version 4.4R2.3; /* */ /* 2547bis L3 VPN Configuration - ivang@juniper.net 7/8/01 */ /* ucla.cfg */ system { host-name ucla; ports { console type vt100; } login { user lab { uid 2001; class superuser; authentication { encrypted-password "$1$y19Mb$1.5v1LbM.g0ecOE2lFLdx0"; # SECRET-DATA } } } services { ftp; telnet; } } interfaces { /* core interface */ so-0/0/0 { unit 0 { family inet { address 10.12.1.2/24; } family mpls; } } /* edge interface */ ge-0/1/0 { vlan-tagging; unit 0 { vlan-id 100; family inet { address 10.108.1.1/24; } family mpls; } unit 1 { vlan-id 200; family inet { address 10.208.1.1/24; } } } /* core interface */ so-0/2/0 { encapsulation cisco-hdlc; sonet-options { fcs 32; payload-scrambler; } unit 0 { family inet { address 10.15.1.2/24; } family mpls; } } fxp0 { unit 0 { family inet { address 172.19.32.204/24; } } } /* loopback interface */ lo0 { unit 0 { family inet { address 10.1.1.1/32; } } } } routing-options { static { route 0.0.0.0/0 { next-hop 172.19.32.254; retain; no-readvertise; } } rib-groups { uclace-into { import-rib [ calren.inet.0 ispa.inet.0 ]; } ispa-into { import-rib [ ispa.inet.0 calren.inet.0 ]; } } autonomous-system 10; } protocols { mpls { interface all; } bgp { family inet { any; } export set-nexthop-self; group cit { type internal; multihop; local-address 10.1.1.1; family inet { any; } family inet-vpn { any; } neighbor 10.1.1.2; } group usc { type internal; multihop; local-address 10.1.1.1; family inet { any; } family inet-vpn { any; } export reddir2; neighbor 10.1.1.3; } group ucla { type internal; multihop; local-address 10.1.1.1; family inet-vpn { any; } neighbor 10.1.1.4; } inactive: group Mcast-sbCE { type external; family inet { multicast; any; } export msdp-helper; peer-as 1000; neighbor 10.200.1.2; } } ospf { traffic-engineering { no-topology; shortcuts; } area 0.0.0.0 { interface so-0/0/0.0; interface so-0/2/0.0; interface lo0.0 { passive; } } area 0.0.0.1 { interface ge-0/1/0.1; } } ldp { interface so-0/0/0.0; interface so-0/2/0.0; } pim { rp { static { address 10.1.1.3 { version 2; } } } interface ge-0/1/0.1 { mode sparse-dense; } interface so-0/0/0.0 { mode sparse-dense; } interface so-0/2/0.0 { mode sparse-dense; } } } policy-options { policy-statement xxxsbc-export { term 10 { from { protocol bgp; as-path sbce; } then { community add calren; accept; } } term 20 { then reject; } } policy-statement xxxsbce-import { term 10 { from { protocol bgp; community [ calren ispa ispb cisco ]; } then accept; } term 20 { then reject; } } policy-statement ispa-export { term 10 { /* only advertise routes learned through this interface */ from protocol [ bgp static direct ]; then { community add ispa; accept; } } term 20 { then reject; } } policy-statement ispa-import { term 10 { from { protocol bgp; community [ calren ispb ]; } then accept; } term 20 { then reject; } } policy-statement set-nexthop-self { from protocol bgp; then { next-hop self; } } policy-statement send-igp { from protocol ospf; then accept; } policy-statement reddir2 { from { protocol direct; route-filter 10.100.1.0/24 exact; } then accept; } policy-statement msdp-helper { from { protocol ospf; route-filter 10.14.0.0/16 orlonger; route-filter 10.205.0.0/16 orlonger; } then accept; } policy-statement allow1000 { from { protocol bgp; as-path sbce; } then accept; } policy-statement sbce-import { from { protocol bgp; community [ calren ispa ispb cisco ]; } then accept; } policy-statement sbce-export { from { protocol bgp; as-path sbce; } then { community add calren; accept; } } community calren members target:11422:100; community cisco members target:11422:200; community esnet members target:11422:300; community ispa members target:11422:400; community ispb members target:11422:500; as-path sbce 1000; } routing-instances { calren { instance-type vrf; interface ge-0/1/0.0; route-distinguisher 999:1000; vrf-import sbce-import; vrf-export sbce-export; protocols { bgp { group sbce { type external; import allow1000; peer-as 1000; neighbor 10.100.1.2; } } } } ispa { instance-type vrf; interface ge-0/3/0.0; route-distinguisher 999:1006; vrf-import ispa-import; vrf-export ispa-export; routing-options { interface-routes { rib-group inet ispa-into; } } protocols { bgp { group ispa { type external; family inet { unicast { rib-group ispa-into; } } peer-as 1006; neighbor 192.2.1.2; } } } } }