diff options
| -rw-r--r-- | examples/tg15/netconf/.DS_Store | bin | 0 -> 6148 bytes | |||
| -rw-r--r-- | examples/tg15/netconf/distro0.cfg | 1950 | ||||
| -rw-r--r-- | examples/tg15/netconf/distro1.cfg | 2687 | ||||
| -rw-r--r-- | examples/tg15/netconf/distro2.cfg | 1647 | ||||
| -rw-r--r-- | examples/tg15/netconf/distro3.cfg | 2045 | ||||
| -rw-r--r-- | examples/tg15/netconf/distro4.cfg | 2228 | ||||
| -rw-r--r-- | examples/tg15/netconf/distro5.cfg | 2228 | ||||
| -rw-r--r-- | examples/tg15/netconf/distro6.cfg | 2980 | ||||
| -rw-r--r-- | examples/tg15/netconf/distro7.cfg | 2629 | ||||
| -rw-r--r-- | examples/tg15/netconf/fw1.tele.cfg | 717 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.backstage.cfg | 1031 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.core.cfg | 737 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.crew.cfg | 781 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.gamehq.cfg | 804 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.log.cfg | 514 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.noc.cfg | 1481 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.north.cfg | 918 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.south.cfg | 926 | ||||
| -rw-r--r-- | examples/tg15/netconf/rs1.tele.cfg | 1503 | ||||
| -rw-r--r-- | examples/tg15/netconf/sw1.south.cfg | 263 |
20 files changed, 28069 insertions, 0 deletions
diff --git a/examples/tg15/netconf/.DS_Store b/examples/tg15/netconf/.DS_Store Binary files differnew file mode 100644 index 0000000..5008ddf --- /dev/null +++ b/examples/tg15/netconf/.DS_Store diff --git a/examples/tg15/netconf/distro0.cfg b/examples/tg15/netconf/distro0.cfg new file mode 100644 index 0000000..9799473 --- /dev/null +++ b/examples/tg15/netconf/distro0.cfg @@ -0,0 +1,1950 @@ +## Last commit: 2015-04-04 14:38:04 CEST by root +version 14.1X53-D15.2; +system { + host-name rs1.distro0; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range aps { + member-range ge-3/0/0 to ge-3/0/47; + description Access-point; + unit 0 { + family ethernet-switching { + vlan { + members aps; + } + } + } + } + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + member-range ge-3/0/0 to ge-3/0/47; + member-range xe-3/1/0 to xe-3/1/3; + } + ge-0/0/0 { + description "e1-3 access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description "e3-3 access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/2 { + description "e3-4 access / ae2"; + ether-options { + 802.3ad ae2; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "e5-3 access / ae3"; + ether-options { + 802.3ad ae3; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/4 { + description "e5-4 access / ae4"; + ether-options { + 802.3ad ae4; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/5 { + description "e7-3 access / ae5"; + ether-options { + 802.3ad ae5; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/6 { + description "e7-4 access / ae6"; + ether-options { + 802.3ad ae6; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/7 { + description "e9-3 access / ae7"; + ether-options { + 802.3ad ae7; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/8 { + description "e9-4 access / ae8"; + ether-options { + 802.3ad ae8; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/9 { + description "e11-3 access / ae9"; + ether-options { + 802.3ad ae9; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/10 { + description "e11-4 access / ae10"; + inactive: ether-options { + 802.3ad ae10; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/11 { + description "e13-3 access / ae11"; + ether-options { + 802.3ad ae11; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/12 { + description "e13-4 access / ae12"; + ether-options { + 802.3ad ae12; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/13 { + description "e15-3 access / ae13"; + ether-options { + 802.3ad ae13; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/14 { + description "e15-4 access / ae14"; + ether-options { + 802.3ad ae14; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + xe-0/1/0 { + description "rs1.core xe-1/0/0"; + ether-options { + 802.3ad ae31; + } + } + ge-1/0/0 { + description e1-3; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/1 { + description e3-3; + ether-options { + 802.3ad ae1; + } + } + ge-1/0/2 { + description e3-4; + ether-options { + 802.3ad ae2; + } + } + ge-1/0/3 { + description e5-3; + ether-options { + 802.3ad ae3; + } + } + ge-1/0/4 { + description e5-4; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/5 { + description e7-3; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/6 { + description e7-4; + ether-options { + 802.3ad ae6; + } + } + ge-1/0/7 { + description e9-3; + ether-options { + 802.3ad ae7; + } + } + ge-1/0/8 { + description e9-4; + ether-options { + 802.3ad ae8; + } + } + ge-1/0/9 { + description e11-3; + ether-options { + 802.3ad ae9; + } + } + ge-1/0/10 { + description e11-4; + ether-options { + 802.3ad ae10; + } + } + ge-1/0/11 { + description e13-3; + ether-options { + 802.3ad ae11; + } + } + ge-1/0/12 { + description e13-4; + ether-options { + 802.3ad ae12; + } + } + ge-1/0/13 { + description e15-3; + ether-options { + 802.3ad ae13; + } + } + ge-1/0/14 { + description e15-4; + ether-options { + 802.3ad ae14; + } + } + ge-2/0/0 { + description e1-3; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/1 { + description e3-3; + ether-options { + 802.3ad ae1; + } + } + ge-2/0/2 { + description e3-4; + ether-options { + 802.3ad ae2; + } + } + ge-2/0/3 { + description e5-3; + ether-options { + 802.3ad ae3; + } + } + ge-2/0/4 { + description e5-4; + ether-options { + 802.3ad ae4; + } + } + ge-2/0/5 { + description e7-3; + ether-options { + 802.3ad ae5; + } + } + ge-2/0/6 { + description e7-4; + ether-options { + 802.3ad ae6; + } + } + ge-2/0/7 { + description e9-3; + ether-options { + 802.3ad ae7; + } + } + ge-2/0/8 { + description e9-4; + ether-options { + 802.3ad ae8; + } + } + ge-2/0/9 { + description e11-3; + ether-options { + 802.3ad ae9; + } + } + ge-2/0/10 { + description e11-4; + ether-options { + 802.3ad ae10; + } + } + ge-2/0/11 { + description e13-3; + ether-options { + 802.3ad ae11; + } + } + ge-2/0/12 { + description e13-4; + ether-options { + 802.3ad ae12; + } + } + ge-2/0/13 { + description e15-3; + ether-options { + 802.3ad ae13; + } + } + ge-2/0/14 { + description e15-4; + ether-options { + 802.3ad ae14; + } + } + xe-2/1/0 { + description "rs1.core xe-0/0/0"; + ether-options { + 802.3ad ae31; + } + } + ae0 { + description "e1-3 ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e1-3 ]; + } + } + } + } + ae1 { + description "e3-3 ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e3-3 ]; + } + } + } + } + ae2 { + description "e3-4 ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e3-4 ]; + } + } + } + } + ae3 { + description "e5-3 ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e5-3 ]; + } + } + } + } + ae4 { + description "e5-4 ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e5-4 ]; + } + } + } + } + ae5 { + description "e7-3 ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e7-3 ]; + } + } + } + } + ae6 { + description "e7-4 ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e7-4 ]; + } + } + } + } + ae7 { + description "e9-3 ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e9-3 ]; + } + } + } + } + ae8 { + description "e9-4 ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e9-4 ]; + } + } + } + } + ae9 { + description "e11-3 ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e11-3 ]; + } + } + } + } + ae10 { + description "e11-4 ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e11-4 ]; + } + } + } + } + ae11 { + description "e13-3 ae11"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e13-3 ]; + } + } + } + } + ae12 { + description "e13-4 ae12"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e13-4 ]; + } + } + } + } + ae13 { + description "e15-3 ae13"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e15-3 ]; + } + } + } + } + ae14 { + description "e15-4 ae14"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e15-4 ]; + } + } + } + } + ae31 { + description "rs1.core ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.43/31; + } + family inet6 { + address 2a02:ed02:fffe::43/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.1/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::1/128; + } + } + } + vlan { + unit 666 { + description mgmt; + family inet { + address 151.216.180.1/26; + } + family inet6 { + address 2a02:ed02:180a::1/64; + } + } + unit 667 { + family inet { + address 151.216.178.1/26; + } + family inet6 { + address 2a02:ed02:178a::1/64; + } + } + unit 1013 { + description e1-3; + family inet { + address 151.216.129.1/26; + } + family inet6 { + address 2a02:ed02:129a::1/64; + } + } + unit 1033 { + description e3-3; + family inet { + address 151.216.129.65/26; + } + family inet6 { + address 2a02:ed02:129b::1/64; + } + } + unit 1034 { + description e3-4; + family inet { + address 151.216.129.129/26; + } + family inet6 { + address 2a02:ed02:129c::1/64; + } + } + unit 1053 { + description e5-3; + family inet { + address 151.216.130.1/26; + } + family inet6 { + address 2a02:ed02:130a::1/64; + } + } + unit 1054 { + description e5-4; + family inet { + address 151.216.130.65/26; + } + family inet6 { + address 2a02:ed02:130b::1/64; + } + } + unit 1073 { + description e7-3; + family inet { + address 151.216.130.193/26; + } + family inet6 { + address 2a02:ed02:130d::1/64; + } + } + unit 1074 { + description e7-4; + family inet { + address 151.216.131.1/26; + } + family inet6 { + address 2a02:ed02:131a::1/64; + } + } + unit 1093 { + description e9-3; + family inet { + address 151.216.131.129/26; + } + family inet6 { + address 2a02:ed02:131c::1/64; + } + } + unit 1094 { + description e9-4; + family inet { + address 151.216.131.193/26; + } + family inet6 { + address 2a02:ed02:131d::1/64; + } + } + unit 1113 { + description e11-3; + family inet { + address 151.216.132.129/26; + } + family inet6 { + address 2a02:ed02:132c::1/64; + } + } + unit 1114 { + description e11-4; + family inet { + address 151.216.132.193/26; + } + family inet6 { + address 2a02:ed02:132d::1/64; + } + } + unit 1133 { + description e13-3; + family inet { + address 151.216.133.129/26; + } + family inet6 { + address 2a02:ed02:133c::1/64; + } + } + unit 1134 { + description e13-4; + family inet { + address 151.216.133.193/26; + } + family inet6 { + address 2a02:ed02:133d::1/64; + } + } + unit 1153 { + description e15-3; + family inet { + address 151.216.134.129/26; + } + family inet6 { + address 2a02:ed02:134c::1/64; + } + } + unit 1154 { + description e15-4; + family inet { + address 151.216.134.193/26; + } + family inet6 { + address 2a02:ed02:134d::1/64; + } + } + } +} +snmp { + view safe_poll { + oid 1.3.6.1.2.1.1 include; + oid 1.3.6.1.2.1.2 include; + oid 1.3.6.1.4.1.2636.3.5.2.1 include; + oid 1.3.6.1.4.1.2636.3.1.13.1.5 include; + } + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.66; + interface { + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.1013; + vlan.1033; + vlan.1034; + vlan.1053; + vlan.1054; + vlan.1073; + vlan.1074; + vlan.1093; + vlan.1094; + vlan.1113; + vlan.1114; + vlan.1133; + vlan.1134; + vlan.1153; + vlan.1154; + vlan.667; + } + } + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides; + interface vlan.667; + interface vlan.1013; + interface vlan.1033; + interface vlan.1034; + interface vlan.1053; + interface vlan.1054; + interface vlan.1073; + interface vlan.1074; + interface vlan.1093; + interface vlan.1094; + interface vlan.1113; + interface vlan.1114; + interface vlan.1133; + interface vlan.1134; + interface vlan.1153; + interface vlan.1154; + } + server-group { + v6-edge-switches { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-edge-switches { + 185.12.59.2; + 185.12.59.66; + } + v4-autoconfig { + 185.12.59.66; + } + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface vlan.667; + interface vlan.1013; + interface vlan.1033; + interface vlan.1034; + interface vlan.1053; + interface vlan.1054; + interface vlan.1073; + interface vlan.1074; + interface vlan.1093; + interface vlan.1094; + interface vlan.1113; + interface vlan.1114; + interface vlan.1133; + interface vlan.1134; + interface vlan.1153; + interface vlan.1154; + } + group autoconfig { + active-server-group v4-autoconfig; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae3down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae3up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae4down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae4up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae5down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae5up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae6down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae6up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae7down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae7up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae8down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae8up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae9down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae9up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae10down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae10up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae11down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae11up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae12down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae12up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae13down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae13up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae14down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae14up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 came up so added ge-0/0/14 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1013 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1033 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1034 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1053 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1054 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1073 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1074 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1093 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1094 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1113 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1114 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1133 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1134 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1153 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1154 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0 { + + + + bfd-liveness-detection { + minimum-interval 100; + multiplier 3; + } + } + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0 { + + + + bfd-liveness-detection { + minimum-interval 100; + multiplier 3; + } + } + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + sflow { + agent-id 151.216.255.1; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.1; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + aps { + vlan-id 667; + l3-interface vlan.667; + } + e1-3 { + vlan-id 1013; + l3-interface vlan.1013; + } + e11-3 { + vlan-id 1113; + l3-interface vlan.1113; + } + e11-4 { + vlan-id 1114; + l3-interface vlan.1114; + } + e13-3 { + vlan-id 1133; + l3-interface vlan.1133; + } + e13-4 { + vlan-id 1134; + l3-interface vlan.1134; + } + e15-3 { + vlan-id 1153; + l3-interface vlan.1153; + } + e15-4 { + vlan-id 1154; + l3-interface vlan.1154; + } + e3-3 { + vlan-id 1033; + l3-interface vlan.1033; + } + e3-4 { + vlan-id 1034; + l3-interface vlan.1034; + } + e5-3 { + vlan-id 1053; + l3-interface vlan.1053; + } + e5-4 { + vlan-id 1054; + l3-interface vlan.1054; + } + e7-3 { + vlan-id 1073; + l3-interface vlan.1073; + } + e7-4 { + vlan-id 1074; + l3-interface vlan.1074; + } + e9-3 { + vlan-id 1093; + l3-interface vlan.1093; + } + e9-4 { + vlan-id 1094; + l3-interface vlan.1094; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface aps; +} diff --git a/examples/tg15/netconf/distro1.cfg b/examples/tg15/netconf/distro1.cfg new file mode 100644 index 0000000..ccaa2e5 --- /dev/null +++ b/examples/tg15/netconf/distro1.cfg @@ -0,0 +1,2687 @@ +## Last commit: 2015-04-03 12:04:46 CEST by technet +version 14.1X53-D15.2; +system { + host-name rs1.distro1; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range aps { + member-range ge-3/0/0 to ge-3/0/47; + description Access-point; + unit 0 { + family ethernet-switching { + vlan { + members aps; + } + } + } + } + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + member-range ge-3/0/0 to ge-3/0/47; + member-range xe-3/1/0 to xe-3/1/3; + } + ge-0/0/0 { + description "e5-2 access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description "e7-2 access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/2 { + description "e9-2 access / ae2"; + ether-options { + 802.3ad ae2; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "e11-1 access / ae3"; + ether-options { + 802.3ad ae3; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/4 { + description "e11-2 access / ae4"; + ether-options { + 802.3ad ae4; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/5 { + description "e13-1 access / ae5"; + ether-options { + 802.3ad ae5; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/6 { + description "e13-2 access / ae6"; + ether-options { + 802.3ad ae6; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/7 { + description "e15-1 access / ae7"; + ether-options { + 802.3ad ae7; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/8 { + description "e15-2 access / ae8"; + inactive: ether-options { + 802.3ad ae8; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/9 { + description "e17-1 access / ae9"; + ether-options { + 802.3ad ae9; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/10 { + description "e17-2 access / ae10"; + ether-options { + 802.3ad ae10; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/11 { + description "e19-1 access / ae11"; + ether-options { + 802.3ad ae11; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/12 { + description "e19-2 access / ae12"; + ether-options { + 802.3ad ae12; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/13 { + description "e21-1 access / ae13"; + ether-options { + 802.3ad ae13; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/14 { + description "e21-2 access / ae14"; + ether-options { + 802.3ad ae14; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/15 { + description "e23-1 access / ae15"; + inactive: ether-options { + 802.3ad ae15; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/16 { + description "e23-2 access / ae16"; + ether-options { + 802.3ad ae16; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/17 { + description "e25-1 access / ae17"; + ether-options { + 802.3ad ae17; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/18 { + description "e25-2 access / ae18"; + ether-options { + 802.3ad ae18; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/19 { + description "e27-1 access / ae19"; + ether-options { + 802.3ad ae19; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/20 { + description "e27-2 access / ae20"; + ether-options { + 802.3ad ae20; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/21 { + description "e3-2 access / ae21"; + inactive: ether-options { + 802.3ad ae21; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + xe-0/1/0 { + description "rs1.core xe-1/0/1"; + ether-options { + 802.3ad ae31; + } + } + ge-1/0/0 { + description e5-2; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/1 { + description e7-2; + ether-options { + 802.3ad ae1; + } + } + ge-1/0/2 { + description e9-2; + ether-options { + 802.3ad ae2; + } + } + ge-1/0/3 { + description e11-1; + ether-options { + 802.3ad ae3; + } + } + ge-1/0/4 { + description e11-2; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/5 { + description e13-1; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/6 { + description e13-2; + ether-options { + 802.3ad ae6; + } + } + ge-1/0/7 { + description e15-1; + ether-options { + 802.3ad ae7; + } + } + ge-1/0/8 { + description e15-2; + ether-options { + 802.3ad ae8; + } + } + ge-1/0/9 { + description e17-1; + ether-options { + 802.3ad ae9; + } + } + ge-1/0/10 { + description e17-2; + ether-options { + 802.3ad ae10; + } + } + ge-1/0/11 { + description e19-1; + ether-options { + 802.3ad ae11; + } + } + ge-1/0/12 { + description e19-2; + ether-options { + 802.3ad ae12; + } + } + ge-1/0/13 { + description e21-1; + ether-options { + 802.3ad ae13; + } + } + ge-1/0/14 { + description e21-2; + ether-options { + 802.3ad ae14; + } + } + ge-1/0/15 { + description e23-1; + ether-options { + 802.3ad ae15; + } + } + ge-1/0/16 { + description e23-2; + ether-options { + 802.3ad ae16; + } + } + ge-1/0/17 { + description e25-1; + ether-options { + 802.3ad ae17; + } + } + ge-1/0/18 { + description e25-2; + ether-options { + 802.3ad ae18; + } + } + ge-1/0/19 { + description e27-1; + ether-options { + 802.3ad ae19; + } + } + ge-1/0/20 { + description e27-2; + ether-options { + 802.3ad ae20; + } + } + ge-1/0/21 { + description e3-2; + ether-options { + 802.3ad ae21; + } + } + ge-2/0/0 { + description e5-2; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/1 { + description e7-2; + ether-options { + 802.3ad ae1; + } + } + ge-2/0/2 { + description e9-2; + ether-options { + 802.3ad ae2; + } + } + ge-2/0/3 { + description e11-1; + ether-options { + 802.3ad ae3; + } + } + ge-2/0/4 { + description e11-2; + ether-options { + 802.3ad ae4; + } + } + ge-2/0/5 { + description e13-1; + ether-options { + 802.3ad ae5; + } + } + ge-2/0/6 { + description e13-2; + ether-options { + 802.3ad ae6; + } + } + ge-2/0/7 { + description e15-1; + ether-options { + 802.3ad ae7; + } + } + ge-2/0/8 { + description e15-2; + ether-options { + 802.3ad ae8; + } + } + ge-2/0/9 { + description e17-1; + ether-options { + 802.3ad ae9; + } + } + ge-2/0/10 { + description e17-2; + ether-options { + 802.3ad ae10; + } + } + ge-2/0/11 { + description e19-1; + ether-options { + 802.3ad ae11; + } + } + ge-2/0/12 { + description e19-2; + ether-options { + 802.3ad ae12; + } + } + ge-2/0/13 { + description e21-1; + ether-options { + 802.3ad ae13; + } + } + ge-2/0/14 { + description e21-2; + ether-options { + 802.3ad ae14; + } + } + ge-2/0/15 { + description e23-1; + ether-options { + 802.3ad ae15; + } + } + ge-2/0/16 { + description e23-2; + ether-options { + 802.3ad ae16; + } + } + ge-2/0/17 { + description e25-1; + ether-options { + 802.3ad ae17; + } + } + ge-2/0/18 { + description e25-2; + ether-options { + 802.3ad ae18; + } + } + ge-2/0/19 { + description e27-1; + ether-options { + 802.3ad ae19; + } + } + ge-2/0/20 { + description e27-2; + ether-options { + 802.3ad ae20; + } + } + ge-2/0/21 { + description e3-2; + ether-options { + 802.3ad ae21; + } + } + xe-2/1/0 { + description "rs1.core xe-0/0/1"; + ether-options { + 802.3ad ae31; + } + } + ae0 { + description "e5-2 ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e5-2 ]; + } + } + } + } + ae1 { + description "e7-2 ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e7-2 ]; + } + } + } + } + ae2 { + description "e9-2 ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e9-2 ]; + } + } + } + } + ae3 { + description "e11-1 ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e11-1 ]; + } + } + } + } + ae4 { + description "e11-2 ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e11-2 ]; + } + } + } + } + ae5 { + description "e13-1 ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e13-1 ]; + } + } + } + } + ae6 { + description "e13-2 ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e13-2 ]; + } + } + } + } + ae7 { + description "e15-1 ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e15-1 ]; + } + } + } + } + ae8 { + description "e15-2 ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e15-2 ]; + } + } + } + } + ae9 { + description "e17-1 ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e17-1 ]; + } + } + } + } + ae10 { + description "e17-2 ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e17-2 ]; + } + } + } + } + ae11 { + description "e19-1 ae11"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e19-1 ]; + } + } + } + } + ae12 { + description "e19-2 ae12"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e19-2 ]; + } + } + } + } + ae13 { + description "e21-1 ae13"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e21-1 ]; + } + } + } + } + ae14 { + description "e21-2 ae14"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e21-2 ]; + } + } + } + } + ae15 { + description "e23-1 ae15"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e23-1 ]; + } + } + } + } + ae16 { + description "e23-2 ae16"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e23-2 ]; + } + } + } + } + ae17 { + description "e25-1 ae17"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e25-1 ]; + } + } + } + } + ae18 { + description "e25-2 ae18"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e25-2 ]; + } + } + } + } + ae19 { + description "e27-1 ae19"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e27-1 ]; + } + } + } + } + ae20 { + description "e27-2 ae20"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e27-2 ]; + } + } + } + } + ae21 { + description "e3-2 ae21"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e3-2 ]; + } + } + } + } + ae31 { + description "rs1.core ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.39/31; + } + family inet6 { + address 2a02:ed02:fffe::39/127; + } + } + } + irb { + unit 666 { + description mgmt; + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.2/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::2/128; + } + } + } + vlan { + unit 666 { + family inet { + address 151.216.180.65/26; + } + family inet6 { + address 2a02:ed02:180b::1/64; + } + } + unit 667 { + family inet { + address 151.216.178.65/26; + } + family inet6 { + address 2a02:ed02:178b::1/64; + } + } + unit 1032 { + description e3-2; + family inet { + address 151.216.165.1/26; + } + family inet6 { + address 2a02:ed02:165a::1/64; + } + } + unit 1052 { + description e5-2; + family inet { + address 151.216.129.193/26; + } + family inet6 { + address 2a02:ed02:129d::1/64; + } + } + unit 1072 { + description e7-2; + family inet { + address 151.216.130.129/26; + } + family inet6 { + address 2a02:ed02:130c::1/64; + } + } + unit 1092 { + description e9-2; + family inet { + address 151.216.131.65/26; + } + family inet6 { + address 2a02:ed02:131b::1/64; + } + } + unit 1111 { + description e11-1; + family inet { + address 151.216.132.1/26; + } + family inet6 { + address 2a02:ed02:132a::1/64; + } + } + unit 1112 { + description e11-2; + family inet { + address 151.216.132.65/26; + } + family inet6 { + address 2a02:ed02:132b::1/64; + } + } + unit 1131 { + description e13-1; + family inet { + address 151.216.133.1/26; + } + family inet6 { + address 2a02:ed02:133a::1/64; + } + } + unit 1132 { + description e13-2; + family inet { + address 151.216.133.65/26; + } + family inet6 { + address 2a02:ed02:133b::1/64; + } + } + unit 1151 { + description e15-1; + family inet { + address 151.216.134.1/26; + } + family inet6 { + address 2a02:ed02:134a::1/64; + } + } + unit 1152 { + description e15-2; + family inet { + address 151.216.134.65/26; + } + family inet6 { + address 2a02:ed02:134b::1/64; + } + } + unit 1171 { + description e17-1; + family inet { + address 151.216.135.1/26; + } + family inet6 { + address 2a02:ed02:135a::1/64; + } + } + unit 1172 { + description e17-2; + family inet { + address 151.216.135.65/26; + } + family inet6 { + address 2a02:ed02:135b::1/64; + } + } + unit 1191 { + description e19-1; + family inet { + address 151.216.136.1/26; + } + family inet6 { + address 2a02:ed02:136a::1/64; + } + } + unit 1192 { + description e19-2; + family inet { + address 151.216.136.65/26; + } + family inet6 { + address 2a02:ed02:136b::1/64; + } + } + unit 1211 { + description e21-1; + family inet { + address 151.216.137.1/26; + } + family inet6 { + address 2a02:ed02:137a::1/64; + } + } + unit 1212 { + description e21-2; + family inet { + address 151.216.137.65/26; + } + family inet6 { + address 2a02:ed02:137b::1/64; + } + } + unit 1231 { + description e23-1; + family inet { + address 151.216.138.1/26; + } + family inet6 { + address 2a02:ed02:138a::1/64; + } + } + unit 1232 { + description e23-2; + family inet { + address 151.216.138.65/26; + } + family inet6 { + address 2a02:ed02:138b::1/64; + } + } + unit 1251 { + description e25-1; + family inet { + address 151.216.139.1/26; + } + family inet6 { + address 2a02:ed02:139a::1/64; + } + } + unit 1252 { + description e25-2; + family inet { + address 151.216.139.65/26; + } + family inet6 { + address 2a02:ed02:139b::1/64; + } + } + unit 1271 { + description e27-1; + family inet { + address 151.216.140.1/26; + } + family inet6 { + address 2a02:ed02:140a::1/64; + } + } + unit 1272 { + description e27-2; + family inet { + address 151.216.140.65/26; + } + family inet6 { + address 2a02:ed02:140b::1/64; + } + } + } +} +snmp { + view safe_poll { + oid 1.3.6.1.2.1.1 include; + oid 1.3.6.1.2.1.2 include; + oid 1.3.6.1.4.1.2636.3.5.2.1 include; + oid 1.3.6.1.4.1.2636.3.1.13.1.5 include; + } + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.66; + interface { + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.1052; + vlan.1072; + vlan.1092; + vlan.1111; + vlan.1112; + vlan.1131; + vlan.1132; + vlan.1151; + vlan.1152; + vlan.1171; + vlan.1172; + vlan.1191; + vlan.1192; + vlan.1211; + vlan.1212; + vlan.1231; + vlan.1232; + vlan.1251; + vlan.1252; + vlan.1271; + vlan.1272; + vlan.667; + } + } + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides; + interface vlan.667; + interface vlan.1032; + interface vlan.1052; + interface vlan.1072; + interface vlan.1092; + interface vlan.1111; + interface vlan.1112; + interface vlan.1131; + interface vlan.1132; + interface vlan.1151; + interface vlan.1152; + interface vlan.1171; + interface vlan.1172; + interface vlan.1191; + interface vlan.1192; + interface vlan.1211; + interface vlan.1212; + interface vlan.1231; + interface vlan.1232; + interface vlan.1251; + interface vlan.1252; + interface vlan.1271; + interface vlan.1272; + } + server-group { + v6-edge-switches { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-edge-switches { + 185.12.59.2; + 185.12.59.66; + } + v4-autoconfig { + 185.12.59.66; + } + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface vlan.667; + interface vlan.1032; + interface vlan.1052; + interface vlan.1072; + interface vlan.1092; + interface vlan.1111; + interface vlan.1112; + interface vlan.1131; + interface vlan.1132; + interface vlan.1151; + interface vlan.1152; + interface vlan.1171; + interface vlan.1172; + interface vlan.1191; + interface vlan.1192; + interface vlan.1211; + interface vlan.1212; + interface vlan.1231; + interface vlan.1232; + interface vlan.1251; + interface vlan.1252; + interface vlan.1271; + interface vlan.1272; + } + group autoconfig { + active-server-group v4-autoconfig; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae3down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae3up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae4down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae4up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae5down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae5up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae6down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae6up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae7down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae7up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae8down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae8up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae9down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae9up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae10down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae10up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae11down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae11up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae12down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae12up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae13down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae13up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae14down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae14up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 came up so added ge-0/0/14 to bundle"; + } + } + } + } + policy ae15down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/15 unit 0"; + "deactivate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 went down so removed ge-0/0/15 from bundle"; + } + } + } + } + policy ae15up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/15 unit 0"; + "activate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 came up so added ge-0/0/15 to bundle"; + } + } + } + } + policy ae16down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/16 unit 0"; + "deactivate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 went down so removed ge-0/0/16 from bundle"; + } + } + } + } + policy ae16up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/16 unit 0"; + "activate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 came up so added ge-0/0/16 to bundle"; + } + } + } + } + policy ae17down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/17 unit 0"; + "deactivate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 went down so removed ge-0/0/17 from bundle"; + } + } + } + } + policy ae17up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/17 unit 0"; + "activate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 came up so added ge-0/0/17 to bundle"; + } + } + } + } + policy ae18down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae18$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/18 unit 0"; + "deactivate interfaces ge-0/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae18 went down so removed ge-0/0/18 from bundle"; + } + } + } + } + policy ae18up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae18$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/18 unit 0"; + "activate interfaces ge-0/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae18 came up so added ge-0/0/18 to bundle"; + } + } + } + } + policy ae19down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae19$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/19 unit 0"; + "deactivate interfaces ge-0/0/19 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae19 went down so removed ge-0/0/19 from bundle"; + } + } + } + } + policy ae19up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae19$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/19 unit 0"; + "activate interfaces ge-0/0/19 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae19 came up so added ge-0/0/19 to bundle"; + } + } + } + } + policy ae20down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae20$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/20 unit 0"; + "deactivate interfaces ge-0/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae20 went down so removed ge-0/0/20 from bundle"; + } + } + } + } + policy ae20up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae20$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/20 unit 0"; + "activate interfaces ge-0/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae20 came up so added ge-0/0/20 to bundle"; + } + } + } + } + policy ae21down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae21$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/21 unit 0"; + "deactivate interfaces ge-0/0/21 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae21 went down so removed ge-0/0/21 from bundle"; + } + } + } + } + policy ae21up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae21$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/21 unit 0"; + "activate interfaces ge-0/0/21 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae21 came up so added ge-0/0/21 to bundle"; + } + } + } + } + policy ae22down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae22$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/22 unit 0"; + "deactivate interfaces ge-0/0/22 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae22 went down so removed ge-0/0/22 from bundle"; + } + } + } + } + policy ae22up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae22$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/22 unit 0"; + "activate interfaces ge-0/0/22 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae22 came up so added ge-0/0/22 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1052 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1072 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1092 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1111 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1112 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1131 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1132 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1151 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1152 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1171 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1172 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1191 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1192 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1211 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1212 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1231 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1232 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1251 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1252 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1271 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1272 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0 { + + + + bfd-liveness-detection { + minimum-interval 100; + multiplier 3; + } + } + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0 { + + + + bfd-liveness-detection { + minimum-interval 100; + multiplier 3; + } + } + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + sflow { + agent-id 151.216.255.2; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.2; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + aps { + vlan-id 667; + l3-interface vlan.667; + } + e11-1 { + vlan-id 1111; + l3-interface vlan.1111; + } + e11-2 { + vlan-id 1112; + l3-interface vlan.1112; + } + e13-1 { + vlan-id 1131; + l3-interface vlan.1131; + } + e13-2 { + vlan-id 1132; + l3-interface vlan.1132; + } + e15-1 { + vlan-id 1151; + l3-interface vlan.1151; + } + e15-2 { + vlan-id 1152; + l3-interface vlan.1152; + } + e17-1 { + vlan-id 1171; + l3-interface vlan.1171; + } + e17-2 { + vlan-id 1172; + l3-interface vlan.1172; + } + e19-1 { + vlan-id 1191; + l3-interface vlan.1191; + } + e19-2 { + vlan-id 1192; + l3-interface vlan.1192; + } + e21-1 { + vlan-id 1211; + l3-interface vlan.1211; + } + e21-2 { + vlan-id 1212; + l3-interface vlan.1212; + } + e23-1 { + vlan-id 1231; + l3-interface vlan.1231; + } + e23-2 { + vlan-id 1232; + l3-interface vlan.1232; + } + e25-1 { + vlan-id 1251; + l3-interface vlan.1251; + } + e25-2 { + vlan-id 1252; + l3-interface vlan.1252; + } + e27-1 { + vlan-id 1271; + l3-interface vlan.1271; + } + e27-2 { + vlan-id 1272; + l3-interface vlan.1272; + } + e3-2 { + vlan-id 1032; + l3-interface vlan.1032; + } + e5-2 { + vlan-id 1052; + l3-interface vlan.1052; + } + e7-2 { + vlan-id 1072; + l3-interface vlan.1072; + } + e9-2 { + vlan-id 1092; + l3-interface vlan.1092; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface aps; +} diff --git a/examples/tg15/netconf/distro2.cfg b/examples/tg15/netconf/distro2.cfg new file mode 100644 index 0000000..6a6fb42 --- /dev/null +++ b/examples/tg15/netconf/distro2.cfg @@ -0,0 +1,1647 @@ +## Last commit: 2015-04-02 19:44:47 CEST by technet +version 14.1X53-D15.2; +system { + host-name rs1.distro2; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range aps { + member-range ge-3/0/0 to ge-3/0/47; + description Access-point; + unit 0 { + family ethernet-switching { + vlan { + members aps; + } + } + } + } + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + member-range ge-3/0/0 to ge-3/0/47; + member-range xe-3/1/0 to xe-3/1/3; + } + ge-0/0/0 { + description "e17-3 access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description "e17-4 access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/2 { + description "e19-3 access / ae2"; + ether-options { + 802.3ad ae2; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "e19-4 access / ae3"; + ether-options { + 802.3ad ae3; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/4 { + description "e21-3 access / ae4"; + ether-options { + 802.3ad ae4; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/5 { + description "e21-4 access / ae5"; + ether-options { + 802.3ad ae5; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/6 { + description "e23-3 access / ae6"; + ether-options { + 802.3ad ae6; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/7 { + description "e23-4 access / ae7"; + ether-options { + 802.3ad ae7; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/8 { + description "e25-3 access / ae8"; + ether-options { + 802.3ad ae8; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/9 { + description "e25-4 access / ae9"; + ether-options { + 802.3ad ae9; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/10 { + description "e27-3 access / ae10"; + inactive: ether-options { + 802.3ad ae10; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/11 { + description "e27-4 access / ae11"; + ether-options { + 802.3ad ae11; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + xe-0/1/0 { + description "rs1.core xe-1/0/2"; + ether-options { + 802.3ad ae31; + } + } + ge-1/0/0 { + description e17-3; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/1 { + description e17-4; + ether-options { + 802.3ad ae1; + } + } + ge-1/0/2 { + description e19-3; + ether-options { + 802.3ad ae2; + } + } + ge-1/0/3 { + description e19-4; + ether-options { + 802.3ad ae3; + } + } + ge-1/0/4 { + description e21-3; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/5 { + description e21-4; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/6 { + description e23-3; + ether-options { + 802.3ad ae6; + } + } + ge-1/0/7 { + description e23-4; + ether-options { + 802.3ad ae7; + } + } + ge-1/0/8 { + description e25-3; + ether-options { + 802.3ad ae8; + } + } + ge-1/0/9 { + description e25-4; + ether-options { + 802.3ad ae9; + } + } + ge-1/0/10 { + description e27-3; + ether-options { + 802.3ad ae10; + } + } + ge-1/0/11 { + description e27-4; + ether-options { + 802.3ad ae11; + } + } + ge-2/0/0 { + description e17-3; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/1 { + description e17-4; + ether-options { + 802.3ad ae1; + } + } + ge-2/0/2 { + description e19-3; + ether-options { + 802.3ad ae2; + } + } + ge-2/0/3 { + description e19-4; + ether-options { + 802.3ad ae3; + } + } + ge-2/0/4 { + description e21-3; + ether-options { + 802.3ad ae4; + } + } + ge-2/0/5 { + description e21-4; + ether-options { + 802.3ad ae5; + } + } + ge-2/0/6 { + description e23-3; + ether-options { + 802.3ad ae6; + } + } + ge-2/0/7 { + description e23-4; + ether-options { + 802.3ad ae7; + } + } + ge-2/0/8 { + description e25-3; + ether-options { + 802.3ad ae8; + } + } + ge-2/0/9 { + description e25-4; + ether-options { + 802.3ad ae9; + } + } + ge-2/0/10 { + description e27-3; + ether-options { + 802.3ad ae10; + } + } + ge-2/0/11 { + description e27-4; + ether-options { + 802.3ad ae11; + } + } + xe-2/1/0 { + description "rs1.core xe-0/0/2"; + ether-options { + 802.3ad ae31; + } + } + xe-3/1/0 { + description "rs1.backstage xe-0/1/1"; + unit 0 { + family inet { + address 151.216.128.23/31; + } + family inet6 { + address 2a02:ed02:fffe::23/127; + } + } + } + ae0 { + description "e17-3 ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e17-3 ]; + } + } + } + } + ae1 { + description "e17-4 ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e17-4 ]; + } + } + } + } + ae2 { + description "e19-3 ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e19-3 ]; + } + } + } + } + ae3 { + description "e19-4 ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e19-4 ]; + } + } + } + } + ae4 { + description "e21-3 ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e21-3 ]; + } + } + } + } + ae5 { + description "e21-4 ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e21-4 ]; + } + } + } + } + ae6 { + description "e23-3 ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e23-3 ]; + } + } + } + } + ae7 { + description "e23-4 ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e23-4 ]; + } + } + } + } + ae8 { + description "e25-3 ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e25-3 ]; + } + } + } + } + ae9 { + description "e25-4 ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e25-4 ]; + } + } + } + } + ae10 { + description "e27-3 ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e27-3 ]; + } + } + } + } + ae11 { + description "e27-4 ae11"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e27-4 ]; + } + } + } + } + ae31 { + description "rs1.core ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.41/31; + } + family inet6 { + address 2a02:ed02:fffe::41/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.3/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::3/128; + } + } + } + vlan { + unit 666 { + family inet { + address 151.216.180.129/26; + } + family inet6 { + address 2a02:ed02:180c::1/64; + } + } + unit 667 { + family inet { + address 151.216.178.129/26; + } + family inet6 { + address 2a02:ed02:178c::1/64; + } + } + unit 1173 { + description e17-3; + family inet { + address 151.216.135.129/26; + } + family inet6 { + address 2a02:ed02:135c::1/64; + } + } + unit 1174 { + description e17-4; + family inet { + address 151.216.135.193/26; + } + family inet6 { + address 2a02:ed02:135d::1/64; + } + } + unit 1193 { + description e19-3; + family inet { + address 151.216.136.129/26; + } + family inet6 { + address 2a02:ed02:136c::1/64; + } + } + unit 1194 { + description e19-4; + family inet { + address 151.216.136.193/26; + } + family inet6 { + address 2a02:ed02:136d::1/64; + } + } + unit 1213 { + description e21-3; + family inet { + address 151.216.137.129/26; + } + family inet6 { + address 2a02:ed02:137c::1/64; + } + } + unit 1214 { + description e21-4; + family inet { + address 151.216.137.193/26; + } + family inet6 { + address 2a02:ed02:137d::1/64; + } + } + unit 1233 { + description e23-3; + family inet { + address 151.216.138.129/26; + } + family inet6 { + address 2a02:ed02:138c::1/64; + } + } + unit 1234 { + description e23-4; + family inet { + address 151.216.138.193/26; + } + family inet6 { + address 2a02:ed02:138d::1/64; + } + } + unit 1253 { + description e25-3; + family inet { + address 151.216.139.129/26; + } + family inet6 { + address 2a02:ed02:139c::1/64; + } + } + unit 1254 { + description e25-4; + family inet { + address 151.216.139.193/26; + } + family inet6 { + address 2a02:ed02:139d::1/64; + } + } + unit 1273 { + description e27-3; + family inet { + address 151.216.140.129/26; + } + family inet6 { + address 2a02:ed02:140c::1/64; + } + } + unit 1274 { + description e27-4; + family inet { + address 151.216.140.193/26; + } + family inet6 { + address 2a02:ed02:140d::1/64; + } + } + } +} +snmp { + view safe_poll { + oid 1.3.6.1.2.1.1 include; + oid 1.3.6.1.2.1.2 include; + oid 1.3.6.1.4.1.2636.3.5.2.1 include; + oid 1.3.6.1.4.1.2636.3.1.13.1.5 include; + } + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.66; + interface { + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.667; + vlan.1173; + vlan.1174; + vlan.1193; + vlan.1194; + vlan.1213; + vlan.1214; + vlan.1233; + vlan.1234; + vlan.1253; + vlan.1254; + vlan.1273; + vlan.1274; + } + } + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides; + interface vlan.667; + interface vlan.1173; + interface vlan.1174; + interface vlan.1193; + interface vlan.1194; + interface vlan.1213; + interface vlan.1214; + interface vlan.1233; + interface vlan.1234; + interface vlan.1253; + interface vlan.1254; + interface vlan.1273; + interface vlan.1274; + } + server-group { + v6-edge-switches { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-edge-switches { + 185.12.59.2; + 185.12.59.66; + } + v4-autoconfig { + 185.12.59.66; + } + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface vlan.667; + interface vlan.1173; + interface vlan.1174; + interface vlan.1193; + interface vlan.1194; + interface vlan.1213; + interface vlan.1214; + interface vlan.1233; + interface vlan.1234; + interface vlan.1253; + interface vlan.1254; + interface vlan.1273; + interface vlan.1274; + } + group autoconfig { + active-server-group v4-autoconfig; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae3down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae3up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae4down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae4up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae5down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae5up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae6down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae6up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae7down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae7up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae8down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae8up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae9down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae9up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae10down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae10up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae11down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae11up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1173 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1174 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1193 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1194 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1213 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1214 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1233 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1234 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1253 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1254 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1273 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1274 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + interface xe-3/1/0.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + interface xe-3/1/0.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + sflow { + agent-id 151.216.255.3; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.3; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + aps { + vlan-id 667; + l3-interface vlan.667; + } + e17-3 { + vlan-id 1173; + l3-interface vlan.1173; + } + e17-4 { + vlan-id 1174; + l3-interface vlan.1174; + } + e19-3 { + vlan-id 1193; + l3-interface vlan.1193; + } + e19-4 { + vlan-id 1194; + l3-interface vlan.1194; + } + e21-3 { + vlan-id 1213; + l3-interface vlan.1213; + } + e21-4 { + vlan-id 1214; + l3-interface vlan.1214; + } + e23-3 { + vlan-id 1233; + l3-interface vlan.1233; + } + e23-4 { + vlan-id 1234; + l3-interface vlan.1234; + } + e25-3 { + vlan-id 1253; + l3-interface vlan.1253; + } + e25-4 { + vlan-id 1254; + l3-interface vlan.1254; + } + e27-3 { + vlan-id 1273; + l3-interface vlan.1273; + } + e27-4 { + vlan-id 1274; + l3-interface vlan.1274; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface aps; +} diff --git a/examples/tg15/netconf/distro3.cfg b/examples/tg15/netconf/distro3.cfg new file mode 100644 index 0000000..a4a1c69 --- /dev/null +++ b/examples/tg15/netconf/distro3.cfg @@ -0,0 +1,2045 @@ +## Last commit: 2015-04-02 19:45:46 CEST by technet +version 14.1X53-D15.2; +system { + host-name rs1.distro3; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + file log-autoconfig { + any any; + match Autoconfig-script; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range aps { + member-range ge-3/0/0 to ge-3/0/47; + description Access-point; + unit 0 { + family ethernet-switching { + vlan { + members aps; + } + } + } + } + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + member-range ge-3/0/0 to ge-3/0/47; + member-range xe-3/1/0 to xe-3/1/3; + } + ge-0/0/0 { + description "e29-1 access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description "e29-2 access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/2 { + description "e31-1 access / ae2"; + ether-options { + 802.3ad ae2; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "e31-2 access / ae3"; + ether-options { + 802.3ad ae3; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/4 { + description "e33-1 access / ae4"; + ether-options { + 802.3ad ae4; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/5 { + description "e33-2 access / ae5"; + ether-options { + 802.3ad ae5; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/6 { + description "e35-1 access / ae6"; + ether-options { + 802.3ad ae6; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/7 { + description "e35-2 access / ae7"; + inactive: ether-options { + 802.3ad ae7; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/8 { + description "e37-1 access / ae8"; + ether-options { + 802.3ad ae8; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/9 { + description "e37-2 access / ae9"; + ether-options { + 802.3ad ae9; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/10 { + description "e39-1 access / ae10"; + inactive: ether-options { + 802.3ad ae10; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/11 { + description "e39-2 access / ae11"; + ether-options { + 802.3ad ae11; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/12 { + description "e41-1 access / ae12"; + ether-options { + 802.3ad ae12; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/13 { + description "e41-2 access / ae13"; + ether-options { + 802.3ad ae13; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/14 { + description "e43-1 access / ae14"; + ether-options { + 802.3ad ae14; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/15 { + description "e43-2 access / ae15"; + ether-options { + 802.3ad ae15; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + xe-0/1/0 { + description "rs1.core xe-1/0/3"; + ether-options { + 802.3ad ae31; + } + } + ge-1/0/0 { + description e29-1; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/1 { + description e29-2; + ether-options { + 802.3ad ae1; + } + } + ge-1/0/2 { + description e31-1; + ether-options { + 802.3ad ae2; + } + } + ge-1/0/3 { + description e31-2; + ether-options { + 802.3ad ae3; + } + } + ge-1/0/4 { + description e33-1; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/5 { + description e33-2; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/6 { + description e35-1; + ether-options { + 802.3ad ae6; + } + } + ge-1/0/7 { + description e35-2; + ether-options { + 802.3ad ae7; + } + } + ge-1/0/8 { + description e37-1; + ether-options { + 802.3ad ae8; + } + } + ge-1/0/9 { + description e37-2; + ether-options { + 802.3ad ae9; + } + } + ge-1/0/10 { + description e39-1; + ether-options { + 802.3ad ae10; + } + } + ge-1/0/11 { + description e39-2; + ether-options { + 802.3ad ae11; + } + } + ge-1/0/12 { + description e41-1; + ether-options { + 802.3ad ae12; + } + } + ge-1/0/13 { + description e41-2; + ether-options { + 802.3ad ae13; + } + } + ge-1/0/14 { + description e43-1; + ether-options { + 802.3ad ae14; + } + } + ge-1/0/15 { + description e43-2; + ether-options { + 802.3ad ae15; + } + } + xe-1/1/0 { + description "rs1.backstage xe-0/1/1"; + unit 0 { + family inet { + address 151.216.128.23/31; + } + family inet6 { + address 2a02:ed02:fffe::23/127; + } + } + } + ge-2/0/0 { + description e29-1; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/1 { + description e29-2; + ether-options { + 802.3ad ae1; + } + } + ge-2/0/2 { + description e31-1; + ether-options { + 802.3ad ae2; + } + } + ge-2/0/3 { + description e31-2; + ether-options { + 802.3ad ae3; + } + } + ge-2/0/4 { + description e33-1; + ether-options { + 802.3ad ae4; + } + } + ge-2/0/5 { + description e33-2; + ether-options { + 802.3ad ae5; + } + } + ge-2/0/6 { + description e35-1; + ether-options { + 802.3ad ae6; + } + } + ge-2/0/7 { + description e35-2; + ether-options { + 802.3ad ae7; + } + } + ge-2/0/8 { + description e37-1; + ether-options { + 802.3ad ae8; + } + } + ge-2/0/9 { + description e37-2; + ether-options { + 802.3ad ae9; + } + } + ge-2/0/10 { + description e39-1; + ether-options { + 802.3ad ae10; + } + } + ge-2/0/11 { + description e39-2; + ether-options { + 802.3ad ae11; + } + } + ge-2/0/12 { + description e41-1; + ether-options { + 802.3ad ae12; + } + } + ge-2/0/13 { + description e41-2; + ether-options { + 802.3ad ae13; + } + } + ge-2/0/14 { + description e43-1; + ether-options { + 802.3ad ae14; + } + } + ge-2/0/15 { + description e43-2; + ether-options { + 802.3ad ae15; + } + } + xe-2/1/0 { + description "rs1.core xe-0/0/3"; + ether-options { + 802.3ad ae31; + } + } + ae0 { + description "e29-1 ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e29-1 ]; + } + } + } + } + ae1 { + description "e29-2 ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e29-2 ]; + } + } + } + } + ae2 { + description "e31-1 ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e31-1 ]; + } + } + } + } + ae3 { + description "e31-2 ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e31-2 ]; + } + } + } + } + ae4 { + description "e33-1 ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e33-1 ]; + } + } + } + } + ae5 { + description "e33-2 ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e33-2 ]; + } + } + } + } + ae6 { + description "e35-1 ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e35-1 ]; + } + } + } + } + ae7 { + description "e35-2 ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e35-2 ]; + } + } + } + } + ae8 { + description "e37-1 ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e37-1 ]; + } + } + } + } + ae9 { + description "e37-2 ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e37-2 ]; + } + } + } + } + ae10 { + description "e39-1 ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e39-1 ]; + } + } + } + } + ae11 { + description "e39-2 ae11"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e39-2 ]; + } + } + } + } + ae12 { + description "e41-1 ae12"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e41-1 ]; + } + } + } + } + ae13 { + description "e41-2 ae13"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e41-2 ]; + } + } + } + } + ae14 { + description "e43-1 ae14"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e43-1 ]; + } + } + } + } + ae15 { + description "e43-2 ae15"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e43-2 ]; + } + } + } + } + ae31 { + description "rs1.core ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.37/31; + } + family inet6 { + address 2a02:ed02:fffe::37/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.4/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::4/128; + } + } + } + vlan { + unit 666 { + family inet { + address 151.216.180.193/26; + } + family inet6 { + address 2a02:ed02:180d::1/64; + } + } + unit 667 { + family inet { + address 151.216.178.193/26; + } + family inet6 { + address 2a02:ed02:178d::1/64; + } + } + unit 1291 { + description e29-1; + family inet { + address 151.216.141.129/26; + } + family inet6 { + address 2a02:ed02:141c::1/64; + } + } + unit 1292 { + description e29-2; + family inet { + address 151.216.141.193/26; + } + family inet6 { + address 2a02:ed02:141d::1/64; + } + } + unit 1311 { + description e31-1; + family inet { + address 151.216.142.1/26; + } + family inet6 { + address 2a02:ed02:142a::1/64; + } + } + unit 1312 { + description e31-2; + family inet { + address 151.216.142.65/26; + } + family inet6 { + address 2a02:ed02:142b::1/64; + } + } + unit 1331 { + description e33-1; + family inet { + address 151.216.142.129/26; + } + family inet6 { + address 2a02:ed02:142c::1/64; + } + } + unit 1332 { + description e33-2; + family inet { + address 151.216.142.193/26; + } + family inet6 { + address 2a02:ed02:142d::1/64; + } + } + unit 1351 { + description e35-1; + family inet { + address 151.216.143.1/26; + } + family inet6 { + address 2a02:ed02:143a::1/64; + } + } + unit 1352 { + description e35-2; + family inet { + address 151.216.143.65/26; + } + family inet6 { + address 2a02:ed02:143b::1/64; + } + } + unit 1371 { + description e37-1; + family inet { + address 151.216.143.129/26; + } + family inet6 { + address 2a02:ed02:143c::1/64; + } + } + unit 1372 { + description e37-2; + family inet { + address 151.216.143.193/26; + } + family inet6 { + address 2a02:ed02:143d::1/64; + } + } + unit 1391 { + description e39-1; + family inet { + address 151.216.144.1/26; + } + family inet6 { + address 2a02:ed02:144a::1/64; + } + } + unit 1392 { + description e39-2; + family inet { + address 151.216.144.65/26; + } + family inet6 { + address 2a02:ed02:144b::1/64; + } + } + unit 1411 { + description e41-1; + family inet { + address 151.216.144.129/26; + } + family inet6 { + address 2a02:ed02:144c::1/64; + } + } + unit 1412 { + description e41-2; + family inet { + address 151.216.144.193/26; + } + family inet6 { + address 2a02:ed02:144d::1/64; + } + } + unit 1431 { + description e43-1; + family inet { + address 151.216.145.1/26; + } + family inet6 { + address 2a02:ed02:145a::1/64; + } + } + unit 1432 { + description e43-2; + family inet { + address 151.216.145.65/26; + } + family inet6 { + address 2a02:ed02:145b::1/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.66; + interface { + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.667; + vlan.1291; + vlan.1292; + vlan.1311; + vlan.1312; + vlan.1331; + vlan.1332; + vlan.1351; + vlan.1352; + vlan.1371; + vlan.1372; + vlan.1391; + vlan.1392; + vlan.1411; + vlan.1412; + vlan.1431; + vlan.1432; + } + } + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides; + interface vlan.667; + interface vlan.1291; + interface vlan.1292; + interface vlan.1311; + interface vlan.1312; + interface vlan.1331; + interface vlan.1332; + interface vlan.1351; + interface vlan.1352; + interface vlan.1371; + interface vlan.1372; + interface vlan.1391; + interface vlan.1392; + interface vlan.1411; + interface vlan.1412; + interface vlan.1431; + interface vlan.1432; + } + server-group { + v6-edge-switches { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-edge-switches { + 185.12.59.2; + 185.12.59.66; + } + v4-autoconfig { + 185.12.59.66; + } + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface vlan.667; + interface vlan.1291; + interface vlan.1292; + interface vlan.1311; + interface vlan.1312; + interface vlan.1331; + interface vlan.1332; + interface vlan.1351; + interface vlan.1352; + interface vlan.1371; + interface vlan.1372; + interface vlan.1391; + interface vlan.1392; + interface vlan.1411; + interface vlan.1412; + interface vlan.1431; + interface vlan.1432; + } + group autoconfig { + active-server-group v4-autoconfig; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae3down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae3up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae4down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae4up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae5down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae5up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae6down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae6up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae7down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae7up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae8down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae8up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae9down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae9up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae10down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae10up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae11down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae11up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae12down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae12up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae13down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae13up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae14down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae14up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 came up so added ge-0/0/14 to bundle"; + } + } + } + } + policy ae15down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/15 unit 0"; + "deactivate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 went down so removed ge-0/0/15 from bundle"; + } + } + } + } + policy ae15up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/15 unit 0"; + "activate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 came up so added ge-0/0/15 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1291 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1292 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1311 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1312 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1331 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1332 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1351 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1352 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1371 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1372 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1391 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1392 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1411 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1412 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1431 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1432 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + interface xe-1/1/0.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + interface xe-1/1/0.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + sflow { + agent-id 151.216.255.4; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.4; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + s + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + aps { + vlan-id 667; + l3-interface vlan.667; + } + e29-1 { + vlan-id 1291; + l3-interface vlan.1291; + } + e29-2 { + vlan-id 1292; + l3-interface vlan.1292; + } + e31-1 { + vlan-id 1311; + l3-interface vlan.1311; + } + e31-2 { + vlan-id 1312; + l3-interface vlan.1312; + } + e33-1 { + vlan-id 1331; + l3-interface vlan.1331; + } + e33-2 { + vlan-id 1332; + l3-interface vlan.1332; + } + e35-1 { + vlan-id 1351; + l3-interface vlan.1351; + } + e35-2 { + vlan-id 1352; + l3-interface vlan.1352; + } + e37-1 { + vlan-id 1371; + l3-interface vlan.1371; + } + e37-2 { + vlan-id 1372; + l3-interface vlan.1372; + } + e39-1 { + vlan-id 1391; + l3-interface vlan.1391; + } + e39-2 { + vlan-id 1392; + l3-interface vlan.1392; + } + e41-1 { + vlan-id 1411; + l3-interface vlan.1411; + } + e41-2 { + vlan-id 1412; + l3-interface vlan.1412; + } + e43-1 { + vlan-id 1431; + l3-interface vlan.1431; + } + e43-2 { + vlan-id 1432; + l3-interface vlan.1432; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface aps; +} diff --git a/examples/tg15/netconf/distro4.cfg b/examples/tg15/netconf/distro4.cfg new file mode 100644 index 0000000..c1414e0 --- /dev/null +++ b/examples/tg15/netconf/distro4.cfg @@ -0,0 +1,2228 @@ +## Last commit: 2015-04-04 13:29:52 CEST by technet +version 14.1X53-D15.2; +system { + host-name rs1.distro4; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range aps { + member-range ge-3/0/0 to ge-3/0/47; + description Access-point; + unit 0 { + family ethernet-switching { + vlan { + members aps; + } + } + } + } + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + member-range ge-3/0/0 to ge-3/0/47; + member-range xe-3/1/0 to xe-3/1/3; + } + ge-0/0/0 { + description "e45-1 access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description "e45-2 access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/2 { + description "e47-1 access / ae2"; + ether-options { + 802.3ad ae2; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "e47-2 access / ae3"; + ether-options { + 802.3ad ae3; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/4 { + description "e49-1 access / ae4"; + ether-options { + 802.3ad ae4; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/5 { + description "e49-2 access / ae5"; + ether-options { + 802.3ad ae5; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/6 { + description "e51-1 access / ae6"; + ether-options { + 802.3ad ae6; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/7 { + description "e51-2 access / ae7"; + ether-options { + 802.3ad ae7; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/8 { + description "e53-1 access / ae8"; + inactive: ether-options { + 802.3ad ae8; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/9 { + description "e53-2 access / ae9"; + ether-options { + 802.3ad ae9; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/10 { + description "e55-1 access / ae10"; + ether-options { + 802.3ad ae10; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/11 { + description "e55-2 access / ae11"; + ether-options { + 802.3ad ae11; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/12 { + description "e57-1 access / ae12"; + ether-options { + 802.3ad ae12; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/13 { + description "e57-2 access / ae13"; + ether-options { + 802.3ad ae13; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/14 { + description "e59-1 access / ae14"; + ether-options { + 802.3ad ae14; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/15 { + description "e59-2 access / ae15"; + inactive: ether-options { + 802.3ad ae15; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/16 { + description "e61-1 access / ae16"; + ether-options { + 802.3ad ae16; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/17 { + description "e61-2 access / ae17"; + ether-options { + 802.3ad ae17; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + xe-0/1/0 { + description "rs1.core xe-1/0/4"; + ether-options { + 802.3ad ae31; + } + } + ge-1/0/0 { + description e45-1; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/1 { + description e45-2; + ether-options { + 802.3ad ae1; + } + } + ge-1/0/2 { + description e47-1; + ether-options { + 802.3ad ae2; + } + } + ge-1/0/3 { + description e47-2; + ether-options { + 802.3ad ae3; + } + } + ge-1/0/4 { + description e49-1; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/5 { + description e49-2; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/6 { + description e51-1; + ether-options { + 802.3ad ae6; + } + } + ge-1/0/7 { + description e51-2; + ether-options { + 802.3ad ae7; + } + } + ge-1/0/8 { + description e53-1; + ether-options { + 802.3ad ae8; + } + } + ge-1/0/9 { + description e53-2; + ether-options { + 802.3ad ae9; + } + } + ge-1/0/10 { + description e55-1; + ether-options { + 802.3ad ae10; + } + } + ge-1/0/11 { + description e55-2; + ether-options { + 802.3ad ae11; + } + } + ge-1/0/12 { + description e57-1; + ether-options { + 802.3ad ae12; + } + } + ge-1/0/13 { + description e57-2; + ether-options { + 802.3ad ae13; + } + } + ge-1/0/14 { + description e59-1; + ether-options { + 802.3ad ae14; + } + } + ge-1/0/15 { + description e59-2; + ether-options { + 802.3ad ae15; + } + } + ge-1/0/16 { + description e61-1; + ether-options { + 802.3ad ae16; + } + } + ge-1/0/17 { + description e61-2; + ether-options { + 802.3ad ae17; + } + } + ge-2/0/0 { + description e45-1; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/1 { + description e45-2; + ether-options { + 802.3ad ae1; + } + } + ge-2/0/2 { + description e47-1; + ether-options { + 802.3ad ae2; + } + } + ge-2/0/3 { + description e47-2; + ether-options { + 802.3ad ae3; + } + } + ge-2/0/4 { + description e49-1; + ether-options { + 802.3ad ae4; + } + } + ge-2/0/5 { + description e49-2; + ether-options { + 802.3ad ae5; + } + } + ge-2/0/6 { + description e51-1; + ether-options { + 802.3ad ae6; + } + } + ge-2/0/7 { + description e51-2; + ether-options { + 802.3ad ae7; + } + } + ge-2/0/8 { + description e53-1; + ether-options { + 802.3ad ae8; + } + } + ge-2/0/9 { + description e53-2; + ether-options { + 802.3ad ae9; + } + } + ge-2/0/10 { + description e55-1; + ether-options { + 802.3ad ae10; + } + } + ge-2/0/11 { + description e55-2; + ether-options { + 802.3ad ae11; + } + } + ge-2/0/12 { + description e57-1; + ether-options { + 802.3ad ae12; + } + } + ge-2/0/13 { + description e57-2; + ether-options { + 802.3ad ae13; + } + } + ge-2/0/14 { + description e59-1; + ether-options { + 802.3ad ae14; + } + } + ge-2/0/15 { + description e59-2; + ether-options { + 802.3ad ae15; + } + } + ge-2/0/16 { + description e61-1; + ether-options { + 802.3ad ae16; + } + } + ge-2/0/17 { + description e61-2; + ether-options { + 802.3ad ae17; + } + } + xe-2/1/0 { + description "rs1.core xe-0/0/4"; + ether-options { + 802.3ad ae31; + } + } + ae0 { + description "e45-1 ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e45-1 ]; + } + } + } + } + ae1 { + description "e45-2 ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e45-2 ]; + } + } + } + } + ae2 { + description "e47-1 ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e47-1 ]; + } + } + } + } + ae3 { + description "e47-2 ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e47-2 ]; + } + } + } + } + ae4 { + description "e49-1 ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e49-1 ]; + } + } + } + } + ae5 { + description "e49-2 ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e49-2 ]; + } + } + } + } + ae6 { + description "e51-1 ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e51-1 ]; + } + } + } + } + ae7 { + description "e51-2 ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e51-2 ]; + } + } + } + } + ae8 { + description "e53-1 ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e53-1 ]; + } + } + } + } + ae9 { + description "e53-2 ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e53-2 ]; + } + } + } + } + ae10 { + description "e55-1 ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e55-1 ]; + } + } + } + } + ae11 { + description "e55-2 ae11"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e55-2 ]; + } + } + } + } + ae12 { + description "e57-1 ae12"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e57-1 ]; + } + } + } + } + ae13 { + description "e57-2 ae13"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e57-2 ]; + } + } + } + } + ae14 { + description "e59-1 ae14"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e59-1 ]; + } + } + } + } + ae15 { + description "e59-2 ae15"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e59-2 ]; + } + } + } + } + ae16 { + description "e61-1 ae16"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e61-1 ]; + } + } + } + } + ae17 { + description "e61-2 ae17"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e61-2 ]; + } + } + } + } + ae31 { + description "rs1.core ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.33/31; + } + family inet6 { + address 2a02:ed02:fffe::33/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.5/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::5/128; + } + } + } + vlan { + unit 666 { + family inet { + address 151.216.181.1/26; + } + family inet6 { + address 2a02:ed02:181a::1/64; + } + } + unit 667 { + family inet { + address 151.216.179.1/26; + } + family inet6 { + address 2a02:ed02:179a::1/64; + } + } + unit 1451 { + description e45-1; + family inet { + address 151.216.145.129/26; + } + family inet6 { + address 2a02:ed02:145c::1/64; + } + } + unit 1452 { + description e45-2; + family inet { + address 151.216.145.193/26; + } + family inet6 { + address 2a02:ed02:145d::1/64; + } + } + unit 1471 { + description e47-1; + family inet { + address 151.216.146.129/26; + } + family inet6 { + address 2a02:ed02:146c::1/64; + } + } + unit 1472 { + description e47-2; + family inet { + address 151.216.146.193/26; + } + family inet6 { + address 2a02:ed02:146d::1/64; + } + } + unit 1491 { + description e49-1; + family inet { + address 151.216.147.129/26; + } + family inet6 { + address 2a02:ed02:147c::1/64; + } + } + unit 1492 { + description e49-2; + family inet { + address 151.216.147.193/26; + } + family inet6 { + address 2a02:ed02:147d::1/64; + } + } + unit 1511 { + description e51-1; + family inet { + address 151.216.148.129/26; + } + family inet6 { + address 2a02:ed02:148c::1/64; + } + } + unit 1512 { + description e51-2; + family inet { + address 151.216.148.193/26; + } + family inet6 { + address 2a02:ed02:148d::1/64; + } + } + unit 1531 { + description e53-1; + family inet { + address 151.216.149.129/26; + } + family inet6 { + address 2a02:ed02:149c::1/64; + } + } + unit 1532 { + description e53-2; + family inet { + address 151.216.149.193/26; + } + family inet6 { + address 2a02:ed02:149d::1/64; + } + } + unit 1551 { + description e55-1; + family inet { + address 151.216.150.129/26; + } + family inet6 { + address 2a02:ed02:150c::1/64; + } + } + unit 1552 { + description e55-2; + family inet { + address 151.216.150.193/26; + } + family inet6 { + address 2a02:ed02:150d::1/64; + } + } + unit 1571 { + description e57-1; + family inet { + address 151.216.151.129/26; + } + family inet6 { + address 2a02:ed02:151c::1/64; + } + } + unit 1572 { + description e57-2; + family inet { + address 151.216.151.193/26; + } + family inet6 { + address 2a02:ed02:151d::1/64; + } + } + unit 1591 { + description e59-1; + family inet { + address 151.216.152.129/26; + } + family inet6 { + address 2a02:ed02:152c::1/64; + } + } + unit 1592 { + description e59-2; + family inet { + address 151.216.152.193/26; + } + family inet6 { + address 2a02:ed02:152d::1/64; + } + } + unit 1611 { + description e61-1; + family inet { + address 151.216.153.129/26; + } + family inet6 { + address 2a02:ed02:153c::1/64; + } + } + unit 1612 { + description e61-2; + family inet { + address 151.216.153.193/26; + } + family inet6 { + address 2a02:ed02:153d::1/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.66; + interface { + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.667; + vlan.1451; + vlan.1452; + vlan.1471; + vlan.1472; + vlan.1491; + vlan.1492; + vlan.1511; + vlan.1512; + vlan.1531; + vlan.1532; + vlan.1551; + vlan.1552; + vlan.1571; + vlan.1572; + vlan.1591; + vlan.1592; + vlan.1611; + vlan.1612; + } + } + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides; + interface vlan.667; + interface vlan.1451; + interface vlan.1452; + interface vlan.1471; + interface vlan.1472; + interface vlan.1491; + interface vlan.1492; + interface vlan.1511; + interface vlan.1512; + interface vlan.1531; + interface vlan.1532; + interface vlan.1551; + interface vlan.1552; + interface vlan.1571; + interface vlan.1572; + interface vlan.1591; + interface vlan.1592; + interface vlan.1611; + interface vlan.1612; + } + server-group { + v6-edge-switches { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-edge-switches { + 185.12.59.2; + 185.12.59.66; + } + v4-autoconfig { + 185.12.59.66; + } + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface vlan.667; + interface vlan.1451; + interface vlan.1452; + interface vlan.1471; + interface vlan.1472; + interface vlan.1491; + interface vlan.1492; + interface vlan.1511; + interface vlan.1512; + interface vlan.1531; + interface vlan.1532; + interface vlan.1551; + interface vlan.1552; + interface vlan.1571; + interface vlan.1572; + interface vlan.1591; + interface vlan.1592; + interface vlan.1611; + interface vlan.1612; + } + group autoconfig { + active-server-group v4-autoconfig; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae3down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae3up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae4down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae4up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae5down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae5up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae6down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae6up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae7down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae7up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae8down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae8up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae9down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae9up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae10down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae10up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae11down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae11up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae12down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae12up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae13down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae13up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae14down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae14up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 came up so added ge-0/0/14 to bundle"; + } + } + } + } + policy ae15down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/15 unit 0"; + "deactivate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 went down so removed ge-0/0/15 from bundle"; + } + } + } + } + policy ae15up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/15 unit 0"; + "activate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 came up so added ge-0/0/15 to bundle"; + } + } + } + } + policy ae16down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/16 unit 0"; + "deactivate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 went down so removed ge-0/0/16 from bundle"; + } + } + } + } + policy ae16up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/16 unit 0"; + "activate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 came up so added ge-0/0/16 to bundle"; + } + } + } + } + policy ae17down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/17 unit 0"; + "deactivate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 went down so removed ge-0/0/17 from bundle"; + } + } + } + } + policy ae17up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/17 unit 0"; + "activate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 came up so added ge-0/0/17 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1451 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1452 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1471 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1472 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1491 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1492 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1511 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1512 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1531 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1532 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1551 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1552 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1571 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1572 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1591 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1592 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1611 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1612 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + sflow { + agent-id 151.216.255.5; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.5; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + aps { + vlan-id 667; + l3-interface vlan.667; + } + e45-1 { + vlan-id 1451; + l3-interface vlan.1451; + } + e45-2 { + vlan-id 1452; + l3-interface vlan.1452; + } + e47-1 { + vlan-id 1471; + l3-interface vlan.1471; + } + e47-2 { + vlan-id 1472; + l3-interface vlan.1472; + } + e49-1 { + vlan-id 1491; + l3-interface vlan.1491; + } + e49-2 { + vlan-id 1492; + l3-interface vlan.1492; + } + e51-1 { + vlan-id 1511; + l3-interface vlan.1511; + } + e51-2 { + vlan-id 1512; + l3-interface vlan.1512; + } + e53-1 { + vlan-id 1531; + l3-interface vlan.1531; + } + e53-2 { + vlan-id 1532; + l3-interface vlan.1532; + } + e55-1 { + vlan-id 1551; + l3-interface vlan.1551; + } + e55-2 { + vlan-id 1552; + l3-interface vlan.1552; + } + e57-1 { + vlan-id 1571; + l3-interface vlan.1571; + } + e57-2 { + vlan-id 1572; + l3-interface vlan.1572; + } + e59-1 { + vlan-id 1591; + l3-interface vlan.1591; + } + e59-2 { + vlan-id 1592; + l3-interface vlan.1592; + } + e61-1 { + vlan-id 1611; + l3-interface vlan.1611; + } + e61-2 { + vlan-id 1612; + l3-interface vlan.1612; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface aps; +} diff --git a/examples/tg15/netconf/distro5.cfg b/examples/tg15/netconf/distro5.cfg new file mode 100644 index 0000000..e4d83f2 --- /dev/null +++ b/examples/tg15/netconf/distro5.cfg @@ -0,0 +1,2228 @@ +## Last commit: 2015-04-02 19:48:29 CEST by technet +version 14.1X53-D15.2; +system { + host-name rs1.distro5; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range aps { + member-range ge-3/0/0 to ge-3/0/47; + description Access-point; + unit 0 { + family ethernet-switching { + vlan { + members aps; + } + } + } + } + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + member-range ge-3/0/0 to ge-3/0/47; + member-range xe-3/1/0 to xe-3/1/3; + } + ge-0/0/0 { + description "e45-3 access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description "e45-4 access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/2 { + description "e47-3 access / ae2"; + inactive: ether-options { + 802.3ad ae2; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "e47-4 access / ae3"; + inactive: ether-options { + 802.3ad ae3; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/4 { + description "e49-3 access / ae4"; + inactive: ether-options { + 802.3ad ae4; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/5 { + description "e49-4 access / ae5"; + inactive: ether-options { + 802.3ad ae5; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/6 { + description "e51-3 access / ae6"; + ether-options { + 802.3ad ae6; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/7 { + description "e51-4 access / ae7"; + ether-options { + 802.3ad ae7; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/8 { + description "e53-3 access / ae8"; + ether-options { + 802.3ad ae8; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/9 { + description "e53-4 access / ae9"; + inactive: ether-options { + 802.3ad ae9; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/10 { + description "e55-3 access / ae10"; + ether-options { + 802.3ad ae10; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/11 { + description "e55-4 access / ae11"; + inactive: ether-options { + 802.3ad ae11; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/12 { + description "e57-3 access / ae12"; + ether-options { + 802.3ad ae12; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/13 { + description "e57-4 access / ae13"; + ether-options { + 802.3ad ae13; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/14 { + description "e59-3 access / ae14"; + ether-options { + 802.3ad ae14; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/15 { + description "e59-4 access / ae15"; + inactive: ether-options { + 802.3ad ae15; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/16 { + description "e61-3 access / ae16"; + ether-options { + 802.3ad ae16; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/17 { + description "e61-4 access / ae17"; + ether-options { + 802.3ad ae17; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + xe-0/1/0 { + description "rs1.core xe-1/0/5"; + ether-options { + 802.3ad ae31; + } + } + ge-1/0/0 { + description e45-3; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/1 { + description e45-4; + ether-options { + 802.3ad ae1; + } + } + ge-1/0/2 { + description e47-3; + ether-options { + 802.3ad ae2; + } + } + ge-1/0/3 { + description e47-4; + ether-options { + 802.3ad ae3; + } + } + ge-1/0/4 { + description e49-3; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/5 { + description e49-4; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/6 { + description e51-3; + ether-options { + 802.3ad ae6; + } + } + ge-1/0/7 { + description e51-4; + ether-options { + 802.3ad ae7; + } + } + ge-1/0/8 { + description e53-3; + ether-options { + 802.3ad ae8; + } + } + ge-1/0/9 { + description e53-4; + ether-options { + 802.3ad ae9; + } + } + ge-1/0/10 { + description e55-3; + ether-options { + 802.3ad ae10; + } + } + ge-1/0/11 { + description e55-4; + ether-options { + 802.3ad ae11; + } + } + ge-1/0/12 { + description e57-3; + ether-options { + 802.3ad ae12; + } + } + ge-1/0/13 { + description e57-4; + ether-options { + 802.3ad ae13; + } + } + ge-1/0/14 { + description e59-3; + ether-options { + 802.3ad ae14; + } + } + ge-1/0/15 { + description e59-4; + ether-options { + 802.3ad ae15; + } + } + ge-1/0/16 { + description e61-3; + ether-options { + 802.3ad ae16; + } + } + ge-1/0/17 { + description e61-4; + ether-options { + 802.3ad ae17; + } + } + ge-2/0/0 { + description e45-3; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/1 { + description e45-4; + ether-options { + 802.3ad ae1; + } + } + ge-2/0/2 { + description e47-3; + ether-options { + 802.3ad ae2; + } + } + ge-2/0/3 { + description e47-4; + ether-options { + 802.3ad ae3; + } + } + ge-2/0/4 { + description e49-3; + ether-options { + 802.3ad ae4; + } + } + ge-2/0/5 { + description e49-4; + ether-options { + 802.3ad ae5; + } + } + ge-2/0/6 { + description e51-3; + ether-options { + 802.3ad ae6; + } + } + ge-2/0/7 { + description e51-4; + ether-options { + 802.3ad ae7; + } + } + ge-2/0/8 { + description e53-3; + ether-options { + 802.3ad ae8; + } + } + ge-2/0/9 { + description e53-4; + ether-options { + 802.3ad ae9; + } + } + ge-2/0/10 { + description e55-3; + ether-options { + 802.3ad ae10; + } + } + ge-2/0/11 { + description e55-4; + ether-options { + 802.3ad ae11; + } + } + ge-2/0/12 { + description e57-3; + ether-options { + 802.3ad ae12; + } + } + ge-2/0/13 { + description e57-4; + ether-options { + 802.3ad ae13; + } + } + ge-2/0/14 { + description e59-3; + ether-options { + 802.3ad ae14; + } + } + ge-2/0/15 { + description e59-4; + ether-options { + 802.3ad ae15; + } + } + ge-2/0/16 { + description e61-3; + ether-options { + 802.3ad ae16; + } + } + ge-2/0/17 { + description e61-4; + ether-options { + 802.3ad ae17; + } + } + xe-2/1/0 { + description "rs1.core xe-0/0/5"; + ether-options { + 802.3ad ae31; + } + } + ae0 { + description "e45-3 ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e45-3 ]; + } + } + } + } + ae1 { + description "e45-4 ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e45-4 ]; + } + } + } + } + ae2 { + description "e47-3 ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e47-3 ]; + } + } + } + } + ae3 { + description "e47-4 ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e47-4 ]; + } + } + } + } + ae4 { + description "e49-3 ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e49-3 ]; + } + } + } + } + ae5 { + description "e49-4 ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e49-4 ]; + } + } + } + } + ae6 { + description "e51-3 ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e51-3 ]; + } + } + } + } + ae7 { + description "e51-4 ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e51-4 ]; + } + } + } + } + ae8 { + description "e53-3 ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e53-3 ]; + } + } + } + } + ae9 { + description "e53-4 ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e53-4 ]; + } + } + } + } + ae10 { + description "e55-3 ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e55-3 ]; + } + } + } + } + ae11 { + description "e55-4 ae11"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e55-4 ]; + } + } + } + } + ae12 { + description "e57-3 ae12"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e57-3 ]; + } + } + } + } + ae13 { + description "e57-4 ae13"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e57-4 ]; + } + } + } + } + ae14 { + description "e59-3 ae14"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e59-3 ]; + } + } + } + } + ae15 { + description "e59-4 ae15"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e59-4 ]; + } + } + } + } + ae16 { + description "e61-3 ae16"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e61-3 ]; + } + } + } + } + ae17 { + description "e61-4 ae17"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e61-4 ]; + } + } + } + } + ae31 { + description "rs1.core ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.35/31; + } + family inet6 { + address 2a02:ed02:fffe::35/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.6/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::6/128; + } + } + } + vlan { + unit 666 { + family inet { + address 151.216.181.65/26; + } + family inet6 { + address 2a02:ed02:181b::1/64; + } + } + unit 667 { + family inet { + address 151.216.179.65/26; + } + family inet6 { + address 2a02:ed02:179b::1/64; + } + } + unit 1453 { + description e45-3; + family inet { + address 151.216.146.1/26; + } + family inet6 { + address 2a02:ed02:146a::1/64; + } + } + unit 1454 { + description e45-4; + family inet { + address 151.216.146.65/26; + } + family inet6 { + address 2a02:ed02:146b::1/64; + } + } + unit 1473 { + description e47-3; + family inet { + address 151.216.147.1/26; + } + family inet6 { + address 2a02:ed02:147a::1/64; + } + } + unit 1474 { + description e47-4; + family inet { + address 151.216.147.65/26; + } + family inet6 { + address 2a02:ed02:147b::1/64; + } + } + unit 1493 { + description e49-3; + family inet { + address 151.216.148.1/26; + } + family inet6 { + address 2a02:ed02:148a::1/64; + } + } + unit 1494 { + description e49-4; + family inet { + address 151.216.148.65/26; + } + family inet6 { + address 2a02:ed02:148b::1/64; + } + } + unit 1513 { + description e51-3; + family inet { + address 151.216.149.1/26; + } + family inet6 { + address 2a02:ed02:149a::1/64; + } + } + unit 1514 { + description e51-4; + family inet { + address 151.216.149.65/26; + } + family inet6 { + address 2a02:ed02:149b::1/64; + } + } + unit 1533 { + description e53-3; + family inet { + address 151.216.150.1/26; + } + family inet6 { + address 2a02:ed02:150a::1/64; + } + } + unit 1534 { + description e53-4; + family inet { + address 151.216.150.65/26; + } + family inet6 { + address 2a02:ed02:150b::1/64; + } + } + unit 1553 { + description e55-3; + family inet { + address 151.216.151.1/26; + } + family inet6 { + address 2a02:ed02:151a::1/64; + } + } + unit 1554 { + description e55-4; + family inet { + address 151.216.151.65/26; + } + family inet6 { + address 2a02:ed02:151b::1/64; + } + } + unit 1573 { + description e57-3; + family inet { + address 151.216.152.1/26; + } + family inet6 { + address 2a02:ed02:152a::1/64; + } + } + unit 1574 { + description e57-4; + family inet { + address 151.216.152.65/26; + } + family inet6 { + address 2a02:ed02:152b::1/64; + } + } + unit 1593 { + description e59-3; + family inet { + address 151.216.153.1/26; + } + family inet6 { + address 2a02:ed02:153a::1/64; + } + } + unit 1594 { + description e59-4; + family inet { + address 151.216.153.65/26; + } + family inet6 { + address 2a02:ed02:153b::1/64; + } + } + unit 1613 { + description e61-3; + family inet { + address 151.216.154.1/26; + } + family inet6 { + address 2a02:ed02:154a::1/64; + } + } + unit 1614 { + description e61-4; + family inet { + address 151.216.154.65/26; + } + family inet6 { + address 2a02:ed02:154b::1/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.66; + interface { + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.667; + vlan.1453; + vlan.1454; + vlan.1473; + vlan.1474; + vlan.1493; + vlan.1494; + vlan.1513; + vlan.1514; + vlan.1533; + vlan.1534; + vlan.1553; + vlan.1554; + vlan.1573; + vlan.1574; + vlan.1593; + vlan.1594; + vlan.1613; + vlan.1614; + } + } + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides; + interface vlan.667; + interface vlan.1453; + interface vlan.1454; + interface vlan.1473; + interface vlan.1474; + interface vlan.1493; + interface vlan.1494; + interface vlan.1513; + interface vlan.1514; + interface vlan.1533; + interface vlan.1534; + interface vlan.1553; + interface vlan.1554; + interface vlan.1573; + interface vlan.1574; + interface vlan.1593; + interface vlan.1594; + interface vlan.1613; + interface vlan.1614; + } + server-group { + v6-edge-switches { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-edge-switches { + 185.12.59.2; + 185.12.59.66; + } + v4-autoconfig { + 185.12.59.66; + } + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface vlan.667; + interface vlan.1453; + interface vlan.1454; + interface vlan.1473; + interface vlan.1474; + interface vlan.1493; + interface vlan.1494; + interface vlan.1513; + interface vlan.1514; + interface vlan.1533; + interface vlan.1534; + interface vlan.1553; + interface vlan.1554; + interface vlan.1573; + interface vlan.1574; + interface vlan.1593; + interface vlan.1594; + interface vlan.1613; + interface vlan.1614; + } + group autoconfig { + active-server-group v4-autoconfig; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae3down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae3up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae4down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae4up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae5down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae5up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae6down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae6up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae7down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae7up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae8down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae8up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae9down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae9up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae10down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae10up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae11down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae11up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae12down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae12up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae13down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae13up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae14down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae14up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 came up so added ge-0/0/14 to bundle"; + } + } + } + } + policy ae15down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/15 unit 0"; + "deactivate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 went down so removed ge-0/0/15 from bundle"; + } + } + } + } + policy ae15up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/15 unit 0"; + "activate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 came up so added ge-0/0/15 to bundle"; + } + } + } + } + policy ae16down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/16 unit 0"; + "deactivate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 went down so removed ge-0/0/16 from bundle"; + } + } + } + } + policy ae16up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/16 unit 0"; + "activate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 came up so added ge-0/0/16 to bundle"; + } + } + } + } + policy ae17down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/17 unit 0"; + "deactivate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 went down so removed ge-0/0/17 from bundle"; + } + } + } + } + policy ae17up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/17 unit 0"; + "activate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 came up so added ge-0/0/17 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1453 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1454 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1473 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1474 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1493 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1494 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1513 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1514 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1533 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1534 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1553 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1554 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1573 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1574 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1593 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1594 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1613 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1614 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + sflow { + agent-id 151.216.255.6; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.6; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + aps { + vlan-id 667; + l3-interface vlan.667; + } + e45-3 { + vlan-id 1453; + l3-interface vlan.1453; + } + e45-4 { + vlan-id 1454; + l3-interface vlan.1454; + } + e47-3 { + vlan-id 1473; + l3-interface vlan.1473; + } + e47-4 { + vlan-id 1474; + l3-interface vlan.1474; + } + e49-3 { + vlan-id 1493; + l3-interface vlan.1493; + } + e49-4 { + vlan-id 1494; + l3-interface vlan.1494; + } + e51-3 { + vlan-id 1513; + l3-interface vlan.1513; + } + e51-4 { + vlan-id 1514; + l3-interface vlan.1514; + } + e53-3 { + vlan-id 1533; + l3-interface vlan.1533; + } + e53-4 { + vlan-id 1534; + l3-interface vlan.1534; + } + e55-3 { + vlan-id 1553; + l3-interface vlan.1553; + } + e55-4 { + vlan-id 1554; + l3-interface vlan.1554; + } + e57-3 { + vlan-id 1573; + l3-interface vlan.1573; + } + e57-4 { + vlan-id 1574; + l3-interface vlan.1574; + } + e59-3 { + vlan-id 1593; + l3-interface vlan.1593; + } + e59-4 { + vlan-id 1594; + l3-interface vlan.1594; + } + e61-3 { + vlan-id 1613; + l3-interface vlan.1613; + } + e61-4 { + vlan-id 1614; + l3-interface vlan.1614; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface aps; +} diff --git a/examples/tg15/netconf/distro6.cfg b/examples/tg15/netconf/distro6.cfg new file mode 100644 index 0000000..1429071 --- /dev/null +++ b/examples/tg15/netconf/distro6.cfg @@ -0,0 +1,2980 @@ +## Last commit: 2015-04-02 19:12:06 CEST by technet +version 14.1X53-D15.2; +system { + host-name rs1.distro6; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range aps { + member-range ge-3/0/0 to ge-3/0/47; + description Access-point; + unit 0 { + family ethernet-switching { + vlan { + members aps; + } + } + } + } + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + member-range ge-3/0/0 to ge-3/0/47; + member-range xe-3/1/0 to xe-3/1/3; + } + ge-0/0/0 { + description "e63-3 access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description "e63-4 access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/2 { + description "e65-3 access / ae2"; + ether-options { + 802.3ad ae2; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "e65-4 access / ae3"; + inactive: ether-options { + 802.3ad ae3; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/4 { + description "e67-3 access / ae4"; + inactive: ether-options { + 802.3ad ae4; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/5 { + description "e67-4 access / ae5"; + ether-options { + 802.3ad ae5; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/6 { + description "e69-3 access / ae6"; + ether-options { + 802.3ad ae6; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/7 { + description "e69-4 access / ae7"; + ether-options { + 802.3ad ae7; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/8 { + description "e71-3 access / ae8"; + ether-options { + 802.3ad ae8; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/9 { + description "e71-4 access / ae9"; + inactive: ether-options { + 802.3ad ae9; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/10 { + description "e73-3 access / ae10"; + ether-options { + 802.3ad ae10; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/11 { + description "e73-4 access / ae11"; + ether-options { + 802.3ad ae11; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/12 { + description "e75-3 access / ae12"; + ether-options { + 802.3ad ae12; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/13 { + description "e75-4 access / ae13"; + ether-options { + 802.3ad ae13; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/14 { + description "e77-3 access / ae14"; + inactive: ether-options { + 802.3ad ae14; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/15 { + description "e77-4 access / ae15"; + ether-options { + 802.3ad ae15; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/16 { + description "e79-3 access / ae16"; + ether-options { + 802.3ad ae16; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/17 { + description "e79-4 access / ae17"; + ether-options { + 802.3ad ae17; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/18 { + description "sw1-creativia access / ae18"; + ether-options { + 802.3ad ae18; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/19 { + description "sw2-creativia access / ae19"; + ether-options { + 802.3ad ae19; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/20 { + description "sw3-creativia access / ae20"; + ether-options { + 802.3ad ae20; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/21 { + description "sw4-creativia access / ae21"; + ether-options { + 802.3ad ae21; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/22 { + description "sw5-creativia access / ae22"; + ether-options { + 802.3ad ae22; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/23 { + description "sw6-creativia access / ae23"; + ether-options { + 802.3ad ae23; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/24 { + description "sw7-creativia access / ae24"; + ether-options { + 802.3ad ae24; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/25 { + description "sw8-creativia access / ae25"; + ether-options { + 802.3ad ae25; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + xe-0/1/0 { + description "rs1.core xe-1/0/6"; + ether-options { + 802.3ad ae31; + } + } + ge-1/0/0 { + description e63-3; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/1 { + description e63-4; + ether-options { + 802.3ad ae1; + } + } + ge-1/0/2 { + description e65-3; + ether-options { + 802.3ad ae2; + } + } + ge-1/0/3 { + description e65-4; + ether-options { + 802.3ad ae3; + } + } + ge-1/0/4 { + description e67-3; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/5 { + description e67-4; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/6 { + description e69-3; + ether-options { + 802.3ad ae6; + } + } + ge-1/0/7 { + description e69-4; + ether-options { + 802.3ad ae7; + } + } + ge-1/0/8 { + description e71-3; + ether-options { + 802.3ad ae8; + } + } + ge-1/0/9 { + description e71-4; + ether-options { + 802.3ad ae9; + } + } + ge-1/0/10 { + description e73-3; + ether-options { + 802.3ad ae10; + } + } + ge-1/0/11 { + description e73-4; + ether-options { + 802.3ad ae11; + } + } + ge-1/0/12 { + description e75-3; + ether-options { + 802.3ad ae12; + } + } + ge-1/0/13 { + description e75-4; + ether-options { + 802.3ad ae13; + } + } + ge-1/0/14 { + description e77-3; + ether-options { + 802.3ad ae14; + } + } + ge-1/0/15 { + description e77-4; + ether-options { + 802.3ad ae15; + } + } + ge-1/0/16 { + description e79-3; + ether-options { + 802.3ad ae16; + } + } + ge-1/0/17 { + description e79-4; + ether-options { + 802.3ad ae17; + } + } + ge-1/0/18 { + description sw1-creativia; + ether-options { + 802.3ad ae18; + } + } + ge-1/0/19 { + description sw2-creativia; + ether-options { + 802.3ad ae19; + } + } + ge-1/0/20 { + description sw3-creativia; + ether-options { + 802.3ad ae20; + } + } + ge-1/0/21 { + description sw4-creativia; + ether-options { + 802.3ad ae21; + } + } + ge-1/0/22 { + description sw5-creativia; + ether-options { + 802.3ad ae22; + } + } + ge-1/0/23 { + description sw6-creativia; + ether-options { + 802.3ad ae23; + } + } + ge-1/0/24 { + description sw7-creativia; + ether-options { + 802.3ad ae24; + } + } + ge-1/0/25 { + description sw8-creativia; + ether-options { + 802.3ad ae25; + } + } + ge-2/0/0 { + description e63-3; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/1 { + description e63-4; + ether-options { + 802.3ad ae1; + } + } + ge-2/0/2 { + description e65-3; + ether-options { + 802.3ad ae2; + } + } + ge-2/0/3 { + description e65-4; + ether-options { + 802.3ad ae3; + } + } + ge-2/0/4 { + description e67-3; + ether-options { + 802.3ad ae4; + } + } + ge-2/0/5 { + description e67-4; + ether-options { + 802.3ad ae5; + } + } + ge-2/0/6 { + description e69-3; + ether-options { + 802.3ad ae6; + } + } + ge-2/0/7 { + description e69-4; + ether-options { + 802.3ad ae7; + } + } + ge-2/0/8 { + description e71-3; + ether-options { + 802.3ad ae8; + } + } + ge-2/0/9 { + description e71-4; + ether-options { + 802.3ad ae9; + } + } + ge-2/0/10 { + description e73-3; + ether-options { + 802.3ad ae10; + } + } + ge-2/0/11 { + description e73-4; + ether-options { + 802.3ad ae11; + } + } + ge-2/0/12 { + description e75-3; + ether-options { + 802.3ad ae12; + } + } + ge-2/0/13 { + description e75-4; + ether-options { + 802.3ad ae13; + } + } + ge-2/0/14 { + description e77-3; + ether-options { + 802.3ad ae14; + } + } + ge-2/0/15 { + description e77-4; + ether-options { + 802.3ad ae15; + } + } + ge-2/0/16 { + description e79-3; + ether-options { + 802.3ad ae16; + } + } + ge-2/0/17 { + description e79-4; + ether-options { + 802.3ad ae17; + } + } + xe-2/1/0 { + description "rs1.core xe-0/0/6"; + ether-options { + 802.3ad ae31; + } + } + ae0 { + description "e63-3 ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e63-3 ]; + } + } + } + } + ae1 { + description "e63-4 ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e63-4 ]; + } + } + } + } + ae2 { + description "e65-3 ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e65-3 ]; + } + } + } + } + ae3 { + description "e65-4 ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e65-4 ]; + } + } + } + } + ae4 { + description "e67-3 ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e67-3 ]; + } + } + } + } + ae5 { + description "e67-4 ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e67-4 ]; + } + } + } + } + ae6 { + description "e69-3 ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e69-3 ]; + } + } + } + } + ae7 { + description "e69-4 ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e69-4 ]; + } + } + } + } + ae8 { + description "e71-3 ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e71-3 ]; + } + } + } + } + ae9 { + description "e71-4 ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e71-4 ]; + } + } + } + } + ae10 { + description "e73-3 ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e73-3 ]; + } + } + } + } + ae11 { + description "e73-4 ae11"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e73-4 ]; + } + } + } + } + ae12 { + description "e75-3 ae12"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e75-3 ]; + } + } + } + } + ae13 { + description "e75-4 ae13"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e75-4 ]; + } + } + } + } + ae14 { + description "e77-3 ae14"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e77-3 ]; + } + } + } + } + ae15 { + description "e77-4 ae15"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e77-4 ]; + } + } + } + } + ae16 { + description "e79-3 ae16"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e79-3 ]; + } + } + } + } + ae17 { + description "e79-4 ae17"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e79-4 ]; + } + } + } + } + ae18 { + description "sw1-creativia ae18"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw1-creativia ]; + } + } + } + } + ae19 { + description "sw2-creativia ae19"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw2-creativia ]; + } + } + } + } + ae20 { + description "sw3-creativia ae20"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw3-creativia ]; + } + } + } + } + ae21 { + description "sw4-creativia ae21"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw4-creativia ]; + } + } + } + } + ae22 { + description "sw5-creativia ae22"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw5-creativia ]; + } + } + } + } + ae23 { + description "sw6-creativia ae23"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw6-creativia ]; + } + } + } + } + ae24 { + description "sw7-creativia ae24"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw7-creativia ]; + } + } + } + } + ae25 { + description "sw8-creativia ae25"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw8-creativia ]; + } + } + } + } + ae31 { + description "rs1.core ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.31/31; + } + family inet6 { + address 2a02:ed02:fffe::31/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.7/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::7/128; + } + } + } + vlan { + unit 666 { + family inet { + address 151.216.181.129/26; + } + family inet6 { + address 2a02:ed02:181c::1/64; + } + } + unit 667 { + family inet { + address 151.216.179.129/26; + } + family inet6 { + address 2a02:ed02:179c::1/64; + } + } + unit 1633 { + description e63-3; + family inet { + address 151.216.155.1/26; + } + family inet6 { + address 2a02:ed02:155a::1/64; + } + } + unit 1634 { + description e63-4; + family inet { + address 151.216.155.65/26; + } + family inet6 { + address 2a02:ed02:155b::1/64; + } + } + unit 1653 { + description e65-3; + family inet { + address 151.216.156.1/26; + } + family inet6 { + address 2a02:ed02:156a::1/64; + } + } + unit 1654 { + description e65-4; + family inet { + address 151.216.156.65/26; + } + family inet6 { + address 2a02:ed02:156b::1/64; + } + } + unit 1673 { + description e67-3; + family inet { + address 151.216.157.1/26; + } + family inet6 { + address 2a02:ed02:157a::1/64; + } + } + unit 1674 { + description e67-4; + family inet { + address 151.216.157.65/26; + } + family inet6 { + address 2a02:ed02:157b::1/64; + } + } + unit 1693 { + description e69-3; + family inet { + address 151.216.158.1/26; + } + family inet6 { + address 2a02:ed02:158a::1/64; + } + } + unit 1694 { + description e69-4; + family inet { + address 151.216.158.65/26; + } + family inet6 { + address 2a02:ed02:158b::1/64; + } + } + unit 1713 { + description e71-3; + family inet { + address 151.216.159.1/26; + } + family inet6 { + address 2a02:ed02:159a::1/64; + } + } + unit 1714 { + description e71-4; + family inet { + address 151.216.159.65/26; + } + family inet6 { + address 2a02:ed02:159b::1/64; + } + } + unit 1733 { + description e73-3; + family inet { + address 151.216.160.1/26; + } + family inet6 { + address 2a02:ed02:160a::1/64; + } + } + unit 1734 { + description e73-4; + family inet { + address 151.216.160.65/26; + } + family inet6 { + address 2a02:ed02:160b::1/64; + } + } + unit 1753 { + description e75-3; + family inet { + address 151.216.161.1/26; + } + family inet6 { + address 2a02:ed02:161a::1/64; + } + } + unit 1754 { + description e75-4; + family inet { + address 151.216.161.65/26; + } + family inet6 { + address 2a02:ed02:161b::1/64; + } + } + unit 1773 { + description e77-3; + family inet { + address 151.216.162.1/26; + } + family inet6 { + address 2a02:ed02:162a::1/64; + } + } + unit 1774 { + description e77-4; + family inet { + address 151.216.162.65/26; + } + family inet6 { + address 2a02:ed02:162b::1/64; + } + } + unit 1793 { + description e79-3; + family inet { + address 151.216.163.1/26; + } + family inet6 { + address 2a02:ed02:163a::1/64; + } + } + unit 1794 { + description e79-4; + family inet { + address 151.216.163.65/26; + } + family inet6 { + address 2a02:ed02:163b::1/64; + } + } + unit 2001 { + description sw1-creativia; + family inet { + address 151.216.166.1/26; + } + family inet6 { + address 2a02:ed02:166a::1/64; + } + } + unit 2002 { + description sw2-creativia; + family inet { + address 151.216.166.65/26; + } + family inet6 { + address 2a02:ed02:166b::1/64; + } + } + unit 2003 { + description sw3-creativia; + family inet { + address 151.216.166.129/26; + } + family inet6 { + address 2a02:ed02:166c::1/64; + } + } + unit 2004 { + description sw4-creativia; + family inet { + address 151.216.166.193/26; + } + family inet6 { + address 2a02:ed02:166d::1/64; + } + } + unit 2005 { + description sw5-creativia; + family inet { + address 151.216.167.1/26; + } + family inet6 { + address 2a02:ed02:167a::1/64; + } + } + unit 2006 { + description sw6-creativia; + family inet { + address 151.216.167.65/26; + } + family inet6 { + address 2a02:ed02:167b::1/64; + } + } + unit 2007 { + description sw7-creativia; + family inet { + address 151.216.167.129/26; + } + family inet6 { + address 2a02:ed02:167c::1/64; + } + } + unit 2008 { + description sw8-creativia; + family inet { + address 151.216.167.193/26; + } + family inet6 { + address 2a02:ed02:167d::1/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.66; + interface { + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.667; + vlan.1633; + vlan.1634; + vlan.1653; + vlan.1654; + vlan.1673; + vlan.1674; + vlan.1693; + vlan.1694; + vlan.1713; + vlan.1714; + vlan.1733; + vlan.1734; + vlan.1753; + vlan.1754; + vlan.1773; + vlan.1774; + vlan.1793; + vlan.1794; + vlan.2001; + vlan.2002; + vlan.2003; + vlan.2004; + vlan.2005; + vlan.2006; + vlan.2007; + vlan.2008; + } + } + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides; + interface vlan.667; + interface vlan.1633; + interface vlan.1634; + interface vlan.1653; + interface vlan.1654; + interface vlan.1673; + interface vlan.1674; + interface vlan.1693; + interface vlan.1694; + interface vlan.1713; + interface vlan.1714; + interface vlan.1733; + interface vlan.1734; + interface vlan.1753; + interface vlan.1754; + interface vlan.1773; + interface vlan.1774; + interface vlan.1793; + interface vlan.1794; + interface vlan.2001; + interface vlan.2002; + interface vlan.2003; + interface vlan.2004; + interface vlan.2005; + interface vlan.2006; + interface vlan.2007; + interface vlan.2008; + } + server-group { + v6-edge-switches { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-edge-switches { + 185.12.59.2; + 185.12.59.66; + } + v4-autoconfig { + 185.12.59.11; + } + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface vlan.667; + interface vlan.1633; + interface vlan.1634; + interface vlan.1653; + interface vlan.1654; + interface vlan.1673; + interface vlan.1674; + interface vlan.1693; + interface vlan.1694; + interface vlan.1713; + interface vlan.1714; + interface vlan.1733; + interface vlan.1734; + interface vlan.1753; + interface vlan.1754; + interface vlan.1773; + interface vlan.1774; + interface vlan.1793; + interface vlan.1794; + interface vlan.2001; + interface vlan.2002; + interface vlan.2003; + interface vlan.2004; + interface vlan.2005; + interface vlan.2006; + interface vlan.2007; + interface vlan.2008; + } + group autoconfig { + active-server-group v4-autoconfig; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae3down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae3up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae4down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae4up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae5down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae5up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae6down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae6up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae7down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae7up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae8down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae8up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae9down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae9up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae10down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae10up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae11down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae11up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae12down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae12up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae13down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae13up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae14down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae14up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 came up so added ge-0/0/14 to bundle"; + } + } + } + } + policy ae15down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/15 unit 0"; + "deactivate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 went down so removed ge-0/0/15 from bundle"; + } + } + } + } + policy ae15up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/15 unit 0"; + "activate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 came up so added ge-0/0/15 to bundle"; + } + } + } + } + policy ae16down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/16 unit 0"; + "deactivate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 went down so removed ge-0/0/16 from bundle"; + } + } + } + } + policy ae16up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/16 unit 0"; + "activate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 came up so added ge-0/0/16 to bundle"; + } + } + } + } + policy ae17down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/17 unit 0"; + "deactivate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 went down so removed ge-0/0/17 from bundle"; + } + } + } + } + policy ae17up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/17 unit 0"; + "activate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 came up so added ge-0/0/17 to bundle"; + } + } + } + } + policy ae18down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae18$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/18 unit 0"; + "deactivate interfaces ge-0/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae18 went down so removed ge-0/0/18 from bundle"; + } + } + } + } + policy ae18up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae18$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/18 unit 0"; + "activate interfaces ge-0/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae18 came up so added ge-0/0/18 to bundle"; + } + } + } + } + policy ae19down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae19$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/19 unit 0"; + "deactivate interfaces ge-0/0/19 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae19 went down so removed ge-0/0/19 from bundle"; + } + } + } + } + policy ae19up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae19$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/19 unit 0"; + "activate interfaces ge-0/0/19 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae19 came up so added ge-0/0/19 to bundle"; + } + } + } + } + policy ae20down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae20$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/20 unit 0"; + "deactivate interfaces ge-0/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae20 went down so removed ge-0/0/20 from bundle"; + } + } + } + } + policy ae20up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae20$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/20 unit 0"; + "activate interfaces ge-0/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae20 came up so added ge-0/0/20 to bundle"; + } + } + } + } + policy ae21down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae21$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/21 unit 0"; + "deactivate interfaces ge-0/0/21 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae21 went down so removed ge-0/0/21 from bundle"; + } + } + } + } + policy ae21up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae21$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/21 unit 0"; + "activate interfaces ge-0/0/21 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae21 came up so added ge-0/0/21 to bundle"; + } + } + } + } + policy ae22down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae22$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/22 unit 0"; + "deactivate interfaces ge-0/0/22 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae22 went down so removed ge-0/0/22 from bundle"; + } + } + } + } + policy ae22up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae22$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/22 unit 0"; + "activate interfaces ge-0/0/22 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae22 came up so added ge-0/0/22 to bundle"; + } + } + } + } + policy ae23down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae23$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/23 unit 0"; + "deactivate interfaces ge-0/0/23 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae23 went down so removed ge-0/0/23 from bundle"; + } + } + } + } + policy ae23up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae23$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/23 unit 0"; + "activate interfaces ge-0/0/23 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae23 came up so added ge-0/0/23 to bundle"; + } + } + } + } + policy ae24down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae24$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/24 unit 0"; + "deactivate interfaces ge-0/0/24 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae24 went down so removed ge-0/0/24 from bundle"; + } + } + } + } + policy ae24up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae24$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/24 unit 0"; + "activate interfaces ge-0/0/24 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae24 came up so added ge-0/0/24 to bundle"; + } + } + } + } + policy ae25down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae25$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/25 unit 0"; + "deactivate interfaces ge-0/0/25 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae25 went down so removed ge-0/0/25 from bundle"; + } + } + } + } + policy ae25up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae25$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/25 unit 0"; + "activate interfaces ge-0/0/25 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae25 came up so added ge-0/0/25 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1633 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1634 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1653 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1654 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1673 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1674 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1693 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1694 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1713 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1714 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1733 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1734 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1753 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1754 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1773 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1774 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1793 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1794 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.2001 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.2002 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.2003 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.2004 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.2005 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.2006 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.2007 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.2008 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + sflow { + agent-id 151.216.255.7; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.7; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + aps { + vlan-id 667; + l3-interface vlan.667; + } + e63-3 { + vlan-id 1633; + l3-interface vlan.1633; + } + e63-4 { + vlan-id 1634; + l3-interface vlan.1634; + } + e65-3 { + vlan-id 1653; + l3-interface vlan.1653; + } + e65-4 { + vlan-id 1654; + l3-interface vlan.1654; + } + e67-3 { + vlan-id 1673; + l3-interface vlan.1673; + } + e67-4 { + vlan-id 1674; + l3-interface vlan.1674; + } + e69-3 { + vlan-id 1693; + l3-interface vlan.1693; + } + e69-4 { + vlan-id 1694; + l3-interface vlan.1694; + } + e71-3 { + vlan-id 1713; + l3-interface vlan.1713; + } + e71-4 { + vlan-id 1714; + l3-interface vlan.1714; + } + e73-3 { + vlan-id 1733; + l3-interface vlan.1733; + } + e73-4 { + vlan-id 1734; + l3-interface vlan.1734; + } + e75-3 { + vlan-id 1753; + l3-interface vlan.1753; + } + e75-4 { + vlan-id 1754; + l3-interface vlan.1754; + } + e77-3 { + vlan-id 1773; + l3-interface vlan.1773; + } + e77-4 { + vlan-id 1774; + l3-interface vlan.1774; + } + e79-3 { + vlan-id 1793; + l3-interface vlan.1793; + } + e79-4 { + vlan-id 1794; + l3-interface vlan.1794; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } + sw1-creativia { + vlan-id 2001; + l3-interface vlan.2001; + } + sw2-creativia { + vlan-id 2002; + l3-interface vlan.2002; + } + sw3-creativia { + vlan-id 2003; + l3-interface vlan.2003; + } + sw4-creativia { + vlan-id 2004; + l3-interface vlan.2004; + } + sw5-creativia { + vlan-id 2005; + l3-interface vlan.2005; + } + sw6-creativia { + vlan-id 2006; + l3-interface vlan.2006; + } + sw7-creativia { + vlan-id 2007; + l3-interface vlan.2007; + } + sw8-creativia { + vlan-id 2008; + l3-interface vlan.2008; + } +} +poe { + interface aps; +} diff --git a/examples/tg15/netconf/distro7.cfg b/examples/tg15/netconf/distro7.cfg new file mode 100644 index 0000000..18c7c42 --- /dev/null +++ b/examples/tg15/netconf/distro7.cfg @@ -0,0 +1,2629 @@ +## Last commit: 2015-04-04 13:10:15 CEST by technet +version 14.1X53-D15.2; +system { + host-name rs1.distro7; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range aps { + member-range ge-3/0/0 to ge-3/0/47; + description Access-point; + unit 0 { + family ethernet-switching { + vlan { + members aps; + } + } + } + } + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + member-range ge-1/0/0 to ge-1/0/47; + member-range xe-1/1/0 to xe-1/1/3; + member-range ge-2/0/0 to ge-2/0/47; + member-range xe-2/1/0 to xe-2/1/3; + member-range ge-3/0/0 to ge-3/0/47; + member-range xe-3/1/0 to xe-3/1/3; + } + ge-0/0/0 { + description "e63-1 access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description "e63-2 access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/2 { + description "e65-1 access / ae2"; + inactive: ether-options { + 802.3ad ae2; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/3 { + description "e65-2 access / ae3"; + ether-options { + 802.3ad ae3; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/4 { + description "e67-1 access / ae4"; + inactive: ether-options { + 802.3ad ae4; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/5 { + description "e67-2 access / ae5"; + ether-options { + 802.3ad ae5; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/6 { + description "e69-1 access / ae6"; + ether-options { + 802.3ad ae6; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/7 { + description "e69-2 access / ae7"; + ether-options { + 802.3ad ae7; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/8 { + description "e71-1 access / ae8"; + inactive: ether-options { + 802.3ad ae8; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/9 { + description "e71-2 access / ae9"; + ether-options { + 802.3ad ae9; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/10 { + description "e73-1 access / ae10"; + ether-options { + 802.3ad ae10; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/11 { + description "e73-2 access / ae11"; + ether-options { + 802.3ad ae11; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/12 { + description "e75-1 access / ae12"; + inactive: ether-options { + 802.3ad ae12; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/13 { + description "e75-2 access / ae13"; + inactive: ether-options { + 802.3ad ae13; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/14 { + description "e77-1 access / ae14"; + ether-options { + 802.3ad ae14; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/15 { + description "e77-2 access / ae15"; + inactive: ether-options { + 802.3ad ae15; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/16 { + description "e79-1 access / ae16"; + ether-options { + 802.3ad ae16; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/17 { + description "e79-2 access / ae17"; + inactive: ether-options { + 802.3ad ae17; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/18 { + description "e81-1 access / ae18"; + ether-options { + 802.3ad ae18; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/19 { + description "e81-2 access / ae19"; + ether-options { + 802.3ad ae19; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/20 { + description "e83-1 access / ae20"; + ether-options { + 802.3ad ae20; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/21 { + description "e83-2 access / ae21"; + ether-options { + 802.3ad ae21; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + xe-0/1/0 { + description "rs1.core xe-1/0/7"; + ether-options { + 802.3ad ae31; + } + } + ge-1/0/0 { + description e63-1; + ether-options { + 802.3ad ae0; + } + } + ge-1/0/1 { + description e63-2; + ether-options { + 802.3ad ae1; + } + } + ge-1/0/2 { + description e65-1; + ether-options { + 802.3ad ae2; + } + } + ge-1/0/3 { + description e65-2; + ether-options { + 802.3ad ae3; + } + } + ge-1/0/4 { + description e67-1; + ether-options { + 802.3ad ae4; + } + } + ge-1/0/5 { + description e67-2; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/6 { + description e69-1; + ether-options { + 802.3ad ae6; + } + } + ge-1/0/7 { + description e69-2; + ether-options { + 802.3ad ae7; + } + } + ge-1/0/8 { + description e71-1; + ether-options { + 802.3ad ae8; + } + } + ge-1/0/9 { + description e71-2; + ether-options { + 802.3ad ae9; + } + } + ge-1/0/10 { + description e73-1; + ether-options { + 802.3ad ae10; + } + } + ge-1/0/11 { + description e73-2; + ether-options { + 802.3ad ae11; + } + } + ge-1/0/12 { + description e75-1; + ether-options { + 802.3ad ae12; + } + } + ge-1/0/13 { + description e75-2; + ether-options { + 802.3ad ae13; + } + } + ge-1/0/14 { + description e77-1; + ether-options { + 802.3ad ae14; + } + } + ge-1/0/15 { + description e77-2; + ether-options { + 802.3ad ae15; + } + } + ge-1/0/16 { + description e79-1; + ether-options { + 802.3ad ae16; + } + } + ge-1/0/17 { + description e79-2; + ether-options { + 802.3ad ae17; + } + } + ge-1/0/18 { + description e81-1; + ether-options { + 802.3ad ae18; + } + } + ge-1/0/19 { + description e81-2; + ether-options { + 802.3ad ae19; + } + } + ge-1/0/20 { + description e83-1; + ether-options { + 802.3ad ae20; + } + } + ge-1/0/21 { + description e83-2; + ether-options { + 802.3ad ae21; + } + } + ge-2/0/0 { + description e63-1; + ether-options { + 802.3ad ae0; + } + } + ge-2/0/1 { + description e63-2; + ether-options { + 802.3ad ae1; + } + } + ge-2/0/2 { + description e65-1; + ether-options { + 802.3ad ae2; + } + } + ge-2/0/3 { + description e65-2; + ether-options { + 802.3ad ae3; + } + } + ge-2/0/4 { + description e67-1; + ether-options { + 802.3ad ae4; + } + } + ge-2/0/5 { + description e67-2; + ether-options { + 802.3ad ae5; + } + } + ge-2/0/6 { + description e69-1; + ether-options { + 802.3ad ae6; + } + } + ge-2/0/7 { + description e69-2; + ether-options { + 802.3ad ae7; + } + } + ge-2/0/8 { + description e71-1; + ether-options { + 802.3ad ae8; + } + } + ge-2/0/9 { + description e71-2; + ether-options { + 802.3ad ae9; + } + } + ge-2/0/10 { + description e73-1; + ether-options { + 802.3ad ae10; + } + } + ge-2/0/11 { + description e73-2; + ether-options { + 802.3ad ae11; + } + } + ge-2/0/12 { + description e75-1; + ether-options { + 802.3ad ae12; + } + } + ge-2/0/13 { + description e75-2; + ether-options { + 802.3ad ae13; + } + } + ge-2/0/14 { + description e77-1; + ether-options { + 802.3ad ae14; + } + } + ge-2/0/15 { + description e77-2; + ether-options { + 802.3ad ae15; + } + } + ge-2/0/16 { + description e79-1; + ether-options { + 802.3ad ae16; + } + } + ge-2/0/17 { + description e79-2; + ether-options { + 802.3ad ae17; + } + } + ge-2/0/18 { + description e81-1; + ether-options { + 802.3ad ae18; + } + } + ge-2/0/19 { + description e81-2; + ether-options { + 802.3ad ae19; + } + } + ge-2/0/20 { + description e83-1; + ether-options { + 802.3ad ae20; + } + } + ge-2/0/21 { + description e83-2; + ether-options { + 802.3ad ae21; + } + } + xe-2/1/0 { + description "rs1.core xe-0/0/7"; + ether-options { + 802.3ad ae31; + } + } + ae0 { + description "e63-1 ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e63-1 ]; + } + } + } + } + ae1 { + description "e63-2 ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e63-2 ]; + } + } + } + } + ae2 { + description "e65-1 ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e65-1 ]; + } + } + } + } + ae3 { + description "e65-2 ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e65-2 ]; + } + } + } + } + ae4 { + description "e67-1 ae4"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e67-1 ]; + } + } + } + } + ae5 { + description "e67-2 ae5"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e67-2 ]; + } + } + } + } + ae6 { + description "e69-1 ae6"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e69-1 ]; + } + } + } + } + ae7 { + description "e69-2 ae7"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e69-2 ]; + } + } + } + } + ae8 { + description "e71-1 ae8"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e71-1 ]; + } + } + } + } + ae9 { + description "e71-2 ae9"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e71-2 ]; + } + } + } + } + ae10 { + description "e73-1 ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e73-1 ]; + } + } + } + } + ae11 { + description "e73-2 ae11"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e73-2 ]; + } + } + } + } + ae12 { + description "e75-1 ae12"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e75-1 ]; + } + } + } + } + ae13 { + description "e75-2 ae13"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e75-2 ]; + } + } + } + } + ae14 { + description "e77-1 ae14"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e77-1 ]; + } + } + } + } + ae15 { + description "e77-2 ae15"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e77-2 ]; + } + } + } + } + ae16 { + description "e79-1 ae16"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e79-1 ]; + } + } + } + } + ae17 { + description "e79-2 ae17"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e79-2 ]; + } + } + } + } + ae18 { + description "e81-1 ae18"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e81-1 ]; + } + } + } + } + ae19 { + description "e81-2 ae19"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e81-2 ]; + } + } + } + } + ae20 { + description "e83-1 ae20"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e83-1 ]; + } + } + } + } + ae21 { + description "e83-2 ae21"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt e83-2 ]; + } + } + } + } + ae31 { + description "rs1.core ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.29/31; + } + family inet6 { + address 2a02:ed02:fffe::29/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.8/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::8/128; + } + } + } + vlan { + unit 666 { + family inet { + address 151.216.181.193/26; + } + family inet6 { + address 2a02:ed02:181d::1/64; + } + } + unit 667 { + family inet { + address 151.216.179.193/26; + } + family inet6 { + address 2a02:ed02:179d::1/64; + } + } + unit 1631 { + description e63-1; + family inet { + address 151.216.154.129/26; + } + family inet6 { + address 2a02:ed02:154c::1/64; + } + } + unit 1632 { + description e63-2; + family inet { + address 151.216.154.193/26; + } + family inet6 { + address 2a02:ed02:154d::1/64; + } + } + unit 1651 { + description e65-1; + family inet { + address 151.216.155.129/26; + } + family inet6 { + address 2a02:ed02:155c::1/64; + } + } + unit 1652 { + description e65-2; + family inet { + address 151.216.155.193/26; + } + family inet6 { + address 2a02:ed02:155d::1/64; + } + } + unit 1671 { + description e67-1; + family inet { + address 151.216.156.129/26; + } + family inet6 { + address 2a02:ed02:156c::1/64; + } + } + unit 1672 { + description e67-2; + family inet { + address 151.216.156.193/26; + } + family inet6 { + address 2a02:ed02:156d::1/64; + } + } + unit 1691 { + description e69-1; + family inet { + address 151.216.157.129/26; + } + family inet6 { + address 2a02:ed02:157c::1/64; + } + } + unit 1692 { + description e69-2; + family inet { + address 151.216.157.193/26; + } + family inet6 { + address 2a02:ed02:157d::1/64; + } + } + unit 1711 { + description e71-1; + family inet { + address 151.216.158.129/26; + } + family inet6 { + address 2a02:ed02:158c::1/64; + } + } + unit 1712 { + description e71-2; + family inet { + address 151.216.158.193/26; + } + family inet6 { + address 2a02:ed02:158d::1/64; + } + } + unit 1731 { + description e73-1; + family inet { + address 151.216.159.129/26; + } + family inet6 { + address 2a02:ed02:159c::1/64; + } + } + unit 1732 { + description e73-2; + family inet { + address 151.216.159.193/26; + } + family inet6 { + address 2a02:ed02:159d::1/64; + } + } + unit 1751 { + description e75-1; + family inet { + address 151.216.160.129/26; + } + family inet6 { + address 2a02:ed02:160c::1/64; + } + } + unit 1752 { + description e75-2; + family inet { + address 151.216.160.193/26; + } + family inet6 { + address 2a02:ed02:160d::1/64; + } + } + unit 1771 { + description e77-1; + family inet { + address 151.216.161.129/26; + } + family inet6 { + address 2a02:ed02:161c::1/64; + } + } + unit 1772 { + description e77-2; + family inet { + address 151.216.161.193/26; + } + family inet6 { + address 2a02:ed02:161d::1/64; + } + } + unit 1791 { + description e79-1; + family inet { + address 151.216.162.129/26; + } + family inet6 { + address 2a02:ed02:162c::1/64; + } + } + unit 1792 { + description e79-2; + family inet { + address 151.216.162.193/26; + } + family inet6 { + address 2a02:ed02:162d::1/64; + } + } + unit 1811 { + description e81-1; + family inet { + address 151.216.163.129/26; + } + family inet6 { + address 2a02:ed02:163c::1/64; + } + } + unit 1812 { + description e81-2; + family inet { + address 151.216.163.193/26; + } + family inet6 { + address 2a02:ed02:163d::1/64; + } + } + unit 1831 { + description e83-1; + family inet { + address 151.216.164.1/26; + } + family inet6 { + address 2a02:ed02:164a::1/64; + } + } + unit 1832 { + description e83-2; + family inet { + address 151.216.164.65/26; + } + family inet6 { + address 2a02:ed02:164b::1/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.66; + interface { + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.667; + vlan.1631; + vlan.1632; + vlan.1651; + vlan.1652; + vlan.1671; + vlan.1672; + vlan.1691; + vlan.1692; + vlan.1711; + vlan.1712; + vlan.1731; + vlan.1732; + vlan.1751; + vlan.1752; + vlan.1771; + vlan.1772; + vlan.1791; + vlan.1792; + vlan.1811; + vlan.1812; + vlan.1831; + vlan.1832; + } + } + } + dhcp-relay { + dhcpv6 { + group edge-switches { + active-server-group v6-edge-switches; + overrides; + interface vlan.666; + interface vlan.667; + interface vlan.1631; + interface vlan.1632; + interface vlan.1651; + interface vlan.1652; + interface vlan.1671; + interface vlan.1672; + interface vlan.1691; + interface vlan.1692; + interface vlan.1711; + interface vlan.1712; + interface vlan.1731; + interface vlan.1732; + interface vlan.1751; + interface vlan.1752; + interface vlan.1771; + interface vlan.1772; + interface vlan.1791; + interface vlan.1792; + interface vlan.1811; + interface vlan.1812; + interface vlan.1831; + interface vlan.1832; + } + server-group { + v6-edge-switches { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-edge-switches { + 185.12.59.2; + 185.12.59.66; + } + v4-autoconfig { + 185.12.59.66; + } + } + group edge-switches { + active-server-group v4-edge-switches; + overrides { + trust-option-82; + } + interface vlan.667; + interface vlan.1631; + interface vlan.1632; + interface vlan.1651; + interface vlan.1652; + interface vlan.1671; + interface vlan.1672; + interface vlan.1691; + interface vlan.1692; + interface vlan.1711; + interface vlan.1712; + interface vlan.1731; + interface vlan.1732; + interface vlan.1751; + interface vlan.1752; + interface vlan.1771; + interface vlan.1772; + interface vlan.1791; + interface vlan.1792; + interface vlan.1811; + interface vlan.1812; + interface vlan.1831; + interface vlan.1832; + } + group autoconfig { + active-server-group v4-autoconfig; + relay-option-82 { + circuit-id { + prefix { + host-name; + } + include-irb-and-l2; + } + } + interface vlan.666; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/1 unit 0"; + "deactivate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/1 unit 0"; + "activate interfaces ge-0/0/1 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/2 unit 0"; + "deactivate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/2 unit 0"; + "activate interfaces ge-0/0/2 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; + } + } + } + } + policy ae3down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/3 unit 0"; + "deactivate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; + } + } + } + } + policy ae3up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae3$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/3 unit 0"; + "activate interfaces ge-0/0/3 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; + } + } + } + } + policy ae4down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/4 unit 0"; + "deactivate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; + } + } + } + } + policy ae4up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae4$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/4 unit 0"; + "activate interfaces ge-0/0/4 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; + } + } + } + } + policy ae5down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/5 unit 0"; + "deactivate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; + } + } + } + } + policy ae5up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae5$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/5 unit 0"; + "activate interfaces ge-0/0/5 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; + } + } + } + } + policy ae6down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/6 unit 0"; + "deactivate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; + } + } + } + } + policy ae6up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae6$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/6 unit 0"; + "activate interfaces ge-0/0/6 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; + } + } + } + } + policy ae7down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/7 unit 0"; + "deactivate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; + } + } + } + } + policy ae7up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae7$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/7 unit 0"; + "activate interfaces ge-0/0/7 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; + } + } + } + } + policy ae8down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/8 unit 0"; + "deactivate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; + } + } + } + } + policy ae8up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae8$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/8 unit 0"; + "activate interfaces ge-0/0/8 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; + } + } + } + } + policy ae9down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/9 unit 0"; + "deactivate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; + } + } + } + } + policy ae9up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae9$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/9 unit 0"; + "activate interfaces ge-0/0/9 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; + } + } + } + } + policy ae10down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/10 unit 0"; + "deactivate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; + } + } + } + } + policy ae10up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae10$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/10 unit 0"; + "activate interfaces ge-0/0/10 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; + } + } + } + } + policy ae11down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/11 unit 0"; + "deactivate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; + } + } + } + } + policy ae11up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae11$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/11 unit 0"; + "activate interfaces ge-0/0/11 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; + } + } + } + } + policy ae12down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/12 unit 0"; + "deactivate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 went down so removed ge-0/0/12 from bundle"; + } + } + } + } + policy ae12up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae12$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/12 unit 0"; + "activate interfaces ge-0/0/12 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae12 came up so added ge-0/0/12 to bundle"; + } + } + } + } + policy ae13down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/13 unit 0"; + "deactivate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 went down so removed ge-0/0/13 from bundle"; + } + } + } + } + policy ae13up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae13$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/13 unit 0"; + "activate interfaces ge-0/0/13 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae13 came up so added ge-0/0/13 to bundle"; + } + } + } + } + policy ae14down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/14 unit 0"; + "deactivate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 went down so removed ge-0/0/14 from bundle"; + } + } + } + } + policy ae14up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae14$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/14 unit 0"; + "activate interfaces ge-0/0/14 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae14 came up so added ge-0/0/14 to bundle"; + } + } + } + } + policy ae15down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/15 unit 0"; + "deactivate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 went down so removed ge-0/0/15 from bundle"; + } + } + } + } + policy ae15up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae15$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/15 unit 0"; + "activate interfaces ge-0/0/15 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae15 came up so added ge-0/0/15 to bundle"; + } + } + } + } + policy ae16down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/16 unit 0"; + "deactivate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 went down so removed ge-0/0/16 from bundle"; + } + } + } + } + policy ae16up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae16$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/16 unit 0"; + "activate interfaces ge-0/0/16 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae16 came up so added ge-0/0/16 to bundle"; + } + } + } + } + policy ae17down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/17 unit 0"; + "deactivate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 went down so removed ge-0/0/17 from bundle"; + } + } + } + } + policy ae17up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae17$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/17 unit 0"; + "activate interfaces ge-0/0/17 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae17 came up so added ge-0/0/17 to bundle"; + } + } + } + } + policy ae18down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae18$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/18 unit 0"; + "deactivate interfaces ge-0/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae18 went down so removed ge-0/0/18 from bundle"; + } + } + } + } + policy ae18up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae18$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/18 unit 0"; + "activate interfaces ge-0/0/18 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae18 came up so added ge-0/0/18 to bundle"; + } + } + } + } + policy ae19down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae19$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/19 unit 0"; + "deactivate interfaces ge-0/0/19 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae19 went down so removed ge-0/0/19 from bundle"; + } + } + } + } + policy ae19up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae19$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/19 unit 0"; + "activate interfaces ge-0/0/19 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae19 came up so added ge-0/0/19 to bundle"; + } + } + } + } + policy ae20down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae20$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/20 unit 0"; + "deactivate interfaces ge-0/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae20 went down so removed ge-0/0/20 from bundle"; + } + } + } + } + policy ae20up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae20$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/20 unit 0"; + "activate interfaces ge-0/0/20 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae20 came up so added ge-0/0/20 to bundle"; + } + } + } + } + policy ae21down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae21$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/21 unit 0"; + "deactivate interfaces ge-0/0/21 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae21 went down so removed ge-0/0/21 from bundle"; + } + } + } + } + policy ae21up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae21$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/21 unit 0"; + "activate interfaces ge-0/0/21 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae21 came up so added ge-0/0/21 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1631 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1632 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1651 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1652 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1671 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1672 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1691 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1692 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1711 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1712 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1731 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1732 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1751 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1752 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1771 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1772 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1791 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1792 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1811 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1812 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1831 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1832 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + sflow { + agent-id 151.216.255.8; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.8; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role line-card; + serial-number <removed>; + } + member 2 { + role routing-engine; + serial-number <removed>; + } + member 3 { + role line-card; + serial-number <removed>; + } +} +vlans { + aps { + vlan-id 667; + l3-interface vlan.667; + } + e63-1 { + vlan-id 1631; + l3-interface vlan.1631; + } + e63-2 { + vlan-id 1632; + l3-interface vlan.1632; + } + e65-1 { + vlan-id 1651; + l3-interface vlan.1651; + } + e65-2 { + vlan-id 1652; + l3-interface vlan.1652; + } + e67-1 { + vlan-id 1671; + l3-interface vlan.1671; + } + e67-2 { + vlan-id 1672; + l3-interface vlan.1672; + } + e69-1 { + vlan-id 1691; + l3-interface vlan.1691; + } + e69-2 { + vlan-id 1692; + l3-interface vlan.1692; + } + e71-1 { + vlan-id 1711; + l3-interface vlan.1711; + } + e71-2 { + vlan-id 1712; + l3-interface vlan.1712; + } + e73-1 { + vlan-id 1731; + l3-interface vlan.1731; + } + e73-2 { + vlan-id 1732; + l3-interface vlan.1732; + } + e75-1 { + vlan-id 1751; + l3-interface vlan.1751; + } + e75-2 { + vlan-id 1752; + l3-interface vlan.1752; + } + e77-1 { + vlan-id 1771; + l3-interface vlan.1771; + } + e77-2 { + vlan-id 1772; + l3-interface vlan.1772; + } + e79-1 { + vlan-id 1791; + l3-interface vlan.1791; + } + e79-2 { + vlan-id 1792; + l3-interface vlan.1792; + } + e81-1 { + vlan-id 1811; + l3-interface vlan.1811; + } + e81-2 { + vlan-id 1812; + l3-interface vlan.1812; + } + e83-1 { + vlan-id 1831; + l3-interface vlan.1831; + } + e83-2 { + vlan-id 1832; + l3-interface vlan.1832; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface aps; +} diff --git a/examples/tg15/netconf/fw1.tele.cfg b/examples/tg15/netconf/fw1.tele.cfg new file mode 100644 index 0000000..d813ae5 --- /dev/null +++ b/examples/tg15/netconf/fw1.tele.cfg @@ -0,0 +1,717 @@ +## Last commit: 2015-04-02 17:34:26 CEST by technet +version 12.1X47-D15.4; +system { + host-name fw1.tele; + domain-name infra.tg15.party.gathering.org; + time-zone Europe/Oslo; + root-authentication { + } + name-server { + 208.67.222.222; + 208.67.220.220; + } + login { + user technet { + uid 2003; + class super-user; + authentication { + } + } + } + services { + ssh { + root-login deny; + } + } + syslog { + archive size 100k files 3; + user * { + any emergency; + } + file messages { + any critical; + authorization info; + } + file interactive-commands { + interactive-commands error; + } + file security-all { + any any; + match RT_FLOW; + archive size 1000000 files 1; + } + file security-permit { + any any; + match RT_FLOW_SESSION_CREATE; + archive size 1000000 files 1; + } + file security-deny { + any any; + match RT_FLOW_SESSION_DENY; + archive size 1000000 files 1; + } + file policy_session { + user info; + match RT_FLOW; + archive size 1000k world-readable; + structured-data; + } + file web-filtering { + any any; + match WEBFILTER; + archive size 1000000 files 1; + } + } + max-configurations-on-flash 5; + max-configuration-rollbacks 5; + license { + autoupdate { + url https://ae1.juniper.net/junos/key_retrieval; + } + } + ntp { + server 129.240.2.6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 5; + } + } +} +interfaces { + ge-0/0/0 { + disable; + } + ge-0/0/1 { + disable; + } + ge-0/0/2 { + disable; + } + ge-0/0/3 { + disable; + } + ge-0/0/4 { + disable; + } + ge-0/0/5 { + disable; + } + ge-0/0/6 { + disable; + } + ge-0/0/7 { + disable; + } + ge-0/0/8 { + disable; + } + ge-0/0/9 { + disable; + } + xe-6/0/0 { + description "TeleGW xe-0/2/3"; + gigether-options { + 802.3ad ae0; + } + } + xe-6/0/1 { + description "TeleGW xe-1/2/3"; + gigether-options { + 802.3ad ae0; + } + } + ae0 { + description rs1.tele; + vlan-tagging; + aggregated-ether-options { + lacp { + active; + } + } + unit 10 { + description "rs1.tele pre-nat"; + vlan-id 10; + family inet { + filter { + input v4-fbf; + } + address 151.216.128.7/31; + } + } + unit 20 { + description "rs1.tele post-nat"; + vlan-id 20; + family inet { + address 151.216.128.9/31; + } + } + unit 30 { + description "rs1.tele firewall for event"; + vlan-id 30; + family inet { + address 151.216.128.45/31; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 10.60.254.129/32; + address 151.216.255.9/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::9/128; + } + } + } +} +routing-options { + router-id 151.216.255.9; +} +protocols { + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.20; + } + } + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.20; + } + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +security { + nat { + source { + pool norwegian-addresses { + address { + 185.12.59.96/27; + 185.12.59.128/25; + } + } + rule-set untrust-to-untrust { + from interface [ ae0.10 ae0.30 ]; + to interface ae0.20; + rule source-nat { + match { + source-address 0.0.0.0/0; + } + then { + source-nat { + pool { + norwegian-addresses; + } + } + } + } + } + } + destination { + pool event-mediaserver { + address 10.20.10.3/32 port 21; + } + rule-set to-storageserver { + from zone untrust; + rule r1 { + match { + destination-address 185.12.59.127/32; + destination-port { + 21; + } + } + then { + destination-nat { + pool { + event-mediaserver; + } + } + } + } + } + } + } + policies { + from-zone untrust to-zone untrust { + policy accept-all { + match { + source-address any; + destination-address any; + application any; + } + then { + permit; + log { + session-init; + session-close; + } + count; + } + } + } + from-zone untrust to-zone trust { + policy accept-all { + match { + source-address any; + destination-address any; + application any; + } + then { + permit; + } + } + } + } + zones { + security-zone untrust { + host-inbound-traffic { + system-services { + all; + } + protocols { + all; + } + } + interfaces { + ae0.10; + ae0.20; + ae0.30; + } + } + security-zone trust { + address-book { + } + host-inbound-traffic { + system-services { + all; + } + protocols { + all; + } + } + interfaces { + lo0.0; + } + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter v4-fbf { + term fbf-blizzard { + from { + destination-address { + 12.129.242.30/32; + 12.129.193.242/32; + 80.239.186.0/25; + 80.239.208.0/25; + } + } + then { + count fbf-blizzard; + accept; + } + } + term fbf-steam { + from { + destination-address { + 92.122.219.117/32; + 172.229.200.45/32; + 95.101.248.45/32; + 23.32.105.6/32; + 23.214.66.123/32; + 23.214.146.125/32; + 2.17.35.235/32; + 90.101.0.113/32; + 146.66.156.10/32; + 23.62.99.32/32; + 2.18.192.192/32; + 23.10.252.51/32; + 23.215.60.219/32; + 23.77.200.247/32; + 23.10.252.26/32; + 2.16.94.112/32; + 95.101.0.0/22; + 195.18.221.144/32; + 72.165.61.0/24; + 81.171.115.0/24; + 87.248.217.0/24; + 103.28.54.0/23; + 146.66.152.0/23; + 205.185.220.0/24; + 208.64.200.0/24; + 209.197.0.0/16; + 212.187.201.0/24; + } + } + then { + count fbf-steam; + accept; + } + } + /* League of Legends EU West */ + term fbf-riotgames { + from { + destination-address { + 54.230.99.43/32; + 195.18.221.144/32; + 23.52.27.27/32; + 172.255.83.1/32; + 185.40.64.0/22; + 178.255.83.1/32; + } + } + then { + count fbf-riotgames; + accept; + } + } + term fbf-spotify { + from { + destination-address { + 54.230.98.246/32; + 54.230.97.211/32; + 54.230.99.207/32; + 23.92.96.0/22; + 23.92.100.0/22; + 23.92.104.0/22; + 78.31.8.0/22; + 78.31.12.0/22; + 192.121.53.0/24; + 192.121.132.0/24; + 192.121.140.0/24; + 192.165.160.0/22; + 193.181.4.0/22; + 193.181.180.0/22; + 193.182.3.0/24; + 193.182.7.0/24; + 193.182.8.0/21; + 193.182.243.0/24; + 193.234.240.0/22; + 193.235.32.0/24; + 193.235.51.0/24; + 193.235.203.0/24; + 193.235.206.0/24; + 193.235.224.0/24; + 193.235.232.0/22; + 194.14.177.0/24; + 194.68.28.0/22; + 194.68.116.0/24; + 194.68.169.0/24; + 194.68.176.0/22; + 194.68.181.0/24; + 194.68.183.0/24; + 194.71.148.0/22; + 194.103.10.0/24; + 194.103.13.0/24; + 194.103.36.0/22; + 194.132.152.0/22; + 194.132.162.0/24; + 194.132.168.0/22; + 194.132.176.0/22; + 194.132.196.0/22; + 194.132.204.0/22; + } + } + then { + count fbf-spotify; + accept; + } + } + term fbf-origin { + from { + destination-address { + 2.19.187.0/25; + 184.86.15.128/25; + 54.243.176.0/23; + 23.15.8.0/24; + 23.21.0.0/16; + 23.23.0.0/16; + 23.32.241.0/24; + 23.46.0.0/16; + 50.16.0.0/16; + 50.17.0.0/16; + 54.225.0.0/16; + 81.21.146.0/24; + 107.20.244.0/24; + 120.29.145.0/24; + 124.40.32.0/24; + 125.56.200.0/24; + 164.177.139.0/24; + 184.73.0.0/16; + 204.236.239.0/24; + } + } + then { + count fbf-origin; + accept; + } + } + term fbf-nrk { + from { + destination-address { + 23.8.146.0/24; + 46.137.77.0/24; + 50.16.209.0/24; + 50.16.231.0/24; + 50.17.243.0/24; + 54.225.239.0/24; + 54.243.145.0/24; + 54.243.68.0/24; + 65.52.155.0/24; + 77.88.106.0/24; + 82.96.58.0/24; + 94.245.71.0/24; + 160.68.205.0/24; + 174.129.219.0/24; + 184.28.17.0/24; + 184.73.220.0/24; + 204.245.63.0/24; + 204.236.234.0/24; + 95.101.0.112/32; + } + } + then { + count fbf-nrk; + accept; + } + } + term fbf-twitch { + from { + destination-address { + 185.42.204.0/22; + 199.9.248.0/21; + 192.16.64.0/21; + } + } + then { + count fbf-twitch; + accept; + } + } + term fbf-viaplay { + from { + destination-address { + 54.72.0.0/13; + 54.80.0.0/12; + 54.224.0.0/12; + 54.72.0.0/16; + 54.144.0.0/14; + 54.192.0.0/22; + 54.246.173.25/32; + 52.16.240.0/20; + } + } + then { + count fbf-viaplay; + accept; + } + } + term fbf-tv2 { + from { + destination-address { + 77.75.208.0/21; + 193.227.204.0/23; + 193.160.156.0/23; + } + } + then { + count fbf-tv2; + accept; + } + } + term fbf-netflix { + from { + destination-address { + 69.53.224.0/19; + 208.75.77.0/24; + 23.246.2.0/23; + 23.246.4.0/22; + 23.246.8.0/21; + 23.246.16.0/21; + 23.246.24.0/22; + 23.246.28.0/23; + 23.246.32.0/20; + 23.246.48.0/20; + 23.246.62.0/24; + 23.246.63.0/24; + 37.77.184.0/21; + 108.175.32.0/20; + 185.2.220.0/22; + 185.9.188.0/23; + 185.9.190.0/23; + 192.173.64.0/20; + 192.173.64.0/24; + 192.173.80.0/20; + 192.173.96.0/20; + 192.173.112.0/20; + 198.38.96.0/20; + 198.38.112.0/21; + 198.38.120.0/22; + 198.38.124.0/23; + 198.45.48.0/20; + } + } + then { + count fbf-netflix; + accept; + } + } + term fbf-ubisoft { + from { + destination-address { + 216.98.62.0/23; + 216.98.61.0/24; + 216.98.59.0/24; + 216.98.56.0/24; + 216.98.48.0/24; + 216.98.48.0/20; + 195.88.183.0/24; + 195.88.182.0/24; + 195.22.144.0/23; + 194.2.155.0/24; + 194.169.249.0/24; + 193.138.66.0/24; + 185.38.20.0/22; + } + } + then { + count fbf-ubisoft; + accept; + } + } + term fbf-google { + from { + destination-address { + 216.58.209.0/24; + } + } + then { + count fbf-google; + accept; + } + } + term accept-last { + then { + count accept-last; + accept; + } + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + } +} diff --git a/examples/tg15/netconf/rs1.backstage.cfg b/examples/tg15/netconf/rs1.backstage.cfg new file mode 100644 index 0000000..80251a7 --- /dev/null +++ b/examples/tg15/netconf/rs1.backstage.cfg @@ -0,0 +1,1031 @@ +## Last commit: 2014-12-23 02:24:29 CET by technet +version 14.1X53-D15.2; +system { + host-name rs1.backstage; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + dhcp { + pool 10.20.30.0/24 { + address-range low 10.20.30.2 high 10.20.30.254; + name-server { + 185.12.59.66; + 185.12.59.2; + } + router { + 10.20.30.1; + } + } + } + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp; +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } +} +interfaces { + ge-0/0/0 { + description "Klientnett StageBoH"; + unit 0 { + description "Klientnett StageBoH"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/1 { + description "Klientnett StageBoH"; + unit 0 { + description "Klientnett StageBoH"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/2 { + description "Klientnett StageBoH"; + unit 0 { + description "Klientnett StageBoH"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/3 { + description "Klientnett StageBoH"; + unit 0 { + description "Klientnett StageBoH"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/4 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/5 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/6 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/7 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/8 { + unit 0 { + description "Klientnett Event for AP-er"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/9 { + unit 0 { + description "Klientnett Event for AP-er"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/10 { + unit 0 { + description "Klientnett Event for AP-er"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/11 { + unit 0 { + description "Klientnett Event for AP-er"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/12 { + unit 0 { + description "Klientnett Event for AP-er"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/13 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/14 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/15 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/16 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/17 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/18 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/19 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/20 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/21 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/22 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/23 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/24 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/25 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/26 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/27 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/28 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/29 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members event; + } + } + } + } + ge-0/0/30 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/31 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/32 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/33 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/34 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/35 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/36 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/37 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/38 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/39 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/40 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/41 { + unit 0 { + description "Klientporter Event spesialnett"; + family ethernet-switching { + port-mode access; + vlan { + members backstage_event; + } + } + } + } + ge-0/0/42 { + description "sw2-event access / ae1"; + ether-options { + 802.3ad ae1; + } + } + ge-0/0/43 { + description sw2-event; + ether-options { + 802.3ad ae1; + } + } + ge-0/0/44 { + description sw2-event; + disable; + ether-options { + 802.3ad ae1; + } + } + ge-0/0/45 { + description "sw1-event access / ae0"; + inactive: ether-options { + 802.3ad ae0; + } + } + ge-0/0/46 { + description sw1-event; + ether-options { + 802.3ad ae0; + } + } + ge-0/0/47 { + description sw1-event; + ether-options { + 802.3ad ae0; + } + } + xe-0/1/0 { + description rs1.log; + unit 0 { + family inet { + address 151.216.128.21/31; + } + family inet6 { + address 2a02:ed02:fffe::21/127; + } + } + } + xe-0/1/1 { + description "rs1.distro3 xe-1/1/0"; + unit 0 { + family inet { + address 151.216.128.22/31; + } + family inet6 { + address 2a02:ed02:fffe::22/127; + } + } + } + xe-0/1/2 { + description sw3.backstage; + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt backstage_event event ]; + } + } + } + } + ae0 { + description "sw1-event ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt event backstage_event ]; + } + } + } + } + ae1 { + description "sw2-event ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt event backstage_event ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.15/31; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::15/128; + } + } + } + vlan { + unit 30 { + description backstage_event; + family inet { + filter { + output v4-event; + } + address 10.20.30.1/24; + } + } + unit 235 { + description sw2-event; + family inet { + address 151.216.235.1/24; + } + family inet6 { + address 2a02:ed02:235::1/64; + } + } + unit 666 { + description mgmt; + family inet { + address 151.216.183.161/26; + } + family inet6 { + address 2a02:ed02:1835::1/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + helpers { + bootp { + server 185.12.59.66; + interface { + vlan.235; + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + } + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/45 unit 0"; + "deactivate interfaces ge-0/0/45 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/45 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/45 unit 0"; + "activate interfaces ge-0/0/45 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/45 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/42 unit 0"; + "deactivate interfaces ge-0/0/42 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/42 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/42 unit 0"; + "activate interfaces ge-0/0/42 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/42 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.235 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-event { + term accept-event { + from { + source-address { + 10.20.0.0/16; + } + } + then accept; + } + term accept-noc { + from { + source-address { + 185.12.59.0/26; + } + } + then accept; + } + term accept-dns { + from { + source-address { + 185.12.59.66/32; + 185.12.59.2/32; + } + } + then accept; + } + term discard-tg { + from { + source-address { + 185.12.59.0/24; + 151.216.128.0/17; + } + } + then { + discard; + } + } + term discard-security { + from { + source-address { + 10.30.0.0/16; + } + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +vlans { + backstage_event { + vlan-id 30; + l3-interface vlan.30; + } + backstage_eventspesial { + vlan-id 2500; + } + event { + vlan-id 235; + l3-interface vlan.235; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface all; +} diff --git a/examples/tg15/netconf/rs1.core.cfg b/examples/tg15/netconf/rs1.core.cfg new file mode 100644 index 0000000..dd0c383 --- /dev/null +++ b/examples/tg15/netconf/rs1.core.cfg @@ -0,0 +1,737 @@ +## Last commit: 2015-04-01 19:44:02 CEST by technet +version 13.2X51-D26.2; +system { + host-name rs1.core; + time-zone Europe/Oslo; + arp { + aging-timer 5; + } + authentication-order password; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + user tg { + uid 3000; + class super-user; + authentication { + } + } + } + services { + ssh; + dhcp-local-server { + traceoptions { + file dhcp.dbg; + flag all; + } + dhcpv6 { + group all { + interface ae1.0; + interface ae2.0; + interface ae3.0; + } + } + } + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any notice; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + processes { + app-engine-virtual-machine-management-service { + traceoptions { + level notice; + flag all; + } + } + } + ntp { + boot-server 2001:700:100:2::6; + server 2001:700:100:2::6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 32; + } + } +} +interfaces { + interface-range all-ports { + member-range xe-0/0/0 to xe-0/0/47; + member-range xe-1/0/0 to xe-1/0/47; + member-range et-0/0/48 to et-0/0/53; + member-range et-1/0/48 to et-1/0/53; + description "-- Not in use --"; + } + interface-range sflow { + member-range xe-0/0/0 to xe-0/0/47; + member-range et-0/0/48 to et-0/0/53; + member-range xe-1/0/0 to xe-1/0/47; + member-range et-1/0/48 to et-1/0/53; + } + xe-0/0/0 { + description "rs1.distro0 xe-2/1/0"; + ether-options { + 802.3ad ae3; + } + } + xe-0/0/1 { + description "rs1.distro1 xe-2/1/0"; + ether-options { + 802.3ad ae4; + } + } + xe-0/0/2 { + description "rs1.distro2 xe-2/1/0"; + ether-options { + 802.3ad ae5; + } + } + xe-0/0/3 { + description "rs1.distro3 xe-2/1/0"; + ether-options { + 802.3ad ae6; + } + } + xe-0/0/4 { + description "rs1.distro4 xe-2/1/0"; + ether-options { + 802.3ad ae7; + } + } + xe-0/0/5 { + description "rs1.distro5 xe-2/1/0"; + ether-options { + 802.3ad ae8; + } + } + xe-0/0/6 { + description "rs1.distro6 xe-2/1/0"; + ether-options { + 802.3ad ae9; + } + } + xe-0/0/7 { + description "rs1.distro7 xe-2/1/0"; + ether-options { + 802.3ad ae10; + } + } + xe-0/0/8 { + description "rs1.crew xe-2/1/0"; + ether-options { + 802.3ad ae0; + } + } + et-0/0/48 { + description "rs1.noc et-0/1/0"; + ether-options { + 802.3ad ae2; + } + } + et-0/0/49 { + description "rs1.tele et-0/1/0"; + ether-options { + 802.3ad ae1; + } + } + et-0/0/52 { + description VC-port; + } + et-0/0/53 { + description VC-port; + } + xe-1/0/0 { + description "rs1.distro0 xe-0/1/0"; + ether-options { + 802.3ad ae3; + } + } + xe-1/0/1 { + description "rs1.distro1 xe-0/1/0"; + ether-options { + 802.3ad ae4; + } + } + xe-1/0/2 { + description "rs1.distro2 xe-0/1/0"; + ether-options { + 802.3ad ae5; + } + } + xe-1/0/3 { + description "rs1.distro3 xe-0/1/0"; + ether-options { + 802.3ad ae6; + } + } + xe-1/0/4 { + description "rs1.distro4 xe-0/1/0"; + ether-options { + 802.3ad ae7; + } + } + xe-1/0/5 { + description "rs1.distro5 xe-0/1/0"; + ether-options { + 802.3ad ae8; + } + } + xe-1/0/6 { + description "rs1.distro6 xe-0/1/0"; + ether-options { + 802.3ad ae9; + } + } + xe-1/0/7 { + description "rs1.distro7 xe-0/1/0"; + ether-options { + 802.3ad ae10; + } + } + xe-1/0/8 { + description "rs1.crew xe-0/1/0"; + ether-options { + 802.3ad ae0; + } + } + et-1/0/48 { + description "rs1.noc et-1/1/0"; + ether-options { + 802.3ad ae2; + } + } + et-1/0/49 { + description "rs1.tele et-1/1/0"; + ether-options { + 802.3ad ae1; + } + } + et-1/0/52 { + description VC-port; + } + et-1/0/53 { + description VC-port; + } + ae0 { + description "rs1.crew ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.26/31; + } + family inet6 { + address 2a02:ed02:fffe::26/127; + } + } + } + ae1 { + description "rs1.tele ae0"; + aggregated-ether-options { + minimum-links 1; + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.1/31; + } + family inet6 { + address 2a02:ed02:fffe::1/127; + } + } + } + ae2 { + description "rs1.noc ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.4/31; + } + family inet6 { + address 2a02:ed02:fffe::4/127; + } + } + } + ae3 { + description "rs1.distro0 ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.42/31; + } + family inet6 { + address 2a02:ed02:fffe::42/127; + } + } + } + ae4 { + description "rs1.distro1 ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.38/31; + } + family inet6 { + address 2a02:ed02:fffe::38/127; + } + } + } + ae5 { + description "rs1.distro2 ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.40/31; + } + family inet6 { + address 2a02:ed02:fffe::40/127; + } + } + } + ae6 { + description "rs1.distro3 ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.36/31; + } + family inet6 { + address 2a02:ed02:fffe::36/127; + } + } + } + ae7 { + description "rs1.distro4 ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.32/31; + } + family inet6 { + address 2a02:ed02:fffe::32/127; + } + } + } + ae8 { + description "rs1.distro5 ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.34/31; + } + family inet6 { + address 2a02:ed02:fffe::34/127; + } + } + } + ae9 { + description "rs1.distro6 ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.30/31; + } + family inet6 { + address 2a02:ed02:fffe::30/127; + } + } + } + ae10 { + description "rs1.distro7 ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.28/31; + } + family inet6 { + address 2a02:ed02:fffe::28/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.10/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::10/128; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + storm-control-profiles default { + all; + } +} +routing-options { + nonstop-routing; + rib inet.0 { + static { + route 91.209.30.12/32 next-hop 192.168.160.1; + route 192.168.0.0/16 { + next-hop 192.168.160.1; + no-readvertise; + } + } + } + router-id 192.168.160.128; + autonomous-system 100; +} +protocols { + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae1.0; + interface ae2.0; + interface ae3.0; + interface ae10.0; + interface ae9.0; + interface ae7.0; + interface ae8.0; + interface ae6.0; + interface ae4.0; + interface ae5.0; + interface ae0.0; + } + } + ospf3 { + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae1.0; + interface ae2.0; + interface ae3.0; + interface ae10.0; + interface ae9.0; + interface ae7.0; + interface ae8.0; + interface ae6.0; + interface ae4.0; + interface ae5.0; + interface ae0.0; + } + } + ldp { + interface lo0.0; + } + pim { + rp { + static { + address 151.216.255.11; + address 2a02:ed02:ffff::11; + } + } + interface ae1.0 { + family inet; + family inet6; + } + interface ae2.0 { + family inet; + family inet6; + } + interface ae3.0 { + family inet; + family inet6; + } + interface ae10.0 { + family inet; + family inet6; + } + interface ae9.0 { + family inet; + family inet6; + } + interface ae7.0 { + family inet; + family inet6; + } + interface ae8.0 { + family inet; + family inet6; + } + interface ae6.0 { + family inet; + family inet6; + } + interface ae4.0 { + family inet; + family inet6; + } + interface ae5.0 { + family inet; + family inet6; + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } + igmp-snooping { + vlan default; + } + sflow { + agent-id 151.216.255.10; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.10; + collector <removed>; + interfaces sflow; + } + layer2-control { + nonstop-bridging; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + } + } +} +access { + address-assignment { + pool v6-noc-clients { + family inet6 { + prefix 2a02:ed02:254::/64; + range v6-noc-clients { + low 2a02:ed02:254::1337:1337:10/128; + high 2a02:ed02:254::1337:1337:ffff/128; + } + dhcp-attributes { + dns-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + } + } + } + } +} +routing-instances { + INTERNET { + instance-type vrf; + interface ge-0/0/46.0; ## 'ge-0/0/46.0' is not defined + interface lo0.1; ## 'lo0.1' is not defined + route-distinguisher 1:1; + vrf-target target:1:1; + vrf-table-label; + } +} +virtual-chassis { + preprovisioned; + no-split-detection; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role routing-engine; + serial-number <removed>; + } +} +vlans { + default { + vlan-id 1; + } +} diff --git a/examples/tg15/netconf/rs1.crew.cfg b/examples/tg15/netconf/rs1.crew.cfg new file mode 100644 index 0000000..1874fc8 --- /dev/null +++ b/examples/tg15/netconf/rs1.crew.cfg @@ -0,0 +1,781 @@ +## Last commit: 2014-12-23 01:51:04 CET by root +version 14.1X53-D15.2; +system { + host-name rs1.crew; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp; +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } +} +interfaces { + interface-range klientporter-crew-1 { + member ge-0/0/0; + member ge-0/0/1; + member ge-0/0/2; + member-range ge-0/0/5 to ge-0/0/38; + description "klientporter crew"; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members crew_klientnett_rs1-crew; + } + } + } + } + interface-range klientporter-crew-2 { + member-range ge-0/1/0 to ge-0/1/47; + description "klientporter crew"; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members crew_klientnett_rs1-crew; + } + } + } + } + ge-0/0/3 { + ether-options { + 802.3ad ae3; + } + } + ge-0/0/4 { + ether-options { + 802.3ad ae3; + } + } + ge-0/0/39 { + description "sw1-crew access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/40 { + description sw1-crew; + ether-options { + 802.3ad ae0; + } + } + ge-0/0/41 { + description sw1-crew; + ether-options { + 802.3ad ae0; + } + } + ge-0/0/42 { + description "sw2-crew access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/43 { + description sw2-crew; + ether-options { + 802.3ad ae1; + } + } + ge-0/0/44 { + description sw2-crew; + ether-options { + 802.3ad ae1; + } + } + ge-0/0/45 { + description "sw3-crew access / ae2"; + ether-options { + 802.3ad ae2; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/46 { + description sw3-crew; + ether-options { + 802.3ad ae2; + } + } + ge-0/0/47 { + description sw3-crew; + ether-options { + 802.3ad ae2; + } + } + xe-0/1/0 { + description "rs1.core xe-0/0/8"; + ether-options { + 802.3ad ae31; + } + } + xe-0/1/1 { + description "rs1.south xe-0/1/2"; + ether-options { + 802.3ad ae30; + } + } + ge-1/0/0 { + unit 0 { + family ethernet-switching { + vlan { + members crew_klientnett_rs1-crew; + } + } + } + } + ge-1/0/1 { + unit 0 { + family ethernet-switching { + vlan { + members crew_klientnett_rs1-crew; + } + } + } + } + xe-1/1/0 { + description "rs1.core xe-1/0/8"; + ether-options { + 802.3ad ae31; + } + } + xe-1/1/1 { + description "rs1.south xe-0/1/3"; + ether-options { + 802.3ad ae30; + } + } + ae0 { + description "sw1-crew ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw1-crew ]; + } + } + } + } + ae1 { + description "sw2-crew ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw2-crew ]; + } + } + } + } + ae2 { + description "sw3-crew ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw3-crew ]; + } + } + } + } + ae3 { + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members crew_klientnett_rs1-crew; + } + } + } + } + ae30 { + description "rs1.south ae31"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.25/31; + } + family inet6 { + address 2a02:ed02:fffe::25/127; + } + } + } + ae31 { + description "rs1.core ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.27/31; + } + family inet6 { + address 2a02:ed02:fffe::27/127; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.17/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::17/128; + } + } + } + vlan { + unit 666 { + family inet { + address 151.216.183.65/27; + } + family inet6 { + address 2a02:ed02:1832::1/64; + } + } + unit 1700 { + description "klientnett crew rs1.crew"; + family inet { + address 151.216.170.1/24; + } + family inet6 { + address 2a02:ed02:170a::1/64; + } + } + unit 1701 { + description sw1-crew; + family inet { + address 151.216.171.65/26; + } + family inet6 { + address 2a02:ed02:171b::1/64; + } + } + unit 1702 { + description sw2-crew; + family inet { + address 151.216.171.129/26; + } + family inet6 { + address 2a02:ed02:171c::1/64; + } + } + unit 1703 { + description sw3-crew; + family inet { + address 151.216.171.193/26; + } + family inet6 { + address 2a02:ed02:171d::1/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + inactive: helpers { + bootp { + server 185.12.59.11; + server 185.12.59.2; + interface { + vlan.1701; + vlan.1702; + vlan.1703; + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.1700 { + server 185.12.59.11; + server 185.12.59.2; + } + } + } + } + dhcp-relay { + dhcpv6 { + group crew-clients { + active-server-group v6-dhcp; + overrides; + interface vlan.1700; + interface vlan.1701; + interface vlan.1702; + interface vlan.1703; + } + server-group { + v6-dhcp { + 2a02:ed02:1ee7::66; + } + } + active-server-group v6-dhcp; + } + server-group { + v4-dhcp { + 185.12.59.66; + } + } + active-server-group v4-dhcp; + group all { + overrides { + trust-option-82; + } + interface vlan.65; + } + group crew-clients { + active-server-group v4-dhcp; + overrides { + trust-option-82; + } + interface vlan.1700; + interface vlan.1701; + interface vlan.1702; + interface vlan.1703; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/39 unit 0"; + "deactivate interfaces ge-0/0/39 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/39 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/39 unit 0"; + "activate interfaces ge-0/0/39 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/39 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/42 unit 0"; + "deactivate interfaces ge-0/0/42 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/42 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/42 unit 0"; + "activate interfaces ge-0/0/42 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/42 to bundle"; + } + } + } + } + policy ae2down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/45 unit 0"; + "deactivate interfaces ge-0/0/45 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 went down so removed ge-0/0/45 from bundle"; + } + } + } + } + policy ae2up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae2$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/45 unit 0"; + "activate interfaces ge-0/0/45 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae2 came up so added ge-0/0/45 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.1701 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1702 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.1703 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + interface ae30.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae31.0; + interface ae30.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role routing-engine; + serial-number <removed>; + } +} +vlans { + crew_klientnett_rs1-crew { + vlan-id 1700; + l3-interface vlan.1700; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } + sw1-crew { + vlan-id 1701; + l3-interface vlan.1701; + } + sw2-crew { + vlan-id 1702; + l3-interface vlan.1702; + } + sw3-crew { + vlan-id 1703; + l3-interface vlan.1703; + } +} +poe { + interface ge-0/0/0; + interface ge-0/0/1; + interface ge-1/0/0; + interface ge-1/0/1; +} diff --git a/examples/tg15/netconf/rs1.gamehq.cfg b/examples/tg15/netconf/rs1.gamehq.cfg new file mode 100644 index 0000000..a5fbfbe --- /dev/null +++ b/examples/tg15/netconf/rs1.gamehq.cfg @@ -0,0 +1,804 @@ +## Last commit: 2014-12-25 06:27:20 CET by technet +version 14.1X53-D15.2; +system { + host-name rs1.gamehq; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp; +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } +} +interfaces { + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + } + interface-range klientnett_game { + member-range ge-0/0/12 to ge-0/0/23; + description "KlientNett GameHQ"; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members klientnett_game; + } + } + } + } + ge-0/0/0 { + unit 0 { + family ethernet-switching { + vlan { + members klientnett_game; + } + } + } + } + ge-0/0/1 { + unit 0 { + family ethernet-switching { + vlan { + members klientnett_game; + } + } + } + } + ge-0/0/2 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/3 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/4 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/5 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/6 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/7 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/8 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/9 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/10 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/11 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/12 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/13 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/14 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/15 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/16 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/17 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/18 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/19 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/20 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/21 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/22 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/23 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/24 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/25 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/26 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/27 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/28 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/29 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/30 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/31 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/32 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/33 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/34 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/35 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/36 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/37 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/38 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/39 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/40 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/41 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/42 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/43 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/44 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/45 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/46 { + description "klientnett_game access / ae0"; + inactive: ether-options { + 802.3ad ae0; + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt klientnett_game ]; + } + } + } + } + ge-0/0/47 { + description "klientnett_game access / ae1"; + inactive: ether-options { + 802.3ad ae1; + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt klientnett_game ]; + } + } + } + } + ge-0/1/0 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/0 { + description "rs1.log xe-0/1/1"; + unit 0 { + family inet { + address 151.216.128.15/31; + } + family inet6 { + address 2a02:ed02:fffe::15/127; + } + } + } + ge-0/1/1 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/1 { + description "rs1.north xe-0/1/0"; + unit 0 { + family inet { + address 151.216.128.16/31; + } + family inet6 { + address 2a02:ed02:fffe::16/127; + } + } + } + ge-0/1/2 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/2 { + unit 0 { + family ethernet-switching; + } + } + ge-0/1/3 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/3 { + unit 0 { + family ethernet-switching; + } + } + ae0 { + description "klientnett_game ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt klientnett_game ]; + } + } + } + } + ae1 { + description "klientnett_game ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt klientnett_game ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.14/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::14/128; + } + } + } + vlan { + unit 237 { + family inet { + address 151.216.237.1/24; + } + family inet6 { + address 2a02:ed02:237::1/64; + } + } + unit 666 { + family inet { + address 151.216.183.193/27; + } + family inet6 { + address 2a02:ed02:1836::193/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + helpers { + bootp { + source-address-giaddr; + interface { + vlan.237 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.666 { + server 185.12.59.11; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + } + } + } + inactive: dhcp-relay { + dhcpv6 { + group all { + interface vlan.65; + interface vlan.229; + } + server-group { + v6-dhcp { + 2a02:ed02:1ee7::66; + } + } + active-server-group v6-dhcp; + } + server-group { + v4-dhcp { + 185.12.59.66; + } + } + active-server-group v4-dhcp; + group all { + overrides { + trust-option-82; + } + interface vlan.65; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/46 unit 0"; + "deactivate interfaces ge-0/0/46 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/46 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/46 unit 0"; + "activate interfaces ge-0/0/46 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/46 to bundle"; + } + } + } + } + policy ae1down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "activate interfaces ge-0/0/47 unit 0"; + "deactivate interfaces ge-0/0/47 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 went down so removed ge-0/0/47 from bundle"; + } + } + } + } + policy ae1up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae1$"; + } + then { + change-configuration { + retry count 10 interval 10; + commands { + "deactivate interfaces ge-0/0/47 unit 0"; + "activate interfaces ge-0/0/47 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae1 came up so added ge-0/0/47 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.229 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + interface xe-0/1/0.0 { + family inet; + family inet6; + } + interface xe-0/1/1.0 { + family inet; + family inet6; + } + } + sflow { + agent-id 151.216.255.14; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.14; + collector <removed>; + interfaces sflow; + } + igmp-snooping { + vlan all; + } + rstp; + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +ethernet-switching-options { + storm-control { + interface all; + } +} +vlans { + klientnett_game { + vlan-id 237; + l3-interface vlan.237; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} +poe { + interface all; +} diff --git a/examples/tg15/netconf/rs1.log.cfg b/examples/tg15/netconf/rs1.log.cfg new file mode 100644 index 0000000..a8f6af4 --- /dev/null +++ b/examples/tg15/netconf/rs1.log.cfg @@ -0,0 +1,514 @@ +## Last commit: 2015-04-04 14:12:00 CEST by root +version 14.1X53-D15.2; +system { + host-name rs1.log; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + inactive: dhcp-local-server { + traceoptions { + file log-dhcp; + flag all; + } + } + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } +} +interfaces { + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + } + interface-range Clients { + member-range ge-0/0/2 to ge-0/0/47; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/0 { + description sw1.log; + inactive: ether-options { + 802.3ad ae0; + } + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/1 { + description sw1.log; + ether-options { + 802.3ad ae0; + } + } + ge-0/0/10 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/0 { + description "rs1.south xe-0/1/1"; + unit 0 { + family inet { + address 151.216.128.13/31; + } + family inet6 { + address 2a02:ed02:fffe::13/127; + } + } + } + xe-0/1/1 { + description "rs1.gamehq xe-0/1/0"; + unit 0 { + family inet { + address 151.216.128.14/31; + } + family inet6 { + address 2a02:ed02:fffe::14/127; + } + } + } + xe-0/1/2 { + description "rs1.backstage xe-0/1/0"; + unit 0 { + family inet { + address 151.216.128.20/31; + } + family inet6 { + address 2a02:ed02:fffe::20/127; + } + } + } + ae0 { + description "sw1.log ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt clients ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.13/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::13/128; + } + } + } + vlan { + unit 183 { + description TEST; + family inet { + address 151.216.183.129/27; + } + family inet6 { + address 2a02:ed02:1834::1/64; + address 2a02:ed02:1834::129/64; + } + } + unit 224 { + family inet { + address 151.216.224.1/24; + } + family inet6 { + address 2a02:ed02:224::1/64; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + helpers { + bootp { + source-address-giaddr; + interface { + vlan.183 { + server 185.12.59.11; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.224 { + server 185.12.59.66; + server 185.12.59.2; + } + } + } + } + inactive: dhcp-relay { + dhcpv6 { + group all { + interface vlan.65; + } + server-group { + v6-dhcp { + 2a02:ed02:1ee7::66; + } + } + active-server-group v6-dhcp; + } + server-group { + v4-dhcp { + 185.12.59.66; + 185.12.59.2; + } + inactive: v4-fap { + 185.12.59.11; + } + } + group all { + active-server-group v4-dhcp; + overrides { + trust-option-82; + } + interface vlan.65; + interface vlan.224; + } + inactive: group v4-fap { + active-server-group v4-fap; + relay-option-82 { + circuit-id { + no-vlan-interface-name; + include-irb-and-l2; + } + } + interface ge-0/0/0.0; + interface ae0.0; + interface vlan.183; + } + } +} +event-options { + policy ae0down { + events snmp_trap_link_down; + attributes-match { + snmp_trap_link_down.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 5 interval 4; + commands { + "activate interfaces ge-0/0/0 unit 0"; + "deactivate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; + } + } + } + } + policy ae0up { + events snmp_trap_link_up; + attributes-match { + snmp_trap_link_up.interface-name matches "ae0$"; + } + then { + change-configuration { + retry count 5 interval 4; + commands { + "deactivate interfaces ge-0/0/0 unit 0"; + "activate interfaces ge-0/0/0 ether-options"; + } + user-name technet; + commit-options { + log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + interface xe-0/1/2.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + interface xe-0/1/2.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + interface xe-0/1/0.0 { + family inet; + family inet6; + } + interface xe-0/1/1.0 { + family inet; + family inet6; + } + interface xe-0/1/2.0 { + family inet; + family inet6; + } + } + sflow { + agent-id 151.216.255.13; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.13; + collector <removed>; + interfaces sflow; + } + lldp { + port-id-subtype interface-name; + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +vlans { + clients { + description "Log Clients"; + vlan-id 224; + interface { + Clients; + } + l3-interface vlan.224; + } + mgmt { + description MGMT; + vlan-id 183; + l3-interface vlan.183; + } +} +poe { + interface all; +} diff --git a/examples/tg15/netconf/rs1.noc.cfg b/examples/tg15/netconf/rs1.noc.cfg new file mode 100644 index 0000000..0e7f3c4 --- /dev/null +++ b/examples/tg15/netconf/rs1.noc.cfg @@ -0,0 +1,1481 @@ +## Last commit: 2015-04-04 00:31:37 CEST by technet +version 14.1X53-D16.2; +system { + host-name rs1.noc; + auto-snapshot; + time-zone Europe/Oslo; + root-authentication { + } + name-server { + 8.8.8.8; + } + login { + user technet { + uid 2003; + class super-user; + authentication { + } + } + user tg { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + processes { + dhcp-service { + traceoptions { + file dhcp_logfile size 10m; + level all; + flag all; + } + } + } + ntp { + boot-server 129.240.2.6; + server 129.240.2.6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/23; + member-range et-0/1/0 to et-0/1/1; + member-range xe-0/2/0 to xe-0/2/3; + member-range ge-1/0/0 to ge-1/0/23; + member-range et-1/1/0 to et-1/1/1; + member-range xe-1/2/0 to xe-1/2/3; + member-range xe-2/0/0 to xe-2/0/47; + member-range et-2/0/48 to et-2/0/53; + member-range xe-3/0/0 to xe-3/0/47; + member-range et-3/0/48 to et-3/0/53; + } + interface-range all-ports { + member-range ge-0/0/0 to ge-0/0/23; + member-range xe-0/2/0 to xe-0/2/3; + member-range ge-1/0/0 to ge-1/0/23; + member-range xe-1/2/0 to xe-1/2/3; + member-range xe-2/0/0 to xe-2/0/47; + member-range et-2/0/48 to et-2/0/53; + member-range xe-3/0/0 to xe-3/0/47; + member-range et-3/0/48 to et-3/0/53; + description "-- Not in use --"; + } + ge-0/0/0 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/1 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/2 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/3 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/4 { + description "sw3.noc fugleberget"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ fugleberget_clients noc_mgmt noc_security ]; + } + } + } + } + ge-0/0/5 { + description "sw4.noc fugleberget"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ fugleberget_clients noc_mgmt ]; + } + } + } + } + ge-0/0/6 { + description "sw7.noc presse"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_mgmt noc_presse ]; + } + } + } + } + ge-0/0/7 { + description "Link til motellet"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members motellet_clients; + } + } + } + } + ge-0/0/8 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/9 { + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ sponsorer_clients noc_mgmt ]; + } + } + } + } + ge-0/0/10 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/11 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/12 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/13 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/14 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/15 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/16 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/17 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/18 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/19 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/20 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/21 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/22 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/23 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + xe-0/2/0 { + description wlc1.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-0/2/1 { + description wlc3.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-0/2/2 { + description sw1.deltakerrack; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ deltakerrack_clients noc_mgmt ]; + } + } + } + } + ge-1/0/0 { + description "Event:Game server"; + unit 0 { + family inet { + address 151.216.242.1/24; + } + family inet6 { + address 2a02:ed02:242::1/64; + } + } + } + ge-1/0/1 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/2 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/3 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/4 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/5 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/6 { + description "3d.tg15.gathering.o;5Drg (event lagring)"; + unit 0 { + family ethernet-switching { + vlan { + members noc_event; + } + } + } + } + ge-1/0/7 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/8 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/9 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/10 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/11 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/12 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/13 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/14 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/15 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/16 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/17 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/18 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/19 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/20 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/21 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/22 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/23 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + xe-1/2/0 { + description wlc2.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-1/2/1 { + description wlc4.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-2/0/0 { + description "sw2.noc xe-0/1/0"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_clients noc_mgmt ]; + } + } + } + } + xe-2/0/1 { + description wlc1.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-2/0/2 { + description wlc3.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-2/0/3 { + description "rs1.north xe-0/1/1"; + unit 0 { + family inet { + address 151.216.128.19/31; + } + family inet6 { + address 2a02:ed02:fffe::19/127; + } + } + } + xe-2/0/40 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-2/0/41 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-2/0/42 { + description "Tech:Net ESXI"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_servers noc_event ]; + } + } + } + } + xe-2/0/43 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-2/0/44 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-2/0/45 { + description "seamus (videoreflektor 1)"; + ether-options { + 802.3ad ae2; + } + } + xe-2/0/46 { + description "seamus (videoreflektor 1)"; + ether-options { + 802.3ad ae2; + } + } + xe-2/0/47 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + et-2/0/48 { + description "rs1.core et-0/0/52"; + ether-options { + 802.3ad ae0; + } + } + et-2/0/49 { + description "rs1.tele et-0/1/1"; + ether-options { + 802.3ad ae1; + } + } + xe-3/0/0 { + description "sw1.noc xe-0/1/0"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_clients noc_mgmt ]; + } + } + } + } + xe-3/0/1 { + description wlc2.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-3/0/2 { + description wlc4.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-3/0/3 { + description "Ny sw2.noc xe-0/1/0"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_clients noc_mgmt ]; + } + } + } + } + xe-3/0/40 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/41 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/42 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/43 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/44 { + description "maggie (videoreflektor 2)"; + ether-options { + 802.3ad ae3; + } + } + xe-3/0/45 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/46 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/47 { + description "maggie (videoreflektor 2)"; + ether-options { + 802.3ad ae3; + } + } + et-3/0/48 { + description "rs1.core et-1/0/52"; + ether-options { + 802.3ad ae0; + } + } + et-3/0/49 { + description "rs1.tele et-1/1/1"; + ether-options { + 802.3ad ae1; + } + } + ae0 { + description "rs1.core ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.5/31; + } + family inet6 { + address 2a02:ed02:fffe::5/127; + } + } + } + ae1 { + description "rs1.tele ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.3/31; + } + family inet6 { + address 2a02:ed02:fffe::3/127; + } + } + } + ae2 { + description "seamus (videoreflektor 1) ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + ae3 { + description "maggie (videoreflektor 2) ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + irb { + unit 0; + unit 192 { + description wlan_clients; + family inet { + address 151.216.192.1/19; + } + family inet6 { + address 2a02:ed02:192::1/64; + } + } + unit 226 { + description presse_clients; + family inet { + address 151.216.226.1/24; + } + family inet6 { + address 2a02:ed02:226::1/64; + } + } + unit 227 { + description fugleberget_clients; + family inet { + address 151.216.227.1/24; + } + family inet6 { + address 2a02:ed02:227::1/64; + } + } + unit 233 { + description "SponsorVest Clients"; + family inet { + address 151.216.233.1/24; + } + family inet6 { + address 2a02:ed02:233::1/64; + } + } + unit 241 { + description motellet_clients; + family inet { + address 151.216.241.1/24; + } + family inet6 { + address 2a02:ed02:241::1/64; + } + } + unit 243 { + family inet { + address 151.216.243.1/24; + } + family inet6 { + address 2a02:ed02:243::1/64; + } + } + unit 254 { + description "NOC Clients"; + family inet { + address 151.216.254.1/24; + } + family inet6 { + address 2a02:ed02:254::1/64; + } + } + unit 1059 { + description noc_servers; + family inet { + address 185.12.59.1/26; + } + family inet6 { + address 2a02:ed02:1337::1/64; + } + } + unit 1281 { + description wlc_mgmt; + family inet { + address 151.216.128.129/28; + } + } + unit 1830 { + description noc_mgmt; + family inet { + address 151.216.183.1/27; + } + family inet6 { + address 2a02:ed02:1830::1/64; + } + } + unit 2500 { + description "event spesialnett"; + family inet { + filter { + output v4-event; + } + address 10.20.10.1/24; + } + } + unit 3000 { + description "Security spesialnett"; + family inet { + filter { + input v4-security; + output v4-security; + } + address 10.30.10.1/24; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.11/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::11/128; + } + } + } + vlan { + unit 1830 { + family inet { + filter { + input v4-mgmt; + } + } + family inet6 { + filter { + input v6-mgmt; + } + } + } + } + vme { + unit 0; + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + storm-control-profiles default { + all; + } + dhcp-relay { + dhcpv6 { + group all { + active-server-group v6-dhcp; + interface irb.192; + interface irb.226; + interface irb.227; + interface irb.233; + interface irb.241; + interface irb.243; + interface irb.254; + interface irb.1059; + } + server-group { + v6-dhcp { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-dhcp { + 185.12.59.66; + 185.12.59.2; + } + } + group all { + active-server-group v4-dhcp; + overrides { + trust-option-82; + } + interface irb.192; + interface irb.226; + interface irb.227; + interface irb.233; + interface irb.241; + interface irb.243; + interface irb.254; + interface irb.1059; + } + } +} +routing-options { + nonstop-routing; + router-id 151.216.255.11; +} +protocols { + router-advertisement { + interface irb.254 { + min-advertisement-interval 15; + managed-configuration; + } + interface irb.192 { + prefix 2a02:ed02:192::/64; + } + interface irb.227 { + managed-configuration; + } + interface irb.1059 { + managed-configuration; + } + } + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.0; + interface ae1.0; + interface xe-2/0/3.0; + } + } + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.0; + interface ae1.0; + interface xe-2/0/3.0; + } + } + pim { + rp { + local { + family inet { + address 151.216.255.11; + } + family inet6 { + address 2a02:ed02:ffff::11; + } + } + } + interface ae1.0 { + family inet; + family inet6; + } + interface ae0.0 { + family inet; + family inet6; + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } + sflow { + agent-id 151.216.255.11; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.11; + collector <removed>; + interfaces sflow; + } + layer2-control { + nonstop-bridging; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + } + filter v4-security { + term accept-security { + from { + source-address { + 10.30.0.0/16; + } + destination-address { + 10.30.0.0/16; + } + } + then accept; + } + term discard-all { + then { + discard; + } + } + } + filter v4-event { + term accept-test { + from { + source-address { + 10.20.30.0/24; + 10.0.0.0/8; + } + } + then { + count accept-test; + accept; + } + } + term accept-event { + from { + source-address { + 10.20.0.0/16; + } + } + then { + count accept-event; + accept; + } + } + term accept-noc { + from { + source-address { + 185.12.59.0/26; + 185.12.59.64/27; + } + } + then { + count accept-noc; + accept; + } + } + term reject-tg { + from { + source-address { + 185.12.59.0/24; + 151.216.128.0/17; + } + } + then { + count reject-tg; + discard; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + } + } +} +virtual-chassis { + preprovisioned; + no-split-detection; + member 0 { + role line-card; + serial-number <removed>; + location "Rack 2"; + } + member 1 { + role line-card; + serial-number <removed>; + location "Rack 3"; + } + member 2 { + role routing-engine; + serial-number <removed>; + location "Rack 2"; + } + member 3 { + role routing-engine; + serial-number <removed>; + location "Rack 3"; + } +} +vlans { + default { + vlan-id 1; + l3-interface irb.0; + } + deltakerrack_clients { + vlan-id 243; + l3-interface irb.243; + } + fugleberget_clients { + vlan-id 227; + l3-interface irb.227; + } + motellet_clients { + vlan-id 241; + l3-interface irb.241; + } + noc_clients { + vlan-id 254; + l3-interface irb.254; + } + noc_event { + vlan-id 2500; + l3-interface irb.2500; + } + noc_mgmt { + vlan-id 1830; + l3-interface irb.1830; + } + noc_presse { + vlan-id 226; + l3-interface irb.226; + } + noc_security { + vlan-id 3000; + l3-interface irb.3000; + } + noc_servers { + vlan-id 1059; + l3-interface irb.1059; + } + sponsorer_clients { + vlan-id 233; + l3-interface irb.233; + } + wlan_clients { + vlan-id 192; + l3-interface irb.192; + } + wlc_mgmt { + vlan-id 1281; + l3-interface irb.1281; + } +} diff --git a/examples/tg15/netconf/rs1.north.cfg b/examples/tg15/netconf/rs1.north.cfg new file mode 100644 index 0000000..33049e8 --- /dev/null +++ b/examples/tg15/netconf/rs1.north.cfg @@ -0,0 +1,918 @@ +## Last commit: 2014-12-25 22:24:35 CET by technet +version 14.1X53-D15.2; +system { + host-name rs1.north; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp; +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } +} +interfaces { + ge-0/0/0 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/1 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/2 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/3 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/4 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/5 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/6 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/7 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/8 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/9 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/10 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/11 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/12 { + description "sw1-infodesk access / ae1"; + ether-options { + 802.3ad ae1; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/13 { + description "iptelefon desk/support"; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/14 { + description "iptelefon desk/support"; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/15 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/16 { + description "sw3-streamerlounge access / ae3"; + ether-options { + 802.3ad ae3; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/17 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/18 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/19 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/20 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/21 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/22 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/23 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/24 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members sw1-infodesk; + } + } + } + } + ge-0/0/25 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/26 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/27 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/28 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/29 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/30 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/31 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/32 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/33 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/34 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/35 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/36 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/37 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/38 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/39 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/40 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/41 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/42 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/43 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/44 { + unit 0 { + family ethernet-switching; + } + } + ge-0/0/45 { + description "sw2-gamestudio access / ae2"; + ether-options { + 802.3ad ae2; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/46 { + description Event:Studio-link; + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ sw3-event north_event mgmt ]; + } + } + } + } + ge-0/0/47 { + description Resepsjon; + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ north_security klientnett_resepsjon klientnett_medic mgmt ]; + } + } + } + } + ge-0/1/0 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/0 { + description rs1.gamehq; + unit 0 { + family inet { + address 151.216.128.17/31; + } + family inet6 { + address 2a02:ed02:fffe::17/127; + } + } + } + ge-0/1/1 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/1 { + description "rs1.noc xe-2/0/3"; + unit 0 { + family inet { + address 151.216.128.18/31; + } + family inet6 { + address 2a02:ed02:fffe::18/127; + } + } + } + ge-0/1/2 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/2 { + unit 0 { + family ethernet-switching; + } + } + ge-0/1/3 { + unit 0 { + family ethernet-switching; + } + } + xe-0/1/3 { + unit 0 { + family ethernet-switching; + } + } + ae0 { + description "sw3-event ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ sw3-event mgmt ]; + } + } + } + } + ae1 { + description "sw1-infodesk ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt sw1-infodesk ]; + } + } + } + } + ae2 { + description "sw2-gamestudio ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt clients_game ]; + } + } + } + } + ae3 { + description "sw3-streamerlounge ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt clients_game ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.16/31; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::16/128; + } + } + } + vlan { + unit 229 { + description clients_game; + family inet { + address 151.216.229.1/24; + } + family inet6 { + address 2a02:ed02:229::1/64; + } + } + unit 230 { + description sw1-infodesk; + family inet { + address 151.216.230.1/24; + } + family inet6 { + address 2a02:ed02:230::1/64; + } + } + unit 232 { + description "Klientnett resepsjon"; + family inet { + address 151.216.232.1/24; + } + family inet6 { + address 2a02:ed02:232::1/64; + } + } + unit 236 { + description "Klientnett Medic"; + family inet { + address 151.216.236.1/24; + } + family inet6 { + address 2a02:ed02:236::1/64; + } + } + unit 244 { + family inet { + address 151.216.244.1/24; + } + family inet6 { + address 2a02:ed02:244::1/64; + } + } + unit 666 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.183.225/27; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:1837::225/64; + } + } + unit 2500 { + family inet { + filter { + output v4-event; + } + address 10.20.40.1/24; + } + } + unit 3000 { + family inet { + filter { + input v4-security; + output v4-security; + } + address 10.30.30.1/24; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + helpers { + bootp { + interface { + vlan.244 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.2500 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.232 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.230 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.236 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + vlan.229 { + server 185.12.59.66; + server 185.12.59.2; + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.244 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.230 { + min-advertisement-interval 15; + managed-configuration; + } + interface vlan.229 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + } + igmp-snooping { + vlan all; + } + rstp; + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + filter v4-security { + term accept-security { + from { + source-address { + 10.30.0.0/16; + } + destination-address { + 10.30.0.0/16; + } + } + then accept; + } + term discard-all { + then { + discard; + } + } + } + filter v4-event { + term accept-event { + from { + source-address { + 10.20.0.0/16; + } + } + then accept; + } + term accept-noc { + from { + source-address { + 185.12.59.0/26; + 185.12.59.64/27; + } + } + then accept; + } + term reject-tg { + from { + source-address { + 185.12.59.0/24; + 151.216.128.0/17; + } + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +ethernet-switching-options { + storm-control { + interface all; + } +} +vlans { + clients_game { + vlan-id 229; + l3-interface vlan.229; + } + klientnett_medic { + vlan-id 236; + l3-interface vlan.236; + } + klientnett_resepsjon { + vlan-id 232; + l3-interface vlan.232; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } + north_event { + vlan-id 2500; + l3-interface vlan.2500; + } + north_security { + vlan-id 3000; + l3-interface vlan.3000; + } + sw1-infodesk { + vlan-id 230; + l3-interface vlan.230; + } + sw3-event { + vlan-id 244; + l3-interface vlan.244; + } +} +poe { + interface all; +} diff --git a/examples/tg15/netconf/rs1.south.cfg b/examples/tg15/netconf/rs1.south.cfg new file mode 100644 index 0000000..7f58e0f --- /dev/null +++ b/examples/tg15/netconf/rs1.south.cfg @@ -0,0 +1,926 @@ +## Last commit: 2014-12-26 13:32:27 CET by technet +version 14.1X53-D15.2; +system { + host-name rs1.south; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + ntp; +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } +} +interfaces { + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/47; + member-range xe-0/1/0 to xe-0/1/3; + } + ge-0/0/0 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/1 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/2 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/3 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/4 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/5 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/6 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/7 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/8 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/9 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/10 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/11 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/12 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/13 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/14 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/15 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/16 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/17 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/18 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/19 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members south_event; + } + } + } + } + ge-0/0/20 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members south_event; + } + } + } + } + ge-0/0/21 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members south_event; + } + } + } + } + ge-0/0/22 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members south_event; + } + } + } + } + ge-0/0/23 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members south_event; + } + } + } + } + ge-0/0/24 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/25 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/26 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/27 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/28 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/29 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/30 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/31 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/32 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/33 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/34 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/35 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/36 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/37 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/38 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/39 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + ge-0/0/42 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members event_spesial2; + } + } + } + } + ge-0/0/43 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members event_spesial2; + } + } + } + } + ge-0/0/44 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members event_spesial2; + } + } + } + } + ge-0/0/45 { + description "sw1-south access / ae0"; + ether-options { + 802.3ad ae0; + } + inactive: unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members mgmt; + } + } + } + } + ge-0/0/46 { + description "sw1-coreshop access / ae1"; + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ clients mgmt ]; + } + } + } + } + ge-0/0/47 { + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members southcam; + } + } + } + } + xe-0/1/0 { + description "rs1.tele xe-1/2/0"; + unit 0 { + family inet { + address 151.216.128.11/31; + } + family inet6 { + address 2a02:ed02:fffe::11/127; + } + } + } + xe-0/1/1 { + description "rs1.log xe-0/1/0"; + unit 0 { + family inet { + address 151.216.128.12/31; + } + family inet6 { + address 2a02:ed02:fffe::12/127; + } + } + } + ae0 { + description "sw1-south ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt clients ]; + } + } + } + } + ae1 { + description "sw1-coreshop ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ mgmt clients ]; + } + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.12/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::12/128; + } + } + } + vlan { + unit 234 { + description sw1-south; + family inet { + address 151.216.234.1/24; + } + family inet6 { + address 2a02:ed02:234::1/64; + } + } + unit 666 { + family inet { + address 151.216.183.97/27; + } + family inet6 { + address 2a02:ed02:1836::1/64; + } + } + unit 2490 { + family inet { + address 151.216.249.1/26; + } + family inet6 { + address 2a02:ed02:249a::1/64; + } + } + unit 2500 { + family inet { + address 10.20.50.1/24; + } + } + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + helpers { + bootp { + interface { + vlan.234 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.2490 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.2500 { + server 185.12.59.66; + server 185.12.59.2; + } + vlan.666 { + server 185.12.59.11; + source-address-giaddr; + dhcp-option82 { + circuit-id { + prefix hostname; + } + } + } + } + } + } +} +protocols { + + + + igmp { + interface vlan.65 { + group-policy v4-multicast; + } + } + + + + mld { + interface vlan.65 { + group-policy v6-multicast; + } + } + router-advertisement { + interface vlan.65 { + max-advertisement-interval 30; + managed-configuration; + } + interface vlan.234 { + min-advertisement-interval 15; + managed-configuration; + } + } + + + + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + } + } + + + + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface xe-0/1/0.0; + interface xe-0/1/1.0; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + interface xe-0/1/0.0 { + family inet; + family inet6; + } + interface xe-0/1/1.0 { + family inet; + family inet6; + } + } + sflow { + agent-id 151.216.255.12; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.12; + collector <removed>; + interfaces sflow; + } + lldp { + interface all; + } + lldp-med { + interface all; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-multicast { + term accept-our { + from { + route-filter 233.139.58.0/24 orlonger; + source-address-filter 185.12.59.0/26 orlonger; + source-address-filter 151.216.254.0/24 orlonger; + } + then accept; + } + term reject-all { + then reject; + } + } + policy-statement v6-multicast { + term accept-our { + from { + route-filter ff35:2001:67c:2e44::/120 orlonger; + source-address-filter 2a02:ed02:1337::/64 orlonger; + source-address-filter 2a02:ed02:252::/64 orlonger; + } + } + term reject-all { + then reject; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } + + + + filter v4-event { + term accept-event { + from { + source-address { + 10.20.0.0/16; + } + } + then accept; + } + term accept-noc { + from { + source-address { + 185.12.59.0/26; + 185.12.59.64/27; + } + } + then accept; + } + term reject-tg { + from { + source-address { + 185.12.59.0/24; + 151.216.128.0/17; + } + } + then { + discard; + } + } + term accept-all { + then accept; + } + } +} +vlans { + clients { + vlan-id 234; + l3-interface vlan.234; + } + event_spesial2 { + description "Event Spesialnett 2"; + vlan-id 2510; + interface { + ge-0/0/42.0; + ge-0/0/43.0; + ge-0/0/44.0; + } + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } + south_event { + vlan-id 2500; + l3-interface vlan.2500; + } + southcam { + vlan-id 2490; + l3-interface vlan.2490; + } +} +poe { + interface all; + interface ge-0/0/47; + interface ge-0/0/9; + interface ge-0/0/10; +} diff --git a/examples/tg15/netconf/rs1.tele.cfg b/examples/tg15/netconf/rs1.tele.cfg new file mode 100644 index 0000000..315cba9 --- /dev/null +++ b/examples/tg15/netconf/rs1.tele.cfg @@ -0,0 +1,1503 @@ +## Last commit: 2015-04-03 17:44:49 CEST by technet +version 14.1X53-D16.2; +system { + host-name rs1.tele; + auto-snapshot; + domain-name infra.gathering.org; + time-zone Europe/Oslo; + root-authentication { + } + name-server { + 8.8.8.8; + } + login { + user technet { + uid 2005; + class super-user; + authentication { + } + } + user tg { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh { + root-login deny; + } + dhcp-local-server { + group all { + interface irb.10; + } + } + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + } + commit synchronize; + ntp { + boot-server 129.240.2.6; + server 129.240.2.6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/23; + member-range et-0/1/0 to et-0/1/1; + member-range xe-0/2/0 to xe-0/2/3; + member-range ge-1/0/0 to ge-1/0/23; + member-range et-1/1/0 to et-1/1/1; + member-range xe-1/2/0 to xe-1/2/3; + member-range ge-2/0/0 to ge-2/0/23; + member-range xe-2/2/0 to xe-2/2/3; + } + interface-range all-ports { + member-range ge-0/0/0 to ge-0/0/23; + member-range et-0/1/0 to et-0/1/3; + member-range xe-0/2/0 to xe-0/2/3; + member-range ge-1/0/0 to ge-1/0/23; + member-range et-1/1/0 to et-1/1/3; + member-range xe-1/2/0 to xe-1/2/3; + member-range ge-2/0/0 to ge-2/0/23; + member-range et-2/1/0 to et-2/1/3; + member-range xe-2/2/0 to xe-2/2/3; + description "-- Not in use --"; + } + ge-0/0/0 { + description Event:Studio-link; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ studio_klient tele_event tele_mgmt ]; + } + } + } + } + ge-0/0/1 { + description "marty - DHCP/DNS"; + unit 0 { + family ethernet-switching { + vlan { + members DHCP; + } + } + } + } + ge-0/0/2 { + description "Fortigate management"; + unit 0 { + family ethernet-switching { + vlan { + members DHCP; + } + } + } + } + ge-0/0/3 { + unit 0 { + family ethernet-switching { + vlan { + members DHCP; + } + } + } + } + ge-0/0/4 { + description "NFC-station soverom syd"; + unit 0 { + family ethernet-switching { + vlan { + members studio_klient; + } + } + } + } + ge-0/0/5 { + description "NFC-station soverom syd"; + unit 0 { + family ethernet-switching { + vlan { + members studio_klient; + } + } + } + } + ge-0/0/6 { + unit 0 { + family ethernet-switching { + vlan { + members TELETEMP; + } + } + } + } + ge-0/0/7 { + unit 0 { + family ethernet-switching { + vlan { + members TELETEMP; + } + } + } + } + ge-0/0/8 { + unit 0 { + family ethernet-switching { + vlan { + members TELETEMP; + } + } + } + } + ge-0/0/9 { + unit 0 { + family ethernet-switching { + vlan { + members TELETEMP; + } + } + } + } + ge-0/0/10 { + unit 0 { + family ethernet-switching { + vlan { + members DHCP; + } + } + } + } + et-0/1/0 { + description "rs1.core et-0/0/53"; + ether-options { + no-auto-negotiation; + 802.3ad ae0; + } + } + et-0/1/1 { + description "rs1.noc et-2/0/49"; + ether-options { + 802.3ad ae1; + } + } + et-0/1/2 { + description VC; + } + et-0/1/3 { + description VC; + } + xe-0/2/0 { + description "fw2.tele ethernet9"; + ether-options { + 802.3ad ae3; + } + } + xe-0/2/1 { + description "fw1.tele xe-6/0/0"; + ether-options { + 802.3ad ae2; + } + } + xe-0/2/2 { + description "Blix 1470nm"; + ether-options { + 802.3ad ae5; + } + } + xe-0/2/3 { + description "Blix 1510nm"; + ether-options { + 802.3ad ae5; + } + } + ge-1/0/0 { + description "Security Server"; + unit 0 { + family ethernet-switching { + vlan { + members tele_security; + } + } + } + } + et-1/1/0 { + description "rs1.core et-1/0/53"; + ether-options { + 802.3ad ae0; + } + } + et-1/1/1 { + description "rs1.noc et-3/0/49"; + ether-options { + 802.3ad ae1; + } + } + et-1/1/2 { + description VC; + } + et-1/1/3 { + description VC; + } + xe-1/2/0 { + description "rs1.south xe-0/1/0"; + unit 0 { + family inet { + filter { + input v4-fbf; + } + address 151.216.128.10/31; + } + family inet6 { + address 2a02:ed02:fffe::10/127; + } + } + } + xe-1/2/1 { + description "fw1.tele xe-6/0/1"; + ether-options { + 802.3ad ae2; + } + } + xe-1/2/2 { + description "Blix 1530nm"; + ether-options { + 802.3ad ae5; + } + } + xe-1/2/3 { + description "Blix 1610nm"; + ether-options { + 802.3ad ae5; + } + } + et-2/1/0 { + description "Fortigate 1"; + ether-options { + no-auto-negotiation; + } + unit 0 { + family ethernet-switching { + vlan { + members default; + } + } + } + } + et-2/1/2 { + description VC; + } + et-2/1/3 { + description VC; + } + ae0 { + description "rs1.core ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + filter { + input v4-fbf; + } + address 151.216.128.0/31; + } + family inet6 { + address 2a02:ed02:fffe::0/127; + } + } + } + ae1 { + description "rs1.noc ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + mtu 1500; + filter { + input v4-fbf; + } + address 151.216.128.2/31; + } + family inet6 { + address 2a02:ed02:fffe::2/127; + } + } + } + ae2 { + description "fw1.tele ae0"; + vlan-tagging; + aggregated-ether-options { + lacp { + active; + } + } + unit 10 { + description "fw1.tele pre-nat"; + vlan-id 10; + family inet { + address 151.216.128.6/31; + } + } + unit 20 { + description "fw1.tele post-nat"; + vlan-id 20; + family inet { + address 151.216.128.8/31; + } + } + unit 30 { + description "fw1.tele firewall for event"; + vlan-id 30; + family inet { + address 151.216.128.44/31; + } + } + } + ae3 { + description fw2.tele; + vlan-tagging; + aggregated-ether-options { + lacp { + active; + } + } + unit 40 { + description "fw2.tele pre-nat"; + vlan-id 40; + family inet { + address 151.216.128.46/31; + } + } + unit 50 { + description "fw2.tele post-nat"; + vlan-id 50; + family inet { + address 151.216.128.48/31; + } + } + } + ae5 { + description "Blix internett"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + filter { + input v4-internet-ingress; + output v4-internet-egress; + } + address 185.12.58.2/30; + } + family inet6 { + filter { + input v6-internet-ingress; + output v6-internet-egress; + } + address 2a02:ed01::2/64; + } + } + } + irb { + unit 0; + unit 66 { + family inet { + address 185.12.59.65/27; + } + family inet6 { + address 2a02:ed02:1ee7::1/64; + } + } + unit 240 { + family inet { + address 151.216.240.1/24; + } + } + unit 1831 { + family inet { + address 151.216.183.33/27; + } + family inet6 { + address 2a02:ed02:1831::33/64; + } + } + unit 2500 { + family inet { + filter { + input v4-fbf; + output v4-event; + } + address 10.20.20.1/24; + } + } + unit 3000 { + description "Security spesialnett"; + family inet { + filter { + input v4-security; + output v4-security; + } + address 10.30.20.1/24; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.0/32; + address 185.12.59.0/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::0/128; + } + } + } + vme { + unit 0; + } +} +snmp { + view safe_poll { + oid 1.3.6.1.2.1.1 include; + oid 1.3.6.1.2.1.2 include; + oid 1.3.6.1.4.1.2636.3.5.2.1 include; + oid 1.3.6.1.4.1.2636.3.1.13.1.5 include; + } + community <removed> { + client-list-name mgmt; + } + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + analyzer { + fortigate-1 { + input { + ingress { + interface ae5.0; + } + egress { + interface ae5.0; + } + } + output { + interface et-2/1/0.0; + } + } + inactive: fortigate-2 { + input { + ingress { + interface xe-1/2/2.0; + interface xe-1/2/3.0; + } + } + output { + interface et-2/1/1.0; + } + } + } + dhcp-relay { + dhcpv6 { + group all { + interface irb.240; + interface irb.2500; + } + server-group { + v6-dhcp { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-dhcp { + 185.12.59.66; + 185.12.59.2; + } + } + group all { + active-server-group v4-dhcp; + overrides { + trust-option-82; + } + interface irb.240; + interface irb.2500; + } + } +} +routing-options { + nonstop-routing; + rib inet.0 { + static { + route 151.216.128.0/17 reject; + route 185.12.59.0/24 reject; + route 185.12.59.96/27 next-hop 151.216.128.9; + route 185.12.59.128/25 next-hop 151.216.128.9; + } + } + rib inet6.0 { + static { + route 2a02:ed02::/32 reject; + route 2001:67c:2e44::/48 reject; + } + } + router-id 151.216.255.0; + autonomous-system 35642; +} +protocols { + bgp { + group v4-blix { + import v4-blix-in; + export v4-blix-out; + neighbor 185.12.58.1 { + peer-as 50304; + } + } + group v6-blix { + import v6-blix-in; + export v6-blix-out; + neighbor 2a02:ed01::1 { + peer-as 50304; + } + } + } + ospf { + export [ redistribute-direct redistribute-static redistribute-default ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.0; + interface ae1.0; + interface xe-1/2/0.0; + interface ae2.20; + } + } + ospf3 { + export [ redistribute-direct redistribute-static redistribute-default ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.0; + interface ae1.0; + interface xe-1/2/0.0; + interface ae2.20; + } + } + pim { + rp { + static { + address 2a02:ed02:ffff::11; + address 151.216.255.11; + } + } + interface ae0.0 { + family inet; + family inet6; + } + interface ae1.0 { + family inet; + family inet6; + } + interface xe-1/2/0.0 { + family inet; + family inet6; + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } + igmp-snooping { + vlan default; + } + inactive: sflow { + agent-id 151.216.255.0; + polling-interval 3600; + sample-rate { + ingress 10; + egress 10; + } + source-ip 151.216.255.0; + collector <removed>; + interfaces sflow; + } + layer2-control { + nonstop-bridging; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + prefix-list fbf-steam { + 2.16.94.112/32; + 2.17.35.235/32; + 2.18.192.192/32; + 23.10.252.26/32; + 23.10.252.51/32; + 23.32.105.6/32; + 23.62.99.32/32; + 23.77.200.247/32; + 23.214.66.123/32; + 23.214.146.125/32; + 23.215.60.219/32; + 72.165.61.0/24; + 81.171.115.0/24; + 87.248.217.0/24; + 90.101.0.113/32; + 92.122.219.117/32; + 95.101.0.0/22; + 95.101.248.45/32; + 103.28.54.0/23; + 146.66.152.0/23; + 146.66.156.10/32; + 172.229.200.45/32; + 195.18.221.144/32; + 205.185.220.0/24; + 208.64.200.0/24; + 209.197.0.0/16; + 212.187.201.0/24; + } + prefix-list fbf-netflix { + 23.246.2.0/23; + 23.246.4.0/22; + 23.246.8.0/21; + 23.246.16.0/21; + 23.246.24.0/22; + 23.246.28.0/23; + 23.246.32.0/20; + 23.246.48.0/20; + 23.246.62.0/24; + 23.246.63.0/24; + 37.77.184.0/21; + 69.53.224.0/19; + 108.175.32.0/20; + 185.2.220.0/22; + 185.9.188.0/23; + 185.9.190.0/23; + 192.173.64.0/20; + 192.173.64.0/24; + 192.173.80.0/20; + 192.173.96.0/20; + 192.173.112.0/20; + 198.38.96.0/20; + 198.38.112.0/21; + 198.38.120.0/22; + 198.38.124.0/23; + 198.45.48.0/20; + 208.75.77.0/24; + } + prefix-list fbf-twitch { + 185.42.204.0/22; + 192.16.64.0/21; + 199.9.248.0/21; + } + prefix-list fbf-nrk { + 23.8.146.0/24; + 46.137.77.0/24; + 50.16.209.0/24; + 50.16.231.0/24; + 50.17.243.0/24; + 54.225.239.0/24; + 54.243.68.0/24; + 54.243.145.0/24; + 65.52.155.0/24; + 77.88.106.0/24; + 82.96.58.0/24; + 94.245.71.0/24; + 95.101.0.112/32; + 160.68.205.0/24; + 174.129.219.0/24; + 184.28.17.0/24; + 184.73.220.0/24; + 204.236.234.0/24; + 204.245.63.0/24; + } + prefix-list fbf-spotify { + 23.92.96.0/22; + 23.92.100.0/22; + 23.92.104.0/22; + 54.230.97.211/32; + 54.230.98.246/32; + 54.230.99.207/32; + 78.31.8.0/22; + 78.31.12.0/22; + 192.121.53.0/24; + 192.121.132.0/24; + 192.121.140.0/24; + 192.165.160.0/22; + 193.181.4.0/22; + 193.181.180.0/22; + 193.182.3.0/24; + 193.182.7.0/24; + 193.182.8.0/21; + 193.182.243.0/24; + 193.234.240.0/22; + 193.235.32.0/24; + 193.235.51.0/24; + 193.235.203.0/24; + 193.235.206.0/24; + 193.235.224.0/24; + 193.235.232.0/22; + 194.14.177.0/24; + 194.68.28.0/22; + 194.68.116.0/24; + 194.68.169.0/24; + 194.68.176.0/22; + 194.68.181.0/24; + 194.68.183.0/24; + 194.71.148.0/22; + 194.103.10.0/24; + 194.103.13.0/24; + 194.103.36.0/22; + 194.132.152.0/22; + 194.132.162.0/24; + 194.132.168.0/22; + 194.132.176.0/22; + 194.132.196.0/22; + 194.132.204.0/22; + } + policy-statement redistribute-default { + from protocol bgp; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } + policy-statement v4-blix-in { + from { + route-filter 0.0.0.0/0 exact; + } + } + policy-statement v4-blix-out { + from { + route-filter 151.216.128.0/17 exact; + route-filter 185.12.59.0/24 exact; + } + then accept; + } + policy-statement v6-blix-in { + from { + route-filter ::/0 exact; + } + } + policy-statement v6-blix-out { + from { + route-filter 2a02:ed02::/32 exact; + route-filter 2001:67c:2e44::/48 exact; + } + then accept; + } +} +firewall { + family inet { + filter v4-fbf { + term fbf-event-nope { + from { + destination-address { + 10.20.0.0/16; + } + } + then { + count fbf-event-nope; + accept; + } + } + term fbf-event { + from { + source-address { + 10.20.0.0/16; + } + } + then { + count fbf-event; + routing-instance to-firewall; + } + } + inactive: term fbf-prefix-list { + from { + source-prefix-list { + fbf-netflix; + fbf-nrk; + fbf-spotify; + fbf-steam; + fbf-twitch; + } + } + then { + routing-instance to-nat; + } + } + inactive: term fbf-blizzard { + from { + destination-address { + 12.129.242.30/32; + 12.129.193.242/32; + 80.239.186.0/25; + 80.239.208.0/25; + } + } + then { + count fbf-blizzard; + routing-instance to-nat; + } + } + inactive: term fbf-steam { + from { + destination-address { + 92.122.219.117/32; + 172.229.200.45/32; + 95.101.248.45/32; + 23.32.105.6/32; + 23.214.66.123/32; + 23.214.146.125/32; + 2.17.35.235/32; + 90.101.0.113/32; + 146.66.156.10/32; + 23.62.99.32/32; + 2.18.192.192/32; + 23.10.252.51/32; + 23.215.60.219/32; + 23.77.200.247/32; + 23.10.252.26/32; + 2.16.94.112/32; + 95.101.0.0/22; + 195.18.221.144/32; + 72.165.61.0/24; + 81.171.115.0/24; + 87.248.217.0/24; + 103.28.54.0/23; + 146.66.152.0/23; + 205.185.220.0/24; + 208.64.200.0/24; + 209.197.0.0/16; + 212.187.201.0/24; + 23.223.16.0/20; + } + } + then { + count fbf-steam; + routing-instance to-nat; + } + } + /* League of Legends EU West */ + inactive: term fbf-riotgames { + from { + destination-address { + 54.230.99.43/32; + 195.18.221.144/32; + 23.52.27.27/32; + 172.255.83.1/32; + 185.40.64.0/22; + 178.255.83.1/32; + } + } + then { + count fbf-riotgames; + routing-instance to-nat; + } + } + inactive: term fbf-spotify { + from { + destination-address { + 54.230.98.246/32; + 54.230.97.211/32; + 54.230.99.207/32; + 23.92.96.0/22; + 23.92.100.0/22; + 23.92.104.0/22; + 78.31.8.0/22; + 78.31.12.0/22; + 192.121.53.0/24; + 192.121.132.0/24; + 192.121.140.0/24; + 192.165.160.0/22; + 193.181.4.0/22; + 193.181.180.0/22; + 193.182.3.0/24; + 193.182.7.0/24; + 193.182.8.0/21; + 193.182.243.0/24; + 193.234.240.0/22; + 193.235.32.0/24; + 193.235.51.0/24; + 193.235.203.0/24; + 193.235.206.0/24; + 193.235.224.0/24; + 193.235.232.0/22; + 194.14.177.0/24; + 194.68.28.0/22; + 194.68.116.0/24; + 194.68.169.0/24; + 194.68.176.0/22; + 194.68.181.0/24; + 194.68.183.0/24; + 194.71.148.0/22; + 194.103.10.0/24; + 194.103.13.0/24; + 194.103.36.0/22; + 194.132.152.0/22; + 194.132.162.0/24; + 194.132.168.0/22; + 194.132.176.0/22; + 194.132.196.0/22; + 194.132.204.0/22; + } + } + then { + count fbf-spotify; + routing-instance to-nat; + } + } + inactive: term fbf-origin { + from { + destination-address { + 2.19.187.0/25; + 184.86.15.128/25; + 54.243.176.0/23; + 23.15.8.0/24; + 23.21.0.0/16; + 23.23.0.0/16; + 23.32.241.0/24; + 23.46.0.0/16; + 50.16.0.0/16; + 50.17.0.0/16; + 54.225.0.0/16; + 81.21.146.0/24; + 107.20.244.0/24; + 120.29.145.0/24; + 124.40.32.0/24; + 125.56.200.0/24; + 164.177.139.0/24; + 184.73.0.0/16; + 204.236.239.0/24; + 23.54.0.0/20; + } + } + then { + count fbf-origin; + routing-instance to-nat; + } + } + inactive: term fbf-nrk { + from { + destination-address { + 23.8.146.0/24; + 46.137.77.0/24; + 50.16.209.0/24; + 50.16.231.0/24; + 50.17.243.0/24; + 54.225.239.0/24; + 54.243.145.0/24; + 54.243.68.0/24; + 65.52.155.0/24; + 77.88.106.0/24; + 82.96.58.0/24; + 94.245.71.0/24; + 160.68.205.0/24; + 174.129.219.0/24; + 184.28.17.0/24; + 184.73.220.0/24; + 204.245.63.0/24; + 204.236.234.0/24; + 95.101.0.112/32; + } + } + then { + count fbf-nrk; + routing-instance to-nat; + } + } + inactive: term fbf-twitch { + from { + destination-address { + 185.42.204.0/22; + 199.9.248.0/21; + 192.16.64.0/21; + } + } + then { + count fbf-twitch; + routing-instance to-nat; + } + } + inactive: term fbf-viaplay { + from { + destination-address { + 54.72.0.0/13; + 54.80.0.0/12; + 54.224.0.0/12; + 54.72.0.0/16; + 54.144.0.0/14; + 54.192.0.0/22; + 54.246.173.25/32; + 52.16.240.0/20; + } + } + then { + count fbf-viaplay; + routing-instance to-nat; + } + } + inactive: term fbf-tv2 { + from { + destination-address { + 77.75.208.0/21; + 193.227.204.0/23; + 193.160.156.0/23; + } + } + then { + count fbf-tv2; + routing-instance to-nat; + } + } + inactive: term fbf-netflix { + from { + destination-address { + 69.53.224.0/19; + 208.75.77.0/24; + 23.246.2.0/23; + 23.246.4.0/22; + 23.246.8.0/21; + 23.246.16.0/21; + 23.246.24.0/22; + 23.246.28.0/23; + 23.246.32.0/20; + 23.246.48.0/20; + 23.246.62.0/24; + 23.246.63.0/24; + 37.77.184.0/21; + 108.175.32.0/20; + 185.2.220.0/22; + 185.9.188.0/23; + 185.9.190.0/23; + 192.173.64.0/20; + 192.173.64.0/24; + 192.173.80.0/20; + 192.173.96.0/20; + 192.173.112.0/20; + 198.38.96.0/20; + 198.38.112.0/21; + 198.38.120.0/22; + 198.38.124.0/23; + 198.45.48.0/20; + } + } + then { + count fbf-netflix; + routing-instance to-nat; + } + } + inactive: term fbf-ubisoft { + from { + destination-address { + 216.98.62.0/23; + 216.98.61.0/24; + 216.98.59.0/24; + 216.98.56.0/24; + 216.98.48.0/24; + 216.98.48.0/20; + 195.88.183.0/24; + 195.88.182.0/24; + 195.22.144.0/23; + 194.2.155.0/24; + 194.169.249.0/24; + 193.138.66.0/24; + 185.38.20.0/22; + } + } + then { + count fbf-ubisoft; + routing-instance to-nat; + } + } + inactive: term fbf-harald { + from { + destination-address { + 91.209.30.12/32; + 91.209.30.134/32; + 91.209.30.20/32; + } + } + then { + count fbf-harald; + routing-instance to-nat; + } + } + inactive: term fbf-google { + from { + destination-address { + 216.58.209.0/24; + } + } + then { + count fbf-google; + routing-instance to-nat; + } + } + term accept-last { + then { + count accept-last; + accept; + } + } + } + filter v4-event { + term accept-event { + from { + source-address { + 10.20.0.0/16; + } + } + then { + count accept-event; + accept; + } + } + term accept-noc { + from { + source-address { + 185.12.59.0/26; + 185.12.59.64/27; + } + } + then { + count accept-noc; + accept; + } + } + term reject-tg { + from { + source-address { + 185.12.59.0/24; + 151.216.128.0/17; + } + } + then { + count reject-tg; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter v4-internet-ingress { + term block-ntp { + from { + protocol udp; + destination-port ntp; + } + then { + count block-ntp; + discard; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter v4-internet-egress { + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter v4-security { + term accept-security { + from { + source-address { + 10.30.0.0/16; + } + destination-address { + 10.30.0.0/16; + } + } + then accept; + } + term discard-all { + then { + discard; + } + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter v6-internet-ingress { + term accept-all { + then { + count accept-all; + accept; + } + } + } + filter v6-internet-egress { + term accept-all { + then { + count accept-all; + accept; + } + } + } + } +} +access { + address-assignment { + pool v4-teletemp { + family inet { + network 151.216.160.0/24; + range v4-teletemp { + low 151.216.160.10; + high 151.216.160.50; + } + dhcp-attributes { + name-server { + 8.8.8.8; + } + router { + 151.216.160.1; + } + } + } + } + pool event_tele { + family inet { + network 10.20.20.0/24; + range event_tele { + low 10.20.20.2; + high 10.20.20.254; + } + dhcp-attributes { + name-server { + 185.12.59.66; + 185.12.59.2; + } + router { + 10.20.20.1; + } + } + } + } + } +} +routing-instances { + to-firewall { + description "For firewalling of event-net"; + instance-type virtual-router; + interface ae2.30; + routing-options { + static { + route 0.0.0.0/0 next-hop 151.216.128.45; + } + } + } + to-nat { + description "For NAT av tjenester"; + instance-type virtual-router; + interface ae2.10; + routing-options { + static { + route 0.0.0.0/0 next-hop 151.216.128.7; + } + } + } +} +virtual-chassis { + preprovisioned; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role routing-engine; + serial-number <removed>; + } + member 2 { + role line-card; + serial-number <removed>; + } +} +vlans { + DHCP { + vlan-id 66; + l3-interface irb.66; + } + TELETEMP { + vlan-id 10; + l3-interface irb.10; + } + default { + vlan-id 1; + l3-interface irb.0; + } + studio_klient { + vlan-id 240; + l3-interface irb.240; + } + tele_event { + vlan-id 2500; + l3-interface irb.2500; + } + tele_mgmt { + vlan-id 1831; + l3-interface irb.1831; + } + tele_security { + vlan-id 3000; + l3-interface irb.3000; + } +} diff --git a/examples/tg15/netconf/sw1.south.cfg b/examples/tg15/netconf/sw1.south.cfg new file mode 100644 index 0000000..c81b991 --- /dev/null +++ b/examples/tg15/netconf/sw1.south.cfg @@ -0,0 +1,263 @@ +## Last commit: 2015-04-02 09:04:25 CEST by technet +version 14.1X53-D15.2; +system { + host-name sw1-south; + auto-snapshot; + time-zone Europe/Oslo; + authentication-order [ tacplus password ]; + root-authentication { + } + name-server { + 2a02:ed02:1ee7::66; + 2a02:ed02:1337::2; + } + login { + user technet { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh { + root-login deny; + } + netconf { + ssh; + } + } + syslog { + user * { + any emergency; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + ntp { + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 1; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range edge-ports { + member-range ge-0/0/0 to ge-0/0/43; + description Clients; + unit 0 { + family ethernet-switching { + port-mode access; + vlan { + members clients; + } + } + } + } + interface-range core-ports { + member-range ge-0/0/44 to ge-0/0/47; + description "rs1.south ge-0/0/45"; + ether-options { + 802.3ad ae0; + } + } + ae0 { + description "rs1.south ge-0/0/45"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + port-mode trunk; + vlan { + members [ clients mgmt ]; + } + } + } + } + vlan { + unit 666 { + description "MGMT L3 interface"; + family inet { + filter { + input v4-mgmt; + } + address 151.216.183.98/27; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:1836::98/64; + } + } + } +} +snmp { + view ifpoll { + oid 1.3.6.1.2.1.1 include; + oid 1.3.6.1.2.1.2 include; + oid 1.3.6.1.4.1.2636.3.1.13.1.5 include; + } + community <removed> { + client-list-name mgmt; + } + community <removed> { + view ifpoll; + authorization read-only; + client-list-name mgmt; + } + community <removed> { + authorization read-write; + client-list-name mgmt; + } + community <removed> { + authorization read-write; + clients { + 151.216.254.32/24; + } + } +} +routing-options { + rib inet.0 { + static { + route 0.0.0.0/0 next-hop 151.216.183.97; + } + } + rib inet6.0 { + static { + route ::/0 next-hop 2a02:ed02:1836::1; + } + } +} +protocols { + sflow { + sample-rate { + ingress 10000; + egress 10000; + } + collector <removed>; + interfaces core-ports; + interfaces edge-ports; + } + igmp-snooping { + vlan all { + version 3; + immediate-leave; + } + } + mld-snooping { + vlan all { + version 2; + immediate-leave; + } + } + rstp { + bridge-priority 8k; + interface edge-ports { + edge; + no-root-port; + } + } + lldp { + interface ae0.0; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +vlans { + clients { + vlan-id 234; + } + mgmt { + vlan-id 666; + l3-interface vlan.666; + } +} |