system { host-name SW1.DE; time-zone Europe/Berlin; no-redirects; internet-options { tcp-drop-synfin-set; } location country-code DE; root-authentication { encrypted-password ; ## SECRET-DATA } name-server { 8.8.8.8; 8.8.4.4; } services { ssh { protocol-version v2; } netconf { ssh; } } syslog { user * { any emergency; } file messages { any notice; authorization info; } file interactive-commands { interactive-commands any; } } commit synchronize; } chassis { fpc 0 { pic 1 { sfpplus { pic-mode 10g; } } } } interfaces { interface-range local-ports { member-range ge-0/0/0 to ge-0/0/23; unit 0 { family ethernet-switching { vlan { members vlan1; } } } } interface-range local-ports2 { member-range ge-1/0/0 to ge-1/0/23; unit 0 { family ethernet-switching { vlan { members vlan1; } } } } interface-range local-ports3 { member-range ge-2/0/0 to ge-2/0/23; unit 0 { family ethernet-switching { vlan { members vlan2; } } } } interface-range local-ports4 { member-range ge-3/0/0 to ge-3/0/23; unit 0 { family ethernet-switching { vlan { members vlan2; } } } } xe-0/1/0 { description Uplink-1; unit 0 { family inet { no-redirects; address 1.1.1.1/30; } } } xe-0/1/2 { description Uplink-2; unit 0 { family inet { no-redirects; address 2.2.2.2/30; } } } vlan { unit 100 { family inet { address a.a.a.a/24; } } unit 300 { family inet { address b.b.b.b/24; } } } } routing-options { static { route a.a.a.a/24 discard; route b.b.b.b/24 discard; route z.z.z.z/32 { next-hop z.z.z.z; retain; community RemoteAS1:999; } } aggregate { route a.a.a.a/24; route b.b.b.b/24; } autonomous-system MyAS; } protocols { bgp { local-as MyAS; group Uplink1 { type external; local-address 1.1.1.1; import import_policy; authentication-key ; ## SECRET-DATA export [export_policy export_null2]; peer-as RemoteAS1; local-as MyAS; neighbor 1.1.1.2; } group Uplink2 { type external; local-address 2.2.2.2; import import_policy; authentication-key ; ## SECRET-DATA export export_policy; peer-as RemoteAS2; local-as MyAS; neighbor 2.2.2.3; } group Uplink2-Null { type external; multihop; local-address 2.2.2.2; authentication-key ; ## SECRET-DATA export export_null; peer-as RemoateAS2; local-as MyAS; neighbor 2.2.2.10; } } igmp-snooping { vlan all; } rstp; lldp { interface all; } lldp-med { interface all; } } policy-options { prefix-list export-prefixes { a.a.a.a/24; b.b.b.b/24; } prefix-list export_null { z.z.z.z/32; } policy-statement export_null { term NULL-ANNOUNCE { from { prefix-list export-null; } then accept; } term default_block { then reject; } } policy-statement export_null2 { term NULL-ANNOUNCE { from { community Uplink1Null; } then { community set Uplink1Null; next-hop self; accept; } } term default_block { then reject; } } policy-statement export_policy { term BGP-ANNOUNCE { from { prefix-list export-prefixes; } then accept; } term default_block { then reject; } } policy-statement import_policy { term ACCEPT { then accept; } } community Uplink1Null members RemoteAS1:999; } ethernet-switching-options { storm-control { interface all; } } vlans { vlan1 { vlan-id 100; l3-interface vlan.100; } vlan2 { vlan-id 300; l3-interface vlan.300; } } poe; virtual-chassis { preprovisioned; member 0 { role routing-engine; serial-number BMxxxxxxxxxx; } member 1 { role routing-engine; serial-number BMxxxxxxxxxx; } member 2 { role line-card; serial-number BMxxxxxxxxxx; } member 3 { role line-card; serial-number BMxxxxxxxxxx; } } {master:0}