version 6.2R2.4;
groups {
    external-peers;
}
system {
    host-name P2A;
    root-authentication {
        encrypted-password "$1$EYEfNq6w$BdzFKoWvwZS0Bl/oiwE2j0"; # SECRET-DATA
    }
    login {
        user ws {
            full-name Workshop;
            uid 2002;
            class super-user;
            authentication {
                encrypted-password "$1$AtNyeJ7Q$4iPmRAnrvMz59O/JHLlGg0"; # SECRET-DATA
            }
        }
    }
    services {
        ssh;
        telnet;
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
    }
}
interfaces {
    fe-1/0/0 {
        description "To P3 - Border B fa0/0";
        unit 0 {
            family inet {
                address 140.221.203.17/30;
            }
        }
    }
    fe-1/0/1 {
        description "To P2 - Core C fa0/0";
        unit 0 {
            family inet {
                address 140.221.202.25/30;
            }
        }
    }
    fe-1/0/3 {
        description "EXTERNAL INTERFACE";
        unit 0 {
            family inet {
                address 140.221.205.6/30;
            }
        }
    }
    fxp0 {
        disable;
    }
    lo0 {
        description "P2 - Border A";
        unit 0 {
            family inet {
                address 140.221.202.1/32;
            }
        }
    }
}
routing-options {
    interface-routes {
        rib-group inet ifrg;
    }
    rib inet.0 {
        aggregate {
            route 140.221.202.0/24;
        }
    }
    rib inet.2 {
        aggregate {
            route 140.221.202.0/24;
        }
    }
    static {
        route 0.0.0.0/0 next-hop 140.221.205.5;
    }
    rib-groups {
        ifrg {
            import-rib [ inet.0 inet.2 ];
        }
        igp-rg {
            export-rib inet.0;
            import-rib [ inet.0 inet.2 ];
        }
        pim-rg {
            export-rib inet.2;
            import-rib inet.2;
        }
    }
    router-id 140.221.202.1;
    autonomous-system 65502;
}
protocols {
    igmp {
        interface fxp0.0 {
            disable;
        }
    }
    bgp {
        family inet {
            unicast;
        }
        group iBGP-mesh {
            type internal;
            local-address 140.221.202.1;
            family inet {
                any;
            }
            export set-nexthop-self;
            local-as 65502;
            neighbor 140.221.202.2;
            neighbor 140.221.202.3;
        }
        group external-peers {
            type external;
            import transit-others;
            family inet {
                any;
            }
            export [ announce-our-block transit-others ];
            local-as 65502;
            neighbor 140.221.203.18 {
                description "Pod 3 Border B";
                local-address 140.221.203.17;
                peer-as 65503;
            }
        }
    }
    ospf {
        rib-group igp-rg;
        export default-into-ospf;
        area 0.0.0.0 {
            interface lo0.0 {
                passive;
            }
            interface fe-1/0/0.0 {
                passive;
            }
            interface fe-1/0/3.0 {
                passive;
            }
            interface fe-1/0/1.0;
        }
    }
    pim {
        rib-group inet pim-rg;
        import pim-join-filter;
        rp {
            bootstrap-import bsr-import-filter;
            bootstrap-export bsr-export-filter;
            static {
                address 140.221.202.6;
            }
        }
        interface all {
            mode sparse;
            version 2;
        }
        interface fxp0.0 {
            disable;
        }
    }
}
policy-options {
    policy-statement default-into-ospf {
        term default {
            from {
                protocol static;
                route-filter 0.0.0.0/0 exact;
            }
            then accept;
        }
        term nope {
            then reject;
        }
    }
    policy-statement set-nexthop-self {
        then {
            next-hop self;
            accept;
        }
    }
    policy-statement announce-our-block {
        term announce-202 {
            from {
                protocol aggregate;
                route-filter 140.221.202.0/24 exact;
            }
            then accept;
        }
    }
    policy-statement transit-others {
        term 1 {
            from {
                protocol bgp;
                route-filter 140.221.201.0/24 orlonger;
                route-filter 140.221.203.0/24 orlonger;
                route-filter 140.221.204.0/24 orlonger;
            }
            then accept;
        }
        term reject-other {
            then reject;
        }
    }
    policy-statement bsr-import-filter {
        from interface fe-1/0/1.0;
        then reject;
    }
    policy-statement bsr-export-filter {
        from interface fe-1/0/1.0;
        then reject;
    }
    policy-statement pim-join-filter {
        term drop-groups {
            from {
                interface [ fe-1/0/3.0 fe-1/0/0.0 ];
                route-filter 239.0.0.0/32 exact;
            }
            then reject;
        }
        term drop-sources {
            from {
                source-address-filter 140.221.205.0/30 orlonger;
                source-address-filter 140.221.205.8/30 orlonger;
                source-address-filter 140.221.205.12/30 orlonger;
            }
        }
        term last {
            then accept;
        }
        then reject;
    }
}