## Last commit: 2015-04-04 00:31:37 CEST by technet version 14.1X53-D16.2; system { host-name rs1.noc; auto-snapshot; time-zone Europe/Oslo; root-authentication { } name-server { 8.8.8.8; } login { user technet { uid 2003; class super-user; authentication { } } user tg { uid 2000; class super-user; authentication { } } } services { ssh; } syslog { user * { any emergency; } host 185.12.59.18 { any info; authorization info; port 515; } file messages { any notice; authorization info; } file interactive-commands { interactive-commands any; } } commit synchronize; processes { dhcp-service { traceoptions { file dhcp_logfile size 10m; level all; flag all; } } } ntp { boot-server 129.240.2.6; server 129.240.2.6; } } chassis { redundancy { graceful-switchover; } aggregated-devices { ethernet { device-count 32; } } alarm { management-ethernet { link-down ignore; } } } interfaces { interface-range sflow { member-range ge-0/0/0 to ge-0/0/23; member-range et-0/1/0 to et-0/1/1; member-range xe-0/2/0 to xe-0/2/3; member-range ge-1/0/0 to ge-1/0/23; member-range et-1/1/0 to et-1/1/1; member-range xe-1/2/0 to xe-1/2/3; member-range xe-2/0/0 to xe-2/0/47; member-range et-2/0/48 to et-2/0/53; member-range xe-3/0/0 to xe-3/0/47; member-range et-3/0/48 to et-3/0/53; } interface-range all-ports { member-range ge-0/0/0 to ge-0/0/23; member-range xe-0/2/0 to xe-0/2/3; member-range ge-1/0/0 to ge-1/0/23; member-range xe-1/2/0 to xe-1/2/3; member-range xe-2/0/0 to xe-2/0/47; member-range et-2/0/48 to et-2/0/53; member-range xe-3/0/0 to xe-3/0/47; member-range et-3/0/48 to et-3/0/53; description "-- Not in use --"; } ge-0/0/0 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/1 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/2 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/3 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/4 { description "sw3.noc fugleberget"; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ fugleberget_clients noc_mgmt noc_security ]; } } } } ge-0/0/5 { description "sw4.noc fugleberget"; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ fugleberget_clients noc_mgmt ]; } } } } ge-0/0/6 { description "sw7.noc presse"; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ noc_mgmt noc_presse ]; } } } } ge-0/0/7 { description "Link til motellet"; unit 0 { family ethernet-switching { interface-mode access; vlan { members motellet_clients; } } } } ge-0/0/8 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/9 { unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ sponsorer_clients noc_mgmt ]; } } } } ge-0/0/10 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/11 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/12 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/13 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/14 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/15 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/16 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/17 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/18 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/19 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/20 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/21 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/22 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-0/0/23 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } xe-0/2/0 { description wlc1.noc; native-vlan-id 1281; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ wlan_clients noc_clients wlc_mgmt ]; } } } } xe-0/2/1 { description wlc3.noc; native-vlan-id 1281; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ wlan_clients noc_clients wlc_mgmt ]; } } } } xe-0/2/2 { description sw1.deltakerrack; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ deltakerrack_clients noc_mgmt ]; } } } } ge-1/0/0 { description "Event:Game server"; unit 0 { family inet { address 151.216.242.1/24; } family inet6 { address 2a02:ed02:242::1/64; } } } ge-1/0/1 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/2 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/3 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/4 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/5 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/6 { description "3d.tg15.gathering.o;5Drg (event lagring)"; unit 0 { family ethernet-switching { vlan { members noc_event; } } } } ge-1/0/7 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/8 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/9 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/10 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/11 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/12 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/13 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/14 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/15 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/16 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/17 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/18 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/19 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/20 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/21 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/22 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } ge-1/0/23 { unit 0 { family ethernet-switching { vlan { members noc_servers; } } } } xe-1/2/0 { description wlc2.noc; native-vlan-id 1281; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ wlan_clients noc_clients wlc_mgmt ]; } } } } xe-1/2/1 { description wlc4.noc; native-vlan-id 1281; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ wlan_clients noc_clients wlc_mgmt ]; } } } } xe-2/0/0 { description "sw2.noc xe-0/1/0"; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ noc_clients noc_mgmt ]; } } } } xe-2/0/1 { description wlc1.noc; native-vlan-id 1281; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ wlan_clients noc_clients wlc_mgmt ]; } } } } xe-2/0/2 { description wlc3.noc; native-vlan-id 1281; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ wlan_clients noc_clients wlc_mgmt ]; } } } } xe-2/0/3 { description "rs1.north xe-0/1/1"; unit 0 { family inet { address 151.216.128.19/31; } family inet6 { address 2a02:ed02:fffe::19/127; } } } xe-2/0/40 { description "Jocke maa settes desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-2/0/41 { description "Jocke maa settes desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-2/0/42 { description "Tech:Net ESXI"; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ noc_servers noc_event ]; } } } } xe-2/0/43 { description "Jocke maa settes desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-2/0/44 { description "Jocke maa settes desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-2/0/45 { description "seamus (videoreflektor 1)"; ether-options { 802.3ad ae2; } } xe-2/0/46 { description "seamus (videoreflektor 1)"; ether-options { 802.3ad ae2; } } xe-2/0/47 { description "Jocke maa settes desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } et-2/0/48 { description "rs1.core et-0/0/52"; ether-options { 802.3ad ae0; } } et-2/0/49 { description "rs1.tele et-0/1/1"; ether-options { 802.3ad ae1; } } xe-3/0/0 { description "sw1.noc xe-0/1/0"; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ noc_clients noc_mgmt ]; } } } } xe-3/0/1 { description wlc2.noc; native-vlan-id 1281; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ wlan_clients noc_clients wlc_mgmt ]; } } } } xe-3/0/2 { description wlc4.noc; native-vlan-id 1281; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ wlan_clients noc_clients wlc_mgmt ]; } } } } xe-3/0/3 { description "Ny sw2.noc xe-0/1/0"; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ noc_clients noc_mgmt ]; } } } } xe-3/0/40 { description "Jocke maa sette desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-3/0/41 { description "Jocke maa sette desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-3/0/42 { description "Jocke maa sette desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-3/0/43 { description "Jocke maa sette desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-3/0/44 { description "maggie (videoreflektor 2)"; ether-options { 802.3ad ae3; } } xe-3/0/45 { description "Jocke maa sette desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-3/0/46 { description "Jocke maa sette desc"; unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } xe-3/0/47 { description "maggie (videoreflektor 2)"; ether-options { 802.3ad ae3; } } et-3/0/48 { description "rs1.core et-1/0/52"; ether-options { 802.3ad ae0; } } et-3/0/49 { description "rs1.tele et-1/1/1"; ether-options { 802.3ad ae1; } } ae0 { description "rs1.core ae2"; aggregated-ether-options { lacp { active; } } unit 0 { family inet { address 151.216.128.5/31; } family inet6 { address 2a02:ed02:fffe::5/127; } } } ae1 { description "rs1.tele ae1"; aggregated-ether-options { lacp { active; } } unit 0 { family inet { address 151.216.128.3/31; } family inet6 { address 2a02:ed02:fffe::3/127; } } } ae2 { description "seamus (videoreflektor 1) ae2"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } ae3 { description "maggie (videoreflektor 2) ae3"; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { interface-mode access; vlan { members noc_servers; } } } } irb { unit 0; unit 192 { description wlan_clients; family inet { address 151.216.192.1/19; } family inet6 { address 2a02:ed02:192::1/64; } } unit 226 { description presse_clients; family inet { address 151.216.226.1/24; } family inet6 { address 2a02:ed02:226::1/64; } } unit 227 { description fugleberget_clients; family inet { address 151.216.227.1/24; } family inet6 { address 2a02:ed02:227::1/64; } } unit 233 { description "SponsorVest Clients"; family inet { address 151.216.233.1/24; } family inet6 { address 2a02:ed02:233::1/64; } } unit 241 { description motellet_clients; family inet { address 151.216.241.1/24; } family inet6 { address 2a02:ed02:241::1/64; } } unit 243 { family inet { address 151.216.243.1/24; } family inet6 { address 2a02:ed02:243::1/64; } } unit 254 { description "NOC Clients"; family inet { address 151.216.254.1/24; } family inet6 { address 2a02:ed02:254::1/64; } } unit 1059 { description noc_servers; family inet { address 185.12.59.1/26; } family inet6 { address 2a02:ed02:1337::1/64; } } unit 1281 { description wlc_mgmt; family inet { address 151.216.128.129/28; } } unit 1830 { description noc_mgmt; family inet { address 151.216.183.1/27; } family inet6 { address 2a02:ed02:1830::1/64; } } unit 2500 { description "event spesialnett"; family inet { filter { output v4-event; } address 10.20.10.1/24; } } unit 3000 { description "Security spesialnett"; family inet { filter { input v4-security; output v4-security; } address 10.30.10.1/24; } } } lo0 { unit 0 { family inet { filter { input v4-mgmt; } address 151.216.255.11/32; } family inet6 { filter { input v6-mgmt; } address 2a02:ed02:ffff::11/128; } } } vlan { unit 1830 { family inet { filter { input v4-mgmt; } } family inet6 { filter { input v6-mgmt; } } } } vme { unit 0; } } snmp { community { client-list-name mgmt; } } forwarding-options { storm-control-profiles default { all; } dhcp-relay { dhcpv6 { group all { active-server-group v6-dhcp; interface irb.192; interface irb.226; interface irb.227; interface irb.233; interface irb.241; interface irb.243; interface irb.254; interface irb.1059; } server-group { v6-dhcp { 2a02:ed02:1ee7::66; } } } server-group { v4-dhcp { 185.12.59.66; 185.12.59.2; } } group all { active-server-group v4-dhcp; overrides { trust-option-82; } interface irb.192; interface irb.226; interface irb.227; interface irb.233; interface irb.241; interface irb.243; interface irb.254; interface irb.1059; } } } routing-options { nonstop-routing; router-id 151.216.255.11; } protocols { router-advertisement { interface irb.254 { min-advertisement-interval 15; managed-configuration; } interface irb.192 { prefix 2a02:ed02:192::/64; } interface irb.227 { managed-configuration; } interface irb.1059 { managed-configuration; } } ospf { export [ redistribute-direct redistribute-static ]; reference-bandwidth 1000g; area 0.0.0.0 { interface ae0.0; interface ae1.0; interface xe-2/0/3.0; } } ospf3 { export [ redistribute-direct redistribute-static ]; reference-bandwidth 1000g; area 0.0.0.0 { interface ae0.0; interface ae1.0; interface xe-2/0/3.0; } } pim { rp { local { family inet { address 151.216.255.11; } family inet6 { address 2a02:ed02:ffff::11; } } } interface ae1.0 { family inet; family inet6; } interface ae0.0 { family inet; family inet6; } } lldp { interface all; } lldp-med { interface all; } sflow { agent-id 151.216.255.11; polling-interval 3600; sample-rate { ingress 10000; egress 10000; } source-ip 151.216.255.11; collector ; interfaces sflow; } layer2-control { nonstop-bridging; } } policy-options { prefix-list v4-mgmt { /* NOC clients */ 151.216.254.0/24; /* Servers */ 185.12.59.0/26; } prefix-list v6-mgmt { /* NOC clients */ 2a02:ed02:254::/64; /* Servers */ 2a02:ed02:1337::/64; } prefix-list mgmt { /* NOC clients */ 151.216.254.0/24; /* Servers */ 185.12.59.0/26; /* NOC clients */ 2a02:ed02:254::/64; /* Servers */ 2a02:ed02:1337::/64; } policy-statement redistribute-direct { from protocol direct; then { external { type 1; } accept; } } policy-statement redistribute-static { from protocol static; then { external { type 1; } accept; } } } firewall { family inet { filter v4-mgmt { term accept-ssh { from { source-prefix-list { v4-mgmt; } destination-port 22; } then { count accept-ssh; accept; } } term reject-ssh { from { destination-port 22; } then { count reject-ssh; reject; } } term accept-all { then { count accept-all; accept; } } term discard-ssh { from { destination-port 22; } then { discard; } } } filter v4-security { term accept-security { from { source-address { 10.30.0.0/16; } destination-address { 10.30.0.0/16; } } then accept; } term discard-all { then { discard; } } } filter v4-event { term accept-test { from { source-address { 10.20.30.0/24; 10.0.0.0/8; } } then { count accept-test; accept; } } term accept-event { from { source-address { 10.20.0.0/16; } } then { count accept-event; accept; } } term accept-noc { from { source-address { 185.12.59.0/26; 185.12.59.64/27; } } then { count accept-noc; accept; } } term reject-tg { from { source-address { 185.12.59.0/24; 151.216.128.0/17; } } then { count reject-tg; discard; } } term accept-all { then { count accept-all; accept; } } } } family inet6 { filter v6-mgmt { term accept-ssh { from { source-prefix-list { v6-mgmt; } destination-port 22; } then { count accept-ssh; accept; } } term reject-ssh { from { destination-port 22; } then { count reject-ssh; reject; } } term accept-all { then { count accept-all; accept; } } term discard-ssh { from { destination-port 22; } then discard; } } } } virtual-chassis { preprovisioned; no-split-detection; member 0 { role line-card; serial-number ; location "Rack 2"; } member 1 { role line-card; serial-number ; location "Rack 3"; } member 2 { role routing-engine; serial-number ; location "Rack 2"; } member 3 { role routing-engine; serial-number ; location "Rack 3"; } } vlans { default { vlan-id 1; l3-interface irb.0; } deltakerrack_clients { vlan-id 243; l3-interface irb.243; } fugleberget_clients { vlan-id 227; l3-interface irb.227; } motellet_clients { vlan-id 241; l3-interface irb.241; } noc_clients { vlan-id 254; l3-interface irb.254; } noc_event { vlan-id 2500; l3-interface irb.2500; } noc_mgmt { vlan-id 1830; l3-interface irb.1830; } noc_presse { vlan-id 226; l3-interface irb.226; } noc_security { vlan-id 3000; l3-interface irb.3000; } noc_servers { vlan-id 1059; l3-interface irb.1059; } sponsorer_clients { vlan-id 233; l3-interface irb.233; } wlan_clients { vlan-id 192; l3-interface irb.192; } wlc_mgmt { vlan-id 1281; l3-interface irb.1281; } }