CE2 @ 14 – Dynamic Ingress LSP Splitting-Merging

## Last commit: 2015-06-25 16:47:51 CEST by kszarkowicz
version 14.2R3.8;
groups {
    GR-INTF {
        interfaces {
             {
                traps;
                hold-time up 5000 down 0;
            }
             {
                speed 1g;
                link-mode full-duplex;
                gigether-options {
                    auto-negotiation;
                }
            }
        }
    }
    GR-OSPF {
        routing-instances {
             {
                protocols {
                    ospf {
                        spf-options {
                            delay 50;
                            holddown 2000;
                            rapid-runs 5;
                        }
                        overload timeout 300;
                        reference-bandwidth 1000g;
                        area  {
                            interface “” {
                                interface-type p2p;
                                authentication {
                                    md5 0 key “$9$sngaGk.569pDi9p0BSys24”; ## SECRET-DATA
                                }
                                bfd-liveness-detection {
                                    minimum-interval 2000;
                                    multiplier 3;
                                }
                            }
                            interface  {
                                passive;
                                metric 1;
                            }
                        }
                    }
                }
            }
        }
    }
}
system {
    host-name 01-CE2;
    time-zone Europe/Vienna;
    arp {
        purging;
        gratuitous-arp-on-ifup;
        gratuitous-arp-delay 6;
    }
    root-authentication {
        encrypted-password “$1$kBnCFAVv$yCkmUO5F6Nef2KjXXFg6c.”; ## SECRET-DATA
    }
    login {
        user kszarkowicz {
            full-name “Krzysztof Grzegorz Szarkowicz”;
            uid 2000;
            class super-user;
            authentication {
                encrypted-password “$1$OlGAxJOb$VCpfftbRCvhSvLsEZoY.T0”; ## SECRET-DATA
                ssh-rsa “ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNrYGXXiIQNeB5ai/dQs7S5ua7FNMLbItfV/jRxNQzARRzeEYTe+kqWdyEftH1PBrFag5KAe/pZ/TmWyvM1TB5Qlbg7viQ2so3ITNXoXKpk+q1h1MYUgISE3F7dZ1a6TpF6uegEhduorvLHrrXH/77o+dzGEY9MTxAjaf00sH+MF3O/yXVH82fPpMAVu52Wviibo3xSX3y1I9fj4qTDqyuWdRBuEhOKTxehyn7fm5B93tfhz7Y0efkadypEvZlx9YpPSE3Jb8uNxMp3jCAYicoPwxU60RO7ouY3gfvL5pF61oP3efMUQAm9Hc7OxUHAKLuAyBS+JI5LE0MNYyZEjnX kszarkowicz@juniper.net”; ## SECRET-DATA
            }
        }
    }
    static-host-mapping {
        P1 inet [ 172.16.0.1 10.0.0.3 10.0.0.6 10.0.0.8 10.0.0.34 ];
        P2 inet [ 172.16.0.2 10.0.0.5 10.0.0.7 10.0.0.10 10.0.0.36 ];
        P3 inet [ 172.16.0.3 10.0.0.9 10.0.0.12 10.0.0.14 10.0.0.18 ];
        P4 inet [ 172.16.0.4 10.0.0.11 10.0.0.13 10.0.0.16 10.0.0.20 ];
        P5 inet [ 172.16.0.5 10.0.0.15 10.0.0.21 10.0.0.22 10.0.0.24 10.0.0.28 ];
        P6 inet [ 172.16.0.6 10.0.0.17 10.0.0.19 10.0.0.23 10.0.0.26 10.0.0.30 ];
        PE1 inet [ 172.16.0.11 10.0.0.0 10.0.0.2 ];
        PE1-VRF-A inet 192.168.1.11;
        PE2 inet [ 172.16.0.22 10.0.0.1 10.0.0.4 ];
        PE2-VRF-A inet 192.168.1.22;
        PE3 inet [ 172.16.0.33 10.0.0.25 10.0.0.31 10.0.0.32 10.0.0.35 ];
        PE3-VRF-A inet 192.168.1.33;
        PE4 inet [ 172.16.0.44 10.0.0.27 10.0.0.29 10.0.0.33 10.0.0.37 ];
        PE4-VRF-A inet 192.168.1.44;
    }
    services {
        ftp;
        ssh;
        telnet;
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
        time-format year millisecond;
    }
    compress-configuration-files;
    commit synchronize;
}
chassis {
    fpc 2 {
        pic 0 {
            tunnel-services;
        }
        port-mirror-instance PM-MPC;
    }
}
interfaces {
    ge-2/0/0 {
        description Management;
        mac 00:50:56:8b:12:89;
        unit 0 {
            family inet {
                address 10.255.1.52/16;
            }
        }
    }
    lt-2/0/0 {
        unit 1 {
            encapsulation frame-relay;
            dlci 12;
            peer-unit 2;
            family inet {
                address 127.0.0.5/30;
            }
        }
        unit 2 {
            encapsulation frame-relay;
            dlci 12;
            peer-unit 1;
            family inet;
        }
        unit 3 {
            encapsulation frame-relay;
            dlci 34;
            peer-unit 4;
            family inet {
                address 127.0.0.9/30;
            }
        }
        unit 4 {
            encapsulation frame-relay;
            dlci 34;
            peer-unit 3;
            family inet;
        }
    }
    ge-2/0/1 {
        apply-groups GR-INTF;
        description PE3:ge-2/0/1;
        mac 00:50:56:8b:73:3c;
        unit 0 {
            family inet {
                address 10.1.3.0/31;
            }
        }
    }
    ge-2/0/2 {
        apply-groups GR-INTF;
        description PE4:GigabitEthernet0/0/0/2;
        mac 00:50:56:8b:28:d9;
        unit 0 {
            family inet {
                address 10.1.4.0/31;
            }
        }
    }
    ge-2/0/3 {
        apply-groups GR-INTF;
        description Loop:ge-2/0/4;
        mac 00:50:56:8b:aa:5d;
        unit 0 {
            family inet {
                filter {
                    input FF-MIRROR;
                }
                address 1.1.1.3/24 {
                    primary;
                }
                address 10.1.3.0/31;
                address 10.1.4.0/31;
            }
        }
    }
    ge-2/0/4 {
        apply-groups GR-INTF;
        description Loop:ge-2/0/3;
        mac 00:50:56:8b:49:db;
        unit 0 {
            family inet {
                address 1.1.1.4/24 {
                    primary;
                }
                address 10.1.3.0/31;
                address 10.1.4.0/31;
            }
        }
    }
    lo0 {
        unit 3 {
            family inet {
                address 192.168.1.3/32 {
                    primary;
                }
                address 192.168.33.0/32;
                address 192.168.33.1/32;
                address 192.168.33.2/32;
                address 192.168.33.3/32;
                address 192.168.33.4/32;
                address 192.168.33.5/32;
                address 192.168.33.6/32;
                address 192.168.33.7/32;
                address 192.168.33.8/32;
                address 192.168.33.9/32;
                address 192.168.33.10/32;
                address 192.168.33.11/32;
                address 192.168.33.12/32;
                address 192.168.33.13/32;
                address 192.168.33.14/32;
                address 192.168.33.15/32;
                address 192.168.33.16/32;
                address 192.168.33.17/32;
                address 192.168.33.18/32;
                address 192.168.33.19/32;
                address 192.168.33.20/32;
                address 192.168.33.21/32;
                address 192.168.33.22/32;
                address 192.168.33.23/32;
                address 192.168.33.24/32;
                address 192.168.33.25/32;
                address 192.168.33.26/32;
                address 192.168.33.27/32;
                address 192.168.33.28/32;
                address 192.168.33.29/32;
                address 192.168.33.30/32;
                address 192.168.33.31/32;
                address 192.168.33.32/32;
                address 192.168.33.33/32;
                address 192.168.33.34/32;
                address 192.168.33.35/32;
                address 192.168.33.36/32;
                address 192.168.33.37/32;
                address 192.168.33.38/32;
                address 192.168.33.39/32;
                address 192.168.33.40/32;
                address 192.168.33.41/32;
                address 192.168.33.42/32;
                address 192.168.33.43/32;
                address 192.168.33.44/32;
                address 192.168.33.45/32;
                address 192.168.33.46/32;
                address 192.168.33.47/32;
                address 192.168.33.48/32;
                address 192.168.33.49/32;
                address 192.168.33.50/32;
                address 192.168.33.51/32;
                address 192.168.33.52/32;
                address 192.168.33.53/32;
                address 192.168.33.54/32;
                address 192.168.33.55/32;
                address 192.168.33.56/32;
                address 192.168.33.57/32;
                address 192.168.33.58/32;
                address 192.168.33.59/32;
                address 192.168.33.60/32;
                address 192.168.33.61/32;
                address 192.168.33.62/32;
                address 192.168.33.63/32;
                address 192.168.33.64/32;
                address 192.168.33.65/32;
                address 192.168.33.66/32;
                address 192.168.33.67/32;
                address 192.168.33.68/32;
                address 192.168.33.69/32;
                address 192.168.33.70/32;
                address 192.168.33.71/32;
                address 192.168.33.72/32;
                address 192.168.33.73/32;
                address 192.168.33.74/32;
                address 192.168.33.75/32;
                address 192.168.33.76/32;
                address 192.168.33.77/32;
                address 192.168.33.78/32;
                address 192.168.33.79/32;
                address 192.168.33.80/32;
                address 192.168.33.81/32;
                address 192.168.33.82/32;
                address 192.168.33.83/32;
                address 192.168.33.84/32;
                address 192.168.33.85/32;
                address 192.168.33.86/32;
                address 192.168.33.87/32;
                address 192.168.33.88/32;
                address 192.168.33.89/32;
                address 192.168.33.90/32;
                address 192.168.33.91/32;
                address 192.168.33.92/32;
                address 192.168.33.93/32;
                address 192.168.33.94/32;
                address 192.168.33.95/32;
                address 192.168.33.96/32;
                address 192.168.33.97/32;
                address 192.168.33.98/32;
                address 192.168.33.99/32;
                address 192.168.33.100/32;
                address 192.168.33.101/32;
                address 192.168.33.102/32;
                address 192.168.33.103/32;
                address 192.168.33.104/32;
                address 192.168.33.105/32;
                address 192.168.33.106/32;
                address 192.168.33.107/32;
                address 192.168.33.108/32;
                address 192.168.33.109/32;
                address 192.168.33.110/32;
                address 192.168.33.111/32;
                address 192.168.33.112/32;
                address 192.168.33.113/32;
                address 192.168.33.114/32;
                address 192.168.33.115/32;
                address 192.168.33.116/32;
                address 192.168.33.117/32;
                address 192.168.33.118/32;
                address 192.168.33.119/32;
                address 192.168.33.120/32;
                address 192.168.33.121/32;
                address 192.168.33.122/32;
                address 192.168.33.123/32;
                address 192.168.33.124/32;
                address 192.168.33.125/32;
                address 192.168.33.126/32;
                address 192.168.33.127/32;
                address 192.168.33.128/32;
                address 192.168.33.129/32;
                address 192.168.33.130/32;
                address 192.168.33.131/32;
                address 192.168.33.132/32;
                address 192.168.33.133/32;
                address 192.168.33.134/32;
                address 192.168.33.135/32;
                address 192.168.33.136/32;
                address 192.168.33.137/32;
                address 192.168.33.138/32;
                address 192.168.33.139/32;
                address 192.168.33.140/32;
                address 192.168.33.141/32;
                address 192.168.33.142/32;
                address 192.168.33.143/32;
                address 192.168.33.144/32;
                address 192.168.33.145/32;
                address 192.168.33.146/32;
                address 192.168.33.147/32;
                address 192.168.33.148/32;
                address 192.168.33.149/32;
                address 192.168.33.150/32;
                address 192.168.33.151/32;
                address 192.168.33.152/32;
                address 192.168.33.153/32;
                address 192.168.33.154/32;
                address 192.168.33.155/32;
                address 192.168.33.156/32;
                address 192.168.33.157/32;
                address 192.168.33.158/32;
                address 192.168.33.159/32;
                address 192.168.33.160/32;
                address 192.168.33.161/32;
                address 192.168.33.162/32;
                address 192.168.33.163/32;
                address 192.168.33.164/32;
                address 192.168.33.165/32;
                address 192.168.33.166/32;
                address 192.168.33.167/32;
                address 192.168.33.168/32;
                address 192.168.33.169/32;
                address 192.168.33.170/32;
                address 192.168.33.171/32;
                address 192.168.33.172/32;
                address 192.168.33.173/32;
                address 192.168.33.174/32;
                address 192.168.33.175/32;
                address 192.168.33.176/32;
                address 192.168.33.177/32;
                address 192.168.33.178/32;
                address 192.168.33.179/32;
                address 192.168.33.180/32;
                address 192.168.33.181/32;
                address 192.168.33.182/32;
                address 192.168.33.183/32;
                address 192.168.33.184/32;
                address 192.168.33.185/32;
                address 192.168.33.186/32;
                address 192.168.33.187/32;
                address 192.168.33.188/32;
                address 192.168.33.189/32;
                address 192.168.33.190/32;
                address 192.168.33.191/32;
                address 192.168.33.192/32;
                address 192.168.33.193/32;
                address 192.168.33.194/32;
                address 192.168.33.195/32;
                address 192.168.33.196/32;
                address 192.168.33.197/32;
                address 192.168.33.198/32;
                address 192.168.33.199/32;
                address 192.168.33.200/32;
                address 192.168.33.201/32;
                address 192.168.33.202/32;
                address 192.168.33.203/32;
                address 192.168.33.204/32;
                address 192.168.33.205/32;
                address 192.168.33.206/32;
                address 192.168.33.207/32;
                address 192.168.33.208/32;
                address 192.168.33.209/32;
                address 192.168.33.210/32;
                address 192.168.33.211/32;
                address 192.168.33.212/32;
                address 192.168.33.213/32;
                address 192.168.33.214/32;
                address 192.168.33.215/32;
                address 192.168.33.216/32;
                address 192.168.33.217/32;
                address 192.168.33.218/32;
                address 192.168.33.219/32;
                address 192.168.33.220/32;
                address 192.168.33.221/32;
                address 192.168.33.222/32;
                address 192.168.33.223/32;
                address 192.168.33.224/32;
                address 192.168.33.225/32;
                address 192.168.33.226/32;
                address 192.168.33.227/32;
                address 192.168.33.228/32;
                address 192.168.33.229/32;
                address 192.168.33.230/32;
                address 192.168.33.231/32;
                address 192.168.33.232/32;
                address 192.168.33.233/32;
                address 192.168.33.234/32;
                address 192.168.33.235/32;
                address 192.168.33.236/32;
                address 192.168.33.237/32;
                address 192.168.33.238/32;
                address 192.168.33.239/32;
                address 192.168.33.240/32;
                address 192.168.33.241/32;
                address 192.168.33.242/32;
                address 192.168.33.243/32;
                address 192.168.33.244/32;
                address 192.168.33.245/32;
                address 192.168.33.246/32;
                address 192.168.33.247/32;
                address 192.168.33.248/32;
                address 192.168.33.249/32;
                address 192.168.33.250/32;
                address 192.168.33.251/32;
                address 192.168.33.252/32;
                address 192.168.33.253/32;
                address 192.168.33.254/32;
                address 192.168.33.255/32;
            }
        }
        unit 4 {
            family inet {
                address 192.168.1.4/32;
            }
        }
    }
}
forwarding-options {
    port-mirroring {
        instance {
            PM-MPC {
                input {
                    rate 1;
                    run-length 0;
                }
            }
            PM-ODD {
                input-parameters-instance PM-MPC;
                family inet {
                    output {
                        interface lt-2/0/0.1 {
                            next-hop 127.0.0.6;
                        }
                        no-filter-check;
                    }
                }
            }
            PM-EVEN {
                input-parameters-instance PM-MPC;
                family inet {
                    output {
                        interface lt-2/0/0.3 {
                            next-hop 127.0.0.10;
                        }
                        no-filter-check;
                    }
                }
            }
        }
    }
}
routing-options {
    forwarding-table {
        export PL-LOAD-BALANCE;
    }
}
protocols {
    lldp {
        interface all;
    }
}
policy-options {
    policy-statement PL-LOAD-BALANCE {
        then {
            load-balance per-packet;
        }
    }
}
inactive: class-of-service {
    interfaces {
        ge-2/0/3 {
            scheduler-map SCH-TEST;
            forwarding-class best-effort;
        }
        ge-2/0/4 {
            scheduler-map SCH-TEST;
            forwarding-class best-effort;
        }
    }
    scheduler-maps {
        SCH-TEST {
            forwarding-class best-effort scheduler SCH-BE;
        }
    }
    schedulers {
        SCH-BE {
            shaping-rate 100k;
        }
    }
}
firewall {
    family inet {
        filter FF-MIRROR {
            term 1 {
                from {
                    source-address {
                        10.1.3.0/32;
                    }
                }
                then {
                    port-mirror-instance PM-ODD;
                    accept;
                }
            }
            term 2 {
                from {
                    source-address {
                        10.1.4.0/32;
                    }
                }
                then {
                    port-mirror-instance PM-EVEN;
                    accept;
                }
            }
        }
        filter FF-POLICER {
            term 1 {
                then policer RL-1M;
            }
            term 2 {
                then {
                    discard;
                }
            }
        }
    }
    policer RL-1M {
        if-exceeding {
            bandwidth-limit 100k;
            burst-size-limit 10k;
        }
        then discard;
    }
}
routing-instances {
    CE3 {
        instance-type virtual-router;
        interface lt-2/0/0.2;
        interface ge-2/0/1.0;
        interface lo0.3;
        routing-options {
            router-id 192.168.1.3;
        }
        protocols {
            ospf {
                apply-groups GR-OSPF;
                area 0.0.0.0 {
                    interface lo0.3;
                    interface ge-2/0/1.0;
                }
            }
        }
    }
    CE4 {
        instance-type virtual-router;
        interface lt-2/0/0.4;
        interface ge-2/0/2.0;
        interface lo0.4;
        routing-options {
            router-id 192.168.1.4;
        }
        protocols {
            ospf {
                apply-groups GR-OSPF;
                area 0.0.0.0 {
                    interface lo0.4;
                    interface ge-2/0/2.0;
                }
            }
        }
    }
    RI-LOOP-A {
        instance-type virtual-router;
        interface ge-2/0/3.0;
        routing-options {
            static {
                route 0.0.0.0/0 next-hop 1.1.1.4;
            }
        }
    }
    RI-LOOP-B {
        instance-type virtual-router;
        interface ge-2/0/4.0;
        routing-options {
            static {
                route 0.0.0.0/0 next-hop 1.1.1.3;
            }
        }
    }
}

Advertisements