Realisations/2006-2007/Projet/Entreprise2/Gateway1: config_J2300_2007-05-21.cfg

version 8.2R1.7;
system {
    host-name GATEWAY1;
    domain-name ENT2;
    domain-search [ p6 ent2.p6 ];
    time-zone Europe/Paris;
    authentication-order password;
    root-authentication {
        encrypted-password "$1$mpjpYTO7$AneeTD3Y53iMvBEF8DtXm0";
    }
    name-server {
        10.40.0.9;
    }
    login {
        user christophe {
            full-name "Christophe Alladoum";
            uid 2000;
            class superuser;
            authentication {
                encrypted-password "$1$KtffD0YJ$V.GkM1Fb4yY6aXpEqfiwM1";
            }
        }
        user geraldine {
            full-name geraldine;
            uid 2001;
            class superuser;
            authentication {
                encrypted-password "$1$I0Qvv.Hh$yGobHKyj2rM/LAhIry6ts/";
            }
        }
        user mpls {
            full-name "AS 65002 - Projet Reseau MPLS";
            uid 2002;
            class superuser;
            authentication {
                encrypted-password "$1$4R9uqxkY$tGSIJ9DGyojlaMspx65lS/";
            }
        }
    }
    services {
        telnet;
        xnm-clear-text;
        web-management {
            http {
                interface [ fe-0/0/0.0 fe-0/0/1.0 ];
            }
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any any;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
    ntp {
        server 10.40.253.10;
    }
}
interfaces {
    fe-0/0/0 {
        mtu 1500;
        unit 0 {
            family inet {
                address 10.40.253.6/30;
            }
            family inet6 {
                address 2001:db8:4::1/64;
            }
        }
    }
    fe-0/0/1 {
        mtu 1500;
        unit 0 {
            family inet {
                address 10.30.254.10/30;
            }
            family inet6 {
                address 2001:db8:0:1002::2/64;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 127.0.0.1/32;
            }
        }
    }
}
snmp {
    name GATEWAY1.ENT2;
    description "Gateway#1 d'access a AS65004";
    location "LIP6 / salle 747";
    contact Geraldine,Christophe;
    engine-id {
        local GATEWAY1.ENT2;
    }
    view jweb-view-all {
        oid .1 include;
    }
    community entreprise2 {
        view jweb-view-all;
        authorization read-write;
    }
    community public {
        authorization read-only;
    }
    health-monitor {
        interval 300;
    }
}
routing-options {
    rib inet6.0 {
        aggregate {
            route 2001:db8:4::/48;
        }
    }
    static {
        route 10.40.0.0/16 discard;
    }
    router-id 10.40.253.6;
    autonomous-system 65004;
}
protocols {
    router-advertisement {
        interface fe-0/0/1.0 {
            max-advertisement-interval 6;
            min-advertisement-interval 3;
            no-managed-configuration;
            prefix 2001:db8:0:1002::/64;
        }
        interface fe-0/0/0.0 {
            max-advertisement-interval 6;
            min-advertisement-interval 3;
            no-managed-configuration;
            prefix 2001:db8:4::/64;
        }
    }
    bgp {
        group AS65003_ebgp {
            type external;
            description "AS65003 ipv4";
            local-address 10.30.254.10;
            export dist-static;
            peer-as 65003;
            neighbor 10.30.254.9;
        }
        group AS65003_ebpg_ipv6 {
            type external;
            description "AS65003 ipv6";
            local-address 2001:db8:0:1002::2;
            mtu-discovery;
            import de_AS65003_V6;
            family inet6 {
                unicast;
            }
            export vers_AS65003_V6;
            peer-as 65003;
            multipath;
            neighbor 2001:db8:0:1002::1;
        }
        group AS65004_ibgp {
            type internal;
            description "AS65004 ipv4";
            local-address 10.40.253.6;
            export dist-static;
            neighbor 10.40.253.14;
        }
        group AS65004_ibpg_ipv6 {
            type internal;
            description "AS65004 ipv6";
            local-address 2001:db8:4::1;
            family inet6 {
                unicast;
            }
            export vers_AS65003_V6;
            neighbor 2001:db8:4:1::1;
        }
    }
    rip {
        send multicast;
        receive both;
        update-interval 60;
        group jweb-rip {
            export [ dist-rip dist-direct dist-bgp ];
            neighbor fe-0/0/0.0;
        }
    }
    ripng {
        metric-in 2;
        holddown 60;
        route-timeout 360;
        update-interval 10;
        group ripv6 {
            export [ dist-rip dist-bgp ];
            neighbor fe-0/0/0.0;
        }
    }
}
policy-options {
    policy-statement de_AS65003_V6 {
        from neighbor 2001:db8:0:1002::1;
        then {
            local-preference add 250;
        }
    }
    policy-statement dist-bgp {
        from protocol bgp;
        then accept;
    }
    policy-statement dist-direct {
        from {
            protocol direct;
            interface fe-0/0/0.0;
        }
        then accept;
    }
    policy-statement dist-rip {
        from protocol rip;
        then accept;
    }
    policy-statement dist-static {
        from protocol static;
        then accept;
    }
    policy-statement regle-default-route {
        from {
            route-filter 0.0.0.0/0 exact;
        }
        then reject;
    }
    policy-statement vers_AS65003_V6 {
        term accept {
            from {
                rib inet6.0;
                route-filter 2001:db8:4::/48 exact accept;
            }
        }
        term reject {
            then reject;
        }
    }
}
class-of-service {
    classifiers {
        dscp testG1 {
            import default;
            forwarding-class best-effort {
                loss-priority medium-high code-points be;
            }
            forwarding-class assured-forwarding2 {
                loss-priority low code-points af41;
            }
            forwarding-class expedited-forwarding {
                loss-priority medium-low code-points ef;
            }
        }
    }
    forwarding-classes {
        queue 0 expedited-forwarding;
        queue 1 assured-forwarding2;
        queue 3 best-effort;
    }
    interfaces {
        /* vers Serveur.ent2 */
        fe-0/0/0 {
            unit 0 {
                classifiers {
                    dscp testG1;
                }
            }
        }
        /* vers Core2 */
        fe-0/0/1 {
            unit 0 {
                classifiers {
                    dscp testG1;
                }
            }
        }
    }
    scheduler-maps {
        testG1 {
            forwarding-class best-effort scheduler best-effort-scheduler;
            forwarding-class expedited-forwarding scheduler expedited-forwarding-scheduler;
            forwarding-class assured-forwarding2 scheduler assured-forwarding-scheduler;
        }
    }
    schedulers {
        best-effort-scheduler {
            priority low;
        }
        assured-forwarding-scheduler {
            priority medium-high;
        }
        expedited-forwarding-scheduler {
            priority high;
        }
    }
}
services {
    stateful-firewall {
        rule jweb-sfw-from-wan {
            match-direction input;
            term jweb-discard-all {
                then {
                    discard;
                }
            }
        }
    }
}