test junos config
Cert-M20 (ttyp0)
login: login: jnpr
Password:
--- JUNOS 8.4B2.4 built 2007-06-08 00:31:45 UTC
jnpr@Cert-M20> show configuration | no-more
## Last commit: 2007-07-05 19:12:44 CST by jnpr
version 8.4B2.4;
groups {
lr-mpls-int {
logical-routers {
<*> {
interfaces {
<*> {
unit <*> {
family mpls;
}
}
<ge-*> {
unit <*> {
family mpls;
}
}
}
}
}
}
}
system {
host-name Cert-M20;
backup-router 172.27.10.129;
time-zone Asia/Shanghai;
saved-core-context;
internet-options {
no-tcp-rfc1323;
no-tcp-rfc1323-paws;
}
ports {
console type vt100;
auxiliary type vt100;
}
root-authentication {
encrypted-password BsQSaZ.1a3kfc; ## SECRET-DATA
}
radius-server {
10.0.1.2 secret "$9$LQQ7dsaZjP5F245Fn/0OX7-"; ## SECRET-DATA
}
login {
class ops {
permissions view;
}
user jnpr {
uid 2011;
class super-user;
authentication {
encrypted-password PHuyucTG.NjYk; ## SECRET-DATA
}
}
user juniper {
uid 2002;
class superuser;
authentication {
encrypted-password "$1$fTE4aVvP$u8euyzJMcJdVZ/AlBCNoj1"; ## SECRET-DATA
}
}
user lab {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$egKb445d$Ygcrc.fzXzxi0nw966brT1"; ## SECRET-DATA
}
}
user sdx {
full-name sdx;
uid 2010;
class super-user;
authentication {
encrypted-password "$1$3fcVkfnY$QIQBEXE.4DtSrEE5jqemV."; ## SECRET-DATA
}
}
}
services {
ftp;
ssh {
root-login allow;
protocol-version v2;
}
telnet;
}
compress-configuration-files;
}
logical-routers {
c1 {
interfaces {
fe-1/0/2 {
unit 10 {
vlan-id 10;
family inet {
address 172.16.0.6/30;
}
}
unit 20 {
vlan-id 20;
family inet {
address 172.16.0.10/30;
}
}
}
lo0 {
unit 200 {
family inet {
address 200.200.0.1/32;
}
}
}
}
protocols {
bgp {
group r4 {
type external;
multihop;
export r4;
peer-as 65412;
neighbor 10.0.3.4;
}
}
}
policy-options {
policy-statement null {
then reject;
}
policy-statement r4 {
term first {
from {
route-filter 200.200.0.0/16 exact;
}
then {
as-path-prepend "10458 14203 701 4230";
accept;
}
}
term second {
from {
protocol static;
route-filter 200.0.0.0/8 orlonger;
route-filter 32.0.0.0/8 longer;
route-filter 172.16.0.0/16 orlonger;
}
then {
as-path-prepend 65000;
accept;
}
}
}
}
routing-options {
static {
route 200.200.0.0/16 reject;
route 200.200.0.0/24 discard;
route 200.200.1.0/24 discard;
route 200.200.2.0/24 discard;
route 200.200.3.0/24 discard;
route 200.200.4.0/24 discard;
route 200.200.5.0/24 discard;
route 200.200.6.0/24 discard;
route 200.200.7.0/24 discard;
route 32.0.0.0/16 {
discard;
as-path {
path 420;
}
}
route 200.200.0.0/28 discard;
route 10.0.1.0/24 discard;
route 200.200.5.128/25 discard;
route 10.0.3.4/32 next-hop [ 172.16.0.5 172.16.0.9 ];
}
autonomous-system 65010;
}
}
c2 {
interfaces {
fe-1/0/2 {
unit 80 {
vlan-id 80;
family inet {
address 172.16.0.26/30;
}
}
}
lo0 {
unit 80 {
family inet {
address 201.201.0.1/32;
}
}
}
}
protocols {
bgp {
group r7 {
type external;
export r7;
neighbor 172.16.0.25 {
peer-as 65412;
}
}
}
}
policy-options {
policy-statement r7 {
term 1 {
from protocol static;
then {
as-path-prepend 65020;
accept;
}
}
term 2 {
from {
protocol direct;
route-filter 201.201.0.0/24 exact;
}
then accept;
}
}
}
routing-options {
static {
route 201.201.0.0/24 discard;
route 201.201.1.0/24 discard;
route 201.201.2.0/24 discard;
route 201.201.3.0/24 discard;
route 201.201.4.0/24 discard;
route 201.201.5.0/24 discard;
route 201.201.6.0/24 discard;
route 201.201.7.0/24 discard;
route 0.0.0.0/0 {
discard;
as-path {
path "62 39";
}
}
route 64.0.0.0/7 discard;
route 201.201.0.7/32 discard;
route 210.210.16.128/26 {
discard;
as-path {
path 65010;
}
}
}
autonomous-system 65020;
}
}
p1 {
interfaces {
fe-1/0/3 {
unit 55 {
vlan-id 55;
family inet {
address 10.0.5.254/24;
}
}
}
lo0 {
unit 55 {
family inet {
address 120.120.0.1/32;
}
}
}
}
protocols {
bgp {
group r1-r2 {
type external;
export r1-r2;
peer-as 65412;
inactive: neighbor 10.0.5.200;
neighbor 10.0.5.1;
neighbor 10.0.5.2;
}
}
}
policy-options {
policy-statement r1-r2 {
term 1 {
from {
route-filter 120.120.7.0/24 exact;
}
then {
community add prefer;
accept;
}
}
term 2 {
from protocol static;
then accept;
}
}
community prefer members 65050:100;
}
routing-options {
static {
route 120.120.0.0/24 discard;
route 120.120.1.0/24 discard;
route 120.120.2.0/24 discard;
route 120.120.3.0/24 discard;
route 120.120.4.0/24 discard;
route 120.120.5.0/24 discard;
route 120.120.6.0/24 discard;
route 120.120.7.0/24 {
discard;
as-path {
path 65412;
}
}
route 172.17.0.0/24 discard;
route 192.168.4.0/24 discard;
route 0.0.0.0/4 discard;
route 0.0.0.0/0 discard;
route 3.4.0.0/20 discard;
route 6.0.0.0/7 discard;
route 120.120.69.0/24 {
discard;
as-path {
path 65412;
}
}
}
autonomous-system 65050;
}
}
r1 {
interfaces {
fe-1/0/1 {
unit 12 {
vlan-id 12;
family inet {
address 10.0.4.5/30;
}
family iso;
}
unit 13 {
vlan-id 13;
family inet {
address 10.0.4.14/30;
}
family iso;
}
unit 55 {
vlan-id 55;
family inet {
address 10.0.5.1/24;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.0.6.1/32;
}
family iso {
address 49.0002.1111.1111.1111.00;
}
}
}
}
protocols {
bgp {
group internal {
type internal;
traceoptions {
file r1-bgp;
flag state detail;
}
local-address 10.0.6.1;
export ibgp;
peer-as 65412;
neighbor 10.0.3.3;
neighbor 10.0.3.4;
}
group p1 {
type external;
import [ bogons community ];
export peer-export;
peer-as 65050;
neighbor 10.0.5.254;
}
}
ospf {
area 0.0.0.2 {
interface fe-1/0/1.12;
interface fe-1/0/1.13;
}
}
}
policy-options {
policy-statement bogons {
term 1 {
from {
route-filter 0.0.0.0/0 through 0.0.0.0/7 reject;
route-filter 0.0.0.0/1 prefix-length-range /1-/7 reject;
}
}
term 2 {
from {
route-filter 0.0.0.0/0 prefix-length-range /25-/32 reject;
route-filter 172.16.0.0/12 orlonger reject;
route-filter 192.168.0.0/16 orlonger reject;
route-filter 10.0.0.0/8 orlonger reject;
}
}
}
policy-statement community {
term 1 {
from protocol bgp;
then {
community add Peer;
}
}
}
policy-statement direct {
term 1 {
from {
protocol direct;
route-filter 10.0.5.0/24 exact;
}
then {
metric 101;
accept;
}
}
}
policy-statement ibgp {
term 1 {
from {
protocol static;
route-filter 192.168.10.0/24 exact;
route-filter 192.168.100.0/24 exact;
}
then accept;
}
term 2 {
from {
protocol bgp;
neighbor 10.0.5.254;
}
then {
next-hop self;
}
}
}
policy-statement peer-export {
term 1 {
from {
protocol aggregate;
route-filter 10.0.0.0/8 exact;
}
then accept;
}
term 2 {
from community Transit;
then reject;
}
term 3 {
from {
route-filter 192.168.0.0/16 orlonger reject;
}
}
}
community Customer members 65412:300;
community Peer members 65412:200;
community Transit members 65412:100;
}
routing-options {
static {
route 192.168.10.0/24 reject;
route 192.168.100.0/24 reject;
}
aggregate {
route 10.0.0.0/8;
}
autonomous-system 65412 loops 2;
}
}
r2 {
interfaces {
fe-1/0/2 {
unit 12 {
vlan-id 12;
family inet {
address 10.0.4.6/30;
}
family iso;
}
unit 23 {
vlan-id 23;
family inet {
address 10.0.4.2/30;
}
family iso;
}
unit 24 {
vlan-id 24;
family inet {
address 10.0.4.10/30;
}
family iso;
}
unit 55 {
vlan-id 55;
family inet {
address 10.0.5.2/24;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.0.6.2/32;
}
family iso {
address 49.0002.2222.2222.2222.00;
}
}
}
}
protocols {
bgp {
group internal {
type internal;
traceoptions {
file r2-bgp;
flag state detail;
}
local-address 10.0.6.2;
export ibgp;
peer-as 65412;
neighbor 10.0.3.3;
neighbor 10.0.3.4;
}
group p1 {
type external;
import [ bogons community ];
export peer-export;
peer-as 65050;
neighbor 10.0.5.254;
}
}
ospf {
area 0.0.0.2 {
interface fe-1/0/2.12;
interface fe-1/0/2.23;
interface fe-1/0/2.24;
}
}
}
policy-options {
policy-statement bogons {
term 1 {
from {
route-filter 0.0.0.0/0 through 0.0.0.0/7 reject;
route-filter 0.0.0.0/1 prefix-length-range /1-/7 reject;
}
}
term 2 {
from {
route-filter 0.0.0.0/0 prefix-length-range /25-/32 reject;
route-filter 172.16.0.0/12 orlonger reject;
route-filter 192.168.0.0/16 orlonger reject;
route-filter 10.0.0.0/8 orlonger reject;
}
}
}
policy-statement community {
term 1 {
from protocol bgp;
then {
community add Peer;
}
}
}
policy-statement direct {
term 1 {
from {
protocol direct;
route-filter 10.0.5.0/24 exact;
}
then {
metric 101;
accept;
}
}
}
policy-statement ibgp {
term 1 {
from {
protocol static;
route-filter 192.168.20.0/24 exact;
route-filter 192.168.100.0/24 exact next term;
}
then accept;
}
term 2 {
from {
route-filter 192.168.100.0/24 exact;
}
then {
community add r2;
accept;
}
}
term 3 {
from {
protocol bgp;
neighbor 10.0.5.254;
}
then {
next-hop self;
}
}
}
policy-statement peer-export {
term 1 {
from {
protocol aggregate;
route-filter 10.0.0.0/8 exact;
}
then accept;
}
term 2 {
from community Transit;
then reject;
}
term 3 {
from {
route-filter 192.168.0.0/16 orlonger reject;
}
}
}
community Customer members 65412:300;
community Peer members 65412:200;
community Transit members 65412:100;
community r2 members 65412:2;
}
routing-options {
static {
route 192.168.20.0/24 reject;
route 192.168.100.0/24 reject;
}
aggregate {
route 10.0.0.0/8;
}
autonomous-system 65412 loops 2;
}
}
r3 {
interfaces {
fe-1/0/1 {
unit 23 {
vlan-id 23;
family inet {
address 10.0.4.1/30;
}
family iso;
}
unit 30 {
vlan-id 30;
family inet {
address 172.16.0.13/30;
}
family iso;
}
unit 34 {
vlan-id 34;
family inet {
address 10.0.2.5/30;
}
family iso;
}
unit 35 {
vlan-id 35;
family inet {
address 10.0.2.2/30;
}
family iso;
}
unit 400 {
vlan-id 40;
family inet {
address 172.16.0.17/30;
}
}
}
fe-1/0/2 {
unit 13 {
vlan-id 13;
family inet {
address 10.0.4.13/30;
}
family iso;
}
}
lo0 {
unit 3 {
family inet {
address 10.0.3.3/32;
}
family iso {
address 49.0002.3333.3333.3333.00;
}
}
}
}
protocols {
bgp {
traceoptions {
file r3-bgp;
flag state detail;
}
damping;
import prefer-2;
group cluster-1111 {
local-address 10.0.3.3;
export ibgp;
cluster 1.1.1.1;
peer-as 65412;
neighbor 10.0.6.1;
neighbor 10.0.6.2;
}
group core {
type internal;
traceoptions {
file r3-bgp;
flag state detail;
}
local-preference 200;
local-address 10.0.3.3;
export ibgp;
peer-as 65412;
neighbor 10.0.3.4;
neighbor 10.0.3.5;
}
group t1-t2 {
type external;
import [ damp bogons community ];
export transit-export;
peer-as 65222;
multipath;
neighbor 172.16.0.14;
neighbor 172.16.0.18 {
export [ med transit-export ];
}
}
}
ospf {
area 0.0.0.2 {
interface fe-1/0/2.13;
interface fe-1/0/1.23;
}
area 0.0.0.0 {
interface fe-1/0/1.34;
interface fe-1/0/1.35;
}
}
}
policy-options {
policy-statement bogons {
term 1 {
from {
route-filter 0.0.0.0/0 through 0.0.0.0/7 reject;
route-filter 0.0.0.0/1 prefix-length-range /1-/7 reject;
}
}
term 2 {
from {
route-filter 0.0.0.0/0 prefix-length-range /25-/32 reject;
route-filter 172.16.0.0/12 orlonger reject;
route-filter 192.168.0.0/16 orlonger reject;
route-filter 10.0.0.0/8 orlonger reject;
}
}
}
policy-statement community {
term 1 {
from protocol bgp;
then {
community add Transit;
}
}
}
policy-statement damp {
term 1 {
from {
route-filter 17.128.0.0/9 exact damping dry;
route-filter 0.0.0.0/0 prefix-length-range /0-/8 damping timid;
route-filter 0.0.0.0/0 prefix-length-range /17-/32 damping aggressive;
}
}
}
policy-statement ibgp {
term 1 {
from {
protocol static;
route-filter 192.168.30.0/24 exact;
}
then accept;
}
term 2 {
from {
protocol aggregate;
route-filter 10.0.0.0/8 exact;
}
then accept;
}
term 3 {
from {
protocol bgp;
neighbor [ 172.16.0.14 172.16.0.18 ];
}
then {
next-hop self;
}
}
}
policy-statement med {
term 1 {
then {
metric 100;
}
}
}
policy-statement prefer-2 {
term 1 {
from community r2;
then {
preference 20;
}
}
}
policy-statement summ {
term 1 {
from {
route-filter 10.0.5.0/24 exact;
}
to level 2;
then accept;
}
term 2 {
from {
protocol aggregate;
route-filter 10.0.4.0/22 exact;
}
to level 2;
then accept;
}
term 3 {
from {
route-filter 10.0.4.0/22 longer;
}
to level 2;
then reject;
}
}
policy-statement transit-export {
term 1 {
from {
protocol aggregate;
route-filter 10.0.0.0/8 exact;
}
then accept;
}
term 2 {
from community [ Peer Transit ];
then reject;
}
term 3 {
from {
route-filter 192.168.0.0/16 orlonger reject;
}
}
}
community Customer members 65412:300;
community Peer members 65412:200;
community Transit members 65412:100;
community r2 members 65412:2;
damping aggressive {
half-life 30;
suppress 2500;
}
damping timid {
half-life 5;
}
damping dry {
disable;
}
}
routing-options {
static {
route 192.168.30.0/24 reject;
}
aggregate {
route 10.0.4.0/22;
route 10.0.0.0/8;
}
autonomous-system 65412;
}
}
r4 {
interfaces {
fe-1/0/1 {
unit 10 {
vlan-id 10;
family inet {
address 172.16.0.5/10;
}
}
unit 20 {
vlan-id 20;
family inet {
address 172.16.0.9/30;
}
}
unit 24 {
vlan-id 24;
family inet {
address 10.0.4.9/30;
}
family iso;
}
unit 45 {
vlan-id 45;
family inet {
address 10.0.2.10/30;
}
family iso;
}
}
fe-1/0/2 {
unit 34 {
vlan-id 34;
family inet {
address 10.0.2.6/30;
}
family iso;
}
}
lo0 {
unit 4 {
family inet {
address 10.0.3.4/32;
}
family iso {
address 49.0002.4444.4444.4444.00;
}
}
}
}
protocols {
bgp {
traceoptions {
file r4-bgp;
flag state detail;
}
import prefer-2;
group cluster-3333 {
local-address 10.0.3.4;
export ibgp;
cluster 3.3.3.3;
peer-as 65412;
neighbor 10.0.6.1;
neighbor 10.0.6.2;
}
group core {
type internal;
traceoptions {
file r4-bgp;
flag state detail;
}
local-address 10.0.3.4;
export ibgp;
peer-as 65412;
neighbor 10.0.3.3;
neighbor 10.0.3.5;
}
group c1 {
type external;
multihop;
local-address 10.0.3.4;
import [ bogons community ];
export cust-export;
peer-as 65010;
neighbor 200.200.0.1;
}
}
ospf {
area 0.0.0.2 {
interface fe-1/0/1.24;
}
area 0.0.0.0 {
interface fe-1/0/1.45;
interface fe-1/0/2.34;
}
}
}
policy-options {
policy-statement bogons {
term 1 {
from {
route-filter 0.0.0.0/0 through 0.0.0.0/7 reject;
route-filter 0.0.0.0/1 prefix-length-range /1-/7 reject;
}
}
term 2 {
from {
route-filter 0.0.0.0/0 prefix-length-range /29-/32 reject;
route-filter 172.16.0.0/12 orlonger reject;
route-filter 192.168.0.0/16 orlonger reject;
route-filter 10.0.0.0/8 orlonger reject;
}
}
term 3 {
from as-path c1;
then next policy;
}
term 4 {
then reject;
}
}
policy-statement community {
term 1 {
from protocol bgp;
then {
community add Customer;
}
}
}
policy-statement cust-export {
term 1 {
from {
protocol aggregate;
route-filter 10.0.0.0/8 exact;
}
then accept;
}
term 2 {
from community [ Customer Transit Peer ];
then next policy;
}
term 3 {
from {
route-filter 192.168.0.0/16 orlonger reject;
}
}
}
policy-statement ibgp {
term 1 {
from {
protocol static;
route-filter 192.168.40.0/24 exact;
}
then accept;
}
term 2 {
from {
protocol bgp;
neighbor 200.200.0.1;
}
then {
next-hop self;
}
}
}
policy-statement prefer-2 {
term 1 {
from community r2;
then {
preference 20;
}
}
}
policy-statement summ {
term 1 {
from {
route-filter 10.0.5.0/24 exact;
}
to level 2;
then accept;
}
term 2 {
from {
protocol aggregate;
route-filter 10.0.4.0/22 exact;
}
to level 2;
then accept;
}
term 3 {
from {
route-filter 10.0.4.0/22 longer;
}
to level 2;
then reject;
}
}
community Customer members 65412:300;
community Peer members 65412:200;
community Transit members 65412:100;
community r2 members 65412:2;
as-path c2 ".* 65020";
as-path c1 ".* 65010";
}
routing-options {
static {
route 192.168.40.0/24 reject;
route 200.200.0.1/32 {
next-hop [ 172.16.0.6 172.16.0.10 ];
no-readvertise;
}
}
aggregate {
route 10.0.4.0/22;
route 10.0.0.0/8;
}
autonomous-system 65412;
}
}
r5 {
interfaces {
fe-1/0/1 {
unit 56 {
vlan-id 56;
family inet {
address 10.0.8.6/30;
}
family iso;
}
unit 57 {
vlan-id 57;
family inet {
address 10.0.8.9/30;
}
family iso;
}
}
fe-1/0/2 {
unit 35 {
vlan-id 35;
family inet {
address 10.0.2.1/30;
}
family iso;
}
unit 45 {
vlan-id 45;
family inet {
address 10.0.2.9/30;
}
family iso;
}
}
lo0 {
unit 5 {
family inet {
address 10.0.3.5/32;
}
family iso {
address 49.0001.5555.5555.5555.00;
}
}
}
}
protocols {
bgp {
group cluster-2222 {
traceoptions {
file r5-bgp;
flag state detail;
}
local-address 10.0.3.5;
export ibgp;
cluster 2.2.2.2;
peer-as 65412;
neighbor 10.0.9.6;
neighbor 10.0.9.7;
}
group core {
type internal;
traceoptions {
file r5-bgp;
flag state detail;
}
local-address 10.0.3.5;
export ibgp;
peer-as 65412;
neighbor 10.0.3.3;
neighbor 10.0.3.4;
}
}
ospf {
area 0.0.0.0 {
interface fe-1/0/2.34;
interface fe-1/0/2.35;
interface fe-1/0/2.45;
}
area 0.0.0.1 {
interface fe-1/0/1.56;
interface fe-1/0/1.57;
}
}
}
policy-options {
policy-statement community {
term 1 {
from protocol bgp;
then {
community add Customer;
}
}
}
policy-statement ibgp {
term 1 {
from {
protocol static;
route-filter 192.168.50.0/24 exact;
}
then accept;
}
}
policy-statement summ {
term 1 {
from {
protocol aggregate;
route-filter 10.0.2.0/23 exact;
}
to level 1;
then accept;
}
term 2 {
from {
route-filter 10.0.8.0/21 longer;
route-filter 192.168.0.0/22 longer;
}
to level 2;
then reject;
}
term 3 {
from {
protocol aggregate;
route-filter 10.0.8.0/21 exact;
route-filter 192.168.0.0/22 exact;
route-filter 172.16.40.0/29 exact;
}
to level 2;
then accept;
}
}
community Customer members 65412:300;
community Peer members 65412:200;
community Transit members 65412:100;
}
routing-options {
static {
route 192.168.50.0/24 reject;
}
aggregate {
route 10.0.2.0/23;
route 192.168.0.0/22;
route 172.16.40.0/29;
}
autonomous-system 65412;
}
}
r6 {
interfaces {
fe-1/0/2 {
unit 40 {
vlan-id 400;
family inet {
address 172.16.40.1/24;
}
}
unit 50 {
vl
