Core_SPE3 Configuration File

sysname Core_SPE3
#
router id 172.16.0.4
#
stp disable
#
ip vpn-instance vpna
 ipv4-family
  route-distinguisher 4:1
  tnl-policy TSel
  vpn-target 0:1 export-extcommunity
  vpn-target 0:1 import-extcommunity
#
tunnel-selector TSel permit node 9
 if-match ip next-hop ip-prefix core_nhp
#
tunnel-selector TSel permit node 10
 apply tunnel-policy TE
#
bfd
#
mpls lsr-id 172.16.0.4
mpls
 mpls te
 label advertise non-null
 mpls rsvp-te
 mpls rsvp-te hello
 mpls rsvp-te hello full-gr
 mpls te cspf
#
mpls ldp
 graceful-restart
#
load-balance-profile CUSTOM
 ipv6 field l4-sport l4-dport
 ipv4 field l4-sport l4-dport
#
interface Eth-Trunk2
 undo portswitch
 description Core_SPE3 to Core_SPE2
 ip address 172.17.4.1 255.255.255.254
 ospf network-type p2p
 ospf ldp-sync
 ospf timer ldp-sync hold-down 20
 mpls
 mpls te
 mpls te link administrative group 3
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
 least active-linknumber 4
 load-balance enhanced profile CUSTOM
#
interface Eth-Trunk5
 undo portswitch
 description Core_SPE3 to Core_SPE1
 ip address 172.17.4.3 255.255.255.254
 ospf network-type p2p
 ospf ldp-sync
 ospf timer ldp-sync hold-down 20
 mpls
 mpls te
 mpls te link administrative group 30
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
 least active-linknumber 4
 load-balance enhanced profile CUSTOM
#
interface XGigabitEthernet1/0/0
 eth-trunk 5
#
interface XGigabitEthernet1/0/1
 eth-trunk 5
#
interface XGigabitEthernet1/0/2
 eth-trunk 5
#
interface XGigabitEthernet1/0/3
 eth-trunk 5
#
interface XGigabitEthernet2/0/4
 eth-trunk 2
#
interface XGigabitEthernet2/0/5
 eth-trunk 2
#
interface XGigabitEthernet2/0/6
 eth-trunk 2
#
interface XGigabitEthernet2/0/7
 eth-trunk 2
#
interface XGigabitEthernet6/0/1
 undo portswitch
 description Core_SPE3 to Site3_UPE5
 ip address 172.16.8.213 255.255.255.254
 ospf network-type p2p
 ospf ldp-sync
 ospf timer ldp-sync hold-down 20
 mpls
 mpls te
 mpls te link administrative group 10
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
#
interface XGigabitEthernet6/0/3
 undo portswitch
 description Core_SPE3 to Site2_UPE4
 ip address 172.16.8.183 255.255.255.254
 ospf network-type p2p
 ospf ldp-sync
 ospf timer ldp-sync hold-down 20
 mpls
 mpls te
 mpls te link administrative group 2
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
#
interface LoopBack1
 description ** GRT Management Loopback **
 ip address 172.16.0.4 255.255.255.255
#
interface Tunnel112
 description Core_SPE3 to Site2_UPE3
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 172.16.2.75
 mpls te tunnel-id 112
 mpls te bfd enable
 mpls te record-route
 mpls te affinity property 2 mask 2
 mpls te affinity property 1 mask 1 secondary
 mpls te backup hot-standby 
 mpls te commit
#
interface Tunnel122
 description Core_SPE3 to Site2_UPE4
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 172.16.2.76
 mpls te tunnel-id 122
 mpls te record-route
 mpls te affinity property 2 mask 2
 mpls te affinity property 1 mask 1 secondary
 mpls te backup hot-standby 
 mpls te commit
#
interface Tunnel712
 description Core_SPE3 to Site3_UPE6
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 172.16.2.86
 mpls te tunnel-id 321
 mpls te record-route
 mpls te affinity property 10 mask 10
 mpls te affinity property 20 mask 20 secondary
 mpls te backup hot-standby 
 mpls te commit
#
interface Tunnel722
 description Core_SPE3 to Site3_UPE5
 ip address unnumbered interface LoopBack1
 tunnel-protocol mpls te
 destination 172.16.2.87
 mpls te tunnel-id 322
 mpls te record-route
 mpls te affinity property 10 mask 10
 mpls te affinity property 20 mask 20 secondary
 mpls te backup hot-standby 
 mpls te commit
#
bgp 65000
 graceful-restart
 group devCore internal
 peer devCore connect-interface LoopBack1
 peer 172.16.0.3 as-number 65000
 peer 172.16.0.3 group devCore
 peer 172.16.0.5 as-number 65000
 peer 172.16.0.5 group devCore
 group devHost internal
 peer devHost connect-interface LoopBack1
 peer 172.16.2.75 as-number 65000
 peer 172.16.2.75 group devHost
 peer 172.16.2.76 as-number 65000
 peer 172.16.2.76 group devHost
 peer 172.16.2.86 as-number 65000
 peer 172.16.2.86 group devHost
 peer 172.16.2.87 as-number 65000
 peer 172.16.2.87 group devHost
 #
 ipv4-family unicast
  undo synchronization
  undo peer devCore enable
  undo peer devHost enable
  undo peer 172.16.0.3 enable
  undo peer 172.16.0.5 enable
  undo peer 172.16.2.75 enable
  undo peer 172.16.2.76 enable
  undo peer 172.16.2.86 enable
  undo peer 172.16.2.87 enable
 #
 ipv4-family vpnv4
  policy vpn-target
  auto-frr
  nexthop recursive-lookup delay 10
  tunnel-selector TSel
  bestroute nexthop-resolved tunnel
  route-select delay 120
  peer devCore enable
  peer devCore route-policy core-import import
  peer devCore advertise-community
  peer 172.16.0.3 enable
  peer 172.16.0.3 group devCore
  peer 172.16.0.5 enable
  peer 172.16.0.5 group devCore
  peer devHost enable
  peer devHost route-policy p_iBGP_RR_in import
  peer devHost advertise-community
  peer devHost upe
  peer devHost default-originate vpn-instance vpna
  peer 172.16.2.75 enable
  peer 172.16.2.75 group devHost
  peer 172.16.2.76 enable
  peer 172.16.2.76 group devHost
  peer 172.16.2.86 enable
  peer 172.16.2.86 group devHost
  peer 172.16.2.87 enable
  peer 172.16.2.87 group devHost
 #
 ipv4-family vpn-instance vpna
  default-route imported
  auto-frr
  nexthop recursive-lookup route-policy delay_policy
  nexthop recursive-lookup delay 10
  vpn-route cross multipath
  route-select delay 120
#
ospf 1
 silent-interface all
 undo silent-interface Eth-Trunk5
 undo silent-interface Eth-Trunk2
 undo silent-interface XGigabitEthernet6/0/1
 undo silent-interface XGigabitEthernet6/0/3
 spf-schedule-interval millisecond 10
 lsa-originate-interval 0
 lsa-arrival-interval 0
 opaque-capability enable
 graceful-restart period 600
 flooding-control
 area 0.0.0.0
  authentication-mode md5 1 cipher %^%#N@WU@i600:_5W!%F!L~9%7ui(!x:VP5<mJ:z>zJX%^%#
  network 172.16.0.4 0.0.0.0
  network 172.16.8.183 0.0.0.0
  network 172.16.8.213 0.0.0.0
  network 172.17.4.1 0.0.0.0
  network 172.17.4.3 0.0.0.0
  mpls-te enable
#
route-policy delay_policy permit node 0
#
route-policy p_iBGP_RR_in deny node 5
 if-match ip-prefix deny_host
 if-match community-filter all_site
#
route-policy p_iBGP_RR_in permit node 11
 if-match community-filter site1
 apply preferred-value 200
#
route-policy p_iBGP_RR_in permit node 12
 if-match community-filter site2
 apply preferred-value 200
#
route-policy p_iBGP_RR_in permit node 13
 if-match community-filter site3
 apply preferred-value 300
#
route-policy p_iBGP_RR_in permit node 20
#
route-policy core-import deny node 5
 if-match community-filter site13
#
route-policy core-import deny node 6
 if-match community-filter site23
#
route-policy core-import permit node 10
#
ip ip-prefix deny_host index 10 permit 0.0.0.0 0 greater-equal 32 less-equal 32
ip ip-prefix core_nhp index 10 permit 172.16.0.3 32
ip ip-prefix core_nhp index 20 permit 172.16.0.5 32
#
ip community-filter basic site1 permit 100:100
ip community-filter basic site2 permit 200:200
ip community-filter basic site3 permit 300:300
ip community-filter basic all_site permit 5720:5720
ip community-filter basic site13 permit 13:13
ip community-filter basic site23 permit 23:23
#
tunnel-policy TSel
 tunnel select-seq cr-lsp lsp load-balance-number 1
#
tunnel-policy TE
 tunnel select-seq cr-lsp load-balance-number 1
#
bfd SPE3toSPE1 bind ldp-lsp peer-ip 172.16.0.5 nexthop 172.17.4.2 interface Eth-Trunk5
 discriminator local 23
 discriminator remote 32
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toSPE2 bind ldp-lsp peer-ip 172.16.0.3 nexthop 172.17.4.0 interface Eth-Trunk2
 discriminator local 217
 discriminator remote 127
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toUPE3_b bind mpls-te interface Tunnel112 te-lsp backup
 discriminator local 1126
 discriminator remote 1125
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toUPE3_m bind mpls-te interface Tunnel112 te-lsp
 discriminator local 1122
 discriminator remote 1121
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toUPE4_b bind mpls-te interface Tunnel122 te-lsp backup
 discriminator local 1226
 discriminator remote 1225
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toUPE4_m bind mpls-te interface Tunnel122 te-lsp
 discriminator local 1222
 discriminator remote 1221
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toUPE5_b bind mpls-te interface Tunnel722 te-lsp backup
 discriminator local 7226
 discriminator remote 7225
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toUPE5_m bind mpls-te interface Tunnel722 te-lsp
 discriminator local 7222
 discriminator remote 7221
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toUPE6_b bind mpls-te interface Tunnel712 te-lsp backup
 discriminator local 7126
 discriminator remote 7125
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
bfd SPE3toUPE6_m bind mpls-te interface Tunnel712 te-lsp
 discriminator local 7122
 discriminator remote 7121
 detect-multiplier 8
 min-tx-interval 3
 min-rx-interval 3
 process-pst
 commit
#
return