Subject: RARE user and assistance email list
List archive
- From: Xavier Jeannin <>
- To:
- Subject: [RARE-users] Basic Bridge
- Date: Mon, 21 Feb 2022 11:25:54 +0100
Dear All,
As greenhorn, I will ask very basic question.
Our use case is basically a swtich L2, so I try to build a bridge. Using GP4L, the bridge is located at AMS and the 2 router connected to the bridge is FRA and POZ.
We declare a bridge and put a subinterface sdn1.2200 in the bridge
Looking at the mac address learning the bridge had the the mac address of FRA and POZ.
POZ knew also FRA mac address and the opposite works fine but it doew not ping :-(
I thought that it was may be due to the fact that the SDN1 interface has an IP interface so I suppress it on AMS and FRA.
After few trail, I come back to the initial configuration but now the interfaces sdn1 (AMS, FRA) are not enable to be up (even with several 'no shut')
I think I have not understand basic rule to configure FreeRtr.
Any idea ?
I put the configuration of AMS, FRA, POZ and graph on the network
Thank you
Regards
Xavier
--
Xavier JEANNIN
Network Dpt. - Innovation manager
GN4-3 Network technology evolution (WP6 T1) task leader
Tél. : +33 1 5394 2042
Mob. : +33 6 3017 0963
www.renater.fr
POZ0001#show running-config
hostname POZ0001
buggy
!
logging buffered debug 10240
logging file debug /var/log/freertr.log
logging rotate 655360000 /var/log/freertr.old
!
crypto rsakey rsa import
$v10$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
!
crypto dsakey dsa import
$v10$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
!
crypto ecdsakey ecdsa import
$v10$TUhRQ0FRRUVJQUM1SkU0T1JZY0tXS3BuR3N5bXFzRit2cUhjSnJqS0Irb1IzVEhTbTg4d29BY0dCU3VCQkFBS29VUURRZ0FFR29kMkViVTVZU2JkREFmVXF2MmY4TnFOQ3FQVEwrQmo5ais0YlBsSGFWVnN1K0FVZUQxYW5XUGNSbDFXdnNxeFV1ektIakgrOTZYWWpXSStHV2VZSHc9PQ==
!
aaa userlist usr
username rare
username rare password $v10$cmFyZQ==
exit
!
scheduler errors
time 600000
delay 30000
command clear errors
start
exit
!
scheduler upgrade
time 600000
delay 60000
random-time 60000
random-delay 300000
command flash upgrade
start
exit
!
prefix-list all4
sequence 10 permit 0.0.0.0/0 ge 0 le 0
exit
!
prefix-list all6
sequence 10 permit ::/0 ge 0 le 0
exit
!
vrf definition CORE
rd 1:1
rt-import 1:1
rt-export 1:1
iface4start 1000
iface6start 1000
label-mode per-prefix
exit
!
vrf definition INB_MGNT
rd 20965:4
rt-import 20965:1
rt-export 20965:1
exit
!
vrf definition lin
exit
!
vrf definition oob
exit
!
vrf definition p4
description P4 VRF _NEVER_EVER_ CONFIGURE IT
exit
!
vrf definition ppn
rd 2200:4
exit
!
vrf definition v2
rd 1:2
rt-import 1:2
rt-export 1:2
exit
!
vrf definition v3
rd 1:3
label-mode per-prefix
exit
!
router ospf4 1
vrf CORE
router-id 10.4.4.4
traffeng-id 0.0.0.0
segrout 100
bier 256 100
area 0 enable
area 0 spf-bidir
area 0 segrout
area 0 bier
exit
!
router ospf4 3
vrf v3
router-id 10.85.1.1
traffeng-id 0.0.0.0
area 0 enable
advertise 192.1.1.0/24
exit
!
router ospf6 1
vrf CORE
router-id 10.4.4.4
traffeng-id ::
segrout 100
bier 256 100
area 0 enable
area 0 spf-bidir
area 0 segrout
area 0 bier
exit
!
router isis4 3
vrf v3
net-id 48.1234.1234.1234.00
traffeng-id 192.0.0.123
is-type level2
level2 spf-bidir
level2 traffeng
exit
!
router pvrp4 1
vrf v2
router-id 1.1.1.3
redistribute connected
exit
!
router pvrp6 1
vrf v2
router-id 1.1.1.3
redistribute connected
exit
!
interface template1
description core links
lldp enable
vrf forwarding CORE
ipv4 address dynamic dynamic
ipv4 pim enable
ipv4 pim bier-tunnel 4
ipv4 pim join-source loopback0
ipv6 address dynamic dynamic
ipv6 enable
ipv6 pim enable
ipv6 pim bier-tunnel 4
ipv6 pim join-source loopback0
polka enable 4 65536 100
mpls enable
mpls rsvp4
mpls rsvp6
router ospf4 1 enable
router ospf4 1 area 0
router ospf4 1 suppress-prefix
router ospf4 1 segrout index 4
router ospf4 1 bier index 4
router ospf6 1 enable
router ospf6 1 area 0
router ospf6 1 suppress-prefix
router ospf6 1 segrout index 4
router ospf6 1 bier index 4
shutdown
no log-link-change
exit
!
interface loopback0
description POZ0001@lo0
vrf forwarding CORE
ipv4 address 10.4.4.4 255.255.255.255
ipv6 address fd00:51e5::a:4:4:4 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
template template1
router ospf4 1 unsuppress-prefix
router ospf6 1 unsuppress-prefix
no shutdown
exit
!
interface loopback2001
no description
vrf forwarding v2
ipv4 address 2.2.2.4 255.255.255.255
ipv6 address 2222::4 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
no shutdown
no log-link-change
exit
!
interface loopback20965
no description
vrf forwarding INB_MGNT
ipv4 address 172.16.66.4 255.255.255.255
no shutdown
no log-link-change
exit
!
interface loopback3
no description
vrf forwarding v3
ipv4 address 192.0.0.123 255.255.255.255
mpls enable
mpls rsvp4
router isis4 3 enable
router isis4 3 circuit level2
router isis4 3 traffeng bandwidth 1000000000
no shutdown
no log-link-change
exit
!
interface ethernet0
description CPU_PORT _NEVER_EVER_ CONFIGURE IT
no shutdown
no log-link-change
exit
!
interface ethernet1
description out of band management port
macaddr 0001.0a04.0404
vrf forwarding oob
ipv4 address dynamic dynamic
ipv4 gateway-prefix all4
ipv4 dhcp-client enable
ipv4 dhcp-client early
ipv6 address dynamic dynamic
ipv6 gateway-prefix all6
ipv6 slaac
ipv6 prefix-suppress
no shutdown
no log-link-change
exit
!
interface sdn1
description POZ0001@1/0.46 -> BUD0001@1/0.46 - IPv4/IPv6
mtu 9000
macaddr 0013.7144.040d
vrf forwarding CORE
ipv4 address 10.1.34.4 255.255.255.0
ipv6 address fd00:51e5::a:1:34:4 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn2
description POZ0001@2/0 -> AMS0001@2/0
mtu 9000
macaddr 005f.4213.040e
template template1
no shutdown
exit
!
interface sdn2.2200
description LAYER 2 VLAN 2200 to AMS1
macaddr 2200.2204.0002
vrf forwarding ppn
ipv4 address 10.22.0.4 255.255.255.0
no shutdown
no log-link-change
exit
!
interface sdn3
no description
mtu 1500
macaddr 0067.1922.2a19
lldp enable
no shutdown
no log-link-change
exit
!
interface sdn3.107
description [GEANT SVC ID] -> [05:00.0]
vrf forwarding CORE
ipv4 address 10.4.12.4 255.255.255.0
ipv6 address fd00:51e5::a:4:c:4 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn4
description POZ0001@31/0 -> SPIRENT@PSCN-#1
mtu 2000
macaddr 0031.645a.1c09
lldp enable
cdp enable
vrf forwarding v3
ipv4 address 192.88.1.1 255.255.255.0
mpls enable
mpls rsvp4
router ospf4 3 enable
router ospf4 3 area 0
router isis4 3 enable
router isis4 3 circuit level2
router isis4 3 traffeng bandwidth 1000000000
no shutdown
no log-link-change
exit
!
interface sdn5
no description
mtu 1500
macaddr 005c.4d0e.3544
no shutdown
no log-link-change
exit
!
interface sdn6
no description
mtu 2000
macaddr 005c.4716.0856
lldp enable
vrf forwarding v3
ipv4 address 192.86.1.1 255.255.255.0
mpls enable
mpls rsvp4
router ospf4 3 enable
router ospf4 3 area 0
router isis4 3 enable
router isis4 3 circuit level2
router isis4 3 traffeng bandwidth 1000000000
no shutdown
no log-link-change
exit
!
interface sdn7
no description
mtu 2000
macaddr 002b.2227.0a75
lldp enable
vrf forwarding v3
ipv4 address 192.87.1.1 255.255.255.0
mpls enable
mpls rsvp4
router ospf4 3 enable
router ospf4 3 area 0
router isis4 3 enable
router isis4 3 circuit level2
router isis4 3 traffeng bandwidth 1000000000
no shutdown
no log-link-change
exit
!
router bgp4 1
vrf CORE
local-as 64512
router-id 10.4.4.4
address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor 10.3.3.3 remote-as 64512
no neighbor 10.3.3.3 description
neighbor 10.3.3.3 local-as 64512
neighbor 10.3.3.3 address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor 10.3.3.3 distance 200
neighbor 10.3.3.3 update-source loopback0
neighbor 10.3.3.3 pmsitun
neighbor 10.3.3.3 send-community all
afi-vrf INB_MGNT enable
afi-vrf INB_MGNT redistribute connected
redistribute connected
redistribute static
exit
!
router bgp4 3
vrf v3
local-as 1001
router-id 10.85.1.1
address-family unicast
template as100 remote-as 100
no template as100 description
template as100 local-as 1001
template as100 address-family unicast
template as100 distance 20
neighbor 10.85.1.2 template as100
neighbor 10.85.128.2 template as100
neighbor 10.85.128.6 template as100
exit
!
router bgp6 1
vrf CORE
local-as 64512
router-id 10.4.4.4
address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor fd00:51e5::a:3:3:3 remote-as 64512
no neighbor fd00:51e5::a:3:3:3 description
neighbor fd00:51e5::a:3:3:3 local-as 64512
neighbor fd00:51e5::a:3:3:3 address-family unicast multicast vpnuni ovpnuni
vpls evpn
neighbor fd00:51e5::a:3:3:3 distance 200
neighbor fd00:51e5::a:3:3:3 update-source loopback0
neighbor fd00:51e5::a:3:3:3 pmsitun
neighbor fd00:51e5::a:3:3:3 send-community all
redistribute connected
redistribute static
exit
!
proxy-profile oob
vrf oob
exit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route oob 172.16.11.0 255.255.255.0 172.16.26.254
ipv4 route oob 192.168.113.0 255.255.255.0 172.16.26.254
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
sensor bgp4peer
path bgp4/peer/peer
prefix freertr-bgp4peer
prepend bgp4_peer_
command sho ipv4 bgp 1 summ
name 4 peer=
key name bgp4/peer
replace \. _
column 1 name learn
column 2 name advert
column 3 name state
column 3 replace false 0
column 3 replace true 1
exit
!
sensor bgp4perf
path bgp4/perf/perf
prefix freertr-bgp4perf
prepend bgp4_perf_
command sho ipv4 bgp 1 best | exc last
key name bgp4/perf
replace \s _
column 1 name val
exit
!
sensor bgp6peer
path bgp6/peer/peer
prefix freertr-bgp6peer
prepend bgp6_peer_
command sho ipv6 bgp 1 summ
name 4 peer=
key name bgp6/peer
replace \: _
column 1 name learn
column 2 name advert
column 3 name state
column 3 replace false 0
column 3 replace true 1
exit
!
sensor bgp6perf
path bgp6/perf/perf
prefix freertr-bgp6perf
prepend bgp6_perf_
command sho ipv6 bgp 1 best | exc last
key name bgp6/perf
replace \s _
column 1 name val
exit
!
sensor dvigp4int
path dvigp4int/peer/peer
prefix freertr-dvigp4int
prepend dvigp4_iface_
command sho ipv4 pvrp 1 interface
name 0 proto="pvrp1",ifc=
key name dvigp4int/peer
replace \. _
column 1 name neighbors
exit
!
sensor dvigp4peer
path dvigp4peer/peer/peer
prefix freertr-dvigp4peer
prepend dvigp4_peers_
command sho ipv4 pvrp 1 summary
name 4 proto="pvrp1",ip=
key name dvigp4peer/peer
replace \. _
column 5 name learn
column 6 name advert
exit
!
sensor dvigp6int
path dvigp6int/peer/peer
prefix freertr-dvigp6int
prepend dvigp6_iface_
command sho ipv6 pvrp 1 interface
name 0 proto="pvrp1",ifc=
key name dvigp6int/peer
replace \. _
column 1 name neighbors
exit
!
sensor dvigp6peer
path dvigp6peer/peer/peer
prefix freertr-dvigp6peer
prepend dvigp6_peers_
command sho ipv6 pvrp 1 summary
name 4 proto="pvrp1",ip=
key name dvigp6peer/peer
replace \: _
column 5 name learn
column 6 name advert
exit
!
sensor ifaces-hw
path interfaces-hw/interface/counter
prefix freertr-ifaces
prepend iface_hw_byte_
command sho inter hwsumm
name 0 ifc=
key name interfaces-hw/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-hwp
path interfaces-hwp/interface/counter
prefix freertr-ifaces
prepend iface_hw_pack_
command sho inter hwpsumm
name 0 ifc=
key name interfaces-hwp/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-sw
path interfaces-sw/interface/counter
prefix freertr-ifaces
prepend iface_sw_byte_
command sho inter swsumm
name 0 ifc=
key name interfaces-sw/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-swp
path interfaces-hw/interface/counter
prefix freertr-ifaces
prepend iface_hw_byte_
command sho inter hwsumm
name 0 ifc=
key name interfaces-hw/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor lsigp4int
path lsigp4int/peer/peer
prefix freertr-lsigp4int
prepend lsigp4_iface_
command sho ipv4 ospf 1 interface
name 0 proto="ospf1",ifc=
key name lsigp4int/peer
replace \. _
column 1 name neighbors
exit
!
sensor lsigp4peer
path lsigp4peer/peer/peer
prefix freertr-lsigp4peer
prepend lsigp4_peers_
command sho ipv4 ospf 1 topology 0
name 0 proto="ospf1",node=
key name lsigp4peer/peer
replace \. _
column 1 name reachable
column 1 replace false 0
column 1 replace true 1
column 6 name neighbors
exit
!
sensor lsigp4perf
path lsigp4perf/peer/peer
prefix freertr-lsigp4perf
prepend lsigp4_perf_
command sho ipv4 ospf 1 spf 0 | inc reachable|fill|calc|run
key name lsigp4perf/peer
labels proto="ospf1"
skip 0
column 1 name val
exit
!
sensor lsigp6int
path lsigp6int/peer/peer
prefix freertr-lsigp6int
prepend lsigp6_iface_
command sho ipv6 ospf 1 interface
name 0 proto="ospf1",ifc=
key name lsigp6int/peer
replace \. _
column 1 name neighbors
exit
!
sensor lsigp6peer
path lsigp6peer/peer/peer
prefix freertr-lsigp6peer
prepend lsigp6_peers_
command sho ipv6 ospf 1 topology 0
name 0 proto="ospf1",node=
key name lsigp6peer/peer
replace \. _
replace \/ _
column 1 name reachable
column 1 replace false 0
column 1 replace true 1
column 6 name neighbors
exit
!
sensor lsigp6perf
path lsigp6perf/peer/peer
prefix freertr-lsigp6perf
prepend lsigp6_perf_
command sho ipv6 ospf 1 spf 0 | inc reachable|fill|calc|run
key name lsigp6perf/peer
labels proto="ospf1"
skip 0
column 1 name val
exit
!
sensor routing4
path routing4/peer/peer
prefix freertr-routing4
prepend routing4_
command sho ipv4 protocol v1 | beg computed
name 0 proto=
key name routing4/peer
addname 1 * id=
skip 2
column 2 name ifaces
column 3 name neighbors
column 4 name computed_unicast
column 5 name computed_multicast
column 6 name computed_flowspec
column 7 name computed_changed
column 9 name redisted_unicast
column 10 name redisted_multicast
column 11 name redisted_flowspec
column 12 name redisted_changed
exit
!
sensor routing6
path routing6/peer/peer
prefix freertr-routing6
prepend routing6_
command sho ipv6 protocol v1 | beg computed
name 0 proto=
key name routing6/peer
addname 1 * id=
skip 2
column 2 name ifaces
column 3 name neighbors
column 4 name computed_unicast
column 5 name computed_multicast
column 6 name computed_flowspec
column 7 name computed_changed
column 9 name redisted_unicast
column 10 name redisted_multicast
column 11 name redisted_flowspec
column 12 name redisted_changed
exit
!
sensor sensor
path sensor/peer/peer
prefix freertr-sensor
prepend sensor_
command sho sensor
name 0 met=
key name sensor/peer
column 1 name asked
column 2 name time
exit
!
alias test tna-asic-temp command attach shell1 /opt/freertr/bin/sh_tna_temp.sh
alias test tna-asic-temp description display forwarding asic cpu temperature
!
alias test tna-linux-access command ssh 10.255.255.1 /vrf lin /user sysadmin
/pass sysadmin
alias test tna-linux-access description access linux console
!
alias test tna-linux-temp command attach shell2 acpi -V
alias test tna-linux-temp description display main cpu temperature
!
alias test tna-port-detect command attach shell1
/opt/freertr/bin/sh_tna_ports.sh
alias test tna-port-detect cmd2nd test hwpop uclipm
/etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply add
alias test tna-port-detect description Detect TOFINO ports
!
alias test tna-port-remove command attach shell1
/opt/freertr/bin/sh_tna_ports.sh
alias test tna-port-remove cmd2nd test hwpop uclipm
/etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply del
alias test tna-port-remove description Remove NON RDY TOFINO ports
!
server telnet INB_MGNT
security protocol telnet
exec logging
no exec authorization
no login authentication
login logging
interface loopback20965
vrf INB_MGNT
exit
!
server telnet oob
security authentication usr
security rsakey rsa
security dsakey dsa
security ecdsakey ecdsa
second-port 22
exec logging
no exec authorization
login authentication usr
login logging
vrf oob
exit
!
server telnet p4
security protocol telnet
exec logging
no exec authorization
no login authentication
login logging
vrf p4
exit
!
server telnet v3
security protocol telnet
exec privilege 0
no exec authorization
no login authentication
vrf v3
exit
!
server p4lang p4
export-vrf CORE 1
export-vrf v2 2
export-vrf v3 3
export-vrf INB_MGNT 4
export-port sdn6 48 100 0 0 0
export-port sdn1 128 10 0 0 0
export-port sdn4 132 100 0 0 0
export-port sdn2 136 10 0 0 0
export-port sdn5 140 100 0 0 0
export-port sdn3 144 10 0 0 0
export-port sdn7 172 100 0 0 0
export-port sdn3.107 207 10 0 0 0
interconnect ethernet0
vrf p4
exit
!
server prometheus pr
sensor bgp4peer
sensor bgp4perf
sensor bgp6peer
sensor bgp6perf
sensor dvigp4int
sensor dvigp4peer
sensor dvigp6int
sensor dvigp6peer
sensor ifaces-hw
sensor ifaces-hwp
sensor ifaces-sw
sensor ifaces-swp
sensor lsigp4int
sensor lsigp4peer
sensor lsigp4perf
sensor lsigp6int
sensor lsigp6peer
sensor lsigp6perf
sensor routing4
sensor routing6
sensor sensor
vrf oob
exit
!
client proxy oob
client name-server 1.1.1.1
client upgrade-server http://upgrade.nop.hu/
client upgrade-backup
client config-server http://wdv.rare.nmaas.eu/webdav/
client config-username rare
client config-password $v10$cmFyZQ==
client config-backup
client config-archive
client time-server europe.pool.ntp.org
client time-zone CET
!
end
POZ0001#
Attachment:
GP4L archi.pdf
Description: Adobe PDF document
hostname FRA0001
buggy
!
logging buffered debug 10240
logging file debug /var/log/freertr.log
logging rotate 655360000 /var/log/freertr.old
!
crypto rsakey rsa import
$v10$TUlJRW9RSUJBQUtDQVFCMUVuVU5ydHdxL3dxUkNlcVdLcWdEYitlZ3dVMisyNG5CbVYxL2JZTW9QSnUrT2Z1eGFPUGIxTEpr
eWU2cEtQRGE4UllXWlVkNE1yVG9ERlUzVTdPSEdiN25WQVd6Q0cyell0Y2Z3THRzV0lQNlUvb0ZlZ1I3K0QwaHhQeFlmaituWHFuQmlqT0gwZGcrbk5QSjJmdmdDL3
Z3c0JKODhCZjUyMmRqanVQd2pDRzlOcVFHVWNLMTQybFdxRTNaYXBvMGJwSi8wWXlKYUJPTCtRZzlJVUxOMDgxUGp4QjNJMHpZSGNxMU5mOW1wNEVybWlnSnZ1MEw5
KytsK0ZTT1J2REZhdGkxL0J1UDhBWnNOcTM5V2FtZVFjN0FiVm9VNWt5SExad1VxRmFET21IOXQ5ZmVFSXJTTC9lVEQ0T2NTNlE3cnRsKzdtcWsvQytxRjRMdFhabT
FBZ01CQUFFQ2dnRUFSczQ3OTJPYmkzR25IV09HK3YyZmtqeWJOZEhUeUt3VTIvOTYyZmdOREVmajFpQlJodEl1aGFWVm83bXgyNk9FVUpiaFNmaEZTb0E0ZytQNW9q
WEFiZVIzWG9lbHpzczVOZmFBcjVhc2hISGdtSVV6d1I0MEdocGdOczFoNWMrdGhmZXQ2ZjFBLzFNK1cxZ1VpNCtJVTlCTHR4MTJnUlBoSEYvRFh5WnIyKzdEU1AxUm
JyK0YvR0ZwemxRTHI4aDhuTlRqUHhQOFF2Q1Fxb1dOdUhpQTErTktmZjFyN1FRSlJXRTdIVmJlWDl3YWkxSiswcWdwZy8xZTEzR2FKUGVQSmVsOVpqY2tuQTN2ditS
eDBsSW5YdzhVYXBGdmVCaStLcmZHNHdIMVN6U3lMVHdaWWhWRE9hZTBnbEhJeDZJVWVEM2EzQk5DeFBWLzBOYS9JT0VKL1FLQmdRQzJBWEVmZWUwaU5EeFJMU2xOcG
9TNlNVQkozYmd2dDBLTHVFWHB4Y2lsRFg0Q3QvS3RWWW5ycUpjUE84UGVGdWtMQlFqS3ZNUFNYaTRuYjBjY2kxMjM1UituQjgwdUc1UkVCcHo4TElLN3dtT0xUY0Vh
bS9SNTJqS1BDOFZXdnNBaFhGQ2xTdlIzUFRMQ0lkTmxvc29aSmxudm5yK1NhcldpSFVCMnB2dzM4d0tCZ1FDa3F2Rm12Q3J2RlNIdDlPeUlRM1RxM3RRbGxzZzI0aX
ZxQ3VGeDcraFp3S1R1eU5ONUtLT25SejAwVEdXcEQzT3VYUmoranUreWV5anVjeWVvMDZSeGxHaEp3T2puaDl3amNmRUhvRnlEdkd5K2JCUmQ4bnM5dXczcG9VZFdr
RSs0VkJEZnpNWkNTT1RwRUFma1lXZ1lmNytHZFhEVHFwdkdtTTNnZnBHNXR3S0JnRW1HWFplVW5zcEJoZGhaUVNWQVRzQWVsVjBCdDhWMjUrZ2ZvZ2FsUXNBQ3FsUV
kwVzFhYitRR2NEZlVNZlVIRmsvQVVlUHN5OEt4RHo0WkF3WXgrc011U1ZJbG9hcXRzNENqbDBsOEJiZ3ArQ0t2WDRJTFhJRFpON0YzMU5tTkozcVNtM1dheVJWZVlL
SHlIajhodXpqYnVGdEhxeVpQKzE0cEtRQ0Z4c0FuQW9HQWZTekJRMEtKTktPUTNrM1FQS2xpeUdSSlNxVzdYeFZCSXJIUXZRY05UcVVGKzhySUR4TVlqTUczd2ZqTl
V0Mi9KMjMzNFJLUkhkRkh4VFBla3hVSHJadU9SM3FRMGVoU0xOT2gwUlZUSG9WdStMWTZLVXg1Nk93MzRFRE1kUDVReTZPRURFeWk3YUp4K01WSjZvOHRUV3BYRW9S
V0YyRmE5M1lURXJQRVhUTUNnWUFiZ1lBUlBEdFpVSjE5UExGMlZMUW84cE9BSmdlK2tlMjN1TEZIcnNHd0M1N01CSDJkMWZaZ3pRSTFnS0t5YktVL0l2Nko2RTBtem
9PQ29RemZKcmpadmVhdXU1QWljU1VzcFowZnhZQS9keFVaUnE3allkWjFLanBNeFZuYXd2cUwwVTlscHdHS3loK1AxcngyMm00NFBTOE42bUJKTFk0QVNOOWRwYlMz
dnc9PQ==
!
crypto dsakey dsa import
$v10$TUlJQnV3SUJBQUtCZ1FDK3JTUzkyajk0azRHNFZCQU9NdzNHcG80TDY0SlRmMDNyYUc3NEVrRHRSRGlmdEFjM1B5aDBuZDln
aDJISEk4TUtiVy9hWUNyOStDTkhNU1dURUdoME9qc0JZTkQ0eDZ3RFZqYTluQlh5dytPcURFbTVlZzBJWXBQdDVvTDhUcWhOZzF2L1lLeUsvM3E0dGEzQ3FtWDlROE
1KTG91Vk1pVHlRVjNpcFFBN3p3SVZBTlRvWHVIVUZ5TGI3eEd0ejJDWkhoZjBBNytIQW9HQVV0ZkxxUWhpUVlnQStFOXo4ZEtXK0xSY2FtZTFBS2gvSUNjejB6aGMx
ZmZUVzUzNE5SRWt5NVZ2alM1N05na2d5L1E2cmVtV2xkcUlIc1pzYlBFL3U3bUVpMFU1bFovTlE3bmQ3QkNURmM4R2dFekUySzJhMG41V2hpTmJzZ1ozc2pTYTZjeD
ZOSndiRnYrMFdHeGN3RC9WY3RKWXNpWlpSbWt4TjJlN1o2OENnWUFXSWp3OVdGRktlbmpGSE50ZC9ZR2VHd3VESjhRLzVUQkhSTm81SkN4NVUyd2JJblJGaVNyZm5u
N1ZjUkxjL3BWL0tOR3BRbzUrUEN5MzNtcytyNlZXTUZrT3JFRWdJS0JaSTZBdUFVMHQvc2YxQk5uYXN0U0pISVdabUR4Nko1UmtvUXNFNHF4NTEyMnpuc216a0xNam
wxV0p1QVl1Ny9LbmJyeEM3cU45M0FJVkFNSXQ5eXRVeHZ1QmlJQnczRU9EN2RxSHUvdlk=
!
crypto ecdsakey ecdsa import
$v10$TUhRQ0FRRUVJQUMxZmN3b1VoalQvK0crd2pTeGN5bDRJYTJvV0Y5QWc0dXc0SURqRG9DVm9BY0dCU3VCQkFBS29VUURR
Z0FFMmhjYTh2NmpHYnpONXkrNGZrakZZQlNjemhoZXB2UWI5ZlFpVFpqWGxUUjVDOStnVnNGNHIrbHRtaUlzUlJJR1FBc294OEtYelpWd0RYOG1ORGNPL3c9PQ==
!
aaa userlist usr
username rare
username rare password $v10$cmFyZQ==
exit
!
scheduler errors
time 600000
delay 30000
command clear errors
start
exit
!
scheduler upgrade
time 600000
delay 60000
random-time 60000
random-delay 300000
command flash upgrade
start
exit
!
prefix-list all4
sequence 10 permit 0.0.0.0/0 ge 0 le 0
exit
!
prefix-list all6
sequence 10 permit ::/0 ge 0 le 0
exit
!
bridge 1
rd 1:6
rt-import 1:6
rt-export 1:6
mac-learn
mac-age 99999999
exit
!
vrf definition CORE
rd 1:1
rt-import 1:1
rt-export 1:1
iface4start 1000
iface6start 1000
label-mode per-prefix
exit
!
vrf definition INB_MGNT
rd 20965:2
rt-import 20965:1
rt-export 20965:1
exit
!
vrf definition lin
exit
!
vrf definition oob
exit
!
vrf definition p4
description P4 VRF _NEVER_EVER_ CONFIGURE IT
exit
!
vrf definition PPN
rd 2200:2
exit
!
vrf definition v2
rd 1:2
rt-import 1:2
rt-export 1:2
exit
!
router ospf4 1
vrf CORE
router-id 10.2.2.2
traffeng-id 0.0.0.0
segrout 100
bier 256 100
area 0 enable
area 0 spf-bidir
area 0 segrout
area 0 bier
exit
!
router ospf6 1
vrf CORE
router-id 10.2.2.2
traffeng-id ::
segrout 100
bier 256 100
area 0 enable
area 0 spf-bidir
area 0 segrout
area 0 bier
exit
!
router pvrp4 1
vrf v2
router-id 1.1.1.1
redistribute connected
exit
!
router pvrp6 1
vrf v2
router-id 1.1.1.1
redistribute connected
exit
!
interface template1
description core links
lldp enable
vrf forwarding CORE
ipv4 address dynamic dynamic
ipv4 pim enable
ipv4 pim bier-tunnel 2
ipv4 pim join-source loopback0
ipv6 address dynamic dynamic
ipv6 enable
ipv6 pim enable
ipv6 pim bier-tunnel 2
ipv6 pim join-source loopback0
polka enable 2 65536 100
mpls enable
mpls rsvp4
mpls rsvp6
router ospf4 1 enable
router ospf4 1 area 0
router ospf4 1 suppress-prefix
router ospf4 1 segrout index 2
router ospf4 1 bier index 2
router ospf6 1 enable
router ospf6 1 area 0
router ospf6 1 suppress-prefix
router ospf6 1 segrout index 2
router ospf6 1 bier index 2
shutdown
no log-link-change
exit
!
interface loopback0
description FRA0001@lo0
vrf forwarding CORE
ipv4 address 10.2.2.2 255.255.255.255
ipv6 address fd00:51e5::a:2:2:2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
template template1
router ospf4 1 unsuppress-prefix
router ospf6 1 unsuppress-prefix
no shutdown
exit
!
interface loopback2001
no description
vrf forwarding v2
ipv4 address 2.2.2.2 255.255.255.255
ipv6 address 2222::2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
no shutdown
no log-link-change
exit
!
interface loopback20965
no description
vrf forwarding INB_MGNT
ipv4 address 172.16.66.2 255.255.255.255
no shutdown
no log-link-change
exit
!
interface bvi1
no description
no shutdown
no log-link-change
exit
!
interface ethernet0
description CPU_PORT _NEVER_EVER_ CONFIGURE IT
no shutdown
no log-link-change
exit
!
interface ethernet1
description out of band management port
macaddr 0001.0a02.0202
vrf forwarding oob
ipv4 address dynamic dynamic
ipv4 gateway-prefix all4
ipv4 host-watch
ipv4 dhcp-client enable
ipv4 dhcp-client early
ipv6 address dynamic dynamic
ipv6 gateway-prefix all6
ipv6 slaac
ipv6 prefix-suppress
no shutdown
no log-link-change
exit
!
interface sdn1
description FRA0001@1/0 -> AMS0001@1/0
mtu 9000
macaddr 0012.1678.0249
vrf forwarding CORE
ipv4 address 10.1.12.2 255.255.255.0
ipv6 address fd00:51e5::a:1:12:2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn1.2200
description FRA0001@1/0 -> AMS@1/0 Layer2 VLAN 2200 to
vrf forwarding PPN
ipv4 address 10.22.0.2 255.255.255.0
no shutdown
no log-link-change
exit
!
interface sdn2
description FRA0001@2/0.46 -> BUD0001@2/0.46 - IPv4/IPv6
mtu 9000
macaddr 004e.0503.6d26
vrf forwarding CORE
ipv4 address 10.1.23.2 255.255.255.0
ipv6 address fd00:51e5::a:1:23:2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3
no description
mtu 1500
macaddr 0025.7460.4022
no shutdown
no log-link-change
exit
!
interface sdn3.101
description -> HAM0101@GTS
lldp enable
vrf forwarding CORE
ipv4 address 10.2.101.1 255.255.255.0
ipv4 pim enable
ipv4 pim bier-tunnel 2
ipv4 multicast host-enable
ipv6 address fd00:51e5:65::a:2:65:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
ipv6 enable
ipv6 multicast mldp-enable
no shutdown
no log-link-change
exit
!
interface sdn3.103
no description
vrf forwarding CORE
ipv4 address 10.1.210.1 255.255.255.0
ipv6 address fd00:51e5::a:1:d2:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3.104
description -> PRA-BMS8[PRA0101]@GTS
lldp enable
vrf forwarding CORE
ipv4 address 10.2.104.2 255.255.255.0
ipv6 address fd00:51e5:68::a:2:68:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
ipv6 enable
ipv6 multicast mldp-enable
no shutdown
no log-link-change
exit
!
interface sdn3.1213
description -- dub-fra_RAREP4_HEANet_20062 / mx1.fra.de@xe-3/2/1.1213 <--> :
--
vrf forwarding CORE
ipv4 address 10.12.13.1 255.255.255.0
ipv6 address fd00:515e:4bd::a:c:d:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3.559
description -> [#fra-gen-SWITCH-RARE-21035]
vrf forwarding CORE
ipv4 address 10.55.9.1 255.255.255.0
ipv6 address fd00:515e:22f::a:37:9:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3.702
description -- DTN@PAR-GEANT-POP --
mtu 9000
macaddr 0067.1922.2a19
vrf forwarding v2
ipv4 address 10.10.10.1 255.255.255.252
ipv6 address fd00:bad:c0de:2::1 ffff:ffff:ffff:ffff::
ipv6 enable
no shutdown
no log-link-change
exit
!
interface sdn3.766
no description
vrf forwarding CORE
ipv4 address 10.7.66.1 255.255.255.0
ipv6 address fd00:515e:2fe::a:7:42:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface tunnel2211
description POLKA tunnel from FRA0001[2] -> AMS0001[1]
tunnel vrf CORE
tunnel source loopback0
tunnel destination 10.1.1.1
tunnel domain-name 10.3.3.3 10.4.4.4
tunnel mode polka
vrf forwarding CORE
ipv4 address 10.11.22.2 255.255.255.0
no shutdown
no log-link-change
exit
!
router bgp4 1
vrf CORE
local-as 64512
router-id 10.2.2.2
address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor 10.3.3.3 remote-as 64512
no neighbor 10.3.3.3 description
neighbor 10.3.3.3 local-as 64512
neighbor 10.3.3.3 address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor 10.3.3.3 distance 200
neighbor 10.3.3.3 update-source loopback0
neighbor 10.3.3.3 pmsitun
neighbor 10.3.3.3 send-community all
afi-vrf INB_MGNT enable
afi-vrf INB_MGNT redistribute connected
afi-evpn 106 bridge-group 1
afi-evpn 106 bmac 0058.2573.1d0b
afi-evpn 106 encapsulation cmac
redistribute connected
redistribute static
exit
!
router bgp6 1
vrf CORE
local-as 64512
router-id 10.2.2.2
address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor fd00:51e5::a:3:3:3 remote-as 64512
no neighbor fd00:51e5::a:3:3:3 description
neighbor fd00:51e5::a:3:3:3 local-as 64512
neighbor fd00:51e5::a:3:3:3 address-family unicast multicast vpnuni ovpnuni
vpls evpn
neighbor fd00:51e5::a:3:3:3 distance 200
neighbor fd00:51e5::a:3:3:3 update-source loopback0
neighbor fd00:51e5::a:3:3:3 pmsitun
neighbor fd00:51e5::a:3:3:3 send-community all
redistribute connected
redistribute static
exit
!
proxy-profile oob
vrf oob
exit
!
!
ipv4 route CORE 48.0.0.0 255.255.255.0 10.2.101.6
ipv4 route CORE 102.0.0.0 255.255.255.0 10.2.101.6
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route oob 172.16.11.0 255.255.255.0 172.16.26.254
ipv4 route oob 192.168.113.0 255.255.255.0 172.16.26.254
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
sensor bgp4peer
path bgp4/peer/peer
prefix freertr-bgp4peer
prepend bgp4_peer_
command sho ipv4 bgp 1 summ
name 4 peer=
key name bgp4/peer
replace \. _
column 1 name learn
column 2 name advert
column 3 name state
column 3 replace false 0
column 3 replace true 1
exit
!
sensor bgp4perf
path bgp4/perf/perf
prefix freertr-bgp4perf
prepend bgp4_perf_
command sho ipv4 bgp 1 best | exc last
key name bgp4/perf
replace \s _
column 1 name val
exit
!
sensor bgp6peer
path bgp6/peer/peer
prefix freertr-bgp6peer
prepend bgp6_peer_
command sho ipv6 bgp 1 summ
name 4 peer=
key name bgp6/peer
replace \: _
column 1 name learn
column 2 name advert
column 3 name state
column 3 replace false 0
column 3 replace true 1
exit
!
sensor bgp6perf
path bgp6/perf/perf
prefix freertr-bgp6perf
prepend bgp6_perf_
command sho ipv6 bgp 1 best | exc last
key name bgp6/perf
replace \s _
column 1 name val
exit
!
sensor dvigp4int
path dvigp4int/peer/peer
prefix freertr-dvigp4int
prepend dvigp4_iface_
command sho ipv4 pvrp 1 interface
name 0 proto="pvrp1",ifc=
key name dvigp4int/peer
replace \. _
column 1 name neighbors
exit
!
sensor dvigp4peer
path dvigp4peer/peer/peer
prefix freertr-dvigp4peer
prepend dvigp4_peers_
command sho ipv4 pvrp 1 summary
name 4 proto="pvrp1",ip=
key name dvigp4peer/peer
replace \. _
column 5 name learn
column 6 name advert
exit
!
sensor dvigp6int
path dvigp6int/peer/peer
prefix freertr-dvigp6int
prepend dvigp6_iface_
command sho ipv6 pvrp 1 interface
name 0 proto="pvrp1",ifc=
key name dvigp6int/peer
replace \. _
column 1 name neighbors
exit
!
sensor dvigp6peer
path dvigp6peer/peer/peer
prefix freertr-dvigp6peer
prepend dvigp6_peers_
command sho ipv6 pvrp 1 summary
name 4 proto="pvrp1",ip=
key name dvigp6peer/peer
replace \: _
column 5 name learn
column 6 name advert
exit
!
sensor ifaces-hw
path interfaces-hw/interface/counter
prefix freertr-ifaces
prepend iface_hw_byte_
command sho inter hwsumm
name 0 ifc=
key name interfaces-hw/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-hwp
path interfaces-hwp/interface/counter
prefix freertr-ifaces
prepend iface_hw_pack_
command sho inter hwpsumm
name 0 ifc=
key name interfaces-hwp/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-sw
path interfaces-sw/interface/counter
prefix freertr-ifaces
prepend iface_sw_byte_
command sho inter swsumm
name 0 ifc=
key name interfaces-sw/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-swp
path interfaces-swp/interface/counter
prefix freertr-ifaces
prepend iface_sw_pack_
command sho inter swpsumm
name 0 ifc=
key name interfaces-swp/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor lsigp4int
path lsigp4int/peer/peer
prefix freertr-lsigp4int
prepend lsigp4_iface_
command sho ipv4 ospf 1 interface
name 0 proto="ospf1",ifc=
key name lsigp4int/peer
replace \. _
column 1 name neighbors
exit
!
sensor lsigp4peer
path lsigp4peer/peer/peer
prefix freertr-lsigp4peer
prepend lsigp4_peers_
command sho ipv4 ospf 1 topology 0
name 0 proto="ospf1",node=
key name lsigp4peer/peer
replace \. _
column 1 name reachable
column 1 replace false 0
column 1 replace true 1
column 6 name neighbors
exit
!
sensor lsigp4perf
path lsigp4perf/peer/peer
prefix freertr-lsigp4perf
prepend lsigp4_perf_
command sho ipv4 ospf 1 spf 0 | inc reachable|fill|calc|run
key name lsigp4perf/peer
labels proto="ospf1"
skip 0
column 1 name val
exit
!
sensor lsigp6int
path lsigp6int/peer/peer
prefix freertr-lsigp6int
prepend lsigp6_iface_
command sho ipv6 ospf 1 interface
name 0 proto="ospf1",ifc=
key name lsigp6int/peer
replace \. _
column 1 name neighbors
exit
!
sensor lsigp6peer
path lsigp6peer/peer/peer
prefix freertr-lsigp6peer
prepend lsigp6_peers_
command sho ipv6 ospf 1 topology 0
name 0 proto="ospf1",node=
key name lsigp6peer/peer
replace \. _
replace \/ _
column 1 name reachable
column 1 replace false 0
column 1 replace true 1
column 6 name neighbors
exit
!
sensor lsigp6perf
path lsigp6perf/peer/peer
prefix freertr-lsigp6perf
prepend lsigp6_perf_
command sho ipv6 ospf 1 spf 0 | inc reachable|fill|calc|run
key name lsigp6perf/peer
labels proto="ospf1"
skip 0
column 1 name val
exit
!
sensor routing4
path routing4/peer/peer
prefix freertr-routing4
prepend routing4_
command sho ipv4 protocol v1 | beg computed
name 0 proto=
key name routing4/peer
addname 1 * id=
skip 2
column 2 name ifaces
column 3 name neighbors
column 4 name computed_unicast
column 5 name computed_multicast
column 6 name computed_flowspec
column 7 name computed_changed
column 9 name redisted_unicast
column 10 name redisted_multicast
column 11 name redisted_flowspec
column 12 name redisted_changed
exit
!
sensor routing6
path routing6/peer/peer
prefix freertr-routing6
prepend routing6_
command sho ipv6 protocol v1 | beg computed
name 0 proto=
key name routing6/peer
addname 1 * id=
skip 2
column 2 name ifaces
column 3 name neighbors
column 4 name computed_unicast
column 5 name computed_multicast
column 6 name computed_flowspec
column 7 name computed_changed
column 9 name redisted_unicast
column 10 name redisted_multicast
column 11 name redisted_flowspec
column 12 name redisted_changed
exit
!
sensor sensor
path sensor/peer/peer
prefix freertr-sensor
prepend sensor_
command sho sensor
name 0 met=
key name sensor/peer
column 1 name asked
column 2 name time
exit
!
alias test tna-asic-temp command attach shell1 /opt/freertr/bin/sh_tna_temp.sh
alias test tna-asic-temp description display forwarding asic cpu temperature
!
alias test tna-linux-access command ssh 10.255.255.1 /vrf lin /user sysadmin
/pass sysadmin
alias test tna-linux-access description access linux console
!
alias test tna-linux-temp command attach shell2 acpi -V
alias test tna-linux-temp description display main cpu temperature
!
alias test tna-port-detect command attach shell1
/opt/freertr/bin/sh_tna_ports.sh
alias test tna-port-detect cmd2nd test hwpop uclipm
/etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply add
alias test tna-port-detect description Detect TOFINO ports
!
alias test tna-port-remove command attach shell1
/opt/freertr/bin/sh_tna_ports.sh
alias test tna-port-remove cmd2nd test hwpop uclipm
/etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply del
alias test tna-port-remove description Remove NON RDY TOFINO ports
!
server telnet INB_MGNT
security protocol telnet
exec logging
no exec authorization
no login authentication
login logging
interface loopback20965
vrf INB_MGNT
exit
!
server telnet oob
security authentication usr
security rsakey rsa
security dsakey dsa
security ecdsakey ecdsa
second-port 22
exec logging
no exec authorization
login authentication usr
login logging
vrf oob
exit
!
server telnet p4
security protocol telnet
exec logging
no exec authorization
no login authentication
login logging
vrf p4
exit
!
server p4lang p4
export-vrf CORE 1
export-vrf v2 2
export-vrf INB_MGNT 3
export-bridge 1
export-port sdn1 128 10 0 0 0
export-port sdn2 136 10 0 0 0
export-port sdn3 144 10 0 0 0
export-port sdn3.766 203 10 0 0 0
export-port sdn3.101 204 10 0 0 0
export-port sdn3.103 205 10 0 0 0
export-port sdn3.104 206 10 0 0 0
export-port tunnel2211 210 10 0 0 0
export-port sdn3.702 216 10 0 0 0
export-port sdn3.1213 300 10 0 0 0
export-port sdn3.559 301 10 0 0 0
interconnect ethernet0
vrf p4
exit
!
server prometheus pr
sensor bgp4peer
sensor bgp4perf
sensor bgp6peer
sensor bgp6perf
sensor dvigp4int
sensor dvigp4peer
sensor dvigp6int
sensor dvigp6peer
sensor ifaces-hw
sensor ifaces-hwp
sensor ifaces-sw
sensor ifaces-swp
sensor lsigp4int
sensor lsigp4peer
sensor lsigp4perf
sensor lsigp6int
sensor lsigp6peer
sensor lsigp6perf
sensor routing4
sensor routing6
sensor sensor
vrf oob
exit
!
client proxy oob
client name-server 1.1.1.1
client upgrade-server http://upgrade.nop.hu/
client upgrade-backup
client config-server http://wdv.rare.nmaas.eu/webdav/
client config-username rare
client config-password $v10$cmFyZQ==
client config-backup
client config-archive
client time-server europe.pool.ntp.org
client time-zone CET
!
end
FRA0001#
AMS0001#show running-config
hostname AMS0001
buggy
!
logging buffered debug 10240
logging file debug /var/log/freertr.log
logging rotate 655360000 /var/log/freertr.old
!
crypto rsakey rsa import
$v10$TUlJRW9nSUJBQUtDQVFCc01kdVFSTVlKTEF5TGlKUmNQUHJxSk
1GVit4YzJxU2tmM1AxaFhCNFpBbmtaKzV2akM1Wlh6Q0FxVTVNZHMzanVVT2F5aUVWMGIzTDYvbEYrSy
9tZ2V3c0hSYkdKQ0tPaERqSk1zeHBWTHg0REQ1cVdCQ3hWVVErR0VudHdGaG5OQ0FHdEZBTHJkdkVEUk
Q4NDBnZUF5N1NFb3FCWjFmRnhPcVJDS0ovTnBmT2xHRWZuTDUwZDh6N0o4bDFjZnYxTDI4Y1Z4TFFiZW
c0SFlzZUg5UmxTVWxHa210VWlJeXluYm1kckliNGZsSUlWMkFKMVR1cHFzdGpqQmt1WDdBSllNV3JnWm
IyRHVIZURMV1hEY3pYMHdJZ1BjK1dVWjVkNDZrejhndFRNVnB0VzF3M0FTbGxZa3EyWTBXT3RXQ2RzN2
kyZVhCdDJqdUsvRE4rTjR0b2hBZ01CQUFFQ2dnRUFHdk5zY3dwK25paEgwN1lvNXJVVjk1OUNQYTIzUV
psdnNnMDFYTHc2anhaTG5rcExzWW5nWUd4cmtyK1F4UFJBNm5SaWt4Ulk0TUVtVGhsdHFWVkE4RlhXRU
hDdTRhaXlRZHNzY21pbTVaTkFFWmtnYzhBRVh4ZzdHcldkNC9UTlpvSlpFSWtNbFNUaXNtS2NzUVc0Y3
IvTGJzS24yTmp2TkxwYjBsTVdRMzZBOVgrOUVmQnd2THFoVUQ2MEpuYkl4UkxMVG9WenFCZ3BaYU4rK2
pwQWpGRW9RRU4rL1lRV2ZiZ2xVWm8wOUh0SS9PSnBtQWY4anVVdVNtY2hJUmljcGhkenJzbW5scjNTTk
lyUlh1TzB6eHJ1RkNXbGIxK3paTzE5TUYvSGYwQTIrbk93bXpSMXhPNWpvNTZMOXdiSjg3TmU4MGNKVF
JKOTlCcnJpanVrVlFLQmdRQzFJOG10MWdVUHQ2TzJDUGwrbjRWSEE3Sy84TEl0TDcrVXkwdmxGUUJ0SV
FoUXJGTnhuTGRZeWtIdzdNaW1CemRpL2dDMzRQVHBxdlhvZ1cwaDNkcjhxazlpVFBwV2lnLzRhclpFSm
hNdExpNUJuZXlNWEM1cnVEVTZnSlhteVNqamFsWHpITHhzQWphdWdkRngybWlmbWJwUkl3ZTJxVXJmQU
JMMHZZSkpmd0tCZ1FDWTZLTVJxTFExbUxDQit6cUJxb0R5QTh1L29lS04vQTVBZ0paMWw3V2krb1N3ek
xBM0pIWWhWVnkyMHFpM1JGaTFKWDVHbXVtNjQ4ODhnWERXYkY1dUQwdHVwSTNaT1dXZHB5NmJHb3Nkc3
B6cmhXYkUyMThIbE5rYlBJcWY1d3p3eWtMZEJ5MkFqSUZITFd2ZSswV3pXVjVBOVZ6eVgxZUJuSjdBTU
hoc1h3S0JnRFR6ajBOSDZ4YmJJZnBXeVVoZ3JYOUM3My80aHIxNjFkQlRWWTVVQTFuamJDRFpIMU40OG
9mOEtDYWJzVlFIakFOZUtTdVhrVUMxZjBsR2ZIYUgram9lTnpLUE9pY09HUGtQaU5TSEpOZnlSZ2RjZV
FmVzhxTCtxR0Mvc2hKUy82YnJNTkR1dDQ0RFg2VEh3a2c4QnBXUlJNdnZKNVFZRFJEL1hvczQwdHRWQW
9HQVliTHl6a3V1cVRnZ1AwellPeFZJUWxvdWl3alNpc25zQ1VhZjNBN05IWTlYek9kY0NEK2h3dmFad0
s2azRrUW5NY2I5QWZ2bEwyWnplVU56WjIzaWdBd0J0SFlydEFtNlpacjJhbC94VjA1U2VTSEpZaXFRYz
NXbHFvTnFSM1VIamFxT1FrOWR3VzhGQXdlQWp2NlpzRmgvb3AyamY3RnZaZjgrWjZvUXA1MENnWUVBb2
dwb0ZkQk43STIzZVdLMTdXVUhMQW9aMVN6bStibUFHNm9CMWoyUWg5U1gxRFNiUEVzU2Y1L2xNZjlVRS
tVanZ4SzRLRWY1RGx4c1lLOTMxQkc2L01rcEg0NzkzTGoyOXNxRU5Ka1NJZVdIVkFLRlJiSWlTNzlHTT
RmVWFuelhYTHIxS3N3TEhIMldNdjVjaGI3bWdjb3dxbTVIb253UFd4ZG5EVHpHOE9FPQ==
!
crypto dsakey dsa import
$v10$TUlJQnR3SUJBQUtCZ0FEZW9uc01MRGdleTd3ajk2eGxlZEdGbk
xRK3ZiU3pwNjdpc0MxTHZzOEU2aWNTbk8zMThVMXlCZjB4eUk4bDkyTnVWbmdjN0lWMndtbnR4UktEZ0
w0VzBvaVRSR3ZMZjJtekpKbXEyNGtQTHZGZ1F2ZWZTT1N6Wk03VlkyeGZOQ3BlbWdUNjB2WlBqYUFOR3
lSR0tjUllFNzlPQmJZZHhYQVl0cldkS2JuVEFoVUFoa1RqZE5YWHRNYWhpWG5OWWsrdVZ5N2kwaXNDZ1
lBQWtnNldLMXd2Z3U0a1d3KzlTai83c3cyMHhLT3JyQXFqK3ZocVJmMkw2dEJHVkJPTzJ3RXI3bGdqRV
AxWDNHTktFMzcrSm1qdW8veFZDUXZLcVdhMnZJVkJVaE53ZGc5NmZxK2ZEU3JYMUcwaTgvMy9OMnBnVG
daaTZ1SzFvTzlIK2ZybVJMYm90WTAvMTZzbk5YS01VbE1NREhydWkyMTZTd3poNDg1VzJBSi9hL0h0Nm
hVL1R1MkN2U0NRbGZIOHF6MUtBb3QzaFF4VUpvM25FekQ5bXM4cmhob25iTjFkb1VBK21idjdWUUpOOX
RxcVZ2akpUa0VsMEQ1VUgrY1hKcmdvNThvVmpLVFgyVHNmdlNvTzBnZEpvMHlxdjM5aVZMYTVZUjgvbU
ZhNlhKZktaY0QrZWdZKzBkdG5hTEtEc1pDRE1IaUhJTkd5WXhYM241ejZ2QUlVQVF3WVdNZWh2OFJPdE
trL3N5eHkyc2xxSDNNPQ==
!
crypto ecdsakey ecdsa import
$v10$TUhNQ0FRRUVIeDE3d2xLWWdWaXNJbUM2SUpuclFIaWlocV
M5Z2dVM0l1cmo4U3c4TUlxZ0J3WUZLNEVFQUFxaFJBTkNBQVNlSVNhNHkwMEVwMy9DZXVFM3lEcEpRSn
Niam1HTERLMTFsdGdUY3NZTkRGL3dJRnRQbnhwaFFaQmhZbXQrWHlrZFV3VUxETnZEbTZLQjZOblcyTT
FQ
!
aaa userlist usr
username rare
username rare password $v10$cmFyZQ==
exit
!
scheduler errors
time 600000
delay 30000
command clear errors
start
exit
!
scheduler upgrade
time 600000
delay 60000
random-time 60000
random-delay 300000
command flash upgrade
start
exit
!
access-list AMS6SRCNETHAM7DSTNET
sequence 10 permit all 16.0.0.0 255.255.255.0 all 48.0.0.0 255.255.255.0 all
exit
!
access-list IPV4_ID_120
sequence 10 permit all any all any all flow 120
exit
!
access-list WITH_NMAAS_TEAM
sequence 10 permit all any all any all
exit
!
prefix-list all4
sequence 10 permit 0.0.0.0/0 ge 0 le 0
exit
!
prefix-list all6
sequence 10 permit ::/0 ge 0 le 0
exit
!
route-policy RPL_NMAAS_HUB
sequence 10 if network 172.16.11.0/24 ge 24 le 24
sequence 20 pass
sequence 30 enif
sequence 40 if network 192.168.113.0/24 ge 24 le 24
sequence 50 pass
sequence 60 enif
exit
!
bridge 1
mac-learn
exit
!
vrf definition CORE
iface4start 1000
iface6start 1000
exit
!
vrf definition INB_MGNT
rd 20965:1
rt-import 20965:1
rt-export 20965:1
exit
!
vrf definition lin
exit
!
vrf definition oob
rd 1:1
exit
!
vrf definition p4
description P4 VRF _NEVER_EVER_ CONFIGURE IT
exit
!
vrf definition ppn
rd 2200:1
exit
!
vrf definition v2
exit
!
router ospf4 1
vrf CORE
router-id 10.1.1.1
traffeng-id 0.0.0.0
segrout 100
bier 256 100
area 0 enable
area 0 spf-bidir
area 0 segrout
area 0 bier
exit
!
router ospf6 1
vrf CORE
router-id 10.1.1.1
traffeng-id ::
segrout 100
bier 256 100
area 0 enable
area 0 spf-bidir
area 0 segrout
area 0 bier
exit
!
router pvrp4 1
vrf v2
router-id 1.1.1.4
redistribute connected
exit
!
router pvrp6 1
vrf v2
router-id 1.1.1.4
redistribute connected
exit
!
interface template1
description core links
lldp enable
vrf forwarding CORE
ipv4 address dynamic dynamic
ipv4 pim enable
ipv4 pim bier-tunnel 1
ipv4 pim join-source loopback0
ipv6 address dynamic dynamic
ipv6 enable
ipv6 pim enable
ipv6 pim bier-tunnel 1
ipv6 pim join-source loopback0
polka enable 1 65536 100
mpls enable
mpls rsvp4
mpls rsvp6
router ospf4 1 enable
router ospf4 1 area 0
router ospf4 1 suppress-prefix
router ospf4 1 segrout index 1
router ospf4 1 bier index 1
router ospf6 1 enable
router ospf6 1 area 0
router ospf6 1 suppress-prefix
router ospf6 1 segrout index 1
router ospf6 1 bier index 1
shutdown
no log-link-change
exit
!
interface loopback0
description AMD0001@lo0
vrf forwarding CORE
ipv4 address 10.1.1.1 255.255.255.255
ipv6 address fd00:51e5::a:1:1:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
template template1
router ospf4 1 unsuppress-prefix
router ospf6 1 unsuppress-prefix
no shutdown
exit
!
interface loopback20965
no description
vrf forwarding INB_MGNT
ipv4 address 172.16.66.1 255.255.255.255
no shutdown
no log-link-change
exit
!
interface bvi1
no description
no shutdown
no log-link-change
exit
!
interface ethernet0
description CPU_PORT _NEVER_EVER_ CONFIGURE IT
no shutdown
no log-link-change
exit
!
interface ethernet1
description out of band management port
macaddr 0001.0a01.0101
vrf forwarding oob
ipv4 address dynamic dynamic
ipv4 gateway-prefix all4
ipv4 dhcp-client enable
ipv4 dhcp-client early
ipv6 address dynamic dynamic
ipv6 gateway-prefix all6
ipv6 slaac
ipv6 prefix-suppress
no shutdown
no log-link-change
exit
!
interface sdn1
description AMS0001@1/0 -> FRA0001@1/0 [EDGECORE WEDGE100BF-32X xe-0]
mtu 9000
macaddr 002b.4f44.4266
vrf forwarding CORE
ipv4 address 10.1.12.1 255.255.255.0
ipv6 address fd00:51e5::a:1:12:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn1.2200
description ""LAYER 2 VLAN 2200 to FRA2"
macaddr 2200.2200.0001
bridge-group 1
no shutdown
no log-link-change
exit
!
interface sdn2
description AMS0001@2/0 -> POZ0001@2/0 [EDGECORE WEDGE100BF-32X xe-1]
mtu 9000
macaddr 002b.2078.6508
vrf forwarding CORE
ipv4 address 10.1.14.1 255.255.255.0
ipv6 address fd00:51e5::a:1:14:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn2.2200
description "LAYER 2 VLAN 2200 to POZ4"
macaddr 2200.2200.0002
bridge-group 1
no shutdown
no log-link-change
exit
!
interface sdn3
description AMS0001@3/0 [EDGECORE WEDGE100BF-32X xe-2]
mtu 1500
macaddr 0053.7e68.1231
lldp enable
no shutdown
log-link-change
exit
!
interface sdn3.101
description AMS0001@3/0.101 -> AMS0101 [AMS-AMS-GTS-RARE-200105-AMS]
lldp enable
vrf forwarding CORE
ipv4 address 10.1.101.1 255.255.255.0
ipv6 address fd00:515e:65::a:1:65:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
ipv6 enable
ipv6 multicast mldp-enable
no shutdown
no log-link-change
exit
!
interface sdn3.102
description AMS0001@3/0.102 [<put GEANT ciruit # here>] ->
[05:00.0]
vrf forwarding CORE
ipv4 address 10.1.110.1 255.255.255.0
ipv6 address fd00:51e5::a:1:6e:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3.1214
description AMS0001@3/0.1214 -> HEANET/TCD [AMS-DUB2-HEANET-RARE-21061]
vrf forwarding CORE
ipv4 address 10.12.14.1 255.255.255.0
ipv6 address fd00:51e5:4be::a:c:d:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3.1916
description AMS0001@3/0.1916 -> RNP/UFES [AMS-PAR-RARE-INTERNET2-RNP-20061]
vrf forwarding CORE
ipv4 address 10.19.16.1 255.255.255.0
ipv6 address fd00:515e:77c::a:13:10:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3.2200
description AMS0001@3/0.2200 -> PAR0001@3/0.2200 [AMS-PAR-RENATER-RARE-20070]
vrf forwarding CORE
ipv4 address 10.22.0.1 255.255.255.0
ipv6 address fd00:515e:898::a:16:0:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3.3068
description AMS0001@3/0.3068 -> STARLIGHT [AMS-AMS-RARE-CANARIE-21013]
vrf forwarding CORE
ipv4 address 10.30.68.1 255.255.255.0
ipv6 address fd00:515e:bfc::a:1e:44:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
template template1
no shutdown
exit
!
interface sdn3.701
description AMS0001@3/0.701 -> SURF [AMS-AMS-RARE-NETHERLIGHT-9952733]
lldp enable
vrf forwarding CORE
ipv4 address 10.11.3.1 255.255.255.0
ipv6 address fd00:515e:459::a:b:3:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
no shutdown
no log-link-change
exit
!
interface sdn3.702
description AMS0001@3/0.702 -> LON-DTN [LON-AMS-DTN-GENERATOR]
lldp enable
vrf forwarding v2
ipv4 address 10.10.10.5 255.255.255.252
ipv6 address fd00:bad:c0de:1::1 ffff:ffff:ffff:ffff::
ipv6 enable
no shutdown
no log-link-change
exit
!
interface tunnel1122
description POLKA tunnel from AMS0001[1] -> FRA0001[2]
tunnel vrf CORE
tunnel source loopback0
tunnel destination 10.2.2.2
tunnel domain-name 10.4.4.4 10.3.3.3
tunnel mode polka
vrf forwarding CORE
ipv4 address 10.11.22.1 255.255.255.0
ipv4 autoroute bgp4 1 10.2.101.1 10.11.22.2 recursive
no shutdown
no log-link-change
exit
!
router bgp4 1
vrf CORE
local-as 64512
router-id 10.1.1.1
address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor 10.3.3.3 remote-as 64512
no neighbor 10.3.3.3 description
neighbor 10.3.3.3 local-as 64512
neighbor 10.3.3.3 address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor 10.3.3.3 distance 200
neighbor 10.3.3.3 update-source loopback0
neighbor 10.3.3.3 pmsitun
neighbor 10.3.3.3 next-hop-self
neighbor 10.3.3.3 send-community all
afi-vrf INB_MGNT enable
afi-vrf INB_MGNT redistribute connected
afi-vrf INB_MGNT redistribute remote
afi-vrf INB_MGNT redistribute static
redistribute connected
redistribute static
exit
!
router bgp4 2
vrf oob
local-as 65401
router-id 172.16.26.151
address-family unicast
redistribute connected
redistribute bgp4 1
exit
!
router bgp6 1
vrf CORE
local-as 64512
router-id 10.1.1.1
address-family unicast multicast vpnuni ovpnuni vpls evpn
neighbor fd00:51e5::a:3:3:3 remote-as 64512
no neighbor fd00:51e5::a:3:3:3 description
neighbor fd00:51e5::a:3:3:3 local-as 64512
neighbor fd00:51e5::a:3:3:3 address-family unicast multicast vpnuni ovpnuni
vpls evpn
neighbor fd00:51e5::a:3:3:3 distance 200
neighbor fd00:51e5::a:3:3:3 update-source loopback0
neighbor fd00:51e5::a:3:3:3 pmsitun
neighbor fd00:51e5::a:3:3:3 send-community all
redistribute connected
redistribute static
exit
!
proxy-profile oob
vrf oob
exit
!
!
ipv4 route CORE 10.66.66.0 255.255.255.0 10.1.101.2 interface sdn3.101
ipv4 route CORE 16.0.0.0 255.255.255.0 10.1.101.6
ipv4 route CORE 101.0.0.0 255.255.255.0 10.1.101.6
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route INB_MGNT 192.168.113.0 255.255.255.0 172.16.99.1
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route oob 172.16.11.0 255.255.255.0 172.16.26.254
ipv4 route oob 172.16.66.0 255.255.255.0 172.16.99.2
ipv4 route oob 192.168.113.0 255.255.255.0 172.16.26.254
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
sensor bgp4peer
path bgp4/peer/peer
prefix freertr-bgp4peer
prepend bgp4_peer_
command sho ipv4 bgp 1 summ
name 4 peer=
key name bgp4/peer
replace \. _
column 1 name learn
column 2 name advert
column 3 name state
column 3 replace false 0
column 3 replace true 1
exit
!
sensor bgp4perf
path bgp4/perf/perf
prefix freertr-bgp4perf
prepend bgp4_perf_
command sho ipv4 bgp 1 best | exc last
key name bgp4/perf
replace \s _
column 1 name val
exit
!
sensor bgp6peer
path bgp6/peer/peer
prefix freertr-bgp6peer
prepend bgp6_peer_
command sho ipv6 bgp 1 summ
name 4 peer=
key name bgp6/peer
replace \: _
column 1 name learn
column 2 name advert
column 3 name state
column 3 replace false 0
column 3 replace true 1
exit
!
sensor bgp6perf
path bgp6/perf/perf
prefix freertr-bgp6perf
prepend bgp6_perf_
command sho ipv6 bgp 1 best | exc last
key name bgp6/perf
replace \s _
column 1 name val
exit
!
sensor dvigp4int
path dvigp4int/peer/peer
prefix freertr-dvigp4int
prepend dvigp4_iface_
command sho ipv4 pvrp 1 interface
name 0 proto="pvrp1",ifc=
key name dvigp4int/peer
replace \. _
column 1 name neighbors
exit
!
sensor dvigp4peer
path dvigp4peer/peer/peer
prefix freertr-dvigp4peer
prepend dvigp4_peers_
command sho ipv4 pvrp 1 summary
name 4 proto="pvrp1",ip=
key name dvigp4peer/peer
replace \. _
column 5 name learn
column 6 name advert
exit
!
sensor dvigp6int
path dvigp6int/peer/peer
prefix freertr-dvigp6int
prepend dvigp6_iface_
command sho ipv6 pvrp 1 interface
name 0 proto="pvrp1",ifc=
key name dvigp6int/peer
replace \. _
column 1 name neighbors
exit
!
sensor dvigp6peer
path dvigp6peer/peer/peer
prefix freertr-dvigp6peer
prepend dvigp6_peers_
command sho ipv6 pvrp 1 summary
name 4 proto="pvrp1",ip=
key name dvigp6peer/peer
replace \: _
column 5 name learn
column 6 name advert
exit
!
sensor ifaces-hw
path interfaces-hw/interface/counter
prefix freertr-ifaces
prepend iface_hw_byte_
command sho inter hwsumm
name 0 ifc=
key name interfaces-hw/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-hwp
path interfaces-hwp/interface/counter
prefix freertr-ifaces
prepend iface_hw_pack_
command sho inter hwpsumm
name 0 ifc=
key name interfaces-hwp/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-sw
path interfaces-sw/interface/counter
prefix freertr-ifaces
prepend iface_sw_byte_
command sho inter swsumm
name 0 ifc=
key name interfaces-sw/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor ifaces-swp
path interfaces-swp/interface/counter
prefix freertr-ifaces
prepend iface_sw_pack_
command sho inter swpsumm
name 0 ifc=
key name interfaces-swp/interface
replace \. _
column 1 name st
column 1 replace admin -1
column 1 replace down 0
column 1 replace up 1
column 2 name tx
column 3 name rx
column 4 name dr
exit
!
sensor lsigp4int
path lsigp4int/peer/peer
prefix freertr-lsigp4int
prepend lsigp4_iface_
command sho ipv4 ospf 1 interface
name 0 proto="ospf1",ifc=
key name lsigp4int/peer
replace \. _
column 1 name neighbors
exit
!
sensor lsigp4peer
path lsigp4peer/peer/peer
prefix freertr-lsigp4peer
prepend lsigp4_peers_
command sho ipv4 ospf 1 topology 0
name 0 proto="ospf1",node=
key name lsigp4peer/peer
replace \. _
column 1 name reachable
column 1 replace false 0
column 1 replace true 1
column 6 name neighbors
exit
!
sensor lsigp4perf
path lsigp4perf/peer/peer
prefix freertr-lsigp4perf
prepend lsigp4_perf_
command sho ipv4 ospf 1 spf 0 | inc reachable|fill|calc|run
key name lsigp4perf/peer
labels proto="ospf1"
skip 0
column 1 name val
exit
!
sensor lsigp6int
path lsigp6int/peer/peer
prefix freertr-lsigp6int
prepend lsigp6_iface_
command sho ipv6 ospf 1 interface
name 0 proto="ospf1",ifc=
key name lsigp6int/peer
replace \. _
column 1 name neighbors
exit
!
sensor lsigp6peer
path lsigp6peer/peer/peer
prefix freertr-lsigp6peer
prepend lsigp6_peers_
command sho ipv6 ospf 1 topology 0
name 0 proto="ospf1",node=
key name lsigp6peer/peer
replace \. _
replace \/ _
column 1 name reachable
column 1 replace false 0
column 1 replace true 1
column 6 name neighbors
exit
!
sensor lsigp6perf
path lsigp6perf/peer/peer
prefix freertr-lsigp6perf
prepend lsigp6_perf_
command sho ipv6 ospf 1 spf 0 | inc reachable|fill|calc|run
key name lsigp6perf/peer
labels proto="ospf1"
skip 0
column 1 name val
exit
!
sensor routing4
path routing4/peer/peer
prefix freertr-routing4
prepend routing4_
command sho ipv4 protocol v1 | beg computed
name 0 proto=
key name routing4/peer
addname 1 * id=
skip 2
column 2 name ifaces
column 3 name neighbors
column 4 name computed_unicast
column 5 name computed_multicast
column 6 name computed_flowspec
column 7 name computed_changed
column 9 name redisted_unicast
column 10 name redisted_multicast
column 11 name redisted_flowspec
column 12 name redisted_changed
exit
!
sensor routing6
path routing6/peer/peer
prefix freertr-routing6
prepend routing6_
command sho ipv6 protocol v1 | beg computed
name 0 proto=
key name routing6/peer
addname 1 * id=
skip 2
column 2 name ifaces
column 3 name neighbors
column 4 name computed_unicast
column 5 name computed_multicast
column 6 name computed_flowspec
column 7 name computed_changed
column 9 name redisted_unicast
column 10 name redisted_multicast
column 11 name redisted_flowspec
column 12 name redisted_changed
exit
!
sensor sensor
path sensor/peer/peer
prefix freertr-sensor
prepend sensor_
command sho sensor
name 0 met=
key name sensor/peer
column 1 name asked
column 2 name time
exit
!
alias test tna-asic-temp command attach shell1 /opt/freertr/bin/sh_tna_temp.sh
alias test tna-asic-temp cmd2nd flash type /etc/freertr/tna_temp.cfg
alias test tna-asic-temp description display forwarding asic cpu temperature
!
alias test tna-linux-access command ssh 10.255.255.1 /vrf lin /user sysadmin
/pass sysadmin
alias test tna-linux-access description access linux console
!
alias test tna-linux-temp command attach shell2 acpi -V
alias test tna-linux-temp description display main cpu temperature
!
alias test tna-port-detect command attach shell1
/opt/freertr/bin/sh_tna_ports.sh
alias test tna-port-detect cmd2nd test hwpop uclipm
/etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply add
alias test tna-port-detect description Detect TOFINO ports
!
alias test tna-port-remove command attach shell1
/opt/freertr/bin/sh_tna_ports.sh
alias test tna-port-remove cmd2nd test hwpop uclipm
/etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply del
alias test tna-port-remove description Remove NON RDY TOFINO ports
!
server telnet ams-bm6
security authentication usr
security rsakey rsa
security dsakey dsa
security ecdsakey ecdsa
second-port 22
exec logging
no exec authorization
login authentication usr
login logging
interface sdn3.101
vrf CORE
exit
!
server telnet INB_MGNT
security protocol telnet
exec logging
no exec authorization
no login authentication
login logging
interface loopback20965
vrf INB_MGNT
exit
!
server telnet nmaas
security protocol telnet
security authentication usr
exec logging
no exec authorization
login authentication usr
login logging
interface loopback20965
vrf INB_MGNT
exit
!
server telnet oob
security authentication usr
security rsakey rsa
security dsakey dsa
security ecdsakey ecdsa
second-port 22
exec logging
no exec authorization
login authentication usr
login logging
vrf oob
exit
!
server telnet p4
security protocol telnet
exec logging
no exec authorization
no login authentication
login logging
vrf p4
exit
!
server p4lang p4
export-vrf CORE 1
export-vrf v2 2
export-vrf INB_MGNT 3
export-port sdn1 132 10 0 0 0
export-port sdn2 140 10 0 0 0
export-port sdn3 148 10 0 0 0
export-port sdn3.2200 202 10 0 0 0
export-port sdn3.701 203 10 0 0 0
export-port sdn3.3068 204 10 0 0 0
export-port sdn3.1916 205 10 0 0 0
export-port sdn3.702 206 10 0 0 0
export-port sdn3.101 207 10 0 0 0
export-port sdn3.1214 208 0 0 0 0
export-port tunnel1122 210 10 0 0 0
export-port sdn3.102 211 10 0 0 0
interconnect ethernet0
vrf p4
exit
!
server forwarder chi
security protocol ssh
security authentication usr
security rsakey rsa
security dsakey dsa
security ecdsakey ecdsa
port 20001
logging
target vrf INB_MGNT
target address 172.16.66.58
target port 23
target security telnet
vrf oob
exit
!
server http nmaas
host * path /opt/freertr/lib/
vrf INB_MGNT
exit
!
server prometheus pr
sensor bgp4peer
sensor bgp4perf
sensor bgp6peer
sensor bgp6perf
sensor dvigp4int
sensor dvigp4peer
sensor dvigp6int
sensor dvigp6peer
sensor ifaces-hw
sensor ifaces-hwp
sensor ifaces-sw
sensor ifaces-swp
sensor lsigp4int
sensor lsigp4peer
sensor lsigp4perf
sensor lsigp6int
sensor lsigp6peer
sensor lsigp6perf
sensor routing4
sensor routing6
sensor sensor
vrf oob
exit
!
client proxy oob
client name-server 1.1.1.1
client upgrade-server http://upgrade.nop.hu/
client upgrade-backup
client config-server http://wdv.rare.nmaas.eu/webdav/
client config-username rare
client config-password $v10$cmFyZQ==
client config-backup
client config-archive
client time-server europe.pool.ntp.org
client time-zone CET
!
end
- [RARE-users] Basic Bridge, Xavier Jeannin, 02/21/2022
- Re: [RARE-users] Basic Bridge, Frédéric LOUI, 02/21/2022
- Re: [RARE-users] Basic Bridge, Frédéric LOUI, 02/21/2022
- Re: [RARE-users] Basic Bridge, Xavier Jeannin, 02/21/2022
- Re: [RARE-users] Basic Bridge, Maria Del Carmen Misa Moreira, 02/21/2022
- Re: [RARE-users] Basic Bridge, Xavier Jeannin, 02/21/2022
- Re: [RARE-users] Basic Bridge, Frédéric LOUI, 02/21/2022
- Re: [RARE-users] Basic Bridge, mc36, 02/21/2022
- Re: [RARE-users] Basic Bridge, Xavier Jeannin, 02/21/2022
- Re: [RARE-users] Basic Bridge, mc36, 02/21/2022
- Re: [RARE-users] Basic Bridge, Xavier Jeannin, 02/21/2022
- Re: [RARE-users] Basic Bridge, Xavier Jeannin, 02/21/2022
- Re: [RARE-users] Basic Bridge, mc36, 02/21/2022
- Re: [RARE-users] Basic Bridge, Maria Del Carmen Misa Moreira, 02/21/2022
- Re: [RARE-users] Basic Bridge, Xavier Jeannin, 02/21/2022
- Re: [RARE-users] Basic Bridge, Frédéric LOUI, 02/21/2022
- Re: [RARE-users] Basic Bridge, Frédéric LOUI, 02/21/2022
Archive powered by MHonArc 2.6.19.