system { host-name Taccess00; root-authentication { encrypted-password "$2b$05$3h26h8rJ5yks1vJYXZG.fuHagYBwrVMlGR7iFmsV1FTJlMUj97fl2"; ## SECRET-DATA ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcEkYM1r8QVNM/G5CxJInEdoBCWjEHHDdHlzDYNSUIdHHsn04QY+XI67AdMCm8w30GZnLUIj5RiJEWXREUApby0GrfxGGcy8otforygfgtmuUKAUEHdU2MMwrQI7RtTZ8oQ0USRGuqvmegxz3l5caVU7qGvBllJ4NUHXrkZSja2/51vq80RF4MKkDGiz7xUTixI2UcBwQBCA/kQedKV9G28EH+1XfvePqmMivZjl+7VyHsgUVj9eRGA1XWFw59UPZG8a7VkxO/Eb3K9NF297HUAcFMcbY6cPFi9AaBgu3VC4eetDnoN/+xT1owiHi7BReQhGAy/6cdf7C/my5ehZwD foo@bar"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFfIJ8BToZ9EDxBsEJXQhUju7gm+rUDjGCNMvFSZCl1o openpgp:0x5CADCA1B"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICdOxx4I8BSbYPdouvuzDepwTwzQzGSBCNIV8TB5dduT openpgp:0xF6018131"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+EZXYziiaynJX99EW8KesnmRTZMof3BoIs3mdEl8L3 foo@bar"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHL4M4HKjs4cjRAYRk9pmmI8U0R4+T/jQh6Fxp/i1Eoy foo@bar"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPM1jpXR7BWQa7Sed7ii3SbvIPRRlKb3G91qC0vOwfJn foo@bar"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE0xMwWedkKosax9+7D2OlnMxFL/eV4CvFZLsbLptpXr foo@bar"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKiXXYkhRh+s7ixZ8rvG8ntIqd6FELQ9hh7HoaHQJRPU foo@bar"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEpwF+XD3HgX64kqD42pcEZRNYAWoO4YNiOm5KO4tH6o maurice@polaris"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFdDnSl3cyWil+S5JiyGqOvBR3wVh+lduw58S5WvraoL maurice@fekda"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIGmU7yEOCGuGNt4PlQbzd0Cms1RePpo8yEA7Ij/+TdA foo@bar"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDz9zePZXeH96RotT+xl4ux2kOh3qIp94txtcMjsf3vx foo@bar"; ## SECRET-DATA ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIBicEt7xV6tjMURJO/dXbxF0VGE3RtxuFaE7ba+1qSN root@elnath"; ## SECRET-DATA } services { netconf { ssh { port 830; } rfc-compliant; yang-compliant; } ssh { root-login deny-password; allow-tcp-forwarding; sftp-server; } } auto-snapshot; syslog { file interactive-commands { interactive-commands any; } file messages { any notice; authorization info; } } processes { dhcp-service { traceoptions { file dhcp_logfile size 10m; level all; flag packet; } } } phone-home { server https://redirect.juniper.net; rfc-compliant; } } chassis { redundancy { graceful-switchover; } } interfaces { ge-0/0/0 { disable; } ge-0/0/1 { disable; } ge-0/0/2 { disable; } ge-0/0/3 { disable; } ge-0/0/4 { disable; } ge-0/0/5 { disable; } ge-0/0/6 { disable; } ge-0/0/7 { disable; } ge-0/0/8 { disable; } ge-0/0/9 { disable; } ge-0/0/10 { disable; } ge-0/0/11 { disable; } ge-0/0/12 { disable; } ge-0/0/13 { disable; } ge-0/0/14 { disable; } ge-0/0/15 { disable; } ge-0/0/16 { disable; } ge-0/0/17 { disable; } ge-0/0/18 { disable; } ge-0/0/19 { disable; } ge-0/0/20 { disable; } ge-0/0/21 { disable; } ge-0/0/22 { disable; } ge-0/0/23 { disable; } ge-0/0/24 { disable; } ge-0/0/25 { disable; } ge-0/0/26 { disable; } ge-0/0/27 { disable; } ge-0/0/28 { disable; } ge-0/0/29 { disable; } ge-0/0/30 { disable; } ge-0/0/31 { disable; } ge-0/0/32 { disable; } ge-0/0/33 { disable; } ge-0/0/34 { disable; } ge-0/0/35 { disable; } ge-0/0/36 { disable; } ge-0/0/37 { disable; } ge-0/0/38 { disable; } ge-0/0/39 { disable; } ge-0/0/40 { disable; } ge-0/0/41 { disable; } ge-0/0/42 { disable; } ge-0/0/43 { disable; } ge-0/0/44 { description AP_IR4_1; native-vlan-id 2000; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ admin-ap apro wifi-user ]; } storm-control default; } } } ge-0/0/45 { description AP_IR4_2; native-vlan-id 2000; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ admin-ap apro wifi-user ]; } storm-control default; } } } ge-0/0/46 { description AP_IR4_3; native-vlan-id 2000; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ admin-ap apro wifi-user ]; } storm-control default; } } } ge-0/0/47 { description AP_IR4_4; native-vlan-id 2000; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ admin-ap apro wifi-user ]; } storm-control default; } } } et-0/1/0 { disable; } ge-0/1/0 { disable; } xe-0/1/0 { disable; } et-0/1/1 { disable; } ge-0/1/1 { disable; } xe-0/1/1 { disable; } et-0/1/2 { disable; } ge-0/1/2 { disable; } xe-0/1/2 { disable; } et-0/1/3 { disable; } ge-0/1/3 { disable; } xe-0/1/3 { disable; } ge-0/2/0 { disable; } xe-0/2/0 { description netcore03; native-vlan-id 2000; unit 0 { family ethernet-switching { interface-mode trunk; vlan { members [ admin admin-ap apro wifi-user ]; } storm-control default; } } } ge-0/2/1 { disable; } xe-0/2/1 { disable; } ge-0/2/2 { disable; } xe-0/2/2 { disable; } ge-0/2/3 { disable; } xe-0/2/3 { disable; } irb { unit 0 { description Admin; family inet { address 10.0.255.158/24; } } } me0 { unit 0 { family inet { address 192.168.42.6/24; } } } } snmp { filter-interfaces; community public { authorization read-only; } } forwarding-options { storm-control-profiles default { all; } } protocols { router-advertisement { interface vme.0 { managed-configuration; } interface irb.0 { managed-configuration; } } lldp { interface all; } lldp-med { interface all; } igmp-snooping { vlan default; } rstp { interface ge-0/0/44; interface ge-0/0/45; interface ge-0/0/46; interface ge-0/0/47; interface xe-0/2/0; } } poe { interface ge-0/0/0 { disable; } interface ge-0/0/1 { disable; } interface ge-0/0/10 { disable; } interface ge-0/0/11 { disable; } interface ge-0/0/12 { disable; } interface ge-0/0/13 { disable; } interface ge-0/0/14 { disable; } interface ge-0/0/15 { disable; } interface ge-0/0/16 { disable; } interface ge-0/0/17 { disable; } interface ge-0/0/18 { disable; } interface ge-0/0/2 { disable; } interface ge-0/0/24 { disable; } interface ge-0/0/25 { disable; } interface ge-0/0/26 { disable; } interface ge-0/0/27 { disable; } interface ge-0/0/28 { disable; } interface ge-0/0/29 { disable; } interface ge-0/0/3 { disable; } interface ge-0/0/30 { disable; } interface ge-0/0/31 { disable; } interface ge-0/0/32 { disable; } interface ge-0/0/33 { disable; } interface ge-0/0/34 { disable; } interface ge-0/0/35 { disable; } interface ge-0/0/36 { disable; } interface ge-0/0/37 { disable; } interface ge-0/0/38 { disable; } interface ge-0/0/39 { disable; } interface ge-0/0/4 { disable; } interface ge-0/0/40 { disable; } interface ge-0/0/41 { disable; } interface ge-0/0/42 { disable; } interface ge-0/0/44; interface ge-0/0/45; interface ge-0/0/46; interface ge-0/0/47; interface ge-0/0/5 { disable; } interface ge-0/0/6 { disable; } interface ge-0/0/7 { disable; } interface ge-0/0/8 { disable; } interface ge-0/0/9 { disable; } } vlans { admin { vlan-id 3000; l3-interface irb.0; } admin-ap { vlan-id 3001; } apro { vlan-id 2000; } wifi-user { vlan-id-list 3245-4094; } }