Juniper Acs Lab Stack E4200 Config 11 12 2014

## Last commit: 2014-08-26 15:03:03 PDT by admin
version 10.1R1.8;
system {
host-name ex4200;
domain-name mgmt.acsportal.com;
domain-search [ mgmt.acsportal.com acsportal.com ];
backup-router 10.10.0.129;
time-zone America/Los_Angeles;
root-authentication {
encrypted-password "$1$oYsi6/o5$vhBeaMqXOoKI03Q19u3oZ/"; ## SECRET-DATA
}
name-server {
192.168.15.5;
192.168.15.6;
}
login {
user admin {
full-name ACSAdministrator;
uid 2001;
class super-user;
authentication {
encrypted-password 6baLvdAQfZe2U; ## SECRET-DATA
}
}
user josh {
uid 1099;
class super-user;
authentication {
encrypted-password "$1$5VKlZWlj$/blr4binK0jsSICLwUIjW/"; ## SECR
ET-DATA
}
}
}
services {
ssh;
telnet;
web-management {
http {
port 80;
}
https {
port 443;
local-certificate cert;
}
}
dhcp {
default-lease-time 86400;
domain-name acsportal.com;
name-server {
192.168.15.5;
192.168.15.6;
}
domain-search {
acsportal.com;
mgmt.acsportal.com;
}
}
}
ntp {
server 192.168.15.5 prefer;
server 192.168.15.6;
}
}
chassis {
aggregated-devices {
ethernet {
device-count 16;
}
}
fpc 0 {
pic 0 {
sfpplus {
pic-mode 10g;
}
}
pic 1 {
sfpplus {
pic-mode 10g;
}
}
}
fpc 2 {
pic 0 {
sfpplus {
pic-mode 10g;
}
}
pic 1 {
sfpplus {
pic-mode 10g;
}
}
}
}
interfaces {
ge-0/0/0 {
mtu 1514;
ether-options {
auto-negotiation;
flow-control;
link-mode automatic;
speed {
auto-negotiation;
}
}
unit 0 {
family ethernet-switching {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-0/0/1 {
mtu 1514;
ether-options {
auto-negotiation;
flow-control;
link-mode automatic;
speed {
auto-negotiation;
}
}
unit 0 {
port-mode access;
vlan {
members DMZ;
}
}
}
}
ge-0/0/2 {
unit 0 {
family ethernet-switching
port-mode access;
vlan {
members DMZ;
}
}
}
}
ge-0/0/3 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-0/0/4 {
mtu 1514;
ether-options {
auto-negotiation;
no-flow-control;
link-mode full-duplex;
speed {
100m;
}
}
unit 0 {
port-mode access;
vlan {
members Internet;
}
}
}
}
ge-0/0/5 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-0/0/6 {
unit 0 {
port-mode access;
vlan {
members DMZ;
}
}
}
}
ge-0/0/7 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-0/0/8 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-0/0/9 {
unit 0 {
family ethernet-switching;
}
}
ge-0/0/10 {
unit 0 {
}
}
ge-0/0/11 {
unit 0 {
port-mode trunk;
native-vlan-id TLD;
}
}
}
ge-0/0/12 {
description 3par;
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-0/0/13 {
unit 0 {
}
}
ge-0/0/14 {
unit 0 {
}
}
ge-0/0/15 {
unit 0 {
port-mode trunk;
vlan {
members VLAN-999;
}
native-vlan-id native;
}
}
}
ge-0/0/16 {
unit 0 {
}
}
ge-0/0/18 {
ether-options {
802.3ad ae12;
}
}
ge-0/0/19 {
ether-options {
802.3ad ae12;
}
}
ge-0/0/20 {
description "Sun x86 Blade BL3";
unit 0 {
port-mode trunk;
vlan {
members [ Client_Subnet Cloud_Subnet DMZ ESX_Mgmt ESX_VMotio
n IP_Storage Internet STORAGE VLAN-1036 VLAN-55 vmotion Server_Subnet ];
}
native-vlan-id ESX_Mgmt;
}
}
}
ge-0/0/21 {
apply-macro juniper-port-profile {
Default;
}
}
ge-0/0/22 {
ether-options {
802.3ad ae1;
}
}
ge-0/0/23 {
ether-options {
802.3ad ae2;
}
}
ge-0/0/24 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-0/0/25 {
enable;
unit 0 {
port-mode access;
}
}
}
ge-0/0/26 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-0/0/27 {
unit 0 {
port-mode access;
}
}
}
ge-0/0/28 {
description max;
unit 0 {
port-mode trunk;
vlan {
members [ Client_Subnet DMZ Internet STORAGE Server_Subnet T
LD VLAN-999 vmotion VLAN-1036 ];
}
}
}
}
ge-0/0/29 {
description max;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/30 {
description entity;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/31 {
description entity;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/32 {
unit 0 {
port-mode trunk;
vlan {
members [ ESX_VMotion IP_Storage ];
}
}
}
}
ge-0/0/33 {
unit 0 {
port-mode trunk;
vlan {
members [ Client_Subnet Cloud_Subnet DMZ Internet STORAGE VL
AN-1036 VLAN-55 vmotion ESX_Mgmt ESX_VMotion IP_Storage ];
}
}
}
}
ge-0/0/34 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/35 {
unit 0 {
port-mode trunk;
vlan {
members [ STORAGE TLD ];
}
}
}
}
ge-0/0/36 {
enable;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/37 {
enable;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/38 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/39 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/40 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/41 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-0/0/42 {
ether-options {
802.3ad ae0;
}
}
ge-0/0/44 {
ether-options {
802.3ad ae3;
}
}
ge-0/0/45 {
ether-options {
802.3ad ae4;
}
}
ge-0/0/46 {
ether-options {
speed {
auto-negotiation;
}
}
unit 0 {
port-mode trunk;
vlan {
members [ VLAN-999 VLAN-55 ];
}
}
}
}
ge-0/0/47 {
"Layer 2 Uplink";
}
unit 0 {
port-mode trunk;
vlan {
members [ DMZ Internet STORAGE TLD ];
}
}
}
}
xe-0/1/0 {
unit 0 {
port-mode trunk;
vlan {
members [ TLD DMZ vmotion STORAGE ];
}
}
}
}
xe-0/1/2 {
ether-options {
802.3ad ae8;
}
}
ge-1/0/0 {
Default;
}
unit 0 {
port-mode access;
}
}
}
ge-1/0/1 {
unit 0 {
port-mode access;
vlan {
members DMZ;
}
}
}
}
ge-1/0/2 {
unit 0 {
port-mode access;
vlan {
members DMZ;
}
}
}
}
ge-1/0/3 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-1/0/4 {
unit 0 {
port-mode access;
vlan {
members Internet;
}
}
}
}
ge-1/0/5 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-1/0/6 {
unit 0 {
port-mode access;
vlan {
members DMZ;
}
}
}
}
ge-1/0/7 {
Default;
}
}
ge-1/0/8 {
unit 0 {
port-mode access;
vlan {
members STORAGE;
}
}
}
}
ge-1/0/9 {
unit 0 {
port-mode access;
}
}
}
ge-1/0/10 {
unit 0 {
}
}
ge-1/0/11 {
unit 0 {
port-mode trunk;
vlan {
members [ DMZ STORAGE TLD VLAN-55 ESX_Mgmt ESX_VMotion IP_St
orage ];
}
}
}
}
ge-1/0/12 {
unit 0 {
port-mode access;
}
}
}
ge-1/0/13 {
unit 0 {
}
}
ge-1/0/14 {
unit 0 {
port-mode access;
vlan {
members Server_Subnet;
}
}
}
}
ge-1/0/15 {
unit 0 {
port-mode access;
vlan {
members STORAGE;
}
}
}
}
ge-1/0/16 {
unit 0 {
}
}
ge-1/0/17 {
unit 0 {
}
}
ge-1/0/18 {
ether-options {
802.3ad ae12;
}
}
ge-1/0/19 {
ether-options {
802.3ad ae12;
}
}
ge-1/0/20 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/21 {
unit 0 {
port-mode access;
}
}
}
ge-1/0/22 {
ether-options {
802.3ad ae1;
}
}
ge-1/0/23 {
ether-options {
802.3ad ae2;
}
}
ge-1/0/24 {
unit 0 {
}
}
ge-1/0/25 {
unit 0 {
port-mode access;
}
}
}
ge-1/0/26 {
unit 0 {
}
}
ge-1/0/27 {
unit 0 {
port-mode access;
}
}
}
ge-1/0/28 {
description max;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/29 {
description max;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/30 {
description entity;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/31 {
description entity;
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/32 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/33 {
unit 0 {
port-mode trunk;
vlan {
members [ ESX_VMotion
}
}
}
}
ge-1/0/34 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/35 {
unit 0 {
port-mode trunk;
vlan {
members [ STORAGE TLD
}
}
}
}
ge-1/0/36 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/37 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/38 {
unit 0 {
port-mode trunk;
vlan {
IP_Storage ];
IP_Storage ];
];
];
];
IP_Storage ];
}
}
}
}
ge-1/0/39 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/40 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/41 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-1/0/42 {
ether-options {
802.3ad ae0;
}
}
ge-1/0/44 {
ether-options {
802.3ad ae3;
}
}
ge-1/0/45 {
ether-options {
802.3ad ae4;
}
}
ge-1/0/46 {
ether-options {
speed {
1g;
}
}
unit 0 {
}
}
ge-1/0/47 {
"Layer 2 Uplink";
}
unit 0 {
port-mode trunk;
vlan {
members [ DMZ Internet STORAGE TLD ];
}
}
}
}
ge-2/0/0 {
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-2/0/1 {
unit 0 {
port-mode access;
vlan {
members Internet;
}
}
}
}
ge-2/0/2 {
unit 0 {
port-mode access;
vlan {
members DMZ;
}
}
}
}
ge-2/0/3 {
unit 0 {
port-mode access;
vlan {
members DMZ;
}
}
LD
LD
LD
LD
LD
}
}
ge-2/0/4 {
unit 0 {
port-mode trunk;
vlan {
members [ Client_Subnet
VLAN-999 vmotion VLAN-1036 ];
}
}
}
}
ge-2/0/5 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-2/0/6 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-2/0/7 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-2/0/8 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-2/0/9 {
unit 0 {
DMZ Internet STORAGE Server_Subnet T
port-mode trunk;
vlan {
}
}
}
}
ge-2/0/10 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-2/0/11 {
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ge-2/0/12 {
description "SB6240 ESXi";
ether-options {
802.3ad ae7;
}
}
ge-2/0/13 {
description "SB6240 ESXi";
ether-options {
802.3ad ae7;
}
}
ge-2/0/14 {
unit 0 {
port-mode access;
vlan {
members Server_Subnet;
}
}
}
}
ge-2/0/15 {
unit 0 {
port-mode access;
vlan {
members STORAGE;
}
}
}
}
ge-2/0/16 {
unit 0 {
port-mode access;
vlan {
members STORAGE;
}
}
}
}
ge-2/0/17 {
description 3par;
unit 0 {
port-mode access;
vlan {
members Client_Subnet;
}
}
}
}
ge-2/0/18 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-2/0/19 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-2/0/20 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-2/0/21 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-2/0/22 {
ether-options {
802.3ad ae1;
}
}
ge-2/0/23 {
ether-options {
802.3ad ae2;
}
}
ge-2/0/24 {
ether-options {
802.3ad ae5;
}
}
ge-2/0/25 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-2/0/26 {
ether-options {
802.3ad ae5;
}
}
ge-2/0/27 {
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-2/0/28 {
ether-options {
802.3ad ae5;
}
}
ge-2/0/29 {
unit 0 {
port-mode trunk;
vlan {
members [ STORAGE
}
}
}
}
ge-2/0/30 {
unit 0 {
{
TLD ];
port-mode access;
}
}
}
ge-2/0/31 {
unit 0 {
port-mode access;
vlan {
members VLAN-888;
}
}
}
}
ge-2/0/32 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-2/0/33 {
unit 0 {
port-mode access;
}
}
}
ge-2/0/34 {
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-2/0/35 {
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-2/0/36 {
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-2/0/37 {
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-2/0/38 {
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-2/0/39 {
unit 0 {
port-mode access;
vlan {
members VLAN-999;
}
}
}
}
ge-2/0/40 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-2/0/41 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
ge-2/0/42 {
description "e4a interface on NetApp";
unit 0 {
port-mode access;
vlan {
members IP_Storage;
}
}
}
}
ge-2/0/43 {
description "e4a interface on NetApp";
unit 0 {
port-mode access;
vlan {
members IP_Storage;
}
}
}
}
ge-2/0/44 {
unit 0 {
port-mode trunk;
}
}
}
ge-2/0/45 {
unit 0 {
port-mode trunk;
}
}
}
ge-2/0/46 {
unit 0 {
port-mode access;
vlan {
members TLD;
}
}
}
}
xe-2/1/0 {
unit 0 {
port-mode trunk;
vlan {
members [ TLD STORAGE DMZ vmotion ];
}
}
}
}
xe-2/1/2 {
ether-options {
802.3ad ae8;
}
}
ae0 {
description x4500;
aggregated-ether-options {
lacp {
active;
}
}
unit 0 {
port-mode access;
vlan {
members STORAGE;
}
}
}
}
ae1 {
description power;
lacp {
active;
periodic slow;
}
}
unit 0 {
port-mode trunk;
vlan {
members [ TLD IP_Storage ];
}
}
}
}
ae2 {
description slave;
lacp {
active;
periodic slow;
}
}
unit 0 {
port-mode trunk;
vlan {
members [ TLD IP_Storage ];
}
}
}
}
ae3 {
description power-storage;
lacp {
active;
periodic slow;
}
}
unit 0 {
port-mode access;
vlan {
members STORAGE;
}
}
}
}
ae4 {
description slave-storage;
lacp {
active;
periodic slow;
}
}
unit 0 {
port-mode access;
vlan {
members STORAGE;
}
}
}
}
ae5 {
description M3000;
lacp {
active;
}
}
unit 0 {
port-mode trunk;
vlan {
members [ STORAGE TLD VLAN-55 ];
}
}
}
}
ae7 {
description "X6240 ESXi";
unit 0 {
port-mode trunk;
vlan {
}
}
}
}
ae8 {
description "vPC to Nexus 7k core";
lacp {
passive;
}
}
unit 0 {
description Server-VLAN-30;
port-mode trunk;
vlan {
members [ C1000v-980-control C1000v-981-data C1000v-982-pack
et Client_Subnet DMZ ESX_Mgmt ESX_VMotion IP_Storage STORAGE Server_Subnet TLD V
LAN-1036 VLAN-55 VLAN-999 vmotion ];
}
}
}
}
ae12 {
description "ironbar aggregate";
lacp {
active;
}
}
unit 0 {
vlan {
members TLD;
}
}
}
}
ae13 {
disable;
}
me0 {
unit 0 {
family inet {
address 10.10.0.135/23;
}
}
}
vlan {
unit 25 {
family inet {
address 192.168.25.1/24;
}
}
unit 26 {
family inet {
address 192.168.55.1/24;
}
}
unit 27 {
family inet {
address 10.10.30.1/23;
}
}
unit 28 {
family inet {
address 10.10.32.1/23;
}
}
unit 29 {
family inet {
address 10.10.36.1/23;
}
}
unit 30 {
family inet {
address 10.10.10.1/24;
}
}
}
}
forwarding-options {
helpers {
bootp {
server 192.168.25.29;
interface {
vlan.28;
vlan.27;
vlan.30;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 next-hop 192.168.25.2;
route 10.10.0.0/25 next-hop 192.168.25.2;
}
}
protocols {
rstp {
interface ge-0/0/47.0 {
mode point-to-point;
}
}
interface ae8.0 {
}
}
}
policy-options {
prefix-list NWA {
4.20.0.0/16;
69.0.0.0/8;
187.0.0.0/8;
}
prefix-list net-dot-35;
policy-statement WarrenG {
term Regulatorz {
from {
prefix-list-filter NWA exact reject;
}
then accept;
}
}
}
class-of-service {
classifiers {
dscp juniper_dscp_classifier {
import default;
forwarding-class voice {
loss-priority low code-points 101110;
}
}
ieee-802.1 juniper_ieee_classifier {
import default;
forwarding-class voice {
loss-priority low code-points 101;
}
}
}
forwarding-classes {
class voice queue-num 7;
class expedited-forwarding queue-num 5;
class assured-forwarding queue-num 1;
class best-effort queue-num 0;
}
interfaces {
ge-0/0/47 {
unit 0 {
classifiers {
dscp juniper_dscp_classifier;
ieee-802.1 juniper_ieee_classifier;
}
}
}
ge-1/0/47 {
unit 0 {
classifiers {
dscp juniper_dscp_classifier;
ieee-802.1 juniper_ieee_classifier;
}
}
}
}
scheduler-maps {
juniper-port-profile-map {
forwarding-class voice scheduler strict-priority-scheduler;
forwarding-class expedited-forwarding scheduler expedited-scheduler;
forwarding-class assured-forwarding scheduler assured-scheduler;
forwarding-class best-effort scheduler best-effort-scheduler;
}
}
schedulers {
strict-priority-scheduler {
transmit-rate percent 10;
buffer-size percent 5;
priority strict-high;
}
expedited-scheduler {
priority low;
}
assured-scheduler {
priority low;
}
best-effort-scheduler {
priority low;
}
}
}
security {
certificates {
local {
cert {
"Yo Yo!\n "; ## SECRET-DATA
}
}
}
}
ethernet-switching-options {
inactive: secure-access-port {
dhcp-trusted;
}
dhcp-trusted;
}
vlan native {
arp-inspection;
examine-dhcp;
}
}
voip;
}
vlans {
C1000v-980-control {
vlan-id 980;
}
C1000v-981-data {
vlan-id 981;
}
C1000v-982-packet {
vlan-id 982;
}
Client_Subnet {
vlan-id 1032;
l3-interface vlan.28;
}
Cloud_Subnet {
vlan-id 1034;
}
DMZ {
vlan-id 15;
}
ESX_Mgmt {
description "Management VLAN for vSphere service console";
vlan-id 1010;
}
ESX_VMotion {
vlan-id 1011;
}
IP_Storage {
vlan-id 1012;
}
Internet {
description "Between router & FW";
vlan-id 67;
}
STORAGE {
vlan-id 65;
}
Server_Subnet {
vlan-id 1030;
}
TLD {
vlan-id 25;
interface {
ge-0/0/9.0;
ge-0/0/10.0;
ge-0/0/11.0;
ge-0/0/13.0;
ge-0/0/14.0;
ge-0/0/16.0;
ge-1/0/10.0;
ge-1/0/13.0;
ge-1/0/16.0;
ge-1/0/17.0;
ge-0/0/47.0;
ge-1/0/46.0;
ge-1/0/47.0;
ge-1/0/12.0;
}
}
VLAN-1036 {
description "CNSA PXE network";
vlan-id 1036;
}
VLAN-55 {
description "Upstairs OoB Managment";
vlan-id 55;
}
VLAN-888 {
description TEST;
vlan-id 888;
}
VLAN-889;
VLAN-999 {
description "Downstairs Management Network";
vlan-id 999;
interface {
ge-1/0/0.0;
}
}
mgmt;
native {
vlan-id 1;
}
vmotion {
description "VMotion across Juniper and Cisco";
vlan-id 85;
}
}
virtual-chassis {
preprovisioned;
no-split-detection;
member 1 {
role routing-engine;
serial-number BP0208110883;
}
member 2 {
role routing-engine;
}
member 0 {
role line-card;
}
}

Juniper Acs Lab Stack E4200 Config 11 12 2014

Enviado por

Dados do documento

Título original

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

Juniper Acs Lab Stack E4200 Config 11 12 2014

Enviado por

Direitos autorais:

Formatos disponíveis

## Last commit: 2014-08-26 15:03:03 PDT by admin

DMZ Internet STORAGE Server_Subnet T

DMZ Internet STORAGE Server_Subnet T

DMZ Internet STORAGE Server_Subnet T

DMZ Internet STORAGE Server_Subnet T

DMZ Internet STORAGE Server_Subnet T

Você também pode gostar