version 6.2R2.4; system { host-name P4A; root-authentication { encrypted-password "$1$GTfZ1K9U$T7mPsFdg7scKVpSL2jixy/"; # SECRET-DATA } login { user ws { full-name Workshop; uid 2000; class super-user; authentication { encrypted-password "$1$bkok2WBa$.uuMyvqsYeLgOL0HiZsid/"; # SECRET-DATA } } } services { ssh; telnet; } syslog { user * { any emergency; } file messages { any notice; authorization info; } } } interfaces { fe-0/0/0 { description "To P1 - Border B fa0/0"; unit 0 { family inet { address 140.221.201.17/30; } } } fe-0/0/1 { description "To P4 - Core C fa0/0"; unit 0 { family inet { address 140.221.204.25/30; } } } fe-0/0/3 { description "EXTERNAL INTERFACE"; unit 0 { family inet { address 140.221.205.14/30; } } } gr-0/2/0 { description "TUNNEL to ANL"; unit 0 { tunnel { source 206.196.178.94; destination 192.5.170.4; } family inet; } } fxp0 { disable; } lo0 { description "P4 - Border A"; unit 0 { family inet { address 140.221.204.1/32; } } } } routing-options { interface-routes { rib-group inet ifrg; } rib inet.0 { aggregate { route 140.221.204.0/24; } } rib inet.2 { aggregate { route 140.221.204.0/24; } } static { route 0.0.0.0/0 next-hop 140.221.205.13; } rib-groups { ifrg { import-rib [ inet.0 inet.2 ]; } igp-rg { export-rib inet.0; import-rib [ inet.0 inet.2 ]; } pim-rg { export-rib inet.2; import-rib inet.2; } } router-id 140.221.204.1; autonomous-system 65504; } protocols { bgp { family inet { unicast; multicast; } group iBGP-mesh { type internal; local-address 140.221.204.1; export set-nexthop-self; local-as 65504; neighbor 140.221.204.2; neighbor 140.221.204.3; } group external-peers { type external; import transit-others; export [ announce-our-block transit-others ]; local-as 65504; neighbor 140.221.201.18 { description "Pod 1 Border B"; local-address 140.221.201.17; peer-as 65501; } } } ospf { rib-group igp-rg; export default-into-ospf; area 0.0.0.0 { interface fe-0/0/1.0; interface lo0.0 { passive; } interface fe-0/0/0.0 { passive; } interface fe-0/0/3.0 { passive; } } } pim { rib-group inet pim-rg; rp { bootstrap-import NO-BSR-IN; bootstrap-export NO-BSR-OUT; static { address 140.221.204.6; } } interface fe-0/0/1.0 { mode sparse; version 2; } interface fe-0/0/0.0 { mode sparse; version 2; } interface fe-0/0/3.0 { mode sparse; version 2; } } } policy-options { policy-statement default-into-ospf { term default { from { protocol static; route-filter 0.0.0.0/0 exact; } then accept; } term nope { then reject; } } policy-statement set-nexthop-self { then { next-hop self; accept; } } policy-statement announce-our-block { term announce-204 { from { protocol aggregate; route-filter 140.221.204.0/24 exact; } then accept; } } policy-statement transit-others { term 1 { from { protocol bgp; route-filter 140.221.201.0/24 orlonger; route-filter 140.221.202.0/24 orlonger; route-filter 140.221.203.0/24 orlonger; } then accept; } term reject-other { then reject; } } policy-statement NO-BSR-IN { term REJECT-ALL { then reject; } } policy-statement NO-BSR-OUT { term REJECT-ALL { then reject; } } }