## Last changed: 2019-04-21 09:15:19 CEST version 15.1R7-S4; system { host-name s2.floor; auto-snapshot; domain-name tg19.gathering.org; time-zone Europe/Oslo; authentication-order tacplus; root-authentication { encrypted-password ""; } name-server { 2a06:5841:a:103::62; 2a06:5841:a:104::126; } tacplus-server { 134.90.150.164 secret ""; } login { user technet { uid 2000; class super-user; authentication { encrypted-password ""; } } } services { ssh { root-login deny; no-tcp-forwarding; protocol-version v2; client-alive-count-max 2; client-alive-interval 300; connection-limit 50; rate-limit 5; } netconf { ssh { port 830; } } } syslog { user * { any emergency; } host log.tg19.gathering.org { any warning; authorization info; daemon warning; user warning; change-log any; interactive-commands any; match "!(.*License.*)"; allow-duplicates; facility-override local7; explicit-priority; } /* Local logging of syslog message */ file messages { any notice; authorization info; } /* Local logging of all user-commands typed in the CLI */ file interactive-commands { interactive-commands any; match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; } } /* Save changes to central site */ archival { configuration { transfer-on-commit; archive-sites { "scp://user@host/some/folder/" password ""; } } } commit synchronize; ntp { /* ntp.uio.no */ server 2001:700:100:2::6; } } chassis { aggregated-devices { ethernet { device-count 40; } } alarm { management-ethernet { link-down ignore; } } } security { ssh-known-hosts { host { ecdsa-sha2-nistp256-key ; } } } interfaces { interface-range all-ports { member ge-*/*/*; member xe-*/*/*; member et-*/*/*; member-range ge-0/0/0 to ge-0/0/47; member-range xe-0/1/0 to xe-0/1/3; member-range ge-1/0/0 to ge-1/0/47; member-range xe-1/1/0 to xe-1/1/3; member-range ge-2/0/0 to ge-2/0/47; member-range xe-2/1/0 to xe-2/1/3; } interface-range aps { member-range ge-0/0/36 to ge-0/0/47; member-range ge-1/0/36 to ge-1/0/47; member-range ge-2/0/36 to ge-2/0/47; description "C: AP-er"; unit 0 { family ethernet-switching { vlan { members aps_mgmt; } } } } ge-0/0/0 { description "G: e7-1"; inactive: ether-options { 802.3ad ae100; } unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/1 { description "G: e7-2"; inactive: ether-options { 802.3ad ae101; } unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/2 { description "G: e9-1"; inactive: ether-options { 802.3ad ae102; } unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/3 { description "G: e9-2"; inactive: ether-options { 802.3ad ae103; } unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/4 { description "G: e11-1"; ether-options { 802.3ad ae104; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/5 { description "G: e11-2"; ether-options { 802.3ad ae105; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/6 { description "G: e13-1"; ether-options { 802.3ad ae106; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/7 { description "G: e13-2"; ether-options { 802.3ad ae107; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/8 { description "G: e15-1"; ether-options { 802.3ad ae108; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/9 { description "G: e15-2"; ether-options { 802.3ad ae109; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/10 { description "G: e17-1"; inactive: ether-options { 802.3ad ae110; } unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/11 { description "G: e17-2"; ether-options { 802.3ad ae111; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/12 { description "G: e19-1"; ether-options { 802.3ad ae112; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/13 { description "G: e19-2"; ether-options { 802.3ad ae113; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/14 { description "G: e21-1"; ether-options { 802.3ad ae114; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/15 { description "G: e21-2"; ether-options { 802.3ad ae115; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/16 { description "G: e23-1"; ether-options { 802.3ad ae116; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } ge-0/0/17 { description "G: e23-2"; ether-options { 802.3ad ae117; } inactive: unit 0 { family ethernet-switching { port-mode access; vlan { members edge-mgmt; } } } } xe-0/1/1 { description "G: r1.noc "; ether-options { 802.3ad ae0; } } ge-1/0/0 { description "G: e7-1"; ether-options { 802.3ad ae100; } } ge-1/0/1 { description "G: e7-2"; ether-options { 802.3ad ae101; } } ge-1/0/2 { description "G: e9-1"; ether-options { 802.3ad ae102; } } ge-1/0/3 { description "G: e9-2"; ether-options { 802.3ad ae103; } } ge-1/0/4 { description "G: e11-1"; ether-options { 802.3ad ae104; } } ge-1/0/5 { description "G: e11-2"; ether-options { 802.3ad ae105; } } ge-1/0/6 { description "G: e13-1"; ether-options { 802.3ad ae106; } } ge-1/0/7 { description "G: e13-2"; ether-options { 802.3ad ae107; } } ge-1/0/8 { description "G: e15-1"; ether-options { 802.3ad ae108; } } ge-1/0/9 { description "G: e15-2"; ether-options { 802.3ad ae109; } } ge-1/0/10 { description "G: e17-1"; ether-options { 802.3ad ae110; } } ge-1/0/11 { description "G: e17-2"; ether-options { 802.3ad ae111; } } ge-1/0/12 { description "G: e19-1"; ether-options { 802.3ad ae112; } } ge-1/0/13 { description "G: e19-2"; ether-options { 802.3ad ae113; } } ge-1/0/14 { description "G: e21-1"; ether-options { 802.3ad ae114; } } ge-1/0/15 { description "G: e21-2"; ether-options { 802.3ad ae115; } } ge-1/0/16 { description "G: e23-1"; ether-options { 802.3ad ae116; } } ge-1/0/17 { description "G: e23-2"; ether-options { 802.3ad ae117; } } xe-1/1/1 { description "G: r1.noc "; ether-options { 802.3ad ae0; } } ge-2/0/0 { description "G: e7-1"; ether-options { 802.3ad ae100; } } ge-2/0/1 { description "G: e7-2"; ether-options { 802.3ad ae101; } } ge-2/0/2 { description "G: e9-1"; ether-options { 802.3ad ae102; } } ge-2/0/3 { description "G: e9-2"; ether-options { 802.3ad ae103; } } ge-2/0/4 { description "G: e11-1"; ether-options { 802.3ad ae104; } } ge-2/0/5 { description "G: e11-2"; ether-options { 802.3ad ae105; } } ge-2/0/6 { description "G: e13-1"; ether-options { 802.3ad ae106; } } ge-2/0/7 { description "G: e13-2"; ether-options { 802.3ad ae107; } } ge-2/0/8 { description "G: e15-1"; ether-options { 802.3ad ae108; } } ge-2/0/9 { description "G: e15-2"; ether-options { 802.3ad ae109; } } ge-2/0/10 { description "G: e17-1"; ether-options { 802.3ad ae110; } } ge-2/0/11 { description "G: e17-2"; ether-options { 802.3ad ae111; } } ge-2/0/12 { description "G: e19-1"; ether-options { 802.3ad ae112; } } ge-2/0/13 { description "G: e19-2"; ether-options { 802.3ad ae113; } } ge-2/0/14 { description "G: e21-1"; ether-options { 802.3ad ae114; } } ge-2/0/15 { description "G: e21-2"; ether-options { 802.3ad ae115; } } ge-2/0/16 { description "G: e23-1"; ether-options { 802.3ad ae116; } } ge-2/0/17 { description "G: e23-2"; ether-options { 802.3ad ae117; } } ae0 { description "B: r1.noc "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ distro-mgmt edge-mgmt aps_mgmt e13-1 e15-2 e17-1 e9-2 e7-2 e11-2 e19-1 e7-1 e23-1 e21-2 e11-1 e15-1 e23-2 e17-2 e21-1 e13-2 e19-2 e9-1 ]; } } } } ae100 { description "B: e7-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e7-1 ]; } } } } ae101 { description "B: e7-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e7-2 ]; } } } } ae102 { description "B: e9-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e9-1 ]; } } } } ae103 { description "B: e9-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e9-2 ]; } } } } ae104 { description "B: e11-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e11-1 ]; } } } } ae105 { description "B: e11-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e11-2 ]; } } } } ae106 { description "B: e13-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e13-1 ]; } } } } ae107 { description "B: e13-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e13-2 ]; } } } } ae108 { description "B: e15-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e15-1 ]; } } } } ae109 { description "B: e15-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e15-2 ]; } } } } ae110 { description "B: e17-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e17-1 ]; } } } } ae111 { description "B: e17-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e17-2 ]; } } } } ae112 { description "B: e19-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e19-1 ]; } } } } ae113 { description "B: e19-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e19-2 ]; } } } } ae114 { description "B: e21-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e21-1 ]; } } } } ae115 { description "B: e21-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e21-2 ]; } } } } ae116 { description "B: e23-1 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e23-1 ]; } } } } ae117 { description "B: e23-2 "; aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ edge-mgmt e23-2 ]; } } } } lo0 { unit 0 { description Loopback; family inet { filter { input mgmt-v4; } address 127.0.0.1/32; address 185.110.148.70/32; } family inet6 { filter { input mgmt-v6; } address ::1/128; address 2a06:5841:f:e::70/128; } } } vlan { unit 666 { description "EDGE MGMT L3 interface"; family inet { address 88.92.0.65/26; } family inet6 { address 2a06:5841:d:2::1/64; } } unit 777 { description "AP MGMT L3 interface"; family inet { address 88.92.4.129/26; } family inet6 { address 2a06:5841:d:a2::1/64; } } unit 888 { description "Distro MGMT L3 interface"; family inet { address 185.110.148.145/31; } family inet6 { address 2a06:5841:f:f09::1/127; } } } } snmp { contact NOC; community { authorization read-only; client-list-name mgmt; } } forwarding-options { dhcp-relay { dhcpv6 { group edge-switches { active-server-group edge-switches-v6; overrides { allow-snooped-clients; } interface vlan.777; } server-group { edge-switches-v6 { 2a06:5841:a:103::2; } } } server-group { edge-switches-v4 { 185.110.149.2; } } group edge-switches { active-server-group edge-switches-v4; overrides { always-write-option-82; trust-option-82; } interface vlan.777; } group FAP { active-server-group edge-switches-v4; relay-option-82 { circuit-id { prefix { host-name; } include-irb-and-l2; } } interface vlan.666; } } } event-options { policy ae106down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae106$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/6 unit 0"; "deactivate interfaces ge-0/0/6 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae106 went down so removed ge-0/0/6 from bundle"; } } } } policy ae106up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae106$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/6 unit 0"; "activate interfaces ge-0/0/6 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae106 came up so added ge-0/0/6 to bundle"; } } } } policy ae109down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae109$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/9 unit 0"; "deactivate interfaces ge-0/0/9 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae109 went down so removed ge-0/0/9 from bundle"; } } } } policy ae109up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae109$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/9 unit 0"; "activate interfaces ge-0/0/9 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae109 came up so added ge-0/0/9 to bundle"; } } } } policy ae110down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae110$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/10 unit 0"; "deactivate interfaces ge-0/0/10 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae110 went down so removed ge-0/0/10 from bundle"; } } } } policy ae110up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae110$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/10 unit 0"; "activate interfaces ge-0/0/10 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae110 came up so added ge-0/0/10 to bundle"; } } } } policy ae103down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae103$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/3 unit 0"; "deactivate interfaces ge-0/0/3 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae103 went down so removed ge-0/0/3 from bundle"; } } } } policy ae103up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae103$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/3 unit 0"; "activate interfaces ge-0/0/3 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae103 came up so added ge-0/0/3 to bundle"; } } } } policy ae101down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae101$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/1 unit 0"; "deactivate interfaces ge-0/0/1 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae101 went down so removed ge-0/0/1 from bundle"; } } } } policy ae101up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae101$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/1 unit 0"; "activate interfaces ge-0/0/1 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae101 came up so added ge-0/0/1 to bundle"; } } } } policy ae105down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae105$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/5 unit 0"; "deactivate interfaces ge-0/0/5 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae105 went down so removed ge-0/0/5 from bundle"; } } } } policy ae105up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae105$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/5 unit 0"; "activate interfaces ge-0/0/5 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae105 came up so added ge-0/0/5 to bundle"; } } } } policy ae112down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae112$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/12 unit 0"; "deactivate interfaces ge-0/0/12 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae112 went down so removed ge-0/0/12 from bundle"; } } } } policy ae112up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae112$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/12 unit 0"; "activate interfaces ge-0/0/12 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae112 came up so added ge-0/0/12 to bundle"; } } } } policy ae100down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae100$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/0 unit 0"; "deactivate interfaces ge-0/0/0 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae100 went down so removed ge-0/0/0 from bundle"; } } } } policy ae100up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae100$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/0 unit 0"; "activate interfaces ge-0/0/0 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae100 came up so added ge-0/0/0 to bundle"; } } } } policy ae116down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae116$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/16 unit 0"; "deactivate interfaces ge-0/0/16 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae116 went down so removed ge-0/0/16 from bundle"; } } } } policy ae116up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae116$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/16 unit 0"; "activate interfaces ge-0/0/16 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae116 came up so added ge-0/0/16 to bundle"; } } } } policy ae115down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae115$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/15 unit 0"; "deactivate interfaces ge-0/0/15 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae115 went down so removed ge-0/0/15 from bundle"; } } } } policy ae115up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae115$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/15 unit 0"; "activate interfaces ge-0/0/15 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae115 came up so added ge-0/0/15 to bundle"; } } } } policy ae104down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae104$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/4 unit 0"; "deactivate interfaces ge-0/0/4 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae104 went down so removed ge-0/0/4 from bundle"; } } } } policy ae104up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae104$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/4 unit 0"; "activate interfaces ge-0/0/4 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae104 came up so added ge-0/0/4 to bundle"; } } } } policy ae108down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae108$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/8 unit 0"; "deactivate interfaces ge-0/0/8 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae108 went down so removed ge-0/0/8 from bundle"; } } } } policy ae108up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae108$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/8 unit 0"; "activate interfaces ge-0/0/8 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae108 came up so added ge-0/0/8 to bundle"; } } } } policy ae117down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae117$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/17 unit 0"; "deactivate interfaces ge-0/0/17 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae117 went down so removed ge-0/0/17 from bundle"; } } } } policy ae117up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae117$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/17 unit 0"; "activate interfaces ge-0/0/17 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae117 came up so added ge-0/0/17 to bundle"; } } } } policy ae111down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae111$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/11 unit 0"; "deactivate interfaces ge-0/0/11 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae111 went down so removed ge-0/0/11 from bundle"; } } } } policy ae111up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae111$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/11 unit 0"; "activate interfaces ge-0/0/11 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae111 came up so added ge-0/0/11 to bundle"; } } } } policy ae114down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae114$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/14 unit 0"; "deactivate interfaces ge-0/0/14 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae114 went down so removed ge-0/0/14 from bundle"; } } } } policy ae114up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae114$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/14 unit 0"; "activate interfaces ge-0/0/14 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae114 came up so added ge-0/0/14 to bundle"; } } } } policy ae107down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae107$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/7 unit 0"; "deactivate interfaces ge-0/0/7 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae107 went down so removed ge-0/0/7 from bundle"; } } } } policy ae107up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae107$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/7 unit 0"; "activate interfaces ge-0/0/7 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae107 came up so added ge-0/0/7 to bundle"; } } } } policy ae113down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae113$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/13 unit 0"; "deactivate interfaces ge-0/0/13 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae113 went down so removed ge-0/0/13 from bundle"; } } } } policy ae113up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae113$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/13 unit 0"; "activate interfaces ge-0/0/13 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae113 came up so added ge-0/0/13 to bundle"; } } } } policy ae102down { events snmp_trap_link_down; attributes-match { snmp_trap_link_down.interface-name matches "ae102$"; } then { change-configuration { retry count 10 interval 10; commands { "activate interfaces ge-0/0/2 unit 0"; "deactivate interfaces ge-0/0/2 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae102 went down so removed ge-0/0/2 from bundle"; } } } } policy ae102up { events snmp_trap_link_up; attributes-match { snmp_trap_link_up.interface-name matches "ae102$"; } then { change-configuration { retry count 10 interval 10; commands { "deactivate interfaces ge-0/0/2 unit 0"; "activate interfaces ge-0/0/2 ether-options"; } user-name technet; commit-options { log "Autoconfig-script: ae102 came up so added ge-0/0/2 to bundle"; } } } } } protocols { ospf { export [ static-to-ospf direct-to-ospf ]; reference-bandwidth 1000g; area 0.0.0.0 { interface vlan.888; } } ospf3 { export [ static-to-ospf direct-to-ospf ]; reference-bandwidth 1000g; area 0.0.0.0 { interface vlan.888; } } pim { interface ae0.888; } sflow { sample-rate { ingress 10000; egress 10000; } collector ; interfaces all-ports; } igmp-snooping { vlan all; } rstp { bridge-priority 8k; } lldp { interface all; } } policy-options { prefix-list mgmt-v4 { } prefix-list mgmt-v6 { } /* Merged separate v4- og v6-lister */ prefix-list mgmt { apply-path "policy-options prefix-list <*>"; } policy-statement direct-to-ospf { from protocol direct; then { external { type 1; } accept; } } policy-statement static-to-ospf { from protocol static; then { external { type 1; } accept; } } } firewall { family inet { filter mgmt-v4 { term accept-ssh { from { source-prefix-list { mgmt-v4; } destination-port 22; } then accept; } term discard-ssh { from { destination-port 22; } then { discard; } } term accept-all { then accept; } } } family inet6 { filter mgmt-v6 { term accept-ssh { from { source-prefix-list { mgmt-v6; } destination-port 22; } then accept; } term discard-ssh { from { destination-port 22; } then discard; } term accept-all { then accept; } } } } ethernet-switching-options { storm-control { interface ae100.0; interface ae101.0; interface ae102.0; interface ae103.0; interface ae104.0; interface ae105.0; interface ae106.0; interface ae107.0; interface ae108.0; interface ae109.0; interface ae110.0; interface ae111.0; interface ae112.0; interface ae113.0; interface ae114.0; interface ae115.0; interface ae116.0; interface ae117.0; } } vlans { aps_mgmt { vlan-id 777; l3-interface vlan.777; } distro-mgmt { vlan-id 888; l3-interface vlan.888; } e11-1 { vlan-id 1111; } e11-2 { vlan-id 1112; } e13-1 { vlan-id 1131; } e13-2 { vlan-id 1132; } e15-1 { vlan-id 1151; } e15-2 { vlan-id 1152; } e17-1 { vlan-id 1171; } e17-2 { vlan-id 1172; } e19-1 { vlan-id 1191; } e19-2 { vlan-id 1192; } e21-1 { vlan-id 1211; } e21-2 { vlan-id 1212; } e23-1 { vlan-id 1231; } e23-2 { vlan-id 1232; } e7-1 { vlan-id 1071; } e7-2 { vlan-id 1072; } e9-1 { vlan-id 1091; } e9-2 { vlan-id 1092; } edge-mgmt { vlan-id 666; l3-interface vlan.666; } } poe { interface all; }