system {
  host-name edge2.ussfo03;
  domain-name blade-group.net;
  time-zone UTC;
  location country-code US;
  ports {
    console {
      log-out-on-disconnect;
      type vt100;
    }
  }
}

system {
  replace: root-authentication {
    encrypted-password "$5$......"; ## SECRET-DATA
  }
  services {
    replace: ssh {
      authentication-order password;
      root-login deny;
      protocol-version v2;
      connection-limit 10;
      rate-limit 10;
    }
    replace: netconf {
       ssh;
    }
  }
  replace: login {
    message "______ _           _\n| ___ \\ |         | |\n| |_/ / | __ _  __| | ___      This is a private system.\n| ___ \\ |/ _` |/ _` |/ _ \\     Use by unauthorized persons is prohibited.\n| |_/ / | (_| | (_| |  __/     Go away.\n\\____/|_|\\__,_|\\__,_|\\___|\n";
    retry-options {
      tries-before-disconnect 3;
      backoff-threshold 3;
      backoff-factor 5;
      maximum-time 20;
    }
    class backup {
      permissions [ secret view view-configuration ];
    }
    user roger {
      class super-user;
      authentication {
        ssh-rsa "ssh-rsa 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 roger";
      }
    }
    user alfred {
      class super-user;
      authentication {
        ssh-rsa "ssh-rsa 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 alfred";
      }
    }
    user blade {
      class super-user;
      authentication {
        encrypted-password "$5$.............."; ## SECRET-DATA
      }
    }
  }
}

system {
  replace: ntp {
    server 172.30.20.4;
    server 172.30.20.5;
  }
  replace: name-server {
    172.30.20.2;
    172.30.20.3;
  }
  replace: syslog {
    archive size 10m files 10 world-readable;
    user * {
      any emergency;
    }
    host 172.30.20.9 {
      any warning;
      authorization notice;
      firewall any;
      interactive-commands any;
      port 514;
      source-address 172.30.24.2;
      structured-data;
    }
    host 172.30.20.10 {
      any warning;
      authorization notice;
      firewall any;
      interactive-commands any;
      port 514;
      source-address 172.30.24.2;
      structured-data;
    }
    file * {
      user emergency;
    }
    file messages {
      any any;
      authorization none;
      firewall none;
      change-log notice;
      interactive-commands none;
      match "!(Virtual Chassis Fabric usage requires a license|Receive FX craftd set alarm message|color: 2 class: 50 object: 50 slot: 126 id=0 reason=168|downward spike received from pfe for ibytes_reply)";
      archive size 1m files 10;
      explicit-priority;
    }
    file interactive-commands {
      interactive-commands any;
    }
    file updown {
      any info;
      match "LINK_DOWN|LINK_UP";
    }
    file interfaces {
      any info;
      daemon info;
      match .*SNMP_TRAP_LINK.*;
      archive size 1m files 10;
      explicit-priority;
    }
    file security {
      authorization info;
      interactive-commands info;
      explicit-priority;
    }
    file default-log-messages {
      any any;
      structured-data;
    }
    file filter {
      firewall any;
      explicit-priority;
    }
    file commands {
      interactive-commands info;
      explicit-priority;
    }
    file console {
      any critical;
      authorization info;
    }
    console {
      authorization info;
    }
    time-format year millisecond;
  }
}
chassis {
  alarm {
    management-ethernet {
      link-down ignore;
    }
  }
}

snmp {
  location "San Francisco, US";
  community 67dskf8fds78fdn authorization read-only;
  routing-instance-access;
}

protocols {
    lldp {
      port-id-subtype interface-name;
      port-description-type interface-alias;
    }
}
