diff options
Diffstat (limited to 'examples/tg15/netconf/rs1.noc.cfg')
| -rw-r--r-- | examples/tg15/netconf/rs1.noc.cfg | 1481 |
1 files changed, 1481 insertions, 0 deletions
diff --git a/examples/tg15/netconf/rs1.noc.cfg b/examples/tg15/netconf/rs1.noc.cfg new file mode 100644 index 0000000..0e7f3c4 --- /dev/null +++ b/examples/tg15/netconf/rs1.noc.cfg @@ -0,0 +1,1481 @@ +## Last commit: 2015-04-04 00:31:37 CEST by technet +version 14.1X53-D16.2; +system { + host-name rs1.noc; + auto-snapshot; + time-zone Europe/Oslo; + root-authentication { + } + name-server { + 8.8.8.8; + } + login { + user technet { + uid 2003; + class super-user; + authentication { + } + } + user tg { + uid 2000; + class super-user; + authentication { + } + } + } + services { + ssh; + } + syslog { + user * { + any emergency; + } + host 185.12.59.18 { + any info; + authorization info; + port 515; + } + file messages { + any notice; + authorization info; + } + file interactive-commands { + interactive-commands any; + } + } + commit synchronize; + processes { + dhcp-service { + traceoptions { + file dhcp_logfile size 10m; + level all; + flag all; + } + } + } + ntp { + boot-server 129.240.2.6; + server 129.240.2.6; + } +} +chassis { + redundancy { + graceful-switchover; + } + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range sflow { + member-range ge-0/0/0 to ge-0/0/23; + member-range et-0/1/0 to et-0/1/1; + member-range xe-0/2/0 to xe-0/2/3; + member-range ge-1/0/0 to ge-1/0/23; + member-range et-1/1/0 to et-1/1/1; + member-range xe-1/2/0 to xe-1/2/3; + member-range xe-2/0/0 to xe-2/0/47; + member-range et-2/0/48 to et-2/0/53; + member-range xe-3/0/0 to xe-3/0/47; + member-range et-3/0/48 to et-3/0/53; + } + interface-range all-ports { + member-range ge-0/0/0 to ge-0/0/23; + member-range xe-0/2/0 to xe-0/2/3; + member-range ge-1/0/0 to ge-1/0/23; + member-range xe-1/2/0 to xe-1/2/3; + member-range xe-2/0/0 to xe-2/0/47; + member-range et-2/0/48 to et-2/0/53; + member-range xe-3/0/0 to xe-3/0/47; + member-range et-3/0/48 to et-3/0/53; + description "-- Not in use --"; + } + ge-0/0/0 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/1 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/2 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/3 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/4 { + description "sw3.noc fugleberget"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ fugleberget_clients noc_mgmt noc_security ]; + } + } + } + } + ge-0/0/5 { + description "sw4.noc fugleberget"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ fugleberget_clients noc_mgmt ]; + } + } + } + } + ge-0/0/6 { + description "sw7.noc presse"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_mgmt noc_presse ]; + } + } + } + } + ge-0/0/7 { + description "Link til motellet"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members motellet_clients; + } + } + } + } + ge-0/0/8 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/9 { + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ sponsorer_clients noc_mgmt ]; + } + } + } + } + ge-0/0/10 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/11 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/12 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/13 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/14 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/15 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/16 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/17 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/18 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/19 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/20 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/21 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/22 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-0/0/23 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + xe-0/2/0 { + description wlc1.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-0/2/1 { + description wlc3.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-0/2/2 { + description sw1.deltakerrack; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ deltakerrack_clients noc_mgmt ]; + } + } + } + } + ge-1/0/0 { + description "Event:Game server"; + unit 0 { + family inet { + address 151.216.242.1/24; + } + family inet6 { + address 2a02:ed02:242::1/64; + } + } + } + ge-1/0/1 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/2 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/3 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/4 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/5 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/6 { + description "3d.tg15.gathering.o;5Drg (event lagring)"; + unit 0 { + family ethernet-switching { + vlan { + members noc_event; + } + } + } + } + ge-1/0/7 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/8 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/9 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/10 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/11 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/12 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/13 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/14 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/15 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/16 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/17 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/18 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/19 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/20 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/21 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/22 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + ge-1/0/23 { + unit 0 { + family ethernet-switching { + vlan { + members noc_servers; + } + } + } + } + xe-1/2/0 { + description wlc2.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-1/2/1 { + description wlc4.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-2/0/0 { + description "sw2.noc xe-0/1/0"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_clients noc_mgmt ]; + } + } + } + } + xe-2/0/1 { + description wlc1.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-2/0/2 { + description wlc3.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-2/0/3 { + description "rs1.north xe-0/1/1"; + unit 0 { + family inet { + address 151.216.128.19/31; + } + family inet6 { + address 2a02:ed02:fffe::19/127; + } + } + } + xe-2/0/40 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-2/0/41 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-2/0/42 { + description "Tech:Net ESXI"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_servers noc_event ]; + } + } + } + } + xe-2/0/43 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-2/0/44 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-2/0/45 { + description "seamus (videoreflektor 1)"; + ether-options { + 802.3ad ae2; + } + } + xe-2/0/46 { + description "seamus (videoreflektor 1)"; + ether-options { + 802.3ad ae2; + } + } + xe-2/0/47 { + description "Jocke maa settes desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + et-2/0/48 { + description "rs1.core et-0/0/52"; + ether-options { + 802.3ad ae0; + } + } + et-2/0/49 { + description "rs1.tele et-0/1/1"; + ether-options { + 802.3ad ae1; + } + } + xe-3/0/0 { + description "sw1.noc xe-0/1/0"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_clients noc_mgmt ]; + } + } + } + } + xe-3/0/1 { + description wlc2.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-3/0/2 { + description wlc4.noc; + native-vlan-id 1281; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ wlan_clients noc_clients wlc_mgmt ]; + } + } + } + } + xe-3/0/3 { + description "Ny sw2.noc xe-0/1/0"; + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ noc_clients noc_mgmt ]; + } + } + } + } + xe-3/0/40 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/41 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/42 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/43 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/44 { + description "maggie (videoreflektor 2)"; + ether-options { + 802.3ad ae3; + } + } + xe-3/0/45 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/46 { + description "Jocke maa sette desc"; + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + xe-3/0/47 { + description "maggie (videoreflektor 2)"; + ether-options { + 802.3ad ae3; + } + } + et-3/0/48 { + description "rs1.core et-1/0/52"; + ether-options { + 802.3ad ae0; + } + } + et-3/0/49 { + description "rs1.tele et-1/1/1"; + ether-options { + 802.3ad ae1; + } + } + ae0 { + description "rs1.core ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.5/31; + } + family inet6 { + address 2a02:ed02:fffe::5/127; + } + } + } + ae1 { + description "rs1.tele ae1"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family inet { + address 151.216.128.3/31; + } + family inet6 { + address 2a02:ed02:fffe::3/127; + } + } + } + ae2 { + description "seamus (videoreflektor 1) ae2"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + ae3 { + description "maggie (videoreflektor 2) ae3"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode access; + vlan { + members noc_servers; + } + } + } + } + irb { + unit 0; + unit 192 { + description wlan_clients; + family inet { + address 151.216.192.1/19; + } + family inet6 { + address 2a02:ed02:192::1/64; + } + } + unit 226 { + description presse_clients; + family inet { + address 151.216.226.1/24; + } + family inet6 { + address 2a02:ed02:226::1/64; + } + } + unit 227 { + description fugleberget_clients; + family inet { + address 151.216.227.1/24; + } + family inet6 { + address 2a02:ed02:227::1/64; + } + } + unit 233 { + description "SponsorVest Clients"; + family inet { + address 151.216.233.1/24; + } + family inet6 { + address 2a02:ed02:233::1/64; + } + } + unit 241 { + description motellet_clients; + family inet { + address 151.216.241.1/24; + } + family inet6 { + address 2a02:ed02:241::1/64; + } + } + unit 243 { + family inet { + address 151.216.243.1/24; + } + family inet6 { + address 2a02:ed02:243::1/64; + } + } + unit 254 { + description "NOC Clients"; + family inet { + address 151.216.254.1/24; + } + family inet6 { + address 2a02:ed02:254::1/64; + } + } + unit 1059 { + description noc_servers; + family inet { + address 185.12.59.1/26; + } + family inet6 { + address 2a02:ed02:1337::1/64; + } + } + unit 1281 { + description wlc_mgmt; + family inet { + address 151.216.128.129/28; + } + } + unit 1830 { + description noc_mgmt; + family inet { + address 151.216.183.1/27; + } + family inet6 { + address 2a02:ed02:1830::1/64; + } + } + unit 2500 { + description "event spesialnett"; + family inet { + filter { + output v4-event; + } + address 10.20.10.1/24; + } + } + unit 3000 { + description "Security spesialnett"; + family inet { + filter { + input v4-security; + output v4-security; + } + address 10.30.10.1/24; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input v4-mgmt; + } + address 151.216.255.11/32; + } + family inet6 { + filter { + input v6-mgmt; + } + address 2a02:ed02:ffff::11/128; + } + } + } + vlan { + unit 1830 { + family inet { + filter { + input v4-mgmt; + } + } + family inet6 { + filter { + input v6-mgmt; + } + } + } + } + vme { + unit 0; + } +} +snmp { + community <removed> { + client-list-name mgmt; + } +} +forwarding-options { + storm-control-profiles default { + all; + } + dhcp-relay { + dhcpv6 { + group all { + active-server-group v6-dhcp; + interface irb.192; + interface irb.226; + interface irb.227; + interface irb.233; + interface irb.241; + interface irb.243; + interface irb.254; + interface irb.1059; + } + server-group { + v6-dhcp { + 2a02:ed02:1ee7::66; + } + } + } + server-group { + v4-dhcp { + 185.12.59.66; + 185.12.59.2; + } + } + group all { + active-server-group v4-dhcp; + overrides { + trust-option-82; + } + interface irb.192; + interface irb.226; + interface irb.227; + interface irb.233; + interface irb.241; + interface irb.243; + interface irb.254; + interface irb.1059; + } + } +} +routing-options { + nonstop-routing; + router-id 151.216.255.11; +} +protocols { + router-advertisement { + interface irb.254 { + min-advertisement-interval 15; + managed-configuration; + } + interface irb.192 { + prefix 2a02:ed02:192::/64; + } + interface irb.227 { + managed-configuration; + } + interface irb.1059 { + managed-configuration; + } + } + ospf { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.0; + interface ae1.0; + interface xe-2/0/3.0; + } + } + ospf3 { + export [ redistribute-direct redistribute-static ]; + reference-bandwidth 1000g; + area 0.0.0.0 { + interface ae0.0; + interface ae1.0; + interface xe-2/0/3.0; + } + } + pim { + rp { + local { + family inet { + address 151.216.255.11; + } + family inet6 { + address 2a02:ed02:ffff::11; + } + } + } + interface ae1.0 { + family inet; + family inet6; + } + interface ae0.0 { + family inet; + family inet6; + } + } + lldp { + interface all; + } + lldp-med { + interface all; + } + sflow { + agent-id 151.216.255.11; + polling-interval 3600; + sample-rate { + ingress 10000; + egress 10000; + } + source-ip 151.216.255.11; + collector <removed>; + interfaces sflow; + } + layer2-control { + nonstop-bridging; + } +} +policy-options { + prefix-list v4-mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + } + prefix-list v6-mgmt { + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + prefix-list mgmt { + /* NOC clients */ + 151.216.254.0/24; + /* Servers */ + 185.12.59.0/26; + /* NOC clients */ + 2a02:ed02:254::/64; + /* Servers */ + 2a02:ed02:1337::/64; + } + + policy-statement redistribute-direct { + from protocol direct; + then { + external { + type 1; + } + accept; + } + } + policy-statement redistribute-static { + from protocol static; + then { + external { + type 1; + } + accept; + } + } +} +firewall { + family inet { + filter v4-mgmt { + term accept-ssh { + from { + source-prefix-list { + v4-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + } + filter v4-security { + term accept-security { + from { + source-address { + 10.30.0.0/16; + } + destination-address { + 10.30.0.0/16; + } + } + then accept; + } + term discard-all { + then { + discard; + } + } + } + filter v4-event { + term accept-test { + from { + source-address { + 10.20.30.0/24; + 10.0.0.0/8; + } + } + then { + count accept-test; + accept; + } + } + term accept-event { + from { + source-address { + 10.20.0.0/16; + } + } + then { + count accept-event; + accept; + } + } + term accept-noc { + from { + source-address { + 185.12.59.0/26; + 185.12.59.64/27; + } + } + then { + count accept-noc; + accept; + } + } + term reject-tg { + from { + source-address { + 185.12.59.0/24; + 151.216.128.0/17; + } + } + then { + count reject-tg; + discard; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + } + } + family inet6 { + filter v6-mgmt { + term accept-ssh { + from { + source-prefix-list { + v6-mgmt; + } + destination-port 22; + } + then { + count accept-ssh; + accept; + } + } + term reject-ssh { + from { + destination-port 22; + } + then { + count reject-ssh; + reject; + } + } + term accept-all { + then { + count accept-all; + accept; + } + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + } + } +} +virtual-chassis { + preprovisioned; + no-split-detection; + member 0 { + role line-card; + serial-number <removed>; + location "Rack 2"; + } + member 1 { + role line-card; + serial-number <removed>; + location "Rack 3"; + } + member 2 { + role routing-engine; + serial-number <removed>; + location "Rack 2"; + } + member 3 { + role routing-engine; + serial-number <removed>; + location "Rack 3"; + } +} +vlans { + default { + vlan-id 1; + l3-interface irb.0; + } + deltakerrack_clients { + vlan-id 243; + l3-interface irb.243; + } + fugleberget_clients { + vlan-id 227; + l3-interface irb.227; + } + motellet_clients { + vlan-id 241; + l3-interface irb.241; + } + noc_clients { + vlan-id 254; + l3-interface irb.254; + } + noc_event { + vlan-id 2500; + l3-interface irb.2500; + } + noc_mgmt { + vlan-id 1830; + l3-interface irb.1830; + } + noc_presse { + vlan-id 226; + l3-interface irb.226; + } + noc_security { + vlan-id 3000; + l3-interface irb.3000; + } + noc_servers { + vlan-id 1059; + l3-interface irb.1059; + } + sponsorer_clients { + vlan-id 233; + l3-interface irb.233; + } + wlan_clients { + vlan-id 192; + l3-interface irb.192; + } + wlc_mgmt { + vlan-id 1281; + l3-interface irb.1281; + } +} |