[Nocrancid] autopop-onenet.net router config diffs

rancid at rancid.noc.onenet.net rancid at rancid.noc.onenet.net
Wed Sep 13 16:04:55 CDT 2017


Index: router.db
===================================================================
--- router.db	(revision 156573)
+++ router.db	(working copy)
@@ -641,7 +641,7 @@
 osrhe-chancellor-residence.client.onenet.net:juniper:up
 ou-schusterman.nid.onenet.net:fsp150:up
 panola-ps.client.onenet.net:juniper:up
-perkins-tyron-ps.client.onenet.net:juniper:up
+perkins-tryon-ps.client.onenet.net:juniper:up
 perry-ps.client.onenet.net:juniper:up
 piedmont-ps-ge112.nid.onenet.net:fsp150:up
 pioneer-pleasant-vale-ps.client.onenet.net:juniper:up
Index: routers.up
===================================================================
--- routers.up	(revision 156532)
+++ routers.up	(working copy)
@@ -527,7 +527,7 @@
 osrhe-chancellor-residence.client.onenet.net:juniper
 ou-schusterman.nid.onenet.net:fsp150
 panola-ps.client.onenet.net:juniper
-perkins-tyron-ps.client.onenet.net:juniper
+perkins-tryon-ps.client.onenet.net:juniper
 perry-ps.client.onenet.net:juniper
 piedmont-ps-ge112.nid.onenet.net:fsp150
 pioneer-pleasant-vale-ps.client.onenet.net:juniper
Index: configs/allen-public-library.client.onenet.net
===================================================================
--- configs/allen-public-library.client.onenet.net	(revision 156573)
+++ configs/allen-public-library.client.onenet.net	(working copy)
@@ -150,8 +150,8 @@
 #ge-0/0/1.0 up down
 #ge-0/0/2 up up
 #ge-0/0/2.0 up up
-#ge-0/0/3 up down
-#ge-0/0/3.0 up down
+#ge-0/0/3 up up
+#ge-0/0/3.0 up up
 #ge-0/0/4 up up
 #ge-0/0/4.0 up up
 #ge-0/0/5 up up
Index: configs/kiamichi-fmc-battiest.client.onenet.net
===================================================================
--- configs/kiamichi-fmc-battiest.client.onenet.net	(revision 156570)
+++ configs/kiamichi-fmc-battiest.client.onenet.net	(working copy)
@@ -187,7 +187,7 @@
 #ppd0 up up
 #ppe0 up up
 #st0 up up
-#st0.1 up up
+#st0.1 up down
 #st0.2 up up
 #tap up up
 #vlan up down
Index: configs/core3.okc-m120.onenet.net
===================================================================
--- configs/core3.okc-m120.onenet.net	(revision 156573)
+++ configs/core3.okc-m120.onenet.net	(working copy)
@@ -610,8 +610,8 @@
 #t1-2/3/0:2:16 down down
 #t1-2/3/0:2:17 up up
 #t1-2/3/0:2:17.0 up up
-#t1-2/3/0:2:18 up up
-#t1-2/3/0:2:18.0 up up
+#t1-2/3/0:2:18 up down
+#t1-2/3/0:2:18.0 up down
 #t1-2/3/0:2:19 up up
 #t1-2/3/0:2:19.0 up up
 #t1-2/3/0:2:20 down down
Index: configs/meeker-ps.client.onenet.net
===================================================================
--- configs/meeker-ps.client.onenet.net	(revision 156572)
+++ configs/meeker-ps.client.onenet.net	(working copy)
@@ -158,8 +158,8 @@
 #ge-0/0/11 down down
 #ge-0/0/12 down down
 #ge-0/0/13 down down
-#ge-0/0/14 up down
-#ge-0/0/14.0 up down
+#ge-0/0/14 up up
+#ge-0/0/14.0 up up
 #ge-0/0/15 up up
 #ge-0/0/15.0 up up
 #fxp2 up up
Index: configs/perkins-tryon-ps.client.onenet.net
===================================================================
--- configs/perkins-tryon-ps.client.onenet.net	(revision 156574)
+++ configs/perkins-tryon-ps.client.onenet.net	(working copy)
@@ -0,0 +1,751 @@
+# RANCID-CONTENT-TYPE: juniper
+#
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show system commit 
+#   2017-09-13 10:17:25 CDT by sky via cli
+#   2017-09-13 10:16:43 CDT by sky via cli
+#   2017-09-13 10:14:57 CDT by sky via cli
+#   2017-09-13 10:13:54 CDT by sky via cli commit confirmed, rollback in 10mins
+#   2017-09-13 10:01:17 CDT by sky via cli
+#   2017-09-13 09:55:06 CDT by sky via cli
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis environment 
+# Class Item                           Status     Measurement
+# Temp  Routing Engine                 OK        
+#       Routing Engine CPU             OK        
+# Fans  SRX340 Chassis fan 0           OK
+#       SRX340 Chassis fan 1           OK
+#       SRX340 Chassis fan 2           OK
+#       SRX340 Chassis fan 3           OK
+# Power Power Supply 0                 OK        
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis firmware 
+# Part                     Type       Version
+# FPC 0                    O/S        Version 15.1X49-D90.7 by builder on 2017-04-29 06:10:46 UTC
+# FWDD                     O/S        Version 15.1X49-D90.7 by builder on 2017-04-29 06:10:46 UTC
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis fpc detail 
+# Slot 0 information:
+#   State                               Online    
+#   Total CPU DRAM                      ---- CPU less FPC ----
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis hardware 
+# Hardware inventory:
+# Item             Version  Part number  Serial number     Description
+# Chassis                                CY2017AF0439      SRX340
+# Routing Engine   REV 0x08 650-065043   CY2017AF0439      RE-SRX340
+# FPC 0                                                    FPC
+#   PIC 0                                                  8xGE,8xGE SFP Base PIC
+# Power Supply 0  
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis hardware models 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis routing-engine 
+# Routing Engine status:
+#     Serial ID                      CY2017AF0439
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis scb 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis sfm detail
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show chassis ssb 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show system boot-messages 
+# kld_map_v: 0x8ff80000, kld_map_p: 0x0
+# Running in PARTITIONED TLB MODE
+# Copyright (c) 1996-2017, Juniper Networks, Inc.
+# All rights reserved.
+# Copyright (c) 1992-2007 The FreeBSD Project.
+# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
+# 	The Regents of the University of California. All rights reserved.
+# FreeBSD is a registered trademark of The FreeBSD Foundation.
+# can't re-use a leaf (debug)!
+# FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
+# Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot)
+# Security policy loaded: Junos MAC/veriexec (mac_veriexec)
+# Security policy loaded: JUNOS MAC/pcap (mac_pcap)
+# MAC/veriexec fingerprint module loaded: SHA256
+# MAC/veriexec fingerprint module loaded: SHA1
+# netisr_init: !debug_mpsafenet, forcing maxthreads from 4 to 1
+# cpu0 on motherboard
+# : CAVIUM's OCTEON 70XX/71XX CPU Rev. 0.2 with no FPU implemented
+#         L1 Cache: I size 78kb(128 line), D size 32kb(128 line), thirty two way.
+#         L2 Cache: Size 512kb, 4 way
+# obio0 on motherboard
+# uart0: <Octeon-16550 channel 0> on obio0
+# uart0: console (9600,n,8,1)
+# twsi0 on obio0
+# set clock 0x58
+# xhci0: <Cavium Octeon 7xxx xHCI Host Driver> on obio0
+# usb0: <USB bus for xHCI Controller> on xhci0
+# usb0: USB revision 3.0
+# uhub0: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1
+# uhub0: 2 ports with 2 removable, self powered
+# xhci1: <Cavium Octeon 7xxx xHCI Host Driver> on obio0
+# usb1: <USB bus for xHCI Controller> on xhci1
+# usb1: USB revision 3.0
+# uhub1: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1
+# uhub1: 2 ports with 2 removable, self powered
+# cpld0 on obio0
+# pcib0: <Cavium on-chip PCIe HOST bridge> on obio0
+# Disabling Octeon big bar support
+# pcib0: Initialized controller
+# pci0: <PCI bus> on pcib0
+# pci0: <network, ethernet> at device 0.0 (no driver attached)
+# pci0: <network, ethernet> at device 0.1 (no driver attached)
+# gblmem0 on obio0
+# octpkt0: <Octeon RGMII> on obio0
+# cfi0: <Macronix MX25L64 - 8MB> on obio0
+# cfi1: <Macronix MX25L64 - 8MB> on obio0
+# octagl0: <Octeon AGL> on obio0
+# umass0: ATP Electronics ATP CG eUSB, rev 2.00/11.00, addr 2
+# miibus0: <MII bus> on octagl0
+# brgphy0: <BCM54616S 10/100/1000baseTX PHY> on miibus0
+# brgphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
+# Timecounter "mips" frequency 1200000000 Hz quality 0
+# Registered AMT tunnel Encap with UDP Tunnel!
+#  Loading Redundant LT driver
+# ###PCB Group initialized for udppcbgroup
+# ###PCB Group initialized for tcppcbgroup
+# Kernel thread "wkupdaemon" (pid 48) exited prematurely.
+# da0 at umass-sim0 bus 0 target 0 lun 0
+# da0: <ATP ATP CG eUSB 1100> Fixed Direct Access SCSI-4 device
+# da0: 40.000MB/s transfers
+# da0: 7672MB (15712256 512 byte sectors: 255H 63S/T 978C)
+# Trying to mount root from ufs:/dev/da0s2a
+# 
+# LPC bus driver
+# lpcbus0 on cpld0
+# tpm0: <Trusted Platform Module> on lpcbus0
+# tpm: IFX SLB 9660 TT 1.2 rev 0x10
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show version 
+# Hostname: PERKINS-TYRON-PS-LR-005436 
+# Model: srx340 
+# Junos: 15.1X49-D90.7 
+# JUNOS Software Release [15.1X49-D90.7] 
+#  
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show version invoke-on all-routing-engines 
+# Hostname: PERKINS-TYRON-PS-LR-005436 
+# Model: srx340 
+# Junos: 15.1X49-D90.7 
+# JUNOS Software Release [15.1X49-D90.7] 
+#  
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> file list /var/tmp detail 
+# lrw-r--r--  1 root  wheel         11 Apr 29 02:34 /var/tmp@ -> /cf/var/tmp
+# total files: 1
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show system uptime 
+# Time Source:  NTP CLOCK 
+# System booted: 2017-09-08 10:57 CDT 
+# Protocols started: 2017-09-08 10:57 CDT 
+# Last configured: 2017-09-13 10:17 CDT  by sky
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show interface terse 
+#Interface Admin Link
+#ge-0/0/0 up up
+#ge-0/0/0.0 up up
+#gr-0/0/0 up up
+#ip-0/0/0 up up
+#lsq-0/0/0 up up
+#lt-0/0/0 up up
+#mt-0/0/0 up up
+#sp-0/0/0 up up
+#sp-0/0/0.0 up up
+#sp-0/0/0.16383 up up
+#ge-0/0/1 up down
+#ge-0/0/1.0 up down
+#ge-0/0/2 down down
+#ge-0/0/3 down down
+#ge-0/0/4 down down
+#ge-0/0/5 down down
+#ge-0/0/6 up up
+#ge-0/0/6.0 up up
+#ge-0/0/7 up up
+#ge-0/0/7.0 up up
+#ge-0/0/8 down down
+#ge-0/0/9 down down
+#ge-0/0/10 down down
+#ge-0/0/11 down down
+#ge-0/0/12 down down
+#ge-0/0/13 down down
+#ge-0/0/14 down down
+#ge-0/0/15 down down
+#fxp0 down down
+#fxp2 up up
+#fxp2.0 up up
+#gre up up
+#ipip up up
+#irb up up
+#irb.999 up down
+#jsrv up up
+#jsrv.1 up up
+#lo0 up up
+#lo0.0 up up
+#lo0.16384 up up
+#lo0.16385 up up
+#lo0.32768 up up
+#lsi up up
+#mtun up up
+#pimd up up
+#pime up up
+#pp0 up up
+#ppd0 up up
+#ppe0 up up
+#st0 up up
+#tap up up
+#vlan up down
+#vtep up up
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show configuration 
+## Last commit: 2017-09-13 10:17:25 CDT by sky
+version 15.1X49-D90.7;
+system {
+    host-name PERKINS-TYRON-PS-LR-005436;
+    auto-snapshot;
+    domain-name onenet.net;
+    time-zone America/Chicago;
+    authentication-order [ radius password ];
+    ports {
+        console log-out-on-disconnect;
+    }
+    root-authentication {
+#        encrypted-password <removed>;
+    }
+    name-server {
+        164.58.200.200;
+        156.110.200.200;
+    }
+    radius-server {
+        156.110.31.11 {
+#            secret "<removed>"; ## SECRET-DATA
+            source-address 164.58.2.101;
+        }
+    }
+    radius-options {
+        attributes {
+            nas-ip-address 164.58.2.101;
+        }
+    }
+    login {
+        message "\n+----------------------------------------------------------------------------+\n|                                                                            |\n|            Managed by Oklahoma State Regents for Higher Education          |\n|             Oklahoma Network for Education Enrichment  (ONENET)            |\n|                                                                            |\n|               *** Unauthorized Use or Access Prohibited ***                |\n|                                                                            |\n|                       For more information, contact:                       |\n|                                                                            |\n|                Oklahoma State Regents for Higher Education                 |\n|              Educational Telecommunications Network -- ONENET              |\n|                               (888) 566-3638                               |\n|        !
                        info at onenet.net                              |\n|                                                                            |\n+----------------------------------------------------------------------------+\n";
+        class admin {
+            idle-timeout 30;
+            permissions all;
+        }
+        class customer-admin {
+            idle-timeout 30;
+            permissions all;
+            deny-commands "load|shell";
+            deny-configuration "(system login)|(system root-authentication)";
+        }
+        class lockdown {
+            idle-timeout 2;
+            permissions view;
+            deny-commands .*;
+            deny-configuration .*;
+        }
+        class operator-local {
+            idle-timeout 15;
+            permissions [ access admin configure firewall interface network routing snmp system trace view ];
+            allow-commands "show log messages";
+        }
+        class robot {
+            idle-timeout 10;
+            permissions [ admin configure firewall interface routing secret security snmp system trace view ];
+        }
+        user admin {
+            uid 1000;
+            class super-user;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user client {
+            uid 2000;
+            class customer-admin;
+            authentication {
+#                encrypted-password <removed>;
+            }
+        }
+        user eng {
+            uid 2018;
+            class admin;
+        }
+        user rancid {
+            uid 2001;
+            class robot;
+        }
+        user remote {
+            uid 2002;
+            class operator-local;
+        }
+        user upgrades {
+            uid 2003;
+            class operator;
+            authentication {
+#                ssh-rsa <removed>;
+            }
+        }
+    }
+    services {
+        ssh {
+            root-login deny;
+            protocol-version v2;
+        }
+        dhcp-local-server {
+            group TEST-DHCP {
+                interface irb.999;
+            }
+            group TRUST-DHCP {
+                interface ge-0/0/7.0;
+            }
+        }
+    }
+    syslog {
+        archive size 10m files 5;
+        user * {
+            any emergency;
+        }
+        file messages {
+            any notice;
+            authorization info;
+        }
+        file interactive-commands {
+            interactive-commands any;
+        }
+        file PROTECT-RE {
+            firewall any;
+            archive no-world-readable;
+        }
+        file traffic {
+            any any;
+            match RT_FLOW_SESSION;
+        }
+        file updown {
+            any any;
+            match "SNMP_TRAP_LINK_|(TRAP_LINK)|bgp_rt_maxprefixes_check|RPD_BGP_NEIGHBOR_STATE";
+        }
+    }
+    max-configurations-on-flash 20;
+    max-configuration-rollbacks 20;
+    ntp {
+        server 164.58.3.98 prefer;
+    }
+}
+chassis {
+    config-button no-rescue no-clear;
+}
+security {
+    address-book {
+        global {
+            address host-10.10.0.12 10.10.0.12/32;
+        }
+    }
+    screen {
+        ids-option UNTRUST-SCREEN {
+            icmp {
+                ping-death;
+            }
+            ip {
+                source-route-option;
+                tear-drop;
+            }
+            tcp {
+                syn-flood {
+                    alarm-threshold 1024;
+                    attack-threshold 200;
+                    source-threshold 1024;
+                    destination-threshold 2048;
+                    timeout 20;
+                }
+                land;
+            }
+        }
+    }
+    nat {
+        source {
+            rule-set TRUST-TO-UNTRUST-NAT {
+                from zone TRUST;
+                to zone UNTRUST;
+                rule NAT-TRUST-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
+            rule-set TEST-TO-UNTRUST-NAT {
+                from zone TEST;
+                to zone UNTRUST;
+                rule NAT-TEST-TO-UNTRUST {
+                    match {
+                        source-address 0.0.0.0/0;
+                    }
+                    then {
+                        source-nat {
+                            interface;
+                        }
+                    }
+                }
+            }
+        }
+        static {
+            rule-set UNTRUST-TO-TRUST {
+                from zone UNTRUST;
+                rule 156_110_25_140 {
+                    match {
+                        destination-address 156.110.25.140/32;
+                    }
+                    then {
+                        static-nat {
+                            prefix {
+                                10.10.0.12/32;
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }
+    policies {
+        from-zone TRUST to-zone UNTRUST {
+            policy TRUST-TO-UNTRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone TEST to-zone UNTRUST {
+            policy ALLOW-ALL-OUT {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone UNTRUST to-zone UNTRUST {
+            policy UNTRUST-TO-UNTRUST {
+                match {
+                    source-address any;
+                    destination-address any;
+                    application any;
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+        from-zone UNTRUST to-zone TRUST {
+            policy 201709130928 {
+                match {
+                    source-address any;
+                    destination-address host-10.10.0.12;
+                    application [ junos-http junos-https junos-ping ];
+                }
+                then {
+                    permit;
+                }
+            }
+        }
+    }
+    zones {
+        security-zone TRUST {
+            interfaces {
+                ge-0/0/7.0 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone TEST {
+            interfaces {
+                irb.999 {
+                    host-inbound-traffic {
+                        system-services {
+                            dhcp;
+                            ping;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+        security-zone UNTRUST {
+            screen UNTRUST-SCREEN;
+            interfaces {
+                ge-0/0/0.0 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            snmp;
+                            ssh;
+                            traceroute;
+                        }
+                    }
+                }
+                ge-0/0/6.0 {
+                    host-inbound-traffic {
+                        system-services {
+                            ping;
+                            snmp;
+                            ssh;
+                            traceroute;
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+interfaces {
+    ge-0/0/0 {
+        description "L3 INTERFACE - UNTRUST-WAN - 164.58.2.101/31";
+        unit 0 {
+            family inet {
+                address 164.58.2.101/31;
+            }
+        }
+    }
+    ge-0/0/1 {
+        description "L2 INTERFACE - TEST-VLAN";
+        unit 0 {
+            family ethernet-switching {
+                interface-mode access;
+                vlan {
+                    members TEST-VLAN;
+                }
+            }
+        }
+    }
+    ge-0/0/2 {
+        disable;
+    }
+    ge-0/0/3 {
+        disable;
+    }
+    ge-0/0/4 {
+        disable;
+    }
+    ge-0/0/5 {
+        disable;
+    }
+    ge-0/0/6 {
+        description "L3 INTERFACE - UNTRUST-DMZ";
+        unit 0 {
+            family inet {
+                address 164.58.148.25/29;
+            }
+        }
+    }
+    ge-0/0/7 {
+        description "L3 INTERFACE - TRUST-VLAN - 10.10.0.1/16";
+        unit 0 {
+            family inet {
+                address 10.10.0.254/16;
+            }
+        }
+    }
+    ge-0/0/8 {
+        disable;
+    }
+    ge-0/0/9 {
+        disable;
+    }
+    ge-0/0/10 {
+        disable;
+    }
+    ge-0/0/11 {
+        disable;
+    }
+    ge-0/0/12 {
+        disable;
+    }
+    ge-0/0/13 {
+        disable;
+    }
+    ge-0/0/14 {
+        disable;
+    }
+    ge-0/0/15 {
+        disable;
+    }
+    fxp0 {
+        disable;
+    }
+    irb {
+        unit 999 {
+            description "L3 INTERFACE - TEST-VLAN - 10.1.0.1/24";
+            family inet {
+                address 10.1.0.1/24;
+            }
+        }
+    }
+    protect: lo0 {
+        unit 0 {
+            family inet {
+                filter {
+                    input PROTECT-RE;
+                }
+            }
+        }
+    }
+}
+snmp {
+    description OneNet-SRX300-Template-3.0.0;
+    contact "Net Group - (888)566-3638";
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-only;
+    }
+    community "<removed>" {
+        authorization read-write;
+    }
+}
+routing-options {
+    static {
+        route 0.0.0.0/0 next-hop 164.58.2.100;
+    }
+}
+protocols {
+    l2-learning {
+        global-mode switching;
+    }
+}
+policy-options {
+    protect: prefix-list PRE-MGMT-SOURCES {
+        156.110.31.0/27;
+        156.110.31.32/28;
+        164.58.253.0/24;
+    }
+    protect: prefix-list PRE-LOCALIPv4-SOURCES {
+        apply-path "interfaces <*> unit <*> family inet address <*>";
+    }
+}
+firewall {
+    family inet {
+        protect: filter PROTECT-RE {
+            term SSH-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then accept;
+            }
+            term SNMP-ALLOW {
+                from {
+                    source-prefix-list {
+                        PRE-MGMT-SOURCES;
+                        PRE-LOCALIPv4-SOURCES;
+                    }
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then accept;
+            }
+            term SSH-DENY {
+                from {
+                    protocol tcp;
+                    destination-port ssh;
+                }
+                then {
+                    discard;
+                }
+            }
+            term SNMP-DENY {
+                from {
+                    protocol udp;
+                    destination-port snmp;
+                }
+                then {
+                    discard;
+                }
+            }
+            term ALL-TRAFFIC {
+                then accept;
+            }
+        }
+    }
+}
+access {
+    address-assignment {
+        pool TEST-POOL {
+            family inet {
+                network 10.1.0.0/24;
+                range TEST-RANGE {
+                    low 10.1.0.10;
+                    high 10.1.0.250;
+                }
+                dhcp-attributes {
+                    domain-name test.local;
+                    name-server {
+                        164.58.200.200;
+                        156.110.200.200;
+                    }
+                    router {
+                        10.1.0.1;
+                    }
+                }
+            }
+        }
+        pool TRUST-POOL {
+            family inet {
+                network 10.10.0.0/16;
+                range TRUST-RANGE {
+                    low 10.10.1.0;
+                    high 10.10.6.255;
+                }
+                dhcp-attributes {
+                    domain-name onenet.net;
+                    name-server {
+                        10.10.0.8;
+                        10.10.0.6;
+                    }
+                    router {
+                        10.10.0.254;
+                    }
+                }
+            }
+        }
+    }
+}
+switch-options {
+    interface ge-0/0/1.0 {
+        interface-mac-limit {
+            3;
+            packet-action drop;
+        }
+    }
+}
+vlans {
+    TEST-VLAN {
+        description "Test VLAN 999 for TESTING ONLY";
+        vlan-id 999;
+        l3-interface irb.999;
+    }
+}
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show ospf neighbor 
+# OSPF instance is not running
+# 
+# grnoc-mon at PERKINS-TYRON-PS-LR-005436> show bfd session 
+
+0 sessions, 0 clients
+Cumulative transmit rate 0.0 pps, cumulative receive rate 0.0 pps
+
Index: routers.all
===================================================================
--- routers.all	(revision 156532)
+++ routers.all	(working copy)
@@ -666,7 +666,7 @@
 osrhe-chancellor-residence.client.onenet.net:juniper
 ou-schusterman.nid.onenet.net:fsp150
 panola-ps.client.onenet.net:juniper
-perkins-tyron-ps.client.onenet.net:juniper
+perkins-tryon-ps.client.onenet.net:juniper
 perry-ps.client.onenet.net:juniper
 piedmont-ps-ge112.nid.onenet.net:fsp150
 pioneer-pleasant-vale-ps.client.onenet.net:juniper



More information about the Nocrancid mailing list