Groupe 3, Routeur Juniper 4350

Matériel : Routeur J-4350, pas d'extensions

Configuration

version 8.0R2.8;
system {
    host-name r1.core2;
    domain-name root;
    time-zone Europe/Paris;
    root-authentication {
        encrypted-password "$1$dP5t5p72$f4BS40jyZzAmoZ0BjYz4L/";
    }
    login {
        user florian {
            full-name "Florian Le Goff";
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$i6vCpHQB$wzZ8o8eoyQ4yJCNQO1y1X/";
            }
        }
        user yjarma {
            full-name "Yesid Jarma";
            uid 2001;
            class super-user;
            authentication {
                encrypted-password "$1$XxDK7BZ9$rhVFToICSNU/MkyJOr3My0";
            }
        }
    }
    services {
        ssh {
            root-login allow;
        }
        telnet;
        web-management {
            http {
                interface ge-0/0/3.0;
            }
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any any;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
    ntp {
        server 10.30.253.3;
    }
}
interfaces {
    ge-0/0/0 {
        unit 0 {
            description toR1.Core1link;
            family inet {
                address 10.30.254.1/30;
            }
            family inet6 {
                address 2001:db8:0:1000::1/64;
            }
        }
    }
    ge-0/0/1 {
        unit 0 {
            description toR2link;
            family inet {
                address 10.30.254.13/30;
            }
            family inet6 {
                address 2001:db8:0:2003::1/64;
            }
        }
    }
    ge-0/0/2 {
        unit 0 {
            description toR3link;
            family inet {
                address 10.30.254.17/30;
            }
            family inet6 {
                address 2001:db8:0:2000::1/64;
            }
        }
    }
    ge-0/0/3 {
        description Admin;
        unit 0 {
            description VLAN_admin;
            family inet {
                address 10.30.253.10/24;
            }
            family inet6 {
                address 2001:db8:0:3000::1/64;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 127.0.0.1/32;
            }
        }
    }
}
snmp {
    description R1;
    location "Baie AS3 / Salle 747 / LIP6";
    contact "AS3 Mainteners";
    community public {
        authorization read-only;
    }
}
routing-options {
    static {
        route 10.30.0.0/16 discard;
    }
    router-id 10.30.253.10;
    autonomous-system 65003;
}
protocols {
    router-advertisement {
        interface ge-0/0/3.0 {
            managed-configuration;
            prefix 2001:db8:0:3000::/64;
        }
    }
    bgp {
        group core1-ebgp {
            type external;
            import drop-myprefixes;
            export export-external;
            peer-as 65002;
            neighbor 10.30.254.2;
        }
        group test-VPN {
            type external;
            export export-external;
            peer-as 65020;
            neighbor 10.30.253.1;
        }
        group internal {
            type internal;
            export set-nexthop-self;
            neighbor 10.30.253.11;
            neighbor 10.30.253.12;
            neighbor 10.30.253.13;
        }
    }
    ospf {
        area 0.0.0.0 {
            interface ge-0/0/2.0;
            interface ge-0/0/1.0;
        }
        area 4.4.4.4 {
            interface ge-0/0/0.0 {
                passive;
            }
        }
    }
    ospf3 {
        area 0.0.0.0 {
            interface ge-0/0/2.0;
            interface ge-0/0/1.0;
        }
        area 4.4.4.4 {
            interface ge-0/0/0.0 {
                passive;
            }
        }
    }
}
policy-options {
    policy-statement drop-myprefixes {
        from {
            route-filter 10.30.0.0/16 orlonger reject;
        }
    }
    policy-statement export-external {
        from protocol [ bgp static ];
        then {
            next-hop self;
            accept;
        }
    }
    policy-statement set-nexthop-self {
        from protocol bgp;
        then {
            next-hop self;
        }
    }
}

Retour a la page du groupe : Groupe1Core2?