wiki:Realisations/2007-2008/Projet/Core2/Juniper3

Version 2 (modified by oriol, 17 years ago) (diff)

--

Configuration Routeur Juniper 3 (version simplifiée)

version 8.0R2.8;
system {
    host-name juniper3;
    domain-name AS3;
    time-zone CET;
    root-authentication {
        encrypted-password "$1$8zVrX1hi$MYfw.b0dQR9HeO8XLicEX."; ## SECRET-DATA
    }
    login {
        user david {
            full-name "David Oriol";
            uid 777;
            class super-user;
            authentication {
                encrypted-password "$1$PCXCqug6$bI3jRIjIZ8SlV/fUX8MuF0"; ## SECRET-DATA
            }
        }
        user fama {
            full-name "Fama Diagne";
            uid 555;
            class super-user;
            authentication {
                encrypted-password "$1$5QU3OeCO$yqsHL4R6VMSohEpl54NwO1"; ## SECRET-DATA
            }
        }
        user flok {
            full-name "Florent Signorello";
            uid 666;
            class super-user;
            authentication {
                encrypted-password "$1$8wE4yH5U$BNqGEc8TKNCDS7S0wI/q4/"; ## SECRET-DATA
            }
        }
    }
    services {
        ftp;
        ssh {
            root-login deny;
            connection-limit 4;
        }
        telnet;
        web-management {
            http {
                interface ge-0/0/3.0;
            }
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any any;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    ge-0/0/0 {
        unit 0 {
            description toAS4;
            family inet {
                address 10.30.251.1/30;
            }
            family inet6 {
                address 2001:db8:0:1002::1/64;
            }
        }
    }
    ge-0/0/1 {
        unit 0 {
            description toR2;
            family inet {
                address 10.30.254.6/30;
            }
            family inet6 {
                address 2001:db8:0:2001::2/64;
            }
        }
    }
    ge-0/0/2 {
        unit 0 {
            description toR4;
            family inet {
                address 10.30.254.9/30;
            }
            family inet6 {
                address 2001:db8:0:2002::1/64;
            }
        }
    }
    ge-0/0/3 {
        unit 0 {
            description toPSEUDOL;
            family inet {
                address 10.30.2.254/24;
            }
            family inet6 {
                address 2001:db8:0:4002::ffff/64;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 192.168.0.3/32;
            }
            family inet6 {
                address ::1/128;
            }
        }
    }
}
snmp {
    description Juniper3;
    location "AS3 / salle 747 / LIP6";
    contact "David / Florent";
    community public {
        authorization read-only;
    }
}
routing-options {
    router-id 192.168.0.3;
    autonomous-system 65003;
}
protocols {
    bgp {
        group toAS4 {
            type external;
            import community-add;
            peer-as 65004;
            neighbor 10.30.251.2;
        }
        group ibgp-AS3 {
            type internal;
            local-address 192.168.0.3;
            neighbor 192.168.0.2;
            neighbor 192.168.0.4;
            neighbor 192.168.0.1;
        }
    }
    ospf {
        area 0.0.0.0 {
            interface ge-0/0/1.0 {
                authentication {
                    md5 1 key "$9$uKSw0BIEcylM8rlYg4oiH9ApuIhcyevWx"; ## SECRET-DATA
                }
            }
            interface ge-0/0/2.0 {
                authentication {
                    md5 1 key "$9$8krLxNdbs2aZY2fTQzAtevW8NVbsgoJD"; ## SECRET-DATA
                }
            }
            interface lo0.0 {
                passive;
            }
        }
        area 3.3.3.3 {
            interface ge-0/0/0.0 {
                passive;
            }
        }
        area 6.6.6.6 {
            stub;
            interface ge-0/0/3.0 {
                passive;
            }
        }
    }
}
policy-options {
    policy-statement community-add {
        term match-route {
            from {
                protocol bgp;
                as-path AS4-path;
            }
        }
        then {
            community add customer;
            accept;
        }
    }
    policy-statement exp {
        term 1 {
            from interface ge-0/0/3.0;
            then accept;
        }
    }
    policy-statement next-hop-self {
        term set-nh {
            then {
                next-hop self;
            }
        }
    }
    community customer members 65003:4444;
    as-path AS4-path 65004.*;
}