## Last changed: 2016-03-24 18:22:36 CET version 14.1X53-D15.2; groups { SET_AE_DEFAULTS { interfaces { { aggregated-ether-options { lacp { active; } } } } } SET_OSPF_DEFAULTS { protocols { ospf { reference-bandwidth 1000g; area <*> { interface ; } } ospf3 { reference-bandwidth 1000g; area <*> { interface ; } } } } SET_RA_DEFAULTS { protocols { router-advertisement { interface { max-advertisement-interval 15; managed-configuration; } } } } } system { host-name distro5; auto-snapshot; domain-name infra.gathering.org; time-zone Europe/Oslo; authentication-order tacplus; root-authentication { encrypted-password ""; } name-server { 185.110.149.2; 185.110.148.2; 2a06:5841:149a::2; 2a06:5841:1337::2; } tacplus-server { 134.90.150.164 { secret ""; source-address 185.110.148.105; } } login { user technet { uid 2000; class super-user; authentication { encrypted-password ""; } } } services { ssh { root-login deny; no-tcp-forwarding; client-alive-count-max 2; client-alive-interval 300; connection-limit 5; rate-limit 5; } netconf { ssh { connection-limit 3; rate-limit 3; } } } syslog { inactive: user * { any emergency; } host 185.110.148.17 { any info; authorization info; port 515; } file messages { any notice; authorization info; } file interactive-commands { interactive-commands any; } } archival { configuration { transfer-on-commit; archive-sites { "scp://user@host/some/folder/" password ""; } } } commit synchronize; ntp { server 2001:700:100:2::6; } } chassis { aggregated-devices { ethernet { device-count 32; } } alarm { management-ethernet { link-down ignore; } } auto-image-upgrade; } security { ssh-known-hosts { host 134.90.150.164 { ecdsa-sha2-nistp256-key ; } } } interfaces { apply-groups SET_AE_DEFAULTS; interface-range aps { member-range ge-0/0/36 to ge-0/0/47; member-range ge-1/0/36 to ge-1/0/47; member-range ge-2/0/36 to ge-2/0/47; description "Management/klientnett AP-er"; unit 0 { family ethernet-switching { vlan { members aps_mgmt; } } } } interface-range all-ports { member-range ge-0/0/0 to ge-0/0/47; member-range ge-1/0/0 to ge-1/0/47; member-range ge-2/0/0 to ge-2/0/47; member-range xe-0/1/0 to xe-0/1/3; member-range xe-1/1/0 to xe-1/1/3; member-range xe-2/1/0 to xe-2/1/3; } ge-0/0/0 { description "e41-3 access / ae0"; ether-options { 802.3ad ae0; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/1 { description "e41-4 access / ae1"; ether-options { 802.3ad ae1; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/2 { description "e43-3 access / ae2"; ether-options { 802.3ad ae2; } } ge-0/0/3 { description "e43-4 access / ae3"; ether-options { 802.3ad ae3; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/4 { description "e45-3 access / ae4"; ether-options { 802.3ad ae4; } } ge-0/0/5 { description "e45-4 access / ae5"; ether-options { 802.3ad ae5; } } ge-0/0/6 { description "e47-3 access / ae6"; ether-options { 802.3ad ae6; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/7 { description "e47-4 access / ae7"; ether-options { 802.3ad ae7; } } ge-0/0/8 { description "e49-3 access / ae8"; ether-options { 802.3ad ae8; } } ge-0/0/9 { description "e49-4 access / ae9"; ether-options { 802.3ad ae9; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/10 { description "e51-3 access / ae10"; ether-options { 802.3ad ae10; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/11 { description "e51-4 access / ae11"; ether-options { 802.3ad ae11; } } ge-0/0/12 { description "e53-3 access / ae12"; ether-options { 802.3ad ae12; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/13 { description "e53-4 access / ae13"; ether-options { 802.3ad ae13; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/14 { description "e55-3 access / ae14"; ether-options { 802.3ad ae14; } } ge-0/0/15 { description "e55-4 access / ae15"; ether-options { 802.3ad ae15; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members mgmt; } } } } ge-0/0/16 { description "e57-3 access / ae16"; ether-options { 802.3ad ae16; } } ge-0/0/17 { description "e57-4 access / ae17"; ether-options { 802.3ad ae17; } } xe-0/1/0 { description "Uplink mot coregw"; ether-options { 802.3ad ae31; } } ge-1/0/0 { description "e41-3 ae0"; ether-options { 802.3ad ae0; } } ge-1/0/1 { description "e41-4 ae1"; ether-options { 802.3ad ae1; } } ge-1/0/2 { description "e43-3 ae2"; ether-options { 802.3ad ae2; } } ge-1/0/3 { description "e43-4 ae3"; ether-options { 802.3ad ae3; } } ge-1/0/4 { description "e45-3 ae4"; ether-options { 802.3ad ae4; } } ge-1/0/5 { description "e45-4 ae5"; ether-options { 802.3ad ae5; } } ge-1/0/6 { description "e47-3 ae6"; ether-options { 802.3ad ae6; } } ge-1/0/7 { description "e47-4 ae7"; ether-options { 802.3ad ae7; } } ge-1/0/8 { description "e49-3 ae8"; ether-options { 802.3ad ae8; } } ge-1/0/9 { description "e49-4 ae9"; ether-options { 802.3ad ae9; } } ge-1/0/10 { description "e51-3 ae10"; ether-options { 802.3ad ae10; } } ge-1/0/11 { description "e51-4 ae11"; ether-options { 802.3ad ae11; } } ge-1/0/12 { description "e53-3 ae12"; ether-options { 802.3ad ae12; } } ge-1/0/13 { description "e53-4 ae13"; ether-options { 802.3ad ae13; } } ge-1/0/14 { description "e55-3 ae14"; ether-options { 802.3ad ae14; } } ge-1/0/15 { description "e55-4 ae15"; ether-options { 802.3ad ae15; } } ge-1/0/16 { description "e57-3 ae16"; ether-options { 802.3ad ae16; } } ge-1/0/17 { description "e57-4 ae17"; ether-options { 802.3ad ae17; } } xe-1/1/0 { description "Uplink mot coregw"; ether-options { 802.3ad ae31; } } ge-2/0/0 { description "e41-3 ae0"; ether-options { 802.3ad ae0; } } ge-2/0/1 { description "e41-4 ae1"; ether-options { 802.3ad ae1; } } ge-2/0/2 { description "e43-3 ae2"; ether-options { 802.3ad ae2; } } ge-2/0/3 { description "e43-4 ae3"; ether-options { 802.3ad ae3; } } ge-2/0/4 { description "e45-3 ae4"; ether-options { 802.3ad ae4; } } ge-2/0/5 { description "e45-4 ae5"; ether-options { 802.3ad ae5; } } ge-2/0/6 { description "e47-3 ae6"; ether-options { 802.3ad ae6; } } ge-2/0/7 { description "e47-4 ae7"; ether-options { 802.3ad ae7; } } ge-2/0/8 { description "e49-3 ae8"; ether-options { 802.3ad ae8; } } ge-2/0/9 { description "e49-4 ae9"; ether-options { 802.3ad ae9; } } ge-2/0/10 { description "e51-3 ae10"; ether-options { 802.3ad ae10; } } ge-2/0/11 { description "e51-4 ae11"; ether-options { 802.3ad ae11; } } ge-2/0/12 { description "e53-3 ae12"; ether-options { 802.3ad ae12; } } ge-2/0/13 { description "e53-4 ae13"; ether-options { 802.3ad ae13; } } ge-2/0/14 { description "e55-3 ae14"; ether-options { 802.3ad ae14; } } ge-2/0/15 { description "e55-4 ae15"; ether-options { 802.3ad ae15; } } ge-2/0/16 { description "e57-3 ae16"; ether-options { 802.3ad ae16; } } ge-2/0/17 { description "e57-4 ae17"; ether-options { 802.3ad ae17; } } ae0 { description "e41-3 ae0"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e41-3-static mgmt ]; } } } } ae1 { description "e41-4 ae1"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e41-4-static mgmt ]; } } } } ae2 { description "e43-3 ae2"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ mgmt e43-3 ]; } } } } ae3 { description "e43-4 ae3"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e43-4-static mgmt ]; } } } } ae4 { description "e45-3 ae4"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e45-3-static mgmt ]; } } } } ae5 { description "e45-4 ae5"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e45-4-static mgmt ]; } } } } ae6 { description "e47-3 ae6"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e47-3-static mgmt ]; } } } } ae7 { description "e47-4 ae7"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e47-4-static mgmt ]; } } } } ae8 { description "e49-3 ae8"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e49-3-static mgmt ]; } } } } ae9 { description "e49-4 ae9"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e49-4-static mgmt ]; } } } } ae10 { description "e51-3 ae10"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e51-3-static mgmt ]; } } } } ae11 { description "e51-4 ae11"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e51-4-static mgmt ]; } } } } ae12 { description "e53-3 ae12"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e53-3-static mgmt ]; } } } } ae13 { description "e53-4 ae13"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e53-4-static mgmt ]; } } } } ae14 { description "e55-3 ae14"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e55-3-static mgmt ]; } } } } ae15 { description "e55-4 ae15"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e55-4-static mgmt ]; } } } } ae16 { description "e57-3 ae16"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e57-3-static mgmt ]; } } } } ae17 { description "e57-4 ae17"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ e57-4-static mgmt ]; } } } } ae31 { description "Uplink mot coregw"; unit 0 { family inet { address 185.110.148.163/31; } family inet6; } } lo0 { unit 0 { family inet { filter { input protect-mgmt-v4; } address 185.110.148.105/32; } family inet6 { filter { input protect-mgmt-v6; } address 2a06:5841:148b::105/128; } } } vlan { unit 666 { description "mgmt til aksesswitcher/fapfapfap"; family inet { address 88.92.55.65/26; } } unit 777 { description "mgmt til AP-ene"; family inet { address 88.92.52.65/26; } } unit 1433 { family inet { address 88.92.16.65/26; } family inet6 { address 2a06:5840:16b::1/64; } } unit 3000 { description "e41-3 static routing linknet"; family inet { address 88.92.82.0/31; } } unit 3001 { description "e41-4 static routing linknet"; family inet { address 88.92.82.2/31; } } unit 3002 { description "e43-3 static routing linknet"; family inet { address 88.92.82.4/31; } } unit 3003 { description "e43-4 static routing linknet"; family inet { address 88.92.82.6/31; } } unit 3004 { description "e45-3 static routing linknet"; family inet { address 88.92.82.8/31; } } unit 3005 { description "e45-4 static routing linknet"; family inet { address 88.92.82.10/31; } } unit 3006 { description "e47-3 static routing linknet"; family inet { address 88.92.82.12/31; } } unit 3007 { description "e47-4 static routing linknet"; family inet { address 88.92.82.14/31; } } unit 3008 { description "e49-3 static routing linknet"; family inet { address 88.92.82.16/31; } } unit 3009 { description "e49-4 static routing linknet"; family inet { address 88.92.82.18/31; } } unit 3010 { description "e51-3 static routing linknet"; family inet { address 88.92.82.20/31; } } unit 3011 { description "e51-4 static routing linknet"; family inet { address 88.92.82.22/31; } } unit 3012 { description "e53-3 static routing linknet"; family inet { address 88.92.82.24/31; } } unit 3013 { description "e53-4 static routing linknet"; family inet { address 88.92.82.26/31; } } unit 3014 { description "e55-3 static routing linknet"; family inet { address 88.92.82.28/31; } } unit 3015 { description "e55-4 static routing linknet"; family inet { address 88.92.82.30/31; } } unit 3016 { description "e57-3 static routing linknet"; family inet { address 88.92.82.32/31; } } unit 3017 { description "e57-4 static routing linknet"; family inet { address 88.92.82.34/31; } } } } snmp { community { authorization read-only; client-list-name mgmt; } community { authorization read-only; client-list-name mgmt-nms; } } forwarding-options { inactive: helpers { bootp { dhcp-option82 { circuit-id { prefix hostname; } } server 185.110.148.22; interface { vlan.666; } } } dhcp-relay { inactive: dhcpv6 { group edge-switches { active-server-group v6-edge-switches; overrides; interface vlan.777; interface vlan.1413; interface vlan.1414; interface vlan.1433; interface vlan.1434; interface vlan.1453; interface vlan.1454; interface vlan.1473; interface vlan.1474; interface vlan.1493; interface vlan.1494; interface vlan.1513; interface vlan.1514; interface vlan.1533; interface vlan.1534; interface vlan.1553; interface vlan.1554; interface vlan.1573; interface vlan.1574; } server-group { v6-edge-switches { 2a06:5841:149a::2; } } } server-group { v4-edge-switches { 185.110.149.2; 185.110.148.2; } fapfapfap-group { 185.110.148.22; } } group edge-switches { active-server-group v4-edge-switches; overrides { trust-option-82; } interface vlan.777; interface vlan.1413; interface vlan.1414; interface vlan.1433; interface vlan.1434; interface vlan.1453; interface vlan.1454; interface vlan.1473; interface vlan.1474; interface vlan.1493; interface vlan.1494; interface vlan.1513; interface vlan.1514; interface vlan.1533; interface vlan.1534; interface vlan.1553; interface vlan.1554; interface vlan.1573; interface vlan.1574; } group fapfapfap { active-server-group fapfapfap-group; relay-option-82 { circuit-id { prefix { host-name; } include-irb-and-l2; } } interface vlan.666; } } } event-options { policy ae0down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae0$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/0 unit 0"; "deactivate interfaces ge-0/0/0 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 went down so removed ge-0/0/0 from bundle"; } } } } policy ae0up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae0$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/0 unit 0"; "activate interfaces ge-0/0/0 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/0 to bundle"; } } } } policy ae1down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae1$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/1 unit 0"; "deactivate interfaces ge-0/0/1 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae1 went down so removed ge-0/0/1 from bundle"; } } } } policy ae1up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae1$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/1 unit 0"; "activate interfaces ge-0/0/1 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/1 to bundle"; } } } } policy ae2down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae2$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/2 unit 0"; "deactivate interfaces ge-0/0/2 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae2 went down so removed ge-0/0/2 from bundle"; } } } } policy ae2up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae2$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/2 unit 0"; "activate interfaces ge-0/0/2 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/2 to bundle"; } } } } policy ae3down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae3$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/3 unit 0"; "deactivate interfaces ge-0/0/3 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae3 went down so removed ge-0/0/3 from bundle"; } } } } policy ae3up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae3$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/3 unit 0"; "activate interfaces ge-0/0/3 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/3 to bundle"; } } } } policy ae4down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae4$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/4 unit 0"; "deactivate interfaces ge-0/0/4 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae4 went down so removed ge-0/0/4 from bundle"; } } } } policy ae4up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae4$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/4 unit 0"; "activate interfaces ge-0/0/4 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/4 to bundle"; } } } } policy ae5down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae5$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/5 unit 0"; "deactivate interfaces ge-0/0/5 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae5 went down so removed ge-0/0/5 from bundle"; } } } } policy ae5up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae5$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/5 unit 0"; "activate interfaces ge-0/0/5 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/5 to bundle"; } } } } policy ae6down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae6$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/6 unit 0"; "deactivate interfaces ge-0/0/6 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae6 went down so removed ge-0/0/6 from bundle"; } } } } policy ae6up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae6$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/6 unit 0"; "activate interfaces ge-0/0/6 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/6 to bundle"; } } } } policy ae7down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae7$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/7 unit 0"; "deactivate interfaces ge-0/0/7 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae7 went down so removed ge-0/0/7 from bundle"; } } } } policy ae7up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae7$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/7 unit 0"; "activate interfaces ge-0/0/7 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/7 to bundle"; } } } } policy ae8down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae8$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/8 unit 0"; "deactivate interfaces ge-0/0/8 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae8 went down so removed ge-0/0/8 from bundle"; } } } } policy ae8up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae8$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/8 unit 0"; "activate interfaces ge-0/0/8 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/8 to bundle"; } } } } policy ae9down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae9$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/9 unit 0"; "deactivate interfaces ge-0/0/9 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae9 went down so removed ge-0/0/9 from bundle"; } } } } policy ae9up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae9$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/9 unit 0"; "activate interfaces ge-0/0/9 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/9 to bundle"; } } } } policy ae10down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae10$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/10 unit 0"; "deactivate interfaces ge-0/0/10 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae10 went down so removed ge-0/0/10 from bundle"; } } } } policy ae10up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae10$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/10 unit 0"; "activate interfaces ge-0/0/10 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/10 to bundle"; } } } } policy ae11down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae11$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/11 unit 0"; "deactivate interfaces ge-0/0/11 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae11 went down so removed ge-0/0/11 from bundle"; } } } } policy ae11up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae11$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/11 unit 0"; "activate interfaces ge-0/0/11 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/11 to bundle"; } } } } policy ae12down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae12$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/12 unit 0"; "deactivate interfaces ge-0/0/12 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae12 went down so removed ge-0/0/12 from bundle"; } } } } policy ae12up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae12$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/12 unit 0"; "activate interfaces ge-0/0/12 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/12 to bundle"; } } } } policy ae13down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae13$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/13 unit 0"; "deactivate interfaces ge-0/0/13 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae13 went down so removed ge-0/0/13 from bundle"; } } } } policy ae13up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae13$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/13 unit 0"; "activate interfaces ge-0/0/13 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/13 to bundle"; } } } } policy ae14down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae14$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/14 unit 0"; "deactivate interfaces ge-0/0/14 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae14 went down so removed ge-0/0/14 from bundle"; } } } } policy ae14up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae14$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/14 unit 0"; "activate interfaces ge-0/0/14 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/14 to bundle"; } } } } policy ae15down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae15$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/15 unit 0"; "deactivate interfaces ge-0/0/15 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae15 went down so removed ge-0/0/15 from bundle"; } } } } policy ae15up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae15$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/15 unit 0"; "activate interfaces ge-0/0/15 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/15 to bundle"; } } } } policy ae16down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae16$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/16 unit 0"; "deactivate interfaces ge-0/0/16 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae16 went down so removed ge-0/0/16 from bundle"; } } } } policy ae16up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae16$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/16 unit 0"; "activate interfaces ge-0/0/16 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/16 to bundle"; } } } } policy ae17down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae17$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/17 unit 0"; "deactivate interfaces ge-0/0/17 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae17 went down so removed ge-0/0/17 from bundle"; } } } } policy ae17up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae17$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/17 unit 0"; "activate interfaces ge-0/0/17 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae0 came up so added ge-0/0/17 to bundle"; } } } } } routing-options { rib inet.0 { static { route 88.92.15.64/26 next-hop 88.92.82.1; route 88.92.15.128/26 next-hop 88.92.82.3; route 88.92.16.64/26 next-hop 88.92.82.5; route 88.92.16.128/26 next-hop 88.92.82.7; route 88.92.16.0/26 next-hop 88.92.82.3; route 88.92.17.64/26 next-hop 88.92.82.9; route 88.92.17.128/26 next-hop 88.92.82.11; route 88.92.18.64/26 next-hop 88.92.82.13; route 88.92.18.128/26 next-hop 88.92.82.15; route 88.92.19.64/26 next-hop 88.92.82.17; route 88.92.19.128/26 next-hop 88.92.82.19; route 88.92.20.64/26 next-hop 88.92.82.21; route 88.92.20.128/26 next-hop 88.92.82.23; route 88.92.21.64/26 next-hop 88.92.82.25; route 88.92.21.128/26 next-hop 88.92.82.27; route 88.92.22.64/26 next-hop 88.92.82.29; route 88.92.22.128/26 next-hop 88.92.82.31; route 88.92.23.64/26 next-hop 88.92.82.33; route 88.92.23.128/26 next-hop 88.92.82.35; } } } protocols { apply-groups [ SET_OSPF_DEFAULTS SET_RA_DEFAULTS ]; mld; inactive: router-advertisement { interface vlan.1413; interface vlan.1414; interface vlan.1433; interface vlan.1434; interface vlan.1453; interface vlan.1454; interface vlan.1473; interface vlan.1474; interface vlan.1493; interface vlan.1494; interface vlan.1513; interface vlan.1514; interface vlan.1533; interface vlan.1534; interface vlan.1553; interface vlan.1554; interface vlan.1573; interface vlan.1574; } ospf { export [ static-to-ospf direct-to-ospf ]; area 0.0.0.0 { interface ae31.0; interface irb.3000; } } ospf3 { export [ static-to-ospf direct-to-ospf ]; area 0.0.0.0 { interface ae31.0; } } pim { rp { static { address 2a06:5841:148b::67; address 185.110.148.67; } } } sflow { agent-id 185.110.148.105; sample-rate { ingress 10000; egress 10000; } source-ip 185.110.148.105; collector ; interfaces all-ports; } igmp-snooping { vlan all; } rstp; lldp { management-address 185.110.148.105; interface all; } lldp-med { interface all; } } policy-options { prefix-list mgmt-v4 { /* KANDU PA-nett (brukt på servere, infra etc) */ 185.110.148.0/22; } prefix-list mgmt-v6 { /* KANDU PA-nett (den delen som er brukt på servere, infra etc) */ 2a06:5841::/32; } prefix-list mgmt { 185.110.148.0/22; 2a06:5841::/32; } prefix-list mgmt-v4-nms { 185.110.148.11/32; 185.110.148.12/32; } prefix-list mgmt-v6-nms { 2a06:5841:1337::11/128; 2a06:5841:1337::12/128; } prefix-list mgmt-nms { 185.110.148.11/32; 185.110.148.12/32; 185.110.150.10/32; 2a06:5841:1337::11/128; 2a06:5841:1337::12/128; } prefix-list icmp_unthrottled-v4 { 185.110.148.0/22; 193.212.22.0/30; } prefix-list icmp_unthrottled-v6 { 2001:4600:9:300::290/126; 2a06:5841::/32; } policy-statement direct-to-ospf { from protocol direct; then { external { type 1; } accept; } } policy-statement static-to-ospf { from protocol static; then { external { type 1; } accept; } } } firewall { family inet { filter protect-mgmt-v4 { term accept-ssh { from { source-prefix-list { mgmt-v4; } destination-port 22; } then accept; } term discard-ssh { from { destination-port 22; } then { discard; } } term snmp-nms { from { source-prefix-list { mgmt-v4-nms; } destination-port snmp; } then accept; } term snmp-throttle { from { source-prefix-list { mgmt-v4; } destination-port snmp; } then accept; } term icmp-trusted { from { source-prefix-list { icmp_unthrottled-v4; } protocol icmp; } then accept; } term icmp-throttled { from { protocol icmp; } then accept; } term accept-all { then accept; } } } family inet6 { filter protect-mgmt-v6 { term accept-ssh { from { source-prefix-list { mgmt-v6; } destination-port 22; } then accept; } term discard-ssh { from { destination-port 22; } then discard; } term snmp-nms { from { source-prefix-list { mgmt-v6-nms; } destination-port snmp; } then accept; } term snmp-throttle { from { source-prefix-list { mgmt-v6; } destination-port snmp; } then accept; } term icmp-trusted { from { source-prefix-list { icmp_unthrottled-v6; } next-header icmp6; } then accept; } term icmp-throttled { from { next-header icmp6; } then accept; } term accept-all { then accept; } } } } virtual-chassis { preprovisioned; member 0 { role routing-engine; serial-number ; } member 1 { role routing-engine; serial-number ; } member 2 { role line-card; serial-number ; } } ethernet-switching-options { storm-control { interface all; } } vlans { aps_mgmt { vlan-id 777; l3-interface vlan.777; } e41-3-static { vlan-id 3000; l3-interface vlan.3000; } e41-4-static { vlan-id 3001; l3-interface vlan.3001; } e43-3 { vlan-id 1433; l3-interface vlan.1433; } e43-3-static { vlan-id 3002; l3-interface vlan.3002; } e43-4-static { vlan-id 3003; l3-interface vlan.3003; } e45-3-static { vlan-id 3004; l3-interface vlan.3004; } e45-4-static { vlan-id 3005; l3-interface vlan.3005; } e47-3-static { vlan-id 3006; l3-interface vlan.3006; } e47-4-static { vlan-id 3007; l3-interface vlan.3007; } e49-3-static { vlan-id 3008; l3-interface vlan.3008; } e49-4-static { vlan-id 3009; l3-interface vlan.3009; } e51-3-static { vlan-id 3010; l3-interface vlan.3010; } e51-4-static { vlan-id 3011; l3-interface vlan.3011; } e53-3-static { vlan-id 3012; l3-interface vlan.3012; } e53-4-static { vlan-id 3013; l3-interface vlan.3013; } e55-3-static { vlan-id 3014; l3-interface vlan.3014; } e55-4-static { vlan-id 3015; l3-interface vlan.3015; } e57-3-static { vlan-id 3016; l3-interface vlan.3016; } e57-4-static { vlan-id 3017; l3-interface vlan.3017; } mgmt { vlan-id 666; l3-interface vlan.666; } } poe { interface all; }