[root@CentOS ~]# ssh root@100.123.13.203
Password:
Last login: Tue Dec 10 15:48:16 2019 from 100.123.34.3
--- JUNOS 18.1R3-S5.3 built 2019-04-27 13:13:59 UTC
root@Leaf1:RE:0% cli
{master:0}
root@Leaf1> show configuration | display set | no-more
set version 18.1R3-S5.3
set groups __contrail_basic__ policy-options policy-statement MAINTENANCE-MODE term term1 from nlri-route-type 1
snmp community public authorization read-only
set groups __contrail_basic__ protocols policyl2-optionslearning policyglobal-statement MAINTENANCE-MODE term term1 from nlri-route-type 3mac-table-aging-time 1800
set groups __contrail_basic__ policy-options policy-statement MAINTENANCE-MODE term term1 from nlri-route-type 4family evpn
set groups __contrail_basic__ policy-options policy-statement MAINTENANCE-MODE term term1 from nlri-route-type 52
set groups __contrail_basic__ policy-options policy-statement MAINTENANCE-MODE term term1 from nlri-route-type 61
set groups __contrail_basic__ policy-options policy-statement MAINTENANCE-MODE term term1 then community add COM-MAINTENANCEfrom nlri-route-type 3
set groups __contrail_basic__ policy-options policy-statement MAINTENANCE-MODE term term1 then accept from nlri-route-type 4
set groups __contrail_basic__ policy-options policy-statement MAINTENANCE-MODE term term1 term100 then acceptfrom nlri-route-type 5
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1 from family evpnnlri-route-type 6
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1 fromthen community add COM-MAINTENANCE
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1 from nlri-route-type 2
then accept
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1term100 from nlri-route-type 1then accept
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1 from nlri-route-type 3family evpn
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1 from nlri-route-type 4community COM-MAINTENANCE
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1 from nlri-route-type 52
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1 from nlri-route-type 61
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE term term1 then reject from nlri-route-type 3
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE-underlay then as-path-prepend "9999 9999 9999"
term term1 from nlri-route-type 4
set groups __contrail_basic__ policy-options policy-statement REJECT-MAINTENANCE-MODE-underlay thenterm acceptterm1 set groups __contrail_basic__ policy-options community COM-MAINTENANCE members 9999:9999from nlri-route-type 5
set groups __contrail_overlaybasic_bgp__ routingpolicy-options routerpolicy-id 10.255.0.2
set groups __contrail_overlay_bgp__ routing-options route-distinguisher-id 10.255.0.2statement REJECT-MAINTENANCE-MODE term term1 from nlri-route-type 6
set groups __contrail_overlay_bgpbasic__ routingpolicy-options autonomous-system 64512policy-statement REJECT-MAINTENANCE-MODE term term1 then reject
set groups __contrail_overlaybasic_bgp__ routingpolicy-options resolution rib bgp.rtarget.0 resolution-ribs inet.0policy-statement MAINTENANCE-MODE-underlay then as-path-prepend "9999 9999 9999"
set groups __contrail_overlay_bgpbasic__ protocols bgp group _contrail_asn-64512 type internalpolicy-options policy-statement MAINTENANCE-MODE-underlay then accept
set groups __contrail_overlay_bgpbasic__ protocolspolicy-options bgp group _contrail_asn-64512 local-address 10.255.0.2community COM-MAINTENANCE members 9999:9999
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 hold-time 90routing-options router-id 10.255.0.3
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 import REJECT-MAINTENANCE-MODErouting-options route-distinguisher-id 10.255.0.3
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 family evpn signalingrouting-options autonomous-system 64512
set groups __contrail_overlay_bgp__ protocols routing-options resolution rib bgp group _contrail_asn-64512 family route-target.rtarget.0 resolution-ribs inet.0
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 export _contrail_ibgp_export_policytype internal
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 vpn-apply-exportlocal-address 10.255.0.3
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 cluster 0.0.0.100hold-time 90
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 import localREJECT-MAINTENANCE-asMODE
64512
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 multipathfamily evpn signaling
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 neighbor 10.0.1.2 peer-as 64512
64512 family route-target
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 neighbor 10.255.0.1 peer-as 64512export _contrail_ibgp_export_policy
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 neighbor 10.255.0.3 peer-as 64512vpn-apply-export
set groups __contrail_overlay_bgp__ protocols bgp group _contrail_asn-64512 neighbor 10.255.0.4 peerlocal-as 64512
set groups __contrail_overlay_bgp__ protocols policy-options policy-statementbgp group _contrail_ibgp_export_policy term inet-vpn from family inet-vpnasn-64512 multipath
set groups __contrail_overlay_bgp__ protocols policy-options policy-statementbgp group _contrail_ibgp_export_policy term inet-vpn then next-hop selfasn-64512 neighbor 10.255.0.1 peer-as 64512
set groups __contrail_overlay_bgp__ policy-options policy-statementprotocols bgp group _contrail_ibgp_export_policy term inet6-vpn from family inet6-vpnasn-64512 neighbor 10.255.0.2 peer-as 64512
set groups __contrail_overlay_bgp__ policy-options policy-statement _contrail_ibgp_export_policy term inet6inet-vpn thenfrom family nextinet-hop selfvpn
set groups __contrail_overlay_evpnbgp__ routingpolicy-options forwardingpolicy-table export EVPN-LB
set groups __contrail_overlay_evpn__ protocols evpn encapsulation vxlan
set groups __contrail_overlay_evpn__ protocols evpn extended-vni-list allstatement _contrail_ibgp_export_policy term inet-vpn then next-hop self
set groups __contrail_overlay_evpnbgp__ policy-options policy-statement EVPN-LB_contrail_ibgp_export_policy term term1inet6-vpn from protocolfamily evpninet6-vpn
set groups __contrail_overlay_evpnbgp__ policy-options policy-statement EVPN-LB_contrail_ibgp_export_policy term term1inet6-vpn then loadnext-balancehop per-packetself
set groups __contrail_overlay_evpn__ policyrouting-options policyforwarding-statementtable export import-evpn term esi-in from community community-esi-inEVPN-LB
set groups __contrail_overlay_evpn__ protocols evpn encapsulation vxlan
set groups __contrail_overlay_evpn__ protocols evpn extended-vni-list all
set groups __contrail_overlay_evpn__ policy-options policy-statement importEVPN-evpnLB term term1 esi-infrom thenprotocol acceptevpn
set groups __contrail_overlay_evpn__ policy-options policy-statement importEVPN-evpnLB term default-termterm1 then rejectload-balance per-packet
set groups __contrail_overlay_evpn__ policy-options communitypolicy-statement communityimport-evpn term esi-in members target:64512:7999999
set groups __contrail_overlay_evpn__ switch-options vtep-source-interface lo0.0
from community community-esi-in
set groups __contrail_overlay_evpn__ switchpolicy-options routepolicy-distinguisher 10.255.0.2:7999
set groups __contrail_overlay_evpn__ switch-options vrf-import import-evpnstatement import-evpn term esi-in then accept
set groups __contrail_overlay_evpn__ switchpolicy-options vrf-target target:64512:7999999
set groups __contrail_overlay_evpn_gateway__policy-statement import-evpn term default-term then reject
set groups __contrail_overlay_evpn_type5__ routingpolicy-options forwarding-tablecommunity chainedcommunity-compositeesi-next-hopin ingress evpnmembers target:64512:7999999
set groups __contrail_overlay_evpn_type5__ policyswitch-options policyvtep-source-statement type5_policy term 1 from protocol directinterface lo0.0
set groups __contrail_overlay_evpn_type5__ policyswitch-options policyroute-statement type5_policy term 1 then acceptdistinguisher 10.255.0.3:7999
set groups __contrail_overlay_evpn_type5__ policyswitch-options policyvrf-statement type5_policy term 2 from protocol staticimport import-evpn
set groups __contrail_overlay_evpn_type5__ policyswitch-options policyvrf-statement type5_policy term 2 then accept
target target:64512:7999999
set groups __contrail_overlay_evpn_type5access__ protocols policyevpn multicast-optionsmode policyingress-statement type5_policy term 3 from protocol evpn
replication
set groups __contrail_overlay_evpn_type5access__ policy-optionsprotocols policy-statement type5_policy term 3 from route-filter 0.0.0.0/0 prefix-length-range /32-/32igmp-snooping vlan all proxy
set groups __contrail_overlay_evpn_type5access__ policyswitch-options policy-statement type5_policy term 3 then acceptvrf-target auto
set groups __contrail_overlay_lag__
set groups __contrail_overlay_multi_homing__
set groups __contrail_overlay_dhcpstorm_relaycontrol__
set apply-groups __contrail_basic__
set apply-groups __contrail_overlay_bgp__
set apply-groups __contrail_overlay_evpn__
set apply-groups __contrail_overlay_evpn_gateway_access__
set apply-groups __contrail_overlay_lag__
set apply-groups __contrail_overlay_evpnmulti_type5homing__
set apply-groups __contrail_overlay_dhcpstorm_relaycontrol__
set system host-name Spine2Leaf1
set system root-authentication encrypted-password "$6$jDqH1tQu$YRcyEsvWdd5JExE0vHDZGkLBeFH/m95mg0W4.M8QC7xW3BWe3CMTs1EtxF.9pKvOyK55T2xB6pBIWuz1QSS6n1$6$N.olvWXe$bre63i2oxPcMYkWxX7rmAStuvvnjlPcKDUZ.6laUqp.G6Ywo/8RfDgvCyp6BHTTGxOy2XFb4LSXcNo3sOho8M."
set system login user jcluser uid 2000
set system login user jcluser class super-user
set system login user jcluser authentication encrypted-password "$6$kGQu2LyG$P6I21NZjh1mYl6wyGVMAm/pmjzQDjWlsodMi1N//izoZxQfBEx283mDMMCwGMFWsw4RXMVmsItMwTzqBPnYVL1$6$0L1vpE3h$lifJp5SXAKGH7HjlkQ2y3TNBdshF2scac8I6dSqQQwu11k2EQOd3Faa1OtaSCFJ8kAQaBODzck84iar3aElQC1"
set system services ssh root-login allow
set system services telnet
set system services netconf ssh
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system extensions providers juniper license-type juniper deployment-scope commercial
set system extensions providers chef license-type juniper deployment-scope commercial
set system ntp server 100.123.0.1
set interfaces xe-0/0/0 description "to leaf1spine1"
set interfaces xe-0/0/0 mtu 9192
set interfaces xe-0/0/0 unit 0 family inet address 10.1.2313.12/30
set interfaces xe-0/0/1 description "to leaf2spine2"
set interfaces xe-0/0/1 mtu 9192
set interfaces xe-0/0/1 unit 0 family inet address 10.1.2423.12/30
set interfaces xe-0/0/2 unit 0 description "To AIO control_data, IBGP overlay"
set interfaces xe-0/0/32 unitmtu 09192
set interfaces xe-0/0/42 unit 0 family ethernet-switching interface-mode access
set interfaces xe-0/0/52 unit 0 family ethernet-switching vlan members cluster_infra
set interfaces xe-0/0/6em0 unit 0 family inet address 100.123.13.203/16
set interfaces em1 unit xe-0/0/7 unit 00 family inet address 169.254.0.2/24
set interfaces em0irb unit 0 family inet address 100.123.13.202/16 4001 description "irb for vlan_cluster_infra AIO data interface default"
set interfaces em1irb unit 04001 family inet address 16910.2540.01.2254/24
set interfaces lo0 unit 0 family inet address 10.255.0.23/32
set snmp community public authorization read-only
set forwarding-options storm-control-profiles default all
set routing-options static route 100.123.0.0/16 next-hop 100.123.0.1
set routing-options static route 0.0.0.0/0 next-hop 100.123.0.1
set routing-options router-id 10.255.0.23
set routing-options forwarding-table export PFE-LB
set routing-options forwarding-table ecmp-fast-reroute
set protocols bgp log-updown
set protocols bgp graceful-restart
set protocols bgp group IPCLOS_eBGP type external
set protocols bgp group IPCLOS_eBGP mtu-discovery
set protocols bgp group IPCLOS_eBGP import IPCLOS_BGP_IMP
set protocols bgp group IPCLOS_eBGP export IPCLOS_BGP_EXP
set protocols bgp group IPCLOS_eBGP vpn-apply-export
set protocols bgp group IPCLOS_eBGP local-as 6550265503
set protocols bgp group IPCLOS_eBGP multipath multiple-as
set protocols bgp group IPCLOS_eBGP bfd-liveness-detection minimum-interval 350
set protocols bgp group IPCLOS_eBGP bfd-liveness-detection multiplier 3
set protocols bgp group IPCLOS_eBGP bfd-liveness-detection session-mode automatic
set protocols bgp group IPCLOS_eBGP neighbor 10.1.2313.21 description "EBGP peering to Leaf1Spine1"
set protocols bgp group IPCLOS_eBGP neighbor 10.1.2313.21 peer-as 6550365501
set protocols bgp group IPCLOS_eBGP neighbor 10.1.2423.21 description "EBGP peering to Leaf2Spine2"
set protocols bgp group IPCLOS_eBGP neighbor 10.1.2423.21 peer-as 6550465502
set protocols lldp interface all
set protocols igmp-snooping vlan default
set policy-options policy-statement IPCLOS_BGP_EXP term loopback from protocol direct
set policy-options policy-statement IPCLOS_BGP_EXP term loopback from protocol bgp
set policy-options policy-statement IPCLOS_BGP_EXP term loopback then community add spine2leaf1
set policy-options policy-statement IPCLOS_BGP_EXP term loopback then accept
set policy-options policy-statement IPCLOS_BGP_EXP term default then reject
set policy-options policy-statement IPCLOS_BGP_IMP term loopback from protocol bgp
set policy-options policy-statement IPCLOS_BGP_IMP term loopback from protocol direct
set policy-options policy-statement IPCLOS_BGP_IMP term loopback then accept
set policy-options policy-statement IPCLOS_BGP_IMP term default then reject
set policy-options policy-statement PFE-LB then load-balance per-packet
set policy-options community spine2leaf1 members 6550265503:1
set vlans cluster_infra vlan-id 4001
set vlans cluster_infra l3-interface irb.4001
set vlans default vlan-id 1
{master:0}
root@Spine2>root@Leaf1>
|