RANCID Config Viewer

Cấu hình: 172.16.14.244

Kích thước: 105,104 bytes | Cập nhật: 2026-04-10 01:12:16

Tải về | Quay lại danh sách

#RANCID-CONTENT-TYPE: junos # # HCM-DH-FW-SRX-01> show chassis clocks # HCM-DH-FW-SRX-01> show chassis environment # node0: # -------------------------------------------------------------------------- # Class Item Status # Temp Routing Engine OK # Routing Engine CPU OK # Power Power Supply 0 OK # # node1: # -------------------------------------------------------------------------- # Class Item Status # Temp Routing Engine OK # Routing Engine CPU OK # Power Power Supply 0 OK # # HCM-DH-FW-SRX-01> show chassis firmware local # HCM-DH-FW-SRX-01> show chassis firmware # node0: # -------------------------------------------------------------------------- # Part Type Version # FPC O/S Version 22.4R3-S2.11 by builder on 2024-05-10 21:00:31 UTC # FWDD O/S Version 22.4R3-S2.11 by builder on 2024-05-10 21:00:31 UTC # # node1: # -------------------------------------------------------------------------- # Part Type Version # FPC O/S Version 22.4R3-S2.11 by builder on 2024-05-10 21:00:31 UTC # FWDD O/S Version 22.4R3-S2.11 by builder on 2024-05-10 21:00:31 UTC # # HCM-DH-FW-SRX-01> show chassis fpc detail # node0: # -------------------------------------------------------------------------- # Slot 0 information: # State Online # Total CPU DRAM ---- CPU less FPC ---- # # node1: # -------------------------------------------------------------------------- # Slot 0 information: # State Online # Total CPU DRAM ---- CPU less FPC ---- # # HCM-DH-FW-SRX-01> show chassis hardware detail # node0: # -------------------------------------------------------------------------- # Hardware inventory: # Item Version Part number Serial number Description # Chassis CV4822AN1578 SRX300 # Routing Engine REV 0x10 650-077890 CV4822AN1578 RE-SRX300 # da0 7640 MB USB Flash Module Nand Flash # usb0 (addr 1) product 0x0000 0 vendor 0x0000 uhub0 # usb0 (addr 2) product 0x0046 70 vendor 0x1370 umass0 # FPC 0 BUILTIN BUILTIN FPC # PIC 0 6xGE,2xGE SFP Base PIC # Xcvr 6 NON-JNPR 241210W0054 SFP-SX # Xcvr 7 NON-JNPR 241210W0058 SFP-SX # Power Supply 0 # # node1: # -------------------------------------------------------------------------- # Hardware inventory: # Item Version Part number Serial number Description # Chassis CV4822AN1256 SRX300 # Routing Engine REV 0x10 650-077890 CV4822AN1256 RE-SRX300 # da0 7640 MB USB Flash Module Nand Flash # usb0 (addr 1) product 0x0000 0 vendor 0x0000 uhub0 # usb0 (addr 2) product 0x0046 70 vendor 0x1370 umass0 # FPC 0 BUILTIN BUILTIN FPC # PIC 0 6xGE,2xGE SFP Base PIC # Xcvr 6 NON-JNPR 241210W0057 SFP-SX # Xcvr 7 3! NON-JNPR 241210W0056 SFP-SX # Power Supply 0 # # HCM-DH-FW-SRX-01> show chassis hardware models # HCM-DH-FW-SRX-01> show chassis routing-engine # Routing Engine status: # Model RE-SRX300 # Serial ID CV4822AN1578 # # Routing Engine status: # Model RE-SRX300 # Serial ID CV4822AN1256 # # HCM-DH-FW-SRX-01> show chassis scb # HCM-DH-FW-SRX-01> show chassis sfm detail # HCM-DH-FW-SRX-01> show chassis ssb # HCM-DH-FW-SRX-01> show chassis feb detail # HCM-DH-FW-SRX-01> show chassis feb # HCM-DH-FW-SRX-01> show chassis cfeb # HCM-DH-FW-SRX-01> show chassis alarms # node0: # -------------------------------------------------------------------------- # No alarms currently active # # node1: # -------------------------------------------------------------------------- # No alarms currently active # # HCM-DH-FW-SRX-01> show system license # License usage: # Licenses Licenses Licenses # Feature Feature Feature # Feature name used installed needed Expiry # remote-access-ipsec-vpn-client 0 2 0 permanent # remote-access-juniper-std 1 2 0 permanent # # Licenses installed: none # # HCM-DH-FW-SRX-01> show system boot-messages # node0: # -------------------------------------------------------------------------- # kld_map_v: 0x8ff80000, kld_map_p: 0x0 # Running in PARTITIONED TLB MODE # Copyright (c) 1996-2024, Juniper Networks, Inc. # All rights reserved. # Copyright (c) 1992-2007 The FreeBSD Project. # Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 # The Regents of the University of California. All rights reserved. # FreeBSD is a registered trademark of The FreeBSD Foundation. # can't re-use a leaf (perf_mon)! # can't re-use a leaf (threshold)! # can't re-use a leaf (debug)! # FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs # Security policy loaded: Junos MAC/veriexec (mac_veriexec) # Security policy loaded: JUNOS MAC/pcap (mac_pcap) # Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot) # MAC/veriexec fingerprint module loaded: SHA256 # MAC/veriexec fingerprint module loaded: SHA1 # netisr_init: forcing maxthreads from 4 to 2 # random: <Software, Yarrow> initialized # cpu0 on motherboard # : CAVIUM's OCTEON 70XX/71XX CPU Rev. 0.2 with no FPU implemented # L1 Cache: I size 78kb(128 line), D size 32kb(128 line), thirty two way. # L2 Cache: Size 512kb, 4 way # obio0 on motherboard # uart0: <Octeon-16550 channel 0> on obio0 # uart0: console (9600,n,8,1) # twsi0 on obio0 # set clock 0x49 # xhci0: <Cavium Octeon 7xxx xHCI Host Driver> on obio0 # usb0: <USB bus for xHCI Controller> on xhci0 # usb0: USB revision 3.0 # uhub0: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1 # uhub0: 2 ports with 2 removable, self powered # xhci1: <Cavium Octeon 7xxx xHCI Host Driver> on obio0 # usb1: <USB bus for xHCI Controller> on xhci1 # usb1: USB revision 3.0 # uhub1: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1 # uhub1: 2 ports with 2 removable, self powered # cpld0 on obio0 # pcib0: <Cavium on-chip PCIe HOST bridge> on obio0 # Disabling Octeon big bar support # pcib0: Initialized controller # pci0: <PCI bus> on pcib0 # pci0: <network, ethernet> at device 0.0 (no driver attached) # pci0: <network, ethernet> at device 0.1 (no driver attached) # gblmem0 on obio0 # octpkt0: <Octeon RGMII> on obio0 # boot_bus0 on obio0 # cfi0: <Macronix MX25L64 - 8MB> on boot_bus0 # cfi1: <Macronix MX25L64 - 8MB> on boot_bus0 # umass0: Swissbit USB Flash Module, rev 2.00/1.00, addr 2 # Timecounter "mips" frequency 1200000000 Hz quality 0 # da0 at umass-sim0 bus 0 target 0 lun 0 # da0: <Swissbit USB Flash Module 2000> Fixed Direct Access SCSI-0 device # da0: 40.000MB/s transfers # da0: 7648MB (15663104 512 byte sectors: 255H 63S/T 974C) # random: unblocking device. # hwpmc: OCTEON/4/64/0x1ff<INT,USR,SYS,EDG,THR,REA,WRI,INV,QUA> # Trying to mount root from ufs:/dev/da0s1a # # LPC bus driver # lpcbus0 on cpld0 # tpm0: <Trusted Platform Module> on lpcbus0 # tpm: IFX SLB 9660 TT 1.2 rev 0x10 # # node1: # -------------------------------------------------------------------------- # kld_map_v: 0x8ff80000, kld_map_p: 0x0 # Running in PARTITIONED TLB MODE # Copyright (c) 1996-2024, Juniper Networks, Inc. # All rights reserved. # Copyright (c) 1992-2007 The FreeBSD Project. # Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 # The Regents of the University of California. All rights reserved. # FreeBSD is a registered trademark of The FreeBSD Foundation. # can't re-use a leaf (perf_mon)! # can't re-use a leaf (threshold)! # can't re-use a leaf (debug)! # FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs # Security policy loaded: Junos MAC/veriexec (mac_veriexec) # Security policy loaded: JUNOS MAC/pcap (mac_pcap) # Security policy loaded: JUNOS MAC/runasnonroot (mac_runasnonroot) # MAC/veriexec fingerprint module loaded: SHA256 # MAC/veriexec fingerprint module loaded: SHA1 # netisr_init: forcing maxthreads from 4 to 2 # random: <Software, Yarrow> initialized # cpu0 on motherboard # : CAVIUM's OCTEON 70XX/71XX CPU Rev. 0.2 with no FPU implemented # L1 Cache: I size 78kb(128 line), D size 32kb(128 line), thirty two way. # L2 Cache: Size 512kb, 4 way # obio0 on motherboard # uart0: <Octeon-16550 channel 0> on obio0 # uart0: console (9600,n,8,1) # twsi0 on obio0 # set clock 0x49 # xhci0: <Cavium Octeon 7xxx xHCI Host Driver> on obio0 # usb0: <USB bus for xHCI Controller> on xhci0 # usb0: USB revision 3.0 # uhub0: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1 # uhub0: 2 ports with 2 removable, self powered # xhci1: <Cavium Octeon 7xxx xHCI Host Driver> on obio0 # usb1: <USB bus for xHCI Controller> on xhci1 # usb1: USB revision 3.0 # uhub1: vendor 0x0000 XHCI root hub, class 9/0, rev 3.00/1.00, addr 1 # uhub1: 2 ports with 2 removable, self powered # cpld0 on obio0 # pcib0: <Cavium on-chip PCIe HOST bridge> on obio0 # Disabling Octeon big bar support # pcib0: Initialized controller # pci0: <PCI bus> on pcib0 # pci0: <network, ethernet> at device 0.0 (no driver attached) # pci0: <network, ethernet> at device 0.1 (no driver attached) # gblmem0 on obio0 # octpkt0: <Octeon RGMII> on obio0 # boot_bus0 on obio0 # cfi0: <Macronix MX25L64 - 8MB> on boot_bus0 # cfi1: <Macronix MX25L64 - 8MB> on boot_bus0 # umass0: Swissbit USB Flash Module, rev 2.00/1.00, addr 2 # Timecounter "mips" frequency 1200000000 Hz quality 0 # da0 at umass-sim0 bus 0 target 0 lun 0 # da0: <Swissbit USB Flash Module 2000> Fixed Direct Access SCSI-0 device # da0: 40.000MB/s transfers # da0: 7648MB (15663104 512 byte sectors: 255H 63S/T 974C) # random: unblocking device. # hwpmc: OCTEON/4/64/0x1ff<INT,USR,SYS,EDG,THR,REA,WRI,INV,QUA> # Trying to mount root from ufs:/dev/da0s1a # WARNING: / was not properly dismounted # WARNING: / was not properly dismounted # WARNING: R/W mount of /cf/var denied. Filesystem is not clean - run fsck # # LPC bus driver # lpcbus0 on cpld0 # tpm0: <Trusted Platform Module> on lpcbus0 # tpm: IFX SLB 9660 TT 1.2 rev 0x10 # # HCM-DH-FW-SRX-01> show system core-dumps # node0: # -------------------------------------------------------------------------- # -rw-rw---- 1 root wheel 678383 Jun 14 2025 /jail/var/tmp/httpd.core.0.gz # -rw-rw---- 1 root wheel 476620 Jul 26 2025 /jail/var/tmp/httpd.core.1.gz # -rw-rw---- 1 root wheel 637899 Jan 23 00:24 /jail/var/tmp/httpd.core.2.gz # -rw-rw---- 1 root wheel 731577 Feb 7 07:04 /jail/var/tmp/httpd.core.3.gz # total files: 4 # # node1: # -------------------------------------------------------------------------- # # HCM-DH-FW-SRX-01> show version detail # node0: # -------------------------------------------------------------------------- # Hostname: HCM-DH-FW-SRX-01 # Model: srx300 # Junos: 22.4R3-S2.11 # JUNOS Software Release [22.4R3-S2.11] # KERNEL 22.4R3-S2.11 #0 built by builder on 2024-05-10 20:45:39 UTC # MGD release 20240510.162641_builder.r1421059 built by builder on 2024-05-10 16:48:52 UTC # CLI release 20240510.162641_builder.r1421059 built by builder on 2024-05-10 16:44:24 UTC # JNUD release 20240510.162641_builder.r1421059 built by builder on 2024-05-10 16:48:52 UTC # RPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:33 UTC # CHASSISD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:13 UTC # BFDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:42 UTC # IKED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:52 UTC # GKSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:08 UTC # GKMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:08 UTC # PKID release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # SENDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # DFWD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:15 UTC # DCD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:04 UTC # SNMPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:12 UTC # MIB2D release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:26 UTC # VRRPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:40 UTC # ALARMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:10 UTC # PFED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:29 UTC # CRAFTD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:14 UTC # SAMPLED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:34 UTC # SRRD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:36 UTC # RMOPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # COSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:50 UTC # IRSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:19 UTC # FUD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:16 UTC # KSYNCD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:22 UTC # HTTPD-GK release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:55 UTC # DHCPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:15 UTC # PPPOED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:30 UTC # PPPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:30 UTC # DFCD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:15 UTC # LACPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:24 UTC # flowd_octeon_hm release 22.4R3-S2.11 built by builder on 2024-05-10 21:00:31 UTC # USBD release 22.4R3-S2.11 built by builder on 2024-05-10 20:51:27 UTC # OAMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:28 UTC # TNETD release 22.4R3-S2.11 built by builder on 2024-05-10 20:51:42 UTC # CFMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:13 UTC # JDHCPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:20 UTC # PSSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:31 UTC # AUTHD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:08 UTC # PHONE-HOME release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # RES-CLEANUPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:33 UTC # APPIDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:11 UTC # APPSECURED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:11 UTC # IDPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:25 UTC # SHM-RTSDBD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:35 UTC # DATAPATH-TRACED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:15 UTC # SMID release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:35 UTC # SMIHELPERD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:36 UTC # R2CPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:32 UTC # UACD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:53 UTC # ESSMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:16 UTC # TAD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:38 UTC # AUTOD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:12 UTC # JSRPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:55 UTC # NSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:55 UTC # AAMWD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:51 UTC # DYN-FILTERD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:51 UTC # NSTRACED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:56 UTC # FWAUTHD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:51 UTC # JSRPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:55 UTC # PROFILERD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:26 UTC # OAMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:28 UTC # RTLOGD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:56 UTC # UTMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:58 UTC # SYSHMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:57 UTC # SMTPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:56 UTC # WWAND release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:59 UTC # WLAND release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:53 UTC # USERIDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:53 UTC # DOOD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:54 UTC # PPMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:46 UTC # LRMUXD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:43 UTC # PGMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:29 UTC # BFDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:42 UTC # AUDITD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:07 UTC # L2ALD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:23 UTC # EVENTD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:16 UTC # L2CPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:24 UTC # MCSNOOPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:45 UTC # MPLSOAMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:46 UTC # WEB-API release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:10 UTC # MGD-API release 22.4R3-S2.11 built by builder on 2024-05-10 20:57:02 UTC # NTAD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:46 UTC # SDPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:34 UTC # SDXD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # DOT1XD release 22.4R3-S2.11 built by builder on 2024-05-10 21:00:59 UTC # IPFD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:53 UTC # base-actions-dd release 20240510.162641_builder.r1421059 built by builder on 2024-05-10 16:44:18 UTC # junos-base-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:12 UTC # jkernel-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # appsecure-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:03 UTC # aprobe-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:03 UTC # authd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:04 UTC # autod-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:04 UTC # bfdd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:41 UTC # cfm-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:05 UTC # chassis_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:05 UTC # collector-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # cos_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # cpcdd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # dcd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # dfcd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # dot1xd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:02 UTC # dyn-filterd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # elmi-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:07 UTC # essmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:07 UTC # forwarding_options_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:08 UTC # gres-test-point-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:08 UTC # httpd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:09 UTC # iccp_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:09 UTC # jappid-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:09 UTC # jcrypto-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # jcrypto_usp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # jdocs-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:30:54 UTC # jidpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # jkernel_jseries-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # jkernel_srxha-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jkernel_srxsme-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jkernel_usp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jroute-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jroute_junos-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jsdxd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:12 UTC # junos-lrmuxd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # junos-ntad-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-amt-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # junos-routing-auto-bw-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:46 UTC # junos-routing-backup-selection-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-backup-selection-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:40 UTC # junos-routing-bgp-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # junos-routing-bgp-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # junos-routing-bgpmcast-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # junos-routing-ccc-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-dvmrp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-egress-protection-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-esis-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-evpn-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-exp-seg-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:49 UTC # junos-routing-hakr-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-igmp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-igp-sr-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-infra-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-infra-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-infra-dyn-tunnel-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-infra-dyn-tunnel-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-infra-frr-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-infra-frr-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:38 UTC # junos-routing-infra-mpls-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:38 UTC # junos-routing-infra-nsr-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-infra-resolver-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-infra-rt-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-infra-srlg-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-infra-telemetry-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-ingress-replication-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:46 UTC # junos-routing-instance-proto-intf-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-instance-virtual-router-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-instance-vrf-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-ip-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-isis-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:46 UTC # junos-routing-isis-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-krt-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # junos-routing-krt-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-l2iw-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-l2vpn-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-ldp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-lmpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:41 UTC # junos-routing-lsping-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # junos-routing-mld-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-monitor-lsp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # junos-routing-mpls-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:49 UTC # junos-routing-mpls-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:49 UTC # junos-routing-mpls-pm-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-mpls-static-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-mpls-tag-lsi-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-mplslmdm-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-mplsoamd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-msdp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-multicast-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:40 UTC # junos-routing-mvpn-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-ospf-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-ospf-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:40 UTC # junos-routing-pim-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-policy-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-policy-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-prpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-rip-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-route-validation-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-route-validation-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-rpd-lmp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-rsvp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-sap-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-spring-te-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-srv6-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # l2ald-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:12 UTC # lldp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:13 UTC # lrf-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:13 UTC # macsec-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:02 UTC # mclag_cfgchk_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:13 UTC # mcsnoop-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # mo-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:13 UTC # pccd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # phcd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:14 UTC # ppmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # pppd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:14 UTC # pppoed-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:14 UTC # r2cpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # rdd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # repd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # scpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # sdpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # secintel_usp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # services-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # srd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # stpng-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # syshmd_health_mon-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # syshmd_trackip-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # telemetry-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:17 UTC # traffic-dird-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:17 UTC # transportd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:17 UTC # node1: # -------------------------------------------------------------------------- # Hostname: HCM-DH-FW-SRX-02 # Model: srx300 # Junos: 22.4R3-S2.11 # JUNOS Software Release [22.4R3-S2.11] # KERNEL 22.4R3-S2.11 #0 built by builder on 2024-05-10 20:45:39 UTC # MGD release 20240510.162641_builder.r1421059 built by builder on 2024-05-10 16:48:52 UTC # CLI release 20240510.162641_builder.r1421059 built by builder on 2024-05-10 16:44:24 UTC # JNUD release 20240510.162641_builder.r1421059 built by builder on 2024-05-10 16:48:52 UTC # RPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:33 UTC # CHASSISD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:13 UTC # BFDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:42 UTC # IKED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:52 UTC # GKSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:08 UTC # GKMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:08 UTC # PKID release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # SENDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # DFWD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:15 UTC # DCD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:04 UTC # SNMPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:12 UTC # MIB2D release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:26 UTC # VRRPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:40 UTC # ALARMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:10 UTC # PFED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:29 UTC # CRAFTD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:14 UTC # SAMPLED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:34 UTC # SRRD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:36 UTC # RMOPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # COSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:50 UTC # IRSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:19 UTC # FUD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:16 UTC # KSYNCD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:22 UTC # HTTPD-GK release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:55 UTC # DHCPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:15 UTC # PPPOED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:30 UTC # PPPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:30 UTC # DFCD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:15 UTC # LACPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:24 UTC # flowd_octeon_hm release 22.4R3-S2.11 built by builder on 2024-05-10 21:00:31 UTC # USBD release 22.4R3-S2.11 built by builder on 2024-05-10 20:51:27 UTC # OAMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:28 UTC # TNETD release 22.4R3-S2.11 built by builder on 2024-05-10 20:51:42 UTC # CFMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:13 UTC # JDHCPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:20 UTC # PSSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:31 UTC # AUTHD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:08 UTC # PHONE-HOME release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # RES-CLEANUPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:33 UTC # APPIDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:11 UTC # APPSECURED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:11 UTC # IDPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:25 UTC # SHM-RTSDBD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:35 UTC # DATAPATH-TRACED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:15 UTC # SMID release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:35 UTC # SMIHELPERD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:36 UTC # R2CPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:32 UTC # UACD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:53 UTC # ESSMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:16 UTC # TAD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:38 UTC # AUTOD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:12 UTC # JSRPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:55 UTC # NSD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:55 UTC # AAMWD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:51 UTC # DYN-FILTERD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:51 UTC # NSTRACED release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:56 UTC # FWAUTHD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:51 UTC # JSRPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:55 UTC # PROFILERD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:26 UTC # OAMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:28 UTC # RTLOGD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:56 UTC # UTMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:58 UTC # SYSHMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:57 UTC # SMTPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:56 UTC # WWAND release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:59 UTC # WLAND release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:53 UTC # USERIDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:53 UTC # DOOD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:54 UTC # PPMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:46 UTC # LRMUXD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:43 UTC # PGMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:29 UTC # BFDD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:42 UTC # AUDITD release 22.4R3-S2.11 built by builder on 2024-05-10 21:02:07 UTC # L2ALD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:23 UTC # EVENTD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:16 UTC # L2CPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:24 UTC # MCSNOOPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:45 UTC # MPLSOAMD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:46 UTC # WEB-API release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:10 UTC # MGD-API release 22.4R3-S2.11 built by builder on 2024-05-10 20:57:02 UTC # NTAD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:46 UTC # SDPD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:34 UTC # SDXD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:09 UTC # DOT1XD release 22.4R3-S2.11 built by builder on 2024-05-10 21:00:59 UTC # IPFD release 22.4R3-S2.11 built by builder on 2024-05-10 21:01:53 UTC # base-actions-dd release 20240510.162641_builder.r1421059 built by builder on 2024-05-10 16:44:18 UTC # junos-base-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:12 UTC # jkernel-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # appsecure-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:03 UTC # aprobe-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:03 UTC # authd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:04 UTC # autod-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:04 UTC # bfdd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:41 UTC # cfm-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:05 UTC # chassis_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:05 UTC # collector-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # cos_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # cpcdd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # dcd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # dfcd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # dot1xd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:02 UTC # dyn-filterd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:06 UTC # elmi-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:07 UTC # essmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:07 UTC # forwarding_options_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:08 UTC # gres-test-point-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:08 UTC # httpd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:09 UTC # iccp_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:09 UTC # jappid-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:09 UTC # jcrypto-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # jcrypto_usp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # jdocs-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:30:54 UTC # jidpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # jkernel_jseries-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:10 UTC # jkernel_srxha-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jkernel_srxsme-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jkernel_usp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jroute-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jroute_junos-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:11 UTC # jsdxd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:12 UTC # junos-lrmuxd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # junos-ntad-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-amt-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # junos-routing-auto-bw-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:46 UTC # junos-routing-backup-selection-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-backup-selection-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:40 UTC # junos-routing-bgp-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # junos-routing-bgp-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # junos-routing-bgpmcast-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # junos-routing-ccc-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-dvmrp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-egress-protection-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-esis-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-evpn-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-exp-seg-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:49 UTC # junos-routing-hakr-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-igmp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-igp-sr-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-infra-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-infra-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-infra-dyn-tunnel-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-infra-dyn-tunnel-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-infra-frr-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-infra-frr-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:38 UTC # junos-routing-infra-mpls-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:38 UTC # junos-routing-infra-nsr-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-infra-resolver-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-infra-rt-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-infra-srlg-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-infra-telemetry-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-ingress-replication-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:46 UTC # junos-routing-instance-proto-intf-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-instance-virtual-router-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-instance-vrf-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-ip-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-isis-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:46 UTC # junos-routing-isis-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-krt-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # junos-routing-krt-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:39 UTC # junos-routing-l2iw-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-l2vpn-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:37 UTC # junos-routing-ldp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:47 UTC # junos-routing-lmpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:41 UTC # junos-routing-lsping-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # junos-routing-mld-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:45 UTC # junos-routing-monitor-lsp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # junos-routing-mpls-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:49 UTC # junos-routing-mpls-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:49 UTC # junos-routing-mpls-pm-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-mpls-static-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-mpls-tag-lsi-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-mplslmdm-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-mplsoamd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:43 UTC # junos-routing-msdp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-multicast-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:40 UTC # junos-routing-mvpn-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-ospf-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-ospf-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:40 UTC # junos-routing-pim-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-policy-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-policy-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-prpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-rip-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-route-validation-advanced-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-route-validation-basic-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-rpd-lmp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # junos-routing-rsvp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-sap-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:51 UTC # junos-routing-spring-te-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:50 UTC # junos-routing-srv6-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:48 UTC # l2ald-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:12 UTC # lldp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:13 UTC # lrf-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:13 UTC # macsec-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:02 UTC # mclag_cfgchk_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:13 UTC # mcsnoop-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:42 UTC # mo-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:13 UTC # pccd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # phcd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:14 UTC # ppmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:44 UTC # pppd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:14 UTC # pppoed-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:14 UTC # r2cpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # rdd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # repd_cmd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # scpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # sdpd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:15 UTC # secintel_usp-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # services-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # srd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # stpng-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # syshmd_health_mon-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # syshmd_trackip-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:16 UTC # telemetry-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:17 UTC # traffic-dird-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:17 UTC # transportd-actions-dd release 22.4R3-S2.11 built by builder on 2024-05-10 20:31:17 UTC # # HCM-DH-FW-SRX-01> show version invoke-on other-routing-engine # node0: # -------------------------------------------------------------------------- # Hostname: HCM-DH-FW-SRX-01 # Model: srx300 # Junos: 22.4R3-S2.11 # JUNOS Software Release [22.4R3-S2.11] # node1: # -------------------------------------------------------------------------- # Hostname: HCM-DH-FW-SRX-02 # Model: srx300 # Junos: 22.4R3-S2.11 # JUNOS Software Release [22.4R3-S2.11] # # HCM-DH-FW-SRX-01> show configuration version 22.4R3-S2.11; groups { node0 { system { host-name HCM-DH-FW-SRX-01; } interfaces { fxp0 { unit 0 { family inet { address 192.16.35.46/24; } } } } } node1 { system { host-name HCM-DH-FW-SRX-02; } interfaces { fxp0 { unit 0 { family inet { address 192.16.35.47/24; } } } } } } apply-groups "${node}"; system { root-authentication { encrypted-password "$6$7qvdENB2$d3aFUtVlpSBEygjrpFscip65dy6yCCEFuPrZHACqoX5Ud0PpNUDXn8IJNj2k1UlX13RYmzhcQKkjdf9hB6ZQs/"; } login { user admin { uid 2000; class super-user; authentication { encrypted-password "$6$zNuP6Lxb$xrrzzIDkX7r0dUH6w3C0RcVvJLRU.Mk.hskToGHvsQj2Bc9OK1v.W6zXVuD255yY5by0aPbTOH7vF4jx4fnCg/"; } } } services { ssh; telnet; netconf { ssh; } dhcp-local-server { group jdhcp-group { interface irb.0; } } web-management { https { port 8443; pki-local-certificate JSC-06; interface reth4.1417; } } } time-zone Asia/Ho_Chi_Minh; name-server { 8.8.8.8; 8.8.4.4; } syslog { archive size 100k files 3; user * { any emergency; } file interactive-commands { interactive-commands any; } file messages { any notice; authorization info; } } max-configurations-on-flash 5; max-configuration-rollbacks 10; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } } chassis { cluster { reth-count 10; redundancy-group 0 { node 0 priority 100; node 1 priority 1; } redundancy-group 1 { node 0 priority 100; node 1 priority 1; } } } services { ssl { termination { profile RA-JSC-term { server-certificate JSC-01; } } } } security { ike { traceoptions { file ike-log; flag all; } proposal RA-JSC-VPN-pro { authentication-method pre-shared-keys; dh-group group19; authentication-algorithm sha-256; encryption-algorithm aes-256-cbc; } proposal ike-proposal-01 { authentication-method pre-shared-keys; dh-group group14; authentication-algorithm sha-256; encryption-algorithm aes-256-cbc; lifetime-seconds 86400; } proposal ike-proposal-02 { authentication-method pre-shared-keys; dh-group group14; authentication-algorithm sha-256; encryption-algorithm aes-256-cbc; lifetime-seconds 86400; } policy RA-JSC-VPN-pol { mode aggressive; proposals RA-JSC-VPN-pro; # pre-shared-key ascii-text <removed>; } policy ike-policy-01 { mode main; proposals ike-proposal-01; # pre-shared-key ascii-text <removed>; } policy ike-policy-02 { mode main; proposals ike-proposal-02; # pre-shared-key ascii-text <removed>; } gateway RA-JSC-VPN-gate { ike-policy RA-JSC-VPN-pol; dynamic { user-at-hostname "lab@edu.juniper.net"; ike-user-type shared-ike-id; } dead-peer-detection { optimized; interval 10; threshold 5; } external-interface reth4.1417; local-address 14.225.241.70; aaa { access-profile RA-JSC-Access; } version v1-only; tcp-encap-profile SSL-VPN-RA-JSC; } gateway ike-gate-01 { ike-policy ike-policy-01; address 103.93.92.252; dead-peer-detection { interval 10; threshold 3; } external-interface reth4.1417; version v1-only; } gateway ike-gate-02 { ike-policy ike-policy-01; address 222.255.122.57; dead-peer-detection { interval 10; threshold 3; } external-interface reth4.1417; version v1-only; } } ipsec { proposal RA-JSC-VPN-pro { protocol esp; encryption-algorithm aes-256-gcm; } proposal ipsec-proposal-01 { protocol esp; authentication-algorithm hmac-sha-256-128; encryption-algorithm aes-256-cbc; lifetime-seconds 28800; } proposal ipsec-proposal-02 { protocol esp; authentication-algorithm hmac-sha-256-128; encryption-algorithm aes-256-cbc; lifetime-seconds 28800; } policy RA-JSC-VPN-pol { perfect-forward-secrecy { keys group19; } proposals RA-JSC-VPN-pro; } policy ipsec-policy-01 { proposals ipsec-proposal-01; } policy ipsec-policy-02 { proposals ipsec-proposal-01; } vpn RA-JSC-VPN { bind-interface st0.0; df-bit clear; ike { gateway RA-JSC-VPN-gate; ipsec-policy RA-JSC-VPN-pol; } traffic-selector ts-1 { local-ip 172.16.8.0/21; remote-ip 0.0.0.0/0; } traffic-selector ts-2 { local-ip 10.10.31.0/24; remote-ip 0.0.0.0/0; } traffic-selector ts-3 { local-ip 10.10.32.0/24; remote-ip 0.0.0.0/0; } traffic-selector ts-4 { local-ip 10.10.30.0/24; remote-ip 0.0.0.0/0; } traffic-selector ts-5 { local-ip 172.16.6.0/24; remote-ip 0.0.0.0/0; } } vpn ipsec-vpn-01 { bind-interface st0.3; ike { gateway ike-gate-01; ipsec-policy ipsec-policy-01; } establish-tunnels immediately; } vpn ipsec-vpn-02 { bind-interface st0.5; ike { gateway ike-gate-02; ipsec-policy ipsec-policy-02; } establish-tunnels immediately; } } address-book { global { address HOST-MANAGEMENT 42.112.80.0/24; address HOST-MANAGEMENT-02 112.197.0.0/24; address HOST-MANAGEMENT-03 112.197.1.0/24; address PROXMOX-VLAN85-01 172.31.85.2/32; address PROXMOX-VLAN85-02 172.31.85.2/32; address PROXMOX-VLAN97-01 172.31.97.9/32; address IP-HSK-14 172.31.97.14/32; address IP-HSK-15 172.31.97.15/32; address IP-HSK-16 172.31.97.16/32; address IP-CLOUDFLARE-01 103.21.244.0/22; address IP-CLOUDFLARE-02 103.22.200.0/22; address IP-CLOUDFLARE-03 103.31.4.0/22; address IP-CLOUDFLARE-04 104.16.0.0/12; address IP-CLOUDFLARE-05 108.162.192.0/18; address IP-CLOUDFLARE-06 131.0.72.0/22; address IP-CLOUDFLARE-07 141.101.64.0/18; address IP-CLOUDFLARE-08 162.158.0.0/15; address IP-CLOUDFLARE-09 172.64.0.0/13; address IP-CLOUDFLARE-10 173.245.48.0/20; address IP-CLOUDFLARE-11 188.114.96.0/20; address IP-CLOUDFLARE-12 190.93.240.0/20; address IP-CLOUDFLARE-13 197.234.240.0/22; address IP-CLOUDFLARE-14 198.41.128.0/17; address IP-CLOUDFLARE-15 104.24.0.0/14; address HSK-ACCEPTED-01 160.187.94.10/32; address HSK-ACCEPTED-02 118.69.81.193/32; address HSK-ALLOW-01 160.187.94.10/32; address-set MANAGEMENT { address HOST-MANAGEMENT; address HOST-MANAGEMENT-02; address HOST-MANAGEMENT-03; } address-set IP-CLOUDFLARE { address IP-CLOUDFLARE-01; address IP-CLOUDFLARE-02; address IP-CLOUDFLARE-03; address IP-CLOUDFLARE-04; address IP-CLOUDFLARE-05; address IP-CLOUDFLARE-06; address IP-CLOUDFLARE-07; address IP-CLOUDFLARE-08; address IP-CLOUDFLARE-09; address IP-CLOUDFLARE-10; address IP-CLOUDFLARE-11; address IP-CLOUDFLARE-12; address IP-CLOUDFLARE-13; address IP-CLOUDFLARE-14; address IP-CLOUDFLARE-15; } } } remote-access { profile RA-JSC-VPN-pro { ipsec-vpn RA-JSC-VPN; access-profile RA-JSC-Access; client-config RA-JSC-VPN-Client; } client-config RA-JSC-VPN-Client { connection-mode manual; dead-peer-detection { interval 60; threshold 5; } } default-profile RA-JSC-VPN-pro; } screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } nat { source { pool HSK-VLAN-1976-01 { address { 14.225.216.65/32; } } rule-set RA-JSC-VPN-src { from zone VPN; to zone trust; rule JSC-term-00 { match { source-address 0.0.0.0/0; destination-address [ 172.16.14.244/32 172.16.13.1/32 ]; } then { source-nat { off; } } } rule JSC-term-01 { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } rule-set Rancid-trust-TO-trust { from zone trust; to zone trust; rule term-00 { match { source-address 10.10.31.250/32; destination-address [ 172.16.14.244/32 172.16.13.1/32 ]; } then { source-nat { off; } } } rule term-01 { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } rule-set HSK-INTERNET { from zone HSK-PUBLIC-ZONE-01; to zone ISP-HSK-01; rule HSK-INTERNET-term-01 { match { source-address 172.31.97.0/24; destination-address 0.0.0.0/0; } then { source-nat { pool { HSK-VLAN-1976-01; } } } } } rule-set PFSENSE-FPT-REMOTE-ACCESS { from zone VPN-FPT; to zone trust; rule FPT-term-01 { match { source-address 192.168.130.0/24; destination-address 10.10.31.0/24; } then { source-nat { interface; } } } } } destination { pool HSK-VM-PUBLIC-01 { address 172.31.97.4/32 port 80; } pool HSK-VM-PUBLIC-02 { address 172.31.97.4/32 port 443; } pool HSK-VM-PUBLIC-03 { address 172.31.97.2/32 port 80; } pool HSK-VM-PUBLIC-04 { address 172.31.97.2/32 port 443; } pool HSK-VM-PUBLIC-05 { address 172.31.97.3/32 port 80; } pool HSK-VM-PUBLIC-06 { address 172.31.97.3/32 port 443; } pool HSK-VM-PUBLIC-07 { address 172.31.97.5/32 port 80; } pool HSK-VM-PUBLIC-08 { address 172.31.97.5/32 port 443; } pool HSK-VM-PUBLIC-09 { address 172.31.97.6/32 port 80; } pool HSK-VM-PUBLIC-10 { address 172.31.97.6/32 port 443; } pool HSK-VM-PUBLIC-11 { address 172.31.97.7/32 port 80; } pool HSK-VM-PUBLIC-12 { address 172.31.97.7/32 port 443; } pool HSK-VM-PUBLIC-13 { address 172.31.97.10/32 port 80; } pool HSK-VM-PUBLIC-14 { address 172.31.97.10/32 port 443; } pool HSK-VM-PUBLIC-15 { address 172.31.97.11/32 port 80; } pool HSK-VM-PUBLIC-16 { address 172.31.97.11/32 port 443; } pool HSK-VM-PUBLIC-17 { address 172.31.97.12/32 port 80; } pool HSK-VM-PUBLIC-18 { address 172.31.97.12/32 port 443; } pool HSK-VM-PUBLIC-19-test { address 172.31.97.13/32 port 80; } pool HSK-VM-PUBLIC-20 { address 172.31.97.14/32 port 443; } pool HSK-VM-PUBLIC-21 { address 172.31.97.14/32 port 80; } pool HSK-VM-PUBLIC-22 { address 172.31.97.15/32 port 443; } pool HSK-VM-PUBLIC-23 { address 172.31.97.15/32 port 80; } pool HSK-VM-PUBLIC-24 { address 172.31.97.16/32 port 443; } pool HSK-VM-PUBLIC-25 { address 172.31.97.16/32 port 80; } pool HSK-VM-PUBLIC-26 { address 172.31.97.17/32 port 80; } pool HSK-VM-PUBLIC-27 { address 172.31.97.17/32 port 443; } pool HSK-VM-PUBLIC-28 { address 172.31.97.18/32 port 80; } pool HSK-VM-PUBLIC-29 { address 172.31.97.18/32 port 443; } pool HSK-VM-PUBLIC-30 { address 172.31.97.19/32 port 80; } pool HSK-VM-PUBLIC-31 { address 172.31.97.19/32 port 443; } rule-set INTERNET-TO-HSK-PUBLIC-term-01 { from zone ISP-HSK-01; rule HSK-PUBLIC-01 { match { destination-address 14.225.216.65/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-01; } } } } rule HSK-PUBLIC-02 { match { destination-address 14.225.216.65/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-02; } } } } rule HSK-PUBLIC-03 { match { destination-address 14.225.216.66/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-03; } } } } rule HSK-PUBLIC-04 { match { destination-address 14.225.216.66/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-04; } } } } rule HSK-PUBLIC-05 { match { destination-address 14.225.216.67/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-05; } } } } rule HSK-PUBLIC-06 { match { destination-address 14.225.216.67/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-06; } } } } rule HSK-PUBLIC-07 { match { destination-address 14.225.216.68/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-07; } } } } rule HSK-PUBLIC-08 { match { destination-address 14.225.216.68/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-08; } } } } rule HSK-PUBLIC-09 { match { destination-address 14.225.216.69/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-09; } } } } rule HSK-PUBLIC-10 { match { destination-address 14.225.216.69/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-10; } } } } rule HSK-PUBLIC-11 { match { destination-address 14.225.216.70/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-11; } } } } rule HSK-PUBLIC-12 { match { destination-address 14.225.216.70/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-12; } } } } rule HSK-PUBLIC-13 { match { destination-address 14.225.216.72/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-13; } } } } rule HSK-PUBLIC-14 { match { destination-address 14.225.216.72/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-14; } } } } rule HSK-PUBLIC-15 { match { destination-address 14.225.216.73/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-15; } } } } rule HSK-PUBLIC-16 { match { destination-address 14.225.216.73/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-16; } } } } rule HSK-PUBLIC-17 { match { destination-address 14.225.216.74/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-17; } } } } rule HSK-PUBLIC-18 { match { destination-address 14.225.216.74/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-18; } } } } rule HSK-PUBLIC-19 { match { destination-address 14.225.216.75/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-19-test; } } } } rule HSK-PUBLIC-20 { match { destination-address 14.225.216.76/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-20; } } } } rule HSK-PUBLIC-21 { match { destination-address 14.225.216.76/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-21; } } } } rule HSK-PUBLIC-22 { match { destination-address 14.225.216.77/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-22; } } } } rule HSK-PUBLIC-23 { match { destination-address 14.225.216.77/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-23; } } } } rule HSK-PUBLIC-24 { match { destination-address 14.225.216.78/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-24; } } } } rule HSK-PUBLIC-25 { match { destination-address 14.225.216.78/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-25; } } } } rule HSK-PUBLIC-26 { match { destination-address 14.225.216.79/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-26; } } } } rule HSK-PUBLIC-27 { match { destination-address 14.225.216.79/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-27; } } } } rule HSK-PUBLIC-28 { match { destination-address 14.225.216.80/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-28; } } } } rule HSK-PUBLIC-29 { match { destination-address 14.225.216.80/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-29; } } } } rule HSK-PUBLIC-30 { match { destination-address 14.225.216.81/32; destination-port { 80; } } then { destination-nat { pool { HSK-VM-PUBLIC-30; } } } } rule HSK-PUBLIC-31 { match { destination-address 14.225.216.81/32; destination-port { 443; } } then { destination-nat { pool { HSK-VM-PUBLIC-31; } } } } } } static { rule-set internet-01 { from zone untrust; rule term-01 { match { destination-address 112.197.18.42/32; } then { static-nat { prefix { 172.31.99.11/32; } } } } rule term-02 { match { destination-address 112.197.18.43/32; } then { static-nat { prefix { 172.31.99.12/32; } } } } rule term-03 { match { destination-address 112.197.18.44/32; } then { static-nat { prefix { 172.31.99.10/32; } } } } rule term-04 { match { destination-address 160.187.94.193/32; } then { static-nat { prefix { 172.31.85.2/32; } } } } rule term-05 { match { destination-address 160.187.94.194/32; } then { static-nat { prefix { 172.31.85.3/32; } } } } } rule-set internet-02 { from zone ISP-HSK-01; rule ISP-HSK-term-01 { match { destination-address 14.225.216.71/32; } then { static-nat { prefix { 172.31.97.9/32; } } } } } } } policies { from-zone trust to-zone trust { policy trust-to-trust { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone trust to-zone untrust { policy trust-to-untrust { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone untrust to-zone untrust { policy term-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone untrust to-zone Management-PUBLIC { policy term-01 { match { source-address MANAGEMENT; destination-address any; application junos-ssh; } then { permit; } } } from-zone untrust to-zone Local-VM-01 { policy term-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone Local-VM-01 to-zone untrust { policy term-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone trust to-zone VPN { policy JSC-VPN-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone VPN to-zone trust { policy JSC-VPN-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone LOCAL-PROXMOX-DH to-zone untrust { policy term-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone untrust to-zone LOCAL-PROXMOX-DH { policy untrust-TO-LOCAL-PROXMOX-DH-term-01 { match { source-address any; destination-address [ PROXMOX-VLAN85-01 PROXMOX-VLAN85-02 ]; application any; } then { permit; } } } from-zone trust to-zone VPN-FPT { policy trust-VPN-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone VPN-FPT to-zone trust { policy VPN-trust-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone VPN to-zone VPN-FPT { policy trust-VPN-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone TAPTAP-LOCAL-ZONE to-zone untrust { policy TAPTAP-LOCAL-ZONE-TO-untrust-term-01 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone trust to-zone VPN-VNPT-12-1 { policy trust-VPN-02 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone VPN-VNPT-12-1 to-zone trust { policy VPN-trust-02 { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone HSK-PUBLIC-ZONE-01 to-zone ISP-HSK-01 { policy default-permit { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone ISP-HSK-01 to-zone HSK-PUBLIC-ZONE-01 { policy term-10 { match { source-address HSK-ALLOW-01; destination-address PROXMOX-VLAN97-01; application HSK-97_9_P8088; } then { permit; } } policy term-00 { match { source-address any; destination-address PROXMOX-VLAN97-01; application [ QC-Chat-Range HSK-97_9_P7088 junos-http junos-https ]; } then { permit; } } policy term-01 { match { source-address any; destination-address any; application [ junos-http junos-https ]; } then { permit; } } policy term-02 { match { source-address IP-CLOUDFLARE; destination-address [ IP-HSK-14 IP-HSK-15 IP-HSK-16 ]; application [ junos-http junos-https ]; } then { permit; } } } from-zone VPN to-zone VPN-VNPT-12-1 { policy VPN-TO-VPN-VNPT-12-1-term-01 { match { source-address any; destination-address any; application any; } then { permit; } } } pre-id-default-policy { then { log { session-close; } } } } tcp-encap { profile SSL-VPN-RA-JSC { ssl-profile RA-JSC-term; } } zones { security-zone trust { host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { reth4.13; reth5.14; reth5.31; reth5.30; } } security-zone untrust { host-inbound-traffic { system-services { ping; ike; tcp-encap; https; } } interfaces { reth1.0; reth0.2000; reth4.95; reth4.1417; reth5.110; reth4.96; } } security-zone Management-PUBLIC { host-inbound-traffic { system-services { ssh; ping; } } interfaces { lo0.0; } } security-zone Local-VM-01 { host-inbound-traffic { system-services { all; } } interfaces { reth0.99; } } security-zone VPN { host-inbound-traffic { system-services { ping; traceroute; } } interfaces { st0.0; } } security-zone LOCAL-PROXMOX-DH { host-inbound-traffic { system-services { ping; traceroute; } } interfaces { reth4.85; } } security-zone VPN-FPT { host-inbound-traffic { system-services { ping; traceroute; } } interfaces { st0.3; } } security-zone TAPTAP-LOCAL-ZONE { host-inbound-traffic { system-services { ping; } } interfaces { reth5.36; } } security-zone VPN-VNPT-12-1 { host-inbound-traffic { system-services { ping; traceroute; } } interfaces { st0.5; } } security-zone HSK-PUBLIC-ZONE-01 { host-inbound-traffic { system-services { ping; traceroute; } } interfaces { reth5.97; } } security-zone ISP-HSK-01 { host-inbound-traffic { system-services { ping; traceroute; } } interfaces { reth4.1976; } } } } interfaces { ge-0/0/3 { description "CF|GE-0/0/3-RETH1:TO-HCM-DH-HP-ACS-01:GE1/0/1"; gigether-options { redundant-parent reth1; } } ge-0/0/4 { description "CF|GE-0/0/4-RETH0:TO-HCM-DH-HP-ACS-01:GE-0/0/3"; gigether-options { redundant-parent reth0; } } ge-0/0/5 { description "Ge-0/0/5-RETH4:TO-HCM-VNPT-DH-ACS-PUBLIC-01:E1/45#TRUNK"; gigether-options { redundant-parent reth4; } } ge-0/0/6 { description "Ge-0/0/6-reth5:TO-HCM-VNPT-DH-ACS-10G-01:E1/11#TRUNK"; gigether-options { redundant-parent reth5; } } ge-0/0/7 { description "Ge-0/0/7-reth5:TO-HCM-VNPT-DH-ACS-10G-02:E1/11#TRUNK"; gigether-options { redundant-parent reth5; } } ge-1/0/3 { description "CF|GE-1/0/3-RETH1:TO-HCM-DH-HP-ACS-01:GE1/0/2"; gigether-options { redundant-parent reth1; } } ge-1/0/4 { description "CF|GE-1/0/4-RETH0:TO-HCM-DH-HP-ACS-01:GE-0/0/4"; gigether-options { redundant-parent reth0; } } ge-1/0/5 { description "Ge-1/0/5RETH4:TO-HCM-VNPT-DH-ACS-PUBLIC-02:E1/45#TRUNK"; gigether-options { redundant-parent reth4; } } ge-1/0/6 { description "Ge-1/0/6-reth5:TO-HCM-VNPT-DH-ACS-10G-01:E1/12#TRUNK"; gigether-options { redundant-parent reth5; } } ge-1/0/7 { description "Ge-1/0/7-reth5:TO-HCM-VNPT-DH-ACS-10G-02:E1/12#TRUNK"; gigether-options { redundant-parent reth5; } } fab0 { fabric-options { member-interfaces { ge-0/0/2; } } } fab1 { fabric-options { member-interfaces { ge-1/0/2; } } } lo0 { unit 0 { family inet { address 112.197.18.41/32; } } } reth0 { vlan-tagging; redundant-ether-options { redundancy-group 1; lacp { active; } } unit 99 { description "CE|RETH0.99:LAN-01#1G#LAN"; vlan-id 99; family inet { address 172.31.99.1/24; } } unit 2000 { description "RETH0.2000:TO-HCM-VNPT-HSK-FW:RETH6#INSIDE#"; vlan-id 2000; family inet { address 10.255.254.1/30; } } } reth1 { redundant-ether-options { redundancy-group 1; } unit 0 { description "Ethe1:TO-HCM-VNPT-SCTV-ACS-01#UP-LINK#ILL"; family inet { address 112.197.18.34/29; } } } reth4 { description "RETH4:TO-HCM-VNPT-DH-ACS-PUBLIC#TRUNK"; vlan-tagging; redundant-ether-options { redundancy-group 1; } unit 13 { description "RETH4.13:MANAGEMENT-PUBLIC-ACS|VLAN13#1G#"; vlan-id 13; family inet { address 172.16.13.1/24; } } unit 85 { description "RETH4.85:PUBLIC-NAT-VNNIX-DH|VLAN85#1G#"; vlan-id 85; family inet { address 172.31.85.1/24; } } unit 95 { description "RETH4.95:PUBLIC-VNNIX-DH|VLAN95#1G#"; vlan-id 95; family inet { address 160.187.94.129/26; } } unit 96 { description "RETH4.96:HUYNH-PUBLIC-VNNIX-DH|VLAN96#1G#"; vlan-id 96; family inet { address 160.187.94.225/27; address 160.187.94.209/28; } } unit 1417 { description "RETH4.1417:MANAGEMENT-PUBLIC|VLAN1417#1G#"; vlan-id 1417; family inet { address 14.225.241.70/26; } } unit 1976 { description "CF|RETH4.1976:ISP-HSK-01|UPLINK"; vlan-id 1976; family inet { address 172.16.36.46/29; } } } reth5 { description "reth5:TO-HCM-VNPT-DH-ACS-10G#TRUNK"; vlan-tagging; redundant-ether-options { redundancy-group 1; lacp { active; } } unit 14 { description "CF|RETH5.14:MANAGEMENT#1G#MS"; vlan-id 14; family inet { address 172.16.14.244/24; } } unit 30 { description RETH5.30:Cluster-Proxmox; vlan-id 30; family inet { address 10.10.30.1/24; } } unit 31 { description "CF|RETH5.31:MANAGEMENT-PROXMOX-ESXI#1G#MS"; vlan-id 31; family inet { address 10.10.31.244/24; } } unit 36 { description RETH5.36:TAPTAP-LOCAL-LAN; vlan-id 36; family inet { address 10.10.36.254/24; } } unit 97 { description RETH5.97:HSK-PUBLIC-ZONE; vlan-id 97; family inet { address 172.31.97.1/24; } } unit 110 { description RETH5.110:TO-HCM-VNPT-HSK-FW-01:RETH1; vlan-id 110; family inet { address 10.255.254.5/30; } } } st0 { unit 0 { family inet; } unit 3 { description "CF|TO-IPSEC-VPN-FPT|##L3VPN"; family inet { address 10.103.103.1/24; } } unit 5 { description "CF|TO-IPSEC-VPN-VNPT-12/1|##L3VPN"; family inet { address 10.105.105.1/24; } } } } snmp { community "daihuu@srx"; community daihuu; } access { profile RA-JSC-Access { client nguyennd { firewall-user { password "$9$YAg4Jji.QF/aZQn6/puWLXNwYoJG"; } } client supportdh { firewall-user { password "$9$UxjiqQF69tufTRhrex7ikqmfzF3/"; } } address-assignment { pool RA-JSC-Pool; } } address-assignment { pool junosDHCPPool { family inet { network 192.168.1.0/24; range junosRange { low 192.168.1.2; high 192.168.1.254; } dhcp-attributes { router { 192.168.1.1; } propagate-settings ge-0/0/0.0; } } } pool RA-JSC-Pool { family inet { network 10.77.77.0/24; range RA-JSC-Range { low 10.77.77.1; high 10.77.77.50; } xauth-attributes { primary-dns 8.8.8.8/32; } } } } firewall-authentication { web-authentication { default-profile RA-JSC-Access; } } } routing-instances { VR-HSK-01 { interface reth4.1976; interface reth5.97; instance-type virtual-router; routing-options { static { route 0.0.0.0/0 next-hop 172.16.36.41; } } } } applications { application QC-Chat-Range { term QC-Chat-Range protocol tcp destination-port 20000-50000; term UDP-QC protocol udp destination-port 20000-50000; } application HSK-97_9_P8188 { term term-01 protocol tcp destination-port 8188; } application HSK-97_9_P7088 { term term-01 protocol tcp destination-port 7088; } application HSK-97_9_P8088 { term term-01 protocol tcp destination-port 8088; } } protocols { l2-learning { global-mode switching; } rstp { interface all; } } routing-options { static { route 0.0.0.0/0 { next-hop 112.197.18.33; qualified-next-hop 10.255.254.2 { preference 4; } qualified-next-hop 10.255.254.6 { preference 10; } qualified-next-hop 14.225.241.65 { preference 15; } preference 12; } route 103.93.92.252/32 next-hop 14.225.241.65; route 172.16.6.0/24 next-hop st0.5; route 172.16.9.0/24 next-hop st0.3; route 172.16.15.0/24 next-hop 172.16.14.249; route 192.168.130.0/24 next-hop st0.3; } }