Decommission asw-b-eqiad
Open, NormalPublic

Description

asw-b-eqiad is no more part of the prod infra and has been removed from monitoring.

Not sure if all the DCops steps are here but the gist is:

  • Deactivate from puppet puppetmaster1001:~$ sudo puppet node deactivate <fqdn>
  • Wipe asw-b-eqiad [Chris]
  • Remove mgmt DNS (merge https://gerrit.wikimedia.org/r/471783) [Arzhel]
  • Remove mgmt links (and console if any) [Chris]
  • Unrack asw-b-eqiad [Chris]
  • Update Netbox [Chris]
ayounsi created this task.Nov 5 2018, 8:56 PM
ayounsi triaged this task as Normal priority.
Restricted Application added a project: Operations. · View Herald TranscriptNov 5 2018, 8:56 PM

Mentioned in SAL (#wikimedia-operations) [2018-11-06T13:10:14Z] <XioNoX> zeroize asw-b-eqiad (decom) - T208788

ayounsi reassigned this task from ayounsi to Cmjohnson.Nov 6 2018, 1:14 PM
ayounsi updated the task description. (Show Details)
ayounsi updated the task description. (Show Details)Nov 6 2018, 1:40 PM

It looks like those switches are too old for the request system zeroize (Command introduced in Junos OS Release 11.2 for EX Series switches.)
https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/request-system-zeroize.html

The command exists but doesn't seem to do anything other than rebooting the stack.

@Cmjohnson, could you try the front LCD panel method from the following?
https://www.juniper.net/documentation/en_US/release-independent/junos/topics/task/configuration/ex-series-switch-default-factory-configuration-reverting.html

As a precautionary step, I set the root password to a dummy non prod one, removed the SNMP community, ensured no other passwords were on the device and did a file delete purge of all the previous configurations, on both master and backup nodes.

Cmjohnson moved this task from Backlog to Decommission on the ops-eqiad board.Nov 7 2018, 1:49 PM