diff options
| -rw-r--r-- | examples/tg19/netconf/e69-4.conf | 338 | ||||
| -rw-r--r-- | examples/tg19/netconf/e9-4.conf | 338 | ||||
| -rw-r--r-- | examples/tg19/netconf/r1.noc.conf | 3495 | ||||
| -rw-r--r-- | examples/tg19/netconf/r1.ring-l2.conf | 2980 | ||||
| -rw-r--r-- | examples/tg19/netconf/r1.ring-l3.conf | 2974 | ||||
| -rw-r--r-- | examples/tg19/netconf/r1.stand.conf | 659 | ||||
| -rw-r--r-- | examples/tg19/netconf/r1.tele.conf | 1035 | ||||
| -rw-r--r-- | examples/tg19/netconf/s1.cna.conf | 338 | ||||
| -rw-r--r-- | examples/tg19/netconf/s1.floor.conf | 1909 | ||||
| -rw-r--r-- | examples/tg19/netconf/s1.wifi.conf | 334 | ||||
| -rw-r--r-- | examples/tg19/netconf/s2.floor.conf | 1903 | ||||
| -rwxr-xr-x | tools/strip-netconf.sh | 19 |
12 files changed, 16310 insertions, 12 deletions
diff --git a/examples/tg19/netconf/e69-4.conf b/examples/tg19/netconf/e69-4.conf new file mode 100644 index 0000000..c8bce33 --- /dev/null +++ b/examples/tg19/netconf/e69-4.conf @@ -0,0 +1,338 @@ +## Last changed: 2019-04-17 16:58:03 CEST +version 15.1R6.7; +system { + host-name e69-4; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 2; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + interface-range edge-ports { + member-range ge-0/0/0 to ge-0/0/43; + description Clients; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + interface-range uplink-ports { + member-range ge-0/0/44 to ge-0/0/46; + description "G: s6.floor"; + ether-options { + 802.3ad ae0; + } + } + interface-range unused-ports { + member ge-0/0/47; + description not-in-use; + } + ae0 { + description "B: s6.floor"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ clients mgmt ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + } + } + } + vlan { + unit 666 { + description "Switch mgmt"; + family inet { + filter { + input mgmt-v4; + } + address 88.92.1.77/26; + } + family inet6 { + filter { + input mgmt-v6; + } + address 2a06:5841:d:6::77/64; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +routing-options { + rib inet.0 { + static { + route 0.0.0.0/0 next-hop 88.92.1.65; + } + } + rib inet6.0 { + static { + route ::/0 next-hop 2a06:5841:d:6::1; + } + } +} +protocols { + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + igmp-snooping { + vlan all { + version 3; + immediate-leave; + } + } + inactive: mld-snooping { + vlan all { + version 2; + immediate-leave; + } + } + rstp { + bridge-priority 32k; + interface edge-ports { + edge; + no-root-port; + } + } + lldp { + interface uplink-ports; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +ethernet-switching-options { + secure-access-port { + interface edge-ports { + no-dhcp-trusted; + } + vlan clients { + arp-inspection; + examine-dhcp; + examine-dhcpv6; + neighbor-discovery-inspection; + ip-source-guard; + ipv6-source-guard; + dhcp-option82 { + circuit-id { + use-vlan-id; + } + } + no-option-37; + inactive: dhcpv6-option18 { + use-option-82; + } + } + ipv6-source-guard-sessions { + max-number 128; + } + } + storm-control { + action-shutdown; + interface edge-ports { + bandwidth 20000; + multicast; + } + } +} +vlans { + clients { + vlan-id 1694; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface all; +} diff --git a/examples/tg19/netconf/e9-4.conf b/examples/tg19/netconf/e9-4.conf new file mode 100644 index 0000000..c436f0a --- /dev/null +++ b/examples/tg19/netconf/e9-4.conf @@ -0,0 +1,338 @@ +## Last changed: 2019-04-17 16:42:56 CEST +version 15.1R6.7; +system { + host-name e9-4; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 2; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + interface-range edge-ports { + member-range ge-0/0/0 to ge-0/0/43; + description Clients; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + interface-range uplink-ports { + member-range ge-0/0/44 to ge-0/0/46; + description "G: s1.floor"; + ether-options { + 802.3ad ae0; + } + } + interface-range unused-ports { + member ge-0/0/47; + description not-in-use; + } + ae0 { + description "B: s1.floor"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ clients mgmt ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + } + } + } + vlan { + unit 666 { + description "Switch mgmt"; + family inet { + filter { + input mgmt-v4; + } + address 88.92.0.5/26; + } + family inet6 { + filter { + input mgmt-v6; + } + address 2a06:5841:d:1::5/64; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +routing-options { + rib inet.0 { + static { + route 0.0.0.0/0 next-hop 88.92.0.1; + } + } + rib inet6.0 { + static { + route ::/0 next-hop 2a06:5841:d:1::1; + } + } +} +protocols { + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + igmp-snooping { + vlan all { + version 3; + immediate-leave; + } + } + inactive: mld-snooping { + vlan all { + version 2; + immediate-leave; + } + } + rstp { + bridge-priority 32k; + interface edge-ports { + edge; + no-root-port; + } + } + lldp { + interface uplink-ports; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +ethernet-switching-options { + secure-access-port { + interface edge-ports { + no-dhcp-trusted; + } + vlan clients { + arp-inspection; + examine-dhcp; + examine-dhcpv6; + neighbor-discovery-inspection; + ip-source-guard; + ipv6-source-guard; + dhcp-option82 { + circuit-id { + use-vlan-id; + } + } + no-option-37; + inactive: dhcpv6-option18 { + use-option-82; + } + } + ipv6-source-guard-sessions { + max-number 128; + } + } + storm-control { + action-shutdown; + interface edge-ports { + bandwidth 20000; + multicast; + } + } +} +vlans { + clients { + vlan-id 1094; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface all; +} diff --git a/examples/tg19/netconf/r1.noc.conf b/examples/tg19/netconf/r1.noc.conf new file mode 100644 index 0000000..5a6745e --- /dev/null +++ b/examples/tg19/netconf/r1.noc.conf @@ -0,0 +1,3495 @@ +## Last changed: 2019-04-18 19:18:49 CEST +version 17.3R3.10; +groups { + re0 { + system { + host-name r1.noc; + } + } + re1 { + system { + host-name r1.noc; + } + } +} +system { + host-name r1.noc; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + match "!(.*License.*)"; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 40; + } + } + fpc 2 { + pic 0 { + pic-mode 10G; + } + pic 1 { + power off; + } + pic 2 { + pic-mode 40G; + power off; + } + pic 3 { + pic-mode 40G; + } + } + fpc 3 { + pic 0 { + pic-mode 10G; + } + pic 1 { + power off; + } + pic 2 { + pic-mode 40G; + power off; + } + pic 3 { + pic-mode 40G; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } + network-services enhanced-ip; +} +services { + analytics { + streaming-server telemetry_server { + remote-address 185.110.149.4; + remote-port 5015; + } + export-profile export_20300 { + local-address 185.110.148.67; + local-port 20300; + reporting-rate 2; + format gpb; + transport udp; + } + export-profile export_20301 { + local-address 185.110.148.67; + local-port 20302; + reporting-rate 60; + format gpb; + transport udp; + } + export-profile export_20302 { + local-address 185.110.148.67; + local-port 20302; + reporting-rate 60; + format gpb; + transport udp; + } + export-profile export_20303 { + local-address 185.110.148.67; + local-port 20303; + reporting-rate 60; + format gpb; + transport udp; + } + export-profile export_20304 { + local-address 185.110.148.67; + local-port 20304; + reporting-rate 60; + format gpb; + transport udp; + } + sensor junos_system_linecard_optics { + server-name telemetry_server; + export-name export_20300; + resource /junos/system/linecard/optics/; + } + sensor junos_system_linecard_intf-exp { + server-name telemetry_server; + export-name export_20301; + resource /junos/system/linecard/intf-exp/; + } + sensor junos_system_linecard_interface { + server-name telemetry_server; + export-name export_20302; + resource /junos/system/linecard/interface/; + } + sensor junos_system_linecard_interface_logical_usage { + server-name telemetry_server; + export-name export_20303; + resource /junos/system/linecard/interface/logical/usage/; + } + sensor junos_system_linecard_packet_usage { + server-name telemetry_server; + export-name export_20304; + resource /junos/system/linecard/packet/usage/; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + xe-2/0/0 { + description "G: s1.floor xe-0/1/1"; + gigether-options { + 802.3ad ae11; + } + } + xe-2/0/1 { + description "G: s2.floor xe-0/1/1"; + gigether-options { + 802.3ad ae12; + } + } + xe-2/0/2 { + description "G: s3.floor xe-0/1/1"; + gigether-options { + 802.3ad ae13; + } + } + xe-2/0/3 { + description "G: s4.floor xe-0/1/1"; + gigether-options { + 802.3ad ae14; + } + } + xe-2/0/4 { + description "G: s5.floor xe-0/1/1"; + gigether-options { + 802.3ad ae15; + } + } + xe-2/0/5 { + description "G: s6.floor xe-0/1/1"; + gigether-options { + 802.3ad ae16; + } + } + xe-2/0/6 { + description "G: s7.floor xe-0/1/1"; + gigether-options { + 802.3ad ae17; + } + } + xe-2/0/7 { + description "G: s8.floor xe-0/1/1"; + gigether-options { + 802.3ad ae18; + } + } + xe-2/0/8 { + description "G: s9.floor xe-0/1/1"; + gigether-options { + 802.3ad ae19; + } + } + xe-2/0/10 { + description "C: cornsnake access"; + flexible-vlan-tagging; + native-vlan-id 100; + encapsulation flexible-ethernet-services; + unit 100 { + description "C: cornsnake access"; + vlan-tags outer 100; + family inet { + address 88.92.127.253/30; + } + family inet6 { + address 2a06:5841:fffe:feef::1/64; + } + } + } + et-2/3/0 { + description "G: r1.stand et-2/0/50"; + gigether-options { + 802.3ad ae1; + } + } + et-2/3/1 { + description "G: r1.tele xe-0/0/51"; + gigether-options { + 802.3ad ae0; + } + } + xe-3/0/0 { + description "G: s1.floor xe-1/1/1"; + gigether-options { + 802.3ad ae11; + } + } + xe-3/0/1 { + description "G: s2.floor xe-1/1/1"; + gigether-options { + 802.3ad ae12; + } + } + xe-3/0/2 { + description "G: s3.floor xe-1/1/1"; + gigether-options { + 802.3ad ae13; + } + } + xe-3/0/3 { + description "G: s4.floor xe-1/1/1"; + gigether-options { + 802.3ad ae14; + } + } + xe-3/0/4 { + description "G: s5.floor xe-1/1/1"; + gigether-options { + 802.3ad ae15; + } + } + xe-3/0/5 { + description "G: s6.floor xe-1/1/1"; + gigether-options { + 802.3ad ae16; + } + } + xe-3/0/6 { + description "G: s7.floor xe-1/1/1"; + gigether-options { + 802.3ad ae17; + } + } + xe-3/0/7 { + description "G: s8.floor xe-1/1/1"; + gigether-options { + 802.3ad ae18; + } + } + xe-3/0/8 { + description "G: s9.floor xe-1/1/1"; + gigether-options { + 802.3ad ae19; + } + } + et-3/3/0 { + description "G: r1.stand et-0/0/50"; + gigether-options { + 802.3ad ae1; + } + } + et-3/3/1 { + description "G: r1.tele xe-1/0/51"; + gigether-options { + 802.3ad ae0; + } + } + et-3/3/2 { + description "B: r1.ring et-6/0/27"; + unit 0 { + family inet { + address 185.110.148.137/31; + } + family inet6 { + address 2a06:5841:f:f05::1/127; + } + } + } + ae0 { + description "B: r1.tele (ae2)"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 185.110.148.135/31; + } + family inet6 { + address 2a06:5841:f:f04::1/127; + } + } + } + ae1 { + description "B: r1.stand (ae0)"; + unit 0 { + family inet { + address 185.110.148.160/31; + } + family inet6 { + address 2a06:5841:f:f11::/127; + } + } + } + ae11 { + description "B: s1.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 888 { + description "L: mgmt: s1.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.142/31; + } + family inet6 { + address 2a06:5841:f:f08::/127; + } + } + unit 1073 { + description "C: e7-3 - VLAN 1073"; + no-traps; + vlan-tags outer 1073; + family inet { + mtu 1500; + no-redirects; + address 88.92.80.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:73::1/64; + } + } + unit 1074 { + description "C: e7-4 - VLAN 1074"; + no-traps; + vlan-tags outer 1074; + family inet { + mtu 1500; + no-redirects; + address 88.92.80.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:74::1/64; + } + } + unit 1093 { + description "C: e9-3 - VLAN 1093"; + no-traps; + vlan-tags outer 1093; + family inet { + mtu 1500; + no-redirects; + address 88.92.81.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:93::1/64; + } + } + unit 1094 { + description "C: e9-4 - VLAN 1094"; + no-traps; + vlan-tags outer 1094; + family inet { + mtu 1500; + no-redirects; + address 88.92.81.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:94::1/64; + } + } + unit 1113 { + description "C: e11-3 - VLAN 1113"; + no-traps; + vlan-tags outer 1113; + family inet { + mtu 1500; + no-redirects; + address 88.92.82.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:113::1/64; + } + } + unit 1114 { + description "C: e11-4 - VLAN 1114"; + no-traps; + vlan-tags outer 1114; + family inet { + mtu 1500; + no-redirects; + address 88.92.82.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:114::1/64; + } + } + unit 1133 { + description "C: e13-3 - VLAN 1133"; + no-traps; + vlan-tags outer 1133; + family inet { + mtu 1500; + no-redirects; + address 88.92.83.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:133::1/64; + } + } + unit 1134 { + description "C: e13-4 - VLAN 1134"; + no-traps; + vlan-tags outer 1134; + family inet { + mtu 1500; + no-redirects; + address 88.92.83.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:134::1/64; + } + } + unit 1153 { + description "C: e15-3 - VLAN 1153"; + no-traps; + vlan-tags outer 1153; + family inet { + mtu 1500; + no-redirects; + address 88.92.84.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:153::1/64; + } + } + unit 1154 { + description "C: e15-4 - VLAN 1154"; + no-traps; + vlan-tags outer 1154; + family inet { + mtu 1500; + no-redirects; + address 88.92.84.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:154::1/64; + } + } + unit 1173 { + description "C: e17-3 - VLAN 1173"; + no-traps; + vlan-tags outer 1173; + family inet { + mtu 1500; + no-redirects; + address 88.92.85.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:173::1/64; + } + } + unit 1174 { + description "C: e17-4 - VLAN 1174"; + no-traps; + vlan-tags outer 1174; + family inet { + mtu 1500; + no-redirects; + address 88.92.85.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:174::1/64; + } + } + unit 1193 { + description "C: e19-3 - VLAN 1193"; + no-traps; + vlan-tags outer 1193; + family inet { + mtu 1500; + no-redirects; + address 88.92.86.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:193::1/64; + } + } + unit 1194 { + description "C: e19-4 - VLAN 1194"; + no-traps; + vlan-tags outer 1194; + family inet { + mtu 1500; + no-redirects; + address 88.92.86.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:194::1/64; + } + } + unit 1213 { + description "C: e21-3 - VLAN 1213"; + no-traps; + vlan-tags outer 1213; + family inet { + mtu 1500; + no-redirects; + address 88.92.87.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:213::1/64; + } + } + unit 1214 { + description "C: e21-4 - VLAN 1214"; + no-traps; + vlan-tags outer 1214; + family inet { + mtu 1500; + no-redirects; + address 88.92.87.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:214::1/64; + } + } + unit 1233 { + description "C: e23-3 - VLAN 1233"; + no-traps; + vlan-tags outer 1233; + family inet { + mtu 1500; + no-redirects; + address 88.92.88.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:233::1/64; + } + } + unit 1234 { + description "C: e23-4 - VLAN 1234"; + no-traps; + vlan-tags outer 1234; + family inet { + mtu 1500; + no-redirects; + address 88.92.88.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:234::1/64; + } + } + } + ae12 { + description "B: s2.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 888 { + description "L: mgmt: s2.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.144/31; + } + family inet6 { + address 2a06:5841:f:f09::/127; + } + } + unit 1071 { + description "C: e7-1 - VLAN 1071"; + no-traps; + vlan-tags outer 1071; + family inet { + mtu 1500; + no-redirects; + address 88.92.80.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:71::1/64; + } + } + unit 1072 { + description "C: e7-2 - VLAN 1072"; + no-traps; + vlan-tags outer 1072; + family inet { + mtu 1500; + no-redirects; + address 88.92.80.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:72::1/64; + } + } + unit 1091 { + description "C: e9-1 - VLAN 1091"; + no-traps; + vlan-tags outer 1091; + family inet { + mtu 1500; + no-redirects; + address 88.92.81.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:91::1/64; + } + } + unit 1092 { + description "C: e9-2 - VLAN 1092"; + no-traps; + vlan-tags outer 1092; + family inet { + mtu 1500; + no-redirects; + address 88.92.81.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:92::1/64; + } + } + unit 1111 { + description "C: e11-1 - VLAN 1111"; + no-traps; + vlan-tags outer 1111; + family inet { + mtu 1500; + no-redirects; + address 88.92.82.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:111::1/64; + } + } + unit 1112 { + description "C: e11-2 - VLAN 1112"; + no-traps; + vlan-tags outer 1112; + family inet { + mtu 1500; + no-redirects; + address 88.92.82.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:112::1/64; + } + } + unit 1131 { + description "C: e13-1 - VLAN 1131"; + no-traps; + vlan-tags outer 1131; + family inet { + mtu 1500; + no-redirects; + address 88.92.83.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:131::1/64; + } + } + unit 1132 { + description "C: e13-2 - VLAN 1132"; + no-traps; + vlan-tags outer 1132; + family inet { + mtu 1500; + no-redirects; + address 88.92.83.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:132::1/64; + } + } + unit 1151 { + description "C: e15-1 - VLAN 1151"; + no-traps; + vlan-tags outer 1151; + family inet { + mtu 1500; + no-redirects; + address 88.92.84.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:151::1/64; + } + } + unit 1152 { + description "C: e15-2 - VLAN 1152"; + no-traps; + vlan-tags outer 1152; + family inet { + mtu 1500; + no-redirects; + address 88.92.84.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:152::1/64; + } + } + unit 1171 { + description "C: e17-1 - VLAN 1171"; + no-traps; + vlan-tags outer 1171; + family inet { + mtu 1500; + no-redirects; + address 88.92.85.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:171::1/64; + } + } + unit 1172 { + description "C: e17-2 - VLAN 1172"; + no-traps; + vlan-tags outer 1172; + family inet { + mtu 1500; + no-redirects; + address 88.92.85.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:172::1/64; + } + } + unit 1191 { + description "C: e19-1 - VLAN 1191"; + no-traps; + vlan-tags outer 1191; + family inet { + mtu 1500; + no-redirects; + address 88.92.86.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:191::1/64; + } + } + unit 1192 { + description "C: e19-2 - VLAN 1192"; + no-traps; + vlan-tags outer 1192; + family inet { + mtu 1500; + no-redirects; + address 88.92.86.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:192::1/64; + } + } + unit 1211 { + description "C: e21-1 - VLAN 1211"; + no-traps; + vlan-tags outer 1211; + family inet { + mtu 1500; + no-redirects; + address 88.92.87.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:211::1/64; + } + } + unit 1212 { + description "C: e21-2 - VLAN 1212"; + no-traps; + vlan-tags outer 1212; + family inet { + mtu 1500; + no-redirects; + address 88.92.87.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:212::1/64; + } + } + unit 1231 { + description "C: e23-1 - VLAN 1231"; + no-traps; + vlan-tags outer 1231; + family inet { + mtu 1500; + no-redirects; + address 88.92.88.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:231::1/64; + } + } + unit 1232 { + description "C: e23-2 - VLAN 1232"; + no-traps; + vlan-tags outer 1232; + family inet { + mtu 1500; + no-redirects; + address 88.92.88.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:232::1/64; + } + } + } + ae13 { + description "B: s3.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 100 { + description "C: s1.elkjop - VLAN 100"; + no-traps; + vlan-tags outer 100; + family inet { + mtu 1500; + no-redirects; + address 88.92.111.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:a1::1/64; + } + } + unit 888 { + description "L: mgmt: s3.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.146/31; + } + family inet6 { + address 2a06:5841:f:f0a::/127; + } + } + unit 1252 { + description "C: e25-2 - VLAN 1252"; + no-traps; + vlan-tags outer 1252; + family inet { + mtu 1500; + no-redirects; + address 88.92.89.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:252::1/64; + } + } + unit 1272 { + description "C: e27-2 - VLAN 1272"; + no-traps; + vlan-tags outer 1272; + family inet { + mtu 1500; + no-redirects; + address 88.92.89.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:272::1/64; + } + } + unit 1292 { + description "C: e29-2 - VLAN 1292"; + no-traps; + vlan-tags outer 1292; + family inet { + mtu 1500; + no-redirects; + address 88.92.89.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:292::1/64; + } + } + unit 1312 { + description "C: e31-2 - VLAN 1312"; + no-traps; + vlan-tags outer 1312; + family inet { + mtu 1500; + no-redirects; + address 88.92.89.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:312::1/64; + } + } + unit 1332 { + description "C: e33-2 - VLAN 1332"; + no-traps; + vlan-tags outer 1332; + family inet { + mtu 1500; + no-redirects; + address 88.92.90.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:332::1/64; + } + } + unit 1352 { + description "C: e35-2 - VLAN 1352"; + no-traps; + vlan-tags outer 1352; + family inet { + mtu 1500; + no-redirects; + address 88.92.90.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:352::1/64; + } + } + unit 1372 { + description "C: e37-2 - VLAN 1372"; + no-traps; + vlan-tags outer 1372; + family inet { + mtu 1500; + no-redirects; + address 88.92.90.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:372::1/64; + } + } + unit 1392 { + description "C: e39-2 - VLAN 1392"; + no-traps; + vlan-tags outer 1392; + family inet { + mtu 1500; + no-redirects; + address 88.92.90.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:392::1/64; + } + } + } + ae14 { + description "B: s4.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 888 { + description "L: mgmt: s4.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.148/31; + } + family inet6 { + address 2a06:5841:f:f0b::/127; + } + } + unit 1413 { + description "C: e41-3 - VLAN 1413"; + no-traps; + vlan-tags outer 1413; + family inet { + mtu 1500; + no-redirects; + address 88.92.91.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:413::1/64; + } + } + unit 1414 { + description "C: e41-4 - VLAN 1414"; + no-traps; + vlan-tags outer 1414; + family inet { + mtu 1500; + no-redirects; + address 88.92.91.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:414::1/64; + } + } + unit 1433 { + description "C: e43-3 - VLAN 1433"; + no-traps; + vlan-tags outer 1433; + family inet { + mtu 1500; + no-redirects; + address 88.92.92.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:433::1/64; + } + } + unit 1434 { + description "C: e43-4 - VLAN 1434"; + no-traps; + vlan-tags outer 1434; + family inet { + mtu 1500; + no-redirects; + address 88.92.92.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:434::1/64; + } + } + unit 1453 { + description "C: e45-3 - VLAN 1453"; + no-traps; + vlan-tags outer 1453; + family inet { + mtu 1500; + no-redirects; + address 88.92.93.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:453::1/64; + } + } + unit 1454 { + description "C: e45-4 - VLAN 1454"; + no-traps; + vlan-tags outer 1454; + family inet { + mtu 1500; + no-redirects; + address 88.92.93.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:454::1/64; + } + } + unit 1473 { + description "C: e47-3 - VLAN 1473"; + no-traps; + vlan-tags outer 1473; + family inet { + mtu 1500; + no-redirects; + address 88.92.94.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:473::1/64; + } + } + unit 1474 { + description "C: e47-4 - VLAN 1474"; + no-traps; + vlan-tags outer 1474; + family inet { + mtu 1500; + no-redirects; + address 88.92.94.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:474::1/64; + } + } + unit 1493 { + description "C: e49-3 - VLAN 1493"; + no-traps; + vlan-tags outer 1493; + family inet { + mtu 1500; + no-redirects; + address 88.92.95.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:493::1/64; + } + } + unit 1494 { + description "C: e49-4 - VLAN 1494"; + no-traps; + vlan-tags outer 1494; + family inet { + mtu 1500; + no-redirects; + address 88.92.95.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:494::1/64; + } + } + unit 1513 { + description "C: e51-3 - VLAN 1513"; + no-traps; + vlan-tags outer 1513; + family inet { + mtu 1500; + no-redirects; + address 88.92.96.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:513::1/64; + } + } + unit 1514 { + description "C: e51-4 - VLAN 1514"; + no-traps; + vlan-tags outer 1514; + family inet { + mtu 1500; + no-redirects; + address 88.92.96.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:514::1/64; + } + } + unit 1533 { + description "C: e53-3 - VLAN 1533"; + no-traps; + vlan-tags outer 1533; + family inet { + mtu 1500; + no-redirects; + address 88.92.97.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:533::1/64; + } + } + unit 1534 { + description "C: e53-4 - VLAN 1534"; + no-traps; + vlan-tags outer 1534; + family inet { + mtu 1500; + no-redirects; + address 88.92.97.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:534::1/64; + } + } + unit 1553 { + description "C: e55-3 - VLAN 1553"; + no-traps; + vlan-tags outer 1553; + family inet { + mtu 1500; + no-redirects; + address 88.92.98.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:553::1/64; + } + } + unit 1554 { + description "C: e55-4 - VLAN 1554"; + no-traps; + vlan-tags outer 1554; + family inet { + mtu 1500; + no-redirects; + address 88.92.98.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:554::1/64; + } + } + unit 1573 { + description "C: e57-3 - VLAN 1573"; + no-traps; + vlan-tags outer 1573; + family inet { + mtu 1500; + no-redirects; + address 88.92.99.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:573::1/64; + } + } + unit 1574 { + description "C: e57-4 - VLAN 1574"; + no-traps; + vlan-tags outer 1574; + family inet { + mtu 1500; + no-redirects; + address 88.92.99.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:574::1/64; + } + } + } + ae15 { + description "B: s5.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 888 { + description "L: mgmt: s5.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.150/31; + } + family inet6 { + address 2a06:5841:f:f0c::/127; + } + } + unit 1411 { + description "C: e41-1 - VLAN 1411"; + no-traps; + vlan-tags outer 1411; + family inet { + mtu 1500; + no-redirects; + address 88.92.91.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:411::1/64; + } + } + unit 1412 { + description "C: e41-2 - VLAN 1412"; + no-traps; + vlan-tags outer 1412; + family inet { + mtu 1500; + no-redirects; + address 88.92.91.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:412::1/64; + } + } + unit 1431 { + description "C: e43-1 - VLAN 1431"; + no-traps; + vlan-tags outer 1431; + family inet { + mtu 1500; + no-redirects; + address 88.92.92.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:431::1/64; + } + } + unit 1432 { + description "C: e43-2 - VLAN 1432"; + no-traps; + vlan-tags outer 1432; + family inet { + mtu 1500; + no-redirects; + address 88.92.92.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:432::1/64; + } + } + unit 1451 { + description "C: e45-1 - VLAN 1451"; + no-traps; + vlan-tags outer 1451; + family inet { + mtu 1500; + no-redirects; + address 88.92.93.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:451::1/64; + } + } + unit 1452 { + description "C: e45-2 - VLAN 1452"; + no-traps; + vlan-tags outer 1452; + family inet { + mtu 1500; + no-redirects; + address 88.92.93.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:452::1/64; + } + } + unit 1471 { + description "C: e47-1 - VLAN 1471"; + no-traps; + vlan-tags outer 1471; + family inet { + mtu 1500; + no-redirects; + address 88.92.94.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:471::1/64; + } + } + unit 1472 { + description "C: e47-2 - VLAN 1472"; + no-traps; + vlan-tags outer 1472; + family inet { + mtu 1500; + no-redirects; + address 88.92.94.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:472::1/64; + } + } + unit 1491 { + description "C: e49-1 - VLAN 1491"; + no-traps; + vlan-tags outer 1491; + family inet { + mtu 1500; + no-redirects; + address 88.92.95.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:491::1/64; + } + } + unit 1492 { + description "C: e49-2 - VLAN 1492"; + no-traps; + vlan-tags outer 1492; + family inet { + mtu 1500; + no-redirects; + address 88.92.95.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:492::1/64; + } + } + unit 1511 { + description "C: e51-1 - VLAN 1511"; + no-traps; + vlan-tags outer 1511; + family inet { + mtu 1500; + no-redirects; + address 88.92.96.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:511::1/64; + } + } + unit 1512 { + description "C: e51-2 - VLAN 1512"; + no-traps; + vlan-tags outer 1512; + family inet { + mtu 1500; + no-redirects; + address 88.92.96.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:512::1/64; + } + } + unit 1531 { + description "C: e53-1 - VLAN 1531"; + no-traps; + vlan-tags outer 1531; + family inet { + mtu 1500; + no-redirects; + address 88.92.97.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:531::1/64; + } + } + unit 1532 { + description "C: e53-2 - VLAN 1532"; + no-traps; + vlan-tags outer 1532; + family inet { + mtu 1500; + no-redirects; + address 88.92.97.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:532::1/64; + } + } + unit 1551 { + description "C: e55-1 - VLAN 1551"; + no-traps; + vlan-tags outer 1551; + family inet { + mtu 1500; + no-redirects; + address 88.92.98.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:551::1/64; + } + } + unit 1552 { + description "C: e55-2 - VLAN 1552"; + no-traps; + vlan-tags outer 1552; + family inet { + mtu 1500; + no-redirects; + address 88.92.98.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:552::1/64; + } + } + unit 1571 { + description "C: e57-1 - VLAN 1571"; + no-traps; + vlan-tags outer 1571; + family inet { + mtu 1500; + no-redirects; + address 88.92.99.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:571::1/64; + } + } + unit 1572 { + description "C: e57-2 - VLAN 1572"; + no-traps; + vlan-tags outer 1572; + family inet { + mtu 1500; + no-redirects; + address 88.92.99.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:572::1/64; + } + } + } + ae16 { + description "B: s6.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 888 { + description "L: mgmt: s6.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.152/31; + } + family inet6 { + address 2a06:5841:f:f0d::/127; + } + } + unit 1593 { + description "C: e59-3 - VLAN 1593"; + no-traps; + vlan-tags outer 1593; + family inet { + mtu 1500; + no-redirects; + address 88.92.100.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:593::1/64; + } + } + unit 1594 { + description "C: e59-4 - VLAN 1594"; + no-traps; + vlan-tags outer 1594; + family inet { + mtu 1500; + no-redirects; + address 88.92.100.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:594::1/64; + } + } + unit 1613 { + description "C: e61-3 - VLAN 1613"; + no-traps; + vlan-tags outer 1613; + family inet { + mtu 1500; + no-redirects; + address 88.92.101.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:613::1/64; + } + } + unit 1614 { + description "C: e61-4 - VLAN 1614"; + no-traps; + vlan-tags outer 1614; + family inet { + mtu 1500; + no-redirects; + address 88.92.101.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:614::1/64; + } + } + unit 1633 { + description "C: e63-3 - VLAN 1633"; + no-traps; + vlan-tags outer 1633; + family inet { + mtu 1500; + no-redirects; + address 88.92.102.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:633::1/64; + } + } + unit 1634 { + description "C: e63-4 - VLAN 1634"; + no-traps; + vlan-tags outer 1634; + family inet { + mtu 1500; + no-redirects; + address 88.92.102.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:634::1/64; + } + } + unit 1653 { + description "C: e65-3 - VLAN 1653"; + no-traps; + vlan-tags outer 1653; + family inet { + mtu 1500; + no-redirects; + address 88.92.103.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:653::1/64; + } + } + unit 1654 { + description "C: e65-4 - VLAN 1654"; + no-traps; + vlan-tags outer 1654; + family inet { + mtu 1500; + no-redirects; + address 88.92.103.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:654::1/64; + } + } + unit 1673 { + description "C: e67-3 - VLAN 1673"; + no-traps; + vlan-tags outer 1673; + family inet { + mtu 1500; + no-redirects; + address 88.92.104.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:673::1/64; + } + } + unit 1674 { + description "C: e67-4 - VLAN 1674"; + no-traps; + vlan-tags outer 1674; + family inet { + mtu 1500; + no-redirects; + address 88.92.104.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:674::1/64; + } + } + unit 1693 { + description "C: e69-3 - VLAN 1693"; + no-traps; + vlan-tags outer 1693; + family inet { + mtu 1500; + no-redirects; + address 88.92.105.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:693::1/64; + } + } + unit 1694 { + description "C: e69-4 - VLAN 1694"; + no-traps; + vlan-tags outer 1694; + family inet { + mtu 1500; + no-redirects; + address 88.92.105.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:694::1/64; + } + } + } + ae17 { + description "B: s7.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 888 { + description "L: mgmt: s7.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.154/31; + } + family inet6 { + address 2a06:5841:f:f0e::/127; + } + } + unit 1591 { + description "C: e59-1 - VLAN 1591"; + no-traps; + vlan-tags outer 1591; + family inet { + mtu 1500; + no-redirects; + address 88.92.100.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:591::1/64; + } + } + unit 1592 { + description "C: e59-2 - VLAN 1592"; + no-traps; + vlan-tags outer 1592; + family inet { + mtu 1500; + no-redirects; + address 88.92.100.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:592::1/64; + } + } + unit 1611 { + description "C: e61-1 - VLAN 1611"; + no-traps; + vlan-tags outer 1611; + family inet { + mtu 1500; + no-redirects; + address 88.92.101.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:611::1/64; + } + } + unit 1612 { + description "C: e61-2 - VLAN 1612"; + no-traps; + vlan-tags outer 1612; + family inet { + mtu 1500; + no-redirects; + address 88.92.101.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:612::1/64; + } + } + unit 1631 { + description "C: e63-1 - VLAN 1631"; + no-traps; + vlan-tags outer 1631; + family inet { + mtu 1500; + no-redirects; + address 88.92.102.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:631::1/64; + } + } + unit 1632 { + description "C: e63-2 - VLAN 1632"; + no-traps; + vlan-tags outer 1632; + family inet { + mtu 1500; + no-redirects; + address 88.92.102.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:632::1/64; + } + } + unit 1651 { + description "C: e65-1 - VLAN 1651"; + no-traps; + vlan-tags outer 1651; + family inet { + mtu 1500; + no-redirects; + address 88.92.103.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:651::1/64; + } + } + unit 1652 { + description "C: e65-2 - VLAN 1652"; + no-traps; + vlan-tags outer 1652; + family inet { + mtu 1500; + no-redirects; + address 88.92.103.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:652::1/64; + } + } + } + ae18 { + description "B: s8.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 100 { + description "C: s1.infodesk - VLAN 100"; + no-traps; + vlan-tags outer 100; + family inet { + mtu 1500; + no-redirects; + address 88.92.111.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:a2::1/64; + } + } + unit 888 { + description "L: mgmt: s8.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.156/31; + } + family inet6 { + address 2a06:5841:f:f0f::/127; + } + } + unit 1671 { + description "C: e67-1 - VLAN 1671"; + no-traps; + vlan-tags outer 1671; + family inet { + mtu 1500; + no-redirects; + address 88.92.104.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:671::1/64; + } + } + unit 1672 { + description "C: e67-2 - VLAN 1672"; + no-traps; + vlan-tags outer 1672; + family inet { + mtu 1500; + no-redirects; + address 88.92.104.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:672::1/64; + } + } + unit 1691 { + description "C: e69-1 - VLAN 1691"; + no-traps; + vlan-tags outer 1691; + family inet { + mtu 1500; + no-redirects; + address 88.92.105.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:691::1/64; + } + } + unit 1692 { + description "C: e69-2 - VLAN 1692"; + no-traps; + vlan-tags outer 1692; + family inet { + mtu 1500; + no-redirects; + address 88.92.105.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:692::1/64; + } + } + unit 1711 { + description "C: e71-1 - VLAN 1711"; + no-traps; + vlan-tags outer 1711; + family inet { + mtu 1500; + no-redirects; + address 88.92.106.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:711::1/64; + } + } + unit 1712 { + description "C: e71-2 - VLAN 1712"; + no-traps; + vlan-tags outer 1712; + family inet { + mtu 1500; + no-redirects; + address 88.92.106.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:712::1/64; + } + } + unit 1731 { + description "C: e73-1 - VLAN 1731"; + no-traps; + vlan-tags outer 1731; + family inet { + mtu 1500; + no-redirects; + address 88.92.107.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:731::1/64; + } + } + unit 1732 { + description "C: e73-2 - VLAN 1732"; + no-traps; + vlan-tags outer 1732; + family inet { + mtu 1500; + no-redirects; + address 88.92.107.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:732::1/64; + } + } + unit 1751 { + description "C: e75-1 - VLAN 1751"; + no-traps; + vlan-tags outer 1751; + family inet { + mtu 1500; + no-redirects; + address 88.92.108.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:751::1/64; + } + } + unit 1752 { + description "C: e75-2 - VLAN 1752"; + no-traps; + vlan-tags outer 1752; + family inet { + mtu 1500; + no-redirects; + address 88.92.108.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:752::1/64; + } + } + unit 1771 { + description "C: e77-1 - VLAN 1771"; + no-traps; + vlan-tags outer 1771; + family inet { + mtu 1500; + no-redirects; + address 88.92.109.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:771::1/64; + } + } + unit 1791 { + description "C: e79-1 - VLAN 1791"; + no-traps; + vlan-tags outer 1791; + family inet { + mtu 1500; + no-redirects; + address 88.92.109.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:791::1/64; + } + } + unit 1811 { + description "C: e81-1 - VLAN 1811"; + no-traps; + vlan-tags outer 1811; + family inet { + mtu 1500; + no-redirects; + address 88.92.110.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:811::1/64; + } + } + } + ae19 { + description "B: s9.floor <ae0>"; + flexible-vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + periodic fast; + } + } + unit 888 { + description "L: mgmt: s9.floor"; + vlan-tags outer 888; + family inet { + address 185.110.148.158/31; + } + family inet6 { + address 2a06:5841:f:f10::/127; + } + } + unit 1713 { + description "C: e71-3 - VLAN 1713"; + no-traps; + vlan-tags outer 1713; + family inet { + mtu 1500; + no-redirects; + address 88.92.106.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:713::1/64; + } + } + unit 1714 { + description "C: e71-4 - VLAN 1714"; + no-traps; + vlan-tags outer 1714; + family inet { + mtu 1500; + no-redirects; + address 88.92.106.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:714::1/64; + } + } + unit 1733 { + description "C: e73-3 - VLAN 1733"; + no-traps; + vlan-tags outer 1733; + family inet { + mtu 1500; + no-redirects; + address 88.92.107.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:733::1/64; + } + } + unit 1734 { + description "C: e73-4 - VLAN 1734"; + no-traps; + vlan-tags outer 1734; + family inet { + mtu 1500; + no-redirects; + address 88.92.107.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:734::1/64; + } + } + unit 1753 { + description "C: e75-3 - VLAN 1753"; + no-traps; + vlan-tags outer 1753; + family inet { + mtu 1500; + no-redirects; + address 88.92.108.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:753::1/64; + } + } + unit 1754 { + description "C: e75-4 - VLAN 1754"; + no-traps; + vlan-tags outer 1754; + family inet { + mtu 1500; + no-redirects; + address 88.92.108.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:754::1/64; + } + } + unit 1773 { + description "C: e77-3 - VLAN 1773"; + no-traps; + vlan-tags outer 1773; + family inet { + mtu 1500; + no-redirects; + address 88.92.109.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:773::1/64; + } + } + unit 1774 { + description "C: e77-4 - VLAN 1774"; + no-traps; + vlan-tags outer 1774; + family inet { + mtu 1500; + no-redirects; + address 88.92.109.129/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:774::1/64; + } + } + unit 1793 { + description "C: e79-3 - VLAN 1793"; + no-traps; + vlan-tags outer 1793; + family inet { + mtu 1500; + no-redirects; + address 88.92.110.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:793::1/64; + } + } + unit 1794 { + description "C: e79-4 - VLAN 1794"; + no-traps; + vlan-tags outer 1794; + family inet { + mtu 1500; + no-redirects; + address 88.92.110.65/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:794::1/64; + } + } + unit 1813 { + description "C: e81-3 - VLAN 1813"; + no-traps; + vlan-tags outer 1813; + family inet { + mtu 1500; + no-redirects; + address 88.92.110.193/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:813::1/64; + } + } + unit 1814 { + description "C: e81-4 - VLAN 1814"; + no-traps; + vlan-tags outer 1814; + family inet { + mtu 1500; + no-redirects; + address 88.92.111.1/26; + } + family inet6 { + mtu 1500; + address 2a06:5844:e:814::1/64; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + address 185.110.148.67/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + address 2a06:5841:f:e::67/128; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +forwarding-options { + storm-control-profiles default { + all; + } + dhcp-relay { + dhcpv6 { + overrides { + allow-snooped-clients; + } + group edge-switches { + active-server-group v6-edge-switches; + route-suppression access-internal; + interface ae11.1073; + interface ae11.1074; + interface ae11.1093; + interface ae11.1094; + interface ae11.1113; + interface ae11.1114; + interface ae11.1133; + interface ae11.1134; + interface ae11.1153; + interface ae11.1154; + interface ae11.1173; + interface ae11.1174; + interface ae11.1193; + interface ae11.1194; + interface ae11.1213; + interface ae11.1214; + interface ae11.1233; + interface ae11.1234; + interface ae12.1071; + interface ae12.1072; + interface ae12.1091; + interface ae12.1092; + interface ae12.1111; + interface ae12.1112; + interface ae12.1131; + interface ae12.1132; + interface ae12.1151; + interface ae12.1152; + interface ae12.1171; + interface ae12.1172; + interface ae12.1191; + interface ae12.1192; + interface ae12.1211; + interface ae12.1212; + interface ae12.1231; + interface ae12.1232; + interface ae13.100; + interface ae13.1252; + interface ae13.1272; + interface ae13.1292; + interface ae13.1312; + interface ae13.1332; + interface ae13.1352; + interface ae13.1372; + interface ae13.1392; + interface ae14.1413; + interface ae14.1414; + interface ae14.1433; + interface ae14.1434; + interface ae14.1453; + interface ae14.1454; + interface ae14.1473; + interface ae14.1474; + interface ae14.1493; + interface ae14.1494; + interface ae14.1513; + interface ae14.1514; + interface ae14.1533; + interface ae14.1534; + interface ae14.1553; + interface ae14.1554; + interface ae14.1573; + interface ae14.1574; + interface ae15.1411; + interface ae15.1412; + interface ae15.1431; + interface ae15.1432; + interface ae15.1451; + interface ae15.1452; + interface ae15.1471; + interface ae15.1472; + interface ae15.1491; + interface ae15.1492; + interface ae15.1511; + interface ae15.1512; + interface ae15.1531; + interface ae15.1532; + interface ae15.1551; + interface ae15.1552; + interface ae15.1571; + interface ae15.1572; + interface ae16.1593; + interface ae16.1594; + interface ae16.1613; + interface ae16.1614; + interface ae16.1633; + interface ae16.1634; + interface ae16.1653; + interface ae16.1654; + interface ae16.1673; + interface ae16.1674; + interface ae16.1693; + interface ae16.1694; + interface ae17.1591; + interface ae17.1592; + interface ae17.1611; + interface ae17.1612; + interface ae17.1631; + interface ae17.1632; + interface ae17.1651; + interface ae17.1652; + interface ae18.100; + interface ae18.1671; + interface ae18.1672; + interface ae18.1691; + interface ae18.1692; + interface ae18.1711; + interface ae18.1712; + interface ae18.1731; + interface ae18.1732; + interface ae18.1751; + interface ae18.1752; + interface ae18.1771; + interface ae18.1791; + interface ae18.1811; + interface ae19.1713; + interface ae19.1714; + interface ae19.1733; + interface ae19.1734; + interface ae19.1753; + interface ae19.1754; + interface ae19.1773; + interface ae19.1774; + interface ae19.1793; + interface ae19.1794; + interface ae19.1813; + interface ae19.1814; + } + server-group { + v6-edge-switches { + 2a06:5841:a:103::2; + } + } + } + server-group { + v4-edge-switches { + 185.110.149.2; + } + } + group no-relay { + overrides { + allow-snooped-clients; + } + route-suppression { + access-internal; + } + interface ae1.0; + interface ae10.888; + interface ae11.888; + interface ae12.888; + interface ae13.888; + interface ae14.888; + interface ae15.888; + interface ae16.888; + interface ae17.888; + interface ae18.888; + interface ae19.888; + interface ae20.888; + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + allow-snooped-clients; + trust-option-82; + } + route-suppression { + access-internal; + } + interface ae11.1073; + interface ae11.1074; + interface ae11.1093; + interface ae11.1094; + interface ae11.1113; + interface ae11.1114; + interface ae11.1133; + interface ae11.1134; + interface ae11.1153; + interface ae11.1154; + interface ae11.1173; + interface ae11.1174; + interface ae11.1193; + interface ae11.1194; + interface ae11.1213; + interface ae11.1214; + interface ae11.1233; + interface ae11.1234; + interface ae12.1071; + interface ae12.1072; + interface ae12.1091; + interface ae12.1092; + interface ae12.1111; + interface ae12.1112; + interface ae12.1131; + interface ae12.1132; + interface ae12.1151; + interface ae12.1152; + interface ae12.1171; + interface ae12.1172; + interface ae12.1191; + interface ae12.1192; + interface ae12.1211; + interface ae12.1212; + interface ae12.1231; + interface ae12.1232; + interface ae13.100; + interface ae13.1252; + interface ae13.1272; + interface ae13.1292; + interface ae13.1312; + interface ae13.1332; + interface ae13.1352; + interface ae13.1372; + interface ae13.1392; + interface ae14.1413; + interface ae14.1414; + interface ae14.1433; + interface ae14.1434; + interface ae14.1453; + interface ae14.1454; + interface ae14.1473; + interface ae14.1474; + interface ae14.1493; + interface ae14.1494; + interface ae14.1513; + interface ae14.1514; + interface ae14.1533; + interface ae14.1534; + interface ae14.1553; + interface ae14.1554; + interface ae14.1573; + interface ae14.1574; + interface ae15.1411; + interface ae15.1412; + interface ae15.1431; + interface ae15.1432; + interface ae15.1451; + interface ae15.1452; + interface ae15.1471; + interface ae15.1472; + interface ae15.1491; + interface ae15.1492; + interface ae15.1511; + interface ae15.1512; + interface ae15.1531; + interface ae15.1532; + interface ae15.1551; + interface ae15.1552; + interface ae15.1571; + interface ae15.1572; + interface ae16.1593; + interface ae16.1594; + interface ae16.1613; + interface ae16.1614; + interface ae16.1633; + interface ae16.1634; + interface ae16.1653; + interface ae16.1654; + interface ae16.1673; + interface ae16.1674; + interface ae16.1693; + interface ae16.1694; + interface ae17.1591; + interface ae17.1592; + interface ae17.1611; + interface ae17.1612; + interface ae17.1631; + interface ae17.1632; + interface ae17.1651; + interface ae17.1652; + interface ae18.100; + interface ae18.1671; + interface ae18.1672; + interface ae18.1691; + interface ae18.1692; + interface ae18.1711; + interface ae18.1712; + interface ae18.1731; + interface ae18.1732; + interface ae18.1751; + interface ae18.1752; + interface ae18.1771; + interface ae18.1791; + interface ae18.1811; + interface ae19.1713; + interface ae19.1714; + interface ae19.1733; + interface ae19.1734; + interface ae19.1753; + interface ae19.1754; + interface ae19.1773; + interface ae19.1774; + interface ae19.1793; + interface ae19.1794; + interface ae19.1813; + interface ae19.1814; + } + } +} +routing-options { + nonstop-routing; +} +protocols { + router-advertisement { + interface ae19.1814 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1813 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1753 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1793 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1754 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1734 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1714 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1774 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1733 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1713 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1794 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae19.1773 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1514 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1474 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1513 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1453 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1534 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1493 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1573 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1434 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1414 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1454 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1574 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1494 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1413 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1433 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1554 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1533 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1473 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae14.1553 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.1312 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.1272 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.1352 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.1392 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.1332 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.1252 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.1292 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.100 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae13.1372 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1791 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1732 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1771 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1711 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.100 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1751 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1811 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1692 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1671 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1712 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1691 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1672 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1752 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae18.1731 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1532 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1472 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1511 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1491 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1512 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1451 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1531 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1432 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1412 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1452 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1572 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1492 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1411 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1431 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1552 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1571 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1471 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae15.1551 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1172 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1132 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1171 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1151 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1192 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1111 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1191 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1092 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1072 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1112 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1232 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1152 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1071 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1091 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1212 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1231 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1131 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae12.1211 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1694 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1693 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1633 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1673 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1654 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1614 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1594 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1634 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1613 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1593 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1674 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae16.1653 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1194 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1134 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1173 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1174 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1113 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1153 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1233 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1094 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1073 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1114 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1234 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1154 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1074 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1093 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1214 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1193 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1133 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae11.1213 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae17.1612 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae17.1592 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae17.1632 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae17.1652 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae17.1631 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae17.1591 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae17.1611 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + interface ae17.1651 { + max-advertisement-interval 30; + managed-configuration; + other-stateful-configuration; + } + } + ospf { + export [ direct-to-ospf static-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface et-3/3/2.0; + interface ae0.0; + interface ae1.0; + interface ae11.888; + interface ae12.888; + interface ae13.888; + interface ae14.888; + interface ae15.888; + interface ae16.888; + interface ae17.888; + interface ae18.888; + interface ae19.888; + interface ae20.888; + } + } + ospf3 { + export [ static-to-ospf direct-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface et-3/3/2.0; + interface ae0.0; + interface ae1.0; + interface ae11.888; + interface ae12.888; + interface ae13.888; + interface ae14.888; + interface ae15.888; + interface ae16.888; + interface ae17.888; + interface ae18.888; + interface ae19.888; + interface ae20.888; + } + } + pim { + interface et-3/3/2.0; + } + lldp { + interface all; + } + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + layer2-control { + nonstop-bridging; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } + policy-statement direct-to-ospf { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement static-to-ospf { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} diff --git a/examples/tg19/netconf/r1.ring-l2.conf b/examples/tg19/netconf/r1.ring-l2.conf new file mode 100644 index 0000000..1480e39 --- /dev/null +++ b/examples/tg19/netconf/r1.ring-l2.conf @@ -0,0 +1,2980 @@ +## Last changed: 2019-04-21 01:19:52 CEST +## Image name: jinstall-host-ex-4600-16.1R7.8-signed.tgz + +version 16.1R7.8; +system { + host-name r1.ring; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + idle-timeout 5; + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + dhcp-local-server { + traceoptions { + file log-dhcp size 10000000; + flag all; + } + dhcpv6 { + group southcam-v6 { + interface irb.100; + } + } + group southcam-v4 { + interface irb.100; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 128; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +services { + analytics { + streaming-server telemetry_server { + remote-address 185.110.149.4; + remote-port 5015; + } + export-profile export_20302 { + local-address 185.110.148.66; + local-port 20302; + reporting-rate 60; + format gpb; + transport udp; + } + sensor junos_system_linecard_interface { + server-name telemetry_server; + export-name export_20302; + resource /junos/system/linecard/interface/; + } + sensor junos_system_linecard_interface_logical_usage { + server-name telemetry_server; + export-name export_20302; + resource /junos/system/linecard/interface/logical/usage/; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + ge-0/0/0 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/2 { + description "G: s1.secbua"; + ether-options { + 802.3ad ae117; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "G: s1.secbua"; + ether-options { + 802.3ad ae117; + } + } + ge-0/0/4 { + description "SECURITY SERVER"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members SECURITY; + } + } + } + } + ge-0/0/5 { + description TeleCam; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members s2.noc; + } + } + } + } + ge-0/0/6 { + description "G: s2.log"; + ether-options { + 802.3ad ae140; + } + } + ge-0/0/7 { + description "G: s2.log"; + ether-options { + 802.3ad ae140; + } + } + et-0/0/26 { + description "G: r1.tele (ae3)"; + ether-options { + 802.3ad ae3; + } + } + et-0/0/27 { + description "B: fw1.tele port 27"; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/0 { + description "C: soutcam vlan 100"; + unit 0 { + family ethernet-switching { + vlan { + members vlan100; + } + } + } + } + ge-1/0/2 { + description "G: s1.cna"; + ether-options { + 802.3ad ae114; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-1/0/3 { + description "G: s1.cna"; + ether-options { + 802.3ad ae114; + } + } + ge-1/0/4 { + description "G: s1.south"; + ether-options { + 802.3ad ae121; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-1/0/5 { + description "G: s1.south"; + ether-options { + 802.3ad ae121; + } + } + ge-1/0/6 { + description "G: s2.cna"; + ether-options { + 802.3ad ae131; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-1/0/7 { + description "G: s2.cna"; + ether-options { + 802.3ad ae131; + } + } + ge-1/0/8 { + description "G: s3.cna"; + ether-options { + 802.3ad ae132; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-1/0/9 { + description "G: s3.cna"; + ether-options { + 802.3ad ae132; + } + } + ge-2/0/0 { + description "G: s1.log"; + ether-options { + 802.3ad ae112; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-2/0/1 { + description "G: s1.log"; + ether-options { + 802.3ad ae112; + } + } + ge-2/0/2 { + description "G: s2.log"; + inactive: ether-options { + 802.3ad ae113; + } + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-2/0/3 { + description "G: s2.log"; + ether-options { + 802.3ad ae113; + } + } + ge-2/0/4 { + description "G: s1.event-ob"; + ether-options { + 802.3ad ae133; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-2/0/5 { + description "G: s1.event-ob"; + ether-options { + 802.3ad ae133; + } + } + ge-2/0/22 { + description "G: s3.wifi"; + ether-options { + 802.3ad ae779; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-2/0/23 { + description "G: s3.wifi"; + ether-options { + 802.3ad ae779; + } + } + xe-2/2/0 { + description "G: s1.event"; + ether-options { + 802.3ad ae115; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + xe-2/2/1 { + description "G: s1.event"; + ether-options { + 802.3ad ae115; + } + } + ge-3/0/0 { + description "G: s1.boh"; + ether-options { + 802.3ad ae128; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-3/0/1 { + description "G: s1.boh"; + ether-options { + 802.3ad ae128; + } + } + ge-3/0/2 { + description "G: s1.foh"; + ether-options { + 802.3ad ae130; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-3/0/3 { + description "G: s1.foh"; + ether-options { + 802.3ad ae130; + } + } + ge-3/0/22 { + description "G: s2.wifi"; + ether-options { + 802.3ad ae778; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-3/0/23 { + description "G: s2.wifi"; + ether-options { + 802.3ad ae778; + } + } + ge-4/0/0 { + description "G: s1.auditorium"; + inactive: ether-options { + 802.3ad ae125; + } + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-4/0/1 { + description "G: s1.auditorium"; + ether-options { + 802.3ad ae125; + } + } + ge-4/0/2 { + description "G: s1.north"; + ether-options { + 802.3ad ae129; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-4/0/3 { + description "G: s1.north"; + ether-options { + 802.3ad ae129; + } + } + ge-5/0/0 { + description "G: s1.noc"; + ether-options { + 802.3ad ae110; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/1 { + description "G: s1.noc"; + ether-options { + 802.3ad ae110; + } + } + ge-5/0/2 { + description "G: s2.noc"; + ether-options { + 802.3ad ae111; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/3 { + description "G: s2.noc"; + ether-options { + 802.3ad ae111; + } + } + ge-5/0/4 { + description "G: s1.systemstonad"; + ether-options { + 802.3ad ae116; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/5 { + description "G: s1.systemstonad"; + ether-options { + 802.3ad ae116; + } + } + ge-5/0/6 { + description "G: s1.presse"; + ether-options { + 802.3ad ae118; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/7 { + description "G: s1.presse"; + ether-options { + 802.3ad ae118; + } + } + ge-5/0/8 { + description "G: s1.videorom"; + ether-options { + 802.3ad ae119; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/9 { + description "G: s1.videorom"; + ether-options { + 802.3ad ae119; + } + } + ge-5/0/10 { + description "G: s1.fugleberget"; + ether-options { + 802.3ad ae120; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/11 { + description "G: s1.fugleberget"; + ether-options { + 802.3ad ae120; + } + } + ge-5/0/12 { + description "G: s1.sponsorgate"; + ether-options { + 802.3ad ae122; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/13 { + description "G: s1.sponsorgate"; + ether-options { + 802.3ad ae122; + } + } + ge-5/0/14 { + description "G: s1.resepsjon"; + ether-options { + 802.3ad ae123; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/15 { + description "G: s1.resepsjon"; + ether-options { + 802.3ad ae123; + } + } + ge-5/0/16 { + description not-in-use; + disable; + inactive: ether-options { + 802.3ad ae124; + } + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/17 { + description "G: s1.medic"; + ether-options { + 802.3ad ae124; + } + } + ge-5/0/18 { + description not-in-use; + disable; + ether-options { + 802.3ad ae126; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/19 { + description "G: s1.roof"; + ether-options { + 802.3ad ae126; + } + } + ge-5/0/20 { + description not-in-use; + disable; + ether-options { + 802.3ad ae127; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/21 { + description "G: s2.roof"; + ether-options { + 802.3ad ae127; + } + } + ge-5/0/22 { + description TestCam; + unit 0 { + family ethernet-switching { + vlan { + members s2.noc; + } + } + } + } + ge-5/0/24 { + description "Security rpi"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members s1.secbua; + } + } + } + } + ge-5/0/44 { + description "G: s1.wifi"; + ether-options { + 802.3ad ae777; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/45 { + description "G: s1.wifi"; + ether-options { + 802.3ad ae777; + } + } + ge-5/0/47 { + description "C: NOCCam"; + unit 0 { + family ethernet-switching { + vlan { + members vlan100; + } + } + } + } + et-5/1/2 { + description "B: fw1.tele port28"; + ether-options { + 802.3ad ae4; + } + } + et-6/0/26 { + description "G: r1.tele (ae3)"; + ether-options { + 802.3ad ae3; + } + } + et-6/0/27 { + description "B: r1.noc et-3/3/2"; + unit 0 { + description "B: r1.noc et-3/3/2"; + family inet { + address 185.110.148.136/31; + } + family inet6 { + address 2a06:5841:f:f05::/127; + } + } + } + ae3 { + description "B: r1.tele ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 185.110.148.133/31; + } + family inet6 { + address 2a06:5841:f:f03::1/127; + } + } + } + ae4 { + description "B: fw1.tele"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members all; + } + } + } + } + ae110 { + description "B: s1.noc <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.noc statisk.ip ]; + } + } + } + } + ae111 { + description "B: s2.noc <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s2.noc ]; + } + } + } + } + ae112 { + description "B: s1.log <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.log ]; + } + } + } + } + ae113 { + description "B: s2.log <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s2.log ]; + } + } + } + } + ae114 { + description "B: s1.cna <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.cna ]; + } + } + } + } + ae115 { + description "B: s1.event <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.event EVENT-INTERN ]; + } + } + } + } + ae116 { + description "B: s1.systemstonad <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.systemstonad ]; + } + } + } + } + ae117 { + description "B: s1.secbua <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.secbua SECURITY ]; + } + } + } + } + ae118 { + description "B: s1.presse <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.presse ]; + } + } + } + } + ae119 { + description "B: s1.videorom <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.videorom SECURITY ]; + } + } + } + } + ae120 { + description "B: s1.fugleberget <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.fugleberget ]; + } + } + } + } + ae121 { + description "B: s1.south <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.south ]; + } + } + } + } + ae122 { + description "B: s1.sponsorgate <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.sponsorgate ]; + } + } + } + } + ae123 { + description "B: s1.resepsjon <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.resepsjon ]; + } + } + } + } + ae124 { + description "B: s1.medic <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.medic SECURITY ]; + } + } + } + } + ae125 { + description "B: s1.auditorium <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.auditorium ]; + } + } + } + } + ae126 { + description "B: s1.roof <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.roof ]; + } + } + } + } + ae127 { + description "B: s2.roof <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s2.roof ]; + } + } + } + } + ae128 { + description "B: s1.boh <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.boh EVENT-INTERN ]; + } + } + } + } + ae129 { + description "B: s1.north <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.north ]; + } + } + } + } + ae130 { + description "B: s1.foh <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.foh EVENT-INTERN ]; + } + } + } + } + ae131 { + description "B: s2.cna <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s2.cna ]; + } + } + } + } + ae132 { + description "B: s3.cna <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s3.cna ]; + } + } + } + } + ae133 { + description "B: s1.event-ob <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.event-ob ]; + } + } + } + } + ae140 { + description "B: s2.log<ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ s2.log mgmt ]; + } + } + } + } + ae777 { + description "B: s1.wifi <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt aps-mgmt ]; + } + } + } + } + ae778 { + description "B: s2.wifi <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt aps-mgmt ]; + } + } + } + } + ae779 { + description "B: s3.wifi <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt aps-mgmt ]; + } + } + } + } + irb { + unit 100 { + description "C: southcam net"; + family inet { + address 88.92.8.1/27; + } + family inet6 { + address 2a06:5841:a:302::1/64; + } + } + inactive: unit 112 { + description s1.log; + family inet { + address 88.92.8.65/26; + } + family inet6 { + address 2a06:5841:c:112::1/64; + } + } + inactive: unit 113 { + description s2.log; + family inet { + address 88.92.8.129/26; + } + family inet6 { + address 2a06:5841:c:113::1/64; + } + } + inactive: unit 114 { + description s1.cna; + family inet { + address 88.92.8.193/26; + } + family inet6 { + address 2a06:5841:c:114::1/64; + } + } + inactive: unit 115 { + description s1.event; + family inet { + address 88.92.9.1/26; + } + family inet6 { + address 2a06:5841:c:115::1/64; + } + } + inactive: unit 116 { + description s1.systemstonad; + family inet { + address 88.92.9.65/26; + } + family inet6 { + address 2a06:5841:c:116::1/64; + } + } + inactive: unit 117 { + description s1.secbua; + family inet { + address 88.92.9.129/26; + } + family inet6 { + address 2a06:5841:c:117::1/64; + } + } + inactive: unit 118 { + description s1.presse; + family inet { + address 88.92.9.193/26; + } + family inet6 { + address 2a06:5841:c:118::1/64; + } + } + inactive: unit 119 { + description s1.videorom; + family inet { + address 88.92.10.1/26; + } + family inet6 { + address 2a06:5841:c:119::1/64; + } + } + inactive: unit 120 { + description s1.fugleberget; + family inet { + address 88.92.10.65/26; + } + family inet6 { + address 2a06:5841:c:120::1/64; + } + } + inactive: unit 121 { + description s1.south; + family inet { + address 88.92.10.129/26; + } + family inet6 { + address 2a06:5841:c:121::1/64; + } + } + inactive: unit 122 { + description s1.sponsorgate; + family inet { + address 88.92.10.193/26; + } + family inet6 { + address 2a06:5841:c:122::1/64; + } + } + inactive: unit 123 { + description s1.resepsjon; + family inet { + address 88.92.11.1/26; + } + family inet6 { + address 2a06:5841:c:123::1/64; + } + } + inactive: unit 124 { + description s1.medic; + family inet { + address 88.92.11.65/26; + } + family inet6 { + address 2a06:5841:c:124::1/64; + } + } + inactive: unit 125 { + description s1.auditorium; + family inet { + address 88.92.11.129/26; + } + family inet6 { + address 2a06:5841:c:125::1/64; + } + } + inactive: unit 126 { + description s1.roof; + family inet { + address 88.92.11.193/26; + } + family inet6 { + address 2a06:5841:c:126::1/64; + } + } + inactive: unit 127 { + description s2.roof; + family inet { + address 88.92.12.1/26; + } + family inet6 { + address 2a06:5841:c:127::1/64; + } + } + inactive: unit 128 { + description s1.boh; + family inet { + address 88.92.12.65/26; + } + family inet6 { + address 2a06:5841:c:128::1/64; + } + } + inactive: unit 129 { + description s1.north; + family inet { + address 88.92.12.129/26; + } + family inet6 { + address 2a06:5841:c:129::1/64; + } + } + inactive: unit 130 { + description s1.foh; + family inet { + address 88.92.13.1/26; + } + family inet6 { + address 2a06:5841:c:130::1/64; + } + } + inactive: unit 131 { + description s2.cna; + family inet { + address 88.92.13.65/26; + } + family inet6 { + address 2a06:5841:c:131::1/64; + } + } + inactive: unit 132 { + description s3.cna; + family inet { + address 88.92.13.129/26; + } + family inet6 { + address 2a06:5841:c:132::1/64; + } + } + inactive: unit 133 { + description s1.event-ob; + family inet { + address 88.92.13.193/26; + } + family inet6 { + address 2a06:5841:c:133::1/64; + } + } + unit 666 { + family inet { + address 88.92.2.65/26; + } + family inet6 { + address 2a06:5841:d:b::1/64; + } + } + inactive: unit 777 { + description aps-mgmt; + family inet { + address 88.92.6.129/26; + } + family inet6 { + address 2a06:5841:d:aa::1/64; + } + } + unit 1337 { + description "C: Statisk Ip NOC"; + family inet { + address 88.92.127.193/27; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + address 185.110.148.66/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + address 2a06:5841:f:e::66/128; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +forwarding-options { + storm-control-profiles default { + all; + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides { + allow-snooped-clients; + } + inactive: interface irb.110; + interface irb.111; + interface irb.112; + interface irb.113; + interface irb.114; + interface irb.115; + interface irb.116; + interface irb.117; + interface irb.118; + interface irb.119; + interface irb.120; + interface irb.121; + interface irb.122; + interface irb.123; + interface irb.124; + interface irb.125; + interface irb.126; + interface irb.127; + interface irb.128; + interface irb.129; + interface irb.130; + interface irb.131; + interface irb.132; + interface irb.133; + interface irb.777; + } + server-group { + v6-edge-switches { + 2a06:5841:a:103::2; + } + } + } + server-group { + fapfapfap-group { + 185.110.149.2; + } + v4-edge-switches { + 185.110.149.2; + } + } + route-suppression { + access-internal; + } + group fapfapfap { + active-server-group fapfapfap-group; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface irb.666; + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface irb.110; + interface irb.111; + interface irb.112; + interface irb.113; + interface irb.114; + interface irb.115; + interface irb.116; + interface irb.117; + interface irb.118; + interface irb.119; + interface irb.120; + interface irb.121; + interface irb.122; + interface irb.123; + interface irb.124; + interface irb.125; + interface irb.126; + interface irb.127; + interface irb.128; + interface irb.129; + interface irb.130; + interface irb.131; + interface irb.132; + interface irb.133; + interface irb.777; + } + } +} +event-options { + policy ae110down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae110$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/0 unit 0"; + "deactivate interfaces ge-5/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae110 went down so removed ge-5/0/0 from bundle"; + } + } + } + } + policy ae110up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae110$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/0 unit 0"; + "activate interfaces ge-5/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae110 came up so added ge-5/0/0 to bundle"; + } + } + } + } + policy ae111down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae111$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/2 unit 0"; + "deactivate interfaces ge-5/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae111 went down so removed ge-5/0/2 from bundle"; + } + } + } + } + policy ae111up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae111$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/2 unit 0"; + "activate interfaces ge-5/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae111 came up so added ge-5/0/2 to bundle"; + } + } + } + } + policy ae112down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae112$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-2/0/0 unit 0"; + "deactivate interfaces ge-2/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae112 went down so removed ge-2/0/0 from bundle"; + } + } + } + } + policy ae112up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae112$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-2/0/0 unit 0"; + "activate interfaces ge-2/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae112 came up so added ge-2/0/0 to bundle"; + } + } + } + } + policy ae113down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae113$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-2/0/2 unit 0"; + "deactivate interfaces ge-2/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae113 went down so removed ge-2/0/2 from bundle"; + } + } + } + } + policy ae113up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae113$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-2/0/2 unit 0"; + "activate interfaces ge-2/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae113 came up so added ge-2/0/2 to bundle"; + } + } + } + } + policy ae114down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae114$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-1/0/2 unit 0"; + "deactivate interfaces ge-1/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae114 went down so removed ge-1/0/2 from bundle"; + } + } + } + } + policy ae114up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae114$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-1/0/2 unit 0"; + "activate interfaces ge-1/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae114 came up so added ge-1/0/2 to bundle"; + } + } + } + } + policy ae116down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae116$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/4 unit 0"; + "deactivate interfaces ge-5/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae116 went down so removed ge-5/0/4 from bundle"; + } + } + } + } + policy ae116up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae116$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/4 unit 0"; + "activate interfaces ge-5/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae116 came up so added ge-5/0/4 to bundle"; + } + } + } + } + policy ae117down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae117$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae117 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae117up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae117$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae117 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae118down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae118$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/6 unit 0"; + "deactivate interfaces ge-5/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae118 went down so removed ge-5/0/6 from bundle"; + } + } + } + } + policy ae118up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae118$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/6 unit 0"; + "activate interfaces ge-5/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae118 came up so added ge-5/0/6 to bundle"; + } + } + } + } + policy ae115down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae115$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces xe-2/2/0 unit 0"; + "deactivate interfaces xe-2/2/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae115 went down so removed xe-2/2/0 from bundle"; + } + } + } + } + policy ae115up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae115$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces xe-2/2/0 unit 0"; + "activate interfaces xe-2/2/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae115 came up so added xe-2/2/0 to bundle"; + } + } + } + } + inactive: policy ae119down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae119$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/8 unit 0"; + "deactivate interfaces ge-5/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae119 went down so removed ge-5/0/8 from bundle"; + } + } + } + } + inactive: policy ae119up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae119$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/8 unit 0"; + "activate interfaces ge-5/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae119 came up so added ge-5/0/8 to bundle"; + } + } + } + } + policy ae120down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae120$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/10 unit 0"; + "deactivate interfaces ge-5/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae120 went down so removed ge-5/0/10 from bundle"; + } + } + } + } + policy ae120up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae120$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/10 unit 0"; + "activate interfaces ge-5/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae120 came up so added ge-5/0/10 to bundle"; + } + } + } + } + policy ae121down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae121$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-1/0/4 unit 0"; + "deactivate interfaces ge-1/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae121 went down so removed ge-1/0/4 from bundle"; + } + } + } + } + policy ae121up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae121$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-1/0/4 unit 0"; + "activate interfaces ge-1/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae121 came up so added ge-1/0/4 to bundle"; + } + } + } + } + policy ae122down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae122$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/12 unit 0"; + "deactivate interfaces ge-5/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae122 went down so removed ge-5/0/12 from bundle"; + } + } + } + } + policy ae122up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae122$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/12 unit 0"; + "activate interfaces ge-5/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae122 came up so added ge-5/0/12 to bundle"; + } + } + } + } + policy ae123down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae123$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/14 unit 0"; + "deactivate interfaces ge-5/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae123 went down so removed ge-5/0/14 from bundle"; + } + } + } + } + policy ae123up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae123$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/14 unit 0"; + "activate interfaces ge-5/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae123 came up so added ge-5/0/14 to bundle"; + } + } + } + } + policy ae124down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae124$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/16 unit 0"; + "deactivate interfaces ge-5/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae124 went down so removed ge-5/0/16 from bundle"; + } + } + } + } + policy ae124up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae124$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/16 unit 0"; + "activate interfaces ge-5/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae124 came up so added ge-5/0/16 to bundle"; + } + } + } + } + policy ae127down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae127$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/21 unit 0"; + "deactivate interfaces ge-5/0/21 ether-options"; + "activate interfaces ge-5/0/20 unit 0"; + "deactivate interfaces ge-5/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae127 went down so removed ge-5/0/20 from bundle"; + } + } + } + } + policy ae127up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae127$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/21 unit 0"; + "activate interfaces ge-5/0/21 ether-options"; + "deactivate interfaces ge-5/0/20 unit 0"; + "activate interfaces ge-5/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae127 came up so added ge-5/0/20 to bundle"; + } + } + } + } + policy ae126down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae126$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/18 unit 0"; + "deactivate interfaces ge-5/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae126 went down so removed ge-5/0/18 from bundle"; + } + } + } + } + policy ae126up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae126$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/18 unit 0"; + "activate interfaces ge-5/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae126 came up so added ge-5/0/18 to bundle"; + } + } + } + } + policy ae125down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae125$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-4/0/0 unit 0"; + "deactivate interfaces ge-4/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae125 went down so removed ge-4/0/0 from bundle"; + } + } + } + } + policy ae125up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae125$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-4/0/0 unit 0"; + "activate interfaces ge-4/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae125 came up so added ge-4/0/0 to bundle"; + } + } + } + } + policy ae128down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae128$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-3/0/0 unit 0"; + "deactivate interfaces ge-3/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae128 went down so removed ge-3/0/0 from bundle"; + } + } + } + } + policy ae128up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae128$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-3/0/0 unit 0"; + "activate interfaces ge-3/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae128 came up so added ge-3/0/0 to bundle"; + } + } + } + } + policy ae130down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae130$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-3/0/2 unit 0"; + "deactivate interfaces ge-3/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae130 went down so removed ge-3/0/2 from bundle"; + } + } + } + } + policy ae130up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae130$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-3/0/2 unit 0"; + "activate interfaces ge-3/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae130 came up so added ge-3/0/2 to bundle"; + } + } + } + } + policy ae131down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae131$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-1/0/6 unit 0"; + "deactivate interfaces ge-1/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae131 went down so removed ge-1/0/6 from bundle"; + } + } + } + } + policy ae131up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae131$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-1/0/6 unit 0"; + "activate interfaces ge-1/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae131 came up so added ge-1/0/6 to bundle"; + } + } + } + } + policy ae132down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae132$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-1/0/8 unit 0"; + "deactivate interfaces ge-1/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae132 went down so removed ge-1/0/8 from bundle"; + } + } + } + } + policy ae132up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae132$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-1/0/8 unit 0"; + "activate interfaces ge-1/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae132 came up so added ge-1/0/8 to bundle"; + } + } + } + } + policy ae133down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae133$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-2/0/4 unit 0"; + "deactivate interfaces ge-2/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae133 went down so removed ge-2/0/4 from bundle"; + } + } + } + } + policy ae133up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae133$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-2/0/4 unit 0"; + "activate interfaces ge-2/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae133 came up so added ge-2/0/4 to bundle"; + } + } + } + } + policy ae129down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae129$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-4/0/2 unit 0"; + "deactivate interfaces ge-4/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae129 went down so removed ge-4/0/2 from bundle"; + } + } + } + } + policy ae129up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae129$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-4/0/2 unit 0"; + "activate interfaces ge-4/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae129 came up so added ge-4/0/2 to bundle"; + } + } + } + } +} +routing-options { + nonstop-routing; +} +protocols { + router-advertisement { + traceoptions { + file ipv6-nd-trace; + flag all; + } + interface irb.110 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.111 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.112 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.113 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.114 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.116 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.117 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.118 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.115 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.119 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.120 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.121 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.122 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.123 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.124 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.126 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.127 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.125 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.128 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.130 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.131 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.132 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.133 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.129 { + max-advertisement-interval 30; + managed-configuration; + } + } + ospf { + export [ direct-to-ospf static-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae3.0; + interface et-6/0/27.0; + } + } + ospf3 { + export [ static-to-ospf direct-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae3.0; + interface et-6/0/27.0; + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } + igmp-snooping { + vlan default; + } + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + layer2-control { + nonstop-bridging; + } + rstp { + bridge-priority 4k; + interface all; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } + policy-statement direct-to-ospf { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement static-to-ospf { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +access { + address-assignment { + pool tele-v6 { + family inet6 { + prefix 2a06:5841:a:302::0/64; + range tele-v6 { + low 2a06:5841:a:302::1337:1337:1/128; + high 2a06:5841:a:302::1337:1337:ffff/128; + } + dhcp-attributes { + dns-server { + 2001:4860:4860::8888; + 2001:4860:4860::8844; + } + } + } + } + pool tele-v4 { + family inet { + network 88.92.8.0/27; + range tele-v4 { + low 88.92.8.2; + high 88.92.8.30; + } + dhcp-attributes { + name-server { + 1.1.1.1; + } + router { + 88.92.8.1; + } + } + host southcam { + hardware-address 00:10:f3:60:39:df; + ip-address 88.92.8.2; + } + host noccam { + hardware-address 00:d0:89:18:ee:64; + ip-address 88.92.8.3; + } + } + } + } +} +virtual-chassis { + preprovisioned; + vcp-snmp-statistics; + /* tele */ + member 0 { + role routing-engine; + serial-number <removed>; + location tele; + } + /* south */ + member 1 { + role line-card; + serial-number <removed>; + location south; + } + /* log */ + member 2 { + role line-card; + serial-number <removed>; + location log; + } + /* swing */ + member 3 { + role line-card; + serial-number <removed>; + location swing; + } + /* north */ + member 4 { + role line-card; + serial-number <removed>; + location north; + } + /* noc 2 */ + member 5 { + role line-card; + serial-number <removed>; + location noc2; + } + /* noc1 */ + member 6 { + role routing-engine; + serial-number <removed>; + location noc1; + } +} +vlans { + EVENT-INTERN { + vlan-id 3000; + } + SECURITY { + vlan-id 2500; + } + aps-mgmt { + vlan-id 777; + } + default { + vlan-id 1; + l3-interface irb.0; + } + mgmt { + vlan-id 666; + l3-interface irb.666; + } + s1.auditorium { + vlan-id 125; + } + s1.boh { + vlan-id 128; + } + s1.cna { + vlan-id 114; + } + s1.event { + vlan-id 115; + } + s1.event-ob { + vlan-id 133; + } + s1.foh { + vlan-id 130; + } + s1.fugleberget { + vlan-id 120; + } + s1.log { + vlan-id 112; + } + s1.medic { + vlan-id 124; + } + s1.noc { + vlan-id 110; + } + s1.north { + vlan-id 129; + } + s1.presse { + vlan-id 118; + } + s1.resepsjon { + vlan-id 123; + } + s1.roof { + vlan-id 126; + } + s1.secbua { + vlan-id 117; + } + s1.south { + vlan-id 121; + } + s1.sponsorgate { + vlan-id 122; + } + s1.systemstonad { + vlan-id 116; + } + s1.videorom { + vlan-id 119; + } + s2.cna { + vlan-id 131; + } + s2.log { + vlan-id 113; + } + s2.noc { + vlan-id 111; + } + s2.roof { + vlan-id 127; + } + s3.cna { + vlan-id 132; + } + statisk.ip { + vlan-id 1337; + } + vlan100 { + vlan-id 100; + l3-interface irb.100; + } +} diff --git a/examples/tg19/netconf/r1.ring-l3.conf b/examples/tg19/netconf/r1.ring-l3.conf new file mode 100644 index 0000000..651ce28 --- /dev/null +++ b/examples/tg19/netconf/r1.ring-l3.conf @@ -0,0 +1,2974 @@ +## Last changed: 2019-04-17 01:58:42 CEST +## Image name: jinstall-host-ex-4600-16.1R7.8-signed.tgz + +version 16.1R7.8; +system { + host-name r1.ring; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + idle-timeout 5; + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + dhcp-local-server { + traceoptions { + file log-dhcp size 10000000; + flag all; + } + dhcpv6 { + group southcam-v6 { + interface irb.100; + } + } + group southcam-v4 { + interface irb.100; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 128; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +services { + analytics { + streaming-server telemetry_server { + remote-address 185.110.149.4; + remote-port 5015; + } + export-profile export_20302 { + local-address 185.110.148.66; + local-port 20302; + reporting-rate 60; + format gpb; + transport udp; + } + sensor junos_system_linecard_interface { + server-name telemetry_server; + export-name export_20302; + resource /junos/system/linecard/interface/; + } + sensor junos_system_linecard_interface_logical_usage { + server-name telemetry_server; + export-name export_20302; + resource /junos/system/linecard/interface/logical/usage/; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + ge-0/0/0 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/2 { + description "G: s1.secbua"; + ether-options { + 802.3ad ae117; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "G: s1.secbua"; + ether-options { + 802.3ad ae117; + } + } + ge-0/0/4 { + description "SECURITY SERVER"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members SECURITY; + } + } + } + } + ge-0/0/5 { + description TeleCam; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members s2.noc; + } + } + } + } + et-0/0/26 { + description "G: r1.tele (ae3)"; + ether-options { + 802.3ad ae3; + } + } + et-0/0/27 { + description "fw1.tele - port27"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ EVENT-INTERN s1.noc ]; + } + } + } + } + ge-1/0/0 { + description "C: soutcam vlan 100"; + unit 0 { + family ethernet-switching { + vlan { + members vlan100; + } + } + } + } + ge-1/0/2 { + description "G: s1.cna"; + ether-options { + 802.3ad ae114; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-1/0/3 { + description "G: s1.cna"; + ether-options { + 802.3ad ae114; + } + } + ge-1/0/4 { + description "G: s1.south"; + ether-options { + 802.3ad ae121; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-1/0/5 { + description "G: s1.south"; + ether-options { + 802.3ad ae121; + } + } + ge-1/0/6 { + description "Fysisk: s2.cna"; + ether-options { + 802.3ad ae131; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-1/0/7 { + description "Fysisk: s2.cna"; + ether-options { + 802.3ad ae131; + } + } + ge-1/0/8 { + description "Fysisk: s3.cna"; + inactive: ether-options { + 802.3ad ae132; + } + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-1/0/9 { + description "Fysisk: s3.cna"; + ether-options { + 802.3ad ae132; + } + } + ge-2/0/0 { + description "G: s1.log"; + ether-options { + 802.3ad ae112; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-2/0/1 { + description "G: s1.log"; + ether-options { + 802.3ad ae112; + } + } + ge-2/0/2 { + description "G: s2.log"; + ether-options { + 802.3ad ae113; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-2/0/3 { + description "G: s2.log"; + ether-options { + 802.3ad ae113; + } + } + ge-2/0/4 { + description "Fysisk: s1.event-ob"; + ether-options { + 802.3ad ae133; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-2/0/5 { + description "Fysisk: s1.event-ob"; + ether-options { + 802.3ad ae133; + } + } + ge-2/0/22 { + description "G: s3.wifi"; + ether-options { + 802.3ad ae779; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-2/0/23 { + description "G: s3.wifi"; + ether-options { + 802.3ad ae779; + } + } + xe-2/2/0 { + description "G: s1.event"; + ether-options { + 802.3ad ae115; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + xe-2/2/1 { + description "G: s1.event"; + ether-options { + 802.3ad ae115; + } + } + ge-3/0/0 { + description "Fysisk: s1.boh"; + ether-options { + 802.3ad ae128; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-3/0/1 { + description "Fysisk: s1.boh"; + ether-options { + 802.3ad ae128; + } + } + ge-3/0/2 { + description "Fysisk: s1.foh"; + ether-options { + 802.3ad ae130; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-3/0/3 { + description "Fysisk: s1.foh"; + ether-options { + 802.3ad ae130; + } + } + ge-3/0/22 { + description "G: s2.wifi"; + ether-options { + 802.3ad ae778; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-3/0/23 { + description "G: s2.wifi"; + ether-options { + 802.3ad ae778; + } + } + ge-4/0/0 { + description "Fysisk: s1.auditorium"; + ether-options { + 802.3ad ae125; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-4/0/1 { + description "Fysisk: s1.auditorium"; + ether-options { + 802.3ad ae125; + } + } + ge-4/0/2 { + description "Fysisk: s1.north"; + ether-options { + 802.3ad ae129; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-4/0/3 { + description "Fysisk: s1.north"; + ether-options { + 802.3ad ae129; + } + } + ge-5/0/0 { + description "G: s1.noc"; + ether-options { + 802.3ad ae110; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/1 { + description "G: s1.noc"; + ether-options { + 802.3ad ae110; + } + } + ge-5/0/2 { + description "G: s2.noc"; + ether-options { + 802.3ad ae111; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/3 { + description "G: s2.noc"; + ether-options { + 802.3ad ae111; + } + } + ge-5/0/4 { + description "G: s1.systemstonad"; + ether-options { + 802.3ad ae116; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/5 { + description "G: s1.systemstonad"; + ether-options { + 802.3ad ae116; + } + } + ge-5/0/6 { + description "G: s1.presse"; + ether-options { + 802.3ad ae118; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/7 { + description "G: s1.presse"; + ether-options { + 802.3ad ae118; + } + } + ge-5/0/8 { + description "G: s1.videorom"; + ether-options { + 802.3ad ae119; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/9 { + description "G: s1.videorom"; + ether-options { + 802.3ad ae119; + } + } + ge-5/0/10 { + description "G: s1.fugleberget"; + ether-options { + 802.3ad ae120; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/11 { + description "G: s1.fugleberget"; + ether-options { + 802.3ad ae120; + } + } + ge-5/0/12 { + description "G: s1.sponsorgate"; + ether-options { + 802.3ad ae122; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/13 { + description "G: s1.sponsorgate"; + ether-options { + 802.3ad ae122; + } + } + ge-5/0/14 { + description "Fysisk: s1.resepsjon"; + ether-options { + 802.3ad ae123; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/15 { + description "Fysisk: s1.resepsjon"; + ether-options { + 802.3ad ae123; + } + } + ge-5/0/16 { + description "Fysisk: s1.medic"; + ether-options { + 802.3ad ae124; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/17 { + description "Fysisk: s1.medic"; + ether-options { + 802.3ad ae124; + } + } + ge-5/0/18 { + description "Fysisk: s1.roof"; + ether-options { + 802.3ad ae126; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/19 { + description "Fysisk: s1.roof"; + ether-options { + 802.3ad ae126; + } + } + ge-5/0/20 { + description "Fysisk: s2.roof"; + ether-options { + 802.3ad ae127; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/21 { + description "Fysisk: s2.roof"; + ether-options { + 802.3ad ae127; + } + } + ge-5/0/22 { + description TestCam; + unit 0 { + family ethernet-switching { + vlan { + members s2.noc; + } + } + } + } + ge-5/0/44 { + description "G: s1.wifi"; + ether-options { + 802.3ad ae777; + } + inactive: unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members mgmt; + } + } + } + } + ge-5/0/45 { + description "G: s1.wifi"; + ether-options { + 802.3ad ae777; + } + } + ge-5/0/47 { + description "C: NOCCam"; + unit 0 { + family ethernet-switching { + vlan { + members vlan100; + } + } + } + } + et-5/1/2 { + description "B: fw1.tele port28"; + ether-options { + 802.3ad ae4; + } + } + et-6/0/26 { + description "G: r1.tele (ae3)"; + ether-options { + 802.3ad ae3; + } + } + et-6/0/27 { + description "B: r1.noc et-3/3/2"; + unit 0 { + description "B: r1.noc et-3/3/2"; + family inet { + address 185.110.148.136/31; + } + family inet6 { + address 2a06:5841:f:f05::/127; + } + } + } + ae3 { + description "B: r1.tele ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 185.110.148.133/31; + } + family inet6 { + address 2a06:5841:f:f03::1/127; + } + } + } + ae4 { + description "B: fw1.tele"; + aggregated-ether-options { + lacp { + active; + } + } + } + ae110 { + description "B: s1.noc <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.noc statisk.ip ]; + } + } + } + } + ae111 { + description "B: s2.noc <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s2.noc ]; + } + } + } + } + ae112 { + description "B: s1.log <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.log ]; + } + } + } + } + ae113 { + description "B: s2.log <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s2.log ]; + } + } + } + } + ae114 { + description "B: s1.cna <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.cna ]; + } + } + } + } + ae115 { + description "B: s1.event <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.event EVENT-INTERN ]; + } + } + } + } + ae116 { + description "B: s1.systemstonad <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.systemstonad ]; + } + } + } + } + ae117 { + description "B: s1.secbua <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.secbua SECURITY ]; + } + } + } + } + ae118 { + description "B: s1.presse <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.presse ]; + } + } + } + } + ae119 { + description "B: s1.videorom <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.videorom SECURITY ]; + } + } + } + } + ae120 { + description "B: s1.fugleberget <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.fugleberget ]; + } + } + } + } + ae121 { + description "B: s1.south <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.south ]; + } + } + } + } + ae122 { + description "B: s1.sponsorgate <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.sponsorgate ]; + } + } + } + } + ae123 { + description "Gruppe: s1.resepsjon <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.resepsjon ]; + } + } + } + } + ae124 { + description "Gruppe: s1.medic <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.medic SECURITY ]; + } + } + } + } + ae125 { + description "Gruppe: s1.auditorium <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.auditorium ]; + } + } + } + } + ae126 { + description "Gruppe: s1.roof <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.roof ]; + } + } + } + } + ae127 { + description "Gruppe: s2.roof <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s2.roof ]; + } + } + } + } + ae128 { + description "Gruppe: s1.boh <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.boh EVENT-INTERN ]; + } + } + } + } + ae129 { + description "Gruppe: s1.north <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.north ]; + } + } + } + } + ae130 { + description "Gruppe: s1.foh <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.foh EVENT-INTERN ]; + } + } + } + } + ae131 { + description "Gruppe: s2.cna <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s2.cna ]; + } + } + } + } + ae132 { + description "Gruppe: s3.cna <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s3.cna ]; + } + } + } + } + ae133 { + description "Gruppe: s1.event-ob <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt s1.event-ob ]; + } + } + } + } + ae777 { + description "B: s1.wifi <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt aps-mgmt ]; + } + } + } + } + ae778 { + description "B: s2.wifi <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt aps-mgmt ]; + } + } + } + } + ae779 { + description "B: s3.wifi <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ mgmt aps-mgmt ]; + } + } + } + } + irb { + unit 0; + unit 100 { + description "C: southcam net"; + family inet { + address 88.92.8.1/27; + } + family inet6 { + address 2a06:5841:a:302::1/64; + } + } + unit 110 { + description s1.noc; + } + unit 111 { + description s2.noc; + family inet { + address 185.110.150.65/26; + } + family inet6 { + address 2a06:5841:f:d::1/64; + } + } + unit 112 { + description s1.log; + family inet { + address 88.92.8.65/26; + } + family inet6 { + address 2a06:5841:c:112::1/64; + } + } + unit 113 { + description s2.log; + family inet { + address 88.92.8.129/26; + } + family inet6 { + address 2a06:5841:c:113::1/64; + } + } + unit 114 { + description s1.cna; + family inet { + address 88.92.8.193/26; + } + family inet6 { + address 2a06:5841:c:114::1/64; + } + } + unit 115 { + description s1.event; + family inet { + address 88.92.9.1/26; + } + family inet6 { + address 2a06:5841:c:115::1/64; + } + } + unit 116 { + description s1.systemstonad; + family inet { + address 88.92.9.65/26; + } + family inet6 { + address 2a06:5841:c:116::1/64; + } + } + unit 117 { + description s1.secbua; + family inet { + address 88.92.9.129/26; + } + family inet6 { + address 2a06:5841:c:117::1/64; + } + } + unit 118 { + description s1.presse; + family inet { + address 88.92.9.193/26; + } + family inet6 { + address 2a06:5841:c:118::1/64; + } + } + unit 119 { + description s1.videorom; + family inet { + address 88.92.10.1/26; + } + family inet6 { + address 2a06:5841:c:119::1/64; + } + } + unit 120 { + description s1.fugleberget; + family inet { + address 88.92.10.65/26; + } + family inet6 { + address 2a06:5841:c:120::1/64; + } + } + unit 121 { + description s1.south; + family inet { + address 88.92.10.129/26; + } + family inet6 { + address 2a06:5841:c:121::1/64; + } + } + unit 122 { + description s1.sponsorgate; + family inet { + address 88.92.10.193/26; + } + family inet6 { + address 2a06:5841:c:122::1/64; + } + } + unit 123 { + description s1.resepsjon; + family inet { + address 88.92.11.1/26; + } + family inet6 { + address 2a06:5841:c:123::1/64; + } + } + unit 124 { + description s1.medic; + family inet { + address 88.92.11.65/26; + } + family inet6 { + address 2a06:5841:c:124::1/64; + } + } + unit 125 { + description s1.auditorium; + family inet { + address 88.92.11.129/26; + } + family inet6 { + address 2a06:5841:c:125::1/64; + } + } + unit 126 { + description s1.roof; + family inet { + address 88.92.11.193/26; + } + family inet6 { + address 2a06:5841:c:126::1/64; + } + } + unit 127 { + description s2.roof; + family inet { + address 88.92.12.1/26; + } + family inet6 { + address 2a06:5841:c:127::1/64; + } + } + unit 128 { + description s1.boh; + family inet { + address 88.92.12.65/26; + } + family inet6 { + address 2a06:5841:c:128::1/64; + } + } + unit 129 { + description s1.north; + family inet { + address 88.92.12.129/26; + } + family inet6 { + address 2a06:5841:c:129::1/64; + } + } + unit 130 { + description s1.foh; + family inet { + address 88.92.13.1/26; + } + family inet6 { + address 2a06:5841:c:130::1/64; + } + } + unit 131 { + description s2.cna; + family inet { + address 88.92.13.65/26; + } + family inet6 { + address 2a06:5841:c:131::1/64; + } + } + unit 132 { + description s3.cna; + family inet { + address 88.92.13.129/26; + } + family inet6 { + address 2a06:5841:c:132::1/64; + } + } + unit 133 { + description s1.event-ob; + family inet { + address 88.92.13.193/26; + } + family inet6 { + address 2a06:5841:c:133::1/64; + } + } + unit 666 { + family inet { + address 88.92.2.65/26; + } + family inet6 { + address 2a06:5841:d:b::1/64; + } + } + unit 777 { + description aps-mgmt; + family inet { + address 88.92.6.129/26; + } + family inet6 { + address 2a06:5841:d:aa::1/64; + } + } + unit 1337 { + description "C: Statisk Ip NOC"; + family inet { + address 88.92.127.193/27; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + address 185.110.148.66/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + address 2a06:5841:f:e::66/128; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +forwarding-options { + storm-control-profiles default { + all; + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides { + allow-snooped-clients; + } + interface irb.110; + interface irb.111; + interface irb.112; + interface irb.113; + interface irb.114; + interface irb.115; + interface irb.116; + interface irb.117; + interface irb.118; + interface irb.119; + interface irb.120; + interface irb.121; + interface irb.122; + interface irb.123; + interface irb.124; + interface irb.125; + interface irb.126; + interface irb.127; + interface irb.128; + interface irb.129; + interface irb.130; + interface irb.131; + interface irb.132; + interface irb.133; + interface irb.777; + } + server-group { + v6-edge-switches { + 2a06:5841:a:103::2; + } + } + } + server-group { + fapfapfap-group { + 185.110.149.2; + } + v4-edge-switches { + 185.110.149.2; + } + } + route-suppression { + access-internal; + } + group fapfapfap { + active-server-group fapfapfap-group; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface irb.666; + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface irb.110; + interface irb.111; + interface irb.112; + interface irb.113; + interface irb.114; + interface irb.115; + interface irb.116; + interface irb.117; + interface irb.118; + interface irb.119; + interface irb.120; + interface irb.121; + interface irb.122; + interface irb.123; + interface irb.124; + interface irb.125; + interface irb.126; + interface irb.127; + interface irb.128; + interface irb.129; + interface irb.130; + interface irb.131; + interface irb.132; + interface irb.133; + interface irb.777; + } + } +} +event-options { + policy ae110down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae110$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/0 unit 0"; + "deactivate interfaces ge-5/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae110 went down so removed ge-5/0/0 from bundle"; + } + } + } + } + policy ae110up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae110$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/0 unit 0"; + "activate interfaces ge-5/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae110 came up so added ge-5/0/0 to bundle"; + } + } + } + } + policy ae111down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae111$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/2 unit 0"; + "deactivate interfaces ge-5/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae111 went down so removed ge-5/0/2 from bundle"; + } + } + } + } + policy ae111up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae111$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/2 unit 0"; + "activate interfaces ge-5/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae111 came up so added ge-5/0/2 to bundle"; + } + } + } + } + policy ae112down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae112$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-2/0/0 unit 0"; + "deactivate interfaces ge-2/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae112 went down so removed ge-2/0/0 from bundle"; + } + } + } + } + policy ae112up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae112$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-2/0/0 unit 0"; + "activate interfaces ge-2/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae112 came up so added ge-2/0/0 to bundle"; + } + } + } + } + policy ae113down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae113$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-2/0/2 unit 0"; + "deactivate interfaces ge-2/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae113 went down so removed ge-2/0/2 from bundle"; + } + } + } + } + policy ae113up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae113$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-2/0/2 unit 0"; + "activate interfaces ge-2/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae113 came up so added ge-2/0/2 to bundle"; + } + } + } + } + policy ae114down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae114$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-1/0/2 unit 0"; + "deactivate interfaces ge-1/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae114 went down so removed ge-1/0/2 from bundle"; + } + } + } + } + policy ae114up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae114$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-1/0/2 unit 0"; + "activate interfaces ge-1/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae114 came up so added ge-1/0/2 to bundle"; + } + } + } + } + policy ae116down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae116$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/4 unit 0"; + "deactivate interfaces ge-5/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae116 went down so removed ge-5/0/4 from bundle"; + } + } + } + } + policy ae116up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae116$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/4 unit 0"; + "activate interfaces ge-5/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae116 came up so added ge-5/0/4 to bundle"; + } + } + } + } + policy ae117down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae117$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae117 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae117up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae117$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae117 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae118down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae118$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/6 unit 0"; + "deactivate interfaces ge-5/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae118 went down so removed ge-5/0/6 from bundle"; + } + } + } + } + policy ae118up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae118$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/6 unit 0"; + "activate interfaces ge-5/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae118 came up so added ge-5/0/6 to bundle"; + } + } + } + } + policy ae115down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae115$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces xe-2/2/0 unit 0"; + "deactivate interfaces xe-2/2/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae115 went down so removed xe-2/2/0 from bundle"; + } + } + } + } + policy ae115up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae115$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces xe-2/2/0 unit 0"; + "activate interfaces xe-2/2/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae115 came up so added xe-2/2/0 to bundle"; + } + } + } + } + policy ae119down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae119$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/8 unit 0"; + "deactivate interfaces ge-5/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae119 went down so removed ge-5/0/8 from bundle"; + } + } + } + } + policy ae119up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae119$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/8 unit 0"; + "activate interfaces ge-5/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae119 came up so added ge-5/0/8 to bundle"; + } + } + } + } + policy ae120down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae120$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/10 unit 0"; + "deactivate interfaces ge-5/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae120 went down so removed ge-5/0/10 from bundle"; + } + } + } + } + policy ae120up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae120$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/10 unit 0"; + "activate interfaces ge-5/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae120 came up so added ge-5/0/10 to bundle"; + } + } + } + } + policy ae121down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae121$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-1/0/4 unit 0"; + "deactivate interfaces ge-1/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae121 went down so removed ge-1/0/4 from bundle"; + } + } + } + } + policy ae121up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae121$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-1/0/4 unit 0"; + "activate interfaces ge-1/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae121 came up so added ge-1/0/4 to bundle"; + } + } + } + } + policy ae122down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae122$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/12 unit 0"; + "deactivate interfaces ge-5/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae122 went down so removed ge-5/0/12 from bundle"; + } + } + } + } + policy ae122up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae122$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/12 unit 0"; + "activate interfaces ge-5/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae122 came up so added ge-5/0/12 to bundle"; + } + } + } + } + policy ae123down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae123$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/14 unit 0"; + "deactivate interfaces ge-5/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae123 went down so removed ge-5/0/14 from bundle"; + } + } + } + } + policy ae123up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae123$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/14 unit 0"; + "activate interfaces ge-5/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae123 came up so added ge-5/0/14 to bundle"; + } + } + } + } + policy ae124down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae124$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/16 unit 0"; + "deactivate interfaces ge-5/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae124 went down so removed ge-5/0/16 from bundle"; + } + } + } + } + policy ae124up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae124$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/16 unit 0"; + "activate interfaces ge-5/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae124 came up so added ge-5/0/16 to bundle"; + } + } + } + } + policy ae127down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae127$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/21 unit 0"; + "deactivate interfaces ge-5/0/21 ether-options"; + "activate interfaces ge-5/0/20 unit 0"; + "deactivate interfaces ge-5/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae127 went down so removed ge-5/0/20 from bundle"; + } + } + } + } + policy ae127up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae127$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/21 unit 0"; + "activate interfaces ge-5/0/21 ether-options"; + "deactivate interfaces ge-5/0/20 unit 0"; + "activate interfaces ge-5/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae127 came up so added ge-5/0/20 to bundle"; + } + } + } + } + policy ae126down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae126$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-5/0/18 unit 0"; + "deactivate interfaces ge-5/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae126 went down so removed ge-5/0/18 from bundle"; + } + } + } + } + policy ae126up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae126$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-5/0/18 unit 0"; + "activate interfaces ge-5/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae126 came up so added ge-5/0/18 to bundle"; + } + } + } + } + policy ae125down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae125$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-4/0/0 unit 0"; + "deactivate interfaces ge-4/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae125 went down so removed ge-4/0/0 from bundle"; + } + } + } + } + policy ae125up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae125$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-4/0/0 unit 0"; + "activate interfaces ge-4/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae125 came up so added ge-4/0/0 to bundle"; + } + } + } + } + policy ae128down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae128$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-3/0/0 unit 0"; + "deactivate interfaces ge-3/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae128 went down so removed ge-3/0/0 from bundle"; + } + } + } + } + policy ae128up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae128$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-3/0/0 unit 0"; + "activate interfaces ge-3/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae128 came up so added ge-3/0/0 to bundle"; + } + } + } + } + policy ae130down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae130$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-3/0/2 unit 0"; + "deactivate interfaces ge-3/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae130 went down so removed ge-3/0/2 from bundle"; + } + } + } + } + policy ae130up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae130$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-3/0/2 unit 0"; + "activate interfaces ge-3/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae130 came up so added ge-3/0/2 to bundle"; + } + } + } + } + policy ae131down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae131$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-1/0/6 unit 0"; + "deactivate interfaces ge-1/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae131 went down so removed ge-1/0/6 from bundle"; + } + } + } + } + policy ae131up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae131$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-1/0/6 unit 0"; + "activate interfaces ge-1/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae131 came up so added ge-1/0/6 to bundle"; + } + } + } + } + policy ae132down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae132$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-1/0/8 unit 0"; + "deactivate interfaces ge-1/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae132 went down so removed ge-1/0/8 from bundle"; + } + } + } + } + policy ae132up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae132$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-1/0/8 unit 0"; + "activate interfaces ge-1/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae132 came up so added ge-1/0/8 to bundle"; + } + } + } + } + policy ae133down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae133$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-2/0/4 unit 0"; + "deactivate interfaces ge-2/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae133 went down so removed ge-2/0/4 from bundle"; + } + } + } + } + policy ae133up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae133$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-2/0/4 unit 0"; + "activate interfaces ge-2/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae133 came up so added ge-2/0/4 to bundle"; + } + } + } + } + policy ae129down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae129$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-4/0/2 unit 0"; + "deactivate interfaces ge-4/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae129 went down so removed ge-4/0/2 from bundle"; + } + } + } + } + policy ae129up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae129$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-4/0/2 unit 0"; + "activate interfaces ge-4/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae129 came up so added ge-4/0/2 to bundle"; + } + } + } + } +} +routing-options { + nonstop-routing; +} +protocols { + router-advertisement { + traceoptions { + file ipv6-nd-trace; + flag all; + } + interface irb.110 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.111 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.112 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.113 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.114 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.116 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.117 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.118 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.115 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.119 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.120 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.121 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.122 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.123 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.124 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.126 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.127 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.125 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.128 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.130 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.131 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.132 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.133 { + max-advertisement-interval 30; + managed-configuration; + } + interface irb.129 { + max-advertisement-interval 30; + managed-configuration; + } + } + ospf { + export [ direct-to-ospf static-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae3.0; + interface et-6/0/27.0; + } + } + ospf3 { + export [ static-to-ospf direct-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae3.0; + interface et-6/0/27.0; + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } + igmp-snooping { + vlan default; + } + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + layer2-control { + nonstop-bridging; + } + rstp { + bridge-priority 4k; + interface all; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } + policy-statement direct-to-ospf { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement static-to-ospf { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +access { + address-assignment { + pool tele-v6 { + family inet6 { + prefix 2a06:5841:a:302::0/64; + range tele-v6 { + low 2a06:5841:a:302::1337:1337:1/128; + high 2a06:5841:a:302::1337:1337:ffff/128; + } + dhcp-attributes { + dns-server { + 2001:4860:4860::8888; + 2001:4860:4860::8844; + } + } + } + } + pool tele-v4 { + family inet { + network 88.92.8.0/27; + range tele-v4 { + low 88.92.8.2; + high 88.92.8.30; + } + dhcp-attributes { + name-server { + 1.1.1.1; + } + router { + 88.92.8.1; + } + } + host southcam { + hardware-address 00:10:f3:60:39:df; + ip-address 88.92.8.2; + } + host noccam { + hardware-address 00:d0:89:18:ee:64; + ip-address 88.92.8.3; + } + } + } + } +} +virtual-chassis { + preprovisioned; + no-split-detection; + vcp-snmp-statistics; + /* tele */ + member 0 { + role routing-engine; + serial-number <removed>; + location tele; + } + /* south */ + member 1 { + role line-card; + serial-number <removed>; + location south; + } + /* log */ + member 2 { + role line-card; + serial-number <removed>; + location log; + } + /* swing */ + member 3 { + role line-card; + serial-number <removed>; + location swing; + } + /* north */ + member 4 { + role line-card; + serial-number <removed>; + location north; + } + /* noc 2 */ + member 5 { + role line-card; + serial-number <removed>; + location noc2; + } + /* noc1 */ + member 6 { + role routing-engine; + serial-number <removed>; + location noc1; + } +} +vlans { + EVENT-INTERN { + vlan-id 3000; + } + SECURITY { + vlan-id 2500; + } + aps-mgmt { + vlan-id 777; + l3-interface irb.777; + } + default { + vlan-id 1; + l3-interface irb.0; + } + mgmt { + vlan-id 666; + l3-interface irb.666; + } + s1.auditorium { + vlan-id 125; + l3-interface irb.125; + } + s1.boh { + vlan-id 128; + l3-interface irb.128; + } + s1.cna { + vlan-id 114; + l3-interface irb.114; + } + s1.event { + vlan-id 115; + l3-interface irb.115; + } + s1.event-ob { + vlan-id 133; + l3-interface irb.133; + } + s1.foh { + vlan-id 130; + l3-interface irb.130; + } + s1.fugleberget { + vlan-id 120; + l3-interface irb.120; + } + s1.log { + vlan-id 112; + l3-interface irb.112; + } + s1.medic { + vlan-id 124; + l3-interface irb.124; + } + s1.noc { + vlan-id 110; + } + s1.north { + vlan-id 129; + l3-interface irb.129; + } + s1.presse { + vlan-id 118; + l3-interface irb.118; + } + s1.resepsjon { + vlan-id 123; + l3-interface irb.123; + } + s1.roof { + vlan-id 126; + l3-interface irb.126; + } + s1.secbua { + vlan-id 117; + l3-interface irb.117; + } + s1.south { + vlan-id 121; + l3-interface irb.121; + } + s1.sponsorgate { + vlan-id 122; + l3-interface irb.122; + } + s1.systemstonad { + vlan-id 116; + l3-interface irb.116; + } + s1.videorom { + vlan-id 119; + l3-interface irb.119; + } + s2.cna { + vlan-id 131; + l3-interface irb.131; + } + s2.log { + vlan-id 113; + l3-interface irb.113; + } + s2.noc { + vlan-id 111; + l3-interface irb.111; + } + s2.roof { + vlan-id 127; + l3-interface irb.127; + } + s3.cna { + vlan-id 132; + l3-interface irb.132; + } + statisk.ip { + vlan-id 1337; + l3-interface irb.1337; + } + vlan100 { + vlan-id 100; + l3-interface irb.100; + } +} diff --git a/examples/tg19/netconf/r1.stand.conf b/examples/tg19/netconf/r1.stand.conf new file mode 100644 index 0000000..93bb7d5 --- /dev/null +++ b/examples/tg19/netconf/r1.stand.conf @@ -0,0 +1,659 @@ +version 17.3R3.10; +groups { + pvehosts { + interfaces { + <ae*> { + vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ deltagerevm gamevm miscvm techvm vmhosts elastic-cluster ]; + } + } + } + } + } + } +} +system { + host-name r1.stand; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; ## SECRET-DATA + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; ## SECRET-DATA + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; ## SECRET-DATA + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + host 185.110.149.70 { + any any; + port 2514; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; ## SECRET-DATA + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 50; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + xe-0/0/0 { + description "C: birthday <enp101s0f0>"; + gigether-options { + 802.3ad ae11; + } + } + xe-0/0/1 { + description "C: funshine <enp101s0f0>"; + gigether-options { + 802.3ad ae12; + } + } + xe-0/0/2 { + description "C: pieceofheart <enp134s0f0>"; + gigether-options { + 802.3ad ae13; + } + } + xe-0/0/3 { + description "C: bedtime <enp134s0f0>"; + gigether-options { + 802.3ad ae14; + } + } + xe-0/0/5 { + description "C: WLC"; + native-vlan-id 106; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ stand-wifi-mgmt stand-wifi-klienter stand-wifi-nocnet ]; + } + } + } + } + et-0/0/50 { + description "G: r1.noc et-3/3/0"; + gigether-options { + 802.3ad ae0; + } + } + xe-1/0/0 { + description "C: birthday <enp101s0f1>"; + gigether-options { + 802.3ad ae11; + } + } + xe-1/0/1 { + description "C: funshine <enp101s0f1>"; + gigether-options { + 802.3ad ae12; + } + } + xe-1/0/2 { + description "C: pieceofheart <enp134s0f1>"; + gigether-options { + 802.3ad ae13; + } + } + xe-1/0/3 { + description "C: bedtime <enp134s0f1>"; + gigether-options { + 802.3ad ae14; + } + } + et-1/0/50 { + description "G: r1.tele et-0/0/53"; + gigether-options { + 802.3ad ae1; + } + } + xe-2/0/0 { + description "C: cheer <enp101s0f0>"; + gigether-options { + 802.3ad ae15; + } + } + xe-2/0/1 { + description "C: rainbowheart <enp2s0f0>"; + gigether-options { + 802.3ad ae16; + } + } + xe-2/0/2 { + description "C: wonderheart <enp2s0f0>"; + gigether-options { + 802.3ad ae17; + } + } + xe-2/0/3 { + description "C: surprise <enp134s0f0>"; + gigether-options { + 802.3ad ae18; + } + } + xe-2/0/5 { + description "C: WLC"; + native-vlan-id 106; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ stand-wifi-mgmt stand-wifi-klienter stand-wifi-nocnet ]; + } + } + } + } + xe-2/0/13 { + description "Deltakerserver (Vanstalk)"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members deltagerevm; + } + } + } + } + et-2/0/50 { + description "G: r1.noc et-2/3/0"; + gigether-options { + 802.3ad ae0; + } + } + xe-3/0/0 { + description "C: cheer <enp101s0f1>"; + gigether-options { + 802.3ad ae15; + } + } + xe-3/0/1 { + description "C: rainbowheart <enp2s0f1>"; + gigether-options { + 802.3ad ae16; + } + } + xe-3/0/2 { + description "C: wonderheart <enp2s0f1>"; + gigether-options { + 802.3ad ae17; + } + } + xe-3/0/3 { + description "C: surprise <enp134s0f1>"; + gigether-options { + 802.3ad ae18; + } + } + et-3/0/50 { + description "G: r1.tele et-1/0/53"; + gigether-options { + 802.3ad ae1; + } + } + ae0 { + description "B: r1.noc ae1"; + unit 0 { + family inet { + address 185.110.148.161/31; + } + family inet6 { + address 2a06:5841:f:f11::1/127; + } + } + } + ae1 { + description "B: r1.tele ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 185.110.148.139/31; + } + family inet6 { + address 2a06:5841:f:f06::1/127; + } + } + } + ae11 { + apply-groups pvehosts; + description "C: birthday.stand"; + } + ae12 { + apply-groups pvehosts; + description "C: funshine.stand"; + } + ae13 { + apply-groups pvehosts; + description "C: pieceofheart.stand <bond0>"; + } + ae14 { + apply-groups pvehosts; + description "C: bedtime.stand <bond0>"; + } + ae15 { + apply-groups pvehosts; + description "C: cheer.stand <bond0>"; + } + ae16 { + apply-groups pvehosts; + description "C: rainbowheart.stand <bond0>"; + } + ae17 { + apply-groups pvehosts; + description "C: wonderheart.stand <bond0>"; + } + ae18 { + apply-groups pvehosts; + description "C: surprise.stand <bond0>"; + } + irb { + unit 100 { + family inet { + address 185.110.149.161/27; + } + family inet6 { + address 2a06:5841:a:102::1/64; + } + } + unit 101 { + family inet { + address 185.110.149.65/26; + } + family inet6 { + address 2a06:5841:a:104::1/64; + } + } + unit 103 { + family inet { + address 88.92.17.1/24; + } + family inet6 { + address 2a06:5841:a:202::1/64; + } + } + unit 104 { + family inet { + address 88.92.18.1/24; + } + family inet6 { + address 2a06:5841:a:203::1/64; + } + } + unit 105 { + family inet { + address 88.92.19.1/24; + } + family inet6 { + address 2a06:5844:a:101::1/64; + } + } + unit 106 { + family inet { + address 88.92.4.1/27; + } + family inet6 { + address 2a06:5841:d:c::1/64; + } + } + unit 107 { + family inet { + address 88.92.32.1/19; + } + family inet6 { + address 2a06:5844:a::1/64; + } + } + unit 108 { + family inet { + address 185.110.150.129/25; + } + family inet6 { + address 2a06:5841:f:f::1/64; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + address 185.110.148.68/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + address 2a06:5841:f:e::68/128; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +forwarding-options { + dhcp-relay { + server-group { + v4-wlc { + 185.110.149.2; + } + } + group wlc { + active-server-group v4-wlc; + interface irb.107; + interface irb.108; + } + } +} +routing-options { + nonstop-routing; +} +protocols { + igmp { + interface irb.100 { + version 2; + } + } + router-advertisement { + interface irb.107 { + min-advertisement-interval 30; + other-stateful-configuration; + dns-server-address 2a06:5841:a:103::62; + dns-server-address 2a06:5841:a:104::126; + prefix 2a06:5844:a::/64; + } + interface irb.108 { + min-advertisement-interval 3; + other-stateful-configuration; + dns-server-address 2a06:5841:a:103::62; + dns-server-address 2a06:5841:a:104::126; + prefix 2a06:5841:f:f::/64; + } + } + ospf { + export [ direct-to-ospf static-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.0; + interface ae1.0; + } + } + ospf3 { + export [ static-to-ospf direct-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.0; + interface ae1.0; + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } + igmp-snooping { + vlan default; + } + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + layer2-control { + nonstop-bridging; + } + rstp { + interface all; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } + policy-statement direct-to-ospf { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement static-to-ospf { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + no-split-detection; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + deltagerevm { + vlan-id 105; + l3-interface irb.105; + } + elastic-cluster { + vlan-id 110; + } + gamevm { + vlan-id 104; + l3-interface irb.104; + } + miscvm { + vlan-id 103; + l3-interface irb.103; + } + stand-wifi-klienter { + vlan-id 107; + l3-interface irb.107; + } + stand-wifi-mgmt { + vlan-id 106; + l3-interface irb.106; + } + stand-wifi-nocnet { + vlan-id 108; + l3-interface irb.108; + } + techvm { + vlan-id 101; + l3-interface irb.101; + } + vmhosts { + vlan-id 100; + l3-interface irb.100; + } +} + + diff --git a/examples/tg19/netconf/r1.tele.conf b/examples/tg19/netconf/r1.tele.conf new file mode 100644 index 0000000..c1edcf1 --- /dev/null +++ b/examples/tg19/netconf/r1.tele.conf @@ -0,0 +1,1035 @@ +## Last changed: 2019-04-18 15:01:18 CEST +## Image name: jinstall-host-qfx-5-17.3R3.10-signed.tgz + +version 17.3R3.10; +system { + host-name r1.tele; + # Tar snapshot fra backup til primærpartisjon dersom primær ikke kommer + # opp ved boot. Etter dette er gjort, rebooter switchen. + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + 2a02:20c8:1930::164 secret "<removed>"; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + dhcp-local-server { + traceoptions { + file log-dhcp size 10000000; + flag all; + } + dhcpv6 { + group tele-v6 { + interface irb.103; + } + } + group tele-v4 { + interface irb.103; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + match "!(.*License.*)"; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 50; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +services { + analytics { + resource { + system { + polling-interval { + traffic-monitoring 10; + } + } + } + streaming-server telemetry_server { + remote-address 185.110.149.4; + remote-port 5015; + } + export-profile export_20302 { + local-address 185.110.148.64; + local-port 20302; + reporting-rate 60; + format gpb; + transport udp; + } + sensor junos_system_linecard_interface { + server-name telemetry_server; + export-name export_20302; + resource /junos/system/linecard/interface/; + } + sensor junos_system_linecard_interface_logical_usage { + server-name telemetry_server; + export-name export_20302; + resource /junos/system/linecard/interface/logical/usage/; + } + sensor optics { + server-name telemetry_server; + export-name export_20302; + resource /junos/system/linecard/optics/; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + ge-0/0/0 { + description "C: Taempnett Tele"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members testnett; + } + } + } + } + ge-0/0/1 { + description "C: Tempnett Tele"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members testnett; + } + } + } + } + ge-0/0/10 { + description TeleCam; + unit 0 { + family ethernet-switching { + vlan { + members testnett; + } + } + } + } + xe-0/0/24 { + ether-options { + 802.3ad ae5; + } + } + xe-0/0/25 { + ether-options { + 802.3ad ae8; + } + } + ge-0/0/34 { + description "C: ME IPME"; + unit 0 { + family ethernet-switching { + vlan { + members vlan100; + } + } + } + } + xe-0/0/41 { + description "G: r1.tele (xe-0/0/42) loop-kabel for redundans"; + ether-options { + 802.3ad ae7; + } + } + xe-0/0/42 { + description "G: r1.tele (xe-0/0/41) loop-kabel for redundans"; + ether-options { + 802.3ad ae6; + } + } + xe-0/0/43 { + description "G: r1.tele (xe-0/0/44) loop-kabel for redundans"; + ether-options { + 802.3ad ae7; + } + } + xe-0/0/44 { + description "G: r1.tele (xe-0/0/43) loop-kabel for redundans"; + ether-options { + 802.3ad ae6; + } + } + xe-0/0/45 { + description "G: Telenor (ae0)"; + ether-options { + 802.3ad ae0; + } + } + xe-0/0/46 { + description "G: Telenor (ae0)"; + ether-options { + 802.3ad ae0; + } + } + xe-0/0/47 { + description "G: Telenor (ae0)"; + ether-options { + 802.3ad ae0; + } + } + et-0/0/50 { + description "G: r1.ring (ae3)"; + ether-options { + 802.3ad ae3; + } + } + et-0/0/51 { + description "G: r1.noc (ae0)"; + ether-options { + 802.3ad ae2; + } + } + et-0/0/52 { + description "G: fw.tele (X)"; + ether-options { + 802.3ad ae1; + } + } + et-0/0/53 { + description "G: r1.stand (ae4)"; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/0 { + description "C: Taempnett Tele"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members testnett; + } + } + } + } + ge-1/0/1 { + description "C: Tempnett Tele"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members testnett; + } + } + } + } + xe-1/0/24 { + ether-options { + 802.3ad ae5; + } + } + xe-1/0/25 { + ether-options { + 802.3ad ae8; + } + } + ge-1/0/34 { + description "C: GREATGIVING IPME"; + unit 0 { + family ethernet-switching { + vlan { + members vlan100; + } + } + } + } + xe-1/0/41 { + description "G: r1.tele (xe-1/0/42) loop-kabel for redundans"; + ether-options { + 802.3ad ae7; + } + } + xe-1/0/42 { + description "G: r1.tele (xe-1/0/41) loop-kabel for redundans"; + ether-options { + 802.3ad ae6; + } + } + xe-1/0/43 { + description "G: r1.tele (xe-1/0/44) loop-kabel for redundans"; + ether-options { + 802.3ad ae7; + } + } + xe-1/0/44 { + description "G: r1.tele (xe-1/0/43) loop-kabel for redundans"; + ether-options { + 802.3ad ae6; + } + } + xe-1/0/45 { + description "G: Telenor (ae0)"; + disable; + ether-options { + 802.3ad ae0; + } + } + xe-1/0/46 { + description "G: Telenor (ae0)"; + ether-options { + 802.3ad ae0; + } + } + xe-1/0/47 { + description "G: Telenor (ae0)"; + ether-options { + 802.3ad ae0; + } + } + et-1/0/50 { + description "G: r1.ring (ae3)"; + ether-options { + 802.3ad ae3; + } + } + et-1/0/51 { + description "G: r1.noc (ae0)"; + ether-options { + 802.3ad ae2; + } + } + et-1/0/52 { + description "G: fw1.tele (X)"; + ether-options { + 802.3ad ae1; + } + } + et-1/0/53 { + description "G: r1.stand (ae4)"; + ether-options { + 802.3ad ae4; + } + } + ae0 { + description "P: Telenor"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + filter { + input internet-ingress-v4; + output internet-egress-v4; + } + address 193.212.22.2/30; + } + family inet6 { + filter { + input internet-ingress-v6; + output internet-egress-v6; + } + address 2001:4600:9:300::292/126; + } + } + } + ae1 { + description "B: fw1.tele"; + vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + lacp { + active; + } + } + unit 11 { + description "B: fw1.tele outside"; + vlan-id 11; + family inet { + address 185.110.148.128/31; + } + family inet6 { + address 2a06:5841:f:f01::/127; + } + } + unit 12 { + description "B: fw1.tele inside"; + vlan-id 12; + family inet { + address 185.110.148.130/31; + } + family inet6 { + address 2a06:5841:f:f02::/127; + } + } + } + ae2 { + description "B: r1.noc ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 185.110.148.134/31; + } + family inet6 { + address 2a06:5841:f:f04::/127; + } + } + } + ae3 { + description "B: r1.ring ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 185.110.148.132/31; + } + family inet6 { + address 2a06:5841:f:f03::/127; + } + } + } + ae4 { + description "B: r1.stand ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 185.110.148.138/31; + } + family inet6 { + address 2a06:5841:f:f06::/127; + } + } + } + ae5 { + description "C: me bond0"; + vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ vlan100 vlan101 vlan102 ]; + } + } + } + } + ae6 { + description "G: r1.tele (ae7) loop-kabel for redundans"; + unit 0 { + family inet { + address 185.110.148.162/31; + } + family inet6 { + address 2a06:5841:f:f12::/127; + } + } + } + ae7 { + description "G: r1.tele (ae6) loop-kabel for redundans"; + unit 0 { + family inet { + address 185.110.148.163/31; + } + family inet6 { + address 2a06:5841:f:f12::1/127; + } + } + } + ae8 { + description "C: greatgiving.tele"; + vlan-tagging; + encapsulation flexible-ethernet-services; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ vlan100 vlan101 vlan102 ]; + } + } + } + } + em0 { + unit 0 { + family inet { + dhcp; + } + } + } + em1 { + unit 0 { + family inet { + address 169.254.0.2/24; + } + } + } + irb { + unit 100 { + description "C: Tele VM hosts vlan 100"; + family inet { + address 185.110.149.129/27; + } + family inet6 { + address 2a06:5841:a:101::1/64; + } + } + unit 101 { + description "C: Tele tech-vm vlan 101"; + family inet { + address 185.110.149.1/26; + } + family inet6 { + address 2a06:5841:a:103::1/64; + } + } + unit 102 { + description "C: Tele misc-vm vlan 102"; + family inet { + address 88.92.16.1/24; + } + family inet6 { + address 2a06:5841:a:201::1/64; + } + } + unit 103 { + family inet { + address 185.110.148.33/27; + } + family inet6 { + address 2a06:5841:a:301::1/64; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + address 185.110.148.64/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + address 2a06:5841:f:e::64/128; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +forwarding-options { + storm-control-profiles default { + all; + } +} +routing-options { + nonstop-routing; + rib inet6.0 { + static { + route 2a06:5840::/29 discard; + } + } + rib inet.0 { + static { + route 185.110.148.0/22 discard; + route 88.92.0.0/17 discard; + } + } + autonomous-system 21067; +} +protocols { + igmp { + interface irb.100 { + version 2; + } + } + router-advertisement { + interface irb.103 { + managed-configuration; + other-stateful-configuration; + } + } + ospf { + export [ direct-to-ospf static-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae1.12; + interface ae2.0; + interface ae4.0; + interface ae3.0; + interface ae6.0; + } + } + ospf3 { + export [ direct-to-ospf static-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae1.12; + interface ae2.0; + interface ae4.0; + interface ae3.0; + interface ae6.0; + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } + igmp-snooping { + vlan default; + } + sflow { + agent-id 185.110.148.64; + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + collector 185.110.149.139 { + udp-port 6343; + } + interfaces all-ports; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } + policy-statement default-v4 { + term default-only { + from { + route-filter 0.0.0.0/0 exact; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement default-v6 { + term default-only { + from { + route-filter ::/0 exact; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement direct-to-ospf { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement static-to-ospf { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement telenor-in-v4 { + term accept-default { + from { + route-filter 0.0.0.0/0 exact; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement telenor-in-v6 { + term accept-default { + from { + route-filter ::/0 exact; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement telenor-out-v4 { + term accept-our-routes { + from { + route-filter 88.92.0.0/17 exact; + route-filter 194.143.120.0/21 upto /24; + route-filter 185.110.148.0/22 upto /24; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement telenor-out-v6 { + term accept-our-routes { + from { + route-filter 2a06:5840::/29 exact; + route-filter 2001:4610:7617::/48 exact; + } + then accept; + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + filter internet-ingress-v4 { + interface-specific; + term count-our { + from { + source-address { + 88.92.0.0/17; + 185.110.148.0/22; + } + } + then { + count count-our; + accept; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter internet-egress-v4 { + interface-specific; + term accept-all { + then { + count accept-all; + accept; + } + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + filter internet-ingress-v6 { + interface-specific; + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter internet-egress-v6 { + interface-specific; + term accept-all { + then { + count accept-all; + accept; + } + } + } + } +} +access { + address-assignment { + pool tele-v4 { + family inet { + network 185.110.148.32/27; + range tele-v4 { + low 185.110.148.34; + high 185.110.148.63; + } + dhcp-attributes { + name-server { + 1.1.1.1; + } + router { + 185.110.148.33; + } + } + } + } + pool tele-v6 { + family inet6 { + prefix 2a06:5841:a:301::0/64; + range tele-v6 { + low 2a06:5841:a:301::1337:1337:1/128; + high 2a06:5841:a:301::1337:1337:ffff/128; + } + dhcp-attributes { + dns-server { + 2001:4860:4860::8888; + 2001:4860:4860::8844; + } + } + } + } + } +} +routing-instances { + internet { + instance-type vrf; + interface ae0.0; + interface ae1.11; + interface ae7.0; + interface lo0.0; + route-distinguisher 21067:2; + vrf-target target:21067:2; + routing-options { + rib internet.inet.0 { + static { + route 88.92.58.128/25 next-hop 88.92.58.1; + route 88.92.0.0/17 discard; + route 185.110.148.0/22 discard; + route 194.143.120.0/21 discard; + } + } + rib internet.inet6.0 { + static { + route 2a06:5840::/29 discard; + route 2001:4610:7617::/48 discard; + route 2001:4610:7618::/48 discard; + } + } + router-id 185.110.148.64; + } + protocols { + bgp { + group telenor { + authentication-key "<removed>";; + peer-as 2119; + neighbor 193.212.22.1 { + import telenor-in-v4; + export telenor-out-v4; + } + neighbor 2001:4600:9:300::291 { + import telenor-in-v6; + export telenor-out-v6; + } + } + } + ospf { + export [ direct-to-ospf static-to-ospf default-v4 ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae1.11; + interface ae7.0; + } + } + ospf3 { + export [ direct-to-ospf static-to-ospf default-v6 ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae1.11; + interface ae7.0; + } + } + } + } +} +virtual-chassis { + preprovisioned; + no-split-detection; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role routing-engine; + serial-number <removed>; + } +} +vlans { + testnett { + description testnett-tele; + vlan-id 103; + l3-interface irb.103; + } + vlan100 { + vlan-id 100; + l3-interface irb.100; + } + vlan101 { + vlan-id 101; + l3-interface irb.101; + } + vlan102 { + vlan-id 102; + l3-interface irb.102; + } +} diff --git a/examples/tg19/netconf/s1.cna.conf b/examples/tg19/netconf/s1.cna.conf new file mode 100644 index 0000000..847bc93 --- /dev/null +++ b/examples/tg19/netconf/s1.cna.conf @@ -0,0 +1,338 @@ +## Last changed: 2019-04-16 20:56:00 CEST +version 15.1R6.7; +system { + host-name s1.cna; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 2; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + interface-range edge-ports { + member-range ge-0/0/0 to ge-0/0/43; + description Clients; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + interface-range uplink-ports { + member-range ge-0/0/46 to ge-0/0/47; + description "G: r1.ring"; + ether-options { + 802.3ad ae0; + } + } + interface-range unused-ports { + member-range ge-0/0/44 to ge-0/0/45; + description not-in-use; + } + ae0 { + description "B: r1.ring"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ clients mgmt ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + } + } + } + vlan { + unit 666 { + description "Switch mgmt"; + family inet { + filter { + input mgmt-v4; + } + address 88.92.2.70/26; + } + family inet6 { + filter { + input mgmt-v6; + } + address 2a06:5841:d:b::70/64; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +routing-options { + rib inet.0 { + static { + route 0.0.0.0/0 next-hop 88.92.2.65; + } + } + rib inet6.0 { + static { + route ::/0 next-hop 2a06:5841:d:b::1; + } + } +} +protocols { + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + igmp-snooping { + vlan all { + version 3; + immediate-leave; + } + } + mld-snooping { + vlan all { + version 2; + immediate-leave; + } + } + rstp { + bridge-priority 32k; + interface edge-ports { + edge; + no-root-port; + } + } + lldp { + interface uplink-ports; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +ethernet-switching-options { + secure-access-port { + interface edge-ports { + no-dhcp-trusted; + } + vlan clients { + arp-inspection; + examine-dhcp; + inactive: examine-dhcpv6; + inactive: neighbor-discovery-inspection; + ip-source-guard; + inactive: ipv6-source-guard; + dhcp-option82 { + circuit-id { + use-vlan-id; + } + } + no-option-37; + inactive: dhcpv6-option18 { + use-option-82; + } + } + inactive: ipv6-source-guard-sessions { + max-number 128; + } + } + storm-control { + action-shutdown; + interface edge-ports { + bandwidth 5000; + multicast; + } + } +} +vlans { + clients { + vlan-id 114; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface all; +} diff --git a/examples/tg19/netconf/s1.floor.conf b/examples/tg19/netconf/s1.floor.conf new file mode 100644 index 0000000..a190c05 --- /dev/null +++ b/examples/tg19/netconf/s1.floor.conf @@ -0,0 +1,1909 @@ +## Last changed: 2019-04-21 09:14:48 CEST +version 15.1R7-S4; +system { + host-name s1.floor; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 40; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + } + interface-range aps { + member-range ge-0/0/36 to ge-0/0/47; + member-range ge-1/0/36 to ge-1/0/47; + member-range ge-2/0/36 to ge-2/0/47; + description "C: AP-er"; + unit 0 { + family ethernet-switching { + vlan { + members aps_mgmt; + } + } + } + } + ge-0/0/0 { + description "G: e7-3"; + inactive: ether-options { + 802.3ad ae100; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/1 { + description "G: e7-4"; + ether-options { + 802.3ad ae101; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/2 { + description "G: e9-3"; + inactive: ether-options { + 802.3ad ae102; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/3 { + description "G: e9-4"; + inactive: ether-options { + 802.3ad ae103; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/4 { + description "G: e11-3"; + ether-options { + 802.3ad ae104; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/5 { + description "G: e11-4"; + ether-options { + 802.3ad ae105; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/6 { + description "G: e13-3"; + ether-options { + 802.3ad ae106; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/7 { + description "G: e13-4"; + ether-options { + 802.3ad ae107; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/8 { + description "G: e15-3"; + inactive: ether-options { + 802.3ad ae108; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/9 { + description "G: e15-4"; + inactive: ether-options { + 802.3ad ae109; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/10 { + description "G: e17-3"; + ether-options { + 802.3ad ae110; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/11 { + description "G: e17-4"; + ether-options { + 802.3ad ae111; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/12 { + description "G: e19-3"; + ether-options { + 802.3ad ae112; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/13 { + description "G: e19-4"; + ether-options { + 802.3ad ae113; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/14 { + description "G: e21-3"; + ether-options { + 802.3ad ae114; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/15 { + description "G: e21-4"; + ether-options { + 802.3ad ae115; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/16 { + description "G: e23-3"; + ether-options { + 802.3ad ae116; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/17 { + description "G: e23-4"; + ether-options { + 802.3ad ae117; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/18 { + description "G: e23-3"; + ether-options { + 802.3ad ae116; + } + } + xe-0/1/1 { + description "G: r1.noc <xe-2/0/0>"; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/0 { + description "G: e7-3"; + ether-options { + 802.3ad ae100; + } + } + ge-1/0/1 { + description "G: e7-4"; + ether-options { + 802.3ad ae101; + } + } + ge-1/0/2 { + description "G: e9-3"; + ether-options { + 802.3ad ae102; + } + } + ge-1/0/3 { + description "G: e9-4"; + ether-options { + 802.3ad ae103; + } + } + ge-1/0/4 { + description "G: e11-3"; + ether-options { + 802.3ad ae104; + } + } + ge-1/0/5 { + description "G: e11-4"; + ether-options { + 802.3ad ae105; + } + } + ge-1/0/6 { + description "G: e13-3"; + ether-options { + 802.3ad ae106; + } + } + ge-1/0/7 { + description "G: e13-4"; + ether-options { + 802.3ad ae107; + } + } + ge-1/0/8 { + description "G: e15-3"; + ether-options { + 802.3ad ae108; + } + } + ge-1/0/9 { + description "G: e15-4"; + ether-options { + 802.3ad ae109; + } + } + ge-1/0/10 { + description "G: e17-3"; + ether-options { + 802.3ad ae110; + } + } + ge-1/0/11 { + description "G: e17-4"; + ether-options { + 802.3ad ae111; + } + } + ge-1/0/12 { + description "G: e19-3"; + ether-options { + 802.3ad ae112; + } + } + ge-1/0/13 { + description "G: e19-4"; + ether-options { + 802.3ad ae113; + } + } + ge-1/0/14 { + description "G: e21-3"; + ether-options { + 802.3ad ae114; + } + } + ge-1/0/15 { + description "G: e21-4"; + ether-options { + 802.3ad ae115; + } + } + ge-1/0/16 { + description "G: e23-3"; + ether-options { + 802.3ad ae116; + } + } + ge-1/0/17 { + description "G: e23-4"; + ether-options { + 802.3ad ae117; + } + } + xe-1/1/1 { + description "G: r1.noc <xe-3/0/0>"; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/0 { + description "G: e7-3"; + ether-options { + 802.3ad ae100; + } + } + ge-2/0/1 { + description "G: e7-4"; + ether-options { + 802.3ad ae101; + } + } + ge-2/0/2 { + description "G: e9-3"; + ether-options { + 802.3ad ae102; + } + } + ge-2/0/3 { + description "G: e9-4"; + ether-options { + 802.3ad ae103; + } + } + ge-2/0/4 { + description "G: e11-3"; + ether-options { + 802.3ad ae104; + } + } + ge-2/0/5 { + description "G: e11-4"; + ether-options { + 802.3ad ae105; + } + } + ge-2/0/6 { + description "G: e13-3"; + ether-options { + 802.3ad ae106; + } + } + ge-2/0/7 { + description "G: e13-4"; + ether-options { + 802.3ad ae107; + } + } + ge-2/0/8 { + description "G: e15-3"; + ether-options { + 802.3ad ae108; + } + } + ge-2/0/9 { + description "G: e15-4"; + ether-options { + 802.3ad ae109; + } + } + ge-2/0/10 { + description "G: e17-3"; + ether-options { + 802.3ad ae110; + } + } + ge-2/0/11 { + description "G: e17-4"; + ether-options { + 802.3ad ae111; + } + } + ge-2/0/12 { + description "G: e19-3"; + ether-options { + 802.3ad ae112; + } + } + ge-2/0/13 { + description "G: e19-4"; + ether-options { + 802.3ad ae113; + } + } + ge-2/0/14 { + description "G: e21-3"; + ether-options { + 802.3ad ae114; + } + } + ge-2/0/15 { + description "G: e21-4"; + ether-options { + 802.3ad ae115; + } + } + ge-2/0/16 { + description "G: e23-3"; + ether-options { + 802.3ad ae116; + } + } + ge-2/0/17 { + description "G: e23-4"; + ether-options { + 802.3ad ae117; + } + } + ae0 { + description "B: r1.noc <ae11>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps_mgmt e7-4 e19-3 e15-3 e15-4 e11-4 e23-3 e9-4 e11-3 e7-3 e17-3 e23-4 e13-4 e13-3 e19-4 e21-4 e21-3 e17-4 e9-3 ]; + } + } + } + } + ae100 { + description "B: e7-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e7-3 ]; + } + } + } + } + ae101 { + description "B: e7-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e7-4 ]; + } + } + } + } + ae102 { + description "B: e9-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e9-3 ]; + } + } + } + } + ae103 { + description "B: e9-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e9-4 ]; + } + } + } + } + ae104 { + description "B: e11-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e11-3 ]; + } + } + } + } + ae105 { + description "B: e11-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e11-4 ]; + } + } + } + } + ae106 { + description "B: e13-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e13-3 ]; + } + } + } + } + ae107 { + description "B: e13-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e13-4 ]; + } + } + } + } + ae108 { + description "B: e15-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e15-3 ]; + } + } + } + } + ae109 { + description "B: e15-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e15-4 ]; + } + } + } + } + ae110 { + description "B: e17-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e17-3 ]; + } + } + } + } + ae111 { + description "B: e17-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e17-4 ]; + } + } + } + } + ae112 { + description "B: e19-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e19-3 ]; + } + } + } + } + ae113 { + description "B: e19-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e19-4 ]; + } + } + } + } + ae114 { + description "B: e21-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e21-3 ]; + } + } + } + } + ae115 { + description "B: e21-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e21-4 ]; + } + } + } + } + ae116 { + description "B: e23-3 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e23-3 ]; + } + } + } + } + ae117 { + description "B: e23-4 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e23-4 ]; + } + } + } + } + lo0 { + unit 0 { + description Loopback; + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + address 185.110.148.69/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + address 2a06:5841:f:e::69/128; + } + } + } + vlan { + unit 666 { + description "EDGE MGMT L3 interface"; + family inet { + address 88.92.0.1/26; + } + family inet6 { + address 2a06:5841:d:1::1/64; + } + } + unit 777 { + description "AP MGMT L3 interface"; + family inet { + address 88.92.4.65/26; + } + family inet6 { + address 2a06:5841:d:a1::1/64; + } + } + unit 888 { + description "Distro MGMT L3 interface"; + family inet { + address 185.110.148.143/31; + } + family inet6 { + address 2a06:5841:f:f08::1/127; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +forwarding-options { + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group edge-switches-v6; + overrides { + allow-snooped-clients; + } + interface vlan.777; + } + server-group { + edge-switches-v6 { + 2a06:5841:a:103::2; + } + } + } + server-group { + edge-switches-v4 { + 185.110.149.2; + } + } + group edge-switches { + active-server-group edge-switches-v4; + overrides { + always-write-option-82; + trust-option-82; + } + interface vlan.777; + } + group FAP { + active-server-group edge-switches-v4; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae101down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae101$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae101 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae101up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae101$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae101 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae112down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae112$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae112 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae112up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae112$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae112 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae108down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae108$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae108 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae108up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae108$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae108 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae109down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae109$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae109 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae109up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae109$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae109 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae105down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae105$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae105 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae105up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae105$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae105 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae116down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae116$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/16 unit 0"; + "deactivate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae116 went down so removed ge-0/0/16 from bundle"; + } + } + } + } + policy ae116up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae116$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/16 unit 0"; + "activate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae116 came up so added ge-0/0/16 to bundle"; + } + } + } + } + policy ae103down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae103$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae103 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae103up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae103$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae103 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae104down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae104$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae104 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae104up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae104$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae104 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae100down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae100$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae100 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae100up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae100$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae100 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae110down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae110$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae110 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae110up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae110$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae110 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae117down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae117$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/17 unit 0"; + "deactivate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae117 went down so removed ge-0/0/17 from bundle"; + } + } + } + } + policy ae117up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae117$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/17 unit 0"; + "activate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae117 came up so added ge-0/0/17 to bundle"; + } + } + } + } + policy ae107down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae107$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae107 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae107up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae107$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae107 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae106down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae106$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae106 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae106up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae106$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae106 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae113down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae113$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae113 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae113up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae113$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae113 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae115down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae115$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/15 unit 0"; + "deactivate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae115 went down so removed ge-0/0/15 from bundle"; + } + } + } + } + policy ae115up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae115$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/15 unit 0"; + "activate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae115 came up so added ge-0/0/15 to bundle"; + } + } + } + } + policy ae114down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae114$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae114 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae114up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae114$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae114 came up so added ge-0/0/14 to bundle"; + } + } + } + } + policy ae111down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae111$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae111 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae111up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae111$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae111 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae102down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae102$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae102 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae102up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae102$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae102 came up so added ge-0/0/2 to bundle"; + } + } + } + } +} +protocols { + ospf { + export [ static-to-ospf direct-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface vlan.888; + } + } + ospf3 { + export [ static-to-ospf direct-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface vlan.888; + } + } + pim { + interface ae0.888; + } + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + igmp-snooping { + vlan all; + } + rstp { + bridge-priority 8k; + } + lldp { + interface all; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } + policy-statement direct-to-ospf { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement static-to-ospf { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +ethernet-switching-options { + storm-control { + interface ae100.0; + interface ae101.0; + interface ae102.0; + interface ae103.0; + interface ae104.0; + interface ae105.0; + interface ae106.0; + interface ae107.0; + interface ae108.0; + interface ae109.0; + interface ae110.0; + interface ae111.0; + interface ae112.0; + interface ae113.0; + interface ae114.0; + interface ae115.0; + interface ae116.0; + interface ae117.0; + } +} +vlans { + aps_mgmt { + vlan-id 777; + l3-interface vlan.777; + } + distro-mgmt { + vlan-id 888; + l3-interface vlan.888; + } + e11-3 { + vlan-id 1113; + } + e11-4 { + vlan-id 1114; + } + e13-3 { + vlan-id 1133; + } + e13-4 { + vlan-id 1134; + } + e15-3 { + vlan-id 1153; + } + e15-4 { + vlan-id 1154; + } + e17-3 { + vlan-id 1173; + } + e17-4 { + vlan-id 1174; + } + e19-3 { + vlan-id 1193; + } + e19-4 { + vlan-id 1194; + } + e21-3 { + vlan-id 1213; + } + e21-4 { + vlan-id 1214; + } + e23-3 { + vlan-id 1233; + } + e23-4 { + vlan-id 1234; + } + e7-3 { + vlan-id 1073; + } + e7-4 { + vlan-id 1074; + } + e9-3 { + vlan-id 1093; + } + e9-4 { + vlan-id 1094; + } + edge-mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface all; +} diff --git a/examples/tg19/netconf/s1.wifi.conf b/examples/tg19/netconf/s1.wifi.conf new file mode 100644 index 0000000..15e9512 --- /dev/null +++ b/examples/tg19/netconf/s1.wifi.conf @@ -0,0 +1,334 @@ +## Last changed: 2019-04-16 13:27:22 CEST +version 15.1R6.7; +system { + host-name s1.wifi; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 2; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + interface-range edge-ports { + member-range ge-0/0/0 to ge-0/0/43; + description Clients; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + interface-range uplink-ports { + member-range ge-0/0/46 to ge-0/0/47; + description "G: r1.ring"; + ether-options { + 802.3ad ae0; + } + } + ae0 { + description "B: r1.ring"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ clients mgmt ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + } + } + } + vlan { + unit 666 { + description "Switch mgmt"; + family inet { + filter { + input mgmt-v4; + } + address 88.92.2.84/26; + } + family inet6 { + filter { + input mgmt-v6; + } + address 2a06:5841:d:b::84/64; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +routing-options { + rib inet.0 { + static { + route 0.0.0.0/0 next-hop 88.92.2.65; + } + } + rib inet6.0 { + static { + route ::/0 next-hop 2a06:5841:d:b::1; + } + } +} +protocols { + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + igmp-snooping { + vlan all { + version 3; + immediate-leave; + } + } + mld-snooping { + vlan all { + version 2; + immediate-leave; + } + } + rstp { + bridge-priority 32k; + interface edge-ports { + edge; + no-root-port; + } + } + lldp { + interface uplink-ports; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +ethernet-switching-options { + secure-access-port { + interface edge-ports { + no-dhcp-trusted; + } + vlan clients { + arp-inspection; + examine-dhcp; + examine-dhcpv6; + neighbor-discovery-inspection; + ip-source-guard; + ipv6-source-guard; + dhcp-option82 { + circuit-id { + use-vlan-id; + } + } + no-option-37; + inactive: dhcpv6-option18 { + use-option-82; + } + } + ipv6-source-guard-sessions { + max-number 128; + } + } + storm-control { + action-shutdown; + interface edge-ports { + bandwidth 5000; + multicast; + } + } +} +vlans { + clients { + vlan-id 777; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface all; +} diff --git a/examples/tg19/netconf/s2.floor.conf b/examples/tg19/netconf/s2.floor.conf new file mode 100644 index 0000000..d563e74 --- /dev/null +++ b/examples/tg19/netconf/s2.floor.conf @@ -0,0 +1,1903 @@ +## Last changed: 2019-04-21 09:15:19 CEST +version 15.1R7-S4; +system { + host-name s2.floor; + auto-snapshot; + domain-name tg19.gathering.org; + time-zone Europe/Oslo; + authentication-order tacplus; + root-authentication { + encrypted-password "<removed>"; + } + name-server { + 2a06:5841:a:103::62; + 2a06:5841:a:104::126; + } + tacplus-server { + 134.90.150.164 secret "<removed>"; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + syslog { + user * { + any emergency; + } + host log.tg19.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + /* Save changes to central site */ + archival { + configuration { + transfer-on-commit; + archive-sites { + "scp://user@host/some/folder/" password "<removed>"; + } + } + } + commit synchronize; + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 40; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +security { + ssh-known-hosts { + host <removed> { + ecdsa-sha2-nistp256-key <removed>; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + } + interface-range aps { + member-range ge-0/0/36 to ge-0/0/47; + member-range ge-1/0/36 to ge-1/0/47; + member-range ge-2/0/36 to ge-2/0/47; + description "C: AP-er"; + unit 0 { + family ethernet-switching { + vlan { + members aps_mgmt; + } + } + } + } + ge-0/0/0 { + description "G: e7-1"; + inactive: ether-options { + 802.3ad ae100; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/1 { + description "G: e7-2"; + inactive: ether-options { + 802.3ad ae101; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/2 { + description "G: e9-1"; + inactive: ether-options { + 802.3ad ae102; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/3 { + description "G: e9-2"; + inactive: ether-options { + 802.3ad ae103; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/4 { + description "G: e11-1"; + ether-options { + 802.3ad ae104; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/5 { + description "G: e11-2"; + ether-options { + 802.3ad ae105; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/6 { + description "G: e13-1"; + ether-options { + 802.3ad ae106; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/7 { + description "G: e13-2"; + ether-options { + 802.3ad ae107; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/8 { + description "G: e15-1"; + ether-options { + 802.3ad ae108; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/9 { + description "G: e15-2"; + ether-options { + 802.3ad ae109; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/10 { + description "G: e17-1"; + inactive: ether-options { + 802.3ad ae110; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/11 { + description "G: e17-2"; + ether-options { + 802.3ad ae111; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/12 { + description "G: e19-1"; + ether-options { + 802.3ad ae112; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/13 { + description "G: e19-2"; + ether-options { + 802.3ad ae113; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/14 { + description "G: e21-1"; + ether-options { + 802.3ad ae114; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/15 { + description "G: e21-2"; + ether-options { + 802.3ad ae115; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/16 { + description "G: e23-1"; + ether-options { + 802.3ad ae116; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + ge-0/0/17 { + description "G: e23-2"; + ether-options { + 802.3ad ae117; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members edge-mgmt; + } + } + } + } + xe-0/1/1 { + description "G: r1.noc <xe-2/0/1>"; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/0 { + description "G: e7-1"; + ether-options { + 802.3ad ae100; + } + } + ge-1/0/1 { + description "G: e7-2"; + ether-options { + 802.3ad ae101; + } + } + ge-1/0/2 { + description "G: e9-1"; + ether-options { + 802.3ad ae102; + } + } + ge-1/0/3 { + description "G: e9-2"; + ether-options { + 802.3ad ae103; + } + } + ge-1/0/4 { + description "G: e11-1"; + ether-options { + 802.3ad ae104; + } + } + ge-1/0/5 { + description "G: e11-2"; + ether-options { + 802.3ad ae105; + } + } + ge-1/0/6 { + description "G: e13-1"; + ether-options { + 802.3ad ae106; + } + } + ge-1/0/7 { + description "G: e13-2"; + ether-options { + 802.3ad ae107; + } + } + ge-1/0/8 { + description "G: e15-1"; + ether-options { + 802.3ad ae108; + } + } + ge-1/0/9 { + description "G: e15-2"; + ether-options { + 802.3ad ae109; + } + } + ge-1/0/10 { + description "G: e17-1"; + ether-options { + 802.3ad ae110; + } + } + ge-1/0/11 { + description "G: e17-2"; + ether-options { + 802.3ad ae111; + } + } + ge-1/0/12 { + description "G: e19-1"; + ether-options { + 802.3ad ae112; + } + } + ge-1/0/13 { + description "G: e19-2"; + ether-options { + 802.3ad ae113; + } + } + ge-1/0/14 { + description "G: e21-1"; + ether-options { + 802.3ad ae114; + } + } + ge-1/0/15 { + description "G: e21-2"; + ether-options { + 802.3ad ae115; + } + } + ge-1/0/16 { + description "G: e23-1"; + ether-options { + 802.3ad ae116; + } + } + ge-1/0/17 { + description "G: e23-2"; + ether-options { + 802.3ad ae117; + } + } + xe-1/1/1 { + description "G: r1.noc <xe-3/0/1>"; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/0 { + description "G: e7-1"; + ether-options { + 802.3ad ae100; + } + } + ge-2/0/1 { + description "G: e7-2"; + ether-options { + 802.3ad ae101; + } + } + ge-2/0/2 { + description "G: e9-1"; + ether-options { + 802.3ad ae102; + } + } + ge-2/0/3 { + description "G: e9-2"; + ether-options { + 802.3ad ae103; + } + } + ge-2/0/4 { + description "G: e11-1"; + ether-options { + 802.3ad ae104; + } + } + ge-2/0/5 { + description "G: e11-2"; + ether-options { + 802.3ad ae105; + } + } + ge-2/0/6 { + description "G: e13-1"; + ether-options { + 802.3ad ae106; + } + } + ge-2/0/7 { + description "G: e13-2"; + ether-options { + 802.3ad ae107; + } + } + ge-2/0/8 { + description "G: e15-1"; + ether-options { + 802.3ad ae108; + } + } + ge-2/0/9 { + description "G: e15-2"; + ether-options { + 802.3ad ae109; + } + } + ge-2/0/10 { + description "G: e17-1"; + ether-options { + 802.3ad ae110; + } + } + ge-2/0/11 { + description "G: e17-2"; + ether-options { + 802.3ad ae111; + } + } + ge-2/0/12 { + description "G: e19-1"; + ether-options { + 802.3ad ae112; + } + } + ge-2/0/13 { + description "G: e19-2"; + ether-options { + 802.3ad ae113; + } + } + ge-2/0/14 { + description "G: e21-1"; + ether-options { + 802.3ad ae114; + } + } + ge-2/0/15 { + description "G: e21-2"; + ether-options { + 802.3ad ae115; + } + } + ge-2/0/16 { + description "G: e23-1"; + ether-options { + 802.3ad ae116; + } + } + ge-2/0/17 { + description "G: e23-2"; + ether-options { + 802.3ad ae117; + } + } + ae0 { + description "B: r1.noc <ae12>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps_mgmt e13-1 e15-2 e17-1 e9-2 e7-2 e11-2 e19-1 e7-1 e23-1 e21-2 e11-1 e15-1 e23-2 e17-2 e21-1 e13-2 e19-2 e9-1 ]; + } + } + } + } + ae100 { + description "B: e7-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e7-1 ]; + } + } + } + } + ae101 { + description "B: e7-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e7-2 ]; + } + } + } + } + ae102 { + description "B: e9-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e9-1 ]; + } + } + } + } + ae103 { + description "B: e9-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e9-2 ]; + } + } + } + } + ae104 { + description "B: e11-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e11-1 ]; + } + } + } + } + ae105 { + description "B: e11-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e11-2 ]; + } + } + } + } + ae106 { + description "B: e13-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e13-1 ]; + } + } + } + } + ae107 { + description "B: e13-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e13-2 ]; + } + } + } + } + ae108 { + description "B: e15-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e15-1 ]; + } + } + } + } + ae109 { + description "B: e15-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e15-2 ]; + } + } + } + } + ae110 { + description "B: e17-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e17-1 ]; + } + } + } + } + ae111 { + description "B: e17-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e17-2 ]; + } + } + } + } + ae112 { + description "B: e19-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e19-1 ]; + } + } + } + } + ae113 { + description "B: e19-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e19-2 ]; + } + } + } + } + ae114 { + description "B: e21-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e21-1 ]; + } + } + } + } + ae115 { + description "B: e21-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e21-2 ]; + } + } + } + } + ae116 { + description "B: e23-1 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e23-1 ]; + } + } + } + } + ae117 { + description "B: e23-2 <ae0>"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ edge-mgmt e23-2 ]; + } + } + } + } + lo0 { + unit 0 { + description Loopback; + family inet { + filter { + input mgmt-v4; + } + address 127.0.0.1/32; + address 185.110.148.70/32; + } + family inet6 { + filter { + input mgmt-v6; + } + address ::1/128; + address 2a06:5841:f:e::70/128; + } + } + } + vlan { + unit 666 { + description "EDGE MGMT L3 interface"; + family inet { + address 88.92.0.65/26; + } + family inet6 { + address 2a06:5841:d:2::1/64; + } + } + unit 777 { + description "AP MGMT L3 interface"; + family inet { + address 88.92.4.129/26; + } + family inet6 { + address 2a06:5841:d:a2::1/64; + } + } + unit 888 { + description "Distro MGMT L3 interface"; + family inet { + address 185.110.148.145/31; + } + family inet6 { + address 2a06:5841:f:f09::1/127; + } + } + } +} +snmp { + contact NOC; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +forwarding-options { + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group edge-switches-v6; + overrides { + allow-snooped-clients; + } + interface vlan.777; + } + server-group { + edge-switches-v6 { + 2a06:5841:a:103::2; + } + } + } + server-group { + edge-switches-v4 { + 185.110.149.2; + } + } + group edge-switches { + active-server-group edge-switches-v4; + overrides { + always-write-option-82; + trust-option-82; + } + interface vlan.777; + } + group FAP { + active-server-group edge-switches-v4; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae106down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae106$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae106 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae106up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae106$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae106 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae109down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae109$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae109 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae109up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae109$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae109 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae110down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae110$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae110 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae110up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae110$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae110 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae103down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae103$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae103 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae103up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae103$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae103 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae101down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae101$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae101 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae101up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae101$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae101 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae105down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae105$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae105 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae105up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae105$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae105 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae112down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae112$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae112 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae112up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae112$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae112 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae100down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae100$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae100 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae100up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae100$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae100 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae116down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae116$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/16 unit 0"; + "deactivate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae116 went down so removed ge-0/0/16 from bundle"; + } + } + } + } + policy ae116up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae116$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/16 unit 0"; + "activate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae116 came up so added ge-0/0/16 to bundle"; + } + } + } + } + policy ae115down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae115$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/15 unit 0"; + "deactivate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae115 went down so removed ge-0/0/15 from bundle"; + } + } + } + } + policy ae115up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae115$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/15 unit 0"; + "activate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae115 came up so added ge-0/0/15 to bundle"; + } + } + } + } + policy ae104down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae104$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae104 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae104up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae104$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae104 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae108down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae108$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae108 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae108up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae108$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae108 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae117down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae117$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/17 unit 0"; + "deactivate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae117 went down so removed ge-0/0/17 from bundle"; + } + } + } + } + policy ae117up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae117$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/17 unit 0"; + "activate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae117 came up so added ge-0/0/17 to bundle"; + } + } + } + } + policy ae111down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae111$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae111 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae111up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae111$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae111 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae114down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae114$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae114 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae114up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae114$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae114 came up so added ge-0/0/14 to bundle"; + } + } + } + } + policy ae107down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae107$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae107 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae107up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae107$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae107 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae113down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae113$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae113 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae113up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae113$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae113 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae102down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae102$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae102 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae102up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae102$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae102 came up so added ge-0/0/2 to bundle"; + } + } + } + } +} +protocols { + ospf { + export [ static-to-ospf direct-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface vlan.888; + } + } + ospf3 { + export [ static-to-ospf direct-to-ospf ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface vlan.888; + } + } + pim { + interface ae0.888; + } + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces all-ports; + } + igmp-snooping { + vlan all; + } + rstp { + bridge-priority 8k; + } + lldp { + interface all; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } + policy-statement direct-to-ospf { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement static-to-ospf { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +ethernet-switching-options { + storm-control { + interface ae100.0; + interface ae101.0; + interface ae102.0; + interface ae103.0; + interface ae104.0; + interface ae105.0; + interface ae106.0; + interface ae107.0; + interface ae108.0; + interface ae109.0; + interface ae110.0; + interface ae111.0; + interface ae112.0; + interface ae113.0; + interface ae114.0; + interface ae115.0; + interface ae116.0; + interface ae117.0; + } +} +vlans { + aps_mgmt { + vlan-id 777; + l3-interface vlan.777; + } + distro-mgmt { + vlan-id 888; + l3-interface vlan.888; + } + e11-1 { + vlan-id 1111; + } + e11-2 { + vlan-id 1112; + } + e13-1 { + vlan-id 1131; + } + e13-2 { + vlan-id 1132; + } + e15-1 { + vlan-id 1151; + } + e15-2 { + vlan-id 1152; + } + e17-1 { + vlan-id 1171; + } + e17-2 { + vlan-id 1172; + } + e19-1 { + vlan-id 1191; + } + e19-2 { + vlan-id 1192; + } + e21-1 { + vlan-id 1211; + } + e21-2 { + vlan-id 1212; + } + e23-1 { + vlan-id 1231; + } + e23-2 { + vlan-id 1232; + } + e7-1 { + vlan-id 1071; + } + e7-2 { + vlan-id 1072; + } + e9-1 { + vlan-id 1091; + } + e9-2 { + vlan-id 1092; + } + edge-mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface all; +} diff --git a/tools/strip-netconf.sh b/tools/strip-netconf.sh index 79cf53a..5f8c834 100755 --- a/tools/strip-netconf.sh +++ b/tools/strip-netconf.sh @@ -7,7 +7,7 @@ ls -1 *.conf | while read file; do -e 's/encrypted-password ".+";/encrypted-password "<removed>";/g' \ -e 's/"scp:\/\/.+" password ".+";/"scp:\/\/user\@host\/some\/folder\/" password "<removed>";/g' \ -e 's/serial-number .+;/serial-number <removed>;/g' \ - -e 's/community .+ {/community <removed> {/g' \ + -e 's/community .+ /community <removed> /g' \ -e '/\/\* dat/d' \ -e 's/ecdsa-sha2-nistp256-key .+;/ecdsa-sha2-nistp256-key <removed>;/g' \ -e 's/collector .+;/collector <removed>;/g' \ @@ -17,24 +17,19 @@ ls -1 *.conf | while read file; do $file > tmp/$file # Remove SSH-host-info - sed -i '' \ + sed -i tmp/$file \ -e '/ssh-known-hosts {/ {' -e 'n; s/host .\+ {/host <removed> {/' -e '}' \ tmp/$file - - # Remove stuff from ACL's - sed -i '' \ - -e ':again' -e N -e '$!b again' \ - -e 's/prefix-list mgmt-v4 {[^}]*}/prefix-list mgmt-v4 {\'$'\n'' \/\* KANDU PA-nett (brukt på servere, infra etc) \*\/\'$'\n'' 185.110.148.0\/22;\'$'\n'' }/g' \ - tmp/$file - sed -i '' \ + # Remove stuff from ACL's + sed -i tmp/$file \ -e ':again' -e N -e '$!b again' \ - -e 's/prefix-list mgmt-v6 {[^}]*}/prefix-list mgmt-v6 {\'$'\n'' \/\* KANDU PA-nett (den delen som er brukt på servere, infra etc) \*\/\'$'\n'' 2a06:5841::\/32;\'$'\n'' }/g' \ + -e 's/prefix-list mgmt-v4 {[^}]*}/prefix-list mgmt-v4 {\n }/g' \ tmp/$file - sed -i '' \ + sed -i tmp/$file \ -e ':again' -e N -e '$!b again' \ - -e 's/prefix-list mgmt {[^}]*}/prefix-list mgmt {\'$'\n'' 185.110.148.0\/22;\'$'\n'' 2a06:5841::\/32;\'$'\n'' }/g' \ + -e 's/prefix-list mgmt-v6 {[^}]*}/prefix-list mgmt-v6 {\n }/g' \ tmp/$file done |