Configuration Routeur Juniper 2 (version simplifiée)

version 8.0R2.8; system {

host-name juniper2; domain-name AS3; time-zone CET; root-authentication {

encrypted-password "$1$m66ZNjKi$9c.QqPkEtQ8REN3koNFc81"; ## SECRET-DATA

} login {

user david {

full-name "David Oriol"; uid 777; class super-user; authentication {

encrypted-password "$1$l6YNRl2j$Nq9ybuWU11zEb8DsOM.qy/"; ## SECRET-DATA

}

} user fama {

full-name "Fama Diagne"; uid 555; class super-user; authentication {

encrypted-password "$1$esd4mZU6$ViieNs8g6I7ZY0Km12nAc0"; ## SECRET-DATA

}

} user flok {

full-name "Florent Signorello"; uid 666; class super-user; authentication {

encrypted-password "$1$5/gCyoAv$RwhSiNZAV3.UNQS9S2rGV1"; ## SECRET-DATA

}

}

} services {

ftp; ssh {

root-login deny; connection-limit 4;

} telnet; web-management {

http {

interface ge-0/0/3.0;

}

}

} syslog {

user * {

any emergency;

} file messages {

any any; authorization info;

} file interactive-commands {

interactive-commands any;

}

} ntp {

server 10.30.253.3;

}

} interfaces {

ge-0/0/0 {

unit 0 {

description toAS4; family inet {

address 10.30.252.1/30;

} family inet6 {

address 2001:db8:0:1001::1/64;

}

}

} ge-0/0/1 {

unit 0 {

description toR1; family inet {

address 10.30.254.2/30;

} family inet6 {

address 2001:db8:0:2000::2/64;

}

}

} ge-0/0/2 {

unit 0 {

description toR3; family inet {

address 10.30.254.5/30;

} family inet6 {

address 2001:db8:0:2001::1/64;

}

}

} ge-0/0/3 {

unit 0 {

description admin; family inet {

address 10.30.253.20/24;

} family inet6 {

address 2001:db8:0:3000::20/64;

}

}

} lo0 {

unit 0 {

family inet {

address 192.168.0.2/32;

} family inet6 {

address ::1/128;

}

}

}

} snmp {

description Juniper2; location "AS3 / salle 747 / LIP6"; contact "David / Florent"; community public {

authorization read-only;

}

} routing-options {

router-id 192.168.0.2; autonomous-system 65003;

} protocols {

bgp {

group toAS4 {

type external; import community-add; peer-as 65004; neighbor 10.30.252.2;

} group ibgp-AS3 {

type internal; local-address 192.168.0.2; neighbor 192.168.0.1; neighbor 192.168.0.3; neighbor 192.168.0.4;

}

} ospf {

area 0.0.0.0 {

authentication-type md5; interface ge-0/0/1.0 {

authentication {

md5 1 key "$9$BdR1RhSrevLxKv4aJZq.tuOBhyreM8X-"; ## SECRET-DATA

}

} interface ge-0/0/2.0 {

authentication {

md5 1 key "$9$9bgwCtuO1RhreEhdbwsZGFn/9uB1RcylM"; ## SECRET-DATA

}

} interface lo0.0 {

passive;

}

} area 2.2.2.2 {

interface ge-0/0/0.0 {

passive;

}

}

}

} policy-options {

policy-statement community-add {

term match-route {

from {

protocol bgp; as-path AS4-path;

}

} then {

community add customer; accept;

}

} policy-statement next-hop-self {

term set-nh {

then accept;

}

} community customer members 65003:4444; as-path AS4-path 65004.*;

} class-of-service {

classifiers {

dscp pfres {

import default; forwarding-class best-effort {

loss-priority medium-high code-points be;

} forwarding-class assured-forwarding {

loss-priority low code-points af41;

} forwarding-class expedited-forwarding {

loss-priority medium-low code-points ef;

}

}

} forwarding-classes {

queue 0 expedited-forwarding; queue 1 assured-forwarding; queue 2 best-effort;

} interfaces {

ge-0/0/0 {

unit 0 {

classifiers {

dscp pfres;

}

}

} ge-0/0/1 {

unit 0 {

classifiers {

dscp pfres;

}

}

} ge-0/0/2 {

unit 0 {

classifiers {

dscp pfres;

}

}

}

} scheduler-maps {

pfres {

forwarding-class best-effort scheduler best-effort-scheduler; forwarding-class assured-forwarding scheduler assured-forwarding-scheduler; forwarding-class expedited-forwarding scheduler expedited-forwarding-scheduler;

}

} schedulers {

best-effort-scheduler {

priority low;

} assured-forwarding-scheduler {

priority high;

} expedited-forwarding-scheduler {

priority medium-high;

}

}

}