Core_SPE2 Configuration File

sysname Core_SPE2
#
router id 172.16.0.3
#
stp disable
#
ip vpn-instance vpna
 ipv4-family
  route-distinguisher 3:1
  tnl-policy TSel
  vpn-target 0:1 export-extcommunity
  vpn-target 0:1 import-extcommunity
#
tunnel-selector TSel permit node 9
 if-match ip next-hop ip-prefix core_nhp
#
tunnel-selector TSel permit node 10
 apply tunnel-policy TE
#
bfd
#
mpls lsr-id 172.16.0.3
mpls
 mpls te
 label advertise non-null
 mpls rsvp-te
 mpls rsvp-te hello
 mpls rsvp-te hello full-gr
 mpls te cspf
#
mpls ldp
 graceful-restart
#
load-balance-profile CUSTOM
 ipv6 field l4-sport l4-dport
 ipv4 field l4-sport l4-dport
#
interface Eth-Trunk2
 undo portswitch
 description Core_SPE2 to Core_SPE3
 ip address 172.17.4.0 255.255.255.254
 ospf network-type p2p
 ospf ldp-sync
 ospf timer ldp-sync hold-down 20
 mpls
 mpls te
 mpls te link administrative group 3
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
 least active-linknumber 4
 load-balance enhanced profile CUSTOM
#
interface Eth-Trunk4
 undo portswitch
 description Core_SPE2 to Core_SPE1
 ip address 172.17.4.9 255.255.255.254
 ospf network-type p2p
 ospf ldp-sync
 ospf timer ldp-sync hold-down 20
 mpls
 mpls te
 mpls te link administrative group c
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
 least active-linknumber 4
 load-balance enhanced profile CUSTOM
#
interface Eth-Trunk17
 undo portswitch
 description Core_SPE2 to Site1_UPE2
 ip address 172.17.4.12 255.255.255.254
 ospf network-type p2p
 ospf ldp-sync
 ospf timer ldp-sync hold-down 20
 mpls
 mpls te
 mpls te link administrative group 8
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
 least active-linknumber 4
 load-balance enhanced profile CUSTOM
#
interface XGigabitEthernet3/0/4
 eth-trunk 2
#
interface XGigabitEthernet3/0/5
 eth-trunk 2
#
interface XGigabitEthernet3/0/6
 eth-trunk 2
#
interface XGigabitEthernet3/0/7
 eth-trunk 2
#
interface XGigabitEthernet5/0/0
 eth-trunk 17
#
interface XGigabitEthernet5/0/1
 eth-trunk 17
#
interface XGigabitEthernet5/0/2
 eth-trunk 17
#
interface XGigabitEthernet5/0/3
 eth-trunk 17
#
interface XGigabitEthernet5/0/5
 undo portswitch
 description Core_SPE2 to Site2_UPE3
 ip address 172.16.8.178 255.255.255.254
 ospf network-type p2p
 ospf ldp-sync
 ospf timer ldp-sync hold-down 20
 mpls
 mpls te
 mpls te link administrative group 1
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
#
interface XGigabitEthernet6/0/4
 eth-trunk 4
#
interface XGigabitEthernet6/0/5
 eth-trunk 4
#
interface XGigabitEthernet6/0/6
 eth-trunk 4
#
interface XGigabitEthernet6/0/7
 eth-trunk 4
#
interface LoopBack1
 description ** GRT Management Loopback **
 ip address 172.16.0.3 255.255.255.255
#
interface Tunnel111
 description Core_SPE2 to Site2_UPE3
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 172.16.2.75
 mpls te tunnel-id 111
 mpls te record-route
 mpls te affinity property 1 mask 1
 mpls te affinity property 2 mask 2 secondary
 mpls te backup hot-standby 
 mpls te commit
#
interface Tunnel121
 description Core_SPE2 to Site2_UPE4
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 172.16.2.76
 mpls te tunnel-id 121
 mpls te record-route
 mpls te affinity property 1 mask 1
 mpls te affinity property 2 mask 2 secondary
 mpls te backup hot-standby 
 mpls te commit
#
interface Tunnel612
 description Core_SPE2 to Site1_UPE1
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 172.16.2.51
 mpls te tunnel-id 72
 mpls te record-route
 mpls te affinity property 4 mask 4
 mpls te affinity property 8 mask 8 secondary
 mpls te backup hot-standby 
 mpls te commit
#
interface Tunnel621
 description Core_SPE2 to Site1_UPE2
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 172.16.2.50
 mpls te tunnel-id 81
 mpls te record-route
 mpls te affinity property 8 mask 8
 mpls te affinity property 4 mask 4 secondary
 mpls te backup hot-standby 
 mpls te commit
#
bgp 65000
 graceful-restart
 group devCore internal
 peer devCore connect-interface LoopBack1
 peer 172.16.0.4 as-number 65000
 peer 172.16.0.4 group devCore
 peer 172.16.0.5 as-number 65000
 peer 172.16.0.5 group devCore
 group devHost internal
 peer devHost connect-interface LoopBack1
 peer 172.16.2.50 as-number 65000
 peer 172.16.2.50 group devHost
 peer 172.16.2.51 as-number 65000
 peer 172.16.2.51 group devHost
 peer 172.16.2.75 as-number 65000
 peer 172.16.2.75 group devHost
 peer 172.16.2.76 as-number 65000
 peer 172.16.2.76 group devHost
 #
 ipv4-family unicast
  undo synchronization
  undo peer devCore enable
  undo peer devHost enable
  undo peer 172.16.2.50 enable
  undo peer 172.16.2.51 enable
  undo peer 172.16.2.75 enable
  undo peer 172.16.2.76 enable
 #
 ipv4-family vpnv4
  policy vpn-target
  auto-frr
  nexthop recursive-lookup delay 10
  tunnel-selector TSel
  bestroute nexthop-resolved tunnel
  route-select delay 120
  peer devCore enable
  peer devCore route-policy core-import import
  peer devCore advertise-community
  peer 172.16.0.4 enable
  peer 172.16.0.4 group devCore
  peer 172.16.0.5 enable
  peer 172.16.0.5 group devCore
  peer devHost enable
  peer devHost route-policy p_iBGP_RR_in import
  peer devHost advertise-community
  peer devHost upe
  peer devHost default-originate vpn-instance vpna
  peer 172.16.2.50 enable
  peer 172.16.2.50 group devHost
  peer 172.16.2.51 enable
  peer 172.16.2.51 group devHost
  peer 172.16.2.75 enable
  peer 172.16.2.75 group devHost
  peer 172.16.2.76 enable
  peer 172.16.2.76 group devHost
 #
 ipv4-family vpn-instance vpna
  default-route imported
  auto-frr
  nexthop recursive-lookup route-policy delay_policy
  nexthop recursive-lookup delay 10
  vpn-route cross multipath
  route-select delay 120
#
ospf 1
 silent-interface all
 undo silent-interface Eth-Trunk2
 undo silent-interface Eth-Trunk4
 undo silent-interface Eth-Trunk17
 undo silent-interface XGigabitEthernet5/0/5
 spf-schedule-interval millisecond 10
 lsa-originate-interval 0
 lsa-arrival-interval 0
 opaque-capability enable
 graceful-restart period 600
 flooding-control
 area 0.0.0.0
  authentication-mode md5 1 cipher %^%#8|'*QyJCZ<@"H2,\pm@FUK3R3uSfFGaaJr39=1%^%#
  network 172.16.0.3 0.0.0.0
  network 172.16.8.178 0.0.0.0
  network 172.17.4.0 0.0.0.0
  network 172.17.4.9 0.0.0.0
  network 172.17.4.12 0.0.0.0
  mpls-te enable
#
route-policy delay_policy permit node 0
 if-match community-filter all_site
#
route-policy p_iBGP_RR_in deny node 5
 if-match ip-prefix deny_host
 if-match community-filter all_site
#
route-policy p_iBGP_RR_in permit node 11
 if-match community-filter site1
 apply preferred-value 200
#
route-policy p_iBGP_RR_in permit node 12
 if-match community-filter site2
 apply preferred-value 300
#
route-policy p_iBGP_RR_in permit node 13
 if-match community-filter site3
 apply preferred-value 200
#
route-policy p_iBGP_RR_in permit node 20
#
route-policy core-import deny node 5
 if-match community-filter site12
#
route-policy core-import deny node 6
 if-match community-filter site23
#
route-policy core-import permit node 10
#
ip ip-prefix deny_host index 10 permit 0.0.0.0 0 greater-equal 32 less-equal 32
ip ip-prefix core_nhp index 10 permit 172.16.0.4 32
ip ip-prefix core_nhp index 20 permit 172.16.0.5 32
#
ip community-filter basic site1 permit 100:100
ip community-filter basic site2 permit 200:200
ip community-filter basic site3 permit 300:300
ip community-filter basic site12 permit 12:12
ip community-filter basic site23 permit 23:23
ip community-filter basic all_site permit 5720:5720
#
tunnel-policy TSel
 tunnel select-seq cr-lsp lsp load-balance-number 1
#
tunnel-policy TE
 tunnel select-seq cr-lsp load-balance-number 1
#
bfd SPE2toSPE1 bind ldp-lsp peer-ip 172.16.0.5 nexthop 172.17.4.8 interface Eth-Trunk4
 discriminator local 137
 discriminator remote 317
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toSPE3 bind ldp-lsp peer-ip 172.16.0.4 nexthop 172.17.4.1 interface Eth-Trunk2
 discriminator local 127
 discriminator remote 217
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toUPE1_b bind mpls-te interface Tunnel612 te-lsp backup
 discriminator local 6126
 discriminator remote 6125
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toUPE1_m bind mpls-te interface Tunnel612 te-lsp
 discriminator local 6122
 discriminator remote 6121
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toUPE2_b bind mpls-te interface Tunnel621 te-lsp backup
 discriminator local 6216
 discriminator remote 6215
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toUPE2_m bind mpls-te interface Tunnel621 te-lsp
 discriminator local 6212
 discriminator remote 6211
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toUPE3_b bind mpls-te interface Tunnel111 te-lsp backup
 discriminator local 1116
 discriminator remote 1115
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toUPE3_m bind mpls-te interface Tunnel111 te-lsp
 discriminator local 1112
 discriminator remote 1111
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toUPE4_b bind mpls-te interface Tunnel121 te-lsp backup
 discriminator local 1216
 discriminator remote 1215
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE2toUPE4_m bind mpls-te interface Tunnel121 te-lsp
 discriminator local 1212
 discriminator remote 1211
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
return