Groupe 3, Routeur Juniper 4350

Matériel : Routeur J-4350, pas d'extensions

Configuration

version 8.0R2.8;
system {
    host-name r2.core2;
    domain-name root;
    time-zone Europe/Paris;
    root-authentication {
        encrypted-password "$1$dP5t5p72$f4BS40jyZzAmoZ0BjYz4L/";
    }
    login {
        user florian {
            full-name "Florian Le Goff";
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$i6vCpHQB$wzZ8o8eoyQ4yJCNQO1y1X/";
            }
        }
        user yjarma {
            full-name "Yesid Jarma";
            uid 2002;
            class super-user;
            authentication {
                encrypted-password "$1$LTKrjR7r$hzU61Fq8V65yX4iQNln590";
            }
        }
    }
    services {
        ssh {
            root-login allow;
        }
        telnet;
        web-management {
            http {
                interface ge-0/0/3.0;
            }
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any any;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
    ntp {
        server 10.30.253.3;
    }
}
interfaces {
    ge-0/0/0 {
        unit 0 {
            description toR2.Core1link;
            family inet {
                address 10.30.254.5/30;
            }
            family inet6 {
                address 2001:db8:0:1001::1/64;
            }
        }
    }
    ge-0/0/1 {
        unit 0 {
            description toR1link;
            family inet {
                address 10.30.254.14/30;
            }
            family inet6 {
                address 2001:db8:0:2003::2/64;
            }
        }
    }
    ge-0/0/2 {
        unit 0 {
            description toR4link;
            family inet {
                address 10.30.254.21/30;
            }
            family inet6 {
                address 2001:db8:0:2002::1/64;
            }
        }
    }
    ge-0/0/3 {
        unit 0 {
            description VLAN_admin;
            family inet {
                address 10.30.253.11/24;
            }
            family inet6 {
                address 2001:db8:0:3000::2/64;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 127.0.0.1/32;
            }
        }
    }
}
snmp {
    description R2;
    location "Baie AS3 / Salle 747 / LIP6";
    contact "AS3 Mainteners";
    community public {
        authorization read-only;
    }
}
routing-options {
    static {
        route 10.30.0.0/16 discard;
    }
    router-id 10.30.253.11;
    autonomous-system 65003;
}
protocols {
    bgp {
        group core1-bgp {
            type external;
            import filter-AS3;
            export export-external;
            peer-as 65002;
            neighbor 10.30.254.6;
        }
        group internal-21 {
            type internal;
            export set-nexthop-self;
            neighbor 10.30.254.13;
        }
        group internal-24 {
            type internal;
            export set-nexthop-self;
            neighbor 10.30.254.22;
        }
        group internal-25 {
            type internal;
            export set-nexthop-self;
            neighbor 10.30.254.18;
        }
    }
    ospf {
        area 2.2.2.2 {
            interface ge-0/0/2.0;
        }
        area 6.6.6.6 {
            interface ge-0/0/0.0 {
                passive;
            }
        }
        area 0.0.0.0 {
            interface ge-0/0/1.0;
        }
    }
    ospf3 {
        area 2.2.2.2 {
            interface ge-0/0/2.0;
        }
        area 6.6.6.6 {
            interface ge-0/0/0.0 {
                passive;
            }
        }
        area 0.0.0.0 {
            interface ge-0/0/1.0;
        }
    }
}
policy-options {
    policy-statement filter-AS3 {
        term 1 {
            from {
                route-filter 10.10.0.0/16 orlonger accept;
                route-filter 10.20.0.0/16 orlonger accept;
            }
        }
        term 2 {
            from {
                route-filter 0.0.0.0/16 orlonger reject;
            }
        }
    }
    pol
    policy-statement export-external {
        from protocol [ bgp static ];
        then {
            next-hop self;
            accept;
        }
    }
    policy-statement set-nexthop-self {
        from protocol bgp;
        then {
            next-hop self;
        }
    }
}

Retour a la page du groupe : Groupe1Core2?.