aboutsummaryrefslogtreecommitdiffstats
path: root/examples/tg23/netconfig/d1.floor.tg23.gathering.org.conf
diff options
context:
space:
mode:
Diffstat (limited to 'examples/tg23/netconfig/d1.floor.tg23.gathering.org.conf')
-rw-r--r--examples/tg23/netconfig/d1.floor.tg23.gathering.org.conf1205
1 files changed, 1205 insertions, 0 deletions
diff --git a/examples/tg23/netconfig/d1.floor.tg23.gathering.org.conf b/examples/tg23/netconfig/d1.floor.tg23.gathering.org.conf
new file mode 100644
index 0000000..606ba6b
--- /dev/null
+++ b/examples/tg23/netconfig/d1.floor.tg23.gathering.org.conf
@@ -0,0 +1,1205 @@
+## ex4300-48mp
+## Last commit: 2023-04-09 09:04:32 CEST by tech
+version 20.2R3-S2.5;
+system {
+ host-name d1.floor;
+ root-authentication {
+ encrypted-password "<removed>"; ## SECRET-DATA
+ }
+ commit synchronize;
+ login {
+ user api {
+ uid 2001;
+ class super-user;
+ authentication {
+ ssh-ed25519 "<removed>"; ## SECRET-DATA
+ }
+ }
+ user tech {
+ uid 2000;
+ class super-user;
+ authentication {
+ encrypted-password "<removed>"; ## SECRET-DATA
+ }
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ no-tcp-forwarding;
+ protocol-version v2;
+ client-alive-count-max 2;
+ client-alive-interval 300;
+ connection-limit 50;
+ rate-limit 5;
+ }
+ netconf {
+ ssh {
+ port 830;
+ }
+ }
+ }
+ auto-snapshot;
+ domain-name tg23.gathering.org;
+ time-zone Europe/Oslo;
+ /* tacacs primary, failbacks to local users */
+ authentication-order tacplus;
+ ports {
+ console log-out-on-disconnect;
+ }
+ name-server {
+ 2a06:5841:f:d::101;
+ 2a06:5841:f:e::132;
+ }
+ tacplus-server {
+ <removed> {
+ secret "<removed>"; ## SECRET-DATA
+ source-address 185.110.148.19;
+ }
+ }
+ syslog {
+ user * {
+ any emergency;
+ }
+ host log.tg23.gathering.org {
+ any warning;
+ authorization info;
+ daemon warning;
+ user warning;
+ change-log any;
+ interactive-commands any;
+ match "!(.*License.*)";
+ allow-duplicates;
+ facility-override local7;
+ explicit-priority;
+ }
+ /* Oxidized syslog */
+ host 185.110.148.112 {
+ interactive-commands notice;
+ match UI_COMMIT_COMPLETED;
+ source-address 185.110.148.19;
+ }
+ /* Local logging of syslog message */
+ file messages {
+ any notice;
+ authorization info;
+ /* Fjerner mye graps i loggene */
+ match "!(.*License.*|.*EX-BCM PIC.*|.*mojito_i2c_read.*|.*qsfp_tk_read_mem_page.*)";
+ }
+ /* Local logging of all user-commands typed in the CLI */
+ file interactive-commands {
+ interactive-commands any;
+ match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED";
+ }
+ }
+ ntp {
+ /* ntp.uio.no */
+ server 2001:700:100:2::6;
+ }
+}
+chassis {
+ aggregated-devices {
+ ethernet {
+ device-count 32;
+ }
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+interfaces {
+ interface-range all-ports {
+ member ge-*/*/*;
+ member mge-*/*/*;
+ member xe-*/*/*;
+ member et-*/*/*;
+ }
+ interface-range aps {
+ member-range mge-0/0/46 to mge-0/0/47;
+ member-range mge-1/0/46 to mge-1/0/47;
+ member-range mge-2/0/46 to mge-2/0/47;
+ description "C: AP - VLAN 777 untagged (mgmt) - VLAN 778 tagged";
+ native-vlan-id 777;
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ aps-mgmt ssid-the-gathering ];
+ }
+ }
+ }
+ }
+ ge-0/0/0 {
+ description "G: e1-3 ge-0/0/44 (ae100)";
+ inactive: ether-options {
+ 802.3ad ae100;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ ge-0/0/1 {
+ description "G: e1-4 ge-0/0/44 (ae101)";
+ inactive: ether-options {
+ 802.3ad ae101;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/24 {
+ description "G: e3-3 mge-0/0/44 (ae124)";
+ inactive: ether-options {
+ 802.3ad ae124;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/25 {
+ description "G: e3-4 mge-0/0/44 (ae125)";
+ inactive: ether-options {
+ 802.3ad ae125;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/26 {
+ description "G: e5-3 mge-0/0/44 (ae126)";
+ inactive: ether-options {
+ 802.3ad ae126;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/27 {
+ description "G: e5-4 mge-0/0/44 (ae127)";
+ inactive: ether-options {
+ 802.3ad ae127;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/28 {
+ description "G: e7-3 mge-0/0/44 (ae128)";
+ inactive: ether-options {
+ 802.3ad ae128;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/29 {
+ description "G: e7-4 mge-0/0/44 (ae129)";
+ inactive: ether-options {
+ 802.3ad ae129;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/30 {
+ description "G: e9-3 mge-0/0/44 (ae130)";
+ inactive: ether-options {
+ 802.3ad ae130;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/31 {
+ description "G: e9-4 mge-0/0/44 (ae131)";
+ inactive: ether-options {
+ 802.3ad ae131;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ mge-0/0/32 {
+ description "G: e1.crew mge-0/0/44 (ae132)";
+ inactive: ether-options {
+ 802.3ad ae132;
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode access;
+ vlan {
+ members edge-mgmt;
+ }
+ }
+ }
+ }
+ et-0/2/0 {
+ description "G: d1.roof et-0/0/49 (ae0)";
+ ether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-1/0/0 {
+ description "G: e1-3 ge-0/0/45 (ae100)";
+ ether-options {
+ 802.3ad ae100;
+ }
+ }
+ ge-1/0/1 {
+ description "G: e1-4 ge-0/0/45 (ae101)";
+ ether-options {
+ 802.3ad ae101;
+ }
+ }
+ mge-1/0/24 {
+ description "G: e3-3 mge-0/0/45 (ae124)";
+ ether-options {
+ 802.3ad ae124;
+ }
+ }
+ mge-1/0/25 {
+ description "G: e3-4 mge-0/0/45 (ae125)";
+ ether-options {
+ 802.3ad ae125;
+ }
+ }
+ mge-1/0/26 {
+ description "G: e5-3 mge-0/0/45 (ae126)";
+ ether-options {
+ 802.3ad ae126;
+ }
+ }
+ mge-1/0/27 {
+ description "G: e5-4 mge-0/0/45 (ae127)";
+ ether-options {
+ 802.3ad ae127;
+ }
+ }
+ mge-1/0/28 {
+ description "G: e7-3 mge-0/0/45 (ae128)";
+ ether-options {
+ 802.3ad ae128;
+ }
+ }
+ mge-1/0/29 {
+ description "G: e7-4 mge-0/0/45 (ae129)";
+ ether-options {
+ 802.3ad ae129;
+ }
+ }
+ mge-1/0/30 {
+ description "G: e9-3 mge-0/0/45 (ae130)";
+ ether-options {
+ 802.3ad ae130;
+ }
+ }
+ mge-1/0/31 {
+ description "G: e9-4 mge-0/0/45 (ae131)";
+ ether-options {
+ 802.3ad ae131;
+ }
+ }
+ mge-1/0/32 {
+ description "G: e1.crew mge-0/0/45 (ae132)";
+ ether-options {
+ 802.3ad ae132;
+ }
+ }
+ et-1/2/0 {
+ description "G: d1.roof et-1/0/49 (ae0)";
+ ether-options {
+ 802.3ad ae0;
+ }
+ }
+ ge-2/0/0 {
+ description "G: e1-3 ge-0/0/46 (ae100)";
+ ether-options {
+ 802.3ad ae100;
+ }
+ }
+ ge-2/0/1 {
+ description "G: e1-4 ge-0/0/46 (ae101)";
+ ether-options {
+ 802.3ad ae101;
+ }
+ }
+ ae0 {
+ description "B: d1.roof ae18";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ distro-mgmt edge-mgmt e5-3 e9-3 e7-3 e3-3 e1-3 e3-4 e1-4 e9-4 e5-4 e7-4 aps-mgmt ssid-the-gathering all ];
+ }
+ }
+ }
+ }
+ ae100 {
+ description "B: e1-3 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e1-3 ];
+ }
+ }
+ }
+ }
+ ae101 {
+ description "B: e1-4 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e1-4 ];
+ }
+ }
+ }
+ }
+ ae124 {
+ description "B: e3-3 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e3-3 ];
+ }
+ }
+ }
+ }
+ ae125 {
+ description "B: e3-4 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e3-4 ];
+ }
+ }
+ }
+ }
+ ae126 {
+ description "B: e5-3 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e5-3 ];
+ }
+ }
+ }
+ }
+ ae127 {
+ description "B: e5-4 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e5-4 ];
+ }
+ }
+ }
+ }
+ ae128 {
+ description "B: e7-3 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e7-3 ];
+ }
+ }
+ }
+ }
+ ae129 {
+ description "B: e7-4 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e7-4 ];
+ }
+ }
+ }
+ }
+ ae130 {
+ description "B: e9-3 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e9-3 ];
+ }
+ }
+ }
+ }
+ ae131 {
+ description "B: e9-4 ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e9-4 ];
+ }
+ }
+ }
+ }
+ ae132 {
+ description "B: e1.crew ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ edge-mgmt e1.crew aps-mgmt ssid-the-gathering ];
+ }
+ }
+ }
+ }
+ irb {
+ unit 667 {
+ description "switch management";
+ family inet {
+ filter {
+ input mgmt-v4;
+ }
+ address 185.110.148.19/28;
+ }
+ family inet6 {
+ filter {
+ input mgmt-v6;
+ }
+ address 2a06:5841:f:11::3/64;
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input mgmt-v4;
+ }
+ }
+ family inet6 {
+ filter {
+ input mgmt-v6;
+ }
+ }
+ }
+ }
+}
+snmp {
+ contact "<removed>";
+ community <removed> {
+ authorization read-only;
+ client-list-name mgmt;
+ }
+}
+event-options {
+ policy ae126down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae126$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/26 unit 0";
+ "deactivate interfaces mge-0/0/26 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae126 went down so removed mge-0/0/26 from bundle";
+ }
+ }
+ }
+ }
+ policy ae126up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae126$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/26 unit 0";
+ "activate interfaces mge-0/0/26 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae126 came up so added mge-0/0/26 to bundle";
+ }
+ }
+ }
+ }
+ policy ae130down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae130$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/30 unit 0";
+ "deactivate interfaces mge-0/0/30 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae130 went down so removed mge-0/0/30 from bundle";
+ }
+ }
+ }
+ }
+ policy ae130up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae130$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/30 unit 0";
+ "activate interfaces mge-0/0/30 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae130 came up so added mge-0/0/30 to bundle";
+ }
+ }
+ }
+ }
+ policy ae128down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae128$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/28 unit 0";
+ "deactivate interfaces mge-0/0/28 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae128 went down so removed mge-0/0/28 from bundle";
+ }
+ }
+ }
+ }
+ policy ae128up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae128$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/28 unit 0";
+ "activate interfaces mge-0/0/28 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae128 came up so added mge-0/0/28 to bundle";
+ }
+ }
+ }
+ }
+ policy ae124down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae124$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/24 unit 0";
+ "deactivate interfaces mge-0/0/24 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae124 went down so removed mge-0/0/24 from bundle";
+ }
+ }
+ }
+ }
+ policy ae124up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae124$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/24 unit 0";
+ "activate interfaces mge-0/0/24 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae124 came up so added mge-0/0/24 to bundle";
+ }
+ }
+ }
+ }
+ policy ae100down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae100$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces ge-0/0/0 unit 0";
+ "deactivate interfaces ge-0/0/0 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae100 went down so removed ge-0/0/0 from bundle";
+ }
+ }
+ }
+ }
+ policy ae100up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae100$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces ge-0/0/0 unit 0";
+ "activate interfaces ge-0/0/0 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae100 came up so added ge-0/0/0 to bundle";
+ }
+ }
+ }
+ }
+ policy ae125down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae125$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/25 unit 0";
+ "deactivate interfaces mge-0/0/25 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae125 went down so removed mge-0/0/25 from bundle";
+ }
+ }
+ }
+ }
+ policy ae125up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae125$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/25 unit 0";
+ "activate interfaces mge-0/0/25 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae125 came up so added mge-0/0/25 to bundle";
+ }
+ }
+ }
+ }
+ policy ae101down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae101$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces ge-0/0/1 unit 0";
+ "deactivate interfaces ge-0/0/1 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae101 went down so removed ge-0/0/1 from bundle";
+ }
+ }
+ }
+ }
+ policy ae101up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae101$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces ge-0/0/1 unit 0";
+ "activate interfaces ge-0/0/1 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae101 came up so added ge-0/0/1 to bundle";
+ }
+ }
+ }
+ }
+ policy ae131down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae131$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/31 unit 0";
+ "deactivate interfaces mge-0/0/31 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae131 went down so removed mge-0/0/31 from bundle";
+ }
+ }
+ }
+ }
+ policy ae131up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae131$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/31 unit 0";
+ "activate interfaces mge-0/0/31 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae131 came up so added mge-0/0/31 to bundle";
+ }
+ }
+ }
+ }
+ policy ae127down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae127$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/27 unit 0";
+ "deactivate interfaces mge-0/0/27 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae127 went down so removed mge-0/0/27 from bundle";
+ }
+ }
+ }
+ }
+ policy ae127up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae127$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/27 unit 0";
+ "activate interfaces mge-0/0/27 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae127 came up so added mge-0/0/27 to bundle";
+ }
+ }
+ }
+ }
+ policy ae129down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae129$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/29 unit 0";
+ "deactivate interfaces mge-0/0/29 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae129 went down so removed mge-0/0/29 from bundle";
+ }
+ }
+ }
+ }
+ policy ae129up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae129$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/29 unit 0";
+ "activate interfaces mge-0/0/29 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae129 came up so added mge-0/0/29 to bundle";
+ }
+ }
+ }
+ }
+ policy ae132down {
+ events snmp_trap_link_down;
+ attributes-match {
+ snmp_trap_link_down.interface-name matches "ae132$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "activate interfaces mge-0/0/32 unit 0";
+ "deactivate interfaces mge-0/0/32 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae132 went down so removed mge-0/0/32 from bundle";
+ }
+ }
+ }
+ }
+ policy ae132up {
+ events snmp_trap_link_up;
+ attributes-match {
+ snmp_trap_link_up.interface-name matches "ae132$";
+ }
+ then {
+ change-configuration {
+ retry count 10 interval 10;
+ commands {
+ "deactivate interfaces mge-0/0/32 unit 0";
+ "activate interfaces mge-0/0/32 ether-options";
+ }
+ user-name tech;
+ commit-options {
+ log "Autoconfig-script: ae132 came up so added mge-0/0/32 to bundle";
+ }
+ }
+ }
+ }
+}
+policy-options {
+ prefix-list mgmt-v4 {
+ }
+ prefix-list mgmt-v6 {
+ }
+ /* Merged separate v4- og v6-lister */
+ prefix-list mgmt {
+ apply-path "policy-options prefix-list <mgmt-v*> <*>";
+ }
+}
+firewall {
+ family inet {
+ filter mgmt-v4 {
+ term accept-ssh {
+ from {
+ source-prefix-list {
+ mgmt-v4;
+ }
+ destination-port 22;
+ }
+ then accept;
+ }
+ term discard-ssh {
+ from {
+ destination-port 22;
+ }
+ then {
+ discard;
+ }
+ }
+ term accept-all {
+ then accept;
+ }
+ }
+ }
+ family inet6 {
+ filter mgmt-v6 {
+ term accept-ssh {
+ from {
+ source-prefix-list {
+ mgmt-v6;
+ }
+ destination-port 22;
+ }
+ then accept;
+ }
+ term discard-ssh {
+ from {
+ destination-port 22;
+ }
+ then discard;
+ }
+ term accept-all {
+ then accept;
+ }
+ }
+ }
+}
+routing-options {
+ rib inet.0 {
+ static {
+ route 0.0.0.0/0 next-hop 185.110.148.17;
+ }
+ }
+ rib inet6.0 {
+ static {
+ route ::/0 next-hop 2a06:5841:f:11::1;
+ }
+ }
+}
+protocols {
+ lldp {
+ port-id-subtype interface-name;
+ port-description-type interface-description;
+ interface all;
+ }
+ igmp-snooping {
+ vlan all;
+ }
+ rstp {
+ bridge-priority 8k;
+ }
+}
+virtual-chassis {
+ preprovisioned;
+ vcp-snmp-statistics;
+ member 0 {
+ role routing-engine;
+ serial-number <removed>;
+ }
+ member 1 {
+ role routing-engine;
+ serial-number <removed>;
+ }
+ member 2 {
+ role line-card;
+ serial-number <removed>;
+ }
+}
+vlans {
+ aps-mgmt {
+ vlan-id 777;
+ }
+ distro-mgmt {
+ vlan-id 667;
+ l3-interface irb.667;
+ forwarding-options {
+ dhcp-security {
+ option-82 {
+ circuit-id {
+ prefix {
+ host-name;
+ }
+ use-vlan-id;
+ }
+ }
+ }
+ }
+ }
+ e1-3 {
+ vlan-id 1153;
+ }
+ e1-4 {
+ vlan-id 1154;
+ }
+ e1.crew {
+ vlan-id 1100;
+ }
+ e3-3 {
+ vlan-id 1173;
+ }
+ e3-4 {
+ vlan-id 1174;
+ }
+ e5-3 {
+ vlan-id 1193;
+ }
+ e5-4 {
+ vlan-id 1194;
+ }
+ e7-3 {
+ vlan-id 1213;
+ }
+ e7-4 {
+ vlan-id 1214;
+ }
+ e9-3 {
+ vlan-id 1233;
+ }
+ e9-4 {
+ vlan-id 1234;
+ }
+ edge-mgmt {
+ vlan-id 666;
+ forwarding-options {
+ dhcp-security {
+ option-82 {
+ circuit-id {
+ prefix {
+ host-name;
+ }
+ use-vlan-id;
+ }
+ }
+ }
+ }
+ }
+ ssid-the-gathering {
+ vlan-id 778;
+ }
+ vl20-s1-tele-mgmt-og-lab {
+ vlan-id 20;
+ }
+}
+poe {
+ interface all;
+}
generated by cgit v1.2.3 (git 2.25.1) at 2025-10-26 17:42:27 +0000