system { host-name P3A; ports { console type vt100; } root-authentication { encrypted-password "$1$HT42ec7l$o9pN839wUqKgCf1pnKm0x1"; # SECRET-DATA } login { user ws { uid 2002; class superuser; authentication { encrypted-password "$1$1Ee4ifXk$vMwemSExStKqvjKfj7Ggu0"; # SECRET-DATA } } } services { ftp; ssh { protocol-version [ v2 v1 ]; } telnet; } syslog { user * { any emergency; } file messages { any notice; authorization info; } } } interfaces { fe-0/0/0 { description "To P4B eth fa0/0 via hub"; unit 0 { family inet { address 140.221.204.17/30; } } } fe-0/0/1 { description "To P3C fa0/0"; unit 0 { family inet { address 140.221.203.25/30; } } } fe-0/0/3 { description "To External Router"; unit 0 { family inet { address 140.221.205.10/30; } } } lo0 { unit 0 { family inet { address 140.221.203.1/32; } } } } routing-options { interface-routes { rib-group inet ifrg; } rib inet.0 { aggregate { route 140.221.203.0/24; } } static { route 0.0.0.0/0 next-hop 140.221.205.9; } rib-groups { ifrg { import-rib inet.0; } igp-rg { export-rib inet.0; import-rib inet.0; } } router-id 140.221.203.1; autonomous-system 65503; } protocols { bgp { family inet { unicast; } group iBGP-mesh { type internal; local-address 140.221.203.1; export set-nexthop-self; local-as 65503; neighbor 140.221.203.2; neighbor 140.221.203.3; } group external-peers { type external; import transit-others; export [ announce-our-block transit-others ]; local-as 65503; neighbor 140.221.204.18 { description "Pod 4 Border B"; local-address 140.221.204.17; peer-as 65504; } } } ospf { export default-into-ospf; area 0.0.0.0 { interface fe-0/0/1.0; interface lo0.0 { passive; } interface fe-0/0/0.0 { passive; } interface fe-0/0/3.0 { passive; } } } } policy-options { policy-statement default-into-ospf { term default { from { protocol static; route-filter 0.0.0.0/0 exact; } then accept; } term nope { then reject; } } policy-statement set-nexthop-self { then { next-hop self; accept; } } policy-statement announce-our-block { term announce-203 { from { protocol aggregate; route-filter 140.221.203.0/24 exact; } then accept; } } policy-statement transit-others { term 1 { from { protocol bgp; route-filter 140.221.201.0/24 orlonger; route-filter 140.221.202.0/24 orlonger; route-filter 140.221.204.0/24 orlonger; } then accept; } term reject-other { then reject; } } }