2769 lines
77 KiB
JSON
2769 lines
77 KiB
JSON
{
|
|
"_preamble": {
|
|
"header": {
|
|
"generated-by": "SRLINUX",
|
|
"name": "clab-initial",
|
|
"comment": "set by containerlab",
|
|
"created": "2023-10-29T12:37:32.663Z",
|
|
"release": "v23.7.1",
|
|
"enabled-yang-features": ["srl_nokia-features:acl-policer-resource-utilization", "srl_nokia-features:admin-user-roles", "srl_nokia-features:anycast-gw", "srl_nokia-features:arp-nd-datapath-programming", "srl_nokia-features:bgp-add-paths", "srl_nokia-features:bgp-auth-password", "srl_nokia-features:bgp-cfg-afi-safi-list", "srl_nokia-features:bgp-graceful-restart-gaps", "srl_nokia-features:bgp-ipv6-next-hop-tunnel-resolution", "srl_nokia-features:bgp-local-as-container-iso-list", "srl_nokia-features:bgp-max-ecmp-hash-buckets", "srl_nokia-features:bgp-mtu-discovery", "srl_nokia-features:bgp-prefix-limit", "srl_nokia-features:bgp-restart-max-wait", "srl_nokia-features:bgp-rib-afi-safi-list", "srl_nokia-features:bgp-rib-afi-safi-route", "srl_nokia-features:bgp-single-hop-connected-check", "srl_nokia-features:bgp-unnumbered-peers", "srl_nokia-features:bridged", "srl_nokia-features:bt-evpn-vlan-aware-bundle-interop", "srl_nokia-features:cli-plugin-authorization", "srl_nokia-features:dac-link-training", "srl_nokia-features:dhcp-relay-fqdn", "srl_nokia-features:dot1p-classifier-rewrite", "srl_nokia-features:dot1q-vlan-ranges", "srl_nokia-features:dynamic-tcam", "srl_nokia-features:event-handler", "srl_nokia-features:evpn", "srl_nokia-features:evpn-advertise-arp-nd-only-with-mac-table-entry", "srl_nokia-features:evpn-ifl-unequal-ecmp", "srl_nokia-features:evpn-mac-ip-adv-arp-nd-ext-comm", "srl_nokia-features:evpn-mh-ip-aliasing", "srl_nokia-features:evpn-mh-manual-alg", "srl_nokia-features:evpn-mh-pref-alg", "srl_nokia-features:evpn-mh-single-active", "srl_nokia-features:evpn-mh-virtual-es", "srl_nokia-features:fixed", "srl_nokia-features:ingress-subif-policing", "srl_nokia-features:interface-references", "srl_nokia-features:ip-acl-dscp-set", "srl_nokia-features:ip-qos-multifield", "srl_nokia-features:isis-level-database", "srl_nokia-features:isis-lsdb", "srl_nokia-features:isis-nsf", "srl_nokia-features:l2-proxy-arp", "srl_nokia-features:l2-proxy-nd", "srl_nokia-features:l2cp-transparency", "srl_nokia-features:l3-proxy-arp", "srl_nokia-features:l3-proxy-nd", "srl_nokia-features:lacp-fallback", "srl_nokia-features:lag", "srl_nokia-features:license", "srl_nokia-features:mirroring", "srl_nokia-features:mirroring-intf-stats", "srl_nokia-features:named-queues-and-named-fcs", "srl_nokia-features:packet-tracer", "srl_nokia-features:platform-7220-d2", "srl_nokia-features:ra-guard", "srl_nokia-features:reload-delay", "srl_nokia-features:route-leaking", "srl_nokia-features:routing-policy-bgp-med", "srl_nokia-features:routing-policy-named-statements", "srl_nokia-features:segment-routing-adjacency-sid", "srl_nokia-features:segment-routing-shared-sid", "srl_nokia-features:ssh-host-key-preserve", "srl_nokia-features:storm-control", "srl_nokia-features:subif-policer", "srl_nokia-features:trident3", "srl_nokia-features:unequal-ecmp", "srl_nokia-features:unified-forwarding-tables", "srl_nokia-features:virtual-ip-discovery", "srl_nokia-features:vlan-id-any", "srl_nokia-features:vlan-tpid", "srl_nokia-features:vxlan", "srl_nokia-features:vxlan-stats", "srl_nokia-features:warm-reboot"],
|
|
"checksum": "ea09316203e4ff7c$9c537e87ab18b31618ed008c942ca76f1ae3634d"
|
|
},
|
|
"build": {
|
|
"git-branch": "SRL_23_7_B1",
|
|
"git-tag": "v23.7.1-163-gd408df6a0c",
|
|
"git-sha": "d408df6a0c66d318076f9cc31a58e569205bb081"
|
|
},
|
|
"application": [
|
|
{
|
|
"name": "aaa_mgr",
|
|
"path": "/opt/srlinux/bin/sr_aaa_mgr",
|
|
"version": "2023-08-17T01:16:18.000Z"
|
|
},
|
|
{
|
|
"name": "acl_mgr",
|
|
"path": "/opt/srlinux/bin/sr_acl_mgr",
|
|
"version": "2023-08-17T01:14:44.000Z"
|
|
},
|
|
{
|
|
"name": "app_mgr",
|
|
"path": "/opt/srlinux/bin/sr_app_mgr",
|
|
"version": "2023-08-17T01:14:37.000Z"
|
|
},
|
|
{
|
|
"name": "arp_nd_mgr",
|
|
"path": "/opt/srlinux/bin/sr_arp_nd_mgr",
|
|
"version": "2023-08-17T01:16:17.000Z"
|
|
},
|
|
{
|
|
"name": "bfd_mgr",
|
|
"path": "/opt/srlinux/bin/sr_bfd_mgr",
|
|
"version": "2023-08-17T01:14:27.000Z"
|
|
},
|
|
{
|
|
"name": "bgp_mgr",
|
|
"path": "/opt/srlinux/bin/sr_bgp_mgr",
|
|
"version": "2023-08-17T01:16:45.000Z"
|
|
},
|
|
{
|
|
"name": "chassis_mgr",
|
|
"path": "/opt/srlinux/bin/sr_chassis_mgr",
|
|
"version": "2023-08-17T01:14:31.000Z"
|
|
},
|
|
{
|
|
"name": "dev_mgr",
|
|
"path": "/opt/srlinux/bin/sr_device_mgr",
|
|
"version": "2023-08-17T01:16:56.000Z"
|
|
},
|
|
{
|
|
"name": "dhcp_client_mgr",
|
|
"path": "/opt/srlinux/bin/sr_dhcp_client_mgr",
|
|
"version": "2023-08-17T01:15:08.000Z"
|
|
},
|
|
{
|
|
"name": "dhcp_relay_mgr",
|
|
"path": "/opt/srlinux/bin/sr_dhcp_relay_mgr",
|
|
"version": "2023-08-17T01:16:14.000Z"
|
|
},
|
|
{
|
|
"name": "dhcp_server_mgr",
|
|
"path": "/opt/srlinux/bin/sr_dhcp_server_mgr",
|
|
"version": "2023-08-17T01:15:43.000Z"
|
|
},
|
|
{
|
|
"name": "ethcfm_mgr",
|
|
"path": "/opt/srlinux/bin/sr_ethcfm_mgr",
|
|
"version": "2023-08-17T01:14:25.000Z"
|
|
},
|
|
{
|
|
"name": "event_mgr",
|
|
"path": "/opt/srlinux/bin/sr_event_mgr",
|
|
"version": "2023-08-17T01:14:27.000Z"
|
|
},
|
|
{
|
|
"name": "evpn_mgr",
|
|
"path": "/opt/srlinux/bin/sr_evpn_mgr",
|
|
"version": "2023-08-17T01:16:23.000Z"
|
|
},
|
|
{
|
|
"name": "fhs_mgr",
|
|
"path": "/opt/srlinux/bin/sr_fhs_mgr",
|
|
"version": "2023-08-17T01:14:27.000Z"
|
|
},
|
|
{
|
|
"name": "fib_mgr",
|
|
"path": "/opt/srlinux/bin/sr_fib_mgr",
|
|
"version": "2023-08-17T01:16:25.000Z"
|
|
},
|
|
{
|
|
"name": "fiji_pdk",
|
|
"path": "/opt/srlinux/bin/gfstandalone",
|
|
"version": "n/a"
|
|
},
|
|
{
|
|
"name": "gnmi_server",
|
|
"path": "/opt/srlinux/bin/sr_gnmi_server",
|
|
"version": "2023-08-17T01:14:56.000Z"
|
|
},
|
|
{
|
|
"name": "gribi_server",
|
|
"path": "/opt/srlinux/bin/sr_gribi_server",
|
|
"version": "2023-08-17T01:14:55.000Z"
|
|
},
|
|
{
|
|
"name": "idb_server",
|
|
"path": "/opt/srlinux/bin/sr_idb_server",
|
|
"version": "2023-08-17T01:02:20.000Z"
|
|
},
|
|
{
|
|
"name": "igmp_mgr",
|
|
"path": "/opt/srlinux/bin/sr_igmp_mgr",
|
|
"version": "2023-08-17T01:16:28.000Z"
|
|
},
|
|
{
|
|
"name": "isis_mgr",
|
|
"path": "/opt/srlinux/bin/sr_isis_mgr",
|
|
"version": "2023-08-17T01:17:15.000Z"
|
|
},
|
|
{
|
|
"name": "json_rpc",
|
|
"path": "/opt/srlinux/bin/sr_json_rpc",
|
|
"version": "2023-08-17T01:14:28.000Z"
|
|
},
|
|
{
|
|
"name": "l2_mac_learn_mgr",
|
|
"path": "/opt/srlinux/bin/sr_l2_mac_learn_mgr",
|
|
"version": "2023-08-17T01:14:27.000Z"
|
|
},
|
|
{
|
|
"name": "l2_mac_mgr",
|
|
"path": "/opt/srlinux/bin/sr_l2_mac_mgr",
|
|
"version": "2023-08-17T01:14:49.000Z"
|
|
},
|
|
{
|
|
"name": "l2_proxy_arp_nd_mgr",
|
|
"path": "/opt/srlinux/bin/sr_l2_proxy_arp_nd_mgr",
|
|
"version": "2023-08-17T01:16:24.000Z"
|
|
},
|
|
{
|
|
"name": "l2_static_mac_mgr",
|
|
"path": "/opt/srlinux/bin/sr_l2_static_mac_mgr",
|
|
"version": "2023-08-17T01:14:26.000Z"
|
|
},
|
|
{
|
|
"name": "label_mgr",
|
|
"path": "/opt/srlinux/bin/sr_label_mgr",
|
|
"version": "2023-08-17T01:15:43.000Z"
|
|
},
|
|
{
|
|
"name": "lag_mgr",
|
|
"path": "/opt/srlinux/bin/sr_lag_mgr",
|
|
"version": "2023-08-17T01:14:24.000Z"
|
|
},
|
|
{
|
|
"name": "ldp_mgr",
|
|
"path": "/opt/srlinux/bin/sr_ldp_mgr",
|
|
"version": "2023-08-17T01:16:26.000Z"
|
|
},
|
|
{
|
|
"name": "license_mgr",
|
|
"path": "/opt/srlinux/bin/sr_license_mgr",
|
|
"version": "2023-08-17T01:14:20.000Z"
|
|
},
|
|
{
|
|
"name": "linux_mgr",
|
|
"path": "/opt/srlinux/bin/sr_linux_mgr",
|
|
"version": "2023-08-17T01:16:13.000Z"
|
|
},
|
|
{
|
|
"name": "dnsmasq",
|
|
"path": "/usr/sbin/dnsmasq",
|
|
"version": "2023-02-18T01:33:55.000Z"
|
|
},
|
|
{
|
|
"name": "sshd",
|
|
"path": "/usr/sbin/sshd",
|
|
"version": "2023-01-10T09:10:11.000Z"
|
|
},
|
|
{
|
|
"name": "ntpd",
|
|
"path": "/usr/sbin/chronyd",
|
|
"version": "2022-07-15T15:07:12.000Z"
|
|
},
|
|
{
|
|
"name": "vsftpd",
|
|
"path": "/usr/sbin/vsftpd",
|
|
"version": "2023-04-06T20:53:25.000Z"
|
|
},
|
|
{
|
|
"name": "snmp_server",
|
|
"path": "/opt/srlinux/bin/sr_snmp_server",
|
|
"version": "2023-08-17T01:02:18.000Z"
|
|
},
|
|
{
|
|
"name": "timesrv",
|
|
"path": "/usr/sbin/chronyd",
|
|
"version": "2022-07-15T15:07:12.000Z"
|
|
},
|
|
{
|
|
"name": "lldp_mgr",
|
|
"path": "/opt/srlinux/bin/sr_lldp_mgr",
|
|
"version": "2023-08-17T01:14:38.000Z"
|
|
},
|
|
{
|
|
"name": "log_mgr",
|
|
"path": "/opt/srlinux/bin/sr_log_mgr",
|
|
"version": "2023-08-17T01:14:25.000Z"
|
|
},
|
|
{
|
|
"name": "macsec_mgr",
|
|
"path": "/opt/srlinux/bin/sr_macsec_mgr",
|
|
"version": "2023-08-17T01:14:21.000Z"
|
|
},
|
|
{
|
|
"name": "mcid_mgr",
|
|
"path": "/opt/srlinux/bin/sr_mcid_mgr",
|
|
"version": "2023-08-17T01:14:27.000Z"
|
|
},
|
|
{
|
|
"name": "mfib_mgr",
|
|
"path": "/opt/srlinux/bin/sr_mfib_mgr",
|
|
"version": "2023-08-17T01:15:56.000Z"
|
|
},
|
|
{
|
|
"name": "mgmt_server",
|
|
"path": "/opt/srlinux/bin/sr_mgmt_server",
|
|
"version": "2023-08-17T01:16:04.000Z"
|
|
},
|
|
{
|
|
"name": "common",
|
|
"path": "n/a",
|
|
"version": "n/a"
|
|
},
|
|
{
|
|
"name": "mirror_mgr",
|
|
"path": "/opt/srlinux/bin/sr_mirror_mgr",
|
|
"version": "2023-08-17T01:14:21.000Z"
|
|
},
|
|
{
|
|
"name": "mpls_mgr",
|
|
"path": "/opt/srlinux/bin/sr_mpls_mgr",
|
|
"version": "2023-08-17T01:14:53.000Z"
|
|
},
|
|
{
|
|
"name": "mplsoam_mgr",
|
|
"path": "/opt/srlinux/bin/sr_mplsoam_mgr",
|
|
"version": "2023-08-17T01:16:20.000Z"
|
|
},
|
|
{
|
|
"name": "net_inst_mgr",
|
|
"path": "/opt/srlinux/bin/sr_net_inst_mgr",
|
|
"version": "2023-08-17T01:14:59.000Z"
|
|
},
|
|
{
|
|
"name": "oam_mgr",
|
|
"path": "/opt/srlinux/bin/sr_oam_mgr",
|
|
"version": "2023-08-17T01:14:23.000Z"
|
|
},
|
|
{
|
|
"name": "oc_mgmt_server",
|
|
"path": "/opt/srlinux/bin/sr_oc_mgmt_server",
|
|
"version": "2023-08-17T01:16:05.000Z"
|
|
},
|
|
{
|
|
"name": "oc_common",
|
|
"path": "n/a",
|
|
"version": "n/a"
|
|
},
|
|
{
|
|
"name": "ospf_mgr",
|
|
"path": "/opt/srlinux/bin/sr_ospf_mgr",
|
|
"version": "2023-08-17T01:16:26.000Z"
|
|
},
|
|
{
|
|
"name": "p4rt_server",
|
|
"path": "/opt/srlinux/bin/sr_p4rt_server",
|
|
"version": "2023-08-17T01:14:54.000Z"
|
|
},
|
|
{
|
|
"name": "pim_mgr",
|
|
"path": "/opt/srlinux/bin/sr_pim_mgr",
|
|
"version": "2023-08-17T01:16:25.000Z"
|
|
},
|
|
{
|
|
"name": "plcy_mgr",
|
|
"path": "/opt/srlinux/bin/sr_plcy_mgr",
|
|
"version": "2023-08-17T01:16:24.000Z"
|
|
},
|
|
{
|
|
"name": "maint_mode_mgr",
|
|
"path": "n/a",
|
|
"version": "n/a"
|
|
},
|
|
{
|
|
"name": "qos_mgr",
|
|
"path": "/opt/srlinux/bin/sr_qos_mgr",
|
|
"version": "2023-08-17T01:15:09.000Z"
|
|
},
|
|
{
|
|
"name": "radius_mgr",
|
|
"path": "/opt/srlinux/bin/sr_radius_mgr",
|
|
"version": "2023-08-17T01:15:56.000Z"
|
|
},
|
|
{
|
|
"name": "sdk_mgr",
|
|
"path": "/opt/srlinux/bin/sr_sdk_mgr",
|
|
"version": "2023-08-17T01:14:25.000Z"
|
|
},
|
|
{
|
|
"name": "segrt_mgr",
|
|
"path": "/opt/srlinux/bin/sr_segrt_mgr",
|
|
"version": "2023-08-17T01:16:06.000Z"
|
|
},
|
|
{
|
|
"name": "sflow_sample_mgr",
|
|
"path": "/opt/srlinux/bin/sr_sflow_sample_mgr",
|
|
"version": "2023-08-17T01:14:25.000Z"
|
|
},
|
|
{
|
|
"name": "static_route_mgr",
|
|
"path": "/opt/srlinux/bin/sr_static_route_mgr",
|
|
"version": "2023-08-17T01:16:22.000Z"
|
|
},
|
|
{
|
|
"name": "supportd",
|
|
"path": "/opt/srlinux/bin/sr_supportd",
|
|
"version": "2023-08-17T01:02:35.000Z"
|
|
},
|
|
{
|
|
"name": "te_mgr",
|
|
"path": "/opt/srlinux/bin/sr_te_mgr",
|
|
"version": "2023-08-17T01:16:17.000Z"
|
|
},
|
|
{
|
|
"name": "tepolicy_mgr",
|
|
"path": "/opt/srlinux/bin/sr_tepolicy_mgr",
|
|
"version": "2023-08-17T01:15:42.000Z"
|
|
},
|
|
{
|
|
"name": "timing_stack",
|
|
"path": "/opt/srlinux/bin/sr_timing_stack",
|
|
"version": "2023-08-17T01:16:27.000Z"
|
|
},
|
|
{
|
|
"name": "twamp_mgr",
|
|
"path": "/opt/srlinux/bin/sr_twamp_mgr",
|
|
"version": "2023-08-17T01:16:23.000Z"
|
|
},
|
|
{
|
|
"name": "vrrp_mgr",
|
|
"path": "/opt/srlinux/bin/sr_vrrp_mgr",
|
|
"version": "2023-08-17T01:16:16.000Z"
|
|
},
|
|
{
|
|
"name": "vxlan_mgr",
|
|
"path": "/opt/srlinux/bin/sr_vxlan_mgr",
|
|
"version": "2023-08-17T01:14:29.000Z"
|
|
},
|
|
{
|
|
"name": "xdp_cpm",
|
|
"path": "/opt/srlinux/bin/sr_xdp_cpm",
|
|
"version": "2023-08-17T01:02:33.000Z"
|
|
},
|
|
{
|
|
"name": "xdp_lc",
|
|
"path": "/opt/srlinux/bin/sr_xdp_lc",
|
|
"version": "2023-08-17T01:02:55.000Z"
|
|
}
|
|
],
|
|
"yang-module": [
|
|
{
|
|
"name": "srl_nokia-aaa",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-aaa-password",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-aaa-types",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-acl",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-acl-policers",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-acl-qos",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-aggregate-routes",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-app-mgmt",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bfd",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bgp",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bgp-evpn",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bgp-evpn-bgp-instance-mpls-bridge-table-multicast-destinations",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bgp-evpn-bgp-instance-mpls-bridge-table-statistics",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bgp-evpn-bgp-instance-mpls-bridge-table-unicast-destinations",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bgp-evpn-bgp-instance-mpls-vpws-destinations",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bgp-ipvpn",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bgp-vpn",
|
|
"revision": "2022-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-boot",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-mac-duplication",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-mac-duplication-entries",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-mac-learning",
|
|
"revision": "2020-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-mac-learning-entries",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-mac-limit",
|
|
"revision": "2020-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-mac-table",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-proxy-arp-nd",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-reserved-macs",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-shg",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-bridge-table-static-mac",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-configuration",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-configuration-role",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-connection-point",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-dhcp-server",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-dns",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ethcfm",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ethcfm-pm",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-event-handler",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ftp",
|
|
"revision": "2020-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-gnmi-server",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-gnsi-authz",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-gribi-server",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-icmp",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-if-ip",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-if-mpls",
|
|
"revision": "2021-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-igmp",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-igmp-snooping",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-igmp-types",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-bridge-table",
|
|
"revision": "2021-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-bridge-table-mac-duplication-entries",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-bridge-table-mac-learning-entries",
|
|
"revision": "2020-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-bridge-table-mac-table",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-bridge-table-statistics",
|
|
"revision": "2020-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-ethernet-segment-association",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-ip-dhcp",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-ip-dhcp-relay",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-ip-dhcp-server",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-ip-vrrp",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-l2cp",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-lag",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-local-mirror-destination",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-nbr",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-nbr-evpn",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-nbr-virtual-ip-discovery",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-p4rt",
|
|
"revision": "2022-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-router-adv",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-vlans",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-interfaces-vxdp",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ip-route-tables",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-isis",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-isis-lsdb",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-isis-lsdb-types",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-json-rpc",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-keychains",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-lacp",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ldp",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-license",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-linux",
|
|
"revision": "2019-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-lldp",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-lldp-types",
|
|
"revision": "2019-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-load-balancing",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-logging",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-lsp-ping-trace",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-macsec",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-maintenance-mode",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-maintenance-policies",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-micro-bfd",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mirroring",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mld",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mld-snooping",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mpls",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mpls-label-management",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mpls-route-tables",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mpls-services-evpn-label-management",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mpls-services-network-instance-label-management",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mtu",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-multicast-mfib-tables",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-mvpn-l3",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-network-instance",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-network-instance-mtu",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-next-hop-groups",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ntp",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-oam",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-oam-pm-ip",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-openconfig",
|
|
"revision": "2022-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ospf",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-p4rt-server",
|
|
"revision": "2022-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-packet-link-qual",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-packet-match-types",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-pim",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-acl",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-cgroup",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-chassis",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-control",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-cpu",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-datapath-resources",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-disk",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-fabric",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-fan",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-healthz",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-lc",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-linecard-fib",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-memory",
|
|
"revision": "2019-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-mtu",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-p4rt",
|
|
"revision": "2022-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-pipeline-counters",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-psu",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-qos",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-redundancy",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-resource-mgmt",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-resource-monitoring",
|
|
"revision": "2019-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-secure-boot",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-tcam",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-tpm",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-platform-vxdp",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-policy-forwarding",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-qos",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-qos-policers",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ra_guard",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-rib-bgp",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-routing-policy",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-segment-routing",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-sflow",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-snmp",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-ssh",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-stamp",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-static-routes",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system",
|
|
"revision": "2022-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-banner",
|
|
"revision": "2019-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-bridge-table",
|
|
"revision": "2020-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-bridge-table-proxy-arp",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-info",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-multicast",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-multicast-mfib-table",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-name",
|
|
"revision": "2019-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-network-instance",
|
|
"revision": "2021-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-network-instance-bgp-evpn-ethernet-segments",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-network-instance-bgp-vpn",
|
|
"revision": "2022-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-system-protocols",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tcp-udp",
|
|
"revision": "2019-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-te-policies",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-timezone",
|
|
"revision": "2020-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tls",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-traffic-engineering",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-transport-security",
|
|
"revision": "2023-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tunnel",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tunnel-interfaces",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tunnel-interfaces-vxlan-interface-bridge-table",
|
|
"revision": "2021-06-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tunnel-interfaces-vxlan-interface-bridge-table-multicast-destinations",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tunnel-interfaces-vxlan-interface-bridge-table-unicast-destinations",
|
|
"revision": "2021-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tunnel-interfaces-vxlan-interface-bridge-table-unicast-es-destination-vteps",
|
|
"revision": "2021-03-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-tunnel-tables",
|
|
"revision": "2022-11-30"
|
|
},
|
|
{
|
|
"name": "srl_nokia-twamp",
|
|
"revision": "2023-07-31"
|
|
},
|
|
{
|
|
"name": "srl_nokia-vxlan-tunnel-vtep",
|
|
"revision": "2023-03-31"
|
|
}
|
|
]
|
|
},
|
|
"srl_nokia-acl:acl": {
|
|
"cpm-filter": {
|
|
"ipv4-filter": {
|
|
"statistics-per-entry": true,
|
|
"entry": [
|
|
{
|
|
"sequence-id": 10,
|
|
"description": "Accept incoming ICMP unreachable messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "icmp",
|
|
"icmp": {
|
|
"type": "dest-unreachable",
|
|
"code": [
|
|
0,
|
|
1,
|
|
2,
|
|
3,
|
|
4,
|
|
13
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 20,
|
|
"description": "Accept incoming ICMP time-exceeded messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "icmp",
|
|
"icmp": {
|
|
"type": "time-exceeded"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 30,
|
|
"description": "Accept incoming ICMP parameter problem messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "icmp",
|
|
"icmp": {
|
|
"type": "param-problem"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 40,
|
|
"description": "Accept incoming ICMP echo messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "icmp",
|
|
"icmp": {
|
|
"type": "echo"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 50,
|
|
"description": "Accept incoming ICMP echo-reply messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "icmp",
|
|
"icmp": {
|
|
"type": "echo-reply"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 60,
|
|
"description": "Accept incoming SSH when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 22
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 70,
|
|
"description": "Accept incoming SSH when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 22
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 80,
|
|
"description": "Accept incoming Telnet when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 23
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 90,
|
|
"description": "Accept incoming Telnet when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 23
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 100,
|
|
"description": "Accept incoming TACACS+ when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 49
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 110,
|
|
"description": "Accept incoming TACACS+ when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 49
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 120,
|
|
"description": "Accept incoming DNS response messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 53
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 130,
|
|
"description": "Accept incoming DHCP messages targeted for BOOTP/DHCP client",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 68
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 140,
|
|
"description": "Accept incoming TFTP read-request and write-request messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 69
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 150,
|
|
"description": "Accept incoming HTTP(JSON-RPC) when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 80
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 160,
|
|
"description": "Accept incoming HTTP(JSON-RPC) when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 80
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 170,
|
|
"description": "Accept incoming NTP messages from servers",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 123
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 180,
|
|
"description": "Accept incoming SNMP GET/GETNEXT messages from servers",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 161
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 190,
|
|
"description": "Accept incoming BGP when the other router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 179
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 200,
|
|
"description": "Accept incoming BGP when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 179
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 210,
|
|
"description": "Accept incoming HTTPS(JSON-RPC) when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 443
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 220,
|
|
"description": "Accept incoming HTTPS(JSON-RPC) when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 443
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 230,
|
|
"description": "Accept incoming single-hop BFD session messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 3784
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 240,
|
|
"description": "Accept incoming multi-hop BFD session messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 4784
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 250,
|
|
"description": "Accept incoming uBFD session messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 6784
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 260,
|
|
"description": "Accept incoming gNMI messages when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 57400
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 270,
|
|
"description": "Accept incoming UDP traceroute messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"destination-port": {
|
|
"range": {
|
|
"start": 33434,
|
|
"end": 33464
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 280,
|
|
"description": "Accept incoming ICMP timestamp messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "icmp",
|
|
"icmp": {
|
|
"type": "timestamp"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 290,
|
|
"description": "Accept incoming OSPF messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": 89
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 300,
|
|
"description": "Accept incoming DHCP relay messages targeted for BOOTP/DHCP server",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 67
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 310,
|
|
"description": "Accept ICMP fragment packets",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"fragment": true,
|
|
"protocol": "icmp"
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 320,
|
|
"description": "Accept incoming LDP packets",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 646
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 330,
|
|
"description": "Accept incoming LDP packets with source-port 646",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 646
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 340,
|
|
"description": "Accept incoming LDP packets with destination-port 646",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 646
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 350,
|
|
"description": "Accept incoming gRIBI packets with destination-port 57401",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 57401
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 360,
|
|
"description": "Accept incoming p4rt packets with destination-port 9559",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 9559
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 370,
|
|
"description": "Accept incoming IGMP packets",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "igmp"
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 380,
|
|
"description": "Accept incoming PIM packets",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "pim"
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 390,
|
|
"description": "Accept incoming RADIUS AAA packets",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "udp",
|
|
"source-port": {
|
|
"range": {
|
|
"start": 1812,
|
|
"end": 1813
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 400,
|
|
"description": "Accept incoming NETCONF messages with destination-port 830",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"protocol": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 830
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 410,
|
|
"description": "Drop all else",
|
|
"action": {
|
|
"drop": {
|
|
"log": true
|
|
}
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"ipv6-filter": {
|
|
"statistics-per-entry": true,
|
|
"entry": [
|
|
{
|
|
"sequence-id": 10,
|
|
"description": "Accept incoming ICMPv6 unreachable messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "dest-unreachable",
|
|
"code": [
|
|
0,
|
|
1,
|
|
2,
|
|
3,
|
|
4,
|
|
5,
|
|
6
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 20,
|
|
"description": "Accept incoming ICMPv6 packet-too-big messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "packet-too-big"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 30,
|
|
"description": "Accept incoming ICMPv6 time-exceeded messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "time-exceeded"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 40,
|
|
"description": "Accept incoming ICMPv6 parameter problem messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "param-problem"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 50,
|
|
"description": "Accept incoming ICMPv6 echo-request messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "echo-request"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 60,
|
|
"description": "Accept incoming ICMPv6 echo-reply messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "echo-reply"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 70,
|
|
"description": "Accept incoming ICMPv6 router-advertisement messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "router-advertise"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 80,
|
|
"description": "Accept incoming ICMPv6 neighbor-solicitation messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "neighbor-solicit"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 90,
|
|
"description": "Accept incoming ICMPv6 neighbor-advertisement messages",
|
|
"action": {
|
|
"accept": {
|
|
"rate-limit": {
|
|
"system-cpu-policer": "icmp"
|
|
}
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "neighbor-advertise"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 100,
|
|
"description": "Accept incoming SSH when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 22
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 110,
|
|
"description": "Accept incoming SSH when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 22
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 120,
|
|
"description": "Accept incoming Telnet when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 23
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 130,
|
|
"description": "Accept incoming Telnet when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 23
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 140,
|
|
"description": "Accept incoming TACACS+ when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 49
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 150,
|
|
"description": "Accept incoming TACACS+ when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 49
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 160,
|
|
"description": "Accept incoming DNS response messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 53
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 170,
|
|
"description": "Accept incoming TFTP read-request and write-request messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 69
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 180,
|
|
"description": "Accept incoming HTTP(JSON-RPC) when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 80
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 190,
|
|
"description": "Accept incoming HTTP(JSON-RPC) when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 80
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 200,
|
|
"description": "Accept incoming NTP messages from servers",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 123
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 210,
|
|
"description": "Accept incoming SNMP GET/GETNEXT messages from servers",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 161
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 220,
|
|
"description": "Accept incoming BGP when the other router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 179
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 230,
|
|
"description": "Accept incoming BGP when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 179
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 240,
|
|
"description": "Accept incoming HTTPS(JSON-RPC) when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 443
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 250,
|
|
"description": "Accept incoming HTTPS(JSON-RPC) when this router initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"source-port": {
|
|
"operator": "eq",
|
|
"value": 443
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 260,
|
|
"description": "Accept incoming DHCPv6 client messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 546
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 270,
|
|
"description": "Accept incoming single-hop BFD session messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 3784
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 280,
|
|
"description": "Accept incoming multi-hop BFD session messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 4784
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 290,
|
|
"description": "Accept incoming uBFD session messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 6784
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 300,
|
|
"description": "Accept incoming gNMI messages when the other host initiates the TCP connection",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 57400
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 310,
|
|
"description": "Accept incoming UDP traceroute messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"destination-port": {
|
|
"range": {
|
|
"start": 33434,
|
|
"end": 33464
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 320,
|
|
"description": "Accept incoming IPV6 hop-in-hop messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": 0
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 330,
|
|
"description": "Accept incoming IPV6 fragment header messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": 44
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 340,
|
|
"description": "Accept incoming OSPF messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": 89
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 350,
|
|
"description": "Accept incoming DHCPv6 relay messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 547
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 360,
|
|
"description": "Accept incoming gRIBI packets with destination-port 57401",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 57401
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 370,
|
|
"description": "Accept incoming p4rt packets with destination-port 9559",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 9559
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 380,
|
|
"description": "Accept incoming MLDv1 report messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "mld-report"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 390,
|
|
"description": "Accept incoming MLDv2 report messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "mld-v2"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 400,
|
|
"description": "Accept incoming MLDv1 done messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "mld-done"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 410,
|
|
"description": "Accept incoming MLD query messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "icmp6",
|
|
"icmp6": {
|
|
"type": "mld-query"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 420,
|
|
"description": "Accept incoming PIM messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "pim"
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 430,
|
|
"description": "Accept incoming RADIUS AAA messages",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "udp",
|
|
"source-port": {
|
|
"range": {
|
|
"start": 1812,
|
|
"end": 1813
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 440,
|
|
"description": "Accept incoming NETCONF messages with destination-port 830",
|
|
"action": {
|
|
"accept": {
|
|
|
|
}
|
|
},
|
|
"match": {
|
|
"next-header": "tcp",
|
|
"destination-port": {
|
|
"operator": "eq",
|
|
"value": 830
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"sequence-id": 450,
|
|
"description": "Drop all else",
|
|
"action": {
|
|
"drop": {
|
|
"log": true
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"policers": {
|
|
"system-cpu-policer": [
|
|
{
|
|
"name": "icmp",
|
|
"entry-specific": false,
|
|
"peak-packet-rate": 1000,
|
|
"max-packet-burst": 1000
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"srl_nokia-interfaces:interface": [
|
|
{
|
|
"name": "ethernet-1/1",
|
|
"admin-state": "enable"
|
|
},
|
|
{
|
|
"name": "ethernet-1/2",
|
|
"admin-state": "enable"
|
|
},
|
|
{
|
|
"name": "ethernet-1/3",
|
|
"admin-state": "enable"
|
|
},
|
|
{
|
|
"name": "mgmt0",
|
|
"admin-state": "enable",
|
|
"subinterface": [
|
|
{
|
|
"index": 0,
|
|
"admin-state": "enable",
|
|
"ip-mtu": 1500,
|
|
"ipv4": {
|
|
"admin-state": "enable",
|
|
"srl_nokia-interfaces-ip-dhcp:dhcp-client": {
|
|
|
|
}
|
|
},
|
|
"ipv6": {
|
|
"admin-state": "enable",
|
|
"srl_nokia-interfaces-ip-dhcp:dhcp-client": {
|
|
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"srl_nokia-system:system": {
|
|
"srl_nokia-aaa:aaa": {
|
|
"authentication": {
|
|
"idle-timeout": 7200,
|
|
"authentication-method": [
|
|
"local"
|
|
],
|
|
"linuxadmin-user": {
|
|
"password": "$6$r7GFZ/boZ.FHh$NbZygnGHaPE6reQwZpjBzTZ4.4j/x4LX2Aa4AzupPsIYzyF.kJQwHMaoPENZX09Qzn5OTasSnJkFhIzp3OT88."
|
|
}
|
|
},
|
|
"server-group": [
|
|
{
|
|
"name": "local",
|
|
"type": "srl_nokia-aaa-types:local"
|
|
}
|
|
]
|
|
},
|
|
"srl_nokia-lldp:lldp": {
|
|
"admin-state": "enable"
|
|
},
|
|
"srl_nokia-gnmi-server:gnmi-server": {
|
|
"admin-state": "enable",
|
|
"rate-limit": 65000,
|
|
"trace-options": [
|
|
"request",
|
|
"response",
|
|
"common"
|
|
],
|
|
"network-instance": [
|
|
{
|
|
"name": "mgmt",
|
|
"admin-state": "enable",
|
|
"tls-profile": "clab-profile"
|
|
}
|
|
],
|
|
"unix-socket": {
|
|
"admin-state": "enable"
|
|
}
|
|
},
|
|
"srl_nokia-tls:tls": {
|
|
"server-profile": [
|
|
{
|
|
"name": "clab-profile",
|
|
"key": "$aes$fAGSx/mtJ07o=$gsLnoBdIKGri+sJZBLgxeX9r2yCW5g2hoAnUuGBkIcPgv29A9G3pIh1Nd2Fw5AREg9TLJfixTtbRPnatOSezO3ffu76OauB+1aYZlLSKhiGgLVW2bLNjzp1gYZA9wwp+ShdHfNRv/l4eY5yquvMBcNr93Wtrsb++zbQjo8AKVszbGgliVNIpGkUUWP2bvuSay/rOR/sX/pX79Hh/MFZ8TxliGv3O5evbnsgeMb8sVF8GVn9uyAj9pr4nikyWq1KYzsuAmH70k+ImYcOxKwDHZ+vLGoZQvOLt2h4vn2IWNE4GbgDyNVszYeeJePe3tSMFnRSNXvqjGRKhfWd0rShkWpYBJzm8qqecSXpSP67djiFjEO1gsLZqrNEobWq2bz32f94oNPOqPw0z31ujxgCiBllfz4sSZ/h+eHr6/BcYwDdy+CwXG/sExGsF+iFYUxYHkz1XpRcLnpYNKyNoBJcfQCUZAHRBlfnFi3LEy3eWcVl1dOSG+v0bafMqt3rD9EU8eMfL73cFgnPa/jXTTm2ht/Ka4CZeR1vnuA8skuFwxZ6askezH0WRzcC2SH5meSthqTIz8u+QjR1xUxBDwnwXU5zp1iespapivMvA5VuFPbaom1n/jF9Kq6dTiT1Q1m2GeSD6OVHBMkwcpwi56jYFjO/6oFaL2kz2fqpexWmenmT4Zq4FWWDq/Eh6gnbcwNwMHO/lB3J4r6Gu8Fjov9yUYeSYDTQtY+vZLHmlAgZ3HApDO8HhIpUIQdFxjvVXXG+6zArFE5toeHx1rN6xnjrpbSKdb7V7qhoi/6+0b/W+Jl7hk2lpOadV18sseVbYRHeKXN4qbsm+CScTqK1hT/a/LdSF8oFVRGoWpjLvgpyN6QgNUVGR0yLOxMSmzxgqbp2Pw8h39uJTSObiIfAp9vXi3OlAx8dJGLsx2UkAIKlP6QVlC3gxEYB7uDSo5KheakNAR2fGh77S9LIAbudaZsnq7vJLWyQZDS1xSMSqzEtq9NLVFSnT7baO+qPn8j53If/lELOB6zksTZ9DnldodTjRTV3JnxVYepdO4bR/iY8QfP5VS/cyPIPEKjeXQ9CLb6deXpSq16ANl16W536tNZoyDSAn9eXbQ4q3ZRv8JQMeSpe8HrwXAvIDIk4Cl1wdF575Xs56N+reqYjpFaQspAuxTbliF/eQfeZ1P79bspMDJ22YZvZMORJ2q2437aH6voeSlUismym9g21BnFVMqucr04qTtqIKFfF10j2DMfsCrPofQHlI3u6BL8zAnx3I8OoSCdAJIbkmVSPeObe2Tds1qyxo7MwHrTDWunPO5hEJLyNWrGIGi7aXV/O/bzuunmrXGRwhlffgjHTh4A4ZdsS6r+J7n8UQ3/MGBFj3p1LL0ENjcFrPOcjVCOY9p5y8BK+mC/RfXYG0Pj9cZ5dEZWVWbdOTiKK99iP7bJatG9/5NTJdDNY0Utde9I//02LCgInD7scjo/NG8KdmkeRfUpbEVA9BB+QW/lriL5Tlrhgxuh+gFROsfcPkcFnBRyib/hp77zSN51iP+0GPQJufDPLgQ7Git8Kaut28BdAW+nqW7KgGlvIPga7bWDBM0uYgwYf2Vv5l503JuyF6BjZ4ls5Ceii9w3rIJihw0u80981VXIdp/HqxRvGQgEkdD+Xf8JYuomkHXaihwERKXvmc0oppGI34xbfsRmggShKiMSLXY1ZLCcCpDIBaedYZ5H/faMaS2mZerD0Q8pQHGZxwT8CU8KIqjLfY1kFnWLnHSS7PXOdNR2mttdrRSLDBE9I7ldUX8O0oseEM0iZlq50E/ikCf291KAlDUUZ+c/KgFuSS2bvsHVdOjNmuQPRtr84iOCcSbzEC1ZFhX/Sd1bqzeWIUWTIwbEScUUywgR/EYYIuqN62TAGfSFxiCkoDnDobpi9Opt0VRfM+6oSWt8ACxWhpzGGqTz29ab9KVwQrkeEPM1f8sCgnwCgYWPgTWgK8PFfxaFa95Hj9EBs/jd8Rju7t3POd5+EOlETeguMgtS7O1/HyXydKlR3sV8vAnpuS0nZmR0ZHYpF5difPktGOXgwrqN5LlRKGMTBpe1Kv5i63NJloTHYQee7OXqVEErYPQmks+wkYb7rVaR0wBLpr5/ur/AtdtmQvz33w87HXHlOtvfRQ7t+kjpWKZ+kdXuudohZBFYJahUzJYXlNeCibUeVXTGXxQW+Vv3dZTMOZMwF+JM5A55bvt0jXLhI9iIYzGP0L",
|
|
"certificate": "-----BEGIN CERTIFICATE-----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\nSNQdMw==\n-----END CERTIFICATE-----\n",
|
|
"authenticate-client": false
|
|
}
|
|
]
|
|
},
|
|
"srl_nokia-json-rpc:json-rpc-server": {
|
|
"admin-state": "enable",
|
|
"network-instance": [
|
|
{
|
|
"name": "mgmt",
|
|
"http": {
|
|
"admin-state": "enable"
|
|
},
|
|
"https": {
|
|
"admin-state": "enable",
|
|
"tls-profile": "clab-profile"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"srl_nokia-dns:dns": {
|
|
"network-instance": "mgmt",
|
|
"server-list": [
|
|
"172.29.144.1"
|
|
]
|
|
},
|
|
"srl_nokia-ssh:ssh-server": {
|
|
"network-instance": [
|
|
{
|
|
"name": "mgmt",
|
|
"admin-state": "enable"
|
|
}
|
|
]
|
|
},
|
|
"srl_nokia-snmp:snmp": {
|
|
"community": "$aes$6U8ijoBpHxFk=$CJg9kMnOQ/mjxDcDA1cFhw==",
|
|
"network-instance": [
|
|
{
|
|
"name": "mgmt",
|
|
"admin-state": "enable"
|
|
}
|
|
]
|
|
},
|
|
"srl_nokia-system-banner:banner": {
|
|
"login-banner": "................................................................\n: Welcome to Nokia SR Linux! :\n: Open Network OS for the NetOps era. :\n: :\n: This is a freely distributed official container image. :\n: Use it - Share it :\n: :\n: Get started: https://learn.srlinux.dev :\n: Container: https://go.srlinux.dev/container-image :\n: Docs: https://doc.srlinux.dev/23-7 :\n: Rel. notes: https://doc.srlinux.dev/rn23-7-1 :\n: YANG: https://yang.srlinux.dev/release/v23.7.1 :\n: Discord: https://go.srlinux.dev/discord :\n: Contact: https://go.srlinux.dev/contact-sales :\n................................................................\n"
|
|
},
|
|
"srl_nokia-logging:logging": {
|
|
"buffer": [
|
|
{
|
|
"buffer-name": "messages",
|
|
"rotate": 3,
|
|
"size": "10000000",
|
|
"facility": [
|
|
{
|
|
"facility-name": "local6",
|
|
"priority": {
|
|
"match-above": "informational"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"buffer-name": "system",
|
|
"facility": [
|
|
{
|
|
"facility-name": "auth",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "cron",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "daemon",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "ftp",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "kern",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "lpr",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "mail",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "news",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "syslog",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "user",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "uucp",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "local0",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "local1",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "local2",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "local3",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "local4",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "local5",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
},
|
|
{
|
|
"facility-name": "local7",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"file": [
|
|
{
|
|
"file-name": "messages",
|
|
"rotate": 3,
|
|
"size": "10000000",
|
|
"facility": [
|
|
{
|
|
"facility-name": "local6",
|
|
"priority": {
|
|
"match-above": "warning"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"srl_nokia-network-instance:network-instance": [
|
|
{
|
|
"name": "mgmt",
|
|
"type": "srl_nokia-network-instance:ip-vrf",
|
|
"admin-state": "enable",
|
|
"description": "Management network instance",
|
|
"interface": [
|
|
{
|
|
"name": "mgmt0.0"
|
|
}
|
|
],
|
|
"protocols": {
|
|
"srl_nokia-linux:linux": {
|
|
"import-routes": true,
|
|
"export-routes": true,
|
|
"export-neighbors": true
|
|
}
|
|
}
|
|
}
|
|
]
|
|
} |