hostname E513-E-YECWH-1
buggy
!
logging milliseconds
logging buffered debug 10240
logging file debug /var/log/freertr.log
logging rotate 655360000 /var/log/freertr.old
!
crypto rsakey rsa import $v10$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
!
crypto dsakey dsa import $v10$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
!
crypto ecdsakey ecdsa import $v10$TUhRQ0FRRUVJQUNzQ01ucno2QWp0WExmL0NuQlNGRmdjK3Z6dmZWQmQwbzZEQXA0ejhlY29BY0dCU3VCQkFBS29VUURRZ0FFZE11OUd3TGlTaWgzcWRoNHJ1dFdabDhQM1BON1ozNWZGajdIcWhwMmxIYis1ekxUR2VHWFQrbmRVdE5QUUdrU1h3b0doNGpiVXhwcDM3cXZzVVZETkE9PQ==
!
crypto ipsec WG-NMAAS
 key $v10$K0IyZ3kwWEkxOWp6Mi9PT1J5RWh1YmY2TDh5QjVsK3V6MzZpa1pob21Waz1laTlhdzJYVTJaUzA2MkpZNG9wVEcyUjNGVXQySmhUNVNIamN5em1wbTBVPQ==
 replay 0
 exit
!
aaa userlist usr
 username rare
 username rare password $v10$cmFyZQ==
 exit
!
scheduler errors
 time 600000
 delay 30000
 command clear errors freerror@nop.hu
 stop
 exit
!
scheduler upgrade
 time 600000
 delay 60000
 random-time 60000
 random-delay 300000
 command flash upgrade
 stop
 exit
!
access-list acl_all_ipv6_flowlabels
 sequence 10 permit all any all any all flow 131076&261884
 sequence 11 permit all any all any all flow 65540&261884
 sequence 12 permit all any all any all flow 196612&261884
 sequence 13 permit all any all any all flow 32772&261884
 sequence 20 permit all any all any all flow 131072&261632
 sequence 21 permit all any all any all flow 65536&261632
 sequence 22 permit all any all any all flow 196608&261632
 sequence 23 permit all any all any all flow 32768&261632
 sequence 30 permit all any all any all
 exit
!
access-list acl_permit_all
 sequence 10 permit all any all any all
 exit
!
access-list ipv6_flowlabel_atlas
 sequence 4 deny all any all ff00:: ff00:: all
 sequence 5 deny all fe80:: ffff:ffff:ffff:ffff:: all any all
 sequence 10 permit all any all any all flow 131072&261632
 exit
!
access-list ipv6_flowlabel_cms
 sequence 4 deny all any all ff00:: ff00:: all
 sequence 5 deny all fe80:: ffff:ffff:ffff:ffff:: all any all
 sequence 10 permit all any all any all flow 65540&261884
 exit
!
access-list NMAAS_K8S_POD
 sequence 10 permit all any all 192.168.113.0 255.255.255.0 all
 exit
!
prefix-list all4
 sequence 10 permit 0.0.0.0/0 ge 0 le 0
 exit
!
prefix-list all6
 sequence 10 permit ::/0 ge 0 le 0
 exit
!
bridge 1000
 description [VLAN ID=1000] [BRIDGE BETWEEN EX3 AND LE1]
 mac-learn
 exit
!
bridge 1001
 description [VLAN ID=1001] [BRIDGE BETWEEN EX3 AND LE1]
 mac-learn
 exit
!
vrf definition CORE
 iface4start 1000
 iface6start 1000
 exit
!
vrf definition INB_MGNT
 rd 20965:13
 rt-import 20965:1
 rt-export 20965:1
 exit
!
vrf definition lin
 exit
!
vrf definition oob
 exit
!
vrf definition p4
 description P4 VRF _NEVER_EVER_ CONFIGURE IT
 exit
!
router ospf4 1
 vrf CORE
 router-id 10.13.13.13
 traffeng-id 0.0.0.0
 segrout 100
 bier 256 100
 area 0 enable
 area 0 segrout
 area 0 bier
 exit
!
router ospf6 1
 vrf CORE
 router-id 10.13.13.13
 traffeng-id ::
 segrout 100
 bier 256 100
 area 0 enable
 area 0 segrout
 area 0 bier
 exit
!
interface template1
 description core links
 lldp enable
 vrf forwarding CORE
 ipv4 address dynamic dynamic
 ipv4 pim enable
 ipv4 pim bier-tunnel 13
 ipv4 pim join-source loopback0
 ipv6 address dynamic dynamic
 ipv6 enable
 ipv6 pim enable
 ipv6 pim bier-tunnel 13
 ipv6 pim join-source loopback0
 mpls enable
 mpls rsvp4
 mpls rsvp6
 router ospf4 1 enable
 router ospf4 1 area 0
 router ospf4 1 suppress-prefix
 router ospf4 1 segrout index 13
 router ospf4 1 bier index 13
 router ospf6 1 enable
 router ospf6 1 area 0
 router ospf6 1 suppress-prefix
 router ospf6 1 segrout index 13
 router ospf6 1 bier index 13
 shutdown
 no log-link-change
 exit
!
interface loopback0
 description E513-E-YECWH-1@OSPF-SR-GP4L domain
 vrf forwarding CORE
 ipv4 address 10.13.13.13 255.255.255.255
 ipv6 address fd00:51e5::a:d:d:d ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
 template template1
 router ospf4 1 unsuppress-prefix
 router ospf6 1 unsuppress-prefix
 no shutdown
 exit
!
interface loopback20965
 no description
 vrf forwarding INB_MGNT
 ipv4 address 172.16.66.13 255.255.255.255
 no shutdown
 no log-link-change
 exit
!
interface bvi1000
 description [VLAN ID=1000] [INTERFACE FOR BRIDGE 1 BETWEEN EX3 AND LE1]
 no shutdown
 no log-link-change
 exit
!
interface bvi1001
 description [VLAN ID=1001] [INTERFACE FOR BRIDGE 1 BETWEEN EX3 AND LE1]
 no shutdown
 no log-link-change
 exit
!
interface ethernet0
 description CPU_PORT _NEVER_EVER_ CONFIGURE IT
 no shutdown
 no log-link-change
 exit
!
interface ethernet1
 description out of band management port
 vrf forwarding oob
 ipv4 address dynamic dynamic
 ipv4 gateway-prefix all4
 ipv4 dhcp-client enable
 ipv4 dhcp-client early
 ipv6 address dynamic dynamic
 ipv6 gateway-prefix all6
 ipv6 slaac
 ipv6 prefix-suppress
 no shutdown
 no log-link-change
 exit
!
interface ethernet2
 description linux tuntap management interface
 vrf forwarding lin
 ipv4 address 10.255.255.254 255.255.255.0
 no shutdown
 no log-link-change
 exit
!
interface sdn1
 description [E513-E-YECWH-1 FRONTPANEL PORT 1]
 mtu 1500
 macaddr 0053.4831.0240
 lldp enable
 no shutdown
 no log-link-change
 exit
!
interface sdn1.1000
 description [VLAN ID=1000] [E513-E-YECWH-1@PORT1-100GbE]
 bridge-group 1000
 no shutdown
 no log-link-change
 exit
!
interface sdn1.1001
 description [VLAN ID=1001] [E513-E-YECWH-1@PORT1-100GbE] -> [E513-X-YJUKH-2 EX2]
 bridge-group 1001
 bridge-filter ipv6in acl_all_ipv6_flowlabels
 no shutdown
 no log-link-change
 exit
!
interface sdn3
 description [P4LAB SWITCH-CERN] [E513-E-YECWH-1@PORT3] -> [GVA0001@PORT2]
 mtu 1500
 macaddr 004b.1e61.3b1d
 vrf forwarding CORE
 ipv4 address 10.12.97.2 255.255.255.252
 ipv6 address fd00:515e:511::a:c:61:2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 template template1
 no shutdown
 exit
!
interface sdn7
 description [E513-E-YECWH-1 FRONTPANEL PORT 7] -> [E513-X-YJUP1-3 EX3]
 mtu 1500
 macaddr 005b.4f79.2e5e
 lldp enable
 no shutdown
 no log-link-change
 exit
!
interface sdn7.1000
 description [VLAN ID=1000] [E513-E-YECWH-1@PORT7-100GbE] -> [E513-X-YJUP1-3 EX3@ET-0/0/4]
 bridge-group 1000
 no shutdown
 no log-link-change
 exit
!
interface sdn7.1001
 description [VLAN ID=1001] [E513-E-YECWH-1@PORT7-100GbE] -> [E513-X-YJUP1-3 EX3@ET-0/0/4]
 bridge-group 1001
 bridge-filter ipv6in acl_all_ipv6_flowlabels
 no shutdown
 no log-link-change
 exit
!
interface tunnel123
 description WG-NMAAS
 tunnel key 9011
 tunnel vrf oob
 tunnel protection WG-NMAAS
 tunnel source ethernet1
 tunnel destination 150.254.160.146
 tunnel mode wireguard
 vrf forwarding oob
 ipv4 address 192.168.122.138 255.255.255.252
 no shutdown
 no log-link-change
 exit
!
router bgp4 1
 vrf CORE
 local-as 64512
 router-id 10.13.13.13
 no safe-ebgp
 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor 10.3.3.3 remote-as 64512
 neighbor 10.3.3.3 description E513-E-YECWH-1@lo0[RRC] -> BUD0001@lo0[RR]
 neighbor 10.3.3.3 local-as 64512
 neighbor 10.3.3.3 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor 10.3.3.3 distance 200
 neighbor 10.3.3.3 update-source loopback0
 neighbor 10.3.3.3 pmsitun
 neighbor 10.3.3.3 next-hop-self
 neighbor 10.3.3.3 send-community all
 afi-vrf INB_MGNT enable
 afi-vrf INB_MGNT redistribute connected
 redistribute connected
 redistribute static
 exit
!
router bgp6 1
 vrf CORE
 local-as 64512
 router-id 10.13.13.13
 no safe-ebgp
 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor fd00:51e5::a:3:3:3 remote-as 64512
 neighbor fd00:51e5::a:3:3:3 description E513-E-YECWH-1@lo0[RRC] -> BUD0001@lo0[RR]
 neighbor fd00:51e5::a:3:3:3 local-as 64512
 neighbor fd00:51e5::a:3:3:3 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor fd00:51e5::a:3:3:3 distance 200
 neighbor fd00:51e5::a:3:3:3 update-source loopback0
 neighbor fd00:51e5::a:3:3:3 pmsitun
 neighbor fd00:51e5::a:3:3:3 send-community all
 redistribute connected
 redistribute static
 exit
!
proxy-profile oob
 vrf oob
 exit
!
tracker oob-nmaas
 mode icmp
 target 192.168.122.137
 vrf oob
 source tunnel123
 interval 60000
 timeout 100
 start
 exit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route oob 172.16.11.0 255.255.255.0 192.168.122.137
ipv4 route oob 192.168.113.0 255.255.255.0 192.168.122.137
!
!
!
!
ipv4 nat oob sequence 10 srclist NMAAS_K8S_POD interface tunnel123
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
sensor ifaces-acl
 path ifaces-acl/ifaces-acl
 prefix ifaces-acl
 prepend ifaces_acl_
 command show access-list acl_all_ipv6_flowlabels
 name 7 cfg=
 key ifaces-acl ifaces-acl/ifaces-acl
 replace \. _
 replace \/ _
 column 1 name txb
 column 1 split + typ="sw" typ="hw"
 column 2 name txp
 column 2 split + typ="sw" typ="hw"
 column 3 name rxb
 column 3 split + typ="sw" typ="hw"
 column 4 name rxp
 column 4 split + typ="sw" typ="hw"
 exit
!
sensor ifaces-hw
 path interfaces-hw/interface/counter
 prefix freertr-ifaces
 prepend iface_hw_byte_
 command sho inter hwsumm
 name 0 ifc=
 key name interfaces-hw/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-hwp
 path interfaces-hwp/interface/counter
 prefix freertr-ifaces
 prepend iface_hw_pack_
 command sho inter hwpsumm
 name 0 ifc=
 key name interfaces-hwp/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-sw
 path interfaces-sw/interface/counter
 prefix freertr-ifaces
 prepend iface_sw_byte_
 command sho inter swsumm
 name 0 ifc=
 key name interfaces-sw/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-swp
 path interfaces-swp/interface/counter
 prefix freertr-ifaces
 prepend iface_sw_pack_
 command sho inter swpsumm
 name 0 ifc=
 key name interfaces-swp/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
alias test tna-asic-temp command attach shell1 /nix/var/nix/profiles/RARE/bin/sh_tna_temp.sh
alias test tna-asic-temp cmd2nd flash type /etc/freertr/tna_temp.cfg
alias test tna-asic-temp description display forwarding asic cpu temperature
!
alias test tna-linux-access command ssh 10.255.255.1 /vrf lin /user sysadmin /pass sysadmin
alias test tna-linux-access description access linux console
!
alias test tna-linux-temp command attach shell2 acpi -V
alias test tna-linux-temp description display main cpu temperature
!
alias test tna-port-detect command attach shell1 /nix/var/nix/profiles/RARE/bin/sh_tna_ports.sh
alias test tna-port-detect cmd2nd test hwpop uclipm /etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply add
alias test tna-port-detect description Detect TOFINO ports
!
alias test tna-port-remove command attach shell1 /nix/var/nix/profiles/RARE/bin/sh_tna_ports.sh
alias test tna-port-remove cmd2nd test hwpop uclipm /etc/freertr/tna_ports.cfg server p4lang p4 ports ready auto normal apply del
alias test tna-port-remove description Remove NON RDY TOFINO ports
!
server telnet INB_MGNT
 security protocol telnet
 exec logging
 no exec authorization
 no login authentication
 login logging
 interface loopback20965
 vrf INB_MGNT
 exit
!
server telnet oob
 security authentication usr
 security rsakey rsa
 security dsakey dsa
 security ecdsakey ecdsa
 second-port 22
 exec logging
 no exec authorization
 login authentication usr
 login logging
 vrf oob
 exit
!
server telnet p4
 security protocol telnet
 exec logging
 no exec authorization
 no login authentication
 login logging
 vrf p4
 exit
!
server p4lang p4
 export-vrf CORE 1
 export-vrf INB_MGNT 4
 export-bridge 1000
 export-bridge 1001
 export-port sdn1 260 100 0 1 0
 export-port sdn3 276 100 0 1 0
 export-port sdn7 308 100 0 1 0
 interconnect ethernet0
 vrf p4
 exit
!
server prometheus pr
 sensor ifaces-acl
 sensor ifaces-hw
 sensor ifaces-hwp
 sensor ifaces-sw
 sensor ifaces-swp
 interface ethernet1
 vrf oob
 exit
!
server prometheus PR-NMAAS
 port 9002
 sensor ifaces-acl
 sensor ifaces-hw
 sensor ifaces-hwp
 sensor ifaces-sw
 sensor ifaces-swp
 interface tunnel123
 vrf oob
 exit
!
client proxy oob
client name-server 128.142.17.5
client upgrade-server http://upgrade.nop.hu/
client upgrade-backup
client config-server http://wdv.rare.nmaas.eu/webdav/
client config-username rare
client config-password $v10$cmFyZQ==
client config-backup
client config-archive
client time-server europe.pool.ntp.org
client time-zone CET
!
end
