1 | version 8.2R1.7; |
---|
2 | system { |
---|
3 | host-name GATEWAY2; |
---|
4 | domain-name ENT2; |
---|
5 | time-zone Europe/Paris; |
---|
6 | authentication-order password; |
---|
7 | root-authentication { |
---|
8 | encrypted-password "$1$sDbaf4.X$SpTVboFKbZ/5eiO8.Sth20"; |
---|
9 | } |
---|
10 | name-server { |
---|
11 | 10.40.0.9; |
---|
12 | } |
---|
13 | login { |
---|
14 | user christophe { |
---|
15 | full-name "Christophe Alladoum"; |
---|
16 | uid 2000; |
---|
17 | class superuser; |
---|
18 | authentication { |
---|
19 | encrypted-password "$1$/3rN2BIM$Q4oD61D5u05f0pXdQYmgm."; |
---|
20 | } |
---|
21 | } |
---|
22 | user geraldine { |
---|
23 | full-name "andre geraldine"; |
---|
24 | uid 2001; |
---|
25 | class superuser; |
---|
26 | authentication { |
---|
27 | encrypted-password "$1$.mwJCHr1$d3F5ZVjlNt7t4.QTDS3OS1"; |
---|
28 | } |
---|
29 | } |
---|
30 | user temp { |
---|
31 | uid 2002; |
---|
32 | class super-user; |
---|
33 | authentication { |
---|
34 | encrypted-password "$1$J/cm.VIV$c/Ll.6TWzVK1Fhq0E76j1."; |
---|
35 | } |
---|
36 | } |
---|
37 | } |
---|
38 | services { |
---|
39 | telnet; |
---|
40 | xnm-clear-text; |
---|
41 | web-management { |
---|
42 | http { |
---|
43 | interface [ fe-0/0/0.0 fe-0/0/1.0 ]; |
---|
44 | } |
---|
45 | } |
---|
46 | } |
---|
47 | syslog { |
---|
48 | user * { |
---|
49 | any emergency; |
---|
50 | } |
---|
51 | file messages { |
---|
52 | any any; |
---|
53 | authorization info; |
---|
54 | } |
---|
55 | file interactive-commands { |
---|
56 | interactive-commands any; |
---|
57 | } |
---|
58 | } |
---|
59 | ntp { |
---|
60 | server 10.40.253.10; |
---|
61 | } |
---|
62 | } |
---|
63 | interfaces { |
---|
64 | fe-0/0/0 { |
---|
65 | unit 0 { |
---|
66 | family inet { |
---|
67 | address 10.40.253.14/30; |
---|
68 | } |
---|
69 | family inet6 { |
---|
70 | address 2001:db8:4:1::1/64; |
---|
71 | } |
---|
72 | } |
---|
73 | } |
---|
74 | fe-0/0/1 { |
---|
75 | mtu 1500; |
---|
76 | unit 0 { |
---|
77 | family inet { |
---|
78 | address 10.30.254.30/30; |
---|
79 | } |
---|
80 | family inet6 { |
---|
81 | address 2001:db8:0:1003::2/64; |
---|
82 | } |
---|
83 | } |
---|
84 | } |
---|
85 | lo0 { |
---|
86 | unit 0 { |
---|
87 | family inet { |
---|
88 | address 127.0.0.1/32; |
---|
89 | } |
---|
90 | } |
---|
91 | } |
---|
92 | } |
---|
93 | snmp { |
---|
94 | name GATEWAY2.ENT2; |
---|
95 | description "Gateway#2 d'access a AS65004"; |
---|
96 | location "LIP6 / salle 747"; |
---|
97 | contact Geraldine,Christophe; |
---|
98 | engine-id { |
---|
99 | local GATEWAY22ENT2; |
---|
100 | } |
---|
101 | view jweb-view-all { |
---|
102 | oid .1 include; |
---|
103 | } |
---|
104 | community entreprise2 { |
---|
105 | view jweb-view-all; |
---|
106 | authorization read-write; |
---|
107 | } |
---|
108 | community public { |
---|
109 | authorization read-only; |
---|
110 | } |
---|
111 | health-monitor { |
---|
112 | interval 300; |
---|
113 | } |
---|
114 | } |
---|
115 | routing-options { |
---|
116 | rib inet6.0 { |
---|
117 | aggregate { |
---|
118 | route 2001:db8:4::/48; |
---|
119 | } |
---|
120 | } |
---|
121 | static { |
---|
122 | route 10.40.0.0/16 discard; |
---|
123 | } |
---|
124 | router-id 10.40.253.14; |
---|
125 | autonomous-system 65004; |
---|
126 | } |
---|
127 | protocols { |
---|
128 | router-advertisement { |
---|
129 | interface fe-0/0/0.0 { |
---|
130 | max-advertisement-interval 6; |
---|
131 | min-advertisement-interval 3; |
---|
132 | no-managed-configuration; |
---|
133 | prefix 2001:db8:4:1::/64; |
---|
134 | } |
---|
135 | interface fe-0/0/1.0 { |
---|
136 | max-advertisement-interval 6; |
---|
137 | min-advertisement-interval 3; |
---|
138 | no-managed-configuration; |
---|
139 | prefix 2001:db8:0:1003::/64; |
---|
140 | } |
---|
141 | } |
---|
142 | bgp { |
---|
143 | group AS65003_ebgp { |
---|
144 | type external; |
---|
145 | description "AS65003 ipv4"; |
---|
146 | local-address 10.30.254.30; |
---|
147 | export dist-static; |
---|
148 | peer-as 65003; |
---|
149 | neighbor 10.30.254.29; |
---|
150 | } |
---|
151 | group AS65003_ebpg_ipv6 { |
---|
152 | type external; |
---|
153 | description "AS65003 ipv6"; |
---|
154 | local-address 2001:db8:0:1003::2; |
---|
155 | mtu-discovery; |
---|
156 | import de_AS65003_V6; |
---|
157 | family inet6 { |
---|
158 | unicast; |
---|
159 | } |
---|
160 | export vers_AS65003_V6; |
---|
161 | peer-as 65003; |
---|
162 | multipath; |
---|
163 | neighbor 2001:db8:0:1003::1; |
---|
164 | } |
---|
165 | group AS65004_ibgp { |
---|
166 | type internal; |
---|
167 | description "AS65004 ipv4"; |
---|
168 | local-address 10.40.253.14; |
---|
169 | export dist-static; |
---|
170 | neighbor 10.40.253.6; |
---|
171 | } |
---|
172 | group AS65004_ibpg_ipv6 { |
---|
173 | type internal; |
---|
174 | description "AS65004 ipv6"; |
---|
175 | local-address 2001:db8:4:1::1; |
---|
176 | family inet6 { |
---|
177 | unicast; |
---|
178 | } |
---|
179 | export vers_AS65003_V6; |
---|
180 | neighbor 2001:db8:4::1; |
---|
181 | } |
---|
182 | } |
---|
183 | rip { |
---|
184 | send multicast; |
---|
185 | receive both; |
---|
186 | update-interval 60; |
---|
187 | group jweb-rip { |
---|
188 | export [ dist-rip dist-bgp dist-direct ]; |
---|
189 | import import_rip; |
---|
190 | neighbor fe-0/0/0.0; |
---|
191 | } |
---|
192 | } |
---|
193 | ripng { |
---|
194 | metric-in 2; |
---|
195 | holddown 60; |
---|
196 | route-timeout 360; |
---|
197 | update-interval 10; |
---|
198 | group ripv6 { |
---|
199 | export [ dist-rip dist-bgp ]; |
---|
200 | neighbor fe-0/0/0.0; |
---|
201 | } |
---|
202 | } |
---|
203 | } |
---|
204 | policy-options { |
---|
205 | policy-statement de_AS65003_V6 { |
---|
206 | from neighbor 2001:db8:0:1003::1; |
---|
207 | then { |
---|
208 | local-preference add 250; |
---|
209 | } |
---|
210 | } |
---|
211 | policy-statement dist-bgp { |
---|
212 | from protocol bgp; |
---|
213 | then accept; |
---|
214 | } |
---|
215 | policy-statement dist-direct { |
---|
216 | from { |
---|
217 | protocol direct; |
---|
218 | interface fe-0/0/0.0; |
---|
219 | } |
---|
220 | then accept; |
---|
221 | } |
---|
222 | policy-statement dist-rip { |
---|
223 | from protocol rip; |
---|
224 | then reject; |
---|
225 | } |
---|
226 | policy-statement dist-static { |
---|
227 | from protocol static; |
---|
228 | then accept; |
---|
229 | } |
---|
230 | policy-statement import_rip { |
---|
231 | from { |
---|
232 | protocol rip; |
---|
233 | route-filter 0.0.0.0/0 exact; |
---|
234 | } |
---|
235 | then reject; |
---|
236 | } |
---|
237 | policy-statement politique_route_par_defaut { |
---|
238 | from { |
---|
239 | route-filter 0.0.0.0/0 exact; |
---|
240 | } |
---|
241 | then reject; |
---|
242 | } |
---|
243 | policy-statement vers_AS65003_V6 { |
---|
244 | term accept { |
---|
245 | from { |
---|
246 | rib inet6.0; |
---|
247 | route-filter 2001:db8:4::/48 exact accept; |
---|
248 | } |
---|
249 | } |
---|
250 | term reject { |
---|
251 | then reject; |
---|
252 | } |
---|
253 | } |
---|
254 | } |
---|