231 lines
5.9 KiB
Plaintext
231 lines
5.9 KiB
Plaintext
version 8.3R1.5;
|
|
system {
|
|
host-name jun-m20-1;
|
|
domain-name us.admin.fr.cfm.fr;
|
|
domain-search [ us.admin.fr.cfm.fr fr.cfm.fr ];
|
|
backup-router 10.1.3.254 destination [ 172.16.0.0/20 172.17.0.0/16 ];
|
|
time-zone America/New_York;
|
|
arp {
|
|
aging-timer 60;
|
|
passive-learning;
|
|
}
|
|
mirror-flash-on-disk;
|
|
location {
|
|
country-code us;
|
|
rack 4;
|
|
}
|
|
root-authentication {
|
|
encrypted-password "$1$0zZfZQ3D$7ogopmG6MVS0l8GpEA1Dz."; ## SECRET-DATA
|
|
}
|
|
name-server {
|
|
172.16.20.201;
|
|
172.16.0.133;
|
|
172.16.0.134;
|
|
}
|
|
static-host-mapping {
|
|
jun-m20-1 inet 10.1.3.200;
|
|
}
|
|
services {
|
|
ssh {
|
|
root-login allow;
|
|
protocol-version v2;
|
|
}
|
|
inactive: telnet;
|
|
}
|
|
syslog {
|
|
host 172.16.20.201 {
|
|
any any;
|
|
match .*;
|
|
}
|
|
host 172.16.0.36 {
|
|
any any;
|
|
match .*;
|
|
}
|
|
host 172.16.0.37 {
|
|
any any;
|
|
match .*;
|
|
}
|
|
source-address 10.1.3.200;
|
|
}
|
|
ntp {
|
|
boot-server 172.16.20.201;
|
|
server 172.16.20.201;
|
|
server 172.16.15.102;
|
|
server 172.16.15.101;
|
|
}
|
|
}
|
|
logical-routers {
|
|
CFM-1 {
|
|
interfaces {
|
|
ge-0/1/0 {
|
|
unit 8;
|
|
}
|
|
}
|
|
protocols {
|
|
pim {
|
|
interface ge-0/1/0.0 {
|
|
mode sparse-dense;
|
|
version 2;
|
|
}
|
|
}
|
|
rip {
|
|
send broadcast;
|
|
}
|
|
}
|
|
}
|
|
SFTI {
|
|
interfaces {
|
|
ge-0/2/0 {
|
|
unit 10;
|
|
unit 11;
|
|
}
|
|
}
|
|
protocols {
|
|
bgp {
|
|
traceoptions {
|
|
/* Rotate through 5 files at 1mb each */
|
|
file log-bgp size 1m files 5;
|
|
/* Trace BGP state transition */
|
|
flag state;
|
|
/* Trace BGP normal events */
|
|
flag normal;
|
|
}
|
|
mtu-discovery;
|
|
/* Log BGP neighbor changes */
|
|
log-updown;
|
|
family inet {
|
|
any {
|
|
prefix-limit {
|
|
maximum 1300000;
|
|
teardown 90;
|
|
}
|
|
}
|
|
}
|
|
local-as 65267;
|
|
group SFTI {
|
|
type external;
|
|
local-as 65267;
|
|
neighbor 10.152.8.190 {
|
|
family inet {
|
|
unicast;
|
|
}
|
|
peer-as 26585;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
interfaces {
|
|
traceoptions {
|
|
/* Rotate through 5 files at 1mb each */
|
|
file log-interfaces size 1m files 5;
|
|
/* Trace changes that produce configuration events */
|
|
flag change-events;
|
|
}
|
|
ge-0/1/0 {
|
|
vlan-tagging;
|
|
unit 8 {
|
|
vlan-id 8;
|
|
family inet {
|
|
address 10.147.120.126/26;
|
|
}
|
|
}
|
|
}
|
|
ge-0/2/0 {
|
|
description "SIAC 1 Evertrust RCN 12/HMS8/000002 LX mode";
|
|
traps;
|
|
vlan-tagging;
|
|
unit 10 {
|
|
description "SFTI Multicast";
|
|
vlan-id 10;
|
|
family inet {
|
|
no-redirects;
|
|
address 10.152.0.189/30;
|
|
}
|
|
}
|
|
unit 11 {
|
|
description "SFTI CAP / Unicast";
|
|
vlan-id 11;
|
|
family inet {
|
|
no-redirects;
|
|
address 10.152.8.189/30;
|
|
}
|
|
}
|
|
unit 17 {
|
|
description "SFTI CAP / Test";
|
|
vlan-id 17;
|
|
family inet {
|
|
no-redirects;
|
|
address 10.152.56.189/30;
|
|
}
|
|
}
|
|
unit 52 {
|
|
description "NASDAQ ITCH";
|
|
vlan-id 52;
|
|
family inet {
|
|
no-redirects;
|
|
address 10.160.80.189/30;
|
|
}
|
|
}
|
|
}
|
|
fxp0 {
|
|
description Management;
|
|
unit 0 {
|
|
family inet {
|
|
address 10.1.3.200/24;
|
|
}
|
|
}
|
|
}
|
|
fxp1 {
|
|
disable;
|
|
}
|
|
}
|
|
routing-options {
|
|
options {
|
|
syslog {
|
|
level debug;
|
|
}
|
|
}
|
|
static {
|
|
route 172.16.0.0/20 {
|
|
next-hop 10.1.3.254;
|
|
retain;
|
|
}
|
|
route 172.17.0.0/16 {
|
|
next-hop 10.1.3.254;
|
|
retain;
|
|
}
|
|
route 10.147.22.16/29 discard;
|
|
route 10.147.22.64/26 discard;
|
|
route 10.147.120.40/29 discard;
|
|
route 10.147.120.64/26 discard;
|
|
route 64.29.179.240/29 discard;
|
|
}
|
|
autonomous-system 65267;
|
|
}
|
|
policy-options {
|
|
prefix-list RoutesForSFTI {
|
|
/* 10.147.22.16/29 A supprimer et a rendre SFTI */
|
|
10.147.22.16/29;
|
|
10.147.22.64/26;
|
|
/* 10.147.120.40/29 A supprimer et a rendre SFTI */
|
|
10.147.120.40/29;
|
|
10.147.120.64/26;
|
|
/* 64.29.179.240/29 Pour rerequest NYSE */
|
|
64.29.179.240/29;
|
|
}
|
|
policy-statement announce {
|
|
term 1 {
|
|
from {
|
|
protocol static;
|
|
prefix-list RoutesForSFTI;
|
|
}
|
|
then accept;
|
|
}
|
|
term 2 {
|
|
then reject;
|
|
}
|
|
}
|
|
}
|