aboutsummaryrefslogtreecommitdiffstats
path: root/examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf
diff options
context:
space:
mode:
Diffstat (limited to 'examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf')
-rw-r--r--examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf742
1 files changed, 742 insertions, 0 deletions
diff --git a/examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf b/examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf
new file mode 100644
index 0000000..8aff87b
--- /dev/null
+++ b/examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf
@@ -0,0 +1,742 @@
+## qfx5120-48y-8c
+## Last commit: 2023-04-05 01:37:11 CEST by bazukh
+version 21.2R3-S2.9;
+system {
+ host-name d1.roof;
+ root-authentication {
+ encrypted-password "<removed>"; ## SECRET-DATA
+ }
+ commit synchronize;
+ login {
+ user api {
+ uid 2001;
+ class super-user;
+ authentication {
+ ssh-ed25519 "<removed>"; ## SECRET-DATA
+ }
+ }
+ user tech {
+ uid 2000;
+ class super-user;
+ authentication {
+ encrypted-password "<removed>"; ## SECRET-DATA
+ }
+ }
+ }
+ services {
+ ssh {
+ root-login deny;
+ no-tcp-forwarding;
+ protocol-version v2;
+ client-alive-count-max 2;
+ client-alive-interval 300;
+ connection-limit 50;
+ rate-limit 5;
+ }
+ netconf {
+ ssh {
+ port 830;
+ }
+ }
+ }
+ auto-snapshot;
+ domain-name tg23.gathering.org;
+ time-zone Europe/Oslo;
+ /* tacacs primary, failbacks to local users */
+ authentication-order tacplus;
+ ports {
+ console log-out-on-disconnect;
+ }
+ name-server {
+ 2a06:5841:f:d::101;
+ 2a06:5841:f:e::132;
+ }
+ tacplus-server {
+ <removed> {
+ secret "<removed>"; ## SECRET-DATA
+ source-address 185.110.148.18;
+ }
+ }
+ syslog {
+ user * {
+ any emergency;
+ }
+ host log.tg23.gathering.org {
+ any warning;
+ authorization info;
+ daemon warning;
+ user warning;
+ change-log any;
+ interactive-commands any;
+ match "!(.*License.*)";
+ allow-duplicates;
+ facility-override local7;
+ explicit-priority;
+ }
+ /* Oxidized syslog */
+ host 185.110.148.112 {
+ interactive-commands notice;
+ match UI_COMMIT_COMPLETED;
+ source-address 185.110.148.18;
+ }
+ /* Local logging of all user-commands typed in the CLI */
+ file interactive-commands {
+ interactive-commands any;
+ match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED";
+ }
+ /* Local logging of syslog message */
+ file messages {
+ any notice;
+ authorization info;
+ /* Fjerner mye graps i loggene */
+ match "!(.*License.*|.*EX-BCM PIC.*|.*mojito_i2c_read.*|.*qsfp_tk_read_mem_page.*)";
+ }
+ }
+ ntp {
+ /* ntp.uio.no */
+ server 2001:700:100:2::6;
+ }
+}
+chassis {
+ aggregated-devices {
+ ethernet {
+ device-count 32;
+ }
+ }
+ alarm {
+ management-ethernet {
+ link-down ignore;
+ }
+ }
+}
+interfaces {
+ interface-range all-ports {
+ member ge-*/*/*;
+ member xe-*/*/*;
+ member et-*/*/*;
+ }
+ xe-0/0/1 {
+ description "G: d2.floor xe-0/1/0 (ae10)";
+ ether-options {
+ 802.3ad ae10;
+ }
+ }
+ xe-0/0/2 {
+ description "G: d3.floor xe-0/1/0 (ae11)";
+ ether-options {
+ 802.3ad ae11;
+ }
+ }
+ xe-0/0/3 {
+ description "G: d4.floor xe-0/1/0 (ae12)";
+ ether-options {
+ 802.3ad ae12;
+ }
+ }
+ xe-0/0/4 {
+ description "G: d5.floor xe-0/1/0 (ae13)";
+ ether-options {
+ 802.3ad ae13;
+ }
+ }
+ xe-0/0/5 {
+ description "G: d6.floor xe-0/1/0 (ae14)";
+ ether-options {
+ 802.3ad ae14;
+ }
+ }
+ et-0/0/48 {
+ description "G: r1.tele (ae0)";
+ ether-options {
+ 802.3ad ae0;
+ }
+ }
+ et-0/0/49 {
+ description "G: d1.floor et-0/2/0 (ae18)";
+ ether-options {
+ 802.3ad ae18;
+ }
+ }
+ xe-1/0/1 {
+ description "G: d2.floor xe-1/1/0 (ae10)";
+ ether-options {
+ 802.3ad ae10;
+ }
+ }
+ xe-1/0/2 {
+ description "G: d3.floor xe-1/1/0 (ae11)";
+ ether-options {
+ 802.3ad ae11;
+ }
+ }
+ xe-1/0/3 {
+ description "G: d4.floor xe-1/1/0 (ae12)";
+ ether-options {
+ 802.3ad ae12;
+ }
+ }
+ xe-1/0/4 {
+ description "G: d5.floor xe-1/1/0 (ae13)";
+ ether-options {
+ 802.3ad ae13;
+ }
+ }
+ xe-1/0/5 {
+ description "G: d6.floor xe-1/1/0 (ae14)";
+ ether-options {
+ 802.3ad ae14;
+ }
+ }
+ et-1/0/48 {
+ description "G: r1.tele (ae0)";
+ ether-options {
+ 802.3ad ae0;
+ }
+ }
+ et-1/0/49 {
+ description "G: d1.floor et-1/2/0 (ae18)";
+ ether-options {
+ 802.3ad ae18;
+ }
+ }
+ ae0 {
+ description "B: r1.tele ae10";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e3-4 e9-4 e9-3 e1-4 e1-3 e7-3 e7-4 e3-3 e5-4 e5-3 e39-4 e41-4 e45-3 e43-3 e37-3 e47-3 e35-4 e37-4 e33-4 e33-3 e45-4 e35-3 e41-3 e43-4 e39-3 e47-4 e27-3 e29-3 e25-4 e31-3 e21-3 e23-4 e31-4 e23-3 e17-4 e17-3 e29-4 e19-4 e21-4 e27-4 e25-3 e19-3 e25-1 e15-1 e21-2 e13-1 e11-1 e27-1 e19-1 e17-1 e19-2 e31-2 e29-1 e21-1 e17-2 e29-2 e27-2 e23-2 e25-2 e31-1 e23-1 e5-1 e7-1 e9-2 e9-1 e3-1 e5-2 e7-2 e3-2 e1-1 e1-2 e37-1 e41-2 e45-1 e43-1 e39-2 e39-1 e35-1 e41-1
+ e43-2 e37-2 e35-2 e33-2 e45-2 e33-1 e1.gamedesk e1.infodesk e1.crew ];
+ }
+ }
+ }
+ }
+ ae10 {
+ description "B: d2.floor ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e5-1 e7-1 e9-2 e9-1 e3-1 e5-2 e7-2 e3-2 e1-1 e1-2 ];
+ }
+ }
+ }
+ }
+ ae11 {
+ description "B: d3.floor ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e27-3 e29-3 e25-4 e31-3 e21-3 e23-4 e31-4 e23-3 e17-4 e17-3 e29-4 e19-4 e21-4 e27-4 e25-3 e19-3 ];
+ }
+ }
+ }
+ }
+ ae12 {
+ description "B: d4.floor ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e25-1 e15-1 e21-2 e13-1 e11-1 e27-1 e19-1 e17-1 e19-2 e31-2 e29-1 e21-1 e17-2 e29-2 e27-2 e23-2 e25-2 e31-1 e23-1 ];
+ }
+ }
+ }
+ }
+ ae13 {
+ description "B: d5.floor ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e39-4 e41-4 e45-3 e43-3 e37-3 e47-3 e35-4 e37-4 e33-4 e33-3 e45-4 e35-3 e41-3 e43-4 e39-3 e47-4 e1.gamedesk ];
+ }
+ }
+ }
+ }
+ ae14 {
+ description "B: d6.floor ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e37-1 e41-2 e45-1 e43-1 e39-2 e39-1 e35-1 e41-1 e43-2 e37-2 e35-2 e33-2 e45-2 e33-1 e1.infodesk ];
+ }
+ }
+ }
+ }
+ ae18 {
+ description "B: d1.floor ae0";
+ aggregated-ether-options {
+ lacp {
+ active;
+ }
+ }
+ unit 0 {
+ family ethernet-switching {
+ interface-mode trunk;
+ vlan {
+ members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e3-4 e9-4 e9-3 e1-4 e1-3 e7-3 e7-4 e3-3 e5-4 e5-3 e1.crew ];
+ }
+ }
+ }
+ }
+ irb {
+ unit 667 {
+ description "switch management";
+ family inet {
+ filter {
+ input mgmt-v4;
+ }
+ address 185.110.148.18/28;
+ }
+ family inet6 {
+ filter {
+ input mgmt-v6;
+ }
+ address 2a06:5841:f:11::2/64;
+ }
+ }
+ }
+ lo0 {
+ unit 0 {
+ family inet {
+ filter {
+ input mgmt-v4;
+ }
+ }
+ family inet6 {
+ filter {
+ input mgmt-v6;
+ }
+ }
+ }
+ }
+}
+snmp {
+ contact "<removed>";
+ community <removed> {
+ authorization read-only;
+ client-list-name mgmt;
+ }
+}
+policy-options {
+ prefix-list mgmt-v4 {
+ }
+ prefix-list mgmt-v6 {
+ }
+ /* Merged separate v4- og v6-lister */
+ prefix-list mgmt {
+ apply-path "policy-options prefix-list <mgmt-v*> <*>";
+ }
+}
+firewall {
+ family inet {
+ filter mgmt-v4 {
+ term accept-ssh {
+ from {
+ source-prefix-list {
+ mgmt-v4;
+ }
+ destination-port 22;
+ }
+ then accept;
+ }
+ term discard-ssh {
+ from {
+ destination-port 22;
+ }
+ then {
+ discard;
+ }
+ }
+ term accept-all {
+ then accept;
+ }
+ }
+ }
+ family inet6 {
+ filter mgmt-v6 {
+ term accept-ssh {
+ from {
+ source-prefix-list {
+ mgmt-v6;
+ }
+ destination-port 22;
+ }
+ then accept;
+ }
+ term discard-ssh {
+ from {
+ destination-port 22;
+ }
+ then discard;
+ }
+ term accept-all {
+ then accept;
+ }
+ }
+ }
+}
+routing-options {
+ rib inet.0 {
+ static {
+ route 0.0.0.0/0 next-hop 185.110.148.17;
+ }
+ }
+ rib inet6.0 {
+ static {
+ route ::/0 next-hop 2a06:5841:f:11::1;
+ }
+ }
+}
+protocols {
+ lldp {
+ port-id-subtype interface-name;
+ port-description-type interface-description;
+ interface all;
+ }
+ igmp-snooping {
+ vlan all;
+ }
+ rstp {
+ bridge-priority 4k;
+ }
+}
+poe {
+ interface all;
+}
+virtual-chassis {
+ preprovisioned;
+ no-split-detection;
+ member 0 {
+ role routing-engine;
+ serial-number <removed>;
+ }
+ member 1 {
+ role routing-engine;
+ serial-number <removed>;
+ }
+}
+vlans {
+ aps-mgmt {
+ vlan-id 777;
+ }
+ distro-mgmt {
+ vlan-id 667;
+ l3-interface irb.667;
+ forwarding-options {
+ dhcp-security {
+ option-82 {
+ circuit-id {
+ prefix {
+ host-name;
+ }
+ use-vlan-id;
+ }
+ }
+ }
+ }
+ }
+ e1-1 {
+ vlan-id 1151;
+ }
+ e1-2 {
+ vlan-id 1152;
+ }
+ e1-3 {
+ vlan-id 1153;
+ }
+ e1-4 {
+ vlan-id 1154;
+ }
+ e1.crew {
+ vlan-id 1100;
+ }
+ e1.gamedesk {
+ vlan-id 1102;
+ }
+ e1.infodesk {
+ vlan-id 1101;
+ }
+ e11-1 {
+ vlan-id 1351;
+ }
+ e13-1 {
+ vlan-id 1371;
+ }
+ e15-1 {
+ vlan-id 1391;
+ }
+ e17-1 {
+ vlan-id 1411;
+ }
+ e17-2 {
+ vlan-id 1412;
+ }
+ e17-3 {
+ vlan-id 1413;
+ }
+ e17-4 {
+ vlan-id 1414;
+ }
+ e19-1 {
+ vlan-id 1431;
+ }
+ e19-2 {
+ vlan-id 1432;
+ }
+ e19-3 {
+ vlan-id 1433;
+ }
+ e19-4 {
+ vlan-id 1434;
+ }
+ e21-1 {
+ vlan-id 1451;
+ }
+ e21-2 {
+ vlan-id 1452;
+ }
+ e21-3 {
+ vlan-id 1453;
+ }
+ e21-4 {
+ vlan-id 1454;
+ }
+ e23-1 {
+ vlan-id 1471;
+ }
+ e23-2 {
+ vlan-id 1472;
+ }
+ e23-3 {
+ vlan-id 1473;
+ }
+ e23-4 {
+ vlan-id 1474;
+ }
+ e25-1 {
+ vlan-id 1491;
+ }
+ e25-2 {
+ vlan-id 1492;
+ }
+ e25-3 {
+ vlan-id 1493;
+ }
+ e25-4 {
+ vlan-id 1494;
+ }
+ e27-1 {
+ vlan-id 1511;
+ }
+ e27-2 {
+ vlan-id 1512;
+ }
+ e27-3 {
+ vlan-id 1513;
+ }
+ e27-4 {
+ vlan-id 1514;
+ }
+ e29-1 {
+ vlan-id 1531;
+ }
+ e29-2 {
+ vlan-id 1532;
+ }
+ e29-3 {
+ vlan-id 1533;
+ }
+ e29-4 {
+ vlan-id 1534;
+ }
+ e3-1 {
+ vlan-id 1171;
+ }
+ e3-2 {
+ vlan-id 1172;
+ }
+ e3-3 {
+ vlan-id 1173;
+ }
+ e3-4 {
+ vlan-id 1174;
+ }
+ e31-1 {
+ vlan-id 1551;
+ }
+ e31-2 {
+ vlan-id 1552;
+ }
+ e31-3 {
+ vlan-id 1553;
+ }
+ e31-4 {
+ vlan-id 1554;
+ }
+ e33-1 {
+ vlan-id 1591;
+ }
+ e33-2 {
+ vlan-id 1592;
+ }
+ e33-3 {
+ vlan-id 1593;
+ }
+ e33-4 {
+ vlan-id 1594;
+ }
+ e35-1 {
+ vlan-id 1611;
+ }
+ e35-2 {
+ vlan-id 1612;
+ }
+ e35-3 {
+ vlan-id 1613;
+ }
+ e35-4 {
+ vlan-id 1614;
+ }
+ e37-1 {
+ vlan-id 1631;
+ }
+ e37-2 {
+ vlan-id 1632;
+ }
+ e37-3 {
+ vlan-id 1633;
+ }
+ e37-4 {
+ vlan-id 1634;
+ }
+ e39-1 {
+ vlan-id 1651;
+ }
+ e39-2 {
+ vlan-id 1652;
+ }
+ e39-3 {
+ vlan-id 1653;
+ }
+ e39-4 {
+ vlan-id 1654;
+ }
+ e41-1 {
+ vlan-id 1671;
+ }
+ e41-2 {
+ vlan-id 1672;
+ }
+ e41-3 {
+ vlan-id 1673;
+ }
+ e41-4 {
+ vlan-id 1674;
+ }
+ e43-1 {
+ vlan-id 1691;
+ }
+ e43-2 {
+ vlan-id 1692;
+ }
+ e43-3 {
+ vlan-id 1693;
+ }
+ e43-4 {
+ vlan-id 1694;
+ }
+ e45-1 {
+ vlan-id 1711;
+ }
+ e45-2 {
+ vlan-id 1712;
+ }
+ e45-3 {
+ vlan-id 1713;
+ }
+ e45-4 {
+ vlan-id 1714;
+ }
+ e47-3 {
+ vlan-id 1733;
+ }
+ e47-4 {
+ vlan-id 1734;
+ }
+ e5-1 {
+ vlan-id 1191;
+ }
+ e5-2 {
+ vlan-id 1192;
+ }
+ e5-3 {
+ vlan-id 1193;
+ }
+ e5-4 {
+ vlan-id 1194;
+ }
+ e7-1 {
+ vlan-id 1211;
+ }
+ e7-2 {
+ vlan-id 1212;
+ }
+ e7-3 {
+ vlan-id 1213;
+ }
+ e7-4 {
+ vlan-id 1214;
+ }
+ e9-1 {
+ vlan-id 1231;
+ }
+ e9-2 {
+ vlan-id 1232;
+ }
+ e9-3 {
+ vlan-id 1233;
+ }
+ e9-4 {
+ vlan-id 1234;
+ }
+ edge-mgmt {
+ vlan-id 666;
+ }
+ ssid-the-gathering {
+ vlan-id 778;
+ }
+} \ No newline at end of file