## qfx5120-48y-8c
## Last commit: 2023-04-05 01:37:11 CEST by bazukh
version 21.2R3-S2.9;
system {
    host-name d1.roof;
    root-authentication {
        encrypted-password "<removed>"; ## SECRET-DATA
    }
    commit synchronize;
    login {
        user api {
            uid 2001;
            class super-user;
            authentication {
                ssh-ed25519 "<removed>"; ## SECRET-DATA
            }
        }
        user tech {
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "<removed>"; ## SECRET-DATA
            }
        }
    }
    services {
        ssh {
            root-login deny;
            no-tcp-forwarding;
            protocol-version v2;
            client-alive-count-max 2;
            client-alive-interval 300;
            connection-limit 50;
            rate-limit 5;
        }
        netconf {
            ssh {
                port 830;
            }
        }
    }
    auto-snapshot;
    domain-name tg23.gathering.org;
    time-zone Europe/Oslo;
    /* tacacs primary, failbacks to local users */
    authentication-order tacplus;
    ports {
        console log-out-on-disconnect;
    }
    name-server {
        2a06:5841:f:d::101;
        2a06:5841:f:e::132;
    }
    tacplus-server {
        <removed> {
            secret "<removed>"; ## SECRET-DATA
            source-address 185.110.148.18;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        host log.tg23.gathering.org {
            any warning;
            authorization info;
            daemon warning;
            user warning;
            change-log any;
            interactive-commands any;
            match "!(.*License.*)";
            allow-duplicates;
            facility-override local7;
            explicit-priority;
        }
        /* Oxidized syslog */
        host 185.110.148.112 {
            interactive-commands notice;
            match UI_COMMIT_COMPLETED;
            source-address 185.110.148.18;
        }
        /* Local logging of all user-commands typed in the CLI */
        file interactive-commands {
            interactive-commands any;
            match "UI_CMDLINE_READ_LINE|UI_COMMIT_COMPLETED";
        }
        /* Local logging of syslog message */
        file messages {
            any notice;
            authorization info;
            /* Fjerner mye graps i loggene */
            match "!(.*License.*|.*EX-BCM PIC.*|.*mojito_i2c_read.*|.*qsfp_tk_read_mem_page.*)";
        }
    }
    ntp {
        /* ntp.uio.no */
        server 2001:700:100:2::6;
    }
}
chassis {
    aggregated-devices {
        ethernet {
            device-count 32;
        }
    }
    alarm {
        management-ethernet {
            link-down ignore;
        }
    }
}
interfaces {
    interface-range all-ports {
        member ge-*/*/*;
        member xe-*/*/*;
        member et-*/*/*;
    }
    xe-0/0/1 {
        description "G: d2.floor xe-0/1/0 (ae10)";
        ether-options {
            802.3ad ae10;
        }
    }
    xe-0/0/2 {
        description "G: d3.floor xe-0/1/0 (ae11)";
        ether-options {
            802.3ad ae11;
        }
    }
    xe-0/0/3 {
        description "G: d4.floor xe-0/1/0 (ae12)";
        ether-options {
            802.3ad ae12;
        }
    }
    xe-0/0/4 {
        description "G: d5.floor xe-0/1/0 (ae13)";
        ether-options {
            802.3ad ae13;
        }
    }
    xe-0/0/5 {
        description "G: d6.floor xe-0/1/0 (ae14)";
        ether-options {
            802.3ad ae14;
        }
    }
    et-0/0/48 {
        description "G: r1.tele (ae0)";
        ether-options {
            802.3ad ae0;
        }
    }
    et-0/0/49 {
        description "G: d1.floor et-0/2/0 (ae18)";
        ether-options {
            802.3ad ae18;
        }
    }
    xe-1/0/1 {
        description "G: d2.floor xe-1/1/0 (ae10)";
        ether-options {
            802.3ad ae10;
        }
    }
    xe-1/0/2 {
        description "G: d3.floor xe-1/1/0 (ae11)";
        ether-options {
            802.3ad ae11;
        }
    }
    xe-1/0/3 {
        description "G: d4.floor xe-1/1/0 (ae12)";
        ether-options {
            802.3ad ae12;
        }
    }
    xe-1/0/4 {
        description "G: d5.floor xe-1/1/0 (ae13)";
        ether-options {
            802.3ad ae13;
        }
    }
    xe-1/0/5 {
        description "G: d6.floor xe-1/1/0 (ae14)";
        ether-options {
            802.3ad ae14;
        }
    }
    et-1/0/48 {
        description "G: r1.tele (ae0)";
        ether-options {
            802.3ad ae0;
        }
    }
    et-1/0/49 {
        description "G: d1.floor et-1/2/0 (ae18)";
        ether-options {
            802.3ad ae18;
        }
    }
    ae0 {
        description "B: r1.tele ae10";
        aggregated-ether-options {
            lacp {
                active;
            }
        }
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e3-4 e9-4 e9-3 e1-4 e1-3 e7-3 e7-4 e3-3 e5-4 e5-3 e39-4 e41-4 e45-3 e43-3 e37-3 e47-3 e35-4 e37-4 e33-4 e33-3 e45-4 e35-3 e41-3 e43-4 e39-3 e47-4 e27-3 e29-3 e25-4 e31-3 e21-3 e23-4 e31-4 e23-3 e17-4 e17-3 e29-4 e19-4 e21-4 e27-4 e25-3 e19-3 e25-1 e15-1 e21-2 e13-1 e11-1 e27-1 e19-1 e17-1 e19-2 e31-2 e29-1 e21-1 e17-2 e29-2 e27-2 e23-2 e25-2 e31-1 e23-1 e5-1 e7-1 e9-2 e9-1 e3-1 e5-2 e7-2 e3-2 e1-1 e1-2 e37-1 e41-2 e45-1 e43-1 e39-2 e39-1 e35-1 e41-1
                    e43-2 e37-2 e35-2 e33-2 e45-2 e33-1 e1.gamedesk e1.infodesk e1.crew ];
                }
            }
        }
    }
    ae10 {
        description "B: d2.floor ae0";
        aggregated-ether-options {
            lacp {
                active;
            }
        }
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e5-1 e7-1 e9-2 e9-1 e3-1 e5-2 e7-2 e3-2 e1-1 e1-2 ];
                }
            }
        }
    }
    ae11 {
        description "B: d3.floor ae0";
        aggregated-ether-options {
            lacp {
                active;
            }
        }
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e27-3 e29-3 e25-4 e31-3 e21-3 e23-4 e31-4 e23-3 e17-4 e17-3 e29-4 e19-4 e21-4 e27-4 e25-3 e19-3 ];
                }
            }
        }
    }
    ae12 {
        description "B: d4.floor ae0";
        aggregated-ether-options {
            lacp {
                active;
            }
        }
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e25-1 e15-1 e21-2 e13-1 e11-1 e27-1 e19-1 e17-1 e19-2 e31-2 e29-1 e21-1 e17-2 e29-2 e27-2 e23-2 e25-2 e31-1 e23-1 ];
                }
            }
        }
    }
    ae13 {
        description "B: d5.floor ae0";
        aggregated-ether-options {
            lacp {
                active;
            }
        }
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e39-4 e41-4 e45-3 e43-3 e37-3 e47-3 e35-4 e37-4 e33-4 e33-3 e45-4 e35-3 e41-3 e43-4 e39-3 e47-4 e1.gamedesk ];
                }
            }
        }
    }
    ae14 {
        description "B: d6.floor ae0";
        aggregated-ether-options {
            lacp {
                active;
            }
        }
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e37-1 e41-2 e45-1 e43-1 e39-2 e39-1 e35-1 e41-1 e43-2 e37-2 e35-2 e33-2 e45-2 e33-1 e1.infodesk ];
                }
            }
        }
    }
    ae18 {
        description "B: d1.floor ae0";
        aggregated-ether-options {
            lacp {
                active;
            }
        }
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                    members [ distro-mgmt edge-mgmt aps-mgmt ssid-the-gathering e3-4 e9-4 e9-3 e1-4 e1-3 e7-3 e7-4 e3-3 e5-4 e5-3 e1.crew ];
                }
            }
        }
    }
    irb {
        unit 667 {
            description "switch management";
            family inet {
                filter {
                    input mgmt-v4;
                }
                address 185.110.148.18/28;
            }
            family inet6 {
                filter {
                    input mgmt-v6;
                }
                address 2a06:5841:f:11::2/64;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                filter {
                    input mgmt-v4;
                }
            }
            family inet6 {
                filter {
                    input mgmt-v6;
                }
            }
        }
    }
}
snmp {
    contact "<removed>";
    community <removed> {
        authorization read-only;
        client-list-name mgmt;
    }
}
policy-options {
    prefix-list mgmt-v4 {
    }
    prefix-list mgmt-v6 {
    }
    /* Merged separate v4- og v6-lister */
    prefix-list mgmt {
        apply-path "policy-options prefix-list <mgmt-v*> <*>";
    }
}
firewall {
    family inet {
        filter mgmt-v4 {
            term accept-ssh {
                from {
                    source-prefix-list {
                        mgmt-v4;
                    }
                    destination-port 22;
                }
                then accept;
            }
            term discard-ssh {
                from {
                    destination-port 22;
                }
                then {
                    discard;
                }
            }
            term accept-all {
                then accept;
            }
        }
    }
    family inet6 {
        filter mgmt-v6 {
            term accept-ssh {
                from {
                    source-prefix-list {
                        mgmt-v6;
                    }
                    destination-port 22;
                }
                then accept;
            }
            term discard-ssh {
                from {
                    destination-port 22;
                }
                then discard;
            }
            term accept-all {
                then accept;
            }
        }
    }
}
routing-options {
    rib inet.0 {
        static {
            route 0.0.0.0/0 next-hop 185.110.148.17;
        }
    }
    rib inet6.0 {
        static {
            route ::/0 next-hop 2a06:5841:f:11::1;
        }
    }
}
protocols {
    lldp {
        port-id-subtype interface-name;
        port-description-type interface-description;
        interface all;
    }
    igmp-snooping {
        vlan all;
    }
    rstp {
        bridge-priority 4k;
    }
}
poe {
    interface all;
}
virtual-chassis {
    preprovisioned;
    no-split-detection;
    member 0 {
        role routing-engine;
        serial-number <removed>;
    }
    member 1 {
        role routing-engine;
        serial-number <removed>;
    }
}
vlans {
    aps-mgmt {
        vlan-id 777;
    }
    distro-mgmt {
        vlan-id 667;
        l3-interface irb.667;
        forwarding-options {
            dhcp-security {
                option-82 {
                    circuit-id {
                        prefix {
                            host-name;
                        }
                        use-vlan-id;
                    }
                }
            }
        }
    }
    e1-1 {
        vlan-id 1151;
    }
    e1-2 {
        vlan-id 1152;
    }
    e1-3 {
        vlan-id 1153;
    }
    e1-4 {
        vlan-id 1154;
    }
    e1.crew {
        vlan-id 1100;
    }
    e1.gamedesk {
        vlan-id 1102;
    }
    e1.infodesk {
        vlan-id 1101;
    }
    e11-1 {
        vlan-id 1351;
    }
    e13-1 {
        vlan-id 1371;
    }
    e15-1 {
        vlan-id 1391;
    }
    e17-1 {
        vlan-id 1411;
    }
    e17-2 {
        vlan-id 1412;
    }
    e17-3 {
        vlan-id 1413;
    }
    e17-4 {
        vlan-id 1414;
    }
    e19-1 {
        vlan-id 1431;
    }
    e19-2 {
        vlan-id 1432;
    }
    e19-3 {
        vlan-id 1433;
    }
    e19-4 {
        vlan-id 1434;
    }
    e21-1 {
        vlan-id 1451;
    }
    e21-2 {
        vlan-id 1452;
    }
    e21-3 {
        vlan-id 1453;
    }
    e21-4 {
        vlan-id 1454;
    }
    e23-1 {
        vlan-id 1471;
    }
    e23-2 {
        vlan-id 1472;
    }
    e23-3 {
        vlan-id 1473;
    }
    e23-4 {
        vlan-id 1474;
    }
    e25-1 {
        vlan-id 1491;
    }
    e25-2 {
        vlan-id 1492;
    }
    e25-3 {
        vlan-id 1493;
    }
    e25-4 {
        vlan-id 1494;
    }
    e27-1 {
        vlan-id 1511;
    }
    e27-2 {
        vlan-id 1512;
    }
    e27-3 {
        vlan-id 1513;
    }
    e27-4 {
        vlan-id 1514;
    }
    e29-1 {
        vlan-id 1531;
    }
    e29-2 {
        vlan-id 1532;
    }
    e29-3 {
        vlan-id 1533;
    }
    e29-4 {
        vlan-id 1534;
    }
    e3-1 {
        vlan-id 1171;
    }
    e3-2 {
        vlan-id 1172;
    }
    e3-3 {
        vlan-id 1173;
    }
    e3-4 {
        vlan-id 1174;
    }
    e31-1 {
        vlan-id 1551;
    }
    e31-2 {
        vlan-id 1552;
    }
    e31-3 {
        vlan-id 1553;
    }
    e31-4 {
        vlan-id 1554;
    }
    e33-1 {
        vlan-id 1591;
    }
    e33-2 {
        vlan-id 1592;
    }
    e33-3 {
        vlan-id 1593;
    }
    e33-4 {
        vlan-id 1594;
    }
    e35-1 {
        vlan-id 1611;
    }
    e35-2 {
        vlan-id 1612;
    }
    e35-3 {
        vlan-id 1613;
    }
    e35-4 {
        vlan-id 1614;
    }
    e37-1 {
        vlan-id 1631;
    }
    e37-2 {
        vlan-id 1632;
    }
    e37-3 {
        vlan-id 1633;
    }
    e37-4 {
        vlan-id 1634;
    }
    e39-1 {
        vlan-id 1651;
    }
    e39-2 {
        vlan-id 1652;
    }
    e39-3 {
        vlan-id 1653;
    }
    e39-4 {
        vlan-id 1654;
    }
    e41-1 {
        vlan-id 1671;
    }
    e41-2 {
        vlan-id 1672;
    }
    e41-3 {
        vlan-id 1673;
    }
    e41-4 {
        vlan-id 1674;
    }
    e43-1 {
        vlan-id 1691;
    }
    e43-2 {
        vlan-id 1692;
    }
    e43-3 {
        vlan-id 1693;
    }
    e43-4 {
        vlan-id 1694;
    }
    e45-1 {
        vlan-id 1711;
    }
    e45-2 {
        vlan-id 1712;
    }
    e45-3 {
        vlan-id 1713;
    }
    e45-4 {
        vlan-id 1714;
    }
    e47-3 {
        vlan-id 1733;
    }
    e47-4 {
        vlan-id 1734;
    }
    e5-1 {
        vlan-id 1191;
    }
    e5-2 {
        vlan-id 1192;
    }
    e5-3 {
        vlan-id 1193;
    }
    e5-4 {
        vlan-id 1194;
    }
    e7-1 {
        vlan-id 1211;
    }
    e7-2 {
        vlan-id 1212;
    }
    e7-3 {
        vlan-id 1213;
    }
    e7-4 {
        vlan-id 1214;
    }
    e9-1 {
        vlan-id 1231;
    }
    e9-2 {
        vlan-id 1232;
    }
    e9-3 {
        vlan-id 1233;
    }
    e9-4 {
        vlan-id 1234;
    }
    edge-mgmt {
        vlan-id 666;
    }
    ssid-the-gathering {
        vlan-id 778;
    }
}