hostname CHI0041
buggy
!
logging buffered debug 10240
logging file debug /var/log/freertr.log
logging rotate 655360000 /var/log/freertr.old
!
crypto rsakey rsa import $v10$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
!
crypto dsakey dsa import $v10$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
!
crypto ecdsakey ecdsa import $v10$TUhNQ0FRRUVIekhqZE1yamdOamY2cysxWDRLelpwMEdFRUZaWUhoN2ZKejZmcFRmZzYyZ0J3WUZLNEVFQUFxaFJBTkNBQVRBck5NcHlrMVFXRnR6VFNTaldrTDRyN0RrTEp4QVZKR3dHV2NHUDlpNmwxMS82bUw4TVF0UUQxaU15Zm1YZndrS093T2NWcFJZWGlyZ243K2RodFdr
!
crypto ipsec WG-NMAAS
 key $v10$dUxvZktoNHV2a3VnSjh4TjZydVJMQ01OdDJGSE1qbXlBU1ZtUi92dnUydz1ZTitGV1p2N2Z1eXU3ZXM5MkRvdXJZazRjanc5Z0N0QzRaWC96NTJRMDBZPQ==
 replay 0
 exit
!
aaa userlist usr
 username rare
 username rare password $v10$cmFyZQ==
 exit
!
scheduler errors
 time 600000
 delay 30000
 command clear errors freerror@nop.hu
 start
 exit
!
scheduler upgrade
 time 600000
 delay 60000
 random-time 60000
 random-delay 300000
 command flash upgrade
 start
 exit
!
access-list ACL-TREX-DST
 sequence 10 permit all any all 48.0.0.0 255.255.255.0 all
 exit
!
access-list ACL-TREX-SRC
 sequence 10 permit all 16.0.0.0 255.255.255.0 all any all
 exit
!
access-list NMAAS_K8S_POD
 sequence 10 permit all any all 192.168.113.0 255.255.255.0 all
 exit
!
prefix-list all4
 sequence 10 permit 0.0.0.0/0 ge 0 le 0
 exit
!
prefix-list all6
 sequence 10 permit ::/0 ge 0 le 0
 exit
!
prefix-list PFX-TREX-SRC-DST
 sequence 10 permit 16.0.0.0/24 ge 24 le 24
 sequence 20 permit 48.0.0.0/24 ge 24 le 24
 exit
!
route-policy RPL-TREX-PREFIX
 sequence 10 if prefix-list PFX-TREX-SRC-DST
 sequence 20   pass
 exit
!
vrf definition CORE
 iface4start 1000
 iface6start 1000
 exit
!
vrf definition INB_MGNT
 rd 20965:8
 rt-import 20965:1
 rt-export 20965:1
 exit
!
vrf definition inet2
 exit
!
vrf definition lin
 exit
!
vrf definition oob
 exit
!
vrf definition p4
 description P4 VRF _NEVER_EVER_ CONFIGURE IT
 exit
!
vrf definition v182
 exit
!
vrf definition v189
 exit
!
router ospf4 1
 vrf CORE
 router-id 10.8.8.8
 traffeng-id 0.0.0.0
 segrout 100
 bier 256 100
 area 0 enable
 area 0 segrout
 area 0 bier
 redistribute static
 exit
!
router ospf6 1
 vrf CORE
 router-id 10.8.8.8
 traffeng-id ::
 segrout 100
 bier 256 100
 area 0 enable
 area 0 segrout
 area 0 bier
 exit
!
interface template1
 description core links
 lldp enable
 vrf forwarding CORE
 ipv4 address dynamic dynamic
 ipv4 pim enable
 ipv4 pim bier-tunnel 8
 ipv4 pim join-source loopback0
 ipv6 address dynamic dynamic
 ipv6 enable
 ipv6 pim enable
 ipv6 pim bier-tunnel 8
 ipv6 pim join-source loopback0
 mpls enable
 mpls rsvp4
 mpls rsvp6
 router ospf4 1 enable
 router ospf4 1 area 0
 router ospf4 1 suppress-prefix
 router ospf4 1 segrout index 8
 router ospf4 1 bier index 8
 router ospf6 1 enable
 router ospf6 1 area 0
 router ospf6 1 suppress-prefix
 router ospf6 1 segrout index 8
 router ospf6 1 bier index 8
 shutdown
 no log-link-change
 exit
!
interface loopback0
 description CHI0041@loopback0
 vrf forwarding CORE
 ipv4 address 10.8.8.8 255.255.255.255
 ipv6 address fd00:515e:bfc::a:8:8:8 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 template template1
 router ospf4 1 unsuppress-prefix
 router ospf6 1 unsuppress-prefix
 no shutdown
 exit
!
interface loopback20965
 description NMaaS In-band management IP
 vrf forwarding INB_MGNT
 ipv4 address 172.16.66.8 255.255.255.255
 no shutdown
 no log-link-change
 exit
!
interface ethernet0
 description CPU_PORT _NEVER_EVER_ CONFIGURE IT
 no shutdown
 no log-link-change
 exit
!
interface ethernet1
 description out of band management port
 vrf forwarding oob
 ipv4 address dynamic dynamic
 ipv4 gateway-prefix all4
 ipv4 dhcp-client enable
 ipv4 dhcp-client early
 ipv6 address dynamic dynamic
 ipv6 gateway-prefix all6
 ipv6 slaac
 ipv6 prefix-suppress
 no shutdown
 no log-link-change
 exit
!
interface ethernet2
 description linux tuntap management interface
 vrf forwarding lin
 ipv4 address 10.255.255.254 255.255.255.0
 no shutdown
 no log-link-change
 exit
!
interface sdn1
 description frontpanel port 1/0
 mtu 1500
 macaddr 007a.3739.674c
 lldp enable
 vrf forwarding v182
 ipv4 address 192.168.1.1 255.255.255.0
 ipv6 address fd00:515e:1::c0:a8:1:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 ipv6 enable
 no shutdown
 log-link-change
 exit
!
interface sdn10
 description frontpanel port 10/0
 mtu 1500
 macaddr 0051.3849.0b16
 vrf forwarding CORE
 ipv4 address 192.168.10.1 255.255.255.0
 ipv6 address fd00:515e:a::c0:a8:a:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 template template1
 no shutdown
 exit
!
interface sdn11
 description frontpanel port 11/0
 mtu 1500
 macaddr 0052.4640.5924
 lldp enable
 vrf forwarding v182
 ipv4 address 192.168.11.1 255.255.255.0
 ipv6 address fd00:515e:b::c0:a8:b:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 ipv6 enable
 no shutdown
 log-link-change
 exit
!
interface sdn12
 description frontpanel port 12/0
 mtu 1500
 macaddr 005d.1b2f.3605
 lldp enable
 vrf forwarding inet2
 ipv4 address 192.168.12.1 255.255.255.0
 ipv6 address fd00:515e:c::c0:a8:c:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 ipv6 enable
 no shutdown
 log-link-change
 exit
!
interface sdn18
 description frontpanel port 18/0
 mtu 1500
 macaddr 004f.7210.0a24
 lldp enable
 vrf forwarding CORE
 ipv4 address 192.168.18.1 255.255.255.0
 ipv6 address fd00:515e:12::c0:a8:12:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 ipv6 enable
 no shutdown
 log-link-change
 exit
!
interface sdn18.3068
 no description
 vrf forwarding CORE
 ipv4 address 10.30.68.200 255.255.255.0
 ipv6 address fd00:515e:bfc::a:1e:44:3 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 template template1
 no shutdown
 exit
!
interface sdn19
 description frontpanel port 19/0
 mtu 1500
 macaddr 0058.6571.2f4b
 lldp enable
 vrf forwarding CORE
 ipv4 address 192.168.19.1 255.255.255.0
 ipv6 address fd00:515e:13::c0:a8:13:1 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 ipv6 enable
 no shutdown
 log-link-change
 exit
!
interface sdn5
 description frontpanel port 5/0
 mtu 1500
 macaddr 0000.7570.5a50
 lldp enable
 vrf forwarding CORE
 ipv4 address 10.8.101.5 255.255.255.0
 ipv6 address fd00:515e:5::a:8:65:5 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 no shutdown
 log-link-change
 exit
!
interface tunnel123
 description WG-NMAAS
 tunnel key 9007
 tunnel vrf oob
 tunnel protection WG-NMAAS
 tunnel source ethernet1
 tunnel destination 150.254.160.146
 tunnel mode wireguard
 vrf forwarding oob
 ipv4 address 192.168.122.122 255.255.255.252
 no shutdown
 no log-link-change
 exit
!
router bgp4 1
 vrf CORE
 local-as 64512
 router-id 10.8.8.8
 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor 10.3.3.3 remote-as 64512
 no neighbor 10.3.3.3 description
 neighbor 10.3.3.3 local-as 64512
 neighbor 10.3.3.3 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor 10.3.3.3 distance 200
 neighbor 10.3.3.3 update-source loopback0
 neighbor 10.3.3.3 pmsitun
 neighbor 10.3.3.3 next-hop-self
 neighbor 10.3.3.3 send-community all
 afi-vrf INB_MGNT enable
 afi-vrf INB_MGNT redistribute connected
 redistribute connected
 redistribute static
 exit
!
router bgp4 2
 vrf INB_MGNT
 local-as 64008
 router-id 172.16.26.8
 address-family unicast
 redistribute connected
 redistribute bgp4 1
 exit
!
router bgp6 1
 vrf CORE
 local-as 64512
 router-id 10.8.8.8
 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor fd00:51e5::a:3:3:3 remote-as 64512
 no neighbor fd00:51e5::a:3:3:3 description
 neighbor fd00:51e5::a:3:3:3 local-as 64512
 neighbor fd00:51e5::a:3:3:3 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor fd00:51e5::a:3:3:3 distance 200
 neighbor fd00:51e5::a:3:3:3 update-source loopback0
 neighbor fd00:51e5::a:3:3:3 pmsitun
 neighbor fd00:51e5::a:3:3:3 send-community all
 exit
!
proxy-profile oob
 vrf oob
 exit
!
tracker oob-nmaas
 mode icmp
 target 192.168.122.121
 vrf oob
 source tunnel123
 interval 60000
 timeout 100
 start
 exit
!
!
ipv4 route CORE 48.0.0.0 255.255.255.0 192.168.1.66 interface sdn1
ipv4 route CORE 102.0.0.0 255.255.255.0 192.168.5.2 interface sdn5
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route oob 172.16.11.0 255.255.255.0 192.168.122.121
ipv4 route oob 192.168.113.0 255.255.255.0 192.168.122.121
!
!
!
!
ipv4 nat oob sequence 10 srclist NMAAS_K8S_POD interface tunnel123
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route v182 48.0.0.0 255.255.255.0 192.168.1.66 interface sdn1
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
sensor ifaces-hw
 path interfaces-hw/interface/counter
 prefix freertr-ifaces
 prepend iface_hw_byte_
 command sho inter hwsumm
 name 0 ifc=
 key name interfaces-hw/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-hwp
 path interfaces-hwp/interface/counter
 prefix freertr-ifaces
 prepend iface_hw_pack_
 command sho inter hwpsumm
 name 0 ifc=
 key name interfaces-hwp/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-sw
 path interfaces-sw/interface/counter
 prefix freertr-ifaces
 prepend iface_sw_byte_
 command sho inter swsumm
 name 0 ifc=
 key name interfaces-sw/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-swp
 path interfaces-swp/interface/counter
 prefix freertr-ifaces
 prepend iface_sw_pack_
 command sho inter swpsumm
 name 0 ifc=
 key name interfaces-swp/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
alias test tna-asic-temp command attach shell1 /opt/freertr/bin/sh_tna_temp.sh
alias test tna-asic-temp cmd2nd flash type /etc/freertr/tna_temp.cfg
alias test tna-asic-temp description display forwarding asic cpu temperature
!
alias test tna-linux-access command ssh 10.255.255.1 /vrf lin /user sysadmin /pass sysadmin
alias test tna-linux-access description access linux console
!
alias test tna-linux-temp command attach shell2 acpi -V
alias test tna-linux-temp description display main cpu temperature
!
alias test tna-port-detect command attach shell1 /opt/freertr/bin/sh_tna_ports.sh
alias test tna-port-detect cmd2nd test hwpop uclipm /etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply add
alias test tna-port-detect description Detect TOFINO ports
!
alias test tna-port-remove command attach shell1 /opt/freertr/bin/sh_tna_ports.sh
alias test tna-port-remove cmd2nd test hwpop uclipm /etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply del
alias test tna-port-remove description Remove NON RDY TOFINO ports
!
server telnet INB_MGNT
 security protocol telnet
 exec logging
 no exec authorization
 no login authentication
 login logging
 interface loopback20965
 vrf INB_MGNT
 exit
!
server telnet nmaas
 security protocol telnet
 security authentication usr
 exec logging
 no exec authorization
 login authentication usr
 login logging
 interface loopback20965
 vrf INB_MGNT
 exit
!
server telnet oob
 security authentication usr
 security rsakey rsa
 security dsakey dsa
 security ecdsakey ecdsa
 second-port 22
 exec logging
 no exec authorization
 login authentication usr
 login logging
 vrf oob
 exit
!
server telnet p4
 security protocol telnet
 exec logging
 no exec authorization
 no login authentication
 login logging
 vrf p4
 exit
!
server p4lang p4
 export-vrf CORE 1
 export-vrf inet2 2
 export-vrf v182 3
 export-vrf INB_MGNT 4
 export-port sdn18 4 100 3 2 0
 export-port sdn19 8 100 3 2 0
 export-port sdn12 144 100 3 2 0
 export-port sdn11 148 100 3 2 0
 export-port sdn10 152 100 3 2 0
 export-port sdn5 172 100 3 2 0
 export-port sdn1 188 100 3 2 0
 export-port sdn18.3068 400 100 0 0 0
 interconnect ethernet0
 vrf p4
 exit
!
server prometheus pr
 sensor ifaces-hw
 sensor ifaces-hwp
 sensor ifaces-sw
 sensor ifaces-swp
 interface tunnel123
 vrf oob
 exit
!
client proxy oob
client name-server 1.1.1.1
client upgrade-server http://upgrade.nop.hu/
client upgrade-backup
client config-server http://wdv.rare.nmaas.eu/webdav/
client config-username rare
client config-password $v10$cmFyZQ==
client config-backup
client config-archive
client time-server europe.pool.ntp.org
client time-zone CET
!
end
