## Last commit: 2017-08-25 22:47:33 UTC by testuser
version 14.1R5.4;
system {
    host-name atl-isp-edge02;
    default-address-selection;
    services {
        ssh {
            protocol-version v2;
        }
    }
    syslog {
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
chassis {
    aggregated-devices {
        ethernet {
            device-count 2;
        }
    }
    fpc 0 {
        pic 0 {
            number-of-ports 23;
        }
    }
    network-services enhanced-ip;
}
interfaces {
    ge-0/0/0 {
        description "OOB Management";
        link-mode full-duplex;
        unit 0 {
            family inet {
                address 10.100.0.2/31;
            }
            family iso;
        }
    }
    ge-0/0/1 {
        link-mode full-duplex;
    }
    ge-0/0/2 {
        description "To ATL-INTERNET";
        link-mode full-duplex;
        unit 0 {
            family inet {
                address 10.110.3.67/31;
            }
        }
    }
    ge-0/0/4 {
        description "To ATL-EDGE-FW01";
        vlan-tagging;
        link-mode full-duplex;
        unit 0 {
            family bridge {
                interface-mode trunk;
                vlan-id-list [ 107 108 ];
            }
        }
    }
    ge-0/0/5 {
        description "To ATL-CE01";
        vlan-tagging;
        link-mode full-duplex;
        unit 107 {
            vlan-id 107;
            family inet {
                address 10.110.3.10/31;
            }
            family iso;
        }
        unit 108 {
            vlan-id 108;
            family inet {
                address 10.110.3.12/31;
            }
            family iso;
        }
    }
    ge-0/0/6 {
        description "To ATL-CE02";
        vlan-tagging;
        link-mode full-duplex;
        unit 107 {
            vlan-id 107;
            family inet {
                address 10.110.3.14/31;
            }
            family iso;
        }
        unit 108 {
            vlan-id 108;
            family inet {
                address 10.110.3.16/31;
            }
            family iso;
        }
    }
    ge-0/0/7 {
        description "To ATL-ISP-EDGE01";
        vlan-tagging;
        link-mode full-duplex;
        unit 0 {
            family bridge {
                interface-mode trunk;
                vlan-id-list [ 107 108 ];
            }
        }
    }
    irb {
        unit 107 {
            description "IRB (aka SVI) for internet-out to ASA Firewalls";
            family inet {
                address 10.110.3.75/29 {
                    vrrp-group 107 {
                        virtual-address 10.110.3.73;
                        priority 100;
                        preempt {
                            hold-time 10;
                        }
                        accept-data;
                    }
                }
            }
        }
        unit 108 {
            description "IRB (aka SVI) for internet-in to ASA Firewalls";
            family inet {
                address 10.110.3.83/29 {
                    vrrp-group 108 {
                        virtual-address 10.110.3.81;
                        priority 100;
                        preempt {
                            hold-time 10;
                        }
                        accept-data;
                    }
                }
            }
        }
    }
    lo0 {
        unit 107 {
            family iso {
                address 49.0001.0100.1306.4017.00;
            }
        }
        unit 108 {
            family iso {
                address 49.0001.0100.1307.4017.00;
            }
        }
    }
}
routing-options {
    router-id 10.10.4.20;
    autonomous-system 25;
    forwarding-table {
        export LOAD_BALANCE;
    }
}
protocols {
    lldp {
        interface all;
    }
}
policy-options {
    policy-statement INTERNET-IN-isis-to-INTERNET-IN-ospf {
        term PREVENT-LOOP1 {
            from {
                protocol ospf;
                tag 12108;
            }
            then reject;
        }
        term PREVENT-LOOP2 {
            from {
                protocol ospf;
                tag 11108;
            }
            then reject;
        }
        term 11 {
            then {
                tag 22108;
                accept;
            }
        }
    }
    policy-statement INTERNET-IN-ospf-to-INTERNET-IN-isis {
        term PREVENT-LOOP1 {
            from {
                protocol ospf;
                tag 21108;
            }
            then reject;
        }
        term PREVENT-LOOP2 {
            from {
                protocol ospf;
                tag 22108;
            }
            then reject;
        }
        term ALLOW-REMAINING {
            then {
                tag 11108;
                accept;
            }
        }
    }
    policy-statement LOAD_BALANCE {
        then {
            load-balance per-packet;
        }
    }
    policy-statement announce-via-bgp {
        from {
            protocol static;
            route-filter 190.37.14.0/24 exact;
        }
        then accept;
    }
    policy-statement bgp-to-fw-ospf {
        from protocol bgp;
        then accept;
    }
    policy-statement export-direct {
        term from-direct {
            from protocol direct;
            then accept;
        }
    }
    policy-statement export-statics {
        term from-static {
            from protocol static;
            then accept;
        }
    }
    policy-statement next-hop-self {
        then {
            next-hop self;
        }
    }
    policy-statement reject-all {
        term reject {
            then reject;
        }
    }
}
firewall {
    family inet {
        filter man-filter {
            term 1 {
                from {
                    source-address {
                        0.0.0.0/0;
                    }
                    destination-address {
                        10.100.0.24/32;
                        10.100.0.22/32;
                    }
                }
                then accept;
            }
        }
    }
}
routing-instances {
    INTERNET-IN {
        instance-type vrf;
        interface ge-0/0/5.108;
        interface ge-0/0/6.108;
        interface irb.108;
        interface lo0.108;
        route-distinguisher 1:108;
        vrf-import reject-all;
        vrf-export reject-all;
        protocols {
            bgp {
                group ibgp {
                    type internal;
                    neighbor 10.110.3.13;
                    neighbor 10.110.3.17 {
                        local-address 10.110.3.16;
                    }
                }
            }
            ospf {
                external-preference 172;
                export INTERNET-IN-isis-to-INTERNET-IN-ospf;
                area 0.0.0.0 {
                    interface irb.108;
                }
            }
            isis {
                export INTERNET-IN-ospf-to-INTERNET-IN-isis;
                no-ipv6-routing;
                level 2 wide-metrics-only;
                level 1 disable;
                interface ge-0/0/5.108 {
                    point-to-point;
                    level 2 metric 10000;
                }
                interface ge-0/0/6.108 {
                    point-to-point;
                    level 2 metric 10000;
                }
                interface irb.108 {
                    level 2 metric 10000;
                }
                interface lo0.108;
            }
        }
    }
    INTERNET-OUT {
        instance-type vrf;
        interface ge-0/0/2.0;
        interface ge-0/0/5.107;
        interface ge-0/0/6.107;
        interface irb.107;
        interface lo0.107;
        route-distinguisher 1:107;
        vrf-import reject-all;
        vrf-export reject-all;
        routing-options {
            static {
                route 190.37.14.0/24 reject;
                route 190.37.14.114/32 next-hop 10.110.3.76;
                route 190.37.14.120/32 next-hop 10.110.3.76;
            }
        }
        protocols {
            bgp {
                group ebgp {
                    type external;
                    export announce-via-bgp;
                    peer-as 100;
                    neighbor 10.110.3.66;
                }
                group ibgp {
                    type internal;
                    neighbor 10.110.3.11 {
                        local-address 10.110.3.10;
                    }
                    neighbor 10.110.3.15 {
                        local-address 10.110.3.14;
                    }
                }
            }
            ospf {
                external-preference 172;
                export bgp-to-fw-ospf;
                area 0.0.0.0 {
                    interface irb.107;
                }
            }
            isis {
                no-ipv6-routing;
                level 2 wide-metrics-only;
                interface ge-0/0/5.107 {
                    point-to-point;
                    level 2 metric 10000;
                }
                interface ge-0/0/6.107 {
                    point-to-point;
                    level 2 metric 10000;
                }
                interface lo0.107;
            }
        }
    }
}
bridge-domains {
    internet-in {
        vlan-id 108;
        routing-interface irb.108;
    }
    internet-out {
        vlan-id 107;
        routing-interface irb.107;
    }
}
