.onenet.net
===================================================================
--- configs/perkins-tyron-ps.client.onenet.net	(revision 156445)
+++ configs/perkins-tyron-ps.client.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at PERKINS-TYRON-PS-LR-005436> show system commit 
+#   2017-09-13 10:01:17 CDT by sky via cli
+#   2017-09-13 09:55:06 CDT by sky via cli
+#   2017-09-13 09:50:32 CDT by sky via cli
 #   2017-09-08 12:11:34 CDT by sky via cli
 #   2017-09-08 12:08:38 CDT by sky via cli
 #   2017-09-08 11:16:48 CDT by admin via cli
-#   2017-09-08 11:15:03 CDT by admin via cli
-#   2017-09-08 11:10:40 CDT by admin via cli
-#   2017-09-07 18:11:00 CDT by root via cli
 # grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  Routing Engine                 OK        
@@ -133,7 +133,7 @@
 # Time Source:  NTP CLOCK 
 # System booted: 2017-09-08 10:57 CDT 
 # Protocols started: 2017-09-08 10:57 CDT 
-# Last configured: 2017-09-08 12:11 CDT  by sky
+# Last configured: 2017-09-13 10:01 CDT  by sky
 # 
 # grnoc-mon at PERKINS-TYRON-PS-LR-005436> show interface terse 
 #Interface Admin Link
@@ -191,7 +191,7 @@
 #vlan up down
 #vtep up up
 # grnoc-mon at PERKINS-TYRON-PS-LR-005436> show configuration 
-## Last commit: 2017-09-08 12:11:34 CDT by sky
+## Last commit: 2017-09-13 10:01:17 CDT by sky
 version 15.1X49-D90.7;
 system {
     host-name PERKINS-TYRON-PS-LR-005436;
@@ -330,6 +330,11 @@
     config-button no-rescue no-clear;
 }
 security {
+    address-book {
+        global {
+            address host-10.10.0.12 10.10.0.12/32;
+        }
+    }
     screen {
         ids-option UNTRUST-SCREEN {
             icmp {
@@ -382,6 +387,23 @@
                 }
             }
         }
+        static {
+            rule-set UNTRUST-TO-TRUST {
+                from zone UNTRUST;
+                rule 164_058_025_140 {
+                    match {
+                        destination-address 164.58.25.140/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                10.10.0.12/32;
+                            }
+                        }
+                    }
+                }
+            }
+        }
     }
     policies {
         from-zone TRUST to-zone UNTRUST {
@@ -420,6 +442,18 @@
                 }
             }
         }
+        from-zone UNTRUST to-zone TRUST {
+            policy 201709130928 {
+                match {
+                    source-address any;
+                    destination-address host-10.10.0.12;
+                    application [ junos-http junos-https junos-ping ];
+                }
+                then {
+                    permit;
+                }
+            }
+        }
     }
     zones {
         security-zone TRUST {
Index: configs/core5.okc.onenet.net
===================================================================
--- configs/core5.okc.onenet.net	(revision 156565)
+++ configs/core5.okc.onenet.net	(working copy)
@@ -1,12 +1,12 @@
 # RANCID-CONTENT-TYPE: juniper
 #
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system commit 
+#   2017-09-13 09:53:06 CDT by sky via cli commit synchronize
 #   2017-09-12 22:53:09 CDT by andrew via cli commit synchronize
 #   2017-09-12 22:49:50 CDT by andrew via cli commit synchronize
 #   2017-09-12 22:05:26 CDT by joel via cli commit confirmed, rollback in 5mins synchronize
 #   2017-09-12 22:02:34 CDT by root via other
 #   2017-09-12 21:51:55 CDT by joel via cli commit confirmed, rollback in 10mins synchronize
-#   2017-09-12 14:07:56 CDT by sean via cli commit synchronize
 # grnoc-mon at OKC-CORE5-MX480-RE0> show chassis environment 
 # Class Item                           Status     Measurement
 # Temp  PEM 0                          OK        
@@ -562,7 +562,7 @@
 # grnoc-mon at OKC-CORE5-MX480-RE0> show system uptime 
 # System booted: 2016-10-12 08:16 CDT 
 # Protocols started: 2016-10-12 08:18 CDT 
-# Last configured: 2017-09-12 22:53 CDT  by andrew
+# Last configured: 2017-09-13 09:53 CDT  by sky
 # 
 # {master}
 # grnoc-mon at OKC-CORE5-MX480-RE0> show interface terse 
@@ -1414,7 +1414,7 @@
 #pp0 up up
 #tap up up
 # grnoc-mon at OKC-CORE5-MX480-RE0> show configuration 
-## Last commit: 2017-09-12 22:53:09 CDT by andrew
+## Last commit: 2017-09-13 09:53:06 CDT by sky
 version 13.3R9.13;
 groups {
     re0 {
@@ -10881,6 +10881,7 @@
         route 164.58.2.176/28 next-hop 156.110.34.193;
         route 164.58.3.128/28 next-hop 156.110.24.253;
         route 156.110.50.24/30 next-hop 172.23.5.66;
+        route 156.110.25.140/30 next-hop 164.58.2.101;
     }
     router-id 164.58.199.215;
     autonomous-system 5078;
@@ -22378,7 +22379,6 @@
 Address                  State     Interface      Time     Interval  Multiplier
 10.119.20.109            Up        xe-1/1/0.650   6.000     2.000        3   
 10.119.20.117            Up        xe-1/1/0.623   6.000     2.000        3   
-10.119.20.125            Up        xe-1/0/0.621   6.000     2.000        3   
 10.119.20.127            Up        xe-1/0/0.622   6.000     2.000        3   
 10.119.20.133            Up        xe-1/1/0.637   6.000     2.000        3   
 164.58.15.73             Up        xe-0/1/0.72    1.200     0.400        3   
@@ -22386,7 +22386,7 @@
 164.58.244.138           Up        ae1.42         1.200     0.400        3   
 164.58.244.147           Up        xe-2/1/1.500   1.200     0.400        3   
 
-9 sessions, 9 clients
-Cumulative transmit rate 12.5 pps, cumulative receive rate 12.5 pps
+8 sessions, 8 clients
+Cumulative transmit rate 12.0 pps, cumulative receive rate 12.0 pps
 
 {master}
Index: configs/odot-bartlesville-regmaint.client.onenet.net
===================================================================
--- configs/odot-bartlesville-regmaint.client.onenet.net	(revision 156565)
+++ configs/odot-bartlesville-regmaint.client.onenet.net	(working copy)
@@ -136,8 +136,8 @@
 #ge-0/0/3.0 up down
 #ge-0/0/4 up down
 #ge-0/0/4.0 up down
-#ge-0/0/5 up up
-#ge-0/0/5.0 up up
+#ge-0/0/5 up down
+#ge-0/0/5.0 up down
 #ge-0/0/6 up up
 #ge-0/0/6.0 up up
 #ge-0/0/7 up up



More information about the Nocrancid mailing list