# Huawei Versatile Routing Platform Software # VRP (R) software, Version 8.220 (NetEngine 8000 V800R022C00SPC600) # Copyright (C) 2012-2022 Huawei Technologies Co., Ltd. # Patch Version: V800R022HP1b11 # NetEngine 8000 M8's Device status: # ------------------------------------------------------------------------------- # Slot # Type Online Register Status Role LsId Primary # ------------------------------------------------------------------------------- # 7 PIC Present Registered Normal OTHER 0 NA # 9 IPU Present Registered Normal MMB 0 Master # 11 PWR Present Registered Normal OTHER 0 NA # 12 PWR Present Registered Abnormal OTHER 0 NA # 13 FAN Present Registered Normal OTHER 0 NA # 14 CLK Present Registered Normal OTHER 0 Master # ------------------------------------------------------------------------------- !Software Version V800R022C00SPC600 !Last configuration was updated at 2024-10-02 15:38:59-03:00 by bruna.noc !Last configuration was saved at 2024-09-26 14:05:34-03:00 by jeffrey !kms_feature -- # sysname SE77E-BGP-NE8000-IGRE # undo FTP server-source all-interface undo FTP ipv6 server-source all-interface # info-center channel 6 name rsyslog info-center source default channel 6 log level informational info-center loghost source LoopBack0 info-center loghost 143.0.252.53 channel 6 facility local2 # service-template template-default0 # service-template template-default1 # service-template template-default2 # service-template template-default3 # service-template template-default4 # ntp-service server source-interface all disable ntp-service ipv6 server source-interface all disable # vlan batch 2004 # undo icmp name timestamp-reply send # as-notation plain # ip netstream as-mode 32 ip netstream timeout active 1 ip netstream timeout inactive 15 ip netstream export version 9 origin-as bgp-nexthop ttl ip netstream export template sequence-number fixed ip netstream export index-switch 32 ip netstream export template timeout-rate 1 ip netstream sampler fix-packets 1024 inbound ip netstream sampler fix-packets 1024 outbound ip netstream export source 10.0.0.2 ip netstream export host 143.0.252.52 2061 ip netstream export host 143.0.252.42 3056 ip netstream export template option sampler ip netstream export template option timeout-rate 1 ip netstream export template option application-label # ipv6 netstream as-mode 32 ipv6 netstream timeout active 1 ipv6 netstream timeout inactive 15 ipv6 netstream export version 9 origin-as bgp-nexthop ttl ipv6 netstream export template sequence-number fixed ipv6 netstream export index-switch 32 ipv6 netstream export template timeout-rate 1 ipv6 netstream sampler fix-packets 1024 inbound ipv6 netstream sampler fix-packets 1024 outbound ipv6 netstream export source 10.0.0.2 ipv6 netstream export host 143.0.252.52 2061 ipv6 netstream export host 143.0.252.42 3056 ipv6 netstream export template option sampler ipv6 netstream export template option timeout-rate 1 # undo telnet server-source all-interface undo telnet ipv6 server-source all-interface # mpls lsr-id 10.0.0.2 # mpls mpls te mpls rsvp-te mpls te cspf # mpls l2vpn # mpls ldp # ipv4-family # dhcp server request-packet all-interface disable # acl ip-pool ORIGEM_LIBERADA ip address 143.0.252.0 0.0.3.255 ip address 38.191.124.0 0.0.3.255 ip address 205.164.78.0 0.0.1.255 ip address 177.75.48.147 0.0.0.0 # acl ip-pool PERMITE_SERVICE_PORTS ip address 143.0.255.120 0.0.0.0 ip address 143.0.254.170 0.0.0.0 ip address 143.0.253.13 0.0.0.0 ip address 143.0.254.106 0.0.0.0 ip address 143.0.255.31 0.0.0.0 ip address 143.0.253.52 0.0.0.0 ip address 143.0.253.27 0.0.0.0 ip address 143.0.253.118 0.0.0.0 ip address 205.164.78.3 0.0.0.0 ip address 143.0.255.179 0.0.0.0 ip address 143.0.255.32 0.0.0.0 ip address 143.0.255.34 0.0.0.0 ip address 143.0.253.87 0.0.0.0 ip address 143.0.254.78 0.0.0.0 ip address 143.0.253.69 0.0.0.0 ip address 143.0.255.136 0.0.0.0 ip address 143.0.254.76 0.0.0.0 ip address 143.0.255.145 0.0.0.0 ip address 143.0.255.190 0.0.0.0 ip address 143.0.255.189 0.0.0.0 ip address 143.0.255.135 0.0.0.0 ip address 143.0.254.77 0.0.0.0 ip address 143.0.253.66 0.0.0.0 ip address 143.0.253.76 0.0.0.0 ip address 143.0.255.17 0.0.0.0 ip address 143.0.255.10 0.0.0.0 ip address 143.0.253.47 0.0.0.0 ip address 143.0.254.123 0.0.0.0 ip address 143.0.255.144 0.0.0.0 ip address 143.0.255.140 0.0.0.0 ip address 143.0.253.29 0.0.0.0 ip address 143.0.255.132 0.0.0.0 ip address 143.0.254.92 0.0.0.0 ip address 143.0.254.104 0.0.0.0 ip address 143.0.253.91 0.0.0.0 ip address 143.0.253.89 0.0.0.0 ip address 143.0.254.131 0.0.0.0 ip address 143.0.254.130 0.0.0.0 ip address 143.0.255.173 0.0.0.0 ip address 143.0.255.149 0.0.0.0 ip address 143.0.255.148 0.0.0.0 ip address 143.0.255.134 0.0.0.0 ip address 143.0.255.133 0.0.0.0 ip address 143.0.253.70 0.0.0.0 ip address 143.0.253.107 0.0.0.0 ip address 143.0.255.3 0.0.0.0 ip address 143.0.253.67 0.0.0.0 ip address 143.0.253.126 0.0.0.0 ip address 143.0.254.70 0.0.0.0 ip address 143.0.255.137 0.0.0.0 ip address 143.0.254.119 0.0.0.0 ip address 143.0.254.178 0.0.0.0 ip address 143.0.253.189 0.0.0.0 ip address 143.0.255.37 0.0.0.0 ip address 143.0.253.60 0.0.0.0 ip address 143.0.255.114 0.0.0.0 ip address 143.0.253.68 0.0.0.0 ip address 143.0.253.98 0.0.0.0 ip address 143.0.253.92 0.0.0.0 ip address 143.0.255.191 0.0.0.0 ip address 143.0.254.73 0.0.0.0 ip address 205.164.78.1 0.0.0.0 ip address 143.0.255.177 0.0.0.0 ip address 205.164.78.158 0.0.0.0 # acl ip-pool PERMITE_SERVICE_PORTS_SRV ip address 143.0.252.13 0.0.0.0 ip address 143.0.252.16 0.0.0.0 ip address 143.0.252.15 0.0.0.0 ip address 143.0.252.25 0.0.0.0 ip address 143.0.252.26 0.0.0.0 ip address 143.0.252.154 0.0.0.0 ip address 143.0.252.96 0.0.0.15 ip address 143.0.252.22 0.0.0.0 ip address 143.0.255.104 0.0.0.0 ip address 143.0.252.50 0.0.0.0 ip address 143.0.252.21 0.0.0.0 ip address 143.0.252.10 0.0.0.0 ip address 143.0.252.20 0.0.0.0 ip address 143.0.252.30 0.0.0.0 ip address 143.0.252.56 0.0.0.0 ip address 143.0.252.55 0.0.0.0 ip address 143.0.252.35 0.0.0.0 ip address 143.0.252.36 0.0.0.0 ip address 143.0.252.59 0.0.0.0 # acl ip-pool PREFIXO_PUBLICO ip address 143.0.252.0 0.0.0.255 ip address 143.0.253.0 0.0.0.255 ip address 143.0.254.0 0.0.0.255 ip address 143.0.255.0 0.0.0.255 ip address 38.191.124.0 0.0.0.255 ip address 38.191.125.0 0.0.0.255 ip address 38.191.126.0 0.0.0.255 ip address 38.191.127.0 0.0.0.255 ip address 205.164.78.0 0.0.0.255 ip address 205.164.79.0 0.0.0.255 # acl ipv6-pool ORIGEM_LIBERADA_V6 ipv6 address 2804:2994:: 32 # acl ipv6-pool PERMITE_SERVICE_PORTS_SRV_V6 ipv6 address 2804:2994:77:77A:: 64 ipv6 address 2804:2994:77::22 128 ipv6 address 2804:2994:77::21 128 ipv6 address 2804:2994:77::15 128 ipv6 address 2804:2994:77::16 128 ipv6 address 2804:2994:77::56 128 ipv6 address 2804:2994:77::36 128 # acl ipv6-pool PERMITE_SERVICE_PORTS_V6 # acl ipv6-pool PREFIXO_PUBLICO_V6 ipv6 address 2804:2994:: 32 # acl port-pool SERVICE_PORTS eq 2277 eq 2377 eq 8077 eq 8291 lt 1024 # acl number 2061 description RESTRICAO_ACESSO_SNMP rule 10 permit source 10.0.0.0 0.255.255.255 rule 11 permit source 172.0.0.0 0.63.255.255 rule 12 permit source 192.168.0.0 0.0.255.255 rule 13 permit source 143.0.252.0 0.0.3.255 # acl name ACL_SERVICE_PORTS advance rule 18 permit tcp destination-pool PERMITE_SERVICE_PORTS_SRV rule 19 permit udp destination-pool PERMITE_SERVICE_PORTS_SRV rule 20 permit tcp destination-pool PERMITE_SERVICE_PORTS rule 21 permit udp destination-pool PERMITE_SERVICE_PORTS rule 90 permit tcp source-pool ORIGEM_LIBERADA rule 91 permit udp source-pool ORIGEM_LIBERADA rule 200 deny tcp destination-pool PREFIXO_PUBLICO destination-port-pool SERVICE_PORTS rule 201 deny udp destination-pool PREFIXO_PUBLICO destination-port-pool SERVICE_PORTS # acl ipv6 number 2061 description RESTRICAO_ACESSO_SNMP rule 10 permit source 2804:2994::/32 # acl ipv6 name ACL_SERVICE_PORTS_V6 advance rule 18 permit tcp destination-pool PERMITE_SERVICE_PORTS_SRV_V6 rule 19 permit udp destination-pool PERMITE_SERVICE_PORTS_SRV_V6 rule 20 permit tcp destination-pool PERMITE_SERVICE_PORTS_V6 rule 21 permit udp destination-pool PERMITE_SERVICE_PORTS_V6 rule 90 permit tcp source-pool ORIGEM_LIBERADA_V6 rule 91 permit udp source-pool ORIGEM_LIBERADA_V6 rule 200 deny tcp destination-pool PREFIXO_PUBLICO_V6 destination-port lt 1024 rule 201 deny udp destination-pool PREFIXO_PUBLICO_V6 destination-port lt 1024 rule 202 deny tcp destination-pool PREFIXO_PUBLICO_V6 destination-port eq 8291 rule 203 deny udp destination-pool PREFIXO_PUBLICO_V6 destination-port eq 8291 rule 204 deny tcp destination-pool PREFIXO_PUBLICO_V6 destination-port eq 8077 rule 205 deny udp destination-pool PREFIXO_PUBLICO_V6 destination-port eq 8077 rule 206 deny tcp destination-pool PREFIXO_PUBLICO_V6 destination-port eq 2277 rule 207 deny udp destination-pool PREFIXO_PUBLICO_V6 destination-port eq 2277 rule 208 deny tcp destination-pool PREFIXO_PUBLICO_V6 destination-port eq 2377 rule 209 deny udp destination-pool PREFIXO_PUBLICO_V6 destination-port eq 2377 # traffic classifier CLASS-SERVICE_PORTS operator or if-match acl name ACL_SERVICE_PORTS precedence 1 # traffic classifier CLASS-SERVICE_PORTS_V6 operator or if-match ipv6 acl name ACL_SERVICE_PORTS_V6 precedence 1 # traffic behavior BEH-SERVICE_PORTS # traffic behavior BEH-SERVICE_PORTS_V6 # traffic policy POLICY-SERVICE-PORTS undo share-mode statistics enable classifier CLASS-SERVICE_PORTS behavior BEH-SERVICE_PORTS precedence 1 classifier CLASS-SERVICE_PORTS_V6 behavior BEH-SERVICE_PORTS_V6 precedence 2 # aaa user-password password-force-change disable local-user jeffrey password irreversible-cipher $1c$~M\.4AfXU6$MRPjS{6xQTA}-m7:zo`FW4pPCdhM*HM)`H$ local-user jeffrey service-type ftp telnet ssh snmp http local-user jeffrey level 3 local-user jeffrey state block fail-times 3 interval 5 local-user bruna.noc password irreversible-cipher $1c$J8.802YhfQ$Db=40}XSXM[Dlk@WN=GIZPM9Dx>&=*r/H:0lEUW)$ local-user bruna.noc service-type ftp telnet ssh http local-user bruna.noc level 3 local-user bruna.noc state active local-user oxidized password irreversible-cipher $1c$\5J2SLaPV'$te"0"jWm7)"G##-S9'fYMs%G1WrNp5'jj^F[zXx9P]F4;j2CS^dq9.T5|&$ local-user lookingglass service-type ssh local-user lookingglass level 1 local-user lookingglass state active # authentication-scheme default0 # authentication-scheme default1 # authentication-scheme default authentication-mode local # authorization-scheme default # accounting-scheme default0 # accounting-scheme default1 # domain default0 # domain default1 # domain default_admin # ospfv3 1 router-id 10.0.0.2 default-route-advertise area 0.0.0.0 # interface Eth-Trunk1 mtu 9600 description SE77E-SW-HW-6730-IGRE mode lacp-static statistic enable # interface Eth-Trunk1.25 vlan-type dot1q 25 description VLAN-25-RADAR-FNA shutdown ipv6 enable ip address 172.17.0.14 255.255.255.252 ipv6 address FC00:0:0:1::E/126 statistic enable ip netstream inbound ip netstream outbound ipv6 netstream inbound ipv6 netstream outbound # interface Eth-Trunk1.26 vlan-type dot1q 26 description VLAN-26-RADAR-AS262880 ipv6 enable ip address 172.17.0.42 255.255.255.252 ipv6 address FC00:0:0:2::A/126 statistic enable ip netstream inbound ip netstream outbound ipv6 netstream inbound ipv6 netstream outbound # interface Eth-Trunk1.28 vlan-type dot1q 28 description VLAN-28-COMMCORP-Via-RADAR ipv6 enable ip address 172.17.0.46 255.255.255.252 ipv6 address FC00:0:0:1::22/126 statistic enable traffic-policy POLICY-SERVICE-PORTS inbound ip netstream inbound ip netstream outbound ipv6 netstream inbound ipv6 netstream outbound # interface Eth-Trunk1.40 vlan-type dot1q 40 description VLAN-40-ALGAR ipv6 enable ip address 100.110.110.185 255.255.255.252 ipv6 address 2001:1291:1002:2A13::B/64 statistic enable traffic-policy POLICY-SERVICE-PORTS inbound ip netstream inbound ip netstream outbound ipv6 netstream inbound ipv6 netstream outbound tcp adjust-mss 1400 inbound binding tunnel gre # interface Eth-Trunk1.410 vlan-type dot1q 410 mtu 1500 description VLAN-410-CGNAT-IGRE-V4 ipv6 enable ip address 10.7.7.29 255.255.255.252 statistic enable ospf network-type p2p # interface Eth-Trunk1.411 vlan-type dot1q 411 description VLAN-411-BGN-IGRE-V4 ip address 10.7.7.33 255.255.255.252 statistic enable ospf network-type p2p ip netstream inbound ip netstream outbound # interface Eth-Trunk1.412 vlan-type dot1q 412 description VLAN-412-BGN-IGRE-V6 ipv6 enable ipv6 address auto link-local ipv6 mtu 1480 statistic enable ospfv3 1 area 0.0.0.0 ospfv3 network-type p2p ipv6 netstream inbound ipv6 netstream outbound # interface Eth-Trunk1.2004 vlan-type dot1q 2004 description VLAN-2004-iBGP-V4 ipv6 enable ip address 10.7.7.6 255.255.255.252 statistic enable ospf network-type p2p # interface Eth-Trunk1.2006 vlan-type dot1q 2006 description VLAN-2006-iBGP-V6 ipv6 enable ipv6 address FC00::A/125 statistic enable ospfv3 1 area 0.0.0.0 ospfv3 network-type p2p # interface Eth-Trunk1.2450 vlan-type dot1q 2450 description VLAN-2450-SRV-1-V4-IGRE ip address 10.7.7.53 255.255.255.252 statistic enable ospf network-type p2p # interface Eth-Trunk1.4002 vlan-type dot1q 4002 description VLAN-4002-PTT-GYN-V4 ip address 200.192.111.73 255.255.255.0 statistic enable traffic-policy POLICY-SERVICE-PORTS inbound arp expire-time 14400 ip netstream inbound ip netstream outbound tcp adjust-mss 1400 inbound arp rate-limit 0 # interface Eth-Trunk1.4003 vlan-type dot1q 4003 description VLAN-4003-PTT-GYN-V6 ipv6 enable ipv6 address 2001:12F8:0:14::73/64 statistic enable traffic-policy POLICY-SERVICE-PORTS inbound arp expire-time 14400 ipv6 netstream inbound ipv6 netstream outbound arp rate-limit 0 # interface Ethernet0/0/0 undo shutdown # interface GigabitEthernet0/7/5 undo shutdown eth-trunk 1 # interface GigabitEthernet0/7/6 undo shutdown eth-trunk 1 # interface GigabitEthernet0/7/7 undo shutdown eth-trunk 1 # interface GigabitEthernet0/7/8 undo shutdown eth-trunk 1 # interface GigabitEthernet0/7/9 undo shutdown eth-trunk 1 # interface LoopBack0 description loopback-publica ipv6 enable ip address 10.0.0.2 255.255.255.255 ipv6 address 2804:2994:400::2/128 ospfv3 1 area 0.0.0.0 # interface LoopBack1 description loopback ipv6 enable ip address 10.0.0.251 255.255.255.255 ipv6 address FC00::21/125 ospfv3 1 area 0.0.0.0 # interface LoopBack2 ip address 143.0.252.154 255.255.255.255 # interface Tunnel10 description Tunnel-UPX-ALGAR-V6 ipv6 enable ip address 10.177.129.243 255.255.255.254 tunnel-protocol gre ipv6 source 2001:1291:1002:2A13::B destination 2804:2870:1:100::11 # interface Tunnel11 description Tunnel-HUGE-ALGAR-V6 ipv6 enable ip address 10.195.88.2 255.255.255.252 ipv6 address 2804:1E20:AAA1:2DF::B/80 tunnel-protocol gre ipv6 source 2001:1291:1002:2A13::B destination 2804:1E20:11:A::2DF # interface NULL0 # bgp 264023 router-id 143.0.254.1 private-4-byte-as disable peer 10.0.0.1 as-number 264023 peer 10.0.0.1 connect-interface LoopBack0 peer 10.0.0.10 as-number 264023 peer 10.0.0.10 description WANGUARD-MITIGAR peer 10.0.0.10 connect-interface LoopBack1 10.0.0.251 peer 100.110.110.186 as-number 16735 peer 100.110.110.186 description ALGAR-V4 peer 143.0.252.52 as-number 264023 peer 143.0.252.52 description EXBGP-FLOW peer 143.0.252.52 connect-interface LoopBack0 10.0.0.2 peer 172.17.0.41 as-number 262880 peer 172.17.0.41 description VLAN-26-RADAR-AS262880 peer 172.17.0.45 as-number 262880 peer 172.17.0.45 description VLAN-28-COMMCORP-Via-RADAR peer 2001:1291:1002:2A13::A as-number 16735 peer 2001:1291:1002:2A13::A description ALGAR-V6 peer 2804:2994:77::52 as-number 264023 peer 2804:2994:77::52 description EXBGP-FLOW peer 2804:2994:77::52 connect-interface LoopBack0 2804:2994:400::2 peer FC00::9 as-number 264023 peer FC00::29 as-number 264023 peer FC00::29 description WANGUARD-MITIGAR peer FC00::29 connect-interface LoopBack1 FC00::21 peer FC00:0:0:1::21 as-number 262880 peer FC00:0:0:1::21 description VLAN-28-COMMCORP-Via-RADAR peer FC00:0:0:2::9 as-number 262880 peer FC00:0:0:2::9 description VLAN-26-RADAR-AS262880 group CDN-V4 external peer CDN-V4 ebgp-max-hop 255 peer 172.17.0.13 as-number 262880 peer 172.17.0.13 group CDN-V4 peer 172.17.0.13 description FNA-RADAR-AS262880 group CDN-V6 external peer CDN-V6 ebgp-max-hop 255 peer FC00:0:0:1::D as-number 262880 peer FC00:0:0:1::D group CDN-V6 peer FC00:0:0:1::D description VLAN-25-FNA-RADAR group HUGE-V4 external peer 10.195.88.1 as-number 264409 peer 10.195.88.1 group HUGE-V4 peer 10.195.88.1 description HUGE-ALGAR-V6 group HUGE-V6 external peer HUGE-V6 as-number 264409 peer 2804:1E20:AAA1:2DF::A as-number 264409 peer 2804:1E20:AAA1:2DF::A group HUGE-V6 peer 2804:1E20:AAA1:2DF::A description HUGE-ALGAR-V6 group OPERADORA-V4 external group OPERADORA-V6 external group PEERING-V4 external peer PEERING-V4 ebgp-max-hop 255 group PEERING-V6 external peer PEERING-V6 ebgp-max-hop 255 group PTT-GYN-V4 external peer PTT-GYN-V4 check-first-as disable peer 200.192.111.253 as-number 26162 peer 200.192.111.253 group PTT-GYN-V4 peer 200.192.111.253 description RS1-PTT-GYN peer 200.192.111.254 as-number 26162 peer 200.192.111.254 group PTT-GYN-V4 peer 200.192.111.254 description RS2-PTT-GYN group PTT-GYN-V6 external peer PTT-GYN-V6 check-first-as disable peer 2001:12F8:0:14::253 as-number 26162 peer 2001:12F8:0:14::253 group PTT-GYN-V6 peer 2001:12F8:0:14::253 description RS1-PTT-GYN peer 2001:12F8:0:14::253 connect-interface Eth-Trunk1.4003 peer 2001:12F8:0:14::253 check-first-as disable peer 2001:12F8:0:14::254 as-number 26162 peer 2001:12F8:0:14::254 group PTT-GYN-V6 peer 2001:12F8:0:14::254 description RS2-PTT-GYN peer 2001:12F8:0:14::254 connect-interface Eth-Trunk1.4003 group PTT-IX-SP-V4 external peer PTT-IX-SP-V4 check-first-as disable group PTT-IX-SP-V6 external peer PTT-IX-SP-V6 ignore group UPX-V4 external peer 10.177.129.242 as-number 52863 peer 10.177.129.242 group UPX-V4 peer 10.177.129.242 connect-interface Tunnel10 # ipv4-family unicast undo synchronization preference 20 200 255 network 38.191.124.0 255.255.252.0 network 38.191.124.0 255.255.254.0 network 38.191.124.0 255.255.255.0 network 38.191.124.0 255.255.255.128 network 38.191.124.128 255.255.255.128 network 38.191.125.0 255.255.255.0 network 38.191.125.0 255.255.255.128 network 38.191.125.128 255.255.255.128 network 38.191.126.0 255.255.254.0 network 38.191.126.0 255.255.255.0 network 38.191.126.0 255.255.255.128 network 38.191.126.128 255.255.255.128 network 38.191.127.0 255.255.255.0 network 38.191.127.0 255.255.255.128 network 38.191.127.128 255.255.255.128 network 143.0.252.0 255.255.252.0 network 143.0.252.0 255.255.254.0 network 143.0.252.0 255.255.255.0 network 143.0.252.0 255.255.255.128 network 143.0.252.128 255.255.255.128 network 143.0.253.0 255.255.255.0 network 143.0.253.0 255.255.255.128 network 143.0.253.128 255.255.255.128 network 143.0.254.0 255.255.254.0 network 143.0.254.0 255.255.255.0 network 143.0.254.0 255.255.255.128 network 143.0.254.128 255.255.255.128 network 143.0.255.0 255.255.255.0 network 143.0.255.0 255.255.255.128 network 143.0.255.128 255.255.255.128 network 205.164.78.0 255.255.254.0 network 205.164.78.0 255.255.255.0 network 205.164.78.0 255.255.255.128 network 205.164.78.128 255.255.255.128 network 205.164.79.0 255.255.255.0 network 205.164.79.0 255.255.255.128 network 205.164.79.128 255.255.255.128 ext-community-change enable prefix origin-validation enable bestroute origin-as-validation allow-invalid peer 10.0.0.1 enable peer 10.0.0.1 next-hop-local peer 10.0.0.1 advertise-community peer 10.0.0.1 advertise-large-community peer 10.0.0.1 advertise-ext-community peer 10.0.0.10 enable peer 10.0.0.10 route-policy WANGUARD-IN import peer 10.0.0.10 route-policy DROP-ALL export peer 10.0.0.10 advertise-community peer 10.0.0.10 advertise-large-community peer 10.0.0.10 advertise-ext-community peer 143.0.252.52 enable peer 143.0.252.52 route-policy ACCEPT-ALL import peer 143.0.252.52 route-policy DROP-ALL export peer 143.0.252.52 reflect-client peer 143.0.252.52 advertise-community peer 143.0.252.52 advertise-large-community peer 143.0.252.52 advertise-ext-community peer 172.17.0.41 enable peer 172.17.0.41 route-policy RADAR-AS262880-IN import peer 172.17.0.41 route-policy RADAR-AS262880-OUT export peer 172.17.0.41 advertise-community peer 172.17.0.41 advertise-large-community peer 172.17.0.41 advertise-ext-community peer 172.17.0.41 default-route-advertise peer 172.17.0.45 enable peer 172.17.0.45 route-policy COMMCORP-via-RADAR-IN import peer 172.17.0.45 route-policy COMMCORP-via-RADAR-OUT export peer 172.17.0.45 advertise-community peer 172.17.0.45 advertise-large-community peer 172.17.0.45 advertise-ext-community peer CDN-V4 enable peer CDN-V4 route-policy DROP-ALL import peer CDN-V4 route-policy CDN-V4-OUT export peer CDN-V4 advertise-community peer CDN-V4 advertise-ext-community peer 172.17.0.13 enable peer 172.17.0.13 group CDN-V4 peer CDN-V6 enable peer HUGE-V4 enable peer HUGE-V4 route-policy DROP-ALL import peer HUGE-V4 route-policy HUGE-V4-OUT export peer HUGE-V4 advertise-community peer HUGE-V4 advertise-ext-community peer 10.195.88.1 enable peer 10.195.88.1 group HUGE-V4 peer HUGE-V6 enable peer OPERADORA-V4 enable peer 100.110.110.186 enable peer 100.110.110.186 group OPERADORA-V4 peer 100.110.110.186 advertise-large-community peer 100.110.110.186 route-policy ALGAR-V4-IN import peer 100.110.110.186 route-policy ALGAR-V4-OUT export peer 100.110.110.186 advertise-community peer 100.110.110.186 advertise-ext-community peer OPERADORA-V6 enable peer PEERING-V4 enable peer PEERING-V4 route-policy PEERING-V4-IN import peer PEERING-V4 route-policy PEERING-V4-OUT export peer PEERING-V4 advertise-community peer PEERING-V4 advertise-ext-community peer PEERING-V6 enable peer PTT-GYN-V4 enable peer PTT-GYN-V4 route-policy PTT-GYN-V4-IN import peer PTT-GYN-V4 route-policy PTT-GYN-V4-OUT export peer PTT-GYN-V4 advertise-community peer PTT-GYN-V4 advertise-ext-community peer 200.192.111.253 enable peer 200.192.111.253 group PTT-GYN-V4 peer 200.192.111.254 enable peer 200.192.111.254 group PTT-GYN-V4 peer PTT-GYN-V6 enable peer PTT-IX-SP-V4 enable peer PTT-IX-SP-V4 route-policy PTT-SP-V4-IN import peer PTT-IX-SP-V4 route-policy PTT-SP-V4-OUT export peer PTT-IX-SP-V4 advertise-community peer PTT-IX-SP-V4 advertise-ext-community peer PTT-IX-SP-V4 advertise-large-community peer PTT-IX-SP-V6 enable peer UPX-V4 enable peer UPX-V4 route-policy DROP-ALL import peer UPX-V4 route-policy UPX-V4-OUT export peer UPX-V4 advertise-community peer UPX-V4 advertise-ext-community peer UPX-V4 advertise-large-community peer 10.177.129.242 enable peer 10.177.129.242 group UPX-V4 # ipv4-family flow route match-destination peer 143.0.252.52 enable peer 143.0.252.52 redirect ip rfc-compatible peer 143.0.252.52 route-policy ACCEPT-ALL import peer 143.0.252.52 route-policy DROP-ALL export peer 143.0.252.52 reflect-client peer 143.0.252.52 advertise-community peer 143.0.252.52 advertise-large-community peer 143.0.252.52 validation-disable route validation-mode include-as # ipv6-family unicast undo synchronization preference 20 200 255 network 2804:2994:: 32 network 2804:2994:: 33 network 2804:2994:: 34 network 2804:2994:: 35 network 2804:2994:: 36 network 2804:2994:1000:: 36 network 2804:2994:2000:: 35 network 2804:2994:2000:: 36 network 2804:2994:3000:: 36 network 2804:2994:4000:: 34 network 2804:2994:4000:: 35 network 2804:2994:4000:: 36 network 2804:2994:5000:: 36 network 2804:2994:6000:: 35 network 2804:2994:6000:: 36 network 2804:2994:7000:: 36 network 2804:2994:8000:: 33 network 2804:2994:8000:: 34 network 2804:2994:8000:: 35 network 2804:2994:8000:: 36 network 2804:2994:9000:: 36 network 2804:2994:A000:: 35 network 2804:2994:A000:: 36 network 2804:2994:B000:: 36 network 2804:2994:C000:: 34 network 2804:2994:C000:: 35 network 2804:2994:C000:: 36 network 2804:2994:D000:: 36 network 2804:2994:E000:: 35 network 2804:2994:E000:: 36 prefix origin-validation enable bestroute origin-as-validation allow-invalid peer 2001:1291:1002:2A13::A enable peer 2001:1291:1002:2A13::A route-policy ALGAR-V6-IN import peer 2001:1291:1002:2A13::A route-policy ALGAR-V6-OUT export peer 2001:1291:1002:2A13::A advertise-community peer 2001:1291:1002:2A13::A advertise-ext-community peer 2804:2994:77::52 enable peer 2804:2994:77::52 route-policy ACCEPT-ALL import peer 2804:2994:77::52 route-policy DROP-ALL export peer 2804:2994:77::52 reflect-client peer 2804:2994:77::52 advertise-community peer 2804:2994:77::52 advertise-large-community peer 2804:2994:77::52 advertise-ext-community peer FC00::9 enable peer FC00::9 next-hop-local peer FC00::9 advertise-community peer FC00::9 advertise-ext-community peer FC00::29 enable peer FC00::29 route-policy WANGUARD-IN import peer FC00::29 route-policy DROP-ALL export peer FC00::29 advertise-community peer FC00::29 advertise-large-community peer FC00::29 advertise-ext-community peer FC00:0:0:1::D enable peer FC00:0:0:1::D route-policy DROP-ALL import peer FC00:0:0:1::D route-policy CDN-V6-OUT export peer FC00:0:0:1::D advertise-community peer FC00:0:0:1::D advertise-ext-community peer FC00:0:0:1::21 enable peer FC00:0:0:1::21 route-policy COMMCORP-via-RADAR-V6-IN import peer FC00:0:0:1::21 route-policy COMMCORP-via-RADAR-V6-OUT export peer FC00:0:0:1::21 advertise-community peer FC00:0:0:1::21 advertise-large-community peer FC00:0:0:1::21 advertise-ext-community peer FC00:0:0:2::9 enable peer FC00:0:0:2::9 route-policy RADAR-AS262880-V6-IN import peer FC00:0:0:2::9 route-policy RADAR-AS262880-V6-OUT export peer FC00:0:0:2::9 advertise-community peer FC00:0:0:2::9 advertise-large-community peer FC00:0:0:2::9 advertise-ext-community peer FC00:0:0:2::9 default-route-advertise peer CDN-V6 enable peer CDN-V6 route-policy DROP-ALL import peer CDN-V6 route-policy CDN-V6-OUT export peer CDN-V6 advertise-community peer CDN-V6 advertise-ext-community peer HUGE-V6 enable peer HUGE-V6 route-policy DROP-ALL import peer HUGE-V6 route-policy HUGE-V6-OUT export peer HUGE-V6 advertise-community peer HUGE-V6 advertise-ext-community peer 2804:1E20:AAA1:2DF::A enable peer 2804:1E20:AAA1:2DF::A group HUGE-V6 peer OPERADORA-V6 enable peer PEERING-V6 enable peer PEERING-V6 route-policy PEERING-V6-IN import peer PEERING-V6 route-policy PEERING-V6-OUT export peer PEERING-V6 advertise-community peer PEERING-V6 advertise-ext-community peer PTT-GYN-V6 enable peer PTT-GYN-V6 route-policy PTT-GYN-V6-IN import peer PTT-GYN-V6 route-policy PTT-GYN-V6-OUT export peer PTT-GYN-V6 advertise-community peer PTT-GYN-V6 advertise-ext-community peer 2001:12F8:0:14::253 enable peer 2001:12F8:0:14::253 group PTT-GYN-V6 peer 2001:12F8:0:14::254 enable peer 2001:12F8:0:14::254 group PTT-GYN-V6 peer PTT-IX-SP-V6 enable peer PTT-IX-SP-V6 route-policy PTT-SP-V6-IN import peer PTT-IX-SP-V6 route-policy PTT-SP-V6-OUT export peer PTT-IX-SP-V6 advertise-community peer PTT-IX-SP-V6 advertise-ext-community peer PTT-IX-SP-V6 advertise-large-community # ipv6-family flow route match-destination peer 2804:2994:77::52 enable peer 2804:2994:77::52 route-policy ACCEPT-ALL import peer 2804:2994:77::52 route-policy DROP-ALL export peer 2804:2994:77::52 reflect-client peer 2804:2994:77::52 advertise-community peer 2804:2994:77::52 advertise-large-community peer 2804:2994:77::52 validation-disable route validation-mode include-as # rpki # session 143.0.252.38 tcp port 3323 timer refresh 1200 rpki-limit 512000 alert-only # session 2804:2994:77::38 tcp port 3323 # ospf 1 router-id 10.0.0.2 opaque-capability enable area 0.0.0.0 network 10.0.0.2 0.0.0.1 description loopback-privada network 10.0.0.250 0.0.0.1 description loopback-privada network 10.7.7.4 0.0.0.3 network 10.7.7.28 0.0.0.3 description SE77E-CGNAT-BGN-IGRE network 10.7.7.32 0.0.0.3 description VLAN-411-BGN-IGRE-V4 network 10.7.7.52 0.0.0.3 description VLAN-2450-SRV-1-V4-IGRE network 143.0.252.154 0.0.0.1 description loopback-publica # ip community-list PTT-SP community 65000:19551 description nega-incapsula community 64603:28604 description prepend-globo # route-policy ACCEPT-ALL permit node 10 # route-policy ALGAR-V4-IN deny node 5 if-match rpki origin-as-validation invalid # route-policy ALGAR-V4-IN permit node 6 if-match rpki origin-as-validation valid apply local-preference 200 # route-policy ALGAR-V4-IN permit node 7 if-match rpki origin-as-validation not-found apply local-preference 200 apply extcommunity rt 264023:6666 # route-policy ALGAR-V4-OUT deny node 5 if-match extcommunity-filter EXP->MITIGAR # route-policy ALGAR-V4-OUT permit node 10 if-match ip-prefix ALGAR-V4 apply extcommunity rt 264023:20 additive # route-policy ALGAR-V6-IN deny node 5 if-match rpki origin-as-validation invalid # route-policy ALGAR-V6-IN permit node 6 if-match rpki origin-as-validation valid apply local-preference 200 # route-policy ALGAR-V6-IN permit node 7 if-match rpki origin-as-validation not-found apply local-preference 200 apply extcommunity rt 264023:6666 # route-policy ALGAR-V6-OUT deny node 5 if-match extcommunity-filter EXP->MITIGAR # route-policy ALGAR-V6-OUT permit node 10 if-match ipv6 address prefix-list ALGAR-V6 apply extcommunity rt 264023:20 additive # route-policy ALGAR-V6-OUT permit node 15 if-match extcommunity-filter RADAR-AS262880 # route-policy CDN-V4-OUT permit node 10 if-match ip-prefix CDN-V4 # route-policy CDN-V6-OUT permit node 10 if-match ipv6 address prefix-list CDN-V6 # route-policy COMMCORP-via-RADAR-IN permit node 10 if-match ip-prefix ROUTE-DEFAULT # route-policy COMMCORP-via-RADAR-OUT permit node 10 if-match ip-prefix COMMCORP-via-RADAR # route-policy COMMCORP-via-RADAR-V6-IN permit node 10 if-match ipv6 address prefix-list ROUTE-DEFAULT-V6 # route-policy COMMCORP-via-RADAR-V6-OUT permit node 10 if-match ipv6 address prefix-list COMMCORP-via-RADAR-V6 # route-policy DROP-ALL deny node 10 # route-policy FLOWSPEC-IN permit node 10 if-match ip-prefix PREFIXOS-FLOW # route-policy FULL-ROUTE permit node 10 # route-policy HUGE-V4-OUT deny node 5 # route-policy HUGE-V4-OUT permit node 10 if-match ip-prefix HUGE-V4 if-match extcommunity-filter EXP->HUGE # route-policy HUGE-V6-OUT deny node 2 # route-policy HUGE-V6-OUT permit node 10 if-match extcommunity-filter EXP->HUGE # route-policy PEERING-V4-IN deny node 5 if-match rpki origin-as-validation invalid # route-policy PEERING-V4-IN permit node 6 if-match rpki origin-as-validation valid apply local-preference 1000 # route-policy PEERING-V4-IN permit node 7 if-match rpki origin-as-validation not-found apply local-preference 1000 apply extcommunity rt 264023:6666 # route-policy PEERING-V4-OUT permit node 10 if-match ip-prefix PEERING-V4 # route-policy PEERING-V6-IN deny node 5 if-match rpki origin-as-validation invalid # route-policy PEERING-V6-IN permit node 6 if-match rpki origin-as-validation valid apply local-preference 1000 # route-policy PEERING-V6-IN permit node 7 if-match rpki origin-as-validation not-found apply local-preference 1000 apply extcommunity rt 264023:6666 # route-policy PEERING-V6-OUT permit node 10 if-match ipv6 address prefix-list PEERING-V6 # route-policy PTT-GYN-V4-IN deny node 3 if-match as-path-filter FILTER-ASN # route-policy PTT-GYN-V4-IN deny node 4 if-match as-path-filter CLIENTES-ASPATH-IX # route-policy PTT-GYN-V4-IN deny node 6 if-match rpki origin-as-validation invalid # route-policy PTT-GYN-V4-IN permit node 7 if-match rpki origin-as-validation valid apply local-preference 800 # route-policy PTT-GYN-V4-IN permit node 8 if-match rpki origin-as-validation not-found apply local-preference 800 apply extcommunity rt 264023:6666 # route-policy PTT-GYN-V4-OUT deny node 5 if-match extcommunity-filter EXP->MITIGAR # route-policy PTT-GYN-V4-OUT permit node 10 if-match ip-prefix PTT-GYN-V4 apply community 65000:28604 65000:16735 65000:52925 additive apply extcommunity rt 65000:267626 additive # route-policy PTT-GYN-V6-IN deny node 3 if-match as-path-filter FILTER-ASN # route-policy PTT-GYN-V6-IN deny node 4 if-match as-path-filter CLIENTES-ASPATH-IX # route-policy PTT-GYN-V6-IN deny node 6 if-match rpki origin-as-validation invalid # route-policy PTT-GYN-V6-IN permit node 7 if-match rpki origin-as-validation valid apply local-preference 800 # route-policy PTT-GYN-V6-IN permit node 8 if-match rpki origin-as-validation not-found apply local-preference 800 apply extcommunity rt 264023:6666 # route-policy PTT-GYN-V6-OUT permit node 10 if-match ipv6 address prefix-list PTT-GYN-V6 apply community 65000:28604 65000:16735 additive apply extcommunity rt 65000:267626 additive # route-policy PTT-SP-V4-IN deny node 3 if-match as-path-filter FILTER-ASN # route-policy PTT-SP-V4-IN deny node 4 if-match as-path-filter CLIENTES-ASPATH-IX # route-policy PTT-SP-V4-IN deny node 6 if-match rpki origin-as-validation invalid # route-policy PTT-SP-V4-IN permit node 7 if-match rpki origin-as-validation valid apply local-preference 400 # route-policy PTT-SP-V4-IN permit node 8 if-match rpki origin-as-validation not-found apply local-preference 400 apply extcommunity rt 264023:6666 # route-policy PTT-SP-V4-OUT deny node 5 if-match extcommunity-filter EXP->MITIGAR # route-policy PTT-SP-V4-OUT permit node 10 if-match ip-prefix PTT-SP-V4 apply community community-list PTT-SP additive # route-policy PTT-SP-V6-IN deny node 4 if-match as-path-filter CLIENTES-ASPATH-IX # route-policy PTT-SP-V6-IN deny node 6 if-match rpki origin-as-validation invalid # route-policy PTT-SP-V6-IN permit node 7 if-match rpki origin-as-validation valid apply local-preference 600 # route-policy PTT-SP-V6-IN permit node 8 if-match rpki origin-as-validation not-found apply local-preference 600 apply extcommunity rt 264023:6666 # route-policy PTT-SP-V6-OUT permit node 10 if-match ipv6 address prefix-list PTT-IX-SP-V6 # route-policy RADAR-AS262880-IN permit node 10 if-match ip-prefix RADAR-AS262880 apply local-preference 1000 apply extcommunity rt 264023:900 additive # route-policy RADAR-AS262880-OUT permit node 10 if-match ip-prefix ROUTE-DEFAULT # route-policy RADAR-AS262880-V6-IN permit node 10 if-match ipv6 address prefix-list RADAR-AS262880-V6 apply local-preference 1000 apply extcommunity rt 264023:900 additive # route-policy RADAR-AS262880-V6-OUT permit node 10 if-match ipv6 address prefix-list ROUTE-DEFAULT-V6 # route-policy UPX-V4-OUT permit node 10 if-match ip-prefix UPX-V4 if-match extcommunity-filter EXP->MITIGAR apply cost 100 # route-policy WANGUARD-IN permit node 10 apply preferred-value 33000 # route-policy iBGP-V4-IN permit node 10 if-match ip-prefix iBGP-V4 # route-policy iBGP-V4-OUT permit node 10 if-match ip-prefix iBGP-V4 # route-policy iBGP-V6-IN permit node 10 if-match ipv6 address prefix-list iBGP-V6 # route-policy iBGP-V6-OUT permit node 10 if-match ipv6 address prefix-list iBGP-V6 # ip ip-prefix ALGAR-V4 index 10 permit 143.0.252.0 22 greater-equal 22 less-equal 22 ip ip-prefix ALGAR-V4 index 20 permit 205.164.78.0 23 greater-equal 23 less-equal 23 ip ip-prefix ALGAR-V4 index 30 permit 38.191.124.0 22 greater-equal 22 less-equal 22 ip ip-prefix BR-CENTRAL-V4 index 10 permit 143.0.252.0 22 greater-equal 22 less-equal 22 ip ip-prefix BR-CENTRAL-V4 index 30 permit 205.164.78.0 23 greater-equal 23 less-equal 23 ip ip-prefix CDN-V4 index 10 permit 143.0.252.0 22 greater-equal 22 less-equal 25 ip ip-prefix CDN-V4 index 20 permit 205.164.78.0 23 greater-equal 23 less-equal 25 ip ip-prefix CDN-V4 index 30 permit 38.191.124.0 22 greater-equal 22 less-equal 25 ip ip-prefix COMMCORP-via-RADAR index 10 permit 143.0.252.0 22 greater-equal 22 less-equal 22 ip ip-prefix HUGE-V4 index 50 permit 38.191.124.0 22 greater-equal 22 less-equal 23 ip ip-prefix PEERING-V4 index 10 permit 143.0.252.0 22 greater-equal 22 less-equal 24 ip ip-prefix PEERING-V4 index 20 permit 205.164.78.0 23 greater-equal 23 less-equal 24 ip ip-prefix PREFIXOS-FLOW index 10 permit 143.0.252.0 22 greater-equal 32 less-equal 32 ip ip-prefix PTT-GYN-V4 index 20 permit 38.191.124.0 22 greater-equal 22 less-equal 22 ip ip-prefix PTT-GYN-V4 index 30 permit 143.0.252.0 22 greater-equal 22 less-equal 22 ip ip-prefix PTT-GYN-V4 index 40 permit 205.164.78.0 23 greater-equal 23 less-equal 23 ip ip-prefix PTT-GYN-V4 index 50 permit 143.0.252.0 22 greater-equal 22 less-equal 23 ip ip-prefix PTT-GYN-V4 index 60 permit 38.191.124.0 22 greater-equal 22 less-equal 23 ip ip-prefix PTT-SP-V4 index 10 permit 143.0.252.0 22 greater-equal 22 less-equal 22 ip ip-prefix PTT-SP-V4 index 20 permit 38.191.124.0 22 greater-equal 22 less-equal 22 ip ip-prefix PTT-SP-V4 index 30 permit 205.164.78.0 23 greater-equal 23 less-equal 23 ip ip-prefix PTT-SP-V4 index 40 permit 143.0.252.0 22 greater-equal 22 less-equal 23 ip ip-prefix PTT-SP-V4 index 50 permit 38.191.124.0 22 greater-equal 22 less-equal 23 ip ip-prefix RADAR-AS262880 index 10 permit 177.10.232.0 21 greater-equal 21 less-equal 24 ip ip-prefix RADAR-AS262880 index 20 permit 168.197.52.0 22 greater-equal 22 less-equal 24 ip ip-prefix RADAR-AS262880 index 30 permit 168.227.28.0 22 greater-equal 22 less-equal 24 ip ip-prefix ROUTE-DEFAULT index 10 permit 0.0.0.0 0 ip ip-prefix UPX-V4 index 10 permit 143.0.252.0 22 greater-equal 22 less-equal 24 ip ip-prefix UPX-V4 index 30 permit 205.164.78.0 23 greater-equal 23 less-equal 24 ip ip-prefix UPX-V4 index 40 permit 38.191.124.0 22 greater-equal 22 less-equal 24 ip ip-prefix iBGP-V4 index 10 permit 143.0.252.0 22 greater-equal 22 less-equal 25 ip ip-prefix iBGP-V4 index 20 permit 205.164.78.0 23 greater-equal 23 less-equal 25 ip as-path-filter CLIENTES-ASPATH-IX index 10 permit _262880$ ip as-path-filter FILTER-ASN index 10 permit _267626$ ip as-path-filter FILTER-ASN index 20 permit _16735$ ip as-path-filter FILTER-ASN index 30 permit _52925$ ip as-path-filter FILTER-ASN index 40 permit _16735_ ip as-path-filter NEGANDO_LOCAWEB index 10 permit _27715$ ip extcommunity-filter basic CDN-FNA index 10 permit rt 264023:702 ip extcommunity-filter basic CDN-GGC index 10 permit rt 264023:700 ip extcommunity-filter basic CDN-OCA index 10 permit rt 264023:701 ip extcommunity-filter basic EXP->HUGE index 10 permit rt 264023:777 ip extcommunity-filter basic EXP->MITIGAR index 10 permit rt 264023:777 ip extcommunity-filter basic RADAR-AS262880 index 10 permit rt 264023:900 # ip route-static 0.0.0.0 0.0.0.0 10.0.0.1 preference 255 description ROUTE-CT-iBGP-BKP ip route-static 38.191.124.0 255.255.252.0 NULL0 no-install ip route-static 38.191.124.0 255.255.254.0 NULL0 no-install ip route-static 38.191.124.0 255.255.255.0 NULL0 no-install ip route-static 38.191.124.0 255.255.255.128 NULL0 no-install ip route-static 38.191.124.128 255.255.255.128 NULL0 no-install ip route-static 38.191.125.0 255.255.255.0 NULL0 no-install ip route-static 38.191.125.0 255.255.255.128 NULL0 no-install ip route-static 38.191.125.128 255.255.255.128 NULL0 no-install ip route-static 38.191.126.0 255.255.254.0 NULL0 no-install ip route-static 38.191.126.0 255.255.255.0 NULL0 no-install ip route-static 38.191.126.0 255.255.255.128 NULL0 no-install ip route-static 38.191.126.128 255.255.255.128 NULL0 no-install ip route-static 38.191.127.0 255.255.255.0 NULL0 no-install ip route-static 38.191.127.0 255.255.255.128 NULL0 no-install ip route-static 38.191.127.128 255.255.255.128 NULL0 no-install ip route-static 143.0.252.0 255.255.252.0 NULL0 no-install ip route-static 143.0.252.0 255.255.254.0 NULL0 no-install ip route-static 143.0.252.0 255.255.255.0 NULL0 no-install ip route-static 143.0.252.0 255.255.255.128 NULL0 no-install ip route-static 143.0.252.128 255.255.255.128 NULL0 no-install ip route-static 143.0.253.0 255.255.255.0 NULL0 no-install ip route-static 143.0.253.0 255.255.255.128 NULL0 no-install ip route-static 143.0.253.128 255.255.255.128 NULL0 no-install ip route-static 143.0.254.0 255.255.254.0 NULL0 no-install ip route-static 143.0.254.0 255.255.255.0 NULL0 no-install ip route-static 143.0.254.0 255.255.255.128 NULL0 no-install ip route-static 143.0.254.128 255.255.255.128 NULL0 no-install ip route-static 143.0.255.0 255.255.255.0 NULL0 no-install ip route-static 143.0.255.0 255.255.255.128 NULL0 no-install ip route-static 143.0.255.128 255.255.255.128 NULL0 no-install ip route-static 192.0.2.1 255.255.255.255 NULL0 no-install description BLACKHOLE ip route-static 205.164.78.0 255.255.254.0 NULL0 no-install ip route-static 205.164.78.0 255.255.255.0 NULL0 no-install ip route-static 205.164.78.0 255.255.255.128 NULL0 no-install ip route-static 205.164.78.128 255.255.255.128 NULL0 no-install ip route-static 205.164.79.0 255.255.255.0 NULL0 no-install ip route-static 205.164.79.0 255.255.255.128 NULL0 no-install ip route-static 205.164.79.128 255.255.255.128 NULL0 no-install # ipv6 route-static 2804:2994:: 32 NULL0 no-install ipv6 route-static 2804:2994:: 33 NULL0 no-install ipv6 route-static 2804:2994:: 34 NULL0 no-install ipv6 route-static 2804:2994:: 35 NULL0 no-install ipv6 route-static 2804:2994:: 36 NULL0 no-install ipv6 route-static 2804:2994:1000:: 36 NULL0 no-install ipv6 route-static 2804:2994:2000:: 35 NULL0 no-install ipv6 route-static 2804:2994:2000:: 36 NULL0 no-install ipv6 route-static 2804:2994:3000:: 36 NULL0 no-install ipv6 route-static 2804:2994:4000:: 34 NULL0 no-install ipv6 route-static 2804:2994:4000:: 35 NULL0 no-install ipv6 route-static 2804:2994:4000:: 36 NULL0 no-install ipv6 route-static 2804:2994:5000:: 36 NULL0 no-install ipv6 route-static 2804:2994:6000:: 35 NULL0 no-install ipv6 route-static 2804:2994:6000:: 36 NULL0 no-install ipv6 route-static 2804:2994:7000:: 36 NULL0 no-install ipv6 route-static 2804:2994:8000:: 33 NULL0 no-install ipv6 route-static 2804:2994:8000:: 34 NULL0 no-install ipv6 route-static 2804:2994:8000:: 35 NULL0 no-install ipv6 route-static 2804:2994:8000:: 36 NULL0 no-install ipv6 route-static 2804:2994:9000:: 36 NULL0 no-install ipv6 route-static 2804:2994:A000:: 35 NULL0 no-install ipv6 route-static 2804:2994:A000:: 36 NULL0 no-install ipv6 route-static 2804:2994:B000:: 36 NULL0 no-install ipv6 route-static 2804:2994:C000:: 34 NULL0 no-install ipv6 route-static 2804:2994:C000:: 35 NULL0 no-install ipv6 route-static 2804:2994:C000:: 36 NULL0 no-install ipv6 route-static 2804:2994:D000:: 36 NULL0 no-install ipv6 route-static 2804:2994:E000:: 35 NULL0 no-install ipv6 route-static 2804:2994:E000:: 36 NULL0 no-install ipv6 route-static 2804:2994:F000:: 36 NULL0 no-install # ip ipv6-prefix ALGAR-V6 index 10 permit 2804:2994:: 32 greater-equal 32 less-equal 32 ip ipv6-prefix CDN-V6 index 10 permit 2804:2994:: 32 greater-equal 32 less-equal 36 ip ipv6-prefix COMMCORP-via-RADAR-V6 index 10 permit 2804:2994:: 32 greater-equal 32 less-equal 32 ip ipv6-prefix DEFAULT-ROUTE-V6 index 10 permit :: 0 ip ipv6-prefix PEERING-V6 index 10 permit 2804:2994:: 32 greater-equal 32 less-equal 35 ip ipv6-prefix PTT-GYN-V6 index 10 permit 2804:2994:: 32 greater-equal 32 less-equal 35 ip ipv6-prefix PTT-IX-SP-V6 index 10 permit 2804:2994:: 32 greater-equal 32 less-equal 32 ip ipv6-prefix PTT-IX-SP-V6 index 20 permit 2804:2994:: 32 greater-equal 32 less-equal 33 ip ipv6-prefix RADAR-AS262880-V6 index 10 permit 2804:2EE8:: 32 greater-equal 32 less-equal 48 ip ipv6-prefix ROUTE-DEFAULT-V6 index 10 permit :: 0 ip ipv6-prefix iBGP-V6 index 10 permit 2804:2994:: 32 greater-equal 32 less-equal 48 # snmp-agent snmp-agent acl 2061 snmp-agent local-engineid 800007DB052102353A3A101600102301 snmp-agent community read cipher %^%#"dIH1M`Sd9LS9<;s53.WJGus)^Q`oX$Hb(PQctr6WS[WL!DE&+sF|JLRKldFPU~ANkW[o7ic"%V8G3c6%^%# alias __CommunityAliasName_01_46634 # snmp-agent sys-info contact NOC snmp-agent sys-info version v2c v3 snmp-agent community complexity-check disable # snmp-agent mib-view included mibvew mib-2 snmp-agent mib-view included mib2view mib-2 # snmp-agent protocol source-status all-interface snmp-agent protocol source-status ipv6 all-interface # undo snmp-agent proxy protocol source-status all-interface undo snmp-agent proxy protocol source-status ipv6 all-interface # stelnet server enable snetconf server enable ssh server authentication-retries 5 ssh ipv4 server port 2277 ssh ipv6 server port 2277 ssh user bruna.noc ssh user bruna.noc authentication-type all ssh user bruna.noc service-type all ssh user jeffrey ssh user jeffrey authentication-type all ssh user jeffrey service-type all ssh server-source all-interface ssh ipv6 server-source all-interface ssh server ip-block disable ssh authorization-type default aaa # ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr aes256_cbc aes192_cbc aes128_cbc arcfour256 arcfour128 3des_cbc blowfish_cbc des_cbc ssh server hmac sha2_512 sha2_256_96 sha2_256 sha1 sha1_96 md5 md5_96 ssh server key-exchange dh_group_exchange_sha256 dh_group_exchange_sha1 dh_group14_sha1 dh_group1_sha1 ecdh_sha2_nistp256 ecdh_sha2_nistp384 ecdh_sha2_nistp521 sm2_kep # ssh server publickey dsa ecc rsa sm2 # ssh server dh-exchange min-len 2048 # ssh client publickey ecc rsa rsa_sha2_256 rsa_sha2_512 # ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr ssh client hmac sha2_512 sha2_256 ssh client key-exchange dh_group_exchange_sha256 dh_group_exchange_sha1 dh_group14_sha1 ecdh_sha2_nistp256 ecdh_sha2_nistp384 ecdh_sha2_nistp521 # user-interface maximum-vty 21 # user-interface vty 0 4 authentication-mode aaa user privilege level 3 idle-timeout 35791 0 # local-aaa-server # return