root@PE1> show configuration ## Last commit: 2019-01-06 09:18:43 UTC by root version 14.1R1.10; system { host-name PE1; root-authentication { encrypted-password "$1$F9CGxD5l$5m8U5OOAIMkBg0EtyhtPT1"; ## SECRET-DATA } } chassis { fpc 0 { pic 0 { tunnel-services { bandwidth 10g; } } flexible-queuing-mode; } } interfaces { ge-0/0/0 { description PE1->P; unit 0 { family inet { address 10.0.10.1/30; } family iso; family mpls; } } ge-0/0/1 { description PE1->CE1; unit 0 { family inet { filter { input test-classifier; } address 10.10.10.1/30; } } } lo0 { unit 0 { family inet { address 192.168.0.1/32; } family iso { address 49.0000.1921.6800.0001.00; } } } } routing-options { autonomous-system 65420; } protocols { rsvp { interface ge-0/0/0.0; } mpls { label-switched-path PE1->PE2 { to 192.168.0.2; } interface ge-0/0/0.0; } bgp { group iBGP { type internal; local-address 192.168.0.1; family inet-vpn { any; } neighbor 192.168.0.3; } } isis { level 1 disable; interface ge-0/0/0.0; interface lo0.0; } } class-of-service { interfaces { ge-0/0/0 { unit 0 { rewrite-rules { exp default; } } } } } firewall { family inet { filter test-classifier { term 1 { from { destination-address { 172.21.19.0/24; } dscp be; } then { count be; forwarding-class best-effort; accept; } } term 2 { from { destination-address { 172.21.19.0/24; } dscp af11; } then { count af; forwarding-class assured-forwarding; accept; } } term 3 { then accept; } } } } routing-instances { VPN-SCB { instance-type vrf; interface ge-0/0/1.0; route-distinguisher 65420:101; vrf-target target:65420:10; vrf-table-label; routing-options { static { route 0.0.0.0/0 next-hop 10.10.10.1; route 172.21.18.0/24 next-hop 10.10.10.2; } } } } root@PE1> ------------------------------------------------------------------------------------------------------------------------------------------------------------- root@PE2> show configuration ## Last commit: 2019-01-08 17:24:04 UTC by root version 14.1R1.10; system { host-name PE2; root-authentication { encrypted-password "$1$dJfw3g.K$PzdmFXT5MiCdfYUjmMkcp."; ## SECRET-DATA } syslog { user * { any emergency; } file messages { any notice; authorization info; } file interactive-commands { interactive-commands any; } } } interfaces { ge-0/0/0 { description PE2->P; unit 0 { family inet { address 10.0.10.5/30; } family iso; family mpls; } } ge-0/0/1 { description PE2->CE2; unit 0 { family inet { filter { input test-classifer; } address 10.10.10.5/30; } } } lo0 { unit 0 { family inet { address 192.168.0.2/32; } family iso { address 49.0000.1921.6800.0002.00; } } } } routing-options { autonomous-system 65420; } protocols { rsvp { interface ge-0/0/0.0; } mpls { label-switched-path PE2->PE1 { to 192.168.0.1; } interface ge-0/0/0.0; } bgp { group iBGP { type internal; local-address 192.168.0.2; family inet-vpn { any; } neighbor 192.168.0.3; } } isis { level 1 disable; interface ge-0/0/0.0; interface lo0.0; } } policy-options { policy-statement sent-vpn { from protocol bgp; then accept; } } class-of-service { classifiers { exp mpls-ba { import default; } } interfaces { ge-0/0/0 { unit 0 { rewrite-rules { exp default; } } } ge-0/0/1 { unit 0 { classifiers { exp mpls-ba; } } } } } firewall { family inet { filter test-classifer { term 1 { from { destination-address { 172.21.18.0/24; } dscp be; } then { count be; forwarding-class best-effort; accept; } } term 2 { from { destination-address { 172.21.18.0/24; } dscp af11; } then { count af; forwarding-class assured-forwarding; accept; } } term 3 { then accept; } } } } routing-instances { VPN-SCB { instance-type vrf; interface ge-0/0/1.0; route-distinguisher 65420:102; vrf-target target:65420:10; vrf-table-label; protocols { ospf { export sent-vpn; area 0.0.0.0 { interface ge-0/0/1.0; } } } } } root@PE2>