Configuration Routeur Juniper 1 (version simplifiée)
version 8.2R2.4;
system {
host-name juniper1;
domain-name AS3;
time-zone CET;
root-authentication {
encrypted-password "$1$EFu46VG8$TCmKtr6x2UFvvh2O5c30V/"; ## SECRET-DATA
}
login {
user david {
full-name "David Oriol";
uid 777;
class super-user;
authentication {
encrypted-password "$1$AadwKnmW$3xjsir/SfmSyRXmxxPNtZ/"; ## SECRET-DATA
}
}
user fama {
full-name "Fama Diagne";
uid 555;
class super-user;
authentication {
encrypted-password "$1$tg4Lp.wq$nlJcPT0gBN0TYuZjKMQ6H0"; ## SECRET-DATA
}
}
user flok {
full-name "Florent Signorello";
uid 666;
class super-user;
authentication {
encrypted-password "$1$I.dKkx.t$CbxgTsDy8jNrzkiwVIGi00"; ## SECRET-DATA
}
}
}
services {
ftp;
ssh {
root-login deny;
connection-limit 4;
}
telnet;
web-management {
http {
interface [ ge-0/0/0.0 ge-0/0/1.0 ge-0/0/2.0 ge-0/0/3.0 ];
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any any;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
ge-0/0/0 {
unit 0 {
description toMIR;
family inet {
address 10.20.2.2/30;
}
family inet6 {
address 2001:db8:8000:1::2/64;
}
}
}
ge-0/0/1 {
unit 0 {
description toR2;
family inet {
address 10.30.254.1/30;
}
family inet6 {
address 2001:db8:0:2000::1/64;
}
}
}
ge-0/0/2 {
unit 0 {
description toR4;
family inet {
address 10.30.254.14/30;
}
family inet6 {
address 2001:db8:0:2003::2/64;
}
}
}
ge-0/0/3 {
unit 0 {
description toPC1;
family inet {
address 10.30.1.254/24;
}
family inet6 {
address 2001:db8:0:4001::ffff/64;
}
}
}
lo0 {
unit 0 {
family inet {
address 192.168.0.1/32;
}
family inet6 {
address ::1/128;
}
}
}
}
snmp {
description Juniper1;
location "AS3 / salle 747 / LIP6";
contact "David / Florent";
community public {
authorization read-only;
}
}
routing-options {
router-id 192.168.0.1;
autonomous-system 65003;
}
protocols {
bgp {
group toAS2 {
type external;
import community-add;
peer-as 65002;
neighbor 10.20.2.1;
}
group ibgp-AS3 {
type internal;
local-address 192.168.0.1;
export next-hop-self;
neighbor 192.168.0.2;
neighbor 192.168.0.4;
neighbor 192.168.0.3;
}
}
ospf {
area 0.0.0.0 {
authentication-type md5;
interface ge-0/0/1.0 {
authentication {
md5 1 key "$9$QEn9z369Ap0IEu08Xx7Y2mfTQ6CApO1RS"; ## SECRET-DATA
}
}
interface ge-0/0/2.0 {
authentication {
md5 1 key "$9$F5HI369Ap0BEcOBX7N-g4fTzF9tp01Rhr"; ## SECRET-DATA
}
}
interface lo0.0 {
passive;
}
}
area 1.1.1.1 {
interface ge-0/0/0.0 {
passive;
}
}
area 5.5.5.5 {
stub;
interface ge-0/0/3.0 {
passive;
}
}
}
}
policy-options {
policy-statement community-add {
term match-route {
from {
protocol bgp;
as-path AS2-path;
}
}
then {
community add peer;
accept;
}
}
policy-statement next-hop-self {
term set-nh {
then {
next-hop self;
}
}
}
community peer members 65003:2222;
as-path AS2-path 65002.*;
}
class-of-service {
classifiers {
dscp pfres {
import default;
forwarding-class best-effort {
loss-priority medium-high code-points be;
}
forwarding-class assured-forwarding {
loss-priority low code-points af41;
}
forwarding-class expedited-forwarding {
loss-priority medium-low code-points ef;
}
}
}
forwarding-classes {
queue 0 expedited-forwarding;
queue 1 assured-forwarding;
queue 2 best-effort;
}
interfaces {
ge-0/0/0 {
unit 0 {
classifiers {
dscp pfres;
}
}
}
ge-0/0/1 {
unit 0 {
classifiers {
dscp pfres;
}
}
}
ge-0/0/2 {
unit 0 {
classifiers {
dscp pfres;
}
}
}
ge-0/0/3 {
unit 0 {
classifiers {
dscp pfres;
}
}
}
}
scheduler-maps {
pfres {
forwarding-class best-effort scheduler best-effort-scheduler;
forwarding-class expedited-forwarding scheduler expedited-forwarding-scheduler;
forwarding-class assured-forwarding scheduler assured-forwarding-scheduler;
}
}
schedulers {
best-effort-scheduler {
priority low;
}
expedited-forwarding-scheduler {
priority medium-high;
}
assured-forwarding-scheduler {
priority high;
}
}
}