diff options
Diffstat (limited to 'examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf')
| -rw-r--r-- | examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf | 742 |
1 files changed, 742 insertions, 0 deletions
diff --git a/examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf b/examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf new file mode 100644 index 0000000..8aff87b --- /dev/null +++ b/examples/tg23/netconfig/d1.roof.tg23.gathering.org.conf @@ -0,0 +1,742 @@ +## qfx5120-48y-8c +## Last commit: 2023-04-05 01:37:11 CEST by bazukh +version 21.2R3-S2.9; +system { + host-name d1.roof; + root-authentication { + encrypted-password "<removed>"; ## SECRET-DATA + } + commit synchronize; + login { + user api { + uid 2001; + class super-user; + authentication { + ssh-ed25519 "<removed>"; ## SECRET-DATA + } + } + user tech { + uid 2000; + class super-user; + authentication { + encrypted-password "<removed>"; ## SECRET-DATA + } + } + } + services { + ssh { + root-login deny; + no-tcp-forwarding; + protocol-version v2; + client-alive-count-max 2; + client-alive-interval 300; + connection-limit 50; + rate-limit 5; + } + netconf { + ssh { + port 830; + } + } + } + auto-snapshot; + domain-name tg23.gathering.org; + time-zone Europe/Oslo; + /* tacacs primary, failbacks to local users */ + authentication-order tacplus; + ports { + console log-out-on-disconnect; + } + name-server { + 2a06:5841:f:d::101; + 2a06:5841:f:e::132; + } + tacplus-server { + <removed> { + secret "<removed>"; ## SECRET-DATA + source-address 185.110.148.18; + } + } + syslog { + user * { + any emergency; + } + host log.tg23.gathering.org { + any warning; + authorization info; + daemon warning; + user warning; + change-log any; + interactive-commands any; + match "!(.*License.*)"; + allow-duplicates; + facility-override local7; + explicit-priority; + } + /* Oxidized syslog */ + host 185.110.148.112 { + interactive-commands notice; + match UI_COMMIT_COMPLETED; + source-address 185.110.148.18; + } + /* Local logging of all user-commands typed in the CLI */ + file interactive-commands { + interactive-commands any; + match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED"; + } + /* Local logging of syslog message */ + file messages { + any notice; + authorization info; + /* Fjerner mye graps i loggene */ + match "!(.*License.*|.*EX-BCM PIC.*|.*mojito_i2c_read.*|.*qsfp_tk_read_mem_page.*)"; + } + } + ntp { + /* ntp.uio.no */ + server 2001:700:100:2::6; + } +} +chassis { + aggregated-devices { + ethernet { + device-count 32; + } + } + alarm { + management-ethernet { + link-down ignore; + } + } +} +interfaces { + interface-range all-ports { + member ge-*/*/*; + member xe-*/*/*; + member et-*/*/*; + } + xe-0/0/1 { + description "G: d2.floor xe-0/1/0 (ae10)"; + ether-options { + 802.3ad ae10; + } + } + xe-0/0/2 { + description "G: d3.floor xe-0/1/0 (ae11)"; + ether-options { + 802.3ad ae11; + } + } + xe-0/0/3 { + description "G: d4.floor xe-0/1/0 (ae12)"; + ether-options { + 802.3ad ae12; + } + } + xe-0/0/4 { + description "G: d5.floor xe-0/1/0 (ae13)"; + ether-options { + 802.3ad ae13; + } + } + xe-0/0/5 { + description "G: d6.floor xe-0/1/0 (ae14)"; + ether-options { + 802.3ad ae14; + } + } + et-0/0/48 { + description "G: r1.tele (ae0)"; + ether-options { + 802.3ad ae0; + } + } + et-0/0/49 { + description "G: d1.floor et-0/2/0 (ae18)"; + ether-options { + 802.3ad ae18; + } + } + xe-1/0/1 { + description "G: d2.floor xe-1/1/0 (ae10)"; + ether-options { + 802.3ad ae10; + } + } + xe-1/0/2 { + description "G: d3.floor xe-1/1/0 (ae11)"; + ether-options { + 802.3ad ae11; + } + } + xe-1/0/3 { + description "G: d4.floor xe-1/1/0 (ae12)"; + ether-options { + 802.3ad ae12; + } + } + xe-1/0/4 { + description "G: d5.floor xe-1/1/0 (ae13)"; + ether-options { + 802.3ad ae13; + } + } + xe-1/0/5 { + description "G: d6.floor xe-1/1/0 (ae14)"; + ether-options { + 802.3ad ae14; + } + } + et-1/0/48 { + description "G: r1.tele (ae0)"; + ether-options { + 802.3ad ae0; + } + } + et-1/0/49 { + description "G: d1.floor et-1/2/0 (ae18)"; + ether-options { + 802.3ad ae18; + } + } + ae0 { + description "B: r1.tele ae10"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e3-4 e9-4 e9-3 e1-4 e1-3 e7-3 e7-4 e3-3 e5-4 e5-3 e39-4 e41-4 e45-3 e43-3 e37-3 e47-3 e35-4 e37-4 e33-4 e33-3 e45-4 e35-3 e41-3 e43-4 e39-3 e47-4 e27-3 e29-3 e25-4 e31-3 e21-3 e23-4 e31-4 e23-3 e17-4 e17-3 e29-4 e19-4 e21-4 e27-4 e25-3 e19-3 e25-1 e15-1 e21-2 e13-1 e11-1 e27-1 e19-1 e17-1 e19-2 e31-2 e29-1 e21-1 e17-2 e29-2 e27-2 e23-2 e25-2 e31-1 e23-1 e5-1 e7-1 e9-2 e9-1 e3-1 e5-2 e7-2 e3-2 e1-1 e1-2 e37-1 e41-2 e45-1 e43-1 e39-2 e39-1 e35-1 e41-1 + e43-2 e37-2 e35-2 e33-2 e45-2 e33-1 e1.gamedesk e1.infodesk e1.crew ]; + } + } + } + } + ae10 { + description "B: d2.floor ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e5-1 e7-1 e9-2 e9-1 e3-1 e5-2 e7-2 e3-2 e1-1 e1-2 ]; + } + } + } + } + ae11 { + description "B: d3.floor ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e27-3 e29-3 e25-4 e31-3 e21-3 e23-4 e31-4 e23-3 e17-4 e17-3 e29-4 e19-4 e21-4 e27-4 e25-3 e19-3 ]; + } + } + } + } + ae12 { + description "B: d4.floor ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e25-1 e15-1 e21-2 e13-1 e11-1 e27-1 e19-1 e17-1 e19-2 e31-2 e29-1 e21-1 e17-2 e29-2 e27-2 e23-2 e25-2 e31-1 e23-1 ]; + } + } + } + } + ae13 { + description "B: d5.floor ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e39-4 e41-4 e45-3 e43-3 e37-3 e47-3 e35-4 e37-4 e33-4 e33-3 e45-4 e35-3 e41-3 e43-4 e39-3 e47-4 e1.gamedesk ]; + } + } + } + } + ae14 { + description "B: d6.floor ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e37-1 e41-2 e45-1 e43-1 e39-2 e39-1 e35-1 e41-1 e43-2 e37-2 e35-2 e33-2 e45-2 e33-1 e1.infodesk ]; + } + } + } + } + ae18 { + description "B: d1.floor ae0"; + aggregated-ether-options { + lacp { + active; + } + } + unit 0 { + family ethernet-switching { + interface-mode trunk; + vlan { + members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e3-4 e9-4 e9-3 e1-4 e1-3 e7-3 e7-4 e3-3 e5-4 e5-3 e1.crew ]; + } + } + } + } + irb { + unit 667 { + description "switch management"; + family inet { + filter { + input mgmt-v4; + } + address 185.110.148.18/28; + } + family inet6 { + filter { + input mgmt-v6; + } + address 2a06:5841:f:11::2/64; + } + } + } + lo0 { + unit 0 { + family inet { + filter { + input mgmt-v4; + } + } + family inet6 { + filter { + input mgmt-v6; + } + } + } + } +} +snmp { + contact "<removed>"; + community <removed> { + authorization read-only; + client-list-name mgmt; + } +} +policy-options { + prefix-list mgmt-v4 { + } + prefix-list mgmt-v6 { + } + /* Merged separate v4- og v6-lister */ + prefix-list mgmt { + apply-path "policy-options prefix-list <mgmt-v*> <*>"; + } +} +firewall { + family inet { + filter mgmt-v4 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v4; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then { + discard; + } + } + term accept-all { + then accept; + } + } + } + family inet6 { + filter mgmt-v6 { + term accept-ssh { + from { + source-prefix-list { + mgmt-v6; + } + destination-port 22; + } + then accept; + } + term discard-ssh { + from { + destination-port 22; + } + then discard; + } + term accept-all { + then accept; + } + } + } +} +routing-options { + rib inet.0 { + static { + route 0.0.0.0/0 next-hop 185.110.148.17; + } + } + rib inet6.0 { + static { + route ::/0 next-hop 2a06:5841:f:11::1; + } + } +} +protocols { + lldp { + port-id-subtype interface-name; + port-description-type interface-description; + interface all; + } + igmp-snooping { + vlan all; + } + rstp { + bridge-priority 4k; + } +} +poe { + interface all; +} +virtual-chassis { + preprovisioned; + no-split-detection; + member 0 { + role routing-engine; + serial-number <removed>; + } + member 1 { + role routing-engine; + serial-number <removed>; + } +} +vlans { + aps-mgmt { + vlan-id 777; + } + distro-mgmt { + vlan-id 667; + l3-interface irb.667; + forwarding-options { + dhcp-security { + option-82 { + circuit-id { + prefix { + host-name; + } + use-vlan-id; + } + } + } + } + } + e1-1 { + vlan-id 1151; + } + e1-2 { + vlan-id 1152; + } + e1-3 { + vlan-id 1153; + } + e1-4 { + vlan-id 1154; + } + e1.crew { + vlan-id 1100; + } + e1.gamedesk { + vlan-id 1102; + } + e1.infodesk { + vlan-id 1101; + } + e11-1 { + vlan-id 1351; + } + e13-1 { + vlan-id 1371; + } + e15-1 { + vlan-id 1391; + } + e17-1 { + vlan-id 1411; + } + e17-2 { + vlan-id 1412; + } + e17-3 { + vlan-id 1413; + } + e17-4 { + vlan-id 1414; + } + e19-1 { + vlan-id 1431; + } + e19-2 { + vlan-id 1432; + } + e19-3 { + vlan-id 1433; + } + e19-4 { + vlan-id 1434; + } + e21-1 { + vlan-id 1451; + } + e21-2 { + vlan-id 1452; + } + e21-3 { + vlan-id 1453; + } + e21-4 { + vlan-id 1454; + } + e23-1 { + vlan-id 1471; + } + e23-2 { + vlan-id 1472; + } + e23-3 { + vlan-id 1473; + } + e23-4 { + vlan-id 1474; + } + e25-1 { + vlan-id 1491; + } + e25-2 { + vlan-id 1492; + } + e25-3 { + vlan-id 1493; + } + e25-4 { + vlan-id 1494; + } + e27-1 { + vlan-id 1511; + } + e27-2 { + vlan-id 1512; + } + e27-3 { + vlan-id 1513; + } + e27-4 { + vlan-id 1514; + } + e29-1 { + vlan-id 1531; + } + e29-2 { + vlan-id 1532; + } + e29-3 { + vlan-id 1533; + } + e29-4 { + vlan-id 1534; + } + e3-1 { + vlan-id 1171; + } + e3-2 { + vlan-id 1172; + } + e3-3 { + vlan-id 1173; + } + e3-4 { + vlan-id 1174; + } + e31-1 { + vlan-id 1551; + } + e31-2 { + vlan-id 1552; + } + e31-3 { + vlan-id 1553; + } + e31-4 { + vlan-id 1554; + } + e33-1 { + vlan-id 1591; + } + e33-2 { + vlan-id 1592; + } + e33-3 { + vlan-id 1593; + } + e33-4 { + vlan-id 1594; + } + e35-1 { + vlan-id 1611; + } + e35-2 { + vlan-id 1612; + } + e35-3 { + vlan-id 1613; + } + e35-4 { + vlan-id 1614; + } + e37-1 { + vlan-id 1631; + } + e37-2 { + vlan-id 1632; + } + e37-3 { + vlan-id 1633; + } + e37-4 { + vlan-id 1634; + } + e39-1 { + vlan-id 1651; + } + e39-2 { + vlan-id 1652; + } + e39-3 { + vlan-id 1653; + } + e39-4 { + vlan-id 1654; + } + e41-1 { + vlan-id 1671; + } + e41-2 { + vlan-id 1672; + } + e41-3 { + vlan-id 1673; + } + e41-4 { + vlan-id 1674; + } + e43-1 { + vlan-id 1691; + } + e43-2 { + vlan-id 1692; + } + e43-3 { + vlan-id 1693; + } + e43-4 { + vlan-id 1694; + } + e45-1 { + vlan-id 1711; + } + e45-2 { + vlan-id 1712; + } + e45-3 { + vlan-id 1713; + } + e45-4 { + vlan-id 1714; + } + e47-3 { + vlan-id 1733; + } + e47-4 { + vlan-id 1734; + } + e5-1 { + vlan-id 1191; + } + e5-2 { + vlan-id 1192; + } + e5-3 { + vlan-id 1193; + } + e5-4 { + vlan-id 1194; + } + e7-1 { + vlan-id 1211; + } + e7-2 { + vlan-id 1212; + } + e7-3 { + vlan-id 1213; + } + e7-4 { + vlan-id 1214; + } + e9-1 { + vlan-id 1231; + } + e9-2 { + vlan-id 1232; + } + e9-3 { + vlan-id 1233; + } + e9-4 { + vlan-id 1234; + } + edge-mgmt { + vlan-id 666; + } + ssid-the-gathering { + vlan-id 778; + } +}
\ No newline at end of file |
