## Last commit: 2015-04-02 19:44:47 CEST by technet version 14.1X53-D15.2; system { host-name rs1.distro2; auto-snapshot; time-zone Europe/Oslo; authentication-order [ tacplus password ]; root-authentication { } name-server { 2a02:ed02:1ee7::66; 2a02:ed02:1337::2; } login { user technet { uid 2000; class super-user; authentication { } } } services { ssh; } syslog { user * { any emergency; } host 185.12.59.18 { any info; authorization info; port 515; } file messages { any notice; authorization info; } file interactive-commands { interactive-commands any; } } commit synchronize; ntp { server 2001:700:100:2::6; } } chassis { aggregated-devices { ethernet { device-count 32; } } alarm { management-ethernet { link-down ignore; } } } interfaces { interface-range aps { member-range ge-3/0/0 to ge-3/0/47; description Access-point; unit 0 { family ethernet-switching { vlan { members aps; } } } } interface-range sflow { member-range ge-0/0/0 to ge-0/0/47; member-range xe-0/1/0 to xe-0/1/3; member-range ge-1/0/0 to ge-1/0/47; member-range xe-1/1/0 to xe-1/1/3; member-range ge-2/0/0 to ge-2/0/47; member-range xe-2/1/0 to xe-2/1/3; member-range ge-3/0/0 to ge-3/0/47; member-range xe-3/1/0 to xe-3/1/3; } ge-0/0/0 { description "e17-3 access / ae0"; ether-options { 802.3ad ae0; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/1 { description "e17-4 access / ae1"; ether-options { 802.3ad ae1; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/2 { description "e19-3 access / ae2"; ether-options { 802.3ad ae2; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/3 { description "e19-4 access / ae3"; ether-options { 802.3ad ae3; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/4 { description "e21-3 access / ae4"; ether-options { 802.3ad ae4; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/5 { description "e21-4 access / ae5"; ether-options { 802.3ad ae5; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/6 { description "e23-3 access / ae6"; ether-options { 802.3ad ae6; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/7 { description "e23-4 access / ae7"; ether-options { 802.3ad ae7; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/8 { description "e25-3 access / ae8"; ether-options { 802.3ad ae8; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/9 { description "e25-4 access / ae9"; ether-options { 802.3ad ae9; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/10 { description "e27-3 access / ae10"; inactive: ether-options { 802.3ad ae10; } unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/11 { description "e27-4 access / ae11"; ether-options { 802.3ad ae11; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } xe-0/1/0 { description "rs1.core xe-1/0/2"; ether-options { 802.3ad ae31; } } ge-1/0/0 { description e17-3; ether-options { 802.3ad ae0; } } ge-1/0/1 { description e17-4; ether-options { 802.3ad ae1; } } ge-1/0/2 { description e19-3; ether-options { 802.3ad ae2; } } ge-1/0/3 { description e19-4; ether-options { 802.3ad ae3; } } ge-1/0/4 { description e21-3; ether-options { 802.3ad ae4; } } ge-1/0/5 { description e21-4; ether-options { 802.3ad ae5; } } ge-1/0/6 { description e23-3; ether-options { 802.3ad ae6; } } ge-1/0/7 { description e23-4; ether-options { 802.3ad ae7; } } ge-1/0/8 { description e25-3; ether-options { 802.3ad ae8; } } ge-1/0/9 { description e25-4; ether-options { 802.3ad ae9; } } ge-1/0/10 { description e27-3; ether-options { 802.3ad ae10; } } ge-1/0/11 { description e27-4; ether-options { 802.3ad ae11; } } ge-2/0/0 { description e17-3; ether-options { 802.3ad ae0; } } ge-2/0/1 { description e17-4; ether-options { 802.3ad ae1; } } ge-2/0/2 { description e19-3; ether-options { 802.3ad ae2; } } ge-2/0/3 { description e19-4; ether-options { 802.3ad ae3; } } ge-2/0/4 { description e21-3; ether-options { 802.3ad ae4; } } ge-2/0/5 { description e21-4; ether-options { 802.3ad ae5; } } ge-2/0/6 { description e23-3; ether-options { 802.3ad ae6; } } ge-2/0/7 { description e23-4; ether-options { 802.3ad ae7; } } ge-2/0/8 { description e25-3; ether-options { 802.3ad ae8; } } ge-2/0/9 { description e25-4; ether-options { 802.3ad ae9; } } ge-2/0/10 { description e27-3; ether-options { 802.3ad ae10; } } ge-2/0/11 { description e27-4; ether-options { 802.3ad ae11; } } xe-2/1/0 { description "rs1.core xe-0/0/2"; ether-options { 802.3ad ae31; } } xe-3/1/0 { description "rs1.backstage xe-0/1/1"; unit 0 { family inet { address 151.216.128.23/31; } family inet6 { address 2a02:ed02:fffe::23/127; } } } ae0 { description "e17-3 ae0"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e17-3 ]; } } } } ae1 { description "e17-4 ae1"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e17-4 ]; } } } } ae2 { description "e19-3 ae2"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e19-3 ]; } } } } ae3 { description "e19-4 ae3"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e19-4 ]; } } } } ae4 { description "e21-3 ae4"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e21-3 ]; } } } } ae5 { description "e21-4 ae5"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e21-4 ]; } } } } ae6 { description "e23-3 ae6"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e23-3 ]; } } } } ae7 { description "e23-4 ae7"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e23-4 ]; } } } } ae8 { description "e25-3 ae8"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e25-3 ]; } } } } ae9 { description "e25-4 ae9"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e25-4 ]; } } } } ae10 { description "e27-3 ae10"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e27-3 ]; } } } } ae11 { description "e27-4 ae11"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e27-4 ]; } } } } ae31 { description "rs1.core ae5"; aggregated-ether-options { lacp { active; } } unit 0 { family inet { address 151.216.128.41/31; } family inet6 { address 2a02:ed02:fffe::41/127; } } } lo0 { unit 0 { family inet { filter { input v4-mgmt; } address 151.216.255.3/32; } family inet6 { filter { input v6-mgmt; } address 2a02:ed02:ffff::3/128; } } } vlan { unit 666 { family inet { address 151.216.180.129/26; } family inet6 { address 2a02:ed02:180c::1/64; } } unit 667 { family inet { address 151.216.178.129/26; } family inet6 { address 2a02:ed02:178c::1/64; } } unit 1173 { description e17-3; family inet { address 151.216.135.129/26; } family inet6 { address 2a02:ed02:135c::1/64; } } unit 1174 { description e17-4; family inet { address 151.216.135.193/26; } family inet6 { address 2a02:ed02:135d::1/64; } } unit 1193 { description e19-3; family inet { address 151.216.136.129/26; } family inet6 { address 2a02:ed02:136c::1/64; } } unit 1194 { description e19-4; family inet { address 151.216.136.193/26; } family inet6 { address 2a02:ed02:136d::1/64; } } unit 1213 { description e21-3; family inet { address 151.216.137.129/26; } family inet6 { address 2a02:ed02:137c::1/64; } } unit 1214 { description e21-4; family inet { address 151.216.137.193/26; } family inet6 { address 2a02:ed02:137d::1/64; } } unit 1233 { description e23-3; family inet { address 151.216.138.129/26; } family inet6 { address 2a02:ed02:138c::1/64; } } unit 1234 { description e23-4; family inet { address 151.216.138.193/26; } family inet6 { address 2a02:ed02:138d::1/64; } } unit 1253 { description e25-3; family inet { address 151.216.139.129/26; } family inet6 { address 2a02:ed02:139c::1/64; } } unit 1254 { description e25-4; family inet { address 151.216.139.193/26; } family inet6 { address 2a02:ed02:139d::1/64; } } unit 1273 { description e27-3; family inet { address 151.216.140.129/26; } family inet6 { address 2a02:ed02:140c::1/64; } } unit 1274 { description e27-4; family inet { address 151.216.140.193/26; } family inet6 { address 2a02:ed02:140d::1/64; } } } } snmp { view safe_poll { oid 1.3.6.1.2.1.1 include; oid 1.3.6.1.2.1.2 include; oid 1.3.6.1.4.1.2636.3.5.2.1 include; oid 1.3.6.1.4.1.2636.3.1.13.1.5 include; } community { client-list-name mgmt; } } forwarding-options { inactive: helpers { bootp { server 185.12.59.66; interface { vlan.666 { server 185.12.59.11; source-address-giaddr; dhcp-option82 { circuit-id { prefix hostname; } } } vlan.667; vlan.1173; vlan.1174; vlan.1193; vlan.1194; vlan.1213; vlan.1214; vlan.1233; vlan.1234; vlan.1253; vlan.1254; vlan.1273; vlan.1274; } } } dhcp-relay { dhcpv6 { group edge-switches { active-server-group v6-edge-switches; overrides; interface vlan.667; interface vlan.1173; interface vlan.1174; interface vlan.1193; interface vlan.1194; interface vlan.1213; interface vlan.1214; interface vlan.1233; interface vlan.1234; interface vlan.1253; interface vlan.1254; interface vlan.1273; interface vlan.1274; } server-group { v6-edge-switches { 2a02:ed02:1ee7::66; } } } server-group { v4-edge-switches { 185.12.59.2; 185.12.59.66; } v4-autoconfig { 185.12.59.66; } } group edge-switches { active-server-group v4-edge-switches; overrides { trust-option-82; } interface vlan.667; interface vlan.1173; interface vlan.1174; interface vlan.1193; interface vlan.1194; interface vlan.1213; interface vlan.1214; interface vlan.1233; interface vlan.1234; interface vlan.1253; interface vlan.1254; interface vlan.1273; interface vlan.1274; } group autoconfig { active-server-group v4-autoconfig; relay-option-82 { circuit-id { prefix { host-name; } include-irb-and-l2; } } interface vlan.666; } } } event-options { policy ae0down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae0$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/0 unit 0"; "deactivate interfaces ge-0/0/0 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; } } } } policy ae0up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae0$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/0 unit 0"; "activate interfaces ge-0/0/0 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; } } } } policy ae1down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae1$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/1 unit 0"; "deactivate interfaces ge-0/0/1 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; } } } } policy ae1up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae1$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/1 unit 0"; "activate interfaces ge-0/0/1 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae1 came up so added ge-0/0/1 to bundle"; } } } } policy ae2down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae2$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/2 unit 0"; "deactivate interfaces ge-0/0/2 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; } } } } policy ae2up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae2$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/2 unit 0"; "activate interfaces ge-0/0/2 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae2 came up so added ge-0/0/2 to bundle"; } } } } policy ae3down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae3$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/3 unit 0"; "deactivate interfaces ge-0/0/3 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; } } } } policy ae3up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae3$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/3 unit 0"; "activate interfaces ge-0/0/3 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae3 came up so added ge-0/0/3 to bundle"; } } } } policy ae4down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae4$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/4 unit 0"; "deactivate interfaces ge-0/0/4 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; } } } } policy ae4up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae4$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/4 unit 0"; "activate interfaces ge-0/0/4 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae4 came up so added ge-0/0/4 to bundle"; } } } } policy ae5down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae5$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/5 unit 0"; "deactivate interfaces ge-0/0/5 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; } } } } policy ae5up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae5$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/5 unit 0"; "activate interfaces ge-0/0/5 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae5 came up so added ge-0/0/5 to bundle"; } } } } policy ae6down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae6$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/6 unit 0"; "deactivate interfaces ge-0/0/6 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; } } } } policy ae6up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae6$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/6 unit 0"; "activate interfaces ge-0/0/6 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae6 came up so added ge-0/0/6 to bundle"; } } } } policy ae7down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae7$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/7 unit 0"; "deactivate interfaces ge-0/0/7 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; } } } } policy ae7up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae7$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/7 unit 0"; "activate interfaces ge-0/0/7 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae7 came up so added ge-0/0/7 to bundle"; } } } } policy ae8down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae8$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/8 unit 0"; "deactivate interfaces ge-0/0/8 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; } } } } policy ae8up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae8$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/8 unit 0"; "activate interfaces ge-0/0/8 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae8 came up so added ge-0/0/8 to bundle"; } } } } policy ae9down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae9$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/9 unit 0"; "deactivate interfaces ge-0/0/9 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; } } } } policy ae9up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae9$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/9 unit 0"; "activate interfaces ge-0/0/9 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae9 came up so added ge-0/0/9 to bundle"; } } } } policy ae10down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae10$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/10 unit 0"; "deactivate interfaces ge-0/0/10 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; } } } } policy ae10up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae10$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/10 unit 0"; "activate interfaces ge-0/0/10 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae10 came up so added ge-0/0/10 to bundle"; } } } } policy ae11down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae11$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/11 unit 0"; "deactivate interfaces ge-0/0/11 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; } } } } policy ae11up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae11$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/11 unit 0"; "activate interfaces ge-0/0/11 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae11 came up so added ge-0/0/11 to bundle"; } } } } } protocols { igmp { interface vlan.65 { group-policy v4-multicast; } } mld { interface vlan.65 { group-policy v6-multicast; } } router-advertisement { interface vlan.65 { max-advertisement-interval 30; managed-configuration; } interface vlan.1173 { min-advertisement-interval 15; managed-configuration; } interface vlan.1174 { min-advertisement-interval 15; managed-configuration; } interface vlan.1193 { min-advertisement-interval 15; managed-configuration; } interface vlan.1194 { min-advertisement-interval 15; managed-configuration; } interface vlan.1213 { min-advertisement-interval 15; managed-configuration; } interface vlan.1214 { min-advertisement-interval 15; managed-configuration; } interface vlan.1233 { min-advertisement-interval 15; managed-configuration; } interface vlan.1234 { min-advertisement-interval 15; managed-configuration; } interface vlan.1253 { min-advertisement-interval 15; managed-configuration; } interface vlan.1254 { min-advertisement-interval 15; managed-configuration; } interface vlan.1273 { min-advertisement-interval 15; managed-configuration; } interface vlan.1274 { min-advertisement-interval 15; managed-configuration; } } ospf { export [ redistribute-direct redistribute-static ]; reference-bandwidth 1000g; area 0.0.0.0 { interface ae31.0; interface xe-3/1/0.0; } } ospf3 { export [ redistribute-direct redistribute-static ]; reference-bandwidth 1000g; area 0.0.0.0 { interface ae31.0; interface xe-3/1/0.0; } } pim { rp { static { address 2a02:ed02:ffff::11; address 151.216.255.11; } } } sflow { agent-id 151.216.255.3; polling-interval 3600; sample-rate { ingress 10000; egress 10000; } source-ip 151.216.255.3; collector ; interfaces sflow; } lldp { interface all; } lldp-med { interface all; } } policy-options { prefix-list v4-mgmt { /* NOC clients */ 151.216.254.0/24; /* Servers */ 185.12.59.0/26; } prefix-list v6-mgmt { /* NOC clients */ 2a02:ed02:254::/64; /* Servers */ 2a02:ed02:1337::/64; } prefix-list mgmt { /* NOC clients */ 151.216.254.0/24; /* Servers */ 185.12.59.0/26; /* NOC clients */ 2a02:ed02:254::/64; /* Servers */ 2a02:ed02:1337::/64; } policy-statement redistribute-direct { from protocol direct; then { external { type 1; } accept; } } policy-statement redistribute-static { from protocol static; then { external { type 1; } accept; } } policy-statement v4-multicast { term accept-our { from { route-filter 233.139.58.0/24 orlonger; source-address-filter 185.12.59.0/26 orlonger; source-address-filter 151.216.254.0/24 orlonger; } then accept; } term reject-all { then reject; } } policy-statement v6-multicast { term accept-our { from { route-filter ff35:2001:67c:2e44::/120 orlonger; source-address-filter 2a02:ed02:1337::/64 orlonger; source-address-filter 2a02:ed02:252::/64 orlonger; } } term reject-all { then reject; } } } firewall { family inet { filter v4-mgmt { term accept-ssh { from { source-prefix-list { v4-mgmt; } destination-port 22; } then accept; } term discard-ssh { from { destination-port 22; } then { discard; } } term accept-all { then accept; } } } family inet6 { filter v6-mgmt { term accept-ssh { from { source-prefix-list { v6-mgmt; } destination-port 22; } then accept; } term discard-ssh { from { destination-port 22; } then discard; } term accept-all { then accept; } } } } virtual-chassis { preprovisioned; member 0 { role routing-engine; serial-number ; } member 1 { role line-card; serial-number ; } member 2 { role routing-engine; serial-number ; } member 3 { role line-card; serial-number ; } } vlans { aps { vlan-id 667; l3-interface vlan.667; } e17-3 { vlan-id 1173; l3-interface vlan.1173; } e17-4 { vlan-id 1174; l3-interface vlan.1174; } e19-3 { vlan-id 1193; l3-interface vlan.1193; } e19-4 { vlan-id 1194; l3-interface vlan.1194; } e21-3 { vlan-id 1213; l3-interface vlan.1213; } e21-4 { vlan-id 1214; l3-interface vlan.1214; } e23-3 { vlan-id 1233; l3-interface vlan.1233; } e23-4 { vlan-id 1234; l3-interface vlan.1234; } e25-3 { vlan-id 1253; l3-interface vlan.1253; } e25-4 { vlan-id 1254; l3-interface vlan.1254; } e27-3 { vlan-id 1273; l3-interface vlan.1273; } e27-4 { vlan-id 1274; l3-interface vlan.1274; } mgmt { vlan-id 666; l3-interface vlan.666; } } poe { interface aps; }