RANCID Config Viewer
Cấu hình: 172.16.14.249
Kích thước: 285,696 bytes | Cập nhật: 2026-04-10 01:10:47
Tải về | Quay lại danh sách
#RANCID-CONTENT-TYPE: junos
#
# HCM-VNPT-HSK-FW-01> show chassis clocks
# HCM-VNPT-HSK-FW-01> show chassis environment
# node0:
# --------------------------------------------------------------------------
# Class Item Status
# Temp CB 0 TMP75 Exhaust Right OK
# CB 0 TMP75 Inlet Right OK
# CB 0 TMP75 Exhaust Left OK
# CB 0 TMP75 Inlet Left OK
# CB 0 CPU OK
# CB 0 NVME SSD 0 OK
# CB 0 Mem DDR4 DIMM 0 OK
# CB 0 Mem DDR4 DIMM 1 OK
# FPC 0 BCM TD3-X2 Temp OK
# Power Power Supply 0 OK
# Power Supply 1 OK
# Fans Fan Tray 0 Fan 0 OK
# Fan Tray 1 Fan 0 OK
# Fan Tray 2 Fan 0 OK
#
# node1:
# --------------------------------------------------------------------------
# Class Item Status
# Temp CB 0 TMP75 Exhaust Right OK
# CB 0 TMP75 Inlet Right OK
# CB 0 TMP75 Exhaust Left OK
# CB 0 TMP75 Inlet Left OK
# CB 0 CPU OK
# CB 0 NVME SSD 0 OK
# CB 0 Mem DDR4 DIMM 0 OK
# CB 0 Mem DDR4 DIMM 1 OK
# FPC 0 BCM TD3-X2 Temp OK
# Power Power Supply 0 OK
# Power Supply 1 OK
# Fans Fan Tray 0 Fan 0 OK
# Fan Tray 1 Fan 0 OK
# Fan Tray 2 Fan 0 OK
#
# HCM-VNPT-HSK-FW-01> show chassis firmware local
# HCM-VNPT-HSK-FW-01> show chassis firmware
# HCM-VNPT-HSK-FW-01> show chassis fpc detail
# node0:
# --------------------------------------------------------------------------
# Slot 0 information:
# State Online
# Total CPU DRAM 10407 MB
# Total SRAM 0 MB
# Total SDRAM 0 MB
# FIPS Capable False
#
# node1:
# --------------------------------------------------------------------------
# Slot 0 information:
# State Online
# Total CPU DRAM 10407 MB
# Total SRAM 0 MB
# Total SDRAM 0 MB
# FIPS Capable False
#
# HCM-VNPT-HSK-FW-01> show chassis hardware detail
# node0:
# --------------------------------------------------------------------------
# Hardware inventory:
# Item Version Part number Serial number Description
# Chassis FN3324AX0005 SRX1600
# Midplane REV 12 650-155263 FN3324AX0005 SRX1600
# Routing Engine 0 BUILTIN BUILTIN SRX Routing Engine
# usb0 (addr 0.1) UHCI root HUB 0 Intel uhub0
# usb1 (addr 1.1) XHCI root HUB 0 0x8086 uhub1
# CB 0 BUILTIN BUILTIN Control Board
# FPC 0 BUILTIN BUILTIN SRX1600 FPC
# PIC 0 BUILTIN BUILTIN 16x1G-T
# PIC 1 BUILTIN BUILTIN 2xSFP28
# Xcvr 0 NON-JNPR 2010090054 SFP+-10G-SR
# PIC 2 BUILTIN BUILTIN 4xSFP+
# Xcvr 0 NON-JNPR MY502U1 DUAL-SFP+-SR/SFP-SX
# Xcvr 1 NON-JNPR 240307W0036 SFP+-10G-SR
# Xcvr 2 NON-JNPR 2408270008 SFP+-10G-SR
# Power Supply 0 REV 01 740-168323 1EDPE1800HW PS 450W 90-264V AC in
# Power Supply 1 REV 01 740-168323 1EDPE29016D PS 450W 90-264V AC in
# Fan Tray 0 Fan Tray 0, Front to Back Airflow - AFO
# Fan Tray 1 Fan Tray 1, Front to Back Airflow - AFO
# Fan Tray 2 Fan Tray 2, Front to Back Airflow - AFO
#
# node1:
# --------------------------------------------------------------------------
# Hardware inventory:
# Item Version Part number Serial number Description
# Chassis FN3324AX0044 SRX1600
# Midplane REV 12 650-155263 FN3324AX0044 SRX1600
# Routing Engine 0 BUILTIN BUILTIN SRX Routing Engine
# usb0 (addr 0.1) UHCI root HUB 0 Intel uhub0
# usb1 (addr 1.1) XHCI root HUB 0 0x8086 uhub1
# CB 0 BUILTIN BUILTIN Control Board
# FPC 0 BUILTIN BUILTIN SRX1600 FPC
# PIC 0 BUILTIN BUILTIN 16x1G-T
# PIC 1 BUILTIN BUILTIN 2xSFP28
# Xcvr 0 kb NON-JNPR 240318W0120 SFP+-10G-SR
# Xcvr 1 ) NON-JNPR 230418W0082 SFP+-10G-SR
# PIC 2 BUILTIN BUILTIN 4xSFP+
# Xcvr 0 & NON-JNPR 240307W0032 SFP+-10G-SR
# Xcvr 1 NON-JNPR 2010090049 SFP+-10G-SR
# Power Supply 0 REV 01 740-168323 1EDPE1800JB PS 450W 90-264V AC in
# Power Supply 1 REV 01 740-168323 1EDPE290164 PS 450W 90-264V AC in
# Fan Tray 0 Fan Tray 0, Front to Back Airflow - AFO
# Fan Tray 1 Fan Tray 1, Front to Back Airflow - AFO
# Fan Tray 2 Fan Tray 2, Front to Back Airflow - AFO
#
# HCM-VNPT-HSK-FW-01> show chassis hardware models
# node0:
# --------------------------------------------------------------------------
# Hardware inventory:
# Item Version Part number Serial number FRU model number
# Midplane REV 12 650-155263 FN3324AX0005 SRX1600-CHAS
# CB 0 BUILTIN BUILTIN
# FPC 0 BUILTIN BUILTIN
# Power Supply 0 REV 01 740-168323 1EDPE1800HW JPSU-450W-AC
# Power Supply 1 REV 01 740-168323 1EDPE29016D JPSU-450W-AC
# Fan Tray 0 SRX1600 FANTRAY-AFO
# Fan Tray 1 SRX1600 FANTRAY-AFO
# Fan Tray 2 SRX1600 FANTRAY-AFO
#
# node1:
# --------------------------------------------------------------------------
# Hardware inventory:
# Item Version Part number Serial number FRU model number
# Midplane REV 12 650-155263 FN3324AX0044 SRX1600-CHAS
# CB 0 BUILTIN BUILTIN
# FPC 0 BUILTIN BUILTIN
# Power Supply 0 REV 01 740-168323 1EDPE1800JB JPSU-450W-AC
# Power Supply 1 REV 01 740-168323 1EDPE290164 JPSU-450W-AC
# Fan Tray 0 SRX1600 FANTRAY-AFO
# Fan Tray 1 SRX1600 FANTRAY-AFO
# Fan Tray 2 SRX1600 FANTRAY-AFO
#
# HCM-VNPT-HSK-FW-01> show chassis routing-engine
# Routing Engine status:
# Model SRX Routing Engine
#
# Routing Engine status:
# Model SRX Routing Engine
#
# HCM-VNPT-HSK-FW-01> show chassis scb
# HCM-VNPT-HSK-FW-01> show chassis sfm detail
# HCM-VNPT-HSK-FW-01> show chassis ssb
# HCM-VNPT-HSK-FW-01> show chassis feb detail
# HCM-VNPT-HSK-FW-01> show chassis feb
# HCM-VNPT-HSK-FW-01> show chassis cfeb
# HCM-VNPT-HSK-FW-01> show chassis alarms
# node0:
# --------------------------------------------------------------------------
# 1 alarms currently active
# Alarm time Class Description
# 2025-01-09 23:45:38 UTC Major Host 0 fxp0 : Ethernet Link Down
#
# node1:
# --------------------------------------------------------------------------
# 1 alarms currently active
# Alarm time Class Description
# 2025-04-23 23:23:03 UTC Major Host 0 fxp0 : Ethernet Link Down
#
# HCM-VNPT-HSK-FW-01> show system license
# License usage:
# Licensed Licensed Licensed
# Feature Feature Feature
# Feature name used installed needed Expiry
# remote-access-ipsec-vpn-client 0 2 0 permanent
# remote-access-juniper-std 0 2 0 permanent
#
# Licenses installed: none
#
# HCM-VNPT-HSK-FW-01> show system boot-messages
# node0:
# --------------------------------------------------------------------------
# ---<<BOOT>>---
# Copyright (c) 1998-2023 Juniper Networks, Inc.
# Copyright (c) 1992-2020 The FreeBSD Project.
# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
# The Regents of the University of California. All rights reserved.
# FreeBSD is a registered trademark of The FreeBSD Foundation.
# FreeBSD JNPR-12.1-20231122.ee0e992_builder_stable_12_234 #0 r356482+ee0e9926628(stable/12_234): Thu Nov 23 01:41:54 PST 2023
# builder@qnc-jre-fbsd01:/volume/build/junos/occam/llvm-13.0/sandbox-234-20231122-ee0e992/freebsd/stable_12_234/20231122.230008_builder_stable_12_234.ee0e992/obj/amd64/juniper/kernels/JNPR-AMD64-PRD/kernel amd64
# Juniper clang version 13.0.1 (git@eng-gitlab.juniper.net:tools-tot/llvm a680935c8cff37a4cc97d0aa42182aa0518381c9)
# VT(vga): text 80x25
# module crypto already present!
# CPU: Intel Xeon Processor (Icelake) (2200.06-MHz K8-class CPU)
# Origin="GenuineIntel" Id=0x80660 Family=0x6 Model=0x86 Stepping=0
# Features=0xf83fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE,SSE2,SS>
# Features2=0xf7fa3223<SSE3,PCLMULQDQ,VMX,SSSE3,FMA,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,AVX,F16C,RDRAND,HV>
# AMD Features=0x24100800<SYSCALL,NX,Page1GB,LM>
# AMD Features2=0x121<LAHF,ABM,Prefetch>
# Structured Extended Features=0xf1bf07ab<FSGSBASE,TSCADJ,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,AVX512F,AVX512DQ,RDSEED,ADX,SMAP,AVX512IFMA,CLFLUSHOPT,CLWB,AVX512CD,SHA,AVX512BW,AVX512VL>
# Structured Extended Features2=0x15f4e<AVX512VBMI,UMIP,PKU,AVX512VBMI2,GFNI,VAES,VPCLMULQDQ,AVX512VNNI,AVX512BITALG>
# Structured Extended Features3=0xac000400<MD_CLEAR,IBPB,STIBP,ARCH_CAP,SSBD>
# XSAVE Features=0xf<XSAVEOPT,XSAVEC,XINUSE,XSAVES>
# IA32_ARCH_CAPS=0x2b<RDCL_NO,IBRS_ALL,SKIP_L1DFL_VME>
# AMD Extended Feature Extensions ID EBX=0x200
# VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID
# Hypervisor: Origin = "KVMKVMKVM"
# Event timer "LAPIC" quality 600
# ACPI APIC Table: <BOCHS BXPCAPIC>
# mtx_platform_early_bootinit: M/T/EX/SRX Series Early Boot Initialization
# Host Kernel is VMHOST-V2 based
# tvp mode is true jnx_reboot_reason: 1
# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
# FreeBSD/SMP: 2 package(s) x 1 core(s)
# random: HMAC-DRBG: software entropy seeding events: 560, Shannons/event: 0.80
# random: HMAC-DRBG: hardware entropy seeding Shannons: 384, Shannons/bit: 0.7
# random: HMAC-DRBG: startup SP800-90B Health Tests required: 1024
# random: registering fast source Intel Secure Key Seed
# random: fast provider: "Intel Secure Key Seed"
# arc4random: WARNING: initial seeding bypassed the cryptographic random device because it was not yet seeded and the knob 'bypass_before_seeding' was enabled.
# Security policy loaded: Junos MAC/fips (mac_fips)
# Security policy loaded: MAC/veriexec (mac_veriexec)
# Security policy loaded: JUNOS MAC/privcheck (mac_privcheck)
# Security policy loaded: MAC/grantbylabel (mac_grantbylabel)
# Security policy loaded: Junos MAC/SDK (mac_sdk)
# Security policy loaded: MAC/DDB (mac_ddb)
# MAC/veriexec fingerprint module loaded: SHA1
# MAC/veriexec fingerprint module loaded: SHA256
# MAC/veriexec fingerprint module loaded: SHA384
# ioapic0 <Version 1.1> irqs 0-23 on motherboard
# Launching APs: 1
# netisr_init: forcing maxthreads from 4 to 2
# random: entropy device external interface
# md0: Preloaded image </packages/sets/active/boot/os-kernel/contents.izo> 11084800 bytes at 0xffffffff80e67d58
# Initializing M/T/EX platform properties ..
# nexus0
# vtvga0: <VT VGA driver> on motherboard
# kvmclock0: <KVM paravirtual clock> on motherboard
# Timecounter "kvmclock" frequency 1000000000 Hz quality 1500
# kvmclock0: registered as a time-of-day clock, resolution 0.000001s
# cryptosoft0: <software crypto> on motherboard
# acpi0: <BOCHS BXPCRSDT> on motherboard
# acpi0: Power Button (fixed)
# cpu0: <ACPI CPU> on acpi0
# atrtc0: <AT realtime clock> port 0x70-0x71,0x72-0x77 irq 8 on acpi0
# atrtc0: registered as a time-of-day clock, resolution 1.000000s
# Event timer "RTC" frequency 32768 Hz quality 0
# hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
# Timecounter "HPET" frequency 100000000 Hz quality 950
# Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
# acpi_timer0: <24-bit timer at 3.579545MHz> port 0x608-0x60b on acpi0
# pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
# pci0: <ACPI PCI bus> on pcib0
# isab0: <PCI-ISA bridge> at device 1.0 on pci0
# isa0: <ISA bus> on isab0
# atapci0: <Intel PIIX3 WDMA2 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xc700-0xc70f at device 1.1 on pci0
# ata0: <ATA channel> at channel 0 on atapci0
# ata1: <ATA channel> at channel 1 on atapci0
# uhci0: <Intel 82371SB (PIIX3) USB controller> port 0xc640-0xc65f irq 11 at device 1.2 on pci0
# usbus0 on uhci0
# usbus0: 12Mbps Full Speed USB v1.0
# smb0: <Intel 82371AB SMB controller> irq 9 at device 1.3 on pci0
# virtio_pci0: <VirtIO PCI 9P Transport adapter> port 0xc380-0xc3bf mem 0xfeb90000-0xfeb90fff,0xfebac000-0xfebaffff irq 10 at device 2.0 on pci0
# 9p_virtio0: <VirtIO 9P Transport> on virtio_pci0
# virtio_pci1: <VirtIO PCI Network adapter> port 0xc660-0xc67f mem 0xfeb91000-0xfeb91fff,0xfebb0000-0xfebb3fff irq 11 at device 3.0 on pci0
# vtnet0: <VirtIO Networking Adapter> on virtio_pci1
# virtio_pci2: <VirtIO PCI Network adapter> port 0xc680-0xc69f mem 0xfeb92000-0xfeb92fff,0xfebb4000-0xfebb7fff irq 11 at device 4.0 on pci0
# vtnet1: <VirtIO Networking Adapter> on virtio_pci2
# virtio_pci3: <VirtIO PCI Network adapter> port 0xc6a0-0xc6bf mem 0xfeb93000-0xfeb93fff,0xfebb8000-0xfebbbfff irq 10 at device 5.0 on pci0
# vtnet2: <VirtIO Networking Adapter> on virtio_pci3
# virtio_pci4: <VirtIO PCI 9P Transport adapter> port 0xc3c0-0xc3ff mem 0xfeb94000-0xfeb94fff,0xfebbc000-0xfebbffff irq 10 at device 6.0 on pci0
# 9p_virtio1: <VirtIO 9P Transport> on virtio_pci4
# virtio_pci5: <VirtIO PCI 9P Transport adapter> port 0xc400-0xc43f mem 0xfeb95000-0xfeb95fff,0xfebc0000-0xfebc3fff irq 11 at device 7.0 on pci0
# 9p_virtio2: <VirtIO 9P Transport> on virtio_pci5
# virtio_pci6: <VirtIO PCI 9P Transport adapter> port 0xc440-0xc47f mem 0xfeb96000-0xfeb96fff,0xfebc4000-0xfebc7fff irq 11 at device 8.0 on pci0
# 9p_virtio3: <VirtIO 9P Transport> on virtio_pci6
# virtio_pci7: <VirtIO PCI 9P Transport adapter> port 0xc480-0xc4bf mem 0xfeb97000-0xfeb97fff,0xfebc8000-0xfebcbfff irq 10 at device 9.0 on pci0
# 9p_virtio4: <VirtIO 9P Transport> on virtio_pci7
# virtio_pci8: <VirtIO PCI 9P Transport adapter> port 0xc4c0-0xc4ff mem 0xfeb98000-0xfeb98fff,0xfebcc000-0xfebcffff irq 10 at device 10.0 on pci0
# 9p_virtio5: <VirtIO 9P Transport> on virtio_pci8
# virtio_pci9: <VirtIO PCI 9P Transport adapter> port 0xc500-0xc53f mem 0xfeb99000-0xfeb99fff,0xfebd0000-0xfebd3fff irq 11 at device 11.0 on pci0
# 9p_virtio6: <VirtIO 9P Transport> on virtio_pci9
# virtio_pci10: <VirtIO PCI 9P Transport adapter> port 0xc540-0xc57f mem 0xfeb9a000-0xfeb9afff,0xfebd4000-0xfebd7fff irq 11 at device 12.0 on pci0
# 9p_virtio7: <VirtIO 9P Transport> on virtio_pci10
# virtio_pci11: <VirtIO PCI 9P Transport adapter> port 0xc580-0xc5bf mem 0xfeb9b000-0xfeb9bfff,0xfebd8000-0xfebdbfff irq 10 at device 13.0 on pci0
# 9p_virtio8: <VirtIO 9P Transport> on virtio_pci11
# virtio_pci12: <VirtIO PCI Entropy adapter> port 0xc6c0-0xc6df mem 0xfebdc000-0xfebdffff irq 10 at device 14.0 on pci0
# vtrnd0: <VirtIO Entropy Adapter> on virtio_pci12
# random: registering fast source VirtIO Entropy Adapter
# xhci0: <XHCI (generic) USB 3.0 controller> mem 0xfeb80000-0xfeb8ffff irq 11 at device 15.0 on pci0
# xhci0: 32 bytes context size, 64-bit DMA
# usbus1 on xhci0
# usbus1: 5.0Gbps Super Speed USB v3.0
# virtio_pci13: <VirtIO PCI Network adapter> port 0xc6e0-0xc6ff mem 0xfeb9c000-0xfeb9cfff,0xfebe0000-0xfebe3fff irq 10 at device 17.0 on pci0
# vtnet3: <VirtIO Networking Adapter> on virtio_pci13
# virtio_pci14: <VirtIO PCI Block adapter> port 0xc100-0xc17f mem 0xfeb9d000-0xfeb9dfff,0xfebe4000-0xfebe7fff irq 11 at device 19.0 on pci0
# vtblk0: <VirtIO Block Adapter> on virtio_pci14
# vtblk0: 5220MB (10690688 512 byte sectors)
# virtio_pci15: <VirtIO PCI Block adapter> port 0xc180-0xc1ff mem 0xfeb9e000-0xfeb9efff,0xfebe8000-0xfebebfff irq 10 at device 21.0 on pci0
# vtblk1: <VirtIO Block Adapter> on virtio_pci15
# vtblk1: 16384MB (33554432 512 byte sectors)
# pci0: <old> at device 22.0 (no driver attached)
# virtio_pci16: <VirtIO PCI SCSI adapter> port 0xc5c0-0xc5ff mem 0xfeba0000-0xfeba0fff,0xfebec000-0xfebeffff irq 11 at device 23.0 on pci0
# vtscsi0: <VirtIO SCSI Adapter> on virtio_pci16
# virtio_pci17: <VirtIO PCI Block adapter> port 0xc200-0xc27f mem 0xfeba1000-0xfeba1fff,0xfebf0000-0xfebf3fff irq 11 at device 24.0 on pci0
# vtblk2: <VirtIO Block Adapter> on virtio_pci17
# vtblk2: 512MB (1048576 512 byte sectors)
# virtio_pci18: <VirtIO PCI Block adapter> port 0xc280-0xc2ff mem 0xfeba2000-0xfeba2fff,0xfebf4000-0xfebf7fff irq 10 at device 25.0 on pci0
# vtblk3: <VirtIO Block Adapter> on virtio_pci18
# vtblk3: 128MB (262144 512 byte sectors)
# virtio_pci19: <VirtIO PCI Block adapter> port 0xc300-0xc37f mem 0xfeba3000-0xfeba3fff,0xfebf8000-0xfebfbfff irq 10 at device 26.0 on pci0
# vtblk4: <VirtIO Block Adapter> on virtio_pci19
# vtblk4: 3072MB (6291456 512 byte sectors)
# virtio_pci20: <VirtIO PCI 9P Transport adapter> port 0xc600-0xc63f mem 0xfeba4000-0xfeba4fff,0xfebfc000-0xfebfffff irq 11 at device 31.0 on pci0
# 9p_virtio9: <VirtIO 9P Transport> on virtio_pci20
# acpi_syscontainer0: <System Container> on acpi0
# acpi_syscontainer1: <System Container> port 0xaf00-0xaf0b on acpi0
# acpi_syscontainer2: <System Container> port 0xafe0-0xafe3 on acpi0
# acpi_syscontainer3: <System Container> port 0xae00-0xae13 on acpi0
# atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
# atkbd0: <AT Keyboard> irq 1 on atkbdc0
# atkbd0: [GIANT-LOCKED]
# uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 on acpi0
# uart0: console (9600,n,8,1)
# uart0: [GIANT-LOCKED]
# uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
# uart1: [GIANT-LOCKED]
# orm0: <ISA Option ROM> at iomem 0xeb000-0xeffff pnpid ORM0000 on isa0
# TVP: Model Name read from HostOS is srx1600
# Initializing Kernel PVIDB.
# mt_product_prop_init: product_model = srxtvp srx1600
# load_static_kernel_pvidb_data: Initialising srx1600 Early PVIDB len = 33800
# Unified Services mode is turned off(0)
# Initializing product: 200 ..
# pfe_peer_smp_chk_product_supp: jnx_product_type: 200 mp_ncpus: 2 rts_shared_bitvector_ifstate_infra: 0 jpf_tcp_ppt_ifs_smp_support: 0 support: 0
# rts_ifstate_chk_product_supp: jnx_product_type: 200 mp_ncpus: 2 rts_shared_bitvector_ifstate_infra: 0 jpf_tcp_ppt_ifs_smp_support: 0 support: 0
#
# ure_set_prodinfo Setting PDK(0xfffff800040a9780) vectors for Unified RE
# platform_mastership_init: Unknown product_type 0x000000c8
# Reconfiguring vtnet3 to fxp0
# Reconfiguring vtnet0 to em0
# Reconfiguring vtnet1 to em1
# Reconfiguring vtnet2 to em2
# sysctl_warn_reuse: can't re-use a leaf (hw.product.pvi.pvidb_rootnode)!
# tcp_ip_smp_supp_chk_product: jnx_product_type: 200 support: 0
# Registering tcp_platform_dependent = tcp_handle_special_ports
# Trying to mount root from cd9660:/dev/md0.uzip []...
# ugen0.1: <Intel UHCI root HUB> at usbus0
# ugen1.1: <0x8086 XHCI root HUB> at usbus1
# uhub0: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0
# uhub1: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus1
# random: randomdev_wait_until_seeded unblock wait
# uhub0: 2 ports with 2 removable, self powered
# uhub1: 10 ports with 10 removable, self powered
# random: Entropy start-up health tests performed on 1024 samples passed.
# random: unblocking device.
# random: HMAC-DRBG: instantiated with 1024 SW events, 396 HW Shannons
#
# node1:
# --------------------------------------------------------------------------
# ---<<BOOT>>---
# Copyright (c) 1998-2023 Juniper Networks, Inc.
# Copyright (c) 1992-2020 The FreeBSD Project.
# Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
# The Regents of the University of California. All rights reserved.
# FreeBSD is a registered trademark of The FreeBSD Foundation.
# FreeBSD JNPR-12.1-20231122.ee0e992_builder_stable_12_234 #0 r356482+ee0e9926628(stable/12_234): Thu Nov 23 01:41:54 PST 2023
# builder@qnc-jre-fbsd01:/volume/build/junos/occam/llvm-13.0/sandbox-234-20231122-ee0e992/freebsd/stable_12_234/20231122.230008_builder_stable_12_234.ee0e992/obj/amd64/juniper/kernels/JNPR-AMD64-PRD/kernel amd64
# Juniper clang version 13.0.1 (git@eng-gitlab.juniper.net:tools-tot/llvm a680935c8cff37a4cc97d0aa42182aa0518381c9)
# VT(vga): text 80x25
# module crypto already present!
# CPU: Intel Xeon Processor (Icelake) (2200.06-MHz K8-class CPU)
# Origin="GenuineIntel" Id=0x80660 Family=0x6 Model=0x86 Stepping=0
# Features=0xf83fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE,SSE2,SS>
# Features2=0xf7fa3223<SSE3,PCLMULQDQ,VMX,SSSE3,FMA,CX16,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,AVX,F16C,RDRAND,HV>
# AMD Features=0x24100800<SYSCALL,NX,Page1GB,LM>
# AMD Features2=0x121<LAHF,ABM,Prefetch>
# Structured Extended Features=0xf1bf07ab<FSGSBASE,TSCADJ,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,AVX512F,AVX512DQ,RDSEED,ADX,SMAP,AVX512IFMA,CLFLUSHOPT,CLWB,AVX512CD,SHA,AVX512BW,AVX512VL>
# Structured Extended Features2=0x15f4e<AVX512VBMI,UMIP,PKU,AVX512VBMI2,GFNI,VAES,VPCLMULQDQ,AVX512VNNI,AVX512BITALG>
# Structured Extended Features3=0xac000400<MD_CLEAR,IBPB,STIBP,ARCH_CAP,SSBD>
# XSAVE Features=0xf<XSAVEOPT,XSAVEC,XINUSE,XSAVES>
# IA32_ARCH_CAPS=0x2b<RDCL_NO,IBRS_ALL,SKIP_L1DFL_VME>
# AMD Extended Feature Extensions ID EBX=0x200
# VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID
# Hypervisor: Origin = "KVMKVMKVM"
# Event timer "LAPIC" quality 600
# ACPI APIC Table: <BOCHS BXPCAPIC>
# mtx_platform_early_bootinit: M/T/EX/SRX Series Early Boot Initialization
# Host Kernel is VMHOST-V2 based
# tvp mode is true jnx_reboot_reason: 1
# FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
# FreeBSD/SMP: 2 package(s) x 1 core(s)
# random: HMAC-DRBG: software entropy seeding events: 560, Shannons/event: 0.80
# random: HMAC-DRBG: hardware entropy seeding Shannons: 384, Shannons/bit: 0.7
# random: HMAC-DRBG: startup SP800-90B Health Tests required: 1024
# random: registering fast source Intel Secure Key Seed
# random: fast provider: "Intel Secure Key Seed"
# arc4random: WARNING: initial seeding bypassed the cryptographic random device because it was not yet seeded and the knob 'bypass_before_seeding' was enabled.
# Security policy loaded: Junos MAC/fips (mac_fips)
# Security policy loaded: MAC/veriexec (mac_veriexec)
# Security policy loaded: JUNOS MAC/privcheck (mac_privcheck)
# Security policy loaded: MAC/grantbylabel (mac_grantbylabel)
# Security policy loaded: Junos MAC/SDK (mac_sdk)
# Security policy loaded: MAC/DDB (mac_ddb)
# MAC/veriexec fingerprint module loaded: SHA1
# MAC/veriexec fingerprint module loaded: SHA256
# MAC/veriexec fingerprint module loaded: SHA384
# ioapic0 <Version 1.1> irqs 0-23 on motherboard
# Launching APs: 1
# netisr_init: forcing maxthreads from 4 to 2
# random: entropy device external interface
# md0: Preloaded image </packages/sets/active/boot/os-kernel/contents.izo> 11084800 bytes at 0xffffffff80e67d58
# Initializing M/T/EX platform properties ..
# nexus0
# vtvga0: <VT VGA driver> on motherboard
# kvmclock0: <KVM paravirtual clock> on motherboard
# Timecounter "kvmclock" frequency 1000000000 Hz quality 1500
# kvmclock0: registered as a time-of-day clock, resolution 0.000001s
# cryptosoft0: <software crypto> on motherboard
# acpi0: <BOCHS BXPCRSDT> on motherboard
# acpi0: Power Button (fixed)
# cpu0: <ACPI CPU> on acpi0
# atrtc0: <AT realtime clock> port 0x70-0x71,0x72-0x77 irq 8 on acpi0
# atrtc0: registered as a time-of-day clock, resolution 1.000000s
# Event timer "RTC" frequency 32768 Hz quality 0
# hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
# Timecounter "HPET" frequency 100000000 Hz quality 950
# Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
# acpi_timer0: <24-bit timer at 3.579545MHz> port 0x608-0x60b on acpi0
# pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
# pci0: <ACPI PCI bus> on pcib0
# isab0: <PCI-ISA bridge> at device 1.0 on pci0
# isa0: <ISA bus> on isab0
# atapci0: <Intel PIIX3 WDMA2 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xc700-0xc70f at device 1.1 on pci0
# ata0: <ATA channel> at channel 0 on atapci0
# ata1: <ATA channel> at channel 1 on atapci0
# uhci0: <Intel 82371SB (PIIX3) USB controller> port 0xc640-0xc65f irq 11 at device 1.2 on pci0
# usbus0 on uhci0
# usbus0: 12Mbps Full Speed USB v1.0
# smb0: <Intel 82371AB SMB controller> irq 9 at device 1.3 on pci0
# virtio_pci0: <VirtIO PCI 9P Transport adapter> port 0xc380-0xc3bf mem 0xfeb90000-0xfeb90fff,0xfebac000-0xfebaffff irq 10 at device 2.0 on pci0
# 9p_virtio0: <VirtIO 9P Transport> on virtio_pci0
# virtio_pci1: <VirtIO PCI Network adapter> port 0xc660-0xc67f mem 0xfeb91000-0xfeb91fff,0xfebb0000-0xfebb3fff irq 11 at device 3.0 on pci0
# vtnet0: <VirtIO Networking Adapter> on virtio_pci1
# virtio_pci2: <VirtIO PCI Network adapter> port 0xc680-0xc69f mem 0xfeb92000-0xfeb92fff,0xfebb4000-0xfebb7fff irq 11 at device 4.0 on pci0
# vtnet1: <VirtIO Networking Adapter> on virtio_pci2
# virtio_pci3: <VirtIO PCI Network adapter> port 0xc6a0-0xc6bf mem 0xfeb93000-0xfeb93fff,0xfebb8000-0xfebbbfff irq 10 at device 5.0 on pci0
# vtnet2: <VirtIO Networking Adapter> on virtio_pci3
# virtio_pci4: <VirtIO PCI 9P Transport adapter> port 0xc3c0-0xc3ff mem 0xfeb94000-0xfeb94fff,0xfebbc000-0xfebbffff irq 10 at device 6.0 on pci0
# 9p_virtio1: <VirtIO 9P Transport> on virtio_pci4
# virtio_pci5: <VirtIO PCI 9P Transport adapter> port 0xc400-0xc43f mem 0xfeb95000-0xfeb95fff,0xfebc0000-0xfebc3fff irq 11 at device 7.0 on pci0
# 9p_virtio2: <VirtIO 9P Transport> on virtio_pci5
# virtio_pci6: <VirtIO PCI 9P Transport adapter> port 0xc440-0xc47f mem 0xfeb96000-0xfeb96fff,0xfebc4000-0xfebc7fff irq 11 at device 8.0 on pci0
# 9p_virtio3: <VirtIO 9P Transport> on virtio_pci6
# virtio_pci7: <VirtIO PCI 9P Transport adapter> port 0xc480-0xc4bf mem 0xfeb97000-0xfeb97fff,0xfebc8000-0xfebcbfff irq 10 at device 9.0 on pci0
# 9p_virtio4: <VirtIO 9P Transport> on virtio_pci7
# virtio_pci8: <VirtIO PCI 9P Transport adapter> port 0xc4c0-0xc4ff mem 0xfeb98000-0xfeb98fff,0xfebcc000-0xfebcffff irq 10 at device 10.0 on pci0
# 9p_virtio5: <VirtIO 9P Transport> on virtio_pci8
# virtio_pci9: <VirtIO PCI 9P Transport adapter> port 0xc500-0xc53f mem 0xfeb99000-0xfeb99fff,0xfebd0000-0xfebd3fff irq 11 at device 11.0 on pci0
# 9p_virtio6: <VirtIO 9P Transport> on virtio_pci9
# virtio_pci10: <VirtIO PCI 9P Transport adapter> port 0xc540-0xc57f mem 0xfeb9a000-0xfeb9afff,0xfebd4000-0xfebd7fff irq 11 at device 12.0 on pci0
# 9p_virtio7: <VirtIO 9P Transport> on virtio_pci10
# virtio_pci11: <VirtIO PCI 9P Transport adapter> port 0xc580-0xc5bf mem 0xfeb9b000-0xfeb9bfff,0xfebd8000-0xfebdbfff irq 10 at device 13.0 on pci0
# 9p_virtio8: <VirtIO 9P Transport> on virtio_pci11
# virtio_pci12: <VirtIO PCI Entropy adapter> port 0xc6c0-0xc6df mem 0xfebdc000-0xfebdffff irq 10 at device 14.0 on pci0
# vtrnd0: <VirtIO Entropy Adapter> on virtio_pci12
# random: registering fast source VirtIO Entropy Adapter
# xhci0: <XHCI (generic) USB 3.0 controller> mem 0xfeb80000-0xfeb8ffff irq 11 at device 15.0 on pci0
# xhci0: 32 bytes context size, 64-bit DMA
# usbus1 on xhci0
# usbus1: 5.0Gbps Super Speed USB v3.0
# virtio_pci13: <VirtIO PCI Network adapter> port 0xc6e0-0xc6ff mem 0xfeb9c000-0xfeb9cfff,0xfebe0000-0xfebe3fff irq 10 at device 17.0 on pci0
# vtnet3: <VirtIO Networking Adapter> on virtio_pci13
# virtio_pci14: <VirtIO PCI Block adapter> port 0xc100-0xc17f mem 0xfeb9d000-0xfeb9dfff,0xfebe4000-0xfebe7fff irq 11 at device 19.0 on pci0
# vtblk0: <VirtIO Block Adapter> on virtio_pci14
# vtblk0: 5220MB (10690688 512 byte sectors)
# virtio_pci15: <VirtIO PCI Block adapter> port 0xc180-0xc1ff mem 0xfeb9e000-0xfeb9efff,0xfebe8000-0xfebebfff irq 10 at device 21.0 on pci0
# vtblk1: <VirtIO Block Adapter> on virtio_pci15
# vtblk1: 16384MB (33554432 512 byte sectors)
# pci0: <old> at device 22.0 (no driver attached)
# virtio_pci16: <VirtIO PCI SCSI adapter> port 0xc5c0-0xc5ff mem 0xfeba0000-0xfeba0fff,0xfebec000-0xfebeffff irq 11 at device 23.0 on pci0
# vtscsi0: <VirtIO SCSI Adapter> on virtio_pci16
# virtio_pci17: <VirtIO PCI Block adapter> port 0xc200-0xc27f mem 0xfeba1000-0xfeba1fff,0xfebf0000-0xfebf3fff irq 11 at device 24.0 on pci0
# vtblk2: <VirtIO Block Adapter> on virtio_pci17
# vtblk2: 512MB (1048576 512 byte sectors)
# virtio_pci18: <VirtIO PCI Block adapter> port 0xc280-0xc2ff mem 0xfeba2000-0xfeba2fff,0xfebf4000-0xfebf7fff irq 10 at device 25.0 on pci0
# vtblk3: <VirtIO Block Adapter> on virtio_pci18
# vtblk3: 128MB (262144 512 byte sectors)
# virtio_pci19: <VirtIO PCI Block adapter> port 0xc300-0xc37f mem 0xfeba3000-0xfeba3fff,0xfebf8000-0xfebfbfff irq 10 at device 26.0 on pci0
# vtblk4: <VirtIO Block Adapter> on virtio_pci19
# vtblk4: 3072MB (6291456 512 byte sectors)
# virtio_pci20: <VirtIO PCI 9P Transport adapter> port 0xc600-0xc63f mem 0xfeba4000-0xfeba4fff,0xfebfc000-0xfebfffff irq 11 at device 31.0 on pci0
# 9p_virtio9: <VirtIO 9P Transport> on virtio_pci20
# acpi_syscontainer0: <System Container> on acpi0
# acpi_syscontainer1: <System Container> port 0xaf00-0xaf0b on acpi0
# acpi_syscontainer2: <System Container> port 0xafe0-0xafe3 on acpi0
# acpi_syscontainer3: <System Container> port 0xae00-0xae13 on acpi0
# atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
# atkbd0: <AT Keyboard> irq 1 on atkbdc0
# atkbd0: [GIANT-LOCKED]
# uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 on acpi0
# uart0: console (9600,n,8,1)
# uart0: [GIANT-LOCKED]
# uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
# uart1: [GIANT-LOCKED]
# orm0: <ISA Option ROM> at iomem 0xeb000-0xeffff pnpid ORM0000 on isa0
# TVP: Model Name read from HostOS is srx1600
# Initializing Kernel PVIDB.
# mt_product_prop_init: product_model = srxtvp srx1600
# load_static_kernel_pvidb_data: Initialising srx1600 Early PVIDB len = 33800
# Unified Services mode is turned off(0)
# Initializing product: 200 ..
# pfe_peer_smp_chk_product_supp: jnx_product_type: 200 mp_ncpus: 2 rts_shared_bitvector_ifstate_infra: 0 jpf_tcp_ppt_ifs_smp_support: 0 support: 0
# rts_ifstate_chk_product_supp: jnx_product_type: 200 mp_ncpus: 2 rts_shared_bitvector_ifstate_infra: 0 jpf_tcp_ppt_ifs_smp_support: 0 support: 0
#
# ure_set_prodinfo Setting PDK(0xfffff800040a9780) vectors for Unified RE
# platform_mastership_init: Unknown product_type 0x000000c8
# Reconfiguring vtnet3 to fxp0
# Reconfiguring vtnet0 to em0
# Reconfiguring vtnet1 to em1
# Reconfiguring vtnet2 to em2
# sysctl_warn_reuse: can't re-use a leaf (hw.product.pvi.pvidb_rootnode)!
# tcp_ip_smp_supp_chk_product: jnx_product_type: 200 support: 0
# Registering tcp_platform_dependent = tcp_handle_special_ports
# Trying to mount root from cd9660:/dev/md0.uzip []...
# ugen0.1: <Intel UHCI root HUB> at usbus0
# ugen1.1: <0x8086 XHCI root HUB> at usbus1
# uhub0: <Intel UHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0
# uhub1: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus1
# random: randomdev_wait_until_seeded unblock wait
# uhub0: 2 ports with 2 removable, self powered
# uhub1: 10 ports with 10 removable, self powered
# random: Entropy start-up health tests performed on 1024 samples passed.
# random: unblocking device.
# random: HMAC-DRBG: instantiated with 1024 SW events, 396 HW Shannons
#
# HCM-VNPT-HSK-FW-01> show system core-dumps
# node0:
# --------------------------------------------------------------------------
#
# /var/crash/corefiles:
# total blocks: 1446424
# -rw-rw-rw- 1 root wheel 740553165 Mar 20 2025 core-srxpfe-HCM-VNPT-HSK-FW-01-node-0-1742487000.tgz
# total files: 1
#
# node1:
# --------------------------------------------------------------------------
#
# /var/crash/corefiles:
# total blocks: 16
# total files: 0
#
# HCM-VNPT-HSK-FW-01> show version detail
# node0:
# --------------------------------------------------------------------------
# Hostname: HCM-VNPT-HSK-FW-01
# Model: srx1600
# Junos: 23.4R1.9
# JUNOS OS Kernel 64-bit [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS libs [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS runtime [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS time zone information [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS libs compat32 [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS 32-bit compatibility [20231122.ee0e992_builder_stable_12_234]
# JUNOS py extensions [20231216.005403_builder_junos_234_r1]
# JUNOS py base [20231216.005403_builder_junos_234_r1]
# JUNOS OS vmguest [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS package [20231117.015524_builder_stable_12]
# JUNOS network stack and utilities [20231216.005403_builder_junos_234_r1]
# JUNOS OS network modules [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS crypto [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS boot-ve files [20231122.ee0e992_builder_stable_12_234]
# JUNOS libs [20231216.005403_builder_junos_234_r1]
# JUNOS libs compat32 [20231216.005403_builder_junos_234_r1]
# JUNOS runtime [20231216.005403_builder_junos_234_r1]
# JUNOS na telemetry [23.4R1.9]
# JUNOS Web Management Platform Package [20231216.005403_builder_junos_234_r1]
# JUNOS vmguest [20231216.005403_builder_junos_234_r1]
# JUNOS lite sysmond [20231216.005403_builder_junos_234_r1]
# JUNOS publish subscribe base [20231216.005403_builder_junos_234_r1]
# JUNOS srx libs compat32 [20231216.005403_builder_junos_234_r1]
# JUNOS srx runtime [20231216.005403_builder_junos_234_r1]
# JUNOS srx platform support [20231216.005403_builder_junos_234_r1]
# JUNOS common platform support [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp runtime [20231216.005403_builder_junos_234_r1]
# JUNOS Routing mpls-oam-basic [20231216.005403_builder_junos_234_r1]
# JUNOS Routing lsys [20231216.005403_builder_junos_234_r1]
# JUNOS Routing controller-external [20231216.005403_builder_junos_234_r1]
# JUNOS Routing 32-bit Compatible Version [20231216.005403_builder_junos_234_r1]
# JUNOS Routing aggregated [20231216.005403_builder_junos_234_r1]
# Redis [20231216.005403_builder_junos_234_r1]
# JUNOS probe utility [20231216.005403_builder_junos_234_r1]
# JUNOS pppoe [20231216.005403_builder_junos_234_r1]
# JUNOS Openconfig [23.4R1.9]
# JUNOS mtx network modules [20231216.005403_builder_junos_234_r1]
# JUNOS modules [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp modules [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp libs [20231216.005403_builder_junos_234_r1]
# JUNOS srx libs [20231216.005403_builder_junos_234_r1]
# JUNOS L2 RSI Scripts [20231216.005403_builder_junos_234_r1]
# JUNOS Key Manager [20231216.005403_builder_junos_234_r1]
# JUNOS srx Data Plane Crypto Support [20231216.005403_builder_junos_234_r1]
# JUNOS ike [20231216.005403_builder_junos_234_r1]
# JUNOS daemons [20231216.005403_builder_junos_234_r1]
# JUNOS srx daemons [20231216.005403_builder_junos_234_r1]
# JUNOS SRX TVP AppQos Daemon [20231216.005403_builder_junos_234_r1]
# JUNOS TPM2 [20231216.005403_builder_junos_234_r1]
# JUNOS Extension Toolkit [20231216.005403_builder_junos_234_r1]
# JUNOS Phone-home [20231216.005403_builder_junos_234_r1]
# JUNOS Juniper Malware Removal Tool (JMRT) [1.0.0+20231216.005403_builder_junos_234_r1]
# JUNOS Juniper Malware Removal Tool (JMRT) Test [1.0.0+20231216.005403_builder_junos_234_r1]
# JUNOS J-Insight [20231216.005403_builder_junos_234_r1]
# JUNOS Online Documentation [20231216.005403_builder_junos_234_r1]
# JUNOS jail runtime [20231122.ee0e992_builder_stable_12_234]
# JUNOS FIPS mode utilities [20231216.005403_builder_junos_234_r1]
# JUNOS dsa [20231216.005403_builder_junos_234_r1]
# KERNEL JNPR-12.1-20231122.ee0e992_builder_stable_12_234 #0 r356482+ee0e9926628(stable/
# MGD release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:46:44 UTC
# CLI release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:43:19 UTC
# JLAUNCHD release 23.4R1.9 built by builder on 2023-12-16 02:14:29 UTC
# RPD release 23.4R1.9 built by builder on 2023-12-16 02:56:33 UTC
# CHASSISD release 23.4R1.9 built by builder on 2023-12-16 02:51:24 UTC
# COMMIT-SYNCD release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:46:42 UTC
# BFDD release 23.4R1.9 built by builder on 2023-12-16 02:33:39 UTC
# JNUD release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:46:44 UTC
# DFWD release 23.4R1.9 built by builder on 2023-12-16 02:36:52 UTC
# DCD release 23.4R1.9 built by builder on 2023-12-16 02:38:54 UTC
# SNMPD release 23.4R1.9 built by builder on 2023-12-16 02:46:03 UTC
# MIB2D release 23.4R1.9 built by builder on 2023-12-16 02:37:00 UTC
# VRRPD release 23.4R1.9 built by builder on 2023-12-16 02:34:39 UTC
# ALARMD release 23.4R1.9 built by builder on 2023-12-16 02:36:46 UTC
# PFED release 23.4R1.9 built by builder on 2023-12-16 02:37:00 UTC
# CRAFTD release 23.4R1.9 built by builder on 2023-12-16 02:30:14 UTC
# SAMPLED release 23.4R1.9 built by builder on 2023-12-16 02:37:01 UTC
# SRRD release 23.4R1.9 built by builder on 2023-12-16 02:32:17 UTC
# ILMID release 23.4R1.9 built by builder on 2023-12-16 02:30:15 UTC
# RMOPD release 23.4R1.9 built by builder on 2023-12-16 02:36:04 UTC
# COSD release 23.4R1.9 built by builder on 2023-12-16 02:37:40 UTC
# IRSD release 23.4R1.9 built by builder on 2023-12-16 02:30:21 UTC
# FUD release 23.4R1.9 built by builder on 2023-12-16 02:33:46 UTC
# KSYNCD_VERSION_MISMATCH_IGNORED: IPC version mismatch will be ignored
# <version-information>
# <component>KSYNCD</component>
# <major>23</major>
# <minor>4</minor>
# <release-category>R</release-category>
# <build-number>1</build-number>
# <spin>9</spin>
# <builder>builder</builder>
# <build-date>2023-12-16 02:30:16 UTC</build-date>
# <release>23.4R1.9</release>
# </version-information>
# HTTPD-GK release 23.4R1.9 built by builder on 2023-12-16 02:37:44 UTC
# DHCPD release 23.4R1.9 built by builder on 2023-12-16 02:33:45 UTC
# PPPOED release 23.4R1.9 built by builder on 2023-12-16 02:34:18 UTC
# RDD release 23.4R1.9 built by builder on 2023-12-16 02:33:52 UTC
# PPPD release 23.4R1.9 built by builder on 2023-12-16 02:33:50 UTC
# DFCD release 23.4R1.9 built by builder on 2023-12-16 02:36:51 UTC
# LACPD release 23.4R1.9 built by builder on 2023-12-16 02:36:59 UTC
# OAMD release 23.4R1.9 built by builder on 2023-12-16 02:33:49 UTC
# TNETD release 23.4R1.9 built by builder on 2023-12-16 02:10:45 UTC
# CFMD release 23.4R1.9 built by builder on 2023-12-16 02:36:51 UTC
# JDHCPD release 23.4R1.9 built by builder on 2023-12-16 02:36:54 UTC
# PSSD release 23.4R1.9 built by builder on 2023-12-16 02:33:51 UTC
# AUTHD release 23.4R1.9 built by builder on 2023-12-16 02:41:38 UTC
# PHONE-HOME release 23.4R1.9 built by builder on 2023-12-16 02:30:07 UTC
# APPIDD release 23.4R1.9 built by builder on 2023-12-16 02:37:33 UTC
# JDIAMETERD release 23.4R1.9 built by builder on 2023-12-16 02:36:57 UTC
# IDPD release 23.4R1.9 built by builder on 2023-12-16 02:42:41 UTC
# SHM-RTSDBD release 23.4R1.9 built by builder on 2023-12-16 02:33:54 UTC
# DATAPATH-TRACED release 23.4R1.9 built by builder on 2023-12-16 02:33:43 UTC
# SMID release 23.4R1.9 built by builder on 2023-12-16 02:37:01 UTC
# SMIHELPERD release 23.4R1.9 built by builder on 2023-12-16 02:37:03 UTC
# GSTATD release 23.4R1.9 built by builder on 2023-12-16 02:14:47 UTC
# UACD release 23.4R1.9 built by builder on 2023-12-16 02:34:19 UTC
# ESSMD release 23.4R1.9 built by builder on 2023-12-16 02:36:53 UTC
# AGENTD release 23.4R1.9 built by builder on 2023-12-16 02:33:57 UTC
# PPMD release 23.4R1.9 built by builder on 2023-12-16 02:34:36 UTC
# LRMUXD release 23.4R1.9 built by builder on 2023-12-16 02:33:39 UTC
# BFDD release 23.4R1.9 built by builder on 2023-12-16 02:33:39 UTC
# AUDITD release 23.4R1.9 built by builder on 2023-12-16 02:42:06 UTC
# L2ALD release 23.4R1.9 built by builder on 2023-12-16 02:39:13 UTC
# EVENTD release 23.4R1.9 built by builder on 2023-12-16 02:36:05 UTC
# L2CPD release 23.4R1.9 built by builder on 2023-12-16 02:39:29 UTC
# MCSNOOPD release 23.4R1.9 built by builder on 2023-12-16 02:54:28 UTC
# MPLSOAMD release 23.4R1.9 built by builder on 2023-12-16 02:33:40 UTC
# WEB-API release 23.4R1.9 built by builder on 2023-12-16 02:30:12 UTC
# JSD release 23.4R1.9 built by builder on 2023-12-16 02:33:36 UTC
# AAASD release 23.4R1.9 built by builder on 2023-12-16 02:33:36 UTC
# GRPC-TUNNEL release 23.4R1.9 built by builder on 2023-12-16 02:33:47 UTC
# UI-PUBD release 23.4R1.9 built by builder on 2023-12-16 02:33:36 UTC
# MGD-API release 23.4R1.9 built by builder on 2023-12-16 02:36:04 UTC
# SYSD release 23.4R1.9 built by builder on 2023-12-16 02:33:55 UTC
# PCCD release 23.4R1.9 built by builder on 2023-12-16 02:37:10 UTC
# NSD release 23.4R1.9 built by builder on 2023-12-16 02:37:31 UTC
# DOT1XD release 23.4R1.9 built by builder on 2023-12-16 02:37:35 UTC
# AAMWD release 23.4R1.9 built by builder on 2023-12-16 02:37:43 UTC
# DYN-FILTERD release 23.4R1.9 built by builder on 2023-12-16 02:37:43 UTC
# NSTRACED release 23.4R1.9 built by builder on 2023-12-16 02:34:12 UTC
# FWAUTHD release 23.4R1.9 built by builder on 2023-12-16 02:34:19 UTC
# GPRSD release 23.4R1.9 built by builder on 2023-12-16 02:34:12 UTC
# JSRPD release 23.4R1.9 built by builder on 2023-12-16 02:34:22 UTC
# LSYSD release 23.4R1.9 built by builder on 2023-12-16 02:37:30 UTC
# PROFILERD release 23.4R1.9 built by builder on 2023-12-16 02:42:43 UTC
# OAMD release 23.4R1.9 built by builder on 2023-12-16 02:33:49 UTC
# RTLOGD release 23.4R1.9 built by builder on 2023-12-16 02:34:37 UTC
# UTMD release 23.4R1.9 built by builder on 2023-12-16 02:37:45 UTC
# SYSHMD release 23.4R1.9 built by builder on 2023-12-16 02:34:23 UTC
# SMTPD release 23.4R1.9 built by builder on 2023-12-16 02:34:23 UTC
# WWAND release 23.4R1.9 built by builder on 2023-12-16 02:34:11 UTC
# USERIDD release 23.4R1.9 built by builder on 2023-12-16 02:34:20 UTC
# SDK-VMMD release 23.4R1.9 built by builder on 2023-12-16 02:40:21 UTC
# DOOD release 23.4R1.9 built by builder on 2023-12-16 02:37:30 UTC
# SDXD release 23.4R1.9 built by builder on 2023-12-16 02:33:42 UTC
# GPRSD release 23.4R1.9 built by builder on 2023-12-16 02:34:12 UTC
# JSRPD release 23.4R1.9 built by builder on 2023-12-16 02:34:22 UTC
# AUTOD release 23.4R1.9 built by builder on 2023-12-16 02:34:18 UTC
# IPFD release 23.4R1.9 built by builder on 2023-12-16 02:37:36 UTC
# GKSD release 23.4R1.9 built by builder on 2023-12-16 02:34:17 UTC
# GKMD release 23.4R1.9 built by builder on 2023-12-16 02:34:16 UTC
# PKID release 23.4R1.9 built by builder on 2023-12-16 02:33:42 UTC
# SENDD release 23.4R1.9 built by builder on 2023-12-16 02:33:42 UTC
# FIPSD release 23.4R1.9 built by builder on 2023-12-16 02:34:22 UTC
# IKEMD release 23.4R1.9 built by builder on 2023-12-16 02:41:36 UTC
# IKED release 23.4R1.9 built by builder on 2023-12-16 02:41:36 UTC
# base-actions-dd release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:43:18 UTC
# junos-base-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:06 UTC
# jkernel-actions-dd release 23.4R1.9 built by builder on 2023-12-16 02:03:57 UTC
# appsecure-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:18 UTC
# aprobe-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# authd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:35 UTC
# autoconfd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# autod-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# bfdd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:03 UTC
# cfm-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# chassis_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# clksyncd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:11 UTC
# collector-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:19 UTC
# cos_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:11 UTC
# cpcdd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:11 UTC
# dcd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# demuxd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# dfcd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# dot1xd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# dyn-filterd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# dyn-sess-prof-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# elmi-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# essmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:19 UTC
# forwarding_options_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# fsad-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:19 UTC
# gres-test-point-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# httpd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# iccp_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# ilmid-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jappid-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:19 UTC
# jcrypto-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jcrypto_ike-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:23 UTC
# jddosd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jdiameterd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jdocs-actions-dd release 23.4R1.9 built by builder on 2023-12-16 02:05:15 UTC
# jidpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# jkernel_jseries-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# jkernel_srxha-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:22 UTC
# jkernel_srxhe-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:22 UTC
# jkernel_usp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:22 UTC
# jpppd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# jroute-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# jroute_junos-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jsdxd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# junos-km-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# junos-lrmuxd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:03 UTC
# junos-ntad-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-amt-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-auto-bw-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:01 UTC
# junos-routing-backup-selection-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-backup-selection-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-bgp-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-bgp-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-bgpmcast-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:01 UTC
# junos-routing-bier-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-ccc-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# junos-routing-dvmrp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:01 UTC
# junos-routing-egress-protection-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-esis-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-evpn-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# junos-routing-exp-seg-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# junos-routing-hakr-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-igmp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:01 UTC
# junos-routing-igp-sr-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-infra-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-infra-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-infra-dat-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# junos-routing-infra-dyn-tunnel-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-infra-dyn-tunnel-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:58 UTC
# junos-routing-infra-frr-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-infra-frr-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:58 UTC
# junos-routing-infra-mpls-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-infra-nsr-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-infra-resolver-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-infra-rt-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-infra-srlg-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-infra-telemetry-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-ingress-replication-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-instance-proto-intf-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-instance-virtual-router-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-instance-vrf-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-ip-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-isis-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-isis-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-krt-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# junos-routing-krt-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# junos-routing-l2iw-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-l2vpn-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-ldp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-lmpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:03 UTC
# junos-routing-lsping-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:04 UTC
# junos-routing-mld-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-monitor-lsp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:04 UTC
# junos-routing-mpls-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-mpls-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-mpls-pm-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-mpls-static-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-mpls-tag-lsi-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# junos-routing-mplslmdm-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:04 UTC
# junos-routing-mplsoamd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:04 UTC
# junos-routing-msdp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:04 UTC
# junos-routing-multicast-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-mvpn-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-ospf-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# junos-routing-ospf-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-pim-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-policy-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-policy-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-prpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# junos-routing-rip-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# junos-routing-route-validation-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-route-validation-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-rpd-lmp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-rpd-tte-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# junos-routing-rsvp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-sap-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-spring-te-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-srv6-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# l2ald-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:03 UTC
# lldp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:14 UTC
# lrf-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:14 UTC
# macsec-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# mclag_cfgchk_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:14 UTC
# mcsnoop-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:16 UTC
# mo-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:17 UTC
# pccd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:16 UTC
# phcd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:54 UTC
# ppmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# pppd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# pppoed-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# r2cpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# rdd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# repd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# scpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# sdpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# secintel_usp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# secure-web-gateway-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# services-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:08 UTC
# spmd_common-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# stp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# subinfo-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# syshmd_health_mon-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:25 UTC
# syshmd_trackip-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:25 UTC
# sztp-helper-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# telemetry-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# timingd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# traffic-dird-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# transportd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:16 UTC
# url-filterd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:16 UTC
# vlans-ng-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:01 UTC
# node1:
# --------------------------------------------------------------------------
# Hostname: HCM-VNPT-HSK-FW-02
# Model: srx1600
# Junos: 23.4R1.9
# JUNOS OS Kernel 64-bit [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS libs [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS runtime [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS time zone information [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS libs compat32 [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS 32-bit compatibility [20231122.ee0e992_builder_stable_12_234]
# JUNOS py extensions [20231216.005403_builder_junos_234_r1]
# JUNOS py base [20231216.005403_builder_junos_234_r1]
# JUNOS OS vmguest [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS package [20231117.015524_builder_stable_12]
# JUNOS network stack and utilities [20231216.005403_builder_junos_234_r1]
# JUNOS OS network modules [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS crypto [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS boot-ve files [20231122.ee0e992_builder_stable_12_234]
# JUNOS libs [20231216.005403_builder_junos_234_r1]
# JUNOS libs compat32 [20231216.005403_builder_junos_234_r1]
# JUNOS runtime [20231216.005403_builder_junos_234_r1]
# JUNOS na telemetry [23.4R1.9]
# JUNOS Web Management Platform Package [20231216.005403_builder_junos_234_r1]
# JUNOS vmguest [20231216.005403_builder_junos_234_r1]
# JUNOS lite sysmond [20231216.005403_builder_junos_234_r1]
# JUNOS publish subscribe base [20231216.005403_builder_junos_234_r1]
# JUNOS srx libs compat32 [20231216.005403_builder_junos_234_r1]
# JUNOS srx runtime [20231216.005403_builder_junos_234_r1]
# JUNOS srx platform support [20231216.005403_builder_junos_234_r1]
# JUNOS common platform support [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp runtime [20231216.005403_builder_junos_234_r1]
# JUNOS Routing mpls-oam-basic [20231216.005403_builder_junos_234_r1]
# JUNOS Routing lsys [20231216.005403_builder_junos_234_r1]
# JUNOS Routing controller-external [20231216.005403_builder_junos_234_r1]
# JUNOS Routing 32-bit Compatible Version [20231216.005403_builder_junos_234_r1]
# JUNOS Routing aggregated [20231216.005403_builder_junos_234_r1]
# Redis [20231216.005403_builder_junos_234_r1]
# JUNOS probe utility [20231216.005403_builder_junos_234_r1]
# JUNOS pppoe [20231216.005403_builder_junos_234_r1]
# JUNOS Openconfig [23.4R1.9]
# JUNOS mtx network modules [20231216.005403_builder_junos_234_r1]
# JUNOS modules [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp modules [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp libs [20231216.005403_builder_junos_234_r1]
# JUNOS srx libs [20231216.005403_builder_junos_234_r1]
# JUNOS L2 RSI Scripts [20231216.005403_builder_junos_234_r1]
# JUNOS Key Manager [20231216.005403_builder_junos_234_r1]
# JUNOS srx Data Plane Crypto Support [20231216.005403_builder_junos_234_r1]
# JUNOS ike [20231216.005403_builder_junos_234_r1]
# JUNOS daemons [20231216.005403_builder_junos_234_r1]
# JUNOS srx daemons [20231216.005403_builder_junos_234_r1]
# JUNOS SRX TVP AppQos Daemon [20231216.005403_builder_junos_234_r1]
# JUNOS TPM2 [20231216.005403_builder_junos_234_r1]
# JUNOS Extension Toolkit [20231216.005403_builder_junos_234_r1]
# JUNOS Phone-home [20231216.005403_builder_junos_234_r1]
# JUNOS Juniper Malware Removal Tool (JMRT) [1.0.0+20231216.005403_builder_junos_234_r1]
# JUNOS Juniper Malware Removal Tool (JMRT) Test [1.0.0+20231216.005403_builder_junos_234_r1]
# JUNOS J-Insight [20231216.005403_builder_junos_234_r1]
# JUNOS Online Documentation [20231216.005403_builder_junos_234_r1]
# JUNOS jail runtime [20231122.ee0e992_builder_stable_12_234]
# JUNOS FIPS mode utilities [20231216.005403_builder_junos_234_r1]
# JUNOS dsa [20231216.005403_builder_junos_234_r1]
# KERNEL JNPR-12.1-20231122.ee0e992_builder_stable_12_234 #0 r356482+ee0e9926628(stable/
# MGD release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:46:44 UTC
# CLI release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:43:19 UTC
# JLAUNCHD release 23.4R1.9 built by builder on 2023-12-16 02:14:29 UTC
# RPD release 23.4R1.9 built by builder on 2023-12-16 02:56:33 UTC
# CHASSISD release 23.4R1.9 built by builder on 2023-12-16 02:51:24 UTC
# COMMIT-SYNCD release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:46:42 UTC
# BFDD release 23.4R1.9 built by builder on 2023-12-16 02:33:39 UTC
# JNUD release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:46:44 UTC
# DFWD release 23.4R1.9 built by builder on 2023-12-16 02:36:52 UTC
# DCD release 23.4R1.9 built by builder on 2023-12-16 02:38:54 UTC
# SNMPD release 23.4R1.9 built by builder on 2023-12-16 02:46:03 UTC
# MIB2D release 23.4R1.9 built by builder on 2023-12-16 02:37:00 UTC
# VRRPD release 23.4R1.9 built by builder on 2023-12-16 02:34:39 UTC
# ALARMD release 23.4R1.9 built by builder on 2023-12-16 02:36:46 UTC
# PFED release 23.4R1.9 built by builder on 2023-12-16 02:37:00 UTC
# CRAFTD release 23.4R1.9 built by builder on 2023-12-16 02:30:14 UTC
# SAMPLED release 23.4R1.9 built by builder on 2023-12-16 02:37:01 UTC
# SRRD release 23.4R1.9 built by builder on 2023-12-16 02:32:17 UTC
# ILMID release 23.4R1.9 built by builder on 2023-12-16 02:30:15 UTC
# RMOPD release 23.4R1.9 built by builder on 2023-12-16 02:36:04 UTC
# COSD release 23.4R1.9 built by builder on 2023-12-16 02:37:40 UTC
# IRSD release 23.4R1.9 built by builder on 2023-12-16 02:30:21 UTC
# FUD release 23.4R1.9 built by builder on 2023-12-16 02:33:46 UTC
# KSYNCD_VERSION_MISMATCH_IGNORED: IPC version mismatch will be ignored
# <version-information>
# <component>KSYNCD</component>
# <major>23</major>
# <minor>4</minor>
# <release-category>R</release-category>
# <build-number>1</build-number>
# <spin>9</spin>
# <builder>builder</builder>
# <build-date>2023-12-16 02:30:16 UTC</build-date>
# <release>23.4R1.9</release>
# </version-information>
# HTTPD-GK release 23.4R1.9 built by builder on 2023-12-16 02:37:44 UTC
# DHCPD release 23.4R1.9 built by builder on 2023-12-16 02:33:45 UTC
# PPPOED release 23.4R1.9 built by builder on 2023-12-16 02:34:18 UTC
# RDD release 23.4R1.9 built by builder on 2023-12-16 02:33:52 UTC
# PPPD release 23.4R1.9 built by builder on 2023-12-16 02:33:50 UTC
# DFCD release 23.4R1.9 built by builder on 2023-12-16 02:36:51 UTC
# LACPD release 23.4R1.9 built by builder on 2023-12-16 02:36:59 UTC
# OAMD release 23.4R1.9 built by builder on 2023-12-16 02:33:49 UTC
# TNETD release 23.4R1.9 built by builder on 2023-12-16 02:10:45 UTC
# CFMD release 23.4R1.9 built by builder on 2023-12-16 02:36:51 UTC
# JDHCPD release 23.4R1.9 built by builder on 2023-12-16 02:36:54 UTC
# PSSD release 23.4R1.9 built by builder on 2023-12-16 02:33:51 UTC
# AUTHD release 23.4R1.9 built by builder on 2023-12-16 02:41:38 UTC
# PHONE-HOME release 23.4R1.9 built by builder on 2023-12-16 02:30:07 UTC
# APPIDD release 23.4R1.9 built by builder on 2023-12-16 02:37:33 UTC
# JDIAMETERD release 23.4R1.9 built by builder on 2023-12-16 02:36:57 UTC
# IDPD release 23.4R1.9 built by builder on 2023-12-16 02:42:41 UTC
# SHM-RTSDBD release 23.4R1.9 built by builder on 2023-12-16 02:33:54 UTC
# DATAPATH-TRACED release 23.4R1.9 built by builder on 2023-12-16 02:33:43 UTC
# SMID release 23.4R1.9 built by builder on 2023-12-16 02:37:01 UTC
# SMIHELPERD release 23.4R1.9 built by builder on 2023-12-16 02:37:03 UTC
# GSTATD release 23.4R1.9 built by builder on 2023-12-16 02:14:47 UTC
# UACD release 23.4R1.9 built by builder on 2023-12-16 02:34:19 UTC
# ESSMD release 23.4R1.9 built by builder on 2023-12-16 02:36:53 UTC
# AGENTD release 23.4R1.9 built by builder on 2023-12-16 02:33:57 UTC
# PPMD release 23.4R1.9 built by builder on 2023-12-16 02:34:36 UTC
# LRMUXD release 23.4R1.9 built by builder on 2023-12-16 02:33:39 UTC
# BFDD release 23.4R1.9 built by builder on 2023-12-16 02:33:39 UTC
# AUDITD release 23.4R1.9 built by builder on 2023-12-16 02:42:06 UTC
# L2ALD release 23.4R1.9 built by builder on 2023-12-16 02:39:13 UTC
# EVENTD release 23.4R1.9 built by builder on 2023-12-16 02:36:05 UTC
# L2CPD release 23.4R1.9 built by builder on 2023-12-16 02:39:29 UTC
# MCSNOOPD release 23.4R1.9 built by builder on 2023-12-16 02:54:28 UTC
# MPLSOAMD release 23.4R1.9 built by builder on 2023-12-16 02:33:40 UTC
# WEB-API release 23.4R1.9 built by builder on 2023-12-16 02:30:12 UTC
# JSD release 23.4R1.9 built by builder on 2023-12-16 02:33:36 UTC
# AAASD release 23.4R1.9 built by builder on 2023-12-16 02:33:36 UTC
# GRPC-TUNNEL release 23.4R1.9 built by builder on 2023-12-16 02:33:47 UTC
# UI-PUBD release 23.4R1.9 built by builder on 2023-12-16 02:33:36 UTC
# MGD-API release 23.4R1.9 built by builder on 2023-12-16 02:36:04 UTC
# SYSD release 23.4R1.9 built by builder on 2023-12-16 02:33:55 UTC
# PCCD release 23.4R1.9 built by builder on 2023-12-16 02:37:10 UTC
# NSD release 23.4R1.9 built by builder on 2023-12-16 02:37:31 UTC
# DOT1XD release 23.4R1.9 built by builder on 2023-12-16 02:37:35 UTC
# AAMWD release 23.4R1.9 built by builder on 2023-12-16 02:37:43 UTC
# DYN-FILTERD release 23.4R1.9 built by builder on 2023-12-16 02:37:43 UTC
# NSTRACED release 23.4R1.9 built by builder on 2023-12-16 02:34:12 UTC
# FWAUTHD release 23.4R1.9 built by builder on 2023-12-16 02:34:19 UTC
# GPRSD release 23.4R1.9 built by builder on 2023-12-16 02:34:12 UTC
# JSRPD release 23.4R1.9 built by builder on 2023-12-16 02:34:22 UTC
# LSYSD release 23.4R1.9 built by builder on 2023-12-16 02:37:30 UTC
# PROFILERD release 23.4R1.9 built by builder on 2023-12-16 02:42:43 UTC
# OAMD release 23.4R1.9 built by builder on 2023-12-16 02:33:49 UTC
# RTLOGD release 23.4R1.9 built by builder on 2023-12-16 02:34:37 UTC
# UTMD release 23.4R1.9 built by builder on 2023-12-16 02:37:45 UTC
# SYSHMD release 23.4R1.9 built by builder on 2023-12-16 02:34:23 UTC
# SMTPD release 23.4R1.9 built by builder on 2023-12-16 02:34:23 UTC
# WWAND release 23.4R1.9 built by builder on 2023-12-16 02:34:11 UTC
# USERIDD release 23.4R1.9 built by builder on 2023-12-16 02:34:20 UTC
# SDK-VMMD release 23.4R1.9 built by builder on 2023-12-16 02:40:21 UTC
# DOOD release 23.4R1.9 built by builder on 2023-12-16 02:37:30 UTC
# SDXD release 23.4R1.9 built by builder on 2023-12-16 02:33:42 UTC
# GPRSD release 23.4R1.9 built by builder on 2023-12-16 02:34:12 UTC
# JSRPD release 23.4R1.9 built by builder on 2023-12-16 02:34:22 UTC
# AUTOD release 23.4R1.9 built by builder on 2023-12-16 02:34:18 UTC
# IPFD release 23.4R1.9 built by builder on 2023-12-16 02:37:36 UTC
# GKSD release 23.4R1.9 built by builder on 2023-12-16 02:34:17 UTC
# GKMD release 23.4R1.9 built by builder on 2023-12-16 02:34:16 UTC
# PKID release 23.4R1.9 built by builder on 2023-12-16 02:33:42 UTC
# SENDD release 23.4R1.9 built by builder on 2023-12-16 02:33:42 UTC
# FIPSD release 23.4R1.9 built by builder on 2023-12-16 02:34:22 UTC
# IKEMD release 23.4R1.9 built by builder on 2023-12-16 02:41:36 UTC
# IKED release 23.4R1.9 built by builder on 2023-12-16 02:41:36 UTC
# base-actions-dd release 20231214.153508_builder.r1390688 built by builder on 2023-12-14 15:43:18 UTC
# junos-base-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:06 UTC
# jkernel-actions-dd release 23.4R1.9 built by builder on 2023-12-16 02:03:57 UTC
# appsecure-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:18 UTC
# aprobe-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# authd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:35 UTC
# autoconfd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# autod-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# bfdd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:03 UTC
# cfm-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# chassis_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# clksyncd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:11 UTC
# collector-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:19 UTC
# cos_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:11 UTC
# cpcdd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:11 UTC
# dcd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# demuxd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# dfcd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# dot1xd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# dyn-filterd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# dyn-sess-prof-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# elmi-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# essmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:19 UTC
# forwarding_options_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# fsad-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:19 UTC
# gres-test-point-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# httpd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# iccp_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:12 UTC
# ilmid-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jappid-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:19 UTC
# jcrypto-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jcrypto_ike-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:23 UTC
# jddosd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jdiameterd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jdocs-actions-dd release 23.4R1.9 built by builder on 2023-12-16 02:05:15 UTC
# jidpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# jkernel_jseries-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# jkernel_srxha-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:22 UTC
# jkernel_srxhe-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:22 UTC
# jkernel_usp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:22 UTC
# jpppd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# jroute-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# jroute_junos-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# jsdxd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:13 UTC
# junos-km-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# junos-lrmuxd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:03 UTC
# junos-ntad-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-amt-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-auto-bw-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:01 UTC
# junos-routing-backup-selection-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-backup-selection-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-bgp-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-bgp-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-bgpmcast-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:01 UTC
# junos-routing-bier-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-ccc-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# junos-routing-dvmrp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:01 UTC
# junos-routing-egress-protection-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-esis-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-evpn-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# junos-routing-exp-seg-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# junos-routing-hakr-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-igmp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:01 UTC
# junos-routing-igp-sr-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-infra-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-infra-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-infra-dat-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# junos-routing-infra-dyn-tunnel-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-infra-dyn-tunnel-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:58 UTC
# junos-routing-infra-frr-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-infra-frr-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:58 UTC
# junos-routing-infra-mpls-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-infra-nsr-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-infra-resolver-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-infra-rt-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-infra-srlg-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-infra-telemetry-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-ingress-replication-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-instance-proto-intf-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-instance-virtual-router-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-instance-vrf-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:59 UTC
# junos-routing-ip-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-isis-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-isis-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-krt-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# junos-routing-krt-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# junos-routing-l2iw-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-l2vpn-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:57 UTC
# junos-routing-ldp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:06 UTC
# junos-routing-lmpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:03 UTC
# junos-routing-lsping-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:04 UTC
# junos-routing-mld-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# junos-routing-monitor-lsp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:04 UTC
# junos-routing-mpls-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-mpls-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-mpls-pm-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-mpls-static-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-mpls-tag-lsi-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:56 UTC
# junos-routing-mplslmdm-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:04 UTC
# junos-routing-mplsoamd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:04 UTC
# junos-routing-msdp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:04 UTC
# junos-routing-multicast-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-mvpn-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-ospf-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# junos-routing-ospf-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:00 UTC
# junos-routing-pim-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-policy-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-policy-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:07 UTC
# junos-routing-prpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# junos-routing-rip-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# junos-routing-route-validation-advanced-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-route-validation-basic-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-rpd-lmp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-rpd-tte-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:10 UTC
# junos-routing-rsvp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-sap-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:02 UTC
# junos-routing-spring-te-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:09 UTC
# junos-routing-srv6-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:08 UTC
# l2ald-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:03 UTC
# lldp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:14 UTC
# lrf-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:14 UTC
# macsec-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# mclag_cfgchk_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:14 UTC
# mcsnoop-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:16 UTC
# mo-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:17 UTC
# pccd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:16 UTC
# phcd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:54 UTC
# ppmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:05 UTC
# pppd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# pppoed-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# r2cpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:20 UTC
# rdd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# repd_cmd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# scpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# sdpd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# secintel_usp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# secure-web-gateway-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:24 UTC
# services-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:08 UTC
# spmd_common-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# stp-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# subinfo-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# syshmd_health_mon-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:25 UTC
# syshmd_trackip-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:25 UTC
# sztp-helper-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:49:55 UTC
# telemetry-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# timingd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# traffic-dird-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:15 UTC
# transportd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:16 UTC
# url-filterd-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:50:16 UTC
# vlans-ng-actions-dd release 23.4R1.9 built by builder on 2023-12-16 01:51:01 UTC
#
# HCM-VNPT-HSK-FW-01> show version invoke-on other-routing-engine
# node0:
# --------------------------------------------------------------------------
# Hostname: HCM-VNPT-HSK-FW-01
# Model: srx1600
# Junos: 23.4R1.9
# JUNOS OS Kernel 64-bit [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS libs [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS runtime [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS time zone information [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS libs compat32 [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS 32-bit compatibility [20231122.ee0e992_builder_stable_12_234]
# JUNOS py extensions [20231216.005403_builder_junos_234_r1]
# JUNOS py base [20231216.005403_builder_junos_234_r1]
# JUNOS OS vmguest [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS package [20231117.015524_builder_stable_12]
# JUNOS network stack and utilities [20231216.005403_builder_junos_234_r1]
# JUNOS OS network modules [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS crypto [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS boot-ve files [20231122.ee0e992_builder_stable_12_234]
# JUNOS libs [20231216.005403_builder_junos_234_r1]
# JUNOS libs compat32 [20231216.005403_builder_junos_234_r1]
# JUNOS runtime [20231216.005403_builder_junos_234_r1]
# JUNOS na telemetry [23.4R1.9]
# JUNOS Web Management Platform Package [20231216.005403_builder_junos_234_r1]
# JUNOS vmguest [20231216.005403_builder_junos_234_r1]
# JUNOS lite sysmond [20231216.005403_builder_junos_234_r1]
# JUNOS publish subscribe base [20231216.005403_builder_junos_234_r1]
# JUNOS srx libs compat32 [20231216.005403_builder_junos_234_r1]
# JUNOS srx runtime [20231216.005403_builder_junos_234_r1]
# JUNOS srx platform support [20231216.005403_builder_junos_234_r1]
# JUNOS common platform support [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp runtime [20231216.005403_builder_junos_234_r1]
# JUNOS Routing mpls-oam-basic [20231216.005403_builder_junos_234_r1]
# JUNOS Routing lsys [20231216.005403_builder_junos_234_r1]
# JUNOS Routing controller-external [20231216.005403_builder_junos_234_r1]
# JUNOS Routing 32-bit Compatible Version [20231216.005403_builder_junos_234_r1]
# JUNOS Routing aggregated [20231216.005403_builder_junos_234_r1]
# Redis [20231216.005403_builder_junos_234_r1]
# JUNOS probe utility [20231216.005403_builder_junos_234_r1]
# JUNOS pppoe [20231216.005403_builder_junos_234_r1]
# JUNOS Openconfig [23.4R1.9]
# JUNOS mtx network modules [20231216.005403_builder_junos_234_r1]
# JUNOS modules [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp modules [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp libs [20231216.005403_builder_junos_234_r1]
# JUNOS srx libs [20231216.005403_builder_junos_234_r1]
# JUNOS L2 RSI Scripts [20231216.005403_builder_junos_234_r1]
# JUNOS Key Manager [20231216.005403_builder_junos_234_r1]
# JUNOS srx Data Plane Crypto Support [20231216.005403_builder_junos_234_r1]
# JUNOS ike [20231216.005403_builder_junos_234_r1]
# JUNOS daemons [20231216.005403_builder_junos_234_r1]
# JUNOS srx daemons [20231216.005403_builder_junos_234_r1]
# JUNOS SRX TVP AppQos Daemon [20231216.005403_builder_junos_234_r1]
# JUNOS TPM2 [20231216.005403_builder_junos_234_r1]
# JUNOS Extension Toolkit [20231216.005403_builder_junos_234_r1]
# JUNOS Phone-home [20231216.005403_builder_junos_234_r1]
# JUNOS Juniper Malware Removal Tool (JMRT) [1.0.0+20231216.005403_builder_junos_234_r1]
# JUNOS Juniper Malware Removal Tool (JMRT) Test [1.0.0+20231216.005403_builder_junos_234_r1]
# JUNOS J-Insight [20231216.005403_builder_junos_234_r1]
# JUNOS Online Documentation [20231216.005403_builder_junos_234_r1]
# JUNOS jail runtime [20231122.ee0e992_builder_stable_12_234]
# JUNOS FIPS mode utilities [20231216.005403_builder_junos_234_r1]
# JUNOS dsa [20231216.005403_builder_junos_234_r1]
# node1:
# --------------------------------------------------------------------------
# Hostname: HCM-VNPT-HSK-FW-02
# Model: srx1600
# Junos: 23.4R1.9
# JUNOS OS Kernel 64-bit [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS libs [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS runtime [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS time zone information [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS libs compat32 [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS 32-bit compatibility [20231122.ee0e992_builder_stable_12_234]
# JUNOS py extensions [20231216.005403_builder_junos_234_r1]
# JUNOS py base [20231216.005403_builder_junos_234_r1]
# JUNOS OS vmguest [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS package [20231117.015524_builder_stable_12]
# JUNOS network stack and utilities [20231216.005403_builder_junos_234_r1]
# JUNOS OS network modules [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS crypto [20231122.ee0e992_builder_stable_12_234]
# JUNOS OS boot-ve files [20231122.ee0e992_builder_stable_12_234]
# JUNOS libs [20231216.005403_builder_junos_234_r1]
# JUNOS libs compat32 [20231216.005403_builder_junos_234_r1]
# JUNOS runtime [20231216.005403_builder_junos_234_r1]
# JUNOS na telemetry [23.4R1.9]
# JUNOS Web Management Platform Package [20231216.005403_builder_junos_234_r1]
# JUNOS vmguest [20231216.005403_builder_junos_234_r1]
# JUNOS lite sysmond [20231216.005403_builder_junos_234_r1]
# JUNOS publish subscribe base [20231216.005403_builder_junos_234_r1]
# JUNOS srx libs compat32 [20231216.005403_builder_junos_234_r1]
# JUNOS srx runtime [20231216.005403_builder_junos_234_r1]
# JUNOS srx platform support [20231216.005403_builder_junos_234_r1]
# JUNOS common platform support [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp runtime [20231216.005403_builder_junos_234_r1]
# JUNOS Routing mpls-oam-basic [20231216.005403_builder_junos_234_r1]
# JUNOS Routing lsys [20231216.005403_builder_junos_234_r1]
# JUNOS Routing controller-external [20231216.005403_builder_junos_234_r1]
# JUNOS Routing 32-bit Compatible Version [20231216.005403_builder_junos_234_r1]
# JUNOS Routing aggregated [20231216.005403_builder_junos_234_r1]
# Redis [20231216.005403_builder_junos_234_r1]
# JUNOS probe utility [20231216.005403_builder_junos_234_r1]
# JUNOS pppoe [20231216.005403_builder_junos_234_r1]
# JUNOS Openconfig [23.4R1.9]
# JUNOS mtx network modules [20231216.005403_builder_junos_234_r1]
# JUNOS modules [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp modules [20231216.005403_builder_junos_234_r1]
# JUNOS srxtvp libs [20231216.005403_builder_junos_234_r1]
# JUNOS srx libs [20231216.005403_builder_junos_234_r1]
# JUNOS L2 RSI Scripts [20231216.005403_builder_junos_234_r1]
# JUNOS Key Manager [20231216.005403_builder_junos_234_r1]
# JUNOS srx Data Plane Crypto Support [20231216.005403_builder_junos_234_r1]
# JUNOS ike [20231216.005403_builder_junos_234_r1]
# JUNOS daemons [20231216.005403_builder_junos_234_r1]
# JUNOS srx daemons [20231216.005403_builder_junos_234_r1]
# JUNOS SRX TVP AppQos Daemon [20231216.005403_builder_junos_234_r1]
# JUNOS TPM2 [20231216.005403_builder_junos_234_r1]
# JUNOS Extension Toolkit [20231216.005403_builder_junos_234_r1]
# JUNOS Phone-home [20231216.005403_builder_junos_234_r1]
# JUNOS Juniper Malware Removal Tool (JMRT) [1.0.0+20231216.005403_builder_junos_234_r1]
# JUNOS Juniper Malware Removal Tool (JMRT) Test [1.0.0+20231216.005403_builder_junos_234_r1]
# JUNOS J-Insight [20231216.005403_builder_junos_234_r1]
# JUNOS Online Documentation [20231216.005403_builder_junos_234_r1]
# JUNOS jail runtime [20231122.ee0e992_builder_stable_12_234]
# JUNOS FIPS mode utilities [20231216.005403_builder_junos_234_r1]
# JUNOS dsa [20231216.005403_builder_junos_234_r1]
#
# HCM-VNPT-HSK-FW-01> show configuration
version 23.4R1.9;
groups {
node0 {
system {
host-name HCM-VNPT-HSK-FW-01;
}
}
node1 {
system {
host-name HCM-VNPT-HSK-FW-02;
}
}
}
apply-groups "${node}";
system {
root-authentication {
encrypted-password "$6$pZRs1bih$XpUy8lsTYsFEiL1twi5Ey0LCc.PzQsaOGV0ttBszHoWieycNNroG3NZq01cVS3T7pUDX6pFMebrWKpJllWWx6.";
}
login {
user admin {
uid 2001;
class super-user;
authentication {
encrypted-password "$6$hIAXGhdw$CZfep4O/VPWHy7UWiakXU1woOhVx95FCvyPJKyP0nx0f5OLci/evl2e.7FFe0Ao0smNAsdyiykbvaGNGg/q5P.";
}
}
user adminit {
uid 2002;
class read-only;
authentication {
encrypted-password "$6$4UopBDML$JSmfuWtGODlByqMyHqj9XVtOxtXVvnl5q/1b6JU1hw58lM/k0.l/MHSuBxie1B8j6n532uWMTLq3Pzp3yG0zt0";
}
}
user nguyennd {
uid 2000;
class super-user;
authentication {
encrypted-password "$6$7g3J8zTW$dFTivn7siTdtU6I90uR3mHkvFMVTEnU/IQIaC.lnl5HOrN9s90kvUkDBArQ881q7/tsbVXl9yoODzXtZsbB0A0";
}
}
user nhannt8 {
full-name Nguyen_Trong_Nhan;
uid 2005;
class super-user;
authentication {
encrypted-password "$6$ESqj4DNy$dnAb1mgATcBtC760aBT1dYJ20y1ZCJ3iVnhTy4j37HQ3CUB5KNVTgIECd1KZGgzJCgDHIYfCy9QKi1elf383/1";
}
}
user tanhn {
full-name Huynh_Ngoc_Tan;
uid 2004;
class super-user;
authentication {
encrypted-password "$6$AdpQNajJ$4wG8..Jq34Lsd9DonYtgCnvXVXHs0qOtV.H0xY0RApOunTlsHWjxcvgA3eoauXZmCf8Lqm96XT6SP5b0UolUo/";
}
}
}
services {
netconf {
ssh;
}
ssh;
xnm-clear-text;
web-management {
http {
interface reth3.14;
}
https {
system-generated-certificate;
}
}
}
name-server {
8.8.8.8;
8.8.4.4;
}
syslog {
user * {
any emergency;
}
host 172.16.200.21 {
any info;
authorization info;
port 5514;
source-address 172.16.14.249;
}
file interactive-commands {
interactive-commands any;
}
file messages {
any notice;
authorization info;
}
}
max-configurations-on-flash 49;
license {
autoupdate {
url https://ae1.juniper.net/junos/key_retrieval;
}
}
processes {
dhcp-service {
traceoptions {
file dhcp_logfile size 10m;
level all;
flag packet;
}
}
}
}
chassis {
fpc 0 {
pic 1 {
pic-mode 10G;
}
}
cluster {
reth-count 10;
redundancy-group 0 {
node 0 priority 100;
node 1 priority 1;
}
redundancy-group 1 {
node 0 priority 100;
node 1 priority 1;
}
}
}
security {
log {
utc-timestamp;
mode stream;
format sd-syslog;
report;
stream splunk-stream {
severity info;
format sd-syslog;
host {
172.16.200.21;
port 5514;
}
source-address 172.16.14.249;
}
}
ike {
traceoptions {
file kmd-log;
flag all;
}
proposal ike-proposal-01 {
authentication-method pre-shared-keys;
dh-group group20;
authentication-algorithm md5;
encryption-algorithm aes-256-cbc;
lifetime-seconds 86400;
}
proposal ike-proposal-02 {
authentication-method pre-shared-keys;
dh-group group20;
authentication-algorithm md5;
encryption-algorithm aes-256-cbc;
lifetime-seconds 86400;
}
proposal ike-prop-vpn-03c49d5-1 {
authentication-method pre-shared-keys;
dh-group group2;
authentication-algorithm sha1;
encryption-algorithm aes-128-cbc;
lifetime-seconds 28800;
}
proposal ike-prop-vpn-03c49d5-2 {
authentication-method pre-shared-keys;
dh-group group2;
authentication-algorithm sha1;
encryption-algorithm aes-128-cbc;
lifetime-seconds 28800;
}
proposal ike-prop-vpn-05ca90e-1 {
authentication-method pre-shared-keys;
dh-group group2;
authentication-algorithm sha1;
encryption-algorithm aes-128-cbc;
lifetime-seconds 28800;
}
proposal ike-prop-vpn-05ca90e-2 {
authentication-method pre-shared-keys;
dh-group group2;
authentication-algorithm sha1;
encryption-algorithm aes-128-cbc;
lifetime-seconds 28800;
}
policy ike-policy-01 {
mode main;
proposals ike-proposal-01;
# pre-shared-key ascii-text <removed>;
}
policy ike-policy-02 {
mode main;
proposals ike-proposal-02;
# pre-shared-key ascii-text <removed>;
}
policy ike-pol-vpn-03c49d5-1 {
mode main;
proposals ike-prop-vpn-03c49d5-1;
# pre-shared-key ascii-text <removed>;
}
policy ike-pol-vpn-03c49d5-2 {
mode main;
proposals ike-prop-vpn-03c49d5-2;
# pre-shared-key ascii-text <removed>;
}
policy ike-pol-vpn-05ca90e-1 {
mode main;
proposals ike-prop-vpn-05ca90e-1;
# pre-shared-key ascii-text <removed>;
}
policy ike-pol-vpn-05ca90e-2 {
mode main;
proposals ike-prop-vpn-05ca90e-2;
# pre-shared-key ascii-text <removed>;
}
gateway ike-gate-01 {
ike-policy ike-policy-01;
address 125.212.255.174;
dead-peer-detection {
interval 10;
threshold 3;
}
external-interface reth2.1514;
local-address 14.225.242.83;
version v1-only;
}
gateway ike-gate-02 {
ike-policy ike-policy-02;
address 125.212.255.178;
dead-peer-detection {
interval 10;
threshold 3;
}
external-interface reth6.3995;
version v1-only;
}
gateway gw-vpn-03c49d5-1 {
ike-policy ike-pol-vpn-03c49d5-1;
address 3.212.240.175;
dead-peer-detection {
interval 10;
threshold 3;
}
no-nat-traversal;
external-interface reth2.1513;
version v2-only;
}
gateway gw-vpn-03c49d5-2 {
ike-policy ike-pol-vpn-03c49d5-2;
address 52.7.190.210;
dead-peer-detection {
interval 10;
threshold 3;
}
no-nat-traversal;
external-interface reth2.1513;
version v2-only;
}
gateway gw-vpn-05ca90e-1 {
ike-policy ike-pol-vpn-05ca90e-1;
address 47.131.26.21;
dead-peer-detection {
interval 10;
threshold 3;
}
no-nat-traversal;
external-interface reth2.1513;
version v2-only;
}
gateway gw-vpn-05ca90e-2 {
ike-policy ike-pol-vpn-05ca90e-2;
address 52.76.218.147;
dead-peer-detection {
interval 10;
threshold 3;
}
no-nat-traversal;
external-interface reth2.1513;
version v2-only;
}
}
ipsec {
proposal ipsec-proposal-01 {
protocol esp;
authentication-algorithm hmac-sha-256-128;
encryption-algorithm aes-256-cbc;
lifetime-seconds 28800;
}
proposal ipsec-proposal-02 {
protocol esp;
authentication-algorithm hmac-sha-256-128;
encryption-algorithm aes-256-cbc;
lifetime-seconds 28800;
}
proposal ipsec-prop-vpn-03c49d5-1 {
protocol esp;
authentication-algorithm hmac-sha1-96;
encryption-algorithm aes-128-cbc;
lifetime-seconds 3600;
}
proposal ipsec-prop-vpn-03c49d5-2 {
protocol esp;
authentication-algorithm hmac-sha1-96;
encryption-algorithm aes-128-cbc;
lifetime-seconds 3600;
}
proposal ipsec-prop-vpn-05ca90e-1 {
protocol esp;
authentication-algorithm hmac-sha1-96;
encryption-algorithm aes-128-cbc;
lifetime-seconds 3600;
}
proposal ipsec-prop-vpn-05ca90e-2 {
protocol esp;
authentication-algorithm hmac-sha1-96;
encryption-algorithm aes-128-cbc;
lifetime-seconds 3600;
}
policy ipsec-policy-01 {
proposals ipsec-proposal-01;
}
policy ipsec-policy-02 {
proposals ipsec-proposal-02;
}
policy ipsec-pol-vpn-03c49d5-1 {
perfect-forward-secrecy {
keys group2;
}
proposals ipsec-prop-vpn-03c49d5-1;
}
policy ipsec-pol-vpn-03c49d5-2 {
perfect-forward-secrecy {
keys group2;
}
proposals ipsec-prop-vpn-03c49d5-2;
}
policy ipsec-pol-vpn-05ca90e-1 {
perfect-forward-secrecy {
keys group2;
}
proposals ipsec-prop-vpn-05ca90e-1;
}
policy ipsec-pol-vpn-05ca90e-2 {
perfect-forward-secrecy {
keys group2;
}
proposals ipsec-prop-vpn-05ca90e-2;
}
vpn ipsec-vpn-01 {
bind-interface st0.0;
vpn-monitor {
optimized;
source-interface st0.0;
}
ike {
gateway ike-gate-01;
ipsec-policy ipsec-policy-01;
}
establish-tunnels immediately;
}
vpn ipsec-vpn-02 {
bind-interface st0.1;
vpn-monitor {
optimized;
source-interface st0.1;
}
ike {
gateway ike-gate-02;
ipsec-policy ipsec-policy-02;
}
establish-tunnels immediately;
}
vpn vpn-03c49d5-1 {
bind-interface st0.10;
df-bit clear;
ike {
gateway gw-vpn-03c49d5-1;
ipsec-policy ipsec-pol-vpn-03c49d5-1;
}
}
vpn vpn-03c49d5-2 {
bind-interface st0.11;
df-bit clear;
ike {
gateway gw-vpn-03c49d5-2;
ipsec-policy ipsec-pol-vpn-03c49d5-2;
}
}
vpn vpn-05ca90e-1 {
bind-interface st0.15;
df-bit clear;
ike {
gateway gw-vpn-05ca90e-1;
ipsec-policy ipsec-pol-vpn-05ca90e-1;
}
}
vpn vpn-05ca90e-2 {
bind-interface st0.16;
df-bit clear;
ike {
gateway gw-vpn-05ca90e-2;
ipsec-policy ipsec-pol-vpn-05ca90e-2;
}
}
}
address-book {
global {
address LAN-PUBLIC 160.187.94.0/24;
address VIETTEL-LAN-VM-01 172.16.200.0/23;
address HOST-MANAGEMENT-02 112.197.0.0/24;
address HOST-MANAGEMENT-03 112.197.1.0/24;
address HOST-MANAGEMENT-VIETTEL 172.16.200.200/32;
address HOST-MANAGEMENT-VNPT-01 172.16.100.80/32;
address HOST-MANAGEMENT-VNPT-02 172.16.100.100/32;
address HSK-VIETTEL-ChatQC-HA-K8s 172.16.200.133/32;
address HSK-VNPT-LAN-ZONE-VLAN12-01 10.10.12.87/32;
address VM-MNGT-VIETTEL 172.16.200.200/32;
address VM-MNGT-VNPT 172.16.100.100/32;
address Proxmox-MNGT-VNPT-IP 172.16.30.0/24;
address HOST-PRTG-VNPT-01 172.16.100.248/32;
address Proxmox-MNGT-IP 172.16.30.0/24;
address HSK-MNGT-IP-01 125.212.220.208/32;
address HSK-MNGT-IP-02 123.30.249.178/32;
address HSK-MNGT-IP-03 27.74.242.173/32;
address HSK-MNGT-IP-04 14.225.249.249/32;
address HSK-MNGT-IP-05 14.241.249.24/32;
address LAN-ZONE-VM-MNGT 172.16.200.89/32;
address VIETTEL-LAN-ZONE-VM-01 172.16.200.0/23;
address VNPT-LAN-ZONE-VM-01 172.16.100.0/23;
address Cloudflare-IP-01 73.245.48.0/20;
address Cloudflare-IP-02 103.21.244.0/22;
address Cloudflare-IP-03 103.22.200.0/22;
address Cloudflare-IP-04 103.31.4.0/22;
address Cloudflare-IP-05 141.101.64.0/18;
address Cloudflare-IP-06 108.162.192.0/18;
address Cloudflare-IP-07 190.93.240.0/20;
address Cloudflare-IP-08 188.114.96.0/20;
address Cloudflare-IP-09 197.234.240.0/22;
address Cloudflare-IP-10 198.41.128.0/17;
address Cloudflare-IP-11 162.158.0.0/15;
address Cloudflare-IP-12 104.16.0.0/13;
address Cloudflare-IP-13 104.24.0.0/14;
address Cloudflare-IP-14 172.64.0.0/13;
address Cloudflare-IP-15 131.0.72.0/22;
address Cloudflare-IP-16 173.245.48.0/20;
address HSK-VM-WEB-01 172.16.200.88/32;
address HOST-MANAGEMENT-VNPT-03 172.16.14.101/32;
address HOST-MANAGEMENT-VNPT-04 172.16.14.244/32;
address AdminPublic-01 222.255.122.78/32;
address AdminPublic-02 14.225.241.80/32;
address AdminPublic-03 14.225.241.108/32;
address AdminPublic-04 14.241.238.138/32;
address AdminPublic-05 115.73.218.48/32;
address AdminPublic-06 14.225.241.73/32;
address AdminPublic-07 123.30.249.178/32;
address AdminPublic-08 14.225.241.74/32;
address AdminPublic-09 113.23.77.197/32;
address AdminPublic-10 113.23.77.198/32;
address AdminPublic-11 113.23.77.105/32;
address AdminPublic-12 14.225.241.109/32;
address AdminPublic-13 125.212.220.209/32;
address AdminPublic-14 118.69.81.238/32;
address AdminPublic-15 14.225.241.90/32;
address AdminPublic-16 14.225.241.77/32;
address AdminPublic-17 14.225.241.78/32;
address AdminPublic-18 14.225.241.79/32;
address AdminPublic-19 14.225.241.87/32;
address AdminPublic-20 14.225.241.88/32;
address AdminPublic-21 14.225.241.89/32;
address AdminPublic-22 27.74.242.173/32;
address AdminPublic-23 14.241.249.24/32;
address 29HoangViet-01 14.241.249.24/32;
address 29HoangViet-02 27.74.242.173/32;
address VPN-HOST-01 123.30.249.178/32;
address QC-Connection-01 14.225.216.242/32;
address QC-Connection-02 14.225.216.243/32;
address QC-Connection-03 14.225.242.81/32;
address QC-Connection-04 222.252.25.142/32;
address QC-Connection-05 14.224.179.29/32;
address QC-Connection-06 14.225.249.198/32;
address QC-Connection-07 125.212.220.210/32;
address QC-Connection-08 115.79.44.188/32;
address QC-Connection-09 14.161.14.105/32;
address QC-Connection-10 115.79.210.176/32;
address QC-Connection-11 18.142.124.174/32;
address QC-Connection-12 118.69.81.240/32;
address QC-Connection-13 115.78.130.8/32;
address QC-Connection-14 125.212.220.208/32;
address QC-Connection-15 14.224.216.3/32;
address QC-Connection-16 27.74.242.173/32;
address QC-Connection-17 14.241.249.24/32;
address QC-Connection-18 14.225.241.80/32;
address QC-Connection-19 14.161.16.247/32;
address QC-Connection-20 115.79.137.179/32;
address QC-Connection-21 14.225.249.243/32;
address QC-Connection-22 14.225.249.233/32;
address QC-Connection-23 14.225.249.234/32;
address QC-Connection-24 14.225.249.235/32;
address QC-Connection-25 14.225.249.236/32;
address QC-Connection-26 14.225.249.237/32;
address QC-Connection-27 14.225.249.238/32;
address QC-Connection-28 14.225.249.239/32;
address QC-Connection-29 14.225.249.241/32;
address QC-Connection-30 14.225.249.244/32;
address QC-Connection-31 14.225.249.253/32;
address QC-Connection-32 14.225.249.249/32;
address QC-Connection-33 103.93.92.25/32;
address QC-Connection-34 14.255.249.150/32;
address QC-Connection-35 115.78.230.226/32;
address QC-Connection-36 14.225.194.160/32;
address QC-Connection-37 103.168.54.78/32;
address QC-Connection-38 123.30.249.26/32;
address QC-Connection-39 113.161.33.107/32;
address QC-Connection-40 116.73.208.106/32;
address QC-Connection-41 14.224.237.115/32;
address QC-Connection-42 203.162.54.108/32;
address QC-Connection-43 14.225.241.116/32;
address QC-Connection-44 14.225.241.117/32;
address QC-Connection-45 14.225.241.118/32;
address QC-Connection-46 14.225.249.132/32;
address QC-Connection-47 113.23.77.116/32;
address QC-Connection-48 14.225.241.124/32;
address QC-Connection-49 14.225.200.200/32;
address QC-Connection-50 14.241.238.138/32;
address QC-Connection-51 115.73.218.48/32;
address QC-Connection-52 123.30.249.178/32;
address QC-Connection-53 14.225.241.73/32;
address QC-Connection-54 113.161.49.29/32;
address QC-Connection-55 167.99.67.47/32;
address QC-Connection-56 14.225.241.74/32;
address QC-Connection-57 10.10.12.0/24;
address QC-Connection-58 14.225.194.150/32;
address QC-Connection-59 43.239.148.187/32;
address QC-Connection-60 14.225.249.139/32;
address QC-Connection-61 157.245.63.133/32;
address QC-Connection-62 113.23.77.100/32;
address QC-Connection-63 14.225.241.110/32;
address QC-Connection-64 113.23.77.197/32;
address QC-Connection-65 113.23.77.198/32;
address QC-Connection-66 113.23.77.105/32;
address QC-Connection-67 113.23.77.103/32;
address QC-Connection-68 14.225.241.90/32;
address QC-Connection-69 43.239.148.186/32;
address QC-Connection-70 118.69.81.238/32;
address QC-Connection-71 14.225.194.148/32;
address QC-Connection-72 123.30.249.45/32;
address QC-Connection-73 14.225.249.131/32;
address QC-Connection-74 14.225.200.199/32;
address QC-Connection-75 14.225.241.70/32;
address QC-Connection-76 125.212.220.207/32;
address QC-Connection-77 125.212.220.210/32;
address QC-Connection-78 125.212.220.208/32;
address QC-Connection-79 125.212.220.209/32;
address QC-Connection-80 172.16.200.0/23;
address QC-Connection-82 14.225.194.150/32;
address QC-Connection-83 125.212.246.13/32;
address QC-Connection-84 125.212.246.10/32;
address QC-Connection-85 160.187.94.131/32;
address QC-Connection-86 14.225.249.208/32;
address QC-Connection-87 14.225.249.209/32;
address QC-Connection-88 14.225.249.210/32;
address QC-Connection-89 52.76.51.80/32;
address INSIDE-ADDRESS-01 14.224.129.204/32;
address INSIDE-ADDRESS-02 125.212.220.209/32;
address INSIDE-ADDRESS-03 14.225.249.217/32;
address INSIDE-ADDRESS-04 14.225.241.94/32;
address INSIDE-ADDRESS-05 14.225.194.155/32;
address INSIDE-ADDRESS-06 14.225.249.203/32;
address INSIDE-ADDRESS-07 14.225.249.155/32;
address INSIDE-ADDRESS-08 14.225.194.156/32;
address INSIDE-ADDRESS-09 14.225.249.207/32;
address INSIDE-ADDRESS-10 14.225.249.208/32;
address INSIDE-ADDRESS-11 14.225.194.148/32;
address INSIDE-ADDRESS-12 14.225.249.183/32;
address INSIDE-ADDRESS-13 14.225.241.110/32;
address INSIDE-ADDRESS-14 14.225.249.228/32;
address INSIDE-ADDRESS-15 203.162.54.108/32;
address INSIDE-ADDRESS-16 14.225.216.241/32;
address INSIDE-ADDRESS-17 14.225.216.242/32;
address INSIDE-ADDRESS-18 14.225.216.243/32;
address RAD-HOST-01 27.74.242.173/32;
address RAD-HOST-02 14.241.249.24/32;
address RAD-HOST-03 113.161.49.29/32;
address BIT-BUCKET-01 104.192.136.0/21;
address BIT-BUCKET-02 185.166.140.0/22;
address BIT-BUCKET-03 13.200.41.128/25;
address DEV-137-IP 172.16.200.137/32;
address SHOP-HOST-01 14.241.238.138/32;
address SHOP-HOST-02 115.73.218.48/32;
address SHOP-HOST-03 14.224.237.115/32;
address SHOP-HOST-04 27.74.248.89/32;
address SHOP-HOST-05 113.161.32.1/32;
address SHOP-HOST-06 14.224.136.5/32;
address SHOP-HOST-07 115.78.7.24/32;
address SHOP-HOST-08 14.224.136.26/32;
address SHOP-HOST-09 115.79.42.231/32;
address SHOP-HOST-10 14.241.229.211/32;
address SHOP-HOST-11 115.78.234.45/32;
address SHOP-HOST-12 115.78.224.8/32;
address SHOP-HOST-13 14.224.129.231/32;
address SHOP-HOST-14 115.79.143.132/32;
address SHOP-HOST-15 222.252.25.142/32;
address SHOP-HOST-16 14.224.179.29/32;
address SHOP-HOST-17 14.241.225.122/32;
address SHOP-HOST-18 115.79.26.191/32;
address SHOP-HOST-19 115.75.16.80/32;
address SHOP-HOST-20 113.166.127.250/32;
address SHOP-HOST-21 115.73.220.104/32;
address SHOP-HOST-22 115.73.209.63/32;
address SHOP-HOST-23 14.224.173.238/32;
address SHOP-HOST-24 115.77.184.46/32;
address SHOP-HOST-25 14.224.146.53/32;
address SHOP-HOST-26 222.252.15.136/32;
address SHOP-HOST-27 14.224.137.187/32;
address SHOP-HOST-28 14.224.182.245/32;
address SHOP-HOST-29 14.241.62.65/32;
address SHOP-HOST-30 113.161.143.4/32;
address SHOP-HOST-31 14.189.254.4/32;
address SHOP-HOST-32 115.73.218.179/32;
address SHOP-HOST-33 115.79.32.99/32;
address SHOP-HOST-34 27.72.57.168/32;
address SHOP-HOST-35 115.75.191.37/32;
address SHOP-HOST-36 14.224.130.117/32;
address SHOP-HOST-37 14.224.157.10/32;
address SHOP-HOST-38 14.224.159.20/32;
address SHOP-HOST-39 115.75.19.183/32;
address SHOP-HOST-40 14.224.172.207/32;
address SHOP-HOST-41 14.224.179.35/32;
address SHOP-HOST-42 14.241.253.91/32;
address SHOP-HOST-43 14.241.244.110/32;
address SHOP-HOST-44 14.224.131.132/32;
address SHOP-HOST-45 115.77.184.91/32;
address SHOP-HOST-46 115.77.188.14/32;
address SHOP-HOST-47 14.224.183.193/32;
address SHOP-HOST-48 115.79.46.55/32;
address SHOP-HOST-49 115.78.3.220/32;
address SHOP-HOST-50 27.74.248.129/32;
address SHOP-HOST-51 14.224.179.255/32;
address SHOP-HOST-52 222.253.42.54/32;
address SHOP-HOST-53 14.224.137.185/32;
address SHOP-HOST-54 115.78.225.60/32;
address SHOP-HOST-55 222.253.48.229/32;
address SHOP-HOST-56 14.224.128.235/32;
address SHOP-HOST-57 14.224.170.177/32;
address SHOP-HOST-58 14.224.152.44/32;
address SHOP-HOST-59 14.224.151.111/32;
address SHOP-HOST-60 27.74.240.175/32;
address SHOP-HOST-61 115.78.95.39/32;
address SHOP-HOST-62 115.79.197.144/32;
address SHOP-HOST-63 113.176.63.34/32;
address SHOP-HOST-64 115.78.230.226/32;
address SHOP-HOST-65 115.73.213.81/32;
address SHOP-HOST-66 115.73.212.140/32;
address SHOP-HOST-67 113.161.65.47/32;
address SHOP-HOST-68 115.73.220.206/32;
address SHOP-HOST-69 14.241.120.101/32;
address SHOP-HOST-70 115.79.198.64/32;
address SHOP-HOST-71 117.3.1.94/32;
address SHOP-HOST-72 117.2.161.42/32;
address SHOP-HOST-73 117.2.17.241/32;
address SHOP-HOST-74 117.3.174.211/32;
address SHOP-HOST-75 113.161.254.57/32;
address SHOP-HOST-76 117.2.81.153/32;
address SHOP-HOST-77 113.161.187.231/32;
address SHOP-HOST-78 115.74.196.246/32;
address SHOP-HOST-79 14.224.173.228/32;
address SHOP-HOST-80 113.176.124.150/32;
address SHOP-HOST-81 14.241.102.105/32;
address SHOP-HOST-82 14.224.152.241/32;
address SHOP-HOST-83 14.224.161.230/32;
address SHOP-HOST-84 117.2.131.245/32;
address SHOP-HOST-85 117.4.155.8/32;
address SHOP-HOST-86 14.224.181.134/32;
address SHOP-HOST-87 115.79.47.252/32;
address SHOP-HOST-88 14.224.171.229/32;
address SHOP-HOST-89 115.79.5.149/32;
address SHOP-HOST-90 14.161.16.247/32;
address SHOP-HOST-91 115.79.137.179/32;
address SHOP-HOST-92 14.224.150.248/32;
address SHOP-HOST-93 117.2.137.243/32;
address SHOP-HOST-94 115.73.222.121/32;
address SHOP-HOST-95 117.3.111.174/32;
address SHOP-HOST-96 115.79.138.57/32;
address SHOP-HOST-97 117.2.24.90/32;
address SHOP-HOST-98 117.2.132.86/32;
address SHOP-HOST-99 117.2.125.149/32;
address SHOP-HOST-100 14.241.142.172/32;
address SHOP-HOST-101 14.241.206.63/32;
address SHOP-HOST-102 117.2.57.65/32;
address SHOP-HOST-103 115.78.7.97/32;
address SHOP-HOST-104 117.2.88.216/32;
address SHOP-HOST-105 116.105.225.224/32;
address SHOP-HOST-106 117.4.200.236/32;
address SHOP-HOST-107 115.75.67.164/32;
address SHOP-HOST-108 115.79.143.231/32;
address SHOP-HOST-109 117.2.83.211/32;
address SHOP-HOST-110 14.224.148.109/32;
address SHOP-HOST-111 14.224.153.36/32;
address SHOP-HOST-112 117.2.169.76/32;
address SHOP-HOST-113 14.224.155.104/32;
address SHOP-HOST-114 14.224.157.232/32;
address SHOP-HOST-115 14.224.159.241/32;
address SHOP-HOST-116 14.224.159.227/32;
address SHOP-HOST-117 14.224.179.132/32;
address SHOP-HOST-118 14.224.167.128/32;
address SHOP-HOST-119 115.79.198.225/32;
address SHOP-HOST-120 14.224.158.252/32;
address SHOP-HOST-121 117.2.158.253/32;
address SHOP-HOST-122 116.105.229.5/32;
address SHOP-HOST-123 14.224.175.20/32;
address SHOP-HOST-124 14.224.181.101/32;
address SHOP-HOST-125 115.77.191.122/32;
address SHOP-HOST-126 14.224.137.71/32;
address SHOP-HOST-127 14.224.138.228/32;
address SHOP-HOST-128 14.224.138.42/32;
address SHOP-HOST-129 14.224.187.229/32;
address SHOP-HOST-130 117.3.2.249/32;
address SHOP-HOST-131 14.224.136.247/32;
address SHOP-HOST-132 115.75.54.56/32;
address SHOP-HOST-133 14.224.136.24/32;
address SHOP-HOST-134 14.241.249.24/32;
address SHOP-HOST-135 27.74.242.173/32;
address SHOP-HOST-136 14.161.14.105/32;
address SHOP-HOST-137 115.79.44.188/32;
address SHOP-HOST-138 113.161.47.62/32;
address SHOP-HOST-139 115.79.60.30/32;
address SHOP-HOST-140 115.74.224.229/32;
address SHOP-HOST-141 14.241.187.119/32;
address SHOP-HOST-142 115.78.14.33/32;
address SHOP-HOST-143 115.75.176.111/32;
address SHOP-HOST-144 113.161.204.233/32;
address SHOP-HOST-145 115.74.250.233/32;
address SHOP-HOST-146 115.74.203.207/32;
address SHOP-HOST-147 203.210.237.189/32;
address SHOP-HOST-148 115.74.222.182/32;
address SHOP-HOST-149 115.75.34.230/32;
address SHOP-HOST-150 115.74.224.130/32;
address SHOP-HOST-151 115.75.10.150/32;
address SHOP-HOST-152 115.75.161.136/32;
address SHOP-HOST-153 115.75.36.73/32;
address SHOP-HOST-154 115.74.241.8/32;
address SHOP-HOST-155 115.75.185.157/32;
address SHOP-HOST-156 115.75.83.15/32;
address SHOP-HOST-157 115.75.138.243/32;
address SHOP-HOST-158 115.75.129.192/32;
address SHOP-HOST-159 113.176.89.227/32;
address SHOP-HOST-160 115.75.118.91/32;
address SHOP-HOST-161 115.75.121.118/32;
address SHOP-HOST-162 113.161.174.46/32;
address SHOP-HOST-163 222.253.42.213/32;
address SHOP-HOST-164 117.4.139.203/32;
address SHOP-HOST-165 14.224.173.70/32;
address SHOP-HOST-166 14.224.166.109/32;
address SHOP-HOST-167 115.75.106.236/32;
address SHOP-HOST-168 115.78.94.235/32;
address SHOP-HOST-169 115.78.73.109/32;
address SHOP-HOST-170 115.74.201.86/32;
address SHOP-HOST-171 115.74.210.220/32;
address SHOP-HOST-172 115.74.233.49/32;
address SHOP-HOST-173 115.74.224.137/32;
address SHOP-HOST-174 115.73.210.132/32;
address SHOP-HOST-175 115.75.39.209/32;
address SHOP-HOST-176 115.74.194.105/32;
address SHOP-HOST-177 14.241.172.235/32;
address SHOP-HOST-178 113.161.217.121/32;
address SHOP-HOST-179 123.22.212.179/32;
address SHOP-HOST-180 203.210.232.58/32;
address SHOP-HOST-181 113.161.217.190/32;
address SHOP-HOST-182 113.161.217.109/32;
address SHOP-HOST-183 14.241.190.181/32;
address SHOP-HOST-184 113.161.145.22/32;
address SHOP-HOST-185 115.75.36.222/32;
address SHOP-HOST-186 115.74.246.184/32;
address SHOP-HOST-187 27.74.242.218/32;
address SHOP-HOST-188 115.75.32.198/32;
address SHOP-HOST-189 115.75.99.125/32;
address SHOP-HOST-190 115.75.181.163/32;
address SHOP-HOST-191 115.79.219.186/32;
address SHOP-HOST-192 115.79.192.222/32;
address SHOP-HOST-193 115.75.10.195/32;
address SHOP-HOST-194 115.75.160.159/32;
address SHOP-HOST-195 115.74.250.86/32;
address SHOP-HOST-196 115.75.168.18/32;
address SHOP-HOST-197 115.78.73.11/32;
address SHOP-HOST-198 115.75.137.233/32;
address SHOP-HOST-199 115.79.222.128/32;
address SHOP-HOST-200 14.224.159.132/32;
address SHOP-HOST-201 14.224.149.246/32;
address SHOP-HOST-202 14.224.159.150/32;
address SHOP-HOST-203 14.224.158.97/32;
address SHOP-HOST-204 14.224.156.168/32;
address SHOP-HOST-205 113.161.231.152/32;
address SHOP-HOST-206 14.224.154.90/32;
address SHOP-HOST-207 14.224.178.126/32;
address SHOP-HOST-208 115.75.163.146/32;
address SHOP-HOST-209 115.79.137.239/32;
address SHOP-HOST-210 14.224.135.132/32;
address SHOP-HOST-211 14.224.203.14/32;
address SHOP-HOST-212 115.79.220.95/32;
address SHOP-HOST-213 115.75.112.125/32;
address SHOP-HOST-214 14.224.135.134/32;
address SHOP-HOST-215 14.224.133.194/32;
address SHOP-HOST-216 14.224.129.37/32;
address SHOP-HOST-217 14.224.185.159/32;
address SHOP-HOST-218 115.79.192.245/32;
address SHOP-HOST-219 14.224.186.18/32;
address SHOP-HOST-220 14.224.142.138/32;
address SHOP-HOST-221 14.224.192.195/32;
address SHOP-HOST-222 14.224.180.133/32;
address SHOP-HOST-223 14.224.192.92/32;
address SHOP-HOST-224 116.102.97.95/32;
address SHOP-HOST-225 115.79.47.252/32;
address SHOP-HOST-226 115.74.213.198/32;
address SHOP-HOST-227 115.75.32.150/32;
address SHOP-HOST-228 115.74.227.104/32;
address SHOP-HOST-229 117.2.164.199/32;
address SHOP-HOST-230 14.224.182.230/32;
address SHOP-HOST-231 115.78.96.62/32;
address SHOP-HOST-232 115.75.83.151/32;
address SHOP-HOST-233 14.224.148.70/32;
address SHOP-HOST-234 117.2.49.184/32;
address SHOP-HOST-235 14.224.201.22/32;
address SHOP-HOST-236 14.224.178.21/32;
address SHOP-HOST-237 116.102.103.236/32;
address SHOP-HOST-238 14.224.216.3/32;
address SHOP-HOST-239 115.74.215.11/32;
address SHOP-HOST-240 14.224.210.141/32;
address SHOP-HOST-241 115.75.57.211/32;
address SHOP-HOST-242 115.74.200.103/32;
address SHOP-HOST-243 27.72.158.75/32;
address SHOP-HOST-244 14.224.182.234/32;
address SHOP-HOST-245 14.224.180.164/32;
address SHOP-HOST-246 14.224.194.192/32;
address SHOP-HOST-247 14.224.194.155/32;
address SHOP-HOST-248 14.224.146.145/32;
address SHOP-HOST-249 115.74.225.26/32;
address SHOP-HOST-250 115.73.215.38/32;
address SHOP-HOST-251 117.2.58.112/32;
address SHOP-HOST-252 116.98.138.190/32;
address SHOP-HOST-253 115.75.50.88/32;
address SHOP-HOST-254 117.4.131.125/32;
address SHOP-HOST-255 14.224.209.148/32;
address SHOP-HOST-256 14.224.208.99/32;
address SHOP-HOST-257 14.224.172.27/32;
address SHOP-HOST-258 14.224.159.206/32;
address SHOP-HOST-259 115.75.13.38/32;
address SHOP-HOST-260 14.224.205.152/32;
address SHOP-HOST-261 117.2.166.126/32;
address SHOP-HOST-262 115.78.88.18/32;
address SHOP-HOST-263 14.224.193.223/32;
address SHOP-HOST-264 117.4.120.220/32;
address SHOP-HOST-265 115.75.145.68/32;
address SHOP-HOST-266 14.224.140.239/32;
address SHOP-HOST-267 14.224.206.30/32;
address SHOP-HOST-268 14.224.206.42/32;
address SHOP-HOST-269 117.4.246.165/32;
address SHOP-HOST-270 117.2.125.235/32;
address SHOP-HOST-271 14.224.207.83/32;
address SHOP-HOST-272 117.2.132.146/32;
address SHOP-HOST-273 115.74.228.232/32;
address DATA-ODM-74-IP 172.16.200.74/32;
address Speedtest-57-IP 172.16.200.57/32;
address Port-Redis-113-IP 172.16.200.113/32;
address Mongo-QC-Food-87-IP 172.16.200.87/32;
address Host-Food-IP-01 123.30.249.45/32;
address Host-Food-IP-02 118.69.81.238/32;
address Port-Redis-86-IP 172.16.200.86/32;
address HA-PROXY-86-IP 172.16.200.86/32;
address WEB-SERIVCE-IP-113 172.16.200.113/32;
address WEB-SERIVCE-113-IP 172.16.200.113/32;
address PORT-113-IP 172.16.200.113/32;
address HarBor-Backup-63-IP 172.16.200.63/32;
address NAT-SQL-131-IP 172.16.200.131/32;
address NAT-SQL-132-IP 172.16.200.132/32;
address Port-Kafka-113-IP 172.16.200.113/32;
address Redis-86-IP 172.16.200.86/32;
address Port-114-IP 172.16.200.114/32;
address Web-Service-114-IP 172.16.200.114/32;
address SSH-Jump-114-IP 172.16.200.114/32;
address ClickHouse-136-IP 172.16.200.136/32;
address Shorewall-250-IP 172.16.201.250/32;
address Shorewall-249-IP 172.16.201.249/32;
address AdminPublic-24 14.225.249.253/32;
address AdminPublic-25 14.225.249.242/32;
address AdminPublic-26 14.225.249.243/32;
address AdminPublic-27 14.225.249.244/32;
address SHOP-HOST-274 113.176.63.34/32;
address SHOP-HOST-275 115.78.230.226/32;
address SHOP-HOST-276 14.224.189.174/32;
address SHOP-HOST-277 115.78.0.222/32;
address SHOP-HOST-278 14.241.238.138/32;
address SHOP-HOST-279 14.224.237.115/32;
address SHOP-HOST-280 14.224.189.218/32;
address SHOP-HOST-281 14.224.174.34/32;
address SHOP-HOST-282 115.78.234.45/32;
address SHOP-HOST-283 14.224.206.170/32;
address HOST-PRTG-VNPT-02 172.16.14.49/32;
address SHOP-HOST-284 117.0.35.189/32;
address SHOP-HOST-285 113.161.49.29/32;
address SHOP-HOST-286 14.224.130.238/32;
address SHOP-HOST-287 14.224.160.163/32;
address SHOP-HOST-288 14.224.182.98/32;
address SHOP-HOST-289 14.224.203.29/32;
address SHOP-HOST-290 115.73.208.106/32;
address SQL-135-IP 172.16.200.135/32;
address INSIDE-ADDRESS-19 14.225.241.74/32;
address SHOP-HOST-291 14.224.186.249/32;
address HOST-PRTG-VNPT-03 172.16.14.244/32;
address SHOP-HOST-292 14.224.130.78/32;
address QC-Connection-90 160.187.94.12/32;
address SHOP-HOST-293 14.224.149.48/32;
address test-01 42.113.167.60/32;
address test-02 42.117.163.122/32;
address SHOP-HOST-294 14.224.134.51/32;
address VPN-HOST-02 14.225.241.73/32;
address QC-Connection-91 14.225.249.219/32;
address VPN-Server-200.138 172.16.200.138/32;
address Proxmox-MNGT-VIETTEL-IP 172.16.40.0/24;
address SHOP-HOST-295 14.224.196.49/32;
address HSK-BigData-staging-01 10.10.12.90/32;
address HSK-BigData-staging-02 10.10.12.92/32;
address HSK-BigData-staging-03 10.10.12.91/32;
address Chat-QC-100.37 172.16.100.37/32;
address VIP-HAPROXY-INTERNAL-172.16.100.214 172.16.100.214/32;
address SHOP-HOST-296 14.224.194.237/32;
address SHOP-HOST-297 115.75.39.85/32;
address SHOP-HOST-298 14.224.197.120/32;
address SHOP-HOST-300 117.4.115.71/32;
address SHOP-HOST-301 14.224.198.93/32;
address SHOP-HOST-302 222.253.82.246/32;
address SHOP-HOST-303 117.2.6.126/32;
address SHOP-HOST-304 14.224.205.243/32;
address HOST-PRTG-VNPT-04 14.225.241.74/32;
address Turn-SRV_100.236 172.16.100.236/32;
address Janus-SRV-100_235 172.16.100.235/32;
address HQ-QC-100_228 172.16.100.228/32;
address Vendor-Digital-Cloud-IP-01 157.245.63.133/32;
address AdminPublic-28 14.225.249.192/32;
address HAProxy_Operation_Add 172.16.100.23/32;
address Inside-QC-01 118.69.81.238/32;
address Now-server-14.225.249.185 14.225.249.185/32;
address Viettel-Public-Server 171.244.17.192/27;
address VNPT-Public-Server 160.187.94.0/26;
address VNPT-Public-Range02 14.225.249.128/25;
address VPN-Shop-01 14.225.241.73/32;
address VPN-Shop-02 123.30.249.178/32;
address VPN-Shop-03 14.225.241.74/32;
address Fast-Server 203.162.54.32/32;
address VNPT-Public-Range03 14.225.241.64/26;
address SHOP-76-PVH {
description "76 Phan Văn Hớn, TP.HCM";
14.224.213.12/32;
}
address SHOP-129-PNL {
description "129 Phạm Ngũ Lão - Hải Dương";
27.72.116.179/32;
}
address SHOP-33-LX {
description "33 Lê Xoay - Vĩnh Phúc";
14.224.200.162/32;
}
address HSK-GW-HAProxy_Public {
description "Haproxy-FW-Public-Pro-01 ";
172.16.100.29/32;
}
address GW-Public-PAYMENT {
description "GW-Public-PAYMENT-HA ; K8s";
172.16.100.252/32;
}
address SPX-1 143.92.118.16/28;
address SPX-2 143.92.127.238/32;
address SPX-3 103.135.104.232/29;
address SPX-4 152.104.9.248/29;
address SPX-5 143.92.64.17/32;
address SPX-6 143.92.64.18/32;
address SPX-7 143.92.64.19/32;
address SPX-8 143.92.64.20/32;
address SPX-9 120.133.133.213/32;
address SPX-10 120.133.133.214/32;
address SPX-11 147.136.130.35/32;
address SPX-12 147.136.130.36/32;
address SPX-13 147.136.130.37/32;
address SPX-14 147.136.130.38/32;
address SPX-15 143.92.69.134/32;
address SPX-16 143.92.69.7/32;
address SPX-17 103.206.213.31/32;
address SPX-18 103.206.213.32/32;
address SPX-19 147.136.157.1/32;
address SPX-20 147.136.157.0/32;
address SPX-21 147.136.157.3/32;
address SHOP-1009_Tran_Hung_Dao {
description "1009 Trần Hưng Đạo - Ninh Binh";
14.224.212.27/32;
}
address SHOP-2184_Quoc_Lo_20 {
description "2184 Quốc lộ 20";
115.74.202.145/32;
}
address SPX-22 13.228.1.206/32;
address SPX-23 52.220.210.250/32;
address SPX-24 124.108.151.89/32;
address SPX-25 124.108.151.88/32;
address SPX-26 103.223.1.108/32;
address SPX-27 103.223.1.109/32;
address SPX-30 111.223.45.155/32;
address SPX-31 111.223.45.156/32;
address SPX-32 143.92.88.130/32;
address SPX-33 143.92.88.131/32;
address SPX-34 143.92.88.132/32;
address SPX-35 143.92.88.133/32;
address SPX-36 34.96.134.36/32;
address SPX-37 34.96.188.175/32;
address Clinic-GW-Internal {
description "Clinic-Gw-internal VIP: 172.16.100.253";
172.16.100.253/32;
}
address PRTG {
description "PRTG - 10.10.12.251";
10.10.12.251/32;
}
address SV-PRTG {
description "PRTG - IP: 172.16.14.248";
172.16.14.248/32;
}
address Range-IP-Vtel-171-244-17-192 {
description "Range IP Vtel 171.244.17.192/27";
171.244.17.192/27;
}
address Range_IP_Vnpt-160-187-94-0 {
description "Range_IP _Vnpt-160.187.94.0/26";
160.187.94.0/26;
}
address Range-IP-VNPT-14_225_249_192 {
description "Range IP VNPT 14.225.249.192/26";
14.225.249.192/26;
}
address GHN-35_247_167_160 {
description "GHN 35.247.167.160";
35.247.167.160/32;
}
address Viettel-GW-Server-125_212_255_174 {
description "Viettel GW Server 125.212.255.174";
125.212.255.174/32;
}
address AWS-52-76-51-80 {
description "AWS 52.76.51.80";
52.76.51.80/32;
}
address Web-hotro-123_30_249_45 {
description "Web hotro 123.30.249.45";
123.30.249.45/32;
}
address Inside-QC-118_69_81_238 {
description "Inside QC 118.69.81.238";
118.69.81.238/32;
}
address VPN-Oracle-43_239_148_186 {
description "VPN Oracle 43.239.148.186";
43.239.148.186/32;
}
address VPN-Oracle-14_225_241_106 {
description "VPN Oracle 14.225.241.106";
14.225.241.106/32;
}
address HR-Server-14_225_249_155 {
description "HR Server 14.225.249.155";
14.225.249.155/32;
}
address INS-WS-02-14_225_194_148 {
description "INS WS 02 14.225.194.148";
14.225.194.148/32;
}
address INS-service-14_225_249_183 {
description "INS service 14.225.249.183";
14.225.249.183/32;
}
address Kafka-Backup-14_225_194_160 {
description "Kafka backup 14.225.194.160";
14.225.194.160/32;
}
address Inside-Singapore-167_99_67_47 {
description "Inside Singapore 167.99.67.47";
167.99.67.47/32;
}
address HR-QC-14_225_194_150 {
description "HR QC 14.225.194.150";
14.225.194.150/32;
}
address Merchant-QC-157_245_63_133 {
description "Merchant QC 157.245.63.133";
157.245.63.133/32;
}
address Merchant-14_225_249_139 {
description "Merchant 14.225.249.139";
14.225.249.139/32;
}
address DRSite-gw-external-prod {
description "DRSite gw-external-prod - IP: 171.244.17.198";
171.244.17.198/32;
}
address SHOP-48-XT {
description "48 Xuan Thuy - IP: 222.253.79.158/32";
222.253.79.158/32;
}
address SHOP-475_QL91-CAN_THO {
description "475 QL91 - CAN THO - IP: 115.75.99.180";
115.75.99.180/32;
}
address Range-IP-GHTK {
description "Range IP GHTK - IP: 103.188.250.0/23";
103.188.250.0/23;
}
address SHOP_635_QL14_Binh_PHUOC {
description "635 QL14 Bình Phước";
14.224.216.196/32;
}
address HSK-SV-NOW_TEST {
description "Now test IP: 172.16.100.238";
172.16.100.238/32;
}
address SHOP-DONG-DEN-A_VU {
description "ANH VU IP: 115.73.209.26";
115.73.209.26/32;
}
address NHAT-TIN-LOGISTICS-IP-1 {
description "Nhất Tín Logistics IP: 210.211.110.183";
210.211.110.183/32;
}
address NHAT-TIN-LOGISTICS-IP-2 {
description "Nhất Tín Logistics IP: 210.211.110.172";
210.211.110.172/32;
}
address NHAT-TIN-LOGISTICS-IP-3 {
description "Nhất Tín Logistics IP: 125.212.215.131";
125.212.215.131/32;
}
address SHOP-349-Le_Loi-An_Giang {
description "349 Lê Lợi - An Giang : 115.78.72.40";
115.78.72.40/32;
}
address SHOP-288-Dong-Den {
description "Nha A Vu - IP: 115.78.228.234";
115.78.228.234/32;
}
address SHOP-288-Dong-Den-2 {
description "Nha Anh Vu IPL 115.78.235.145";
115.78.235.145/32;
}
address VPN-Viettel-171.244.17.200 {
description "IP-VPN-Viettel- 171.244.17.200";
171.244.17.200/32;
}
address Haproxy-FW-Devops-01 {
description "Haproxy-FW-Devops-01 VIP : 172.16.101.40";
172.16.101.40/32;
}
address Haproxy-FW-Devops-01-TEST {
description "Haproxy-FW-Devops-01: 172.16.101.40";
160.187.94.22/32;
}
address SPX-38 103.117.6.16/32;
address SPX-40 143.92.75.41/32;
address SPX-41 143.92.74.165/32;
address SPX-42 143.92.74.162/32;
address SPX-43 143.92.74.161/32;
address SPX-44 143.92.74.130/32;
address SPX-45 143.92.78.99/32;
address SPX-46 143.92.78.98/32;
address SPX-47 143.92.78.97/32;
address SPX-48 147.136.141.185/32;
address SPX-49 202.181.90.35/32;
address SPX-50 143.92.73.249/32;
address SPX-51 103.70.17.108/32;
address SPX-52 103.70.17.109/32;
address SPX-53 103.69.177.7/32;
address SPX-54 43.252.185.7/32;
address SPX-55 43.252.185.4/32;
address SPX-56 103.69.177.4/32;
address SPX-57 143.92.84.65/32;
address SPX-58 143.92.84.66/32;
address SPX-59 143.92.78.69/32;
address SPX-60 143.92.78.70/32;
address SPX-61 143.92.83.132/32;
address SPX-62 143.92.90.38/32;
address SPX-63 143.92.90.39/32;
address SPX-64 143.92.84.67/32;
address SPX-65 143.92.84.68/32;
address SPX-66 143.92.90.34/32;
address SPX-67 143.92.65.154/32;
address SPX-68 103.70.17.98/32;
address SPX-69 143.92.92.94/32;
address SPX-70 124.158.141.2/32;
address SPX-71 124.158.141.3/32;
address SPX-72 124.158.137.41/32;
address SPX-73 103.163.223.94/32;
address SPX-74 202.181.89.36/32;
address SPX-75 147.136.138.65/32;
address SPX-76 147.136.138.110/32;
address SPX-77 202.181.89.14/32;
address SPX-78 147.136.139.161/32;
address SPX-79 202.181.89.98/32;
address SPX-80 202.181.93.228/32;
address SPX-81 103.69.177.164/32;
address SPX-82 103.69.178.36/32;
address SPX-83 103.69.178.37/32;
address SPX-84 124.158.140.65/32;
address SPX-85 103.163.222.92/32;
address SPX-86 103.163.222.91/32;
address SPX-87 103.163.222.90/32;
address SPX-88 124.158.137.67/32;
address SPX-89 124.158.137.66/32;
address SPX-90 124.158.141.34/32;
address SPX-91 124.158.141.35/32;
address SPX-92 147.136.138.118/32;
address SPX-93 103.163.223.153/32;
address SPX-94 143.92.93.30/32;
address SPX-95 143.92.65.50/32;
address SPX-96 103.163.222.164/32;
address SPX-97 202.73.16.135/32;
address SPX-98 43.252.184.33/32;
address SPX-99 143.92.76.1/32;
address SPX-100 103.120.230.34/32;
address SPX-101 143.92.111.4/32;
address SPX-102 202.181.89.162/32;
address SPX-103 124.158.141.65/32;
address SPX-104 103.70.17.219/32;
address SPX-105 147.136.175.135/32;
address SPX-106 147.136.175.132/32;
address SPX-107 147.136.175.131/32;
address SPX-108 143.92.78.67/32;
address SPX-109 143.92.78.68/32;
address SPX-110 143.92.110.36/32;
address SPX-113 103.120.230.35/32;
address SPX-111 103.120.230.36/32;
address SPX-112 202.181.89.12/32;
address SPX-114 143.92.110.37/32;
address SPX-115 143.92.110.38/32;
address SPX-116 147.136.136.65/32;
address SPX-117 147.136.136.66/32;
address SPX-118 147.136.139.65/32;
address SPX-119 147.136.139.66/32;
address SPX-120 147.136.130.122/32;
address SPX-121 143.92.93.161/32;
address SPX-122 143.92.93.162/32;
address SPX-123 147.136.128.162/32;
address SPX-124 147.136.128.161/32;
address SPX-125 147.136.139.192/32;
address SPX-126 103.69.178.34/32;
address SPX-127 43.252.187.1/32;
address SPX-128 147.136.138.135/32;
address SPX-129 124.158.131.2/32;
address SPX-130 124.158.131.1/32;
address SPX-131 143.92.74.163/32;
address SPX-132 103.70.18.118/32;
address SPX-133 103.70.18.119/32;
address SPX-134 202.73.17.193/32;
address SPX-135 143.92.91.68/32;
address SPX-136 211.25.253.204/32;
address SPX-137 211.25.253.97/32;
address SPX-138 143.92.92.30/32;
address SPX-139 103.78.79.143/32;
address SPX-140 103.78.79.144/32;
address SPX-141 103.163.222.29/32;
address SPX-142 103.78.79.253/32;
address SPX-143 202.73.20.34/32;
address SPX-144 202.73.20.35/32;
address SPX-145 147.136.152.33/32;
address SPX-146 147.136.152.35/32;
address SPX-147 103.120.231.37/32;
address SPX-148 103.120.231.35/32;
address SPX-149 103.120.231.36/32;
address SPX-150 147.136.152.34/32;
address SPX-151 147.136.152.36/32;
address SPX-152 103.120.231.33/32;
address SPX-153 103.120.231.34/32;
address SPX-154 202.73.22.33/32;
address SPX-155 202.73.22.34/32;
address SPX-156 124.158.140.20/32;
address SPX-157 124.158.140.3/32;
address SPX-158 103.206.212.177/32;
address SPX-159 103.206.212.178/32;
address SPX-160 103.206.212.221/32;
address SPX-161 103.206.212.33/32;
address SPX-162 103.206.212.51/32;
address SPX-163 103.206.212.52/32;
address SPX-164 103.206.215.17/32;
address SPX-165 103.206.215.18/32;
address SPX-166 45.119.218.1/32;
address SPX-167 45.119.218.0/32;
address SPX-168 45.119.218.3/32;
address SPX-169 202.181.93.226/32;
address SPX-170 202.181.93.224/32;
address SPX-171 202.181.93.227/32;
address SPX-172 134.65.68.37/32;
address SPX-173 134.65.68.36/32;
address SPX-175 134.65.68.35/32;
address SPX-176 134.65.68.34/32;
address SPX-177 134.65.68.33/32;
address SHOP-HOST-244_DONG_DA {
description "244 DONG DA, DA NANG . 14.224.210.229";
14.224.210.229/32;
}
address SHOP-HOST-D6-5A_BAU_BANG {
description "D6-5A BAU BANG . IP: 103.17.89.234";
103.17.89.234/32;
}
address SHOP-HOST-44_NHT_DN {
description "44 NGUYEN HUY TUONG - DN . IP: 117.2.164.79";
117.2.164.79/32;
}
address NHAT-TIN-LOGISTICS-IP-4 {
description "NHAT TINH LOGISTICS : 210.211.110.145";
210.211.110.145/32;
}
address NHAT-TINH-LOGISTICS-IP-5 {
description "NHAT TINH LOGISTICS : 210.211.110.144";
210.211.110.144/32;
}
address Clinic-Gw-internal-IP-172_16_100_251 {
description " Clinic-Gw-internal - IP: 172.16.100.251";
172.16.100.251/32;
}
address SHOP-HOST-545-TNT {
description "545 TRAN NHAN TONG-DN";
117.2.125.122/32;
}
address SHOP-HOST-22-CSP {
description "22 Cao Son Phao QN";
14.224.222.76/32;
}
address SHOP-HOST-176-PDL {
description "176 PHAN DANG LUU PN";
14.224.215.67/32;
}
address SHOP-HOST-568LBB {
description "568 LUY BAN BICH - HCM";
27.74.246.58/32;
}
address SHOP-HOST-269-PVD {
description "269 PHAM VAN DONG";
14.224.211.38/32;
}
address SHOP-HOST-2705-QT {
description "2705 Quang Trung - BD";
117.2.106.219/32;
}
address SHOP-HOST-174-PDP {
description "174 Phan Dinh Phung - DL";
14.224.223.55/32;
}
address SHOP-130_Ap_Chanh_2 {
description "SHOP 130 Ap Chanh - VNPT";
14.224.224.243/32;
}
address SHOP-HOST-125-TranPhu {
description "125 Tran Phu - An Nhon";
14.224.227.44/32;
}
address SHOP-HOST-205-QL50 {
description "205 Quoc Lo 50 - Long An";
115.75.56.169/32;
}
address Haproxy-FW-Inside-Mastige {
description "Haproxy-FW-Inside-Mastige - 172.16.100.200";
172.16.100.200/32;
}
address Haproxy-FW-Inside-Pro-01 {
description Haproxy-FW-Inside-Pro-01;
172.16.100.212/32;
}
address Haproxy-FW-Inside-Pro-02 {
description Haproxy-FW-Inside-Pro-02;
172.16.100.213/32;
}
address test100-200 172.16.100.200/32;
address test94.23 160.187.94.23/32;
address FW-WMS {
description FW-WMS-172.16.100.253;
172.16.100.253/32;
}
address SHOP-HOST-192-PVD {
description "191 Pham Van Dong-QN";
117.2.65.238/32;
}
address SHOP-HOST-182-TQC {
description "182 Tran Quy Cap - NH";
14.224.222.79/32;
}
address WMS {
description WMS;
160.187.94.24/32;
}
address WMS-1 {
description WMS-1;
160.187.94.10/32;
}
address SHOP-HOST-554_LE_HONG_PHONG {
description "554 LE HONG PHONG - BINH DUONG";
14.224.227.29/32;
}
address VNPOST-3 103.196.16.0/22;
address IP-AWS-01 {
description "IP AWS 01 : 34.238.100.65";
34.238.100.65/32;
}
address IP-AWS-02 {
description "IP AWS 02 : 50.19.48.188";
50.19.48.188/32;
}
address SHOP-HOST-1130-DT747B {
description "1130 DT747B-BINH DUONG";
171.244.236.188/32;
}
address FW-Inside-Inshasaki {
description FW-Inside-Inshasaki;
160.187.94.23/32;
}
address Inside-Inshasaki {
description Inside-Inshasaki;
172.16.100.10/32;
}
address SHOP-HOST-53QL1 {
description "53 QL1 - Vinh Long";
14.224.163.140/32;
}
address RAD-HOST-118_69_81_235 118.69.81.235/32;
address RAD-HOST-118_69_81_244 118.69.81.244/32;
address RAD-HOST-14_225_241_93 14.225.241.93/32;
address RAD-HOST-14_225_241_92 14.225.241.92/32;
address RAD-HOST-14_225_241_112 14.225.241.112/32;
address RAD-HOST-14_225_241_113 14.225.241.113/32;
address RAD-HOST-14_225_241_114 14.225.241.114/32;
address RAD-HOST-14_225_241_115 14.225.241.115/32;
address RAD-HOST-125_212_246_10 125.212.246.10/32;
address RAD-HOST-125_212_246_13 125.212.246.13/32;
address RAD-HOST-125_212_246_14 125.212.246.14/32;
address RAD-HOST-125_212_246_15 125.212.246.15/32;
address SHOP-HOST-71-HHT 14.224.129.204/32;
address Public-IP-VPN-Teleport {
description IP-Public-VPN-Viettel;
171.244.17.201/32;
}
address WEB-STATIC {
description "WEB-STATIC: 14.225.249.149";
14.225.249.149/32;
}
address WEB-API-RULE {
description "WEB-API-RULE 14.225.249.136";
14.225.249.136/32;
}
address WEB-GOLANG-API {
description WEB-GOLANG-API;
14.225.241.90/32;
}
address WEB-MEDIA {
description WEB-MEDIA-14.225.249.138;
14.225.249.138/32;
}
address WEB-HA-01 {
description WEB-HA-01-14.225.241.111;
14.225.241.111/32;
}
address WEB-HA-02 {
description WEB-HA-02-14.225.241.108;
14.225.241.108/32;
}
address WEB-HA {
description WEB-HA-14.225.241.109;
14.225.241.109/32;
}
address WEB-HA-03 {
description WEB-HA-03-14.225.241.98;
14.225.241.98/32;
}
address WEB-HA-04 {
description WEB-HA-04-14.225.241.89;
14.225.241.89/32;
}
address WEB-HA-VIP-IP {
description WEB-HA-VIP-IP-14.225.241.81;
14.225.241.81/32;
}
address SHOP-HOST-188-Hung_Vuong {
description "188 Hung Vuong, Xuan Loc";
115.74.246.96/32;
}
address SHOP-HOST-432_QL91 {
description "SHOP - 432 QL91 - An Giang";
14.224.231.79/32;
}
address SHOP-HOST-14_Nguyen_Du {
description "SHOP - 14 Nguyen Du - Binh Duong";
14.224.224.174/32;
}
address HOST-VNPOST-01 115.146.122.106/32;
address HOST-VNPOST-02 123.30.11.217/32;
address HOST-VNPOST-03 103.196.16.9/32;
address SHOP-HOST-248-DL-DONG-KHOI {
description "SHOP 248 DAI LO - DONG KHOI";
14.224.229.148/32;
}
address SHOP-HOST-344-VO-VAN-NGAN {
description "SHOP 344 VO VAN NGAN";
14.224.229.110/32;
}
address SHOP-HOST-43_THAO-DIEN_BOD {
description A-HIEP-BOD;
113.176.61.71/32;
}
address SHOP-HOST-305-NGUYEN-NGHIEM {
description "305 NGUYEN NGHIEM - QUANG NGAI";
117.2.65.79/32;
}
address HSK-VLAN-110 172.16.110.0/24;
address HSK-VIETTEL-VLAN-230 172.16.230.0/24;
address SHOP-HOST-274_AU_CO {
description SHOP-274-AU-CO;
115.79.38.238/32;
}
address SHOP-HOST-649-30_4 {
description "SHOP 649 30/04-TAY-NINH";
14.224.231.84/32;
}
address RAD-HOST-management {
description IP-RAD-management;
115.79.39.248/32;
}
address SHOP-HOST-583-HUNGVUONG 115.74.246.118/32;
address SHOP-HOST-180-TONDUCTHANG 117.3.172.245/32;
address SHOP-HOST-34-PVH 222.253.79.158/32;
address SHOP-HOST-DT824-TayNinh 14.224.191.138/32;
address VM-MNGT-VNPT-02 {
description Fluentd-Log;
172.16.101.80/32;
}
address Proxmox-PVE6 172.16.30.18/32;
address VM-MNGR-VNPT-03 172.16.101.81/32;
address SHOP-HOST-114-NGT 14.224.146.13/32;
address Proxmox-PVE9 172.16.30.21/32;
address SHOP-HOST-461-TruongDinh 117.6.130.96/32;
address AWS-01 52.221.19.234/32;
address Digital-Cloud-IP-2 157.230.253.36/32;
address Digital-Cloud-IP-3 167.99.67.47/32;
address Digital-Cloud-IP-4 178.128.98.57/32;
address Digital-Cloud-IP-5 139.59.225.41/32;
address Digital-Cloud-IP-6 103.253.146.138/32;
address Sagawa-IP-203.205.21.192 203.205.21.192/32;
address sagawa-IP-203_205_21_191 203.205.21.191/32;
address SHOP-HOST-MyPhuoc1 14.224.221.146/32;
address Proxmox-Manager-Beta-Viettel 172.16.201.200/32;
address Range-Public-Viettel 171.244.17.192/27;
address TCB-103.11.172.53 103.11.172.53/32;
address TCB-34.80.155.156 34.80.155.156/32;
address Test-Config-Devop-172.16.100.57 172.16.100.57/32;
address HSK-CHAT-FPT 103.93.92.36/32;
address HSK-AWS-VNPT-01 10.210.0.0/16;
address SHOP-HOST-342-LeVanSy 115.78.10.36/32;
address SHOP-HOST-181-KhanhHoi 14.224.228.123/32;
address Redis-1 172.16.100.148/32;
address Redis-2 172.16.100.143/32;
address Redis-3 172.16.100.144/32;
address Redis-4 172.16.100.145/32;
address Redis-5 172.16.100.149/32;
address Redis-6 172.16.100.150/32;
address DB-1 172.16.101.4/32;
address DB-2 172.16.101.5/32;
address DB-3 172.16.101.6/32;
address DB-4 172.16.101.7/32;
address Srv_Teleport_VNPT 172.16.110.22/32;
address Srv_AD_VNPT 172.16.110.10/32;
address SHOP-HOST-50-DoiCan 27.72.98.229/32;
address SHOP-HOST-17-VanDon 117.2.165.96/32;
address Viettel-GW-Server-125_212_255_178 125.212.255.178/32;
address Proxmox-PVE8 172.16.30.20/32;
address Proxmox-PVE7 172.16.30.19/32;
address Voip-Svr 123.30.249.179/32;
address VM-MNGT-DH 172.16.100.249/32;
address Kafka-Connect-01-100_77 {
description Kafka-Connect-01-172.16.100.77;
172.16.100.77/32;
}
address Kafka-Connect-02-100_78 {
description Kafka-Connect-02-172.16.100.78;
172.16.100.78/32;
}
address Kafka-Connect-03-100_182 {
description Kafka-Connect-03-172.16.100.182;
172.16.100.182/32;
}
address HAProxy-GW-System-1 {
description "HAProxy-GW-System-1 172.16.100.81";
172.16.100.81/32;
}
address HAProxy-GW-System-2 {
description "HAProxy-GW-System-2 172.16.100.82";
172.16.100.82/32;
}
address HAProxy-GW-System-VIP {
description "HAProxy-GW-System-VIP 172.16.100.207";
172.16.100.207/32;
}
address K8s-vault2-100_62 {
description "K8s-vault2 172.16.100.62";
172.16.100.62/32;
}
address SHOP-HOST-15-HungVuong 14.224.218.133/32;
address WEB-API-2 172.16.101.67/32;
address Blacklist-IP-01 119.28.33.112/32;
address Soure-NAT-Viettel {
description 171.244.17.193;
171.244.17.193/32;
}
address VNPT_public_1 203.162.76.0/24;
address VNPT_public_2 222.255.122.0/24;
address VNPT_public_10 203.162.54.0/24;
address VNPT_public_3 222.255.239.0/24;
address VNPT_public_4 123.30.108.0/24;
address VNPT_public_5 123.30.249.0/24;
address VNPT_public_6 14.225.249.0/24;
address VNPT_public_7 14.225.216.0/24;
address VNPT_public_8 14.225.241.0/24;
address VNPT_public_9 14.225.194.0/24;
address FPT_public_1 118.69.81.0/24;
address FPT_public_2 43.239.148.0/24;
address FPT_public_3 113.23.77.0/24;
address FPT_public_4 103.93.92.0/24;
address FPT_public_5 42.119.236.0/24;
address VNPT_HSK_public 160.187.94.0/24;
address VTel_Public_1 125.212.246.0/24;
address VTel_Public_2 125.212.255.0/24;
address HIEP-BOD-IP-USA 147.81.124.140/32;
address SHOP-HOST-295-GiaiPhong 117.2.136.45/32;
address IP-AWS-Staging 18.139.156.35/32;
address Proxmox-PVE1 172.16.30.10/32;
address Proxmox-PVE3 172.16.30.12/32;
address SHOP-HOST-182-ThuKhoaHuan 115.74.229.59/32;
address SHOP-HOST-DB4-VinhTan 203.210.237.229/32;
address SHOP-HOST-2B_Binh_Chieu {
description "Shop 2B Binh Chieu - Thu Duc";
14.224.235.208/32;
}
address Jump_SSH_VNPT 172.16.100.61/32;
address Web_Monitor 103.93.92.165/32;
address Haproxy-FW-Public-Pro 172.16.100.33/32;
address SHOP-HOST-78-HaiBaTrung 14.224.234.54/32;
address SHOP-HOST-2A_34B-DT743B 14.224.233.187/32;
address Proxmox-PVE5 172.16.30.17/32;
address HSK-MNGT-IP-06 113.161.49.29/32;
address SHOP-HOST-57-ThongNhat 115.79.209.221/32;
address SHOP-HOST-16-HungVuong 117.2.155.49/32;
address Payyo_Sanbox_56_194 118.69.56.194/32;
address Vnpay_245_135 116.97.245.135/32;
address Sandbox-IP-1 113.160.92.202/32;
address Sandbox-IP-2 202.93.156.34/32;
address Sandbox-IP-3 203.205.17.226/32;
address Sandbox-IP-4 103.220.84.4/32;
address Proxmox-PVE2 172.16.30.11/32;
address Proxmox-PVE4 172.16.30.16/32;
address Test-Hiep 171.232.88.89/32;
address SHOP-HOST-320-TaoLuc5 14.224.232.125/32;
address SHOP-HOST-D6-NguyenThiTu 14.224.234.175/32;
address SHOP-HOST-384-PhanBoiChau 117.2.161.226/32;
address VM-US-144_94 45.55.144.94/32;
address HSK-MNGT-IP-07 14.224.237.115/32;
address hotosu-01-kho 115.75.214.8/32;
address hotosu-02-kho 118.69.36.66/32;
address SHOP-HOST-12-NguyenHuuCanh 115.75.179.160/32;
address SHOP-HOST-815-HaHoangHo 14.224.239.129/32;
address SHOP-HOST-461-NguyenBinh 14.224.236.160/32;
address HSK-CHAT-FPT-2 103.93.92.35/32;
address hotosu-03-kho 116.111.10.107/32;
address SHOP-HOST-168-ApChanh 115.74.196.218/32;
address SHOP-HOST-676-DienBien 14.224.238.186/32;
address SHOP-HOST-62-NTT 117.2.83.132/32;
address SVR-RND-100-38 172.16.100.38/32;
address HSK-Pool-94-11 160.187.94.11/32;
address HSK-Public-GW-101-222 172.16.101.222/32;
address SHOP-HOST-125-NTT 115.75.179.173/32;
address SHOP-HOST-88-TDN 27.72.125.51/32;
address VM-Graf-Pro 172.16.101.124/32;
address Github-IP-1 20.205.243.0/24;
address Github-IP-2 140.82.112.0/20;
address HSK-Public-GW-101-228 172.16.101.228/32;
address SHOP-HOST-174-NguyenDu 117.4.137.122/32;
address HSK-Public-GW-101-229 172.16.101.229/32;
address VM-DH-216_71 14.225.216.71/32;
address SHOP-HOST-45-NTT 14.224.236.248/32;
address Sip_proxy_IP 61.28.238.87/32;
address-set MANAGEMENT {
address HOST-MANAGEMENT-02;
address HOST-MANAGEMENT-03;
}
address-set HOST-MANAGEMENT-VNPT {
address HOST-MANAGEMENT-VNPT-01;
address HOST-MANAGEMENT-VNPT-02;
address HOST-MANAGEMENT-VNPT-03;
address HOST-MANAGEMENT-VNPT-04;
}
address-set INSIDE-ADDRESS-IP {
address INSIDE-ADDRESS-01;
address INSIDE-ADDRESS-02;
address INSIDE-ADDRESS-03;
address INSIDE-ADDRESS-04;
address INSIDE-ADDRESS-05;
address INSIDE-ADDRESS-06;
address INSIDE-ADDRESS-07;
address INSIDE-ADDRESS-08;
address INSIDE-ADDRESS-09;
address INSIDE-ADDRESS-10;
address INSIDE-ADDRESS-11;
address INSIDE-ADDRESS-12;
address INSIDE-ADDRESS-13;
address INSIDE-ADDRESS-14;
address INSIDE-ADDRESS-15;
address INSIDE-ADDRESS-16;
address INSIDE-ADDRESS-17;
address INSIDE-ADDRESS-18;
address INSIDE-ADDRESS-19;
}
address-set BIT-BUCKET-IP {
address BIT-BUCKET-01;
address BIT-BUCKET-02;
address BIT-BUCKET-03;
}
address-set Operation-QC-Whitelist-Servers {
address Vendor-Digital-Cloud-IP-01;
address Inside-QC-01;
}
address-set Now-server {
address Now-server-14.225.249.185;
}
address-set Viettel-Server {
address Viettel-Public-Server;
}
address-set Operation-Whitelist-Server {
address Now-server-14.225.249.185;
}
address-set VNPT-Server {
address VNPT-Public-Server;
address VNPT-Public-Range02;
address VPN-Shop-01;
address VPN-Shop-02;
address VPN-Shop-03;
address Fast-Server;
address VNPT-Public-Range03;
}
address-set HASAKI {
description "Danh Sach Whitelist IP - Hasaki";
address Range-IP-Vtel-171-244-17-192;
address Range_IP_Vnpt-160-187-94-0;
address Range-IP-VNPT-14_225_249_192;
address GHN-35_247_167_160;
address Viettel-GW-Server-125_212_255_174;
address AWS-52-76-51-80;
address Web-hotro-123_30_249_45;
address Inside-QC-118_69_81_238;
address VPN-Oracle-43_239_148_186;
address VPN-Oracle-14_225_241_106;
address HR-Server-14_225_249_155;
address INS-WS-02-14_225_194_148;
address INS-service-14_225_249_183;
address Kafka-Backup-14_225_194_160;
address Inside-Singapore-167_99_67_47;
address HR-QC-14_225_194_150;
address Merchant-QC-157_245_63_133;
address Merchant-14_225_249_139;
}
address-set SPX {
description "DANH SACH - Whitelist IP cho SPX";
address SPX-1;
address SPX-2;
address SPX-3;
address SPX-4;
address SPX-5;
address SPX-6;
address SPX-7;
address SPX-8;
address SPX-9;
address SPX-10;
address SPX-11;
address SPX-12;
address SPX-13;
address SPX-14;
address SPX-15;
address SPX-16;
address SPX-17;
address SPX-18;
address SPX-19;
address SPX-20;
address SPX-21;
address SPX-22;
address SPX-23;
address SPX-24;
address SPX-25;
address SPX-26;
address SPX-27;
address SPX-30;
address SPX-31;
address SPX-32;
address SPX-34;
address SPX-35;
address SPX-36;
address SPX-37;
address SPX-38;
address SPX-40;
address SPX-41;
address SPX-42;
address SPX-43;
address SPX-44;
address SPX-45;
address SPX-46;
address SPX-47;
address SPX-48;
address SPX-49;
address SPX-50;
address SPX-51;
address SPX-52;
address SPX-53;
address SPX-54;
address SPX-55;
address SPX-56;
address SPX-57;
address SPX-58;
address SPX-59;
address SPX-60;
address SPX-61;
address SPX-62;
address SPX-63;
address SPX-64;
address SPX-65;
address SPX-66;
address SPX-67;
address SPX-68;
address SPX-69;
address SPX-70;
address SPX-71;
address SPX-72;
address SPX-73;
address SPX-74;
address SPX-75;
address SPX-76;
address SPX-77;
address SPX-78;
address SPX-79;
address SPX-80;
address SPX-81;
address SPX-82;
address SPX-83;
address SPX-84;
address SPX-85;
address SPX-86;
address SPX-87;
address SPX-88;
address SPX-89;
address SPX-90;
address SPX-91;
address SPX-92;
address SPX-93;
address SPX-94;
address SPX-95;
address SPX-96;
address SPX-97;
address SPX-98;
address SPX-99;
address SPX-100;
address SPX-101;
address SPX-102;
address SPX-103;
address SPX-104;
address SPX-105;
address SPX-106;
address SPX-107;
address SPX-108;
address SPX-109;
address SPX-110;
address SPX-113;
address SPX-111;
address SPX-112;
address SPX-114;
address SPX-115;
address SPX-116;
address SPX-117;
address SPX-118;
address SPX-119;
address SPX-120;
address SPX-121;
address SPX-122;
address SPX-123;
address SPX-124;
address SPX-125;
address SPX-126;
address SPX-127;
address SPX-128;
address SPX-129;
address SPX-130;
address SPX-131;
address SPX-132;
address SPX-133;
address SPX-134;
address SPX-135;
address SPX-136;
address SPX-137;
address SPX-138;
address SPX-139;
address SPX-140;
address SPX-141;
address SPX-142;
address SPX-143;
address SPX-144;
address SPX-145;
address SPX-146;
address SPX-147;
address SPX-148;
address SPX-149;
address SPX-150;
address SPX-151;
address SPX-152;
address SPX-153;
address SPX-154;
address SPX-155;
address SPX-156;
address SPX-157;
address SPX-158;
address SPX-159;
address SPX-160;
address SPX-161;
address SPX-162;
address SPX-163;
address SPX-164;
address SPX-165;
address SPX-166;
address SPX-167;
address SPX-168;
address SPX-169;
address SPX-170;
address SPX-171;
address SPX-172;
address SPX-173;
address SPX-175;
address SPX-176;
address SPX-177;
address SPX-33;
}
address-set 29HoangViet-IP {
address 29HoangViet-01;
}
address-set WHITELIST-NHAT-TIN-LOGISTICS {
description "WHITELIST IP DOI TAC - NHAT TIN LOGISTICS";
address NHAT-TIN-LOGISTICS-IP-1;
address NHAT-TIN-LOGISTICS-IP-3;
address NHAT-TIN-LOGISTICS-IP-2;
address NHAT-TIN-LOGISTICS-IP-4;
address NHAT-TINH-LOGISTICS-IP-5;
}
address-set HOST-PRTG {
address HOST-PRTG-VNPT-01;
address HOST-PRTG-VNPT-02;
address HOST-PRTG-VNPT-03;
address HOST-PRTG-VNPT-04;
}
address-set WEB-HOST-HASAKI {
description "WHITELIST - HOST - WEB - HSK";
address WEB-HA-VIP-IP;
address WEB-HA-04;
address WEB-HA-03;
address WEB-HA;
address WEB-HA-02;
address WEB-HA-01;
address WEB-MEDIA;
address WEB-GOLANG-API;
address WEB-API-RULE;
address WEB-STATIC;
address Web-hotro-123_30_249_45;
}
address-set HOST-VNPOST {
description Whitelist-VNPOST-HASAKI;
address HOST-VNPOST-01;
address HOST-VNPOST-02;
address HOST-VNPOST-03;
}
address-set AdminPublic-IP {
address AdminPublic-01;
address AdminPublic-02;
address AdminPublic-03;
address AdminPublic-04;
address AdminPublic-05;
address AdminPublic-06;
address AdminPublic-08;
address AdminPublic-09;
address AdminPublic-10;
address AdminPublic-11;
address AdminPublic-12;
address AdminPublic-13;
address AdminPublic-14;
address AdminPublic-15;
address AdminPublic-16;
address AdminPublic-17;
address AdminPublic-18;
address AdminPublic-19;
address AdminPublic-20;
address AdminPublic-21;
address AdminPublic-22;
address AdminPublic-23;
address AdminPublic-24;
address AdminPublic-25;
address AdminPublic-26;
address AdminPublic-27;
address AdminPublic-28;
}
address-set VPN-HOST-IP {
address VPN-HOST-02;
}
address-set RAD-ADDRESS-IP {
description "Whitelis - RAD - Team R-D";
address RAD-HOST-01;
address RAD-HOST-02;
address RAD-HOST-03;
address RAD-HOST-118_69_81_235;
address RAD-HOST-118_69_81_244;
address RAD-HOST-14_225_241_93;
address RAD-HOST-14_225_241_92;
address RAD-HOST-14_225_241_112;
address RAD-HOST-14_225_241_113;
address RAD-HOST-14_225_241_114;
address RAD-HOST-14_225_241_115;
address RAD-HOST-125_212_246_10;
address RAD-HOST-125_212_246_13;
address RAD-HOST-125_212_246_14;
address RAD-HOST-125_212_246_15;
address RAD-HOST-management;
}
address-set QC-Connection-IP {
address QC-Connection-01;
address QC-Connection-02;
address QC-Connection-03;
address QC-Connection-04;
address QC-Connection-05;
address QC-Connection-06;
address QC-Connection-07;
address QC-Connection-08;
address QC-Connection-09;
address QC-Connection-10;
address QC-Connection-11;
address QC-Connection-12;
address QC-Connection-13;
address QC-Connection-14;
address QC-Connection-15;
address QC-Connection-16;
address QC-Connection-17;
address QC-Connection-18;
address QC-Connection-19;
address QC-Connection-20;
address QC-Connection-21;
address QC-Connection-22;
address QC-Connection-23;
address QC-Connection-24;
address QC-Connection-25;
address QC-Connection-26;
address QC-Connection-27;
address QC-Connection-28;
address QC-Connection-29;
address QC-Connection-30;
address QC-Connection-31;
address QC-Connection-32;
address QC-Connection-33;
address QC-Connection-34;
address QC-Connection-35;
address QC-Connection-36;
address QC-Connection-37;
address QC-Connection-38;
address QC-Connection-39;
address QC-Connection-40;
address QC-Connection-41;
address QC-Connection-42;
address QC-Connection-43;
address QC-Connection-44;
address QC-Connection-45;
address QC-Connection-46;
address QC-Connection-47;
address QC-Connection-48;
address QC-Connection-49;
address QC-Connection-50;
address QC-Connection-51;
address QC-Connection-53;
address QC-Connection-54;
address QC-Connection-55;
address QC-Connection-56;
address QC-Connection-57;
address QC-Connection-58;
address QC-Connection-59;
address QC-Connection-60;
address QC-Connection-61;
address QC-Connection-62;
address QC-Connection-63;
address QC-Connection-64;
address QC-Connection-65;
address QC-Connection-66;
address QC-Connection-67;
address QC-Connection-68;
address QC-Connection-69;
address QC-Connection-70;
address QC-Connection-71;
address QC-Connection-72;
address QC-Connection-73;
address QC-Connection-74;
address QC-Connection-75;
address QC-Connection-76;
address QC-Connection-77;
address QC-Connection-78;
address QC-Connection-79;
address QC-Connection-80;
address QC-Connection-82;
address QC-Connection-83;
address QC-Connection-84;
address QC-Connection-85;
address QC-Connection-86;
address QC-Connection-87;
address QC-Connection-88;
address QC-Connection-89;
address QC-Connection-90;
address QC-Connection-91;
address RAD-HOST-management;
}
address-set White-List-Range-Digital-Cloud {
description Digital-Cloud;
address Vendor-Digital-Cloud-IP-01;
address Digital-Cloud-IP-2;
address Digital-Cloud-IP-3;
address Digital-Cloud-IP-4;
address Digital-Cloud-IP-5;
address Digital-Cloud-IP-6;
}
address-set Viettel-Public-IP {
address Viettel-GW-Server-125_212_255_174;
address Viettel-GW-Server-125_212_255_178;
}
address-set Production-Kafka-Connect {
description List-Production-Kafka-Connect;
address Kafka-Connect-01-100_77;
address Kafka-Connect-02-100_78;
address Kafka-Connect-03-100_182;
}
address-set White-List-IP-Internal-To-Kafka {
description White-List-IP-Internal-To-Kafka;
address HAProxy-GW-System-1;
address HAProxy-GW-System-2;
address HAProxy-GW-System-VIP;
address K8s-vault2-100_62;
}
address-set Blacklist-IP {
address Blacklist-IP-01;
}
address-set Crawl_Server_rane {
address Range-Public-Viettel;
address VNPT_public_1;
address VNPT_public_2;
address VNPT_public_10;
address VNPT_public_3;
address VNPT_public_4;
address VNPT_public_5;
address VNPT_public_6;
address VNPT_public_7;
address VNPT_public_8;
address VNPT_public_9;
address FPT_public_1;
address FPT_public_2;
address FPT_public_3;
address FPT_public_4;
address FPT_public_5;
address VNPT_HSK_public;
address VTel_Public_1;
address VTel_Public_2;
}
address-set HOSTLIST-AWS {
description "Whitelist AWS to HASAKI";
address IP-AWS-02;
address IP-AWS-01;
address IP-AWS-Staging;
}
address-set Cloudflare-IP-LIST {
address Cloudflare-IP-02;
address Cloudflare-IP-03;
address Cloudflare-IP-04;
address Cloudflare-IP-05;
address Cloudflare-IP-06;
address Cloudflare-IP-07;
address Cloudflare-IP-08;
address Cloudflare-IP-09;
address Cloudflare-IP-10;
address Cloudflare-IP-11;
address Cloudflare-IP-12;
address Cloudflare-IP-13;
address Cloudflare-IP-14;
address Cloudflare-IP-15;
address Cloudflare-IP-16;
}
address-set Follow-Host {
address WEB-API-2;
}
address-set Sandbox-IP-LIST {
address Sandbox-IP-1;
address Sandbox-IP-2;
address Sandbox-IP-3;
address Sandbox-IP-4;
address Payyo_Sanbox_56_194;
}
address-set Proxmox-VNPT {
description "IP MNGT-Proxmox_VNPT VLAN30";
address Proxmox-PVE6;
address Proxmox-PVE9;
address Proxmox-PVE8;
address Proxmox-PVE7;
address Proxmox-PVE1;
address Proxmox-PVE3;
address Proxmox-PVE5;
address Proxmox-PVE2;
address Proxmox-PVE4;
}
address-set HSK-MNGT-IP {
address HSK-MNGT-IP-01;
address HSK-MNGT-IP-03;
address HSK-MNGT-IP-04;
address HSK-MNGT-IP-05;
address HSK-MNGT-IP-06;
address HSK-MNGT-IP-07;
}
address-set 568LBB-HO {
address HSK-MNGT-IP-03;
address SHOP-HOST-03;
address HSK-MNGT-IP-05;
address HSK-MNGT-IP-06;
address HSK-MNGT-IP-07;
}
address-set HSK-CHAT-IP {
address HSK-CHAT-FPT;
address HSK-CHAT-FPT-2;
}
address-set hotosu-IP {
address hotosu-01-kho;
address hotosu-02-kho;
address hotosu-03-kho;
}
address-set SVR-RND-LIST {
address SVR-RND-100-38;
}
address-set Github-IP-LIST {
address Github-IP-1;
address Github-IP-2;
}
address-set SHOP-HOST-LIST {
address SHOP-HOST-01;
address SHOP-HOST-02;
address SHOP-HOST-03;
address SHOP-HOST-04;
address SHOP-HOST-05;
address SHOP-HOST-06;
address SHOP-HOST-07;
address SHOP-HOST-08;
address SHOP-HOST-09;
address SHOP-HOST-10;
address SHOP-HOST-11;
address SHOP-HOST-12;
address SHOP-HOST-13;
address SHOP-HOST-14;
address SHOP-HOST-15;
address SHOP-HOST-16;
address SHOP-HOST-17;
address SHOP-HOST-18;
address SHOP-HOST-19;
address SHOP-HOST-20;
address SHOP-HOST-21;
address SHOP-HOST-22;
address SHOP-HOST-23;
address SHOP-HOST-24;
address SHOP-HOST-25;
address SHOP-HOST-26;
address SHOP-HOST-27;
address SHOP-HOST-28;
address SHOP-HOST-29;
address SHOP-HOST-30;
address SHOP-HOST-31;
address SHOP-HOST-32;
address SHOP-HOST-33;
address SHOP-HOST-34;
address SHOP-HOST-35;
address SHOP-HOST-36;
address SHOP-HOST-37;
address SHOP-HOST-38;
address SHOP-HOST-39;
address SHOP-HOST-40;
address SHOP-HOST-41;
address SHOP-HOST-42;
address SHOP-HOST-43;
address SHOP-HOST-44;
address SHOP-HOST-45;
address SHOP-HOST-46;
address SHOP-HOST-47;
address SHOP-HOST-48;
address SHOP-HOST-49;
address SHOP-HOST-50;
address SHOP-HOST-51;
address SHOP-HOST-52;
address SHOP-HOST-53;
address SHOP-HOST-54;
address SHOP-HOST-55;
address SHOP-HOST-56;
address SHOP-HOST-57;
address SHOP-HOST-58;
address SHOP-HOST-59;
address SHOP-HOST-60;
address SHOP-HOST-61;
address SHOP-HOST-62;
address SHOP-HOST-63;
address SHOP-HOST-64;
address SHOP-HOST-65;
address SHOP-HOST-66;
address SHOP-HOST-67;
address SHOP-HOST-68;
address SHOP-HOST-69;
address SHOP-HOST-70;
address SHOP-HOST-71;
address SHOP-HOST-72;
address SHOP-HOST-73;
address SHOP-HOST-74;
address SHOP-HOST-75;
address SHOP-HOST-76;
address SHOP-HOST-77;
address SHOP-HOST-78;
address SHOP-HOST-79;
address SHOP-HOST-80;
address SHOP-HOST-81;
address SHOP-HOST-82;
address SHOP-HOST-83;
address SHOP-HOST-84;
address SHOP-HOST-85;
address SHOP-HOST-86;
address SHOP-HOST-87;
address SHOP-HOST-88;
address SHOP-HOST-89;
address SHOP-HOST-90;
address SHOP-HOST-91;
address SHOP-HOST-92;
address SHOP-HOST-93;
address SHOP-HOST-94;
address SHOP-HOST-95;
address SHOP-HOST-96;
address SHOP-HOST-97;
address SHOP-HOST-98;
address SHOP-HOST-99;
address SHOP-HOST-100;
address SHOP-HOST-101;
address SHOP-HOST-102;
address SHOP-HOST-103;
address SHOP-HOST-104;
address SHOP-HOST-105;
address SHOP-HOST-106;
address SHOP-HOST-107;
address SHOP-HOST-108;
address SHOP-HOST-109;
address SHOP-HOST-110;
address SHOP-HOST-111;
address SHOP-HOST-112;
address SHOP-HOST-113;
address SHOP-HOST-114;
address SHOP-HOST-115;
address SHOP-HOST-116;
address SHOP-HOST-117;
address SHOP-HOST-118;
address SHOP-HOST-119;
address SHOP-HOST-120;
address SHOP-HOST-121;
address SHOP-HOST-122;
address SHOP-HOST-123;
address SHOP-HOST-124;
address SHOP-HOST-125;
address SHOP-HOST-126;
address SHOP-HOST-127;
address SHOP-HOST-128;
address SHOP-HOST-129;
address SHOP-HOST-130;
address SHOP-HOST-131;
address SHOP-HOST-132;
address SHOP-HOST-133;
address SHOP-HOST-134;
address SHOP-HOST-135;
address SHOP-HOST-136;
address SHOP-HOST-137;
address SHOP-HOST-138;
address SHOP-HOST-139;
address SHOP-HOST-140;
address SHOP-HOST-141;
address SHOP-HOST-142;
address SHOP-HOST-143;
address SHOP-HOST-144;
address SHOP-HOST-145;
address SHOP-HOST-146;
address SHOP-HOST-147;
address SHOP-HOST-148;
address SHOP-HOST-149;
address SHOP-HOST-150;
address SHOP-HOST-151;
address SHOP-HOST-152;
address SHOP-HOST-153;
address SHOP-HOST-154;
address SHOP-HOST-155;
address SHOP-HOST-156;
address SHOP-HOST-157;
address SHOP-HOST-158;
address SHOP-HOST-159;
address SHOP-HOST-160;
address SHOP-HOST-161;
address SHOP-HOST-162;
address SHOP-HOST-163;
address SHOP-HOST-164;
address SHOP-HOST-165;
address SHOP-HOST-166;
address SHOP-HOST-167;
address SHOP-HOST-168;
address SHOP-HOST-169;
address SHOP-HOST-170;
address SHOP-HOST-171;
address SHOP-HOST-172;
address SHOP-HOST-173;
address SHOP-HOST-174;
address SHOP-HOST-175;
address SHOP-HOST-176;
address SHOP-HOST-177;
address SHOP-HOST-178;
address SHOP-HOST-179;
address SHOP-HOST-180;
address SHOP-HOST-181;
address SHOP-HOST-182;
address SHOP-HOST-183;
address SHOP-HOST-184;
address SHOP-HOST-185;
address SHOP-HOST-186;
address SHOP-HOST-187;
address SHOP-HOST-188;
address SHOP-HOST-189;
address SHOP-HOST-190;
address SHOP-HOST-191;
address SHOP-HOST-192;
address SHOP-HOST-193;
address SHOP-HOST-194;
address SHOP-HOST-195;
address SHOP-HOST-196;
address SHOP-HOST-197;
address SHOP-HOST-198;
address SHOP-HOST-199;
address SHOP-HOST-200;
address SHOP-HOST-201;
address SHOP-HOST-202;
address SHOP-HOST-203;
address SHOP-HOST-204;
address SHOP-HOST-205;
address SHOP-HOST-206;
address SHOP-HOST-207;
address SHOP-HOST-208;
address SHOP-HOST-209;
address SHOP-HOST-210;
address SHOP-HOST-211;
address SHOP-HOST-212;
address SHOP-HOST-213;
address SHOP-HOST-214;
address SHOP-HOST-215;
address SHOP-HOST-216;
address SHOP-HOST-217;
address SHOP-HOST-218;
address SHOP-HOST-219;
address SHOP-HOST-220;
address SHOP-HOST-221;
address SHOP-HOST-222;
address SHOP-HOST-223;
address SHOP-HOST-224;
address SHOP-HOST-225;
address SHOP-HOST-226;
address SHOP-HOST-227;
address SHOP-HOST-228;
address SHOP-HOST-229;
address SHOP-HOST-230;
address SHOP-HOST-231;
address SHOP-HOST-232;
address SHOP-HOST-233;
address SHOP-HOST-234;
address SHOP-HOST-235;
address SHOP-HOST-236;
address SHOP-HOST-237;
address SHOP-HOST-238;
address SHOP-HOST-239;
address SHOP-HOST-240;
address SHOP-HOST-241;
address SHOP-HOST-242;
address SHOP-HOST-243;
address SHOP-HOST-244;
address SHOP-HOST-245;
address SHOP-HOST-246;
address SHOP-HOST-247;
address SHOP-HOST-248;
address SHOP-HOST-249;
address SHOP-HOST-250;
address SHOP-HOST-251;
address SHOP-HOST-252;
address SHOP-HOST-253;
address SHOP-HOST-254;
address SHOP-HOST-255;
address SHOP-HOST-256;
address SHOP-HOST-257;
address SHOP-HOST-258;
address SHOP-HOST-259;
address SHOP-HOST-260;
address SHOP-HOST-261;
address SHOP-HOST-262;
address SHOP-HOST-263;
address SHOP-HOST-264;
address SHOP-HOST-265;
address SHOP-HOST-266;
address SHOP-HOST-267;
address SHOP-HOST-268;
address SHOP-HOST-269;
address SHOP-HOST-270;
address SHOP-HOST-271;
address SHOP-HOST-272;
address SHOP-HOST-273;
address SHOP-HOST-274;
address SHOP-HOST-275;
address SHOP-HOST-276;
address SHOP-HOST-277;
address SHOP-HOST-278;
address SHOP-HOST-279;
address SHOP-HOST-280;
address SHOP-HOST-281;
address SHOP-HOST-282;
address SHOP-HOST-283;
address SHOP-HOST-284;
address SHOP-HOST-285;
address SHOP-HOST-286;
address SHOP-HOST-287;
address SHOP-HOST-288;
address SHOP-HOST-289;
address SHOP-HOST-290;
address SHOP-HOST-291;
address SHOP-HOST-292;
address SHOP-HOST-293;
address SHOP-HOST-294;
address SHOP-HOST-295;
address SHOP-HOST-296;
address SHOP-HOST-297;
address SHOP-HOST-298;
address SHOP-HOST-300;
address SHOP-HOST-301;
address SHOP-HOST-302;
address SHOP-HOST-303;
address SHOP-HOST-304;
address SHOP-76-PVH;
address SHOP-129-PNL;
address SHOP-33-LX;
address SHOP-1009_Tran_Hung_Dao;
address SHOP-2184_Quoc_Lo_20;
address SHOP-48-XT;
address SHOP-475_QL91-CAN_THO;
address SHOP_635_QL14_Binh_PHUOC;
address SHOP-DONG-DEN-A_VU;
address SHOP-349-Le_Loi-An_Giang;
address SHOP-288-Dong-Den;
address SHOP-288-Dong-Den-2;
address SHOP-HOST-244_DONG_DA;
address SHOP-HOST-D6-5A_BAU_BANG;
address SHOP-HOST-44_NHT_DN;
address SHOP-HOST-545-TNT;
address SHOP-HOST-22-CSP;
address SHOP-HOST-176-PDL;
address SHOP-HOST-568LBB;
address SHOP-HOST-269-PVD;
address SHOP-HOST-2705-QT;
address SHOP-HOST-174-PDP;
address SHOP-HOST-205-QL50;
address SHOP-HOST-125-TranPhu;
address SHOP-130_Ap_Chanh_2;
address SHOP-HOST-192-PVD;
address SHOP-HOST-182-TQC;
address SHOP-HOST-554_LE_HONG_PHONG;
address SHOP-HOST-1130-DT747B;
address SHOP-HOST-53QL1;
address SHOP-HOST-71-HHT;
address SHOP-HOST-188-Hung_Vuong;
address SHOP-HOST-432_QL91;
address SHOP-HOST-14_Nguyen_Du;
address SHOP-HOST-248-DL-DONG-KHOI;
address SHOP-HOST-344-VO-VAN-NGAN;
address SHOP-HOST-43_THAO-DIEN_BOD;
address SHOP-HOST-305-NGUYEN-NGHIEM;
address SHOP-HOST-274_AU_CO;
address SHOP-HOST-649-30_4;
address RAD-HOST-management;
address SHOP-HOST-583-HUNGVUONG;
address SHOP-HOST-180-TONDUCTHANG;
address SHOP-HOST-34-PVH;
address SHOP-HOST-DT824-TayNinh;
address SHOP-HOST-114-NGT;
address SHOP-HOST-461-TruongDinh;
address SHOP-HOST-MyPhuoc1;
address SHOP-HOST-342-LeVanSy;
address SHOP-HOST-181-KhanhHoi;
address SHOP-HOST-50-DoiCan;
address SHOP-HOST-17-VanDon;
address SHOP-HOST-15-HungVuong;
address SHOP-HOST-2B_Binh_Chieu;
address SHOP-HOST-DB4-VinhTan;
address SHOP-HOST-182-ThuKhoaHuan;
address SHOP-HOST-295-GiaiPhong;
address SHOP-HOST-78-HaiBaTrung;
address SHOP-HOST-2A_34B-DT743B;
address SHOP-HOST-57-ThongNhat;
address SHOP-HOST-16-HungVuong;
address SHOP-HOST-320-TaoLuc5;
address SHOP-HOST-D6-NguyenThiTu;
address SHOP-HOST-384-PhanBoiChau;
address SHOP-HOST-12-NguyenHuuCanh;
address SHOP-HOST-815-HaHoangHo;
address SHOP-HOST-461-NguyenBinh;
address SHOP-HOST-168-ApChanh;
address SHOP-HOST-676-DienBien;
address SHOP-HOST-62-NTT;
address SHOP-HOST-125-NTT;
address SHOP-HOST-88-TDN;
address SHOP-HOST-174-NguyenDu;
address SHOP-HOST-45-NTT;
}
}
}
application-tracking {
first-update; ## Warning: 'first-update' is deprecated
}
flow {
allow-dns-reply;
tcp-mss {
ipsec-vpn {
mss 1379;
}
gre-in {
mss 1360;
}
gre-out {
mss 1360;
}
}
tcp-session {
no-syn-check;
no-syn-check-in-tunnel;
}
}
screen {
ids-option untrust-screen {
ip {
source-route-option;
tear-drop;
}
tcp {
syn-flood {
alarm-threshold 1024;
attack-threshold 200;
source-threshold 1024;
destination-threshold 2048;
timeout 20;
}
land;
}
}
}
nat {
source {
pool HSK-VNPT-VM-POOL-01 {
address {
160.187.94.10/32;
}
}
pool HSK-Pool-94-11 {
address {
160.187.94.11/32;
}
}
rule-set trust-to-untrust {
from zone trust;
to zone untrust;
rule source-nat-rule {
match {
source-address 0.0.0.0/0;
}
then {
source-nat {
interface;
}
}
}
}
rule-set Proxmox-MNGT-TO-untrust {
from zone Proxmox-MNGT;
to zone untrust;
rule Proxmox-MNGT-TO-untrust-01 {
match {
source-address 172.16.30.0/24;
destination-address 0.0.0.0/0;
}
then {
source-nat {
interface;
}
}
}
}
rule-set LAN-ZONE-TO-untrust {
from zone LAN-ZONE;
to zone untrust;
rule Svr-RND-to-internet {
match {
source-address-name SVR-RND-100-38;
destination-address 0.0.0.0/0;
}
then {
source-nat {
pool {
HSK-Pool-94-11;
}
}
}
}
rule LAN-ZONE-TO-untrust-term-01 {
match {
source-address [ 172.16.100.0/23 10.10.15.0/24 10.10.12.0/24 ];
destination-address 0.0.0.0/0;
}
then {
source-nat {
pool {
HSK-VNPT-VM-POOL-01;
}
}
}
}
}
rule-set switched-network {
from zone LAN-ZONE;
to zone LAN-ZONE;
rule nat-return-flow {
match {
source-address 172.16.100.0/23;
destination-address 0.0.0.0/0;
}
then {
source-nat {
interface;
}
}
}
}
rule-set untrust-TO-untrust {
from zone untrust;
to zone untrust;
rule untrust-TO-untrust-term-01 {
match {
source-address 10.10.36.0/24;
destination-address 0.0.0.0/0;
application any;
}
then {
source-nat {
interface;
}
}
}
}
rule-set Zone_HSK-VLA-Zone_untrust {
from zone HSK-VLAN-110;
to zone untrust;
rule VLAN110-to-untrust {
match {
source-address [ 172.16.110.10/32 172.16.110.22/32 172.16.110.23/32 ];
destination-address 0.0.0.0/0;
}
then {
source-nat {
pool {
HSK-VNPT-VM-POOL-01;
}
}
}
}
}
}
destination {
pool VIP-HAPROXY-INTERNAL-100-214 {
address 172.16.100.214/32;
}
pool Turn-SRV-100_236 {
address 172.16.100.236/32;
}
pool Janus-SRV-100_235 {
address 172.16.100.235/32;
}
pool HAProxy_Operation_Prod {
address 172.16.100.23/32 port 80;
}
pool HAProxy_Operation_Prod_443 {
address 172.16.100.23/32 port 443;
}
pool HSK-GW-HAProxy_Public {
description "HAProxy_Public Nat Domain From IP: 172.16.100.29";
address 172.16.100.29/32 port 80;
}
pool HSK-GW-HAProxy_Public-Port-443 {
description "HSK-GW-HAProxy. Domain from IP: 172.16.100.29";
address 172.16.100.29/32 port 443;
}
pool HSK-GW-Public-PAYMENT-1 {
description "GW-Public-PAYMENT-1 Port: 80 IP: 172.16.100.252";
address 172.16.100.252/32 port 80;
}
pool HSK-GW-Public-PAYMENT-1_443 {
description "GW-Public-PAYMENT-1 Port: 443 - IP: 172.16.100.252";
address 172.16.100.252/32 port 443;
}
pool HSK-Clinic-GW-INTERNAL {
description "Clinic-GW-INTERNAL - VIP: 172.16.100.253 : 80";
address 172.16.100.253/32 port 80;
}
pool HSK-Clinic-GW-INTERNAL_443 {
description "Clinic-GW-INTERNAL - VIP: 172.16.100.253:443";
address 172.16.100.253/32 port 443;
}
pool Haproxy-FW-Devops-01 {
description "Haproxy-FW-Devops-01 : VIP 172.16.101,40";
address 172.16.101.40/32 port 80;
}
pool Haproxy-FW-Devops-01-P443 {
description "Haproxy-FW-Devops-01 : IP: 172.16.101.40";
address 172.16.101.40/32 port 443;
}
pool Haproxy-FW-Inside-Mastige_P443 {
description "Haproxy-FW-Inside-Mastige - 172.16.100.200";
address 172.16.100.200/32 port 443;
}
pool Haproxy-FW-Inside-Mastige_P80 {
description "Haproxy-FW-Inside-Mastige - 172.16.100.200";
address 172.16.100.200/32 port 80;
}
pool Inside-Inshasaki_P443 {
description "Inside-Inshasaki_P443 - 172.16.100.10";
address 172.16.100.10/32 port 443;
}
pool Inside-Inshasaki_P80 {
description "Inside-Inshasaki_P80 - 172.16.100.10";
address 172.16.100.10/32 port 80;
}
pool HA-Proxy-Affiliate-Prod {
description Affiliate-Prod-HA-VIP-IP:172.16.100.252:8080;
address 172.16.100.252/32 port 8080;
}
pool HA-Proxy-Affiliate-Prod-P8443 {
description "Affiliate-Prod-HA-VIP-IP: 172.16.100.252:8443";
address 172.16.100.252/32 port 8443;
}
pool Haproxy-FW-Public-Pro-80 {
address 172.16.100.33/32 port 80;
}
pool Haproxy-FW-Public-Pro-Port-443 {
address 172.16.100.33/32 port 443;
}
pool HSK-Public-GW-101-222-P80 {
address 172.16.101.222/32 port 80;
}
pool HSK-Public-GW-101-222-P443 {
address 172.16.101.222/32 port 443;
}
pool HSK-Public-GW-101-228-P80 {
address 172.16.101.228/32 port 80;
}
pool HSK-Public-GW-101-228-P443 {
address 172.16.101.228/32 port 443;
}
pool HSK-Public-GW-101-229-P443 {
address 172.16.101.229/32 port 443;
}
pool HSK-Public-GW-101-229-P3024 {
address 172.16.101.229/32 port 3024;
}
rule-set untrust-TO-LAN-ZONE {
from zone untrust;
rule untrust-TO-LAN-ZONE-term-01 {
match {
destination-address 160.187.94.19/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HAProxy_Operation_Prod;
}
}
}
}
rule untrust-TO-LAN-ZONE-term-02 {
match {
destination-address 160.187.94.19/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HAProxy_Operation_Prod_443;
}
}
}
}
rule untrust-TO-LAN-ZONE-01 {
description dnat_tcp_160.187.94.3-80_to_172.16.100.214_80;
match {
destination-address 160.187.94.3/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
VIP-HAPROXY-INTERNAL-100-214;
}
}
}
}
rule untrust-TO-LAN-ZONE-02 {
description dnat_tcp_160.187.94.3-443_to_172.16.100.214-443;
match {
destination-address 160.187.94.3/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
VIP-HAPROXY-INTERNAL-100-214;
}
}
}
}
rule DSN-Haproxy-FW-Operation-PULIC {
description "dnat_tcp: 160.187.94.20 P.80 To 172.16.100.29 P.80";
match {
destination-address 160.187.94.20/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-GW-HAProxy_Public;
}
}
}
}
rule DSN-Haproxy-FW-Operation-PULIC-P443 {
description "dnat_tcp: 160.187.94.20 P.443 To 172.16.100.29 P.443";
match {
destination-address 160.187.94.20/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-GW-HAProxy_Public-Port-443;
}
}
}
}
rule DSN-GW-Public-PAYMENT {
description "Dnat_tcp - IP: 160.187.94.21:80 TO IP: 172.16.100.252:80";
match {
destination-address 160.187.94.21/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-GW-Public-PAYMENT-1;
}
}
}
}
rule DSN-GW-Public-PAYMENT-P443 {
description "Dnat_tcp - IP: 160.187.94.21:443 TO IP: 172.16.100.252:443";
match {
destination-address 160.187.94.21/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-GW-Public-PAYMENT-1_443;
}
}
}
}
rule DSN-GW-Clinic-Internal {
description "Dnat_tcp - IP: 160.187.94.15:80 TO IP: 172.16.100.251:80";
match {
destination-address 160.187.94.15/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-Clinic-GW-INTERNAL;
}
}
}
}
rule DSN-GW-Clinic-Internal-P443 {
description "Dnat_tcp - IP: 160.187.94.15:443 TO IP: 172.16.100.251:443";
match {
destination-address 160.187.94.15/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-Clinic-GW-INTERNAL_443;
}
}
}
}
rule DSN-Haproxy-FW-Devops-01 {
description "Haproxy-FW-Devops-01 VIP: 172.16.100.12";
match {
destination-address 160.187.94.22/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
Haproxy-FW-Devops-01;
}
}
}
}
rule DSN-Haproxy-FW-Devops-01-P443 {
description "Haproxy-FW-Devops-01 VIP: 172.16.100.12:443";
match {
destination-address 160.187.94.22/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
Haproxy-FW-Devops-01-P443;
}
}
}
}
rule FW-WMS-P80 {
description "Dnat_tcp - IP: 160.187.94.24:80 TO IP: 172.16.100.253:80";
match {
destination-address 160.187.94.24/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-Clinic-GW-INTERNAL;
}
}
}
}
rule FW-WMS-P443 {
description "Dnat_tcp - IP: 160.187.94.24:443 TO IP: 172.16.100.253:443";
match {
destination-address 160.187.94.24/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-Clinic-GW-INTERNAL_443;
}
}
}
}
rule Inside-Inshasaki_P443 {
description "dnat_tcp_160.187.94.23 - 172.16.100.10 P443";
match {
destination-address 160.187.94.23/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
Inside-Inshasaki_P443;
}
}
}
}
rule Inside-Inshasaki_P80 {
description "dnat_tcp_160.187.94.23 - 172.16.100.10 P80";
match {
destination-address 160.187.94.23/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
Inside-Inshasaki_P80;
}
}
}
}
rule DSN-HA-Proxy-Affiliate-Prod {
description HA-Proxy-Affiliate-Prod-172.16.100.252:8080;
match {
destination-address 160.187.94.26/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HA-Proxy-Affiliate-Prod;
}
}
}
}
rule DSN-HA-Proxy-Affiliate-Prod-P8443 {
description HA-Proxy-Affiliate-Prod-172.16.100.252:8443;
match {
destination-address 160.187.94.26/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HA-Proxy-Affiliate-Prod-P8443;
}
}
}
}
rule HAProxy-FW-Public-80 {
match {
destination-address 160.187.94.25/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
Haproxy-FW-Public-Pro-80;
}
}
}
}
rule HaProxy-FW-Public-443 {
match {
destination-address 160.187.94.25/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
Haproxy-FW-Public-Pro-Port-443;
}
}
}
}
rule HSK-Public-GW-101-222-P80 {
match {
destination-address 160.187.94.27/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-Public-GW-101-222-P80;
}
}
}
}
rule HSK-Public-GW-101-222-P443 {
match {
destination-address 160.187.94.27/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-Public-GW-101-222-P443;
}
}
}
}
rule HSK-Public-GW-101-228-P80 {
match {
destination-address 160.187.94.11/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-Public-GW-101-228-P80;
}
}
}
}
rule HSK-Public-GW-101-228-P443 {
match {
destination-address 160.187.94.11/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-Public-GW-101-228-P443;
}
}
}
}
rule HSK-Public-GW-101-229-P443 {
match {
destination-address 160.187.94.28/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-Public-GW-101-229-P443;
}
}
}
}
rule HSK-Public-GW-101-229-P3024 {
match {
destination-address 160.187.94.28/32;
destination-port {
3024;
}
}
then {
destination-nat {
pool {
HSK-Public-GW-101-229-P3024;
}
}
}
}
}
rule-set LAN-ZONE-TO-LAN-ZONE {
from zone LAN-ZONE;
rule HSK-SV-172_16_100_228 {
match {
destination-address 160.187.94.19/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HAProxy_Operation_Prod_443;
}
}
}
}
rule HSK-SV-172_16_100_0_23 {
match {
destination-address 160.187.94.19/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HAProxy_Operation_Prod;
}
}
}
}
rule HSK-SV-172_16_100_29 {
match {
destination-address 160.187.94.20/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-GW-HAProxy_Public;
}
}
}
}
rule HSK-SV-172_16_100_29-P443 {
match {
destination-address 160.187.94.20/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-GW-HAProxy_Public-Port-443;
}
}
}
}
rule HSK-SV-172_16_100_252 {
description "Hairpin NAT - GW-Public-PAYMENT - IP: 172.16.100.252";
match {
destination-address 160.187.94.21/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-GW-Public-PAYMENT-1;
}
}
}
}
rule HSK-SV-172_16_100_252-P443 {
description "Hairpin NAT - GW-Public-PAYMENT - IP: 172.16.100.252:443";
match {
destination-address 160.187.94.21/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-GW-Public-PAYMENT-1_443;
}
}
}
}
rule HSK-SV-172_16_100_251 {
description "Hairpin NAT - Clinic-Gw-internal - IP: 172.16.100.251:443";
match {
destination-address 160.187.94.15/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-Clinic-GW-INTERNAL_443;
}
}
}
}
rule HSK-SV-172_16_100_251_P80 {
description "Hairpin NAT - Clinic-Gw-internal - IP: 172.16.100.251:80";
match {
destination-address 160.187.94.15/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-Clinic-GW-INTERNAL;
}
}
}
}
rule HSK-SV-172_16_100_251_P80_WMS {
description "Hairpin NAT - 172.16.100.251:80 - WMS";
match {
destination-address 160.187.94.24/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-Clinic-GW-INTERNAL;
}
}
}
}
rule HSK-SV-172_16_100_251_P443_WMS {
description "Hairpin NAT - 172.16.100.251:443 - WMS";
match {
destination-address 160.187.94.24/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-Clinic-GW-INTERNAL_443;
}
}
}
}
rule HSK-SV-172_16_100_10 {
description "Hairpin NAT 172.16.100.10 - 160.187.94.23";
match {
destination-address 160.187.94.23/32;
destination-port {
80;
443;
}
}
then {
destination-nat {
pool {
Inside-Inshasaki_P443;
}
}
}
}
rule HSK-SV-172_16_100_252-Port-8080 {
description "Hairpin NAT - HA-Proxy-Affiliate: 172.16.100.252:8080";
match {
destination-address 160.187.94.26/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HA-Proxy-Affiliate-Prod;
}
}
}
}
rule HSK-SV-172_16_100_252-Port-8443 {
description "Hairpin NAT - HA-Proxy-Affiliate: 172.16.100.252:8443";
match {
destination-address 160.187.94.26/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HA-Proxy-Affiliate-Prod-P8443;
}
}
}
}
rule HSK-SV-172_16_100_214 {
description Hairpin-NAT-VIP-HAPROXY-INTERNAL-100-214;
match {
destination-address 160.187.94.3/32;
destination-port {
80;
443;
}
}
then {
destination-nat {
pool {
VIP-HAPROXY-INTERNAL-100-214;
}
}
}
}
rule HSK-SV-172_16_100_33-P80 {
match {
destination-address 160.187.94.25/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
Haproxy-FW-Public-Pro-80;
}
}
}
}
rule HSK-SV-172_16_100_33-P443 {
match {
destination-address 160.187.94.25/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
Haproxy-FW-Public-Pro-Port-443;
}
}
}
}
rule HSK-Public-GW-101-222-P80-HP {
match {
destination-address 160.187.94.27/32;
destination-port {
80;
}
}
then {
destination-nat {
pool {
HSK-Public-GW-101-222-P80;
}
}
}
}
rule HSK-Public-GW-101-222-P443-HP {
match {
destination-address 160.187.94.27/32;
destination-port {
443;
}
}
then {
destination-nat {
pool {
HSK-Public-GW-101-222-P443;
}
}
}
}
}
}
static {
rule-set LAN-TO-INTERNET {
from zone untrust;
rule Turn-SRV-to-untrust {
match {
destination-address 160.187.94.4/32;
}
then {
static-nat {
prefix {
172.16.100.236/32;
}
}
}
}
rule Janus-SRV-to-untrust {
match {
destination-address 160.187.94.5/32;
}
then {
static-nat {
prefix {
172.16.100.235/32;
}
}
}
}
}
rule-set LAN-TO-LAN {
from zone LAN-ZONE;
rule LAN-ZONE-term-01 {
match {
destination-address 160.187.94.4/32;
}
then {
static-nat {
prefix {
172.16.100.236/32;
}
}
}
}
rule LAN-ZONE-term-02 {
match {
destination-address 160.187.94.5/32;
}
then {
static-nat {
prefix {
172.16.100.235/32;
}
}
}
}
}
}
}
policies {
from-zone trust to-zone trust {
policy default-permit {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone trust to-zone untrust {
policy default-permit {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone LAN-ZONE to-zone untrust {
policy Deny-LAN-to-Blacklist {
match {
source-address any;
destination-address Blacklist-IP;
application any;
dynamic-application none;
}
then {
deny;
log {
session-init;
}
}
}
policy Permit-Svr-RND-to-internet {
match {
source-address SVR-RND-LIST;
destination-address Sip_proxy_IP;
application TCP-44443;
dynamic-application none;
}
then {
permit;
}
}
policy Permit-to-Github {
match {
source-address VM-Graf-Pro;
destination-address Github-IP-LIST;
application [ junos-http junos-https junos-ssh ];
dynamic-application none;
}
then {
permit;
}
}
policy Permit-Jump_ssh {
match {
source-address Jump_SSH_VNPT;
destination-address Web_Monitor;
application PORT-1122;
dynamic-application none;
}
then {
permit;
}
}
policy Permit-LAN-to-Crawl-Svr {
match {
source-address VNPT-LAN-ZONE-VM-01;
destination-address Crawl_Server_rane;
application TCP-5000;
dynamic-application none;
}
then {
permit;
}
}
policy Capture-Log-to-Internet {
match {
source-address Follow-Host;
destination-address any;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-close;
}
}
}
policy LAN-TO-Voip-Svr {
match {
source-address any;
destination-address Voip-Svr;
application [ TCP-8089 PORT-1122 ];
dynamic-application none;
}
then {
permit;
}
}
policy LAN-TO-IP-Fullport {
match {
source-address any;
destination-address [ RAD-ADDRESS-IP Range-Public-Viettel TCB-103.11.172.53 TCB-34.80.155.156 ];
application any;
dynamic-application none;
}
then {
permit;
}
}
policy LAN-TO-ThaiSon-Server {
match {
source-address [ VNPT-LAN-ZONE-VM-01 QC-Connection-57 ];
destination-address Fast-Server;
application TCP-8099;
dynamic-application none;
}
then {
permit;
}
}
policy LAN-TO-BIT-BUCKET {
match {
source-address any;
destination-address [ BIT-BUCKET-IP AdminPublic-14 AdminPublic-18 AWS-01 ];
application [ junos-ssh SQL-3306 Redis-9200 TCP-6379 TCP-9092 ];
dynamic-application none;
}
then {
permit;
}
}
policy LAN-TO-Sagawa-CHAT {
match {
source-address any;
destination-address [ Sagawa-IP-203.205.21.192 sagawa-IP-203_205_21_191 ];
application [ junos-icmp-ping junos-http junos-https Port-Sagawa-9094 Port-Sagawa-9668 ];
dynamic-application none;
}
then {
permit;
}
}
policy LAN-TO-Digital-Cloud {
match {
source-address any;
destination-address [ White-List-Range-Digital-Cloud Inside-QC-118_69_81_238 HSK-CHAT-IP ];
application [ junos-http junos-https junos-icmp-ping PORT-1122 TCP-15672 TCP-5672 ];
dynamic-application none;
}
then {
permit;
}
}
policy LAN-TO-Internet {
match {
source-address any;
destination-address any;
application [ junos-icmp-ping junos-dns-tcp junos-dns-udp junos-ntp SNMP-161 junos-smtp junos-smtps junos-http junos-https TCP-9092 TCP-24224 Port-Mail-993 ];
dynamic-application none;
}
then {
permit;
}
}
inactive: policy LAN-TO-UNTRUST-term-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone untrust to-zone LAN-ZONE {
inactive: policy term-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
policy untrust-to-BigData-Stagging-1 {
description "Allow net to 10.10.12.90";
match {
source-address any;
destination-address HSK-BigData-staging-01;
application any;
dynamic-application none;
}
then {
deny;
}
}
policy untrust-to-BigData-Stagging-2 {
description "Allow net to 10.10.12.92";
match {
source-address any;
destination-address HSK-BigData-staging-02;
application any;
dynamic-application none;
}
then {
deny;
}
}
policy untrust-to-BigData-Stagging-3 {
description "Allow net to 10.10.12.91";
match {
source-address any;
destination-address HSK-BigData-staging-03;
application any;
dynamic-application none;
}
then {
deny;
}
}
policy Permit-to-GW-101-229 {
match {
source-address [ VM-DH-216_71 Inside-QC-118_69_81_238 ];
destination-address HSK-Public-GW-101-229;
application [ junos-https junos-http TCP-3024 ];
dynamic-application none;
}
then {
permit;
}
}
policy Permit-to-GW-101-228 {
match {
source-address [ RAD-ADDRESS-IP 568LBB-HO ];
destination-address HSK-Public-GW-101-228;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
policy Permit-to-GW-101-22 {
match {
source-address [ Cloudflare-IP-LIST 568LBB-HO Public-IP-VPN-Teleport HOST-PRTG-VNPT-04 ];
destination-address HSK-Public-GW-101-222;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
policy untrust-To-LAN-Pulic {
match {
source-address [ DRSite-gw-external-prod SHOP-HOST-279 ];
destination-address LAN-PUBLIC;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
}
}
policy untrust-Inside-Mastige {
description untrust-Inside-Mastige;
match {
source-address [ VPN-HOST-IP SHOP-HOST-LIST AdminPublic-IP 29HoangViet-01 29HoangViet-02 ];
destination-address [ Haproxy-FW-Inside-Mastige LAN-PUBLIC test100-200 test94.23 ];
application any;
dynamic-application none;
}
then {
permit;
}
}
policy untrust-to-VIP-HA-Internal {
description "VIP HA Internal";
match {
source-address [ VPN-HOST-IP SHOP-HOST-LIST 29HoangViet-IP HOST-PRTG AdminPublic-IP Operation-QC-Whitelist-Servers Viettel-Server VNPT-Server Operation-Whitelist-Server Viettel-GW-Server-125_212_255_174 Public-IP-VPN-Teleport VM-US-144_94 ];
destination-address [ VIP-HAPROXY-INTERNAL-172.16.100.214 HAProxy_Operation_Add Haproxy-FW-Inside-Mastige ];
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
policy Turn-SRV-100_236 {
description 160.187.94.4;
match {
source-address any;
destination-address Turn-SRV_100.236;
application [ Turn-SRV-100_236-10000-20000 Turn-SRV-100_236-P3478 Turn-SRV-100_236-P5349 Turn-SRV-100_236-P80 Turn-SRV-100_236-P443 ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
inactive: policy Janus-SRV-100_235 {
description 160.187.94.5;
match {
source-address any;
destination-address Janus-SRV-100_235;
application [ Janus-SRV-100_235-20000-40000 Janus-SRV-100_235-P8989-TCP Janus-SRV-100_235-P7088-TCP Janus-SRV-100_235-P8088 Janus-SRV-100_235-P8188-TCP junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
policy Permit-to-HSK-GW-HAProxy_Public_286 {
match {
source-address [ Voip-Svr AdminPublic-08 AdminPublic-17 Cloudflare-IP-LIST ];
destination-address Haproxy-FW-Public-Pro;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
policy untrust-to-HSK-GW-HAProxy_Public {
match {
source-address any;
destination-address HSK-GW-HAProxy_Public;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-close;
}
}
}
policy untrust-to-GW-Public-PAYMENT {
match {
source-address any;
destination-address GW-Public-PAYMENT;
application [ junos-http junos-https TCP-8080 TCP-8443 ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
policy untrust-TO-Clinic-Gw-internal {
match {
source-address [ MANAGEMENT HOST-MANAGEMENT-VNPT HSK-MNGT-IP HOST-PRTG AdminPublic-IP SHOP-HOST-LIST SPX HASAKI INSIDE-ADDRESS-IP Range-IP-GHTK BIT-BUCKET-IP VPN-Viettel-171.244.17.200 SHOP-130_Ap_Chanh_2 HOSTLIST-AWS HOST-VNPOST VM-US-144_94 hotosu-IP ];
destination-address Clinic-GW-Internal;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
policy untrust-TO-WMS-Gw-internal {
description Untrust-To-InsideHASAKI;
match {
source-address [ HOST-PRTG SHOP-HOST-LIST VPN-HOST-IP VNPT-LAN-ZONE-VM-01 RAD-ADDRESS-IP Public-IP-VPN-Teleport WEB-HOST-HASAKI Viettel-Public-IP VM-US-144_94 ];
destination-address Inside-Inshasaki;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
}
}
policy Haproxy-FW-Devops-01 {
match {
source-address [ 29HoangViet-IP MANAGEMENT HOST-MANAGEMENT-VNPT HOST-PRTG-VNPT-04 Viettel-GW-Server-125_212_255_174 Public-IP-VPN-Teleport 568LBB-HO Soure-NAT-Viettel Inside-QC-118_69_81_238 Merchant-QC-157_245_63_133 Vnpay_245_135 Sandbox-IP-LIST ];
destination-address [ Haproxy-FW-Devops-01 Haproxy-FW-Devops-01-TEST ];
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
log {
session-init;
}
}
}
policy untrust-OMS-Open {
description OMS-Open-GW-inshasaki;
match {
source-address WHITELIST-NHAT-TIN-LOGISTICS;
destination-address Clinic-Gw-internal-IP-172_16_100_251;
application [ junos-http junos-https ];
dynamic-application none;
}
then {
permit;
}
}
policy Deny_untrust_to_LAN {
match {
source-address any;
destination-address [ VIP-HAPROXY-INTERNAL-172.16.100.214 Haproxy-FW-Devops-01 ];
application any;
dynamic-application none;
}
then {
deny;
log {
session-init;
}
}
}
}
from-zone LAN-ZONE to-zone VPN {
policy LAN-ZONE-VPN-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone VPN to-zone LAN-ZONE {
policy VPN-LAN-ZONE-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone untrust to-zone untrust {
policy untrust-to-untrust-term-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone trust to-zone VPN {
policy trust-TO-VPN {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone VPN to-zone trust {
policy VPN-TO-trust-term-01 {
match {
source-address HOST-MANAGEMENT-VIETTEL;
destination-address any;
application [ junos-ssh junos-http junos-https ];
dynamic-application none;
}
then {
permit;
}
}
policy VPN-TO-trust-term-others {
match {
source-address any;
destination-address any;
application any;
}
then {
deny;
}
}
}
from-zone untrust to-zone VPN {
inactive: policy untrust-TO-VPN-term-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
policy untrust-TO-VPN-term-02 {
match {
source-address any;
destination-address HSK-VIETTEL-ChatQC-HA-K8s;
application [ junos-http junos-https ];
}
then {
permit;
}
}
}
from-zone VPN to-zone untrust {
policy VPN-TO-untrust-term-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone untrust to-zone MNGT-PUBLIC {
policy term-01 {
match {
source-address MANAGEMENT;
destination-address any;
application junos-ssh;
}
then {
permit;
}
}
}
from-zone LAN-ZONE to-zone trust {
policy LAN-ZONE-TO-trust-term-01 {
match {
source-address HOST-MANAGEMENT-VNPT;
destination-address any;
application junos-ssh;
}
then {
permit;
}
}
policy LAN-ZONE-TO-trust-term-others {
match {
source-address any;
destination-address any;
application any;
}
then {
deny;
}
}
}
from-zone Proxmox-MNGT to-zone untrust {
policy Proxmox-MNGT-TO-untrust-01 {
match {
source-address Proxmox-MNGT-IP;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone LAN-ZONE to-zone Proxmox-MNGT {
policy LAN-ZONE-TO-Proxmox-MNGT {
match {
source-address [ VM-MNGT-VNPT VM-MNGT-DH ];
destination-address Proxmox-MNGT-VNPT-IP;
application any;
}
then {
permit;
}
}
policy LAN-ZONE-TO-Proxmox-MNGT-term-02 {
match {
source-address HOST-PRTG-VNPT-01;
destination-address Proxmox-MNGT-VNPT-IP;
application any;
dynamic-application none;
}
then {
permit;
}
}
policy Fluentd-To-Proxmox {
match {
source-address [ VM-MNGT-VNPT-02 VM-MNGR-VNPT-03 ];
destination-address Proxmox-VNPT;
application any;
dynamic-application none;
}
then {
permit;
}
}
}
from-zone VPN to-zone Proxmox-MNGT {
policy VPN-TO-Proxmox-MNGT-term-01 {
match {
source-address [ VM-MNGT-VIETTEL Proxmox-Manager-Beta-Viettel ];
destination-address Proxmox-MNGT-VNPT-IP;
application any;
}
then {
permit;
}
}
}
from-zone LAN-ZONE to-zone LAN-ZONE {
policy LAN-ZONE-TO-LAN-ZONE-term-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone HSK-VLAN-110 to-zone untrust {
policy HSK-VLAN-110-TO-untrust-TERM-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone HSK-VLAN-110 to-zone VPN {
policy HSK-VLAN-110-TO-VPN-TERM-01 {
match {
source-address HSK-VLAN-110;
destination-address HSK-VIETTEL-VLAN-230;
application any;
}
then {
permit;
}
}
policy HSK-VLAN-110-TO-VPN-OTHERS {
match {
source-address any;
destination-address any;
application any;
}
then {
reject;
}
}
}
from-zone VPN to-zone HSK-VLAN-110 {
policy VPN-TO-HSK-VLAN-110-TERM-01 {
match {
source-address HSK-VIETTEL-VLAN-230;
destination-address HSK-VLAN-110;
application any;
}
then {
permit;
}
}
policy VPN-TO-HSK-VLAN-110-OTHERS {
match {
source-address any;
destination-address any;
application any;
}
then {
reject;
}
}
}
from-zone Proxmox-MNGT to-zone LAN-ZONE {
policy Proxmox-To-LAN-Zone {
match {
source-address Proxmox-VNPT;
destination-address [ VM-MNGT-VNPT-02 VM-MNGR-VNPT-03 ];
application any;
dynamic-application none;
}
then {
permit;
}
}
}
from-zone Proxmox-MNGT to-zone VPN {
policy Allow-Promox-to-Viettel {
match {
source-address Proxmox-MNGT-IP;
destination-address Proxmox-Manager-Beta-Viettel;
application any;
dynamic-application none;
}
then {
permit;
}
}
}
from-zone AWS-ZONE to-zone LAN-ZONE {
policy AWS-ZONE-TO-LAN-ZONE-TERM-01 {
match {
source-address HSK-AWS-VNPT-01;
destination-address VNPT-LAN-ZONE-VM-01;
application any;
}
then {
permit;
}
}
policy OTHERS {
match {
source-address any;
destination-address any;
application any;
}
then {
reject;
}
}
}
from-zone LAN-ZONE to-zone AWS-ZONE {
policy LAN-ZONE-TO-AWS-ZONE-TERM-01 {
match {
source-address VNPT-LAN-ZONE-VM-01;
destination-address HSK-AWS-VNPT-01;
application any;
}
then {
permit;
}
}
policy OTHERS {
match {
source-address any;
destination-address any;
application any;
}
then {
reject;
}
}
}
from-zone HSK-VLAN-110 to-zone LAN-ZONE {
policy Permit-VLAN110-to-LAN-ZONE {
match {
source-address [ Srv_Teleport_VNPT Srv_AD_VNPT ];
destination-address any;
application any;
dynamic-application none;
}
then {
permit;
}
}
}
from-zone AWS-Staging to-zone LAN-ZONE {
policy AWS-Staging-LAN-ZONE-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone LAN-ZONE to-zone AWS-Staging {
policy LAN-ZONE-AWS-Staging-01 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
default-policy {
deny-all;
}
pre-id-default-policy {
then {
log {
session-close;
}
}
}
}
zones {
security-zone trust {
host-inbound-traffic {
system-services {
all;
ping;
traceroute;
}
protocols {
all;
}
}
interfaces {
reth3.14;
}
}
security-zone untrust {
screen untrust-screen;
host-inbound-traffic {
system-services {
ping;
traceroute;
ike;
}
protocols {
bgp;
}
}
interfaces {
reth6.3994;
reth6.3995;
reth2.1513;
reth2.1514;
reth6.2000;
}
}
security-zone LAN-ZONE {
host-inbound-traffic {
system-services {
ping;
traceroute;
}
}
interfaces {
reth1.100;
reth3.12;
}
}
security-zone VPN {
host-inbound-traffic {
system-services {
ping;
traceroute;
https;
}
}
interfaces {
st0.0;
st0.1;
}
}
security-zone MNGT-PUBLIC {
host-inbound-traffic {
system-services {
ssh;
ping;
}
}
interfaces {
lo0.0;
}
}
security-zone Proxmox-MNGT {
host-inbound-traffic {
system-services {
ping;
}
}
interfaces {
reth1.30;
}
}
security-zone HSK-VLAN-110 {
host-inbound-traffic {
system-services {
ping;
traceroute;
}
}
interfaces {
reth1.110;
}
}
security-zone AWS-ZONE {
host-inbound-traffic {
protocols {
bgp;
}
}
interfaces {
st0.10;
st0.11;
}
}
security-zone AWS-Staging {
host-inbound-traffic {
system-services {
ping;
traceroute;
}
protocols {
bgp;
}
}
interfaces {
st0.15;
st0.16;
}
}
}
}
interfaces {
ge-0/0/0 {
description Ge-0/0/0-REth3:TO-HCM-VNPT-HSK-ACS-03:E1/46;
gigether-options {
redundant-parent reth3;
}
}
ge-0/0/14 {
description "CF|Ge-0/0/14:TO-HCM-VNPT-HSK-FW-02:GE-7/0/14|Fabric-Link";
}
ge-0/0/15 {
description "CF|GE-0/0/15:TO-HCM-VNPT-HSK-FW-02:GE-7/0/15|Fabric-Link";
}
xe-0/1/0 {
description "Xe-0/1/0-REth0:TO-HCM-VNPT-DH-ACS-HP:TE1/0/52#UPLINK-01";
gigether-options {
redundant-parent reth6;
}
}
xe-0/2/0 {
description VNPT-UPLINK-01;
gigether-options {
redundant-parent reth2;
}
}
xe-0/2/1 {
description XE-0/2/1-RETH1:TO-HCM-HSK-ACS-3064-02:E1/45-PO43;
gigether-options {
redundant-parent reth1;
}
}
xe-0/2/2 {
description XE-0/2/2-RETH1:TO-HCM-HSK-ACS-3064-02:E1/45-PO43;
gigether-options {
redundant-parent reth1;
}
}
ge-7/0/0 {
description Ge-7/0/0-REth3:TO-HCM-VNPT-HSK-ACS-04:E1/46;
gigether-options {
redundant-parent reth3;
}
}
ge-7/0/14 {
description "CF|Ge-7/0/14:TO-HCM-VNPT-HSK-FW-02:GE-0/0/14|Fabric-Link";
}
ge-7/0/15 {
description "CF|Ge-7/0/15:TO-HCM-VNPT-HSK-FW-02:GE-0/0/15|Fabric-Link";
}
xe-7/1/0 {
description "Xe-7/1/0-REth0:TO-HCM-VNPT-DH-ACS-HP:TE1/0/51#UPLINK-02";
gigether-options {
redundant-parent reth6;
}
}
xe-7/1/1 {
description VNPT-UPLINK-02;
gigether-options {
redundant-parent reth2;
}
}
xe-7/2/0 {
description xe-7/2/0-RETH1:TO-HCM-HSK-ACS-3064-01:E1/46-PO44;
gigether-options {
redundant-parent reth1;
}
}
xe-7/2/1 {
description XE-7/2/1-RETH1:TO-HCM-HSK-ACS-3064-02:E1/46-PO44;
gigether-options {
redundant-parent reth1;
}
}
fab0 {
fabric-options {
member-interfaces {
ge-0/0/14;
ge-0/0/15;
}
}
}
fab1 {
fabric-options {
member-interfaces {
ge-7/0/14;
ge-7/0/15;
}
}
}
lo0 {
unit 0 {
family inet {
address 160.187.94.254/24;
}
}
}
reth1 {
description "RETH1:TO-HCM-HSK-ACS-10G-01:PO43#MS";
vlan-tagging;
redundant-ether-options {
redundancy-group 1;
lacp {
active;
periodic slow;
}
}
unit 30 {
description "RETH1.30:MNGT-PROMOX#VLAN30#";
vlan-id 30;
family inet {
address 172.16.30.253/24;
}
}
unit 100 {
description "CE|RETH1.100:LAN-ZONE";
vlan-id 100;
family inet {
address 172.16.101.254/23;
}
}
unit 110 {
description "RETH1.110:TO-HCM-VNPT-PROXMOX-VLAN-110#HSK-VLAN-110#MS";
vlan-id 110;
family inet {
address 172.16.110.254/24;
}
}
}
reth2 {
description RETH2:TO-HCM-VNPT-UPLINK;
vlan-tagging;
redundant-ether-options {
redundancy-group 1;
lacp {
active;
periodic slow;
}
}
unit 1513 {
description "RETH2.1513:TO-VNPT-UPLINK-01#1513";
vlan-id 1513;
family inet {
address 14.225.242.81/31;
}
}
unit 1514 {
description "RETH2.1514:TO-VNPT-UPLINK-02#1514";
vlan-id 1514;
family inet {
address 14.225.242.83/31;
}
}
}
reth3 {
description "RETH3:TO-HCM-VNPT-ACS-03#VLAN12";
vlan-tagging;
redundant-ether-options {
redundancy-group 1;
}
unit 12 {
description "RETH3.12:LAN-ZONE#VLAN12#";
vlan-id 12;
family inet {
address 10.10.12.254/24;
}
}
unit 14 {
description RETH3.14:Management;
vlan-id 14;
family inet {
address 172.16.14.249/24;
}
}
}
reth6 {
description "RETH6:TO-HCM-SCTV-TTN-ACS:PO3#PEERING";
vlan-tagging;
redundant-ether-options {
redundancy-group 1;
lacp {
active;
periodic slow;
}
}
unit 2000 {
description "RETH6.200:TO-HCM-VNPT-DH-FW:RETH0.2000#INSIDE#";
vlan-id 2000;
family inet {
address 10.255.254.2/30;
}
}
unit 3994 {
description "RETH6.3994:TO-HCM-SCTV-TTN-ACS:PORT1/0/14#IXP-PEERING";
vlan-id 3994;
family inet {
address 112.197.3.114/30;
}
}
unit 3995 {
description "RETH6.3995:TO-HCM-SCTV-TTN-ACS:PORT1/0/14#NIX-PEERING";
vlan-id 3995;
family inet {
address 112.197.3.122/30;
}
}
}
st0 {
unit 0 {
family inet {
address 10.2.2.1/24;
}
}
unit 1 {
family inet {
address 10.3.3.1/24;
}
}
unit 10 {
family inet {
mtu 1436;
address 169.254.225.50/30;
}
}
unit 11 {
family inet {
mtu 1436;
address 169.254.191.194/30;
}
}
unit 15 {
family inet {
mtu 1436;
address 169.254.226.82/30;
}
}
unit 16 {
family inet {
mtu 1436;
address 169.254.245.30/30;
}
}
}
}
snmp {
community daihuu;
}
policy-options {
prefix-list PREFIX-REC-FROM-AWS-01 {
10.210.0.0/16;
}
prefix-list PREFIX-REC-FROM-DH {
160.187.94.0/24;
}
prefix-list RFC1918 {
10.0.0.0/8;
172.16.0.0/12;
192.168.0.0/16;
}
policy-statement EXP-AWS {
term term-01 {
from {
protocol direct;
route-filter 172.16.100.0/23 exact;
}
then accept;
}
term others {
then reject;
}
}
policy-statement EXP-AWS-HSK-SIN {
term term-01 {
from {
protocol direct;
route-filter 172.16.100.0/23 exact;
}
then accept;
}
term others {
then reject;
}
}
policy-statement EXP-NIX-SCTV {
inactive: term REJECT-ALL {
then reject;
}
term term-01 {
from {
prefix-list PREFIX-REC-FROM-DH;
}
then accept;
}
term others {
then reject;
}
}
policy-statement EXP-SCTV {
inactive: term REJECT-ALL {
then reject;
}
term term-01 {
from {
prefix-list PREFIX-REC-FROM-DH;
}
then accept;
}
term others {
then reject;
}
}
policy-statement EXP-VNPT-1513 {
inactive: term REJECT-ALL {
then reject;
}
term term-01 {
from {
prefix-list PREFIX-REC-FROM-DH;
}
then accept;
}
term others {
then reject;
}
}
policy-statement EXP-VNPT-1514 {
inactive: term REJECT-ALL {
then reject;
}
term term-01 {
from {
prefix-list PREFIX-REC-FROM-DH;
}
then accept;
}
term others {
then reject;
}
}
policy-statement EXPORT-DEFAULT-AWS {
term default {
from {
route-filter 0.0.0.0/0 exact;
}
then accept;
}
term reject {
then reject;
}
}
policy-statement IMP-AWS-01 {
term term-01 {
from {
protocol bgp;
prefix-list-filter PREFIX-REC-FROM-AWS-01 orlonger;
}
then {
local-preference 200;
accept;
}
}
term others {
then reject;
}
}
policy-statement IMP-AWS-02 {
term term-01 {
from {
protocol bgp;
prefix-list-filter PREFIX-REC-FROM-AWS-01 orlonger;
}
then {
local-preference 100;
accept;
}
}
term others {
then reject;
}
}
policy-statement IMP-AWS-HSK-SIN-01 {
term term-01 {
from {
protocol bgp;
route-filter 10.101.0.0/16 orlonger;
}
then {
local-preference 200;
accept;
}
}
term others {
then reject;
}
}
policy-statement IMP-AWS-HSK-SIN-02 {
term term-01 {
from {
protocol bgp;
route-filter 10.101.0.0/16 orlonger;
}
then {
local-preference 100;
accept;
}
}
term others {
then reject;
}
}
policy-statement IMP-NIX-SCTV {
term ACCEPT-ALL {
then {
local-preference 90;
accept;
}
}
}
policy-statement IMP-SCTV {
term DEFAULT-ROUTE {
from {
route-filter 0.0.0.0/0 exact;
}
then {
local-preference 90;
accept;
}
}
}
policy-statement IMP-VNPT-1513 {
term term-01 {
from {
protocol bgp;
prefix-list-filter RFC1918 orlonger;
}
then reject;
}
term ACCEPT-ALL {
then accept;
}
}
policy-statement IMP-VNPT-1514 {
term term-01 {
from {
prefix-list-filter RFC1918 orlonger;
}
then reject;
}
term ACCEPT-ALL {
then {
local-preference 90;
accept;
}
}
}
policy-statement REJECT-ALL {
then reject;
}
}
access {
address-assignment {
pool junosDHCPPool {
family inet {
network 192.168.2.0/24;
range junosRange {
low 192.168.2.2;
high 192.168.2.254;
}
dhcp-attributes {
router {
192.168.2.1;
}
}
}
}
}
}
applications {
application PORT-1122 {
protocol tcp;
destination-port 1122;
}
application Turn-SRV-100_236-P3478 {
term Turn-SRV-100_236-P3478-TCP protocol tcp destination-port 3478;
term Turn-SRV-100_236-P3478-UDP protocol udp destination-port 3478;
}
application Turn-SRV-100_236-P5349 {
term Turn-SRV-100_236-P5349-TCP protocol tcp destination-port 5349;
term Turn-SRV-100_236-P5349-UDP protocol udp destination-port 5349;
}
application Turn-SRV-100_236-10000-20000 {
protocol udp;
destination-port 10000-20000;
}
application Janus-SRV-100_235-P8989-TCP {
protocol tcp;
destination-port 8989;
}
application Janus-SRV-100_235-20000-40000 {
protocol udp;
destination-port 20000-40000;
}
application Janus-SRV-100_235-P7088-TCP {
protocol tcp;
destination-port 7088;
}
application Janus-SRV-100_235-P8088 {
protocol tcp;
destination-port 8088;
}
application Janus-SRV-100_235-P8188-TCP {
protocol tcp;
destination-port 8188;
}
application Turn-SRV-100_236-P80 {
term term-01 protocol udp destination-port 80;
term term-02 protocol tcp destination-port 80;
}
application Turn-SRV-100_236-P443 {
term term-01 protocol udp destination-port 443;
term term-02 protocol tcp destination-port 443;
}
application Redis-9200 {
term udp-9200 protocol udp destination-port 9200;
term tcp-9200 protocol tcp destination-port 9200;
}
application SQL-3306 {
term tcp-3306 protocol tcp destination-port 3306;
term udp-3306 protocol udp destination-port 3306;
}
application TCP-6379 {
protocol tcp;
destination-port 6379;
}
application SNMP-161 {
protocol udp;
destination-port 161;
}
application TCP-9092 {
protocol tcp;
destination-port 9092;
}
application TCP-24224 {
protocol tcp;
destination-port 24224;
}
application TCP-8099 {
protocol tcp;
destination-port 8099;
}
application Port-Sagawa-9094 {
description 9049;
term sagawa-9094-udp protocol udp destination-port 9049;
term sagawa protocol tcp destination-port 9049;
}
application Port-Sagawa-9668 {
description 9668;
term sawaga-udp-port-9668 protocol udp destination-port 9668;
term sagawa-port-9668 protocol tcp destination-port 9668;
}
application TCP-15672 {
protocol tcp;
destination-port 15672;
}
application TCP-5672 {
protocol tcp;
destination-port 5672;
}
application Port-RAD-30002 {
term UDP-30002 protocol udp destination-port 30002;
term TCP-30002 protocol tcp destination-port 30002;
}
application Port-RAD-30633 {
term UDP-30633 protocol udp destination-port 30633;
term TCP-3633 protocol tcp destination-port 30633;
}
application Port-RAD-27017 {
term UDP-27017 protocol udp destination-port 27017;
term TCP-27017 protocol tcp destination-port 27017;
}
application Port-RAD-30603 {
term UDP-30603 protocol udp destination-port 30603;
term TCP-30603 protocol tcp destination-port 30603;
}
application Port-RAD-32207 {
term UDP-32207 protocol udp destination-port 32207;
term TCP-32207 protocol tcp destination-port 32207;
}
application TCP-8080 {
protocol tcp;
destination-port 8080;
}
application TCP-8443 {
protocol tcp;
destination-port 8443;
}
application Port-Mail-993 {
term UDP-993 protocol udp destination-port 993;
term TCP-993 protocol tcp destination-port 993;
}
application TCP-8089 {
protocol tcp;
destination-port 8089;
}
application Port-Kafka-Pro-8083 {
description 8083;
term UDP-8083 protocol udp destination-port 8083;
term TCP-8083 protocol tcp destination-port 8083;
}
application TCP-5000 {
protocol tcp;
destination-port 5000;
}
application TCP-3024 {
protocol tcp;
destination-port 3024;
}
application TCP-44443 {
protocol tcp;
destination-port 44443;
}
}
protocols {
bgp {
group EBGP-SCTV {
import IMP-SCTV;
export EXP-SCTV;
peer-as 45543;
neighbor 112.197.3.113;
}
group EBGP-NIX-SCTV {
import IMP-NIX-SCTV;
export EXP-NIX-SCTV;
peer-as 45543;
neighbor 112.197.3.121;
}
group EBGP-VNPT-01 {
import IMP-VNPT-1513;
export EXP-VNPT-1513;
peer-as 135905;
neighbor 14.225.242.80;
}
group EBGP-VNPT-02 {
import IMP-VNPT-1514;
export EXP-VNPT-1514;
peer-as 135905;
neighbor 14.225.242.82;
}
group EBGP-AWS {
type external;
neighbor 169.254.225.49 {
import IMP-AWS-01;
export EXP-AWS;
peer-as 64512;
local-as 65000;
}
}
group EBGP-AWS-02 {
type external;
neighbor 169.254.191.193 {
import IMP-AWS-02;
export EXP-AWS;
peer-as 64512;
local-as 65000;
}
}
group EBGP-AWS-SIN-01 {
type external;
neighbor 169.254.226.81 {
hold-time 30;
import IMP-AWS-HSK-SIN-01;
export EXP-AWS-HSK-SIN;
peer-as 64512;
local-as 65000;
}
}
group EBGP-AWS-SIN-02 {
type external;
neighbor 169.254.245.29 {
hold-time 30;
import IMP-AWS-HSK-SIN-02;
export EXP-AWS-HSK-SIN;
peer-as 64512;
local-as 65000;
}
}
}
l2-learning {
global-mode transparent-bridge;
}
}
routing-options {
autonomous-system 151866;
static {
route 10.10.36.0/24 {
next-hop 10.255.254.1;
qualified-next-hop 10.255.254.5 {
preference 10;
}
}
route 160.187.94.128/26 {
next-hop 10.255.254.1;
qualified-next-hop 10.255.254.5 {
preference 10;
}
}
route 160.187.94.192/27 {
next-hop 10.255.254.1;
qualified-next-hop 10.255.254.5 {
preference 10;
}
}
route 160.187.94.224/27 {
next-hop 10.255.254.1;
qualified-next-hop 10.255.254.5 {
preference 10;
}
}
route 172.16.15.0/24 {
next-hop st0.0;
qualified-next-hop st0.1 {
preference 10;
}
}
route 172.16.40.0/24 {
next-hop st0.0;
qualified-next-hop st0.1 {
preference 10;
}
}
route 172.16.200.0/23 {
next-hop st0.0;
qualified-next-hop st0.1 {
preference 10;
}
}
route 172.16.202.0/23 {
next-hop st0.0;
qualified-next-hop st0.1 {
preference 10;
}
}
route 172.16.210.0/24 {
next-hop st0.0;
qualified-next-hop st0.1 {
preference 10;
}
}
route 172.16.230.0/24 {
next-hop st0.0;
qualified-next-hop st0.1 {
preference 10;
}
}
}
}