P5 @ 13 – Traffic Engineering with RSVP-TE

## Last commit: 2015-06-16 13:34:20 CEST by kszarkowicz
groups {
    GR-CORE-INTF {
        interfaces {
             {
                traps;
                hold-time up 5000 down 0;
                unit 0 {
                    family inet;
                    family iso;
                    family mpls {
                        maximum-labels 5;
                    }
                }
            }
             {
                speed 1g;
                link-mode full-duplex;
                gigether-options {
                    auto-negotiation;
                }
            }
        }
    }
    GR-LSP {
        protocols {
            mpls {
                label-switched-path  {
                    least-fill;
                    adaptive;
                }
            }
        }
    }
    GR-OSPF {
        protocols {
            ospf {
                area  {
                    interface “” {
                        interface-type p2p;
                        authentication {
                            md5 0 key “$9$sngaGk.569pDi9p0BSys24”; ## SECRET-DATA
                        }
                        bfd-liveness-detection {
                            minimum-interval 2000;
                            multiplier 3;
                        }
                    }
                    interface  {
                        passive;
                        metric 1;
                    }
                }
            }
        }
    }
    GR-RSVP {
        protocols {
            rsvp {
                interface “” {
                    authentication-key “$9$OyXSIhyM87s2alK2aZU.mO1R”; ## SECRET-DATA
                    aggregate;
                    reliable;
                    subscription 90;
                }
            }
        }
    }
    GR-ISIS {
        protocols {
            isis {
                interface “” {
                    point-to-point;
                    bfd-liveness-detection {
                        minimum-interval 2000;
                        multiplier 3;
                    }
                    level 2 {
                        hello-authentication-key “$9$Yg4JUqmT/CujHCuO1yrYgo”; ## SECRET-DATA
                        hello-authentication-type md5;
                    }
                    level 1 disable;
                }
                interface  {
                    passive;
                }
            }
        }
    }
}
system {
    host-name 01-P5;
    time-zone Europe/Vienna;
    arp {
        purging;
        gratuitous-arp-on-ifup;
        gratuitous-arp-delay 6;
    }
    root-authentication {
        encrypted-password “$1$kBnCFAVv$yCkmUO5F6Nef2KjXXFg6c.”; ## SECRET-DATA
    }
    login {
        user kszarkowicz {
            full-name “Krzysztof Grzegorz Szarkowicz”;
            uid 2000;
            class super-user;
            authentication {
                encrypted-password “$1$OlGAxJOb$VCpfftbRCvhSvLsEZoY.T0”; ## SECRET-DATA
                ssh-rsa “ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNrYGXXiIQNeB5ai/dQs7S5ua7FNMLbItfV/jRxNQzARRzeEYTe+kqWdyEftH1PBrFag5KAe/pZ/TmWyvM1TB5Qlbg7viQ2so3ITNXoXKpk+q1h1MYUgISE3F7dZ1a6TpF6uegEhduorvLHrrXH/77o+dzGEY9MTxAjaf00sH+MF3O/yXVH82fPpMAVu52Wviibo3xSX3y1I9fj4qTDqyuWdRBuEhOKTxehyn7fm5B93tfhz7Y0efkadypEvZlx9YpPSE3Jb8uNxMp3jCAYicoPwxU60RO7ouY3gfvL5pF61oP3efMUQAm9Hc7OxUHAKLuAyBS+JI5LE0MNYyZEjnX kszarkowicz@juniper.net”; ## SECRET-DATA
            }
        }
    }
    static-host-mapping {
        P1 inet [ 172.16.0.1 10.0.0.3 10.0.0.6 10.0.0.8 10.0.0.34 ];
        P2 inet [ 172.16.0.2 10.0.0.5 10.0.0.7 10.0.0.10 10.0.0.36 ];
        P3 inet [ 172.16.0.3 10.0.0.9 10.0.0.12 10.0.0.14 10.0.0.18 ];
        P4 inet [ 172.16.0.4 10.0.0.11 10.0.0.13 10.0.0.16 10.0.0.20 ];
        P5 inet [ 172.16.0.5 10.0.0.15 10.0.0.21 10.0.0.22 10.0.0.24 10.0.0.28 ];
        P6 inet [ 172.16.0.6 10.0.0.17 10.0.0.19 10.0.0.23 10.0.0.26 10.0.0.30 ];
        PE1 inet [ 172.16.0.11 10.0.0.0 10.0.0.2 ];
        PE1-VRF-A inet 192.168.1.11;
        PE2 inet [ 172.16.0.22 10.0.0.1 10.0.0.4 ];
        PE2-VRF-A inet 192.168.1.22;
        PE3 inet [ 172.16.0.33 10.0.0.25 10.0.0.31 10.0.0.32 10.0.0.35 ];
        PE3-VRF-A inet 192.168.1.33;
        PE4 inet [ 172.16.0.44 10.0.0.27 10.0.0.29 10.0.0.33 10.0.0.37 ];
        PE4-VRF-A inet 192.168.1.44;
    }
    services {
        ftp;
        ssh;
        telnet;
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
        time-format year millisecond;
    }
    compress-configuration-files;
    commit synchronize;
}
chassis {
    network-services enhanced-ip;
}
security {
    authentication-key-chains {
        key-chain KC-IBGP {
            key 1 {
                secret “$9$ObwwIhyM87s2alK2aZU.mO1R”; ## SECRET-DATA
                start-time “2011-10-1.00:00:00 +0200”;
            }
        }
    }
}
interfaces {
    ge-2/0/0 {
        description Management;
        mac 00:50:56:8b:0b:2f;
        unit 0 {
            family inet {
                address 10.255.1.5/16;
            }
        }
    }
    ge-2/0/1 {
        apply-groups GR-CORE-INTF;
        description P6:GigabitEthernet0/0/0/1;
        mac 00:50:56:8b:2a:81;
        unit 0 {
            family inet {
                address 10.0.0.22/31;
            }
        }
    }
    ge-2/0/2 {
        apply-groups GR-CORE-INTF;
        description PE3:ge-2/0/2;
        mac 00:50:56:8b:2c:e5;
        unit 0 {
            family inet {
                address 10.0.0.24/31;
            }
        }
    }
    ge-2/0/3 {
        apply-groups GR-CORE-INTF;
        description PE4:GigabitEthernet0/0/0/3;
        mac 00:50:56:8b:43:08;
        unit 0 {
            family inet {
                address 10.0.0.28/31;
            }
        }
    }
    ge-2/0/4 {
        apply-groups GR-CORE-INTF;
        description P3:ge-2/0/4;
        mac 00:50:56:8b:44:6d;
        unit 0 {
            family inet {
                address 10.0.0.15/31;
            }
        }
    }
    ge-2/0/5 {
        apply-groups GR-CORE-INTF;
        description P4:GigabitEthernet0/0/0/5;
        mac 00:50:56:8b:2b:e7;
        unit 0 {
            family inet {
                address 10.0.0.21/31;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 172.16.0.5/32 {
                    primary;
                }
            }
            family iso {
                address 49.0000.1720.1600.0005.00;
            }
        }
    }
}
forwarding-options {
    no-load-balance-label-capability;
}
routing-options {
    srlg {
        SRLG-96 {
            srlg-value 96;
            srlg-cost 40000;
        }
        SRLG-97 {
            srlg-value 97;
            srlg-cost 60000;
        }
        SRLG-98 {
            srlg-value 98;
            srlg-cost 500;
        }
    }
    router-id 172.16.0.5;
    autonomous-system 65000;
    forwarding-table {
        export PL-LOAD-BALANCE;
    }
}
protocols {
    rsvp {
        apply-groups GR-RSVP;
        interface ge-2/0/1.0 {
            link-protection {
                bypass BP-P5-P6 {
                    to 172.16.0.6;
                    bandwidth 0;
                    exclude-srlg;
                }
            }
        }
        interface ge-2/0/2.0;
        interface ge-2/0/3.0;
        interface ge-2/0/4.0;
        interface ge-2/0/5.0;
        interface fxp0.0 {
            disable;
        }
    }
    mpls {
        apply-groups GR-LSP;
        admin-groups {
            AG-29 29;
        }
        optimize-aggressive;
        smart-optimize-timer 60;
        icmp-tunneling;
        optimize-timer 60;
        label-switched-path P5—>P1 {
            to 172.16.0.1;
        }
        label-switched-path P5—>P2 {
            to 172.16.0.2;
        }
        label-switched-path P5—>P6 {
            to 172.16.0.6;
            link-protection;
        }
        label-switched-path P5—>PE1 {
            to 172.16.0.11;
        }
        label-switched-path P5—>PE2 {
            to 172.16.0.22;
        }
        label-switched-path P5—>PE3 {
            to 172.16.0.33;
        }
        label-switched-path P5—>PE4 {
            to 172.16.0.44;
        }
        interface fxp0.0 {
            disable;
        }
        interface all;
        interface ge-2/0/2.0 {
            admin-group AG-29;
        }
        interface ge-2/0/1.0 {
            srlg [ SRLG-97 SRLG-98 ];
        }
        interface ge-2/0/3.0 {
            srlg SRLG-97;
        }
        interface ge-2/0/5.0 {
            srlg SRLG-97;
        }
        interface ge-2/0/4.0;
    }
    bgp {
        precision-timers;
        path-selection external-router-id;
        advertise-inactive;
        log-updown;
        group IBGP-RR-MESH {
            type internal;
            local-address 172.16.0.5;
            family inet-vpn {
                unicast;
            }
            neighbor 172.16.0.1;
            neighbor 172.16.0.2;
            neighbor 172.16.0.6;
        }
        group IBGP-CLIENTS {
            type internal;
            local-address 172.16.0.5;
            passive;
            family inet-vpn {
                unicast;
            }
            cluster 172.16.0.5;
            neighbor 172.16.0.33;
            neighbor 172.16.0.44;
        }
    }
    isis {
        apply-groups GR-ISIS;
        reference-bandwidth 1000g;
        lsp-lifetime 65535;
        no-ipv6-routing;
        spf-options {
            delay 50;
            holddown 2000;
            rapid-runs 5;
        }
        overload {
            timeout 300;
            advertise-high-metrics;
        }
        level 1 {
            disable;
            wide-metrics-only;
        }
        level 2 {
            authentication-key “$9$/wS/AuBcyKxNbIENbs2GU/Ct”; ## SECRET-DATA
            authentication-type md5;
            wide-metrics-only;
        }
        interface ge-2/0/1.0;
        interface ge-2/0/2.0;
        interface ge-2/0/3.0 {
            level 2 te-metric 3000;
        }
        interface ge-2/0/4.0;
        interface ge-2/0/5.0 {
            level 2 te-metric 3000;
        }
        interface lo0.0;
    }
    esis {
        disable;
    }
    inactive: ospf {
        apply-groups GR-OSPF;
        spf-options {
            delay 50;
            holddown 2000;
            rapid-runs 5;
        }
        traffic-engineering;
        reference-bandwidth 1000g;
        area 0.0.0.0 {
            interface lo0.0 {
                passive;
            }
            interface ge-2/0/1.0;
            interface ge-2/0/2.0;
            interface ge-2/0/3.0 {
                te-metric 3000;
            }
            interface ge-2/0/4.0;
            interface ge-2/0/5.0 {
                te-metric 3000;
            }
        }
    }
}
policy-options {
    policy-statement PL-LOAD-BALANCE {
        then {
            load-balance per-packet;
        }
    }
}

Advertisements