aboutsummaryrefslogtreecommitdiffstats
path: root/examples/tg25/netconf/e21-1.tg25.tg.no.conf
diff options
context:
space:
mode:
Diffstat (limited to 'examples/tg25/netconf/e21-1.tg25.tg.no.conf')
-rw-r--r--examples/tg25/netconf/e21-1.tg25.tg.no.conf888
1 files changed, 888 insertions, 0 deletions
diff --git a/examples/tg25/netconf/e21-1.tg25.tg.no.conf b/examples/tg25/netconf/e21-1.tg25.tg.no.conf
new file mode 100644
index 0000000..c5a8b0d
--- /dev/null
+++ b/examples/tg25/netconf/e21-1.tg25.tg.no.conf
@@ -0,0 +1,888 @@
+system {
+ host-name e21-1;
+ auto-snapshot;
+ domain-name tg25.tg.no;
+ time-zone Europe/Oslo;
+ /* tacacs primary, failbacks to local users */
+ authentication-order tacplus;
+ ports {
+ console log-out-on-disconnect;
+ }
+ root-authentication {
+ encrypted-password "<removed>";
+ }
+ name-server {
+ 1.1.1.1;
+ 8.8.8.8;
+ 2001:4860:4860::8888;
+ 2001:4860:4860::8844;
+ }
+ tacplus-server {
+ <removed> {
+ secret "<removed>";
+ }
+ }
+ login {
+ user admin {
+ uid 2000;
+ class super-user;
+ authentication {
+ encrypted-password "<removed>";
+ }
+ }
+ user tech {
+ uid 2001;
+ class super-user;
+ authentication {
+ encrypted-password "<removed>";
+ }
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ protocol-version v2;
+ client-alive-count-max 2;
+ client-alive-interval 300;
+ connection-limit 50;
+ rate-limit 5;
+ }
+ netconf {
+ ssh {
+ port 830;
+ }
+ }
+ }
+ syslog {
+ user * {
+ any emergency;
+ }
+ host log.tg25.tg.no {
+ any warning;
+ authorization info;
+ daemon warning;
+ user warning;
+ change-log any;
+ interactive-commands any;
+ match "!(.*License.*)";
+ allow-duplicates;
+ facility-override local7;
+ explicit-priority;
+ }
+ /* Oxidized syslog */
+ host <removed> {
+ interactive-commands notice;
+ match UI_COMMIT_COMPLETED;
+ }
+ /* Local logging of syslog messages */
+ file messages {
+ any notice;
+ authorization info;
+ /* Fjerner mye graps i loggene */
+ match "!(.*License.*|.*EX-BCM PIC.*|.*mojito_i2c_read.*|.*qsfp_tk_read_mem_page.*)";
+ }
+ /* Local logging of all user-commands typed in the CLI */
+ file interactive-commands {
+ interactive-commands any;
+ match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED";
+ }
+ }
+ commit synchronize;
+ ntp {
+ server 129.240.2.6;
+ server 129.240.2.42;
+ server 2001:700:100:425::42;
+ server 2001:700:100:2::6;
+ }
+}
+chassis {
+ redundancy {
+ graceful-switchover;
+ }
+ aggregated-devices {
+ ethernet {
+ device-count 32;
+ }
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+snmp {
+ contact "<removed>";
+ location "LEGGETIIID!";
+ community <removed> {
+ authorization read-only;
+ client-list-name mgmt;
+ }
+}
+policy-options {
+ prefix-list mgmt-v4 {
+ }
+ prefix-list mgmt-v6 {
+ }
+ /* Merged separate v4- og v6-lister */
+ prefix-list mgmt {
+ apply-path "policy-options prefix-list <mgmt-v*> <*>";
+ }
+}
+firewall {
+ family inet {
+ filter mgmt-v4 {
+ term accept-ssh {
+ from {
+ source-prefix-list {
+ mgmt-v4;
+ }
+ destination-port 22;
+ }
+ then accept;
+ }
+ term discard-ssh {
+ from {
+ destination-port 22;
+ }
+ then {
+ discard;
+ }
+ }
+ term accept-all {
+ then accept;
+ }
+ }
+ }
+ family inet6 {
+ filter mgmt-v6 {
+ term accept-ssh {
+ from {
+ source-prefix-list {
+ mgmt-v6;
+ }
+ destination-port 22;
+ }
+ then accept;
+ }
+ term discard-ssh {
+ from {
+ destination-port 22;
+ }
+ then discard;
+ }
+ term accept-all {
+ then accept;
+ }
+ }
+ }
+}
+protocols {
+ igmp-snooping {
+ vlan all {
+ immediate-leave;
+ }
+ }
+ mld-snooping {
+ vlan all {
+ immediate-leave;
+ }
+ }
+}
+
+protocols {
+ rstp {
+ bridge-priority 32k;
+ interface edge-ports {
+ edge;
+ no-root-port;
+ }
+
+ }
+ lldp {
+ port-id-subtype interface-name;
+ port-description-type interface-description;
+ interface all;
+ }
+}
+
+
+poe {
+ interface all;
+}
+
+routing-options {
+ rib inet.0 {
+ static {
+ route 0.0.0.0/0 next-hop 185.110.149.1;
+ }
+ }
+ rib inet6.0 {
+ static {
+ route ::/0 next-hop 2a06:5841:f:0::1;
+ }
+ }
+ nonstop-routing;
+}
+
+
+
+
+interfaces {
+ interface-range edge-ports {
+ description "edge-ports";
+ member ge-0/0/0;
+ member ge-0/0/1;
+ member ge-0/0/2;
+ member ge-0/0/3;
+ member ge-0/0/4;
+ member ge-0/0/5;
+ member ge-0/0/6;
+ member ge-0/0/7;
+ member ge-0/0/8;
+ member ge-0/0/9;
+ member ge-0/0/10;
+ member ge-0/0/11;
+ member ge-0/0/12;
+ member ge-0/0/13;
+ member ge-0/0/14;
+ member ge-0/0/15;
+ member ge-0/0/16;
+ member ge-0/0/17;
+ member ge-0/0/18;
+ member ge-0/0/19;
+ member ge-0/0/20;
+ member ge-0/0/21;
+ member ge-0/0/22;
+ member ge-0/0/23;
+ member ge-0/0/24;
+ member ge-0/0/25;
+ member ge-0/0/26;
+ member ge-0/0/27;
+ member ge-0/0/28;
+ member ge-0/0/29;
+ member ge-0/0/30;
+ member ge-0/0/31;
+ member ge-0/0/32;
+ member ge-0/0/33;
+ member ge-0/0/34;
+ member ge-0/0/35;
+ member ge-0/0/36;
+ member ge-0/0/37;
+ member ge-0/0/38;
+ member ge-0/0/39;
+ member ge-0/0/40;
+ member ge-0/0/41;
+ member ge-0/0/42;
+ member ge-0/0/43;
+ }
+ ge-0/0/0 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/1 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/2 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/3 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/4 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/5 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/6 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/7 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/8 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/9 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/10 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/11 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/12 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/13 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/14 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/15 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/16 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/17 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/18 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/19 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/20 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/21 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/22 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/23 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/24 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/25 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/26 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/27 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/28 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/29 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/30 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/31 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/32 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/33 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/34 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/35 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/36 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/37 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/38 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/39 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/40 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/41 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/42 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/43 {
+ description "C: Clients";
+ unit 0 {
+ family ethernet-switching {
+ port-mode access;
+ vlan {
+ members e21-1;
+ }
+ }
+ }
+ }
+ ge-0/0/44 {
+ description "G: d2-floor Ethernet21 (ae0)";
+ ether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-0/0/45 {
+ description "G: d2-floor Ethernet22 (ae0)";
+ ether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-0/0/46 {
+ description "G: d2-floor Ethernet69 (ae0)";
+ ether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-0/0/47 {
+ unit 0 {
+ }
+ }
+ ae0 {
+ description "B: d2-floor Po20";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ port-mode trunk;
+ vlan {
+ members [ e21-1 juniper-mgmt ];
+ }
+ native-vlan-id 10;
+ }
+ }
+ }
+ vlan {
+ unit 10 {
+ description "X: Mgmt";
+ family inet {
+ filter {
+ input mgmt-v4;
+ }
+ address 185.110.149.51/25;
+ }
+ family inet6 {
+ filter {
+ input mgmt-v6;
+ }
+ address 2a06:5841:f::33/64;
+ }
+ }
+ }
+}
+
+ethernet-switching-options {
+ secure-access-port {
+ vlan juniper-mgmt {
+ dhcp-option82 {
+ circuit-id {
+ prefix hostname;
+ use-vlan-id;
+ }
+ }
+ }
+ }
+}
+
+ethernet-switching-options {
+ secure-access-port {
+ vlan juniper-mgmt {
+ dhcp-option82 {
+ circuit-id {
+ prefix hostname;
+ use-vlan-id;
+ }
+ }
+ }
+ interface edge-ports {
+ no-dhcp-trusted;
+ }
+ vlan e21-1 {
+ arp-inspection;
+ examine-dhcp;
+ examine-dhcpv6;
+ inactive: neighbor-discovery-inspection;
+ ip-source-guard;
+ ipv6-source-guard;
+ dhcp-option82 {
+ circuit-id {
+ use-vlan-id;
+ }
+ }
+ no-option-37;
+ /* inactive due to DHCP drops on MX platform */
+ inactive: dhcpv6-option18 {
+ use-option-82;
+ }
+ }
+ ipv6-source-guard-sessions {
+ max-number 128;
+ }
+ }
+ port-error-disable {
+ /* 30 minutes in seconds */
+ disable-timeout 1800;
+ }
+ storm-control {
+ action-shutdown;
+ interface edge-ports {
+ bandwidth 20000;
+ multicast;
+ }
+ }
+}
+vlans {
+ e21-1 {
+ vlan-id 248;
+ }
+ juniper-mgmt {
+ vlan-id 10;
+ l3-interface vlan.10;
+ }
+}
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-26 10:26:48 +0000