set interfaces ge-1/2/3 vlan-tagging set interfaces ge-1/2/3 mtu 9192 set interfaces ge-1/2/3 unit 0 vlan-id 10 set interfaces ge-1/2/3 unit 0 family inet address 10.2.2.2/30 set interfaces ge-1/2/3 unit 1 vlan-id 11 set interfaces ge-1/2/3 unit 1 family inet address 10.3.3.2/30 set interfaces ge-1/2/3 unit 2 vlan-id 12 set interfaces ge-1/2/3 unit 2 family inet address 10.4.4.2/30 set interfaces ge-1/2/3 unit 3 vlan-id 13 set interfaces ge-1/2/3 unit 3 family inet address 10.5.5.2/30 set interfaces ge-1/2/3 unit 4 vlan-id 14 set interfaces ge-1/2/3 unit 4 family inet address 10.6.6.2/30 set interfaces ms-2/0/0 unit 13 description BP-TEST-SITE1 set interfaces ms-2/0/0 unit 13 family inet mtu 9000 set interfaces ms-2/0/0 unit 13 family inet filter input BP-TEST-SITE1 set interfaces ms-2/0/0 unit 13 service-domain inside set interfaces ms-2/0/0 unit 14 family inet mtu 9000 set interfaces ms-2/0/0 unit 14 service-domain outside set interfaces ms-2/0/0 unit 15 description BP-TEST-SITE2 set interfaces ms-2/0/0 unit 15 family inet mtu 9000 set interfaces ms-2/0/0 unit 15 family inet filter input BP-TEST-SITE2 set interfaces ms-2/0/0 unit 15 service-domain inside set interfaces ms-2/0/0 unit 16 family inet mtu 9000 set interfaces ms-2/0/0 unit 16 service-domain outside set interfaces ms-2/0/0 unit 17 description BP-TEST-SITE3 set interfaces ms-2/0/0 unit 17 family inet mtu 9000 set interfaces ms-2/0/0 unit 17 family inet filter input BP-TEST-SITE3 set interfaces ms-2/0/0 unit 17 service-domain inside set interfaces ms-2/0/0 unit 18 family inet mtu 9000 set interfaces ms-2/0/0 unit 18 service-domain outside set interfaces ms-2/0/0 unit 19 description BP-TEST-SITE4 set interfaces ms-2/0/0 unit 19 family inet mtu 9000 set interfaces ms-2/0/0 unit 19 family inet filter input BP-TEST-SITE4 set interfaces ms-2/0/0 unit 19 service-domain inside set interfaces ms-2/0/0 unit 20 family inet mtu 9000 set interfaces ms-2/0/0 unit 20 service-domain outside set interfaces ms-2/0/0 unit 21 description BP-TEST-SITE5 set interfaces ms-2/0/0 unit 21 family inet mtu 9000 set interfaces ms-2/0/0 unit 21 family inet filter input BP-TEST-SITE5 set interfaces ms-2/0/0 unit 21 service-domain inside set interfaces ms-2/0/0 unit 22 family inet mtu 9000 set interfaces ms-2/0/0 unit 22 service-domain outside set services service-set BP-TEST-SITE1 next-hop-service inside-service-interface ms-2/0/0.13 set services service-set BP-TEST-SITE1 next-hop-service outside-service-interface ms-2/0/0.14 set services service-set BP-TEST-SITE1 ipsec-vpn-options local-gateway 10.8.0.1 set services service-set BP-TEST-SITE1 ipsec-vpn-rules BP-TEST-SITE1 set services service-set BP-TEST-SITE2 next-hop-service inside-service-interface ms-2/0/0.15 set services service-set BP-TEST-SITE2 next-hop-service outside-service-interface ms-2/0/0.16 set services service-set BP-TEST-SITE2 ipsec-vpn-options local-gateway 10.8.0.2 set services service-set BP-TEST-SITE2 ipsec-vpn-rules BP-TEST-SITE2 set services service-set BP-TEST-SITE3 next-hop-service inside-service-interface ms-2/0/0.17 set services service-set BP-TEST-SITE3 next-hop-service outside-service-interface ms-2/0/0.18 set services service-set BP-TEST-SITE3 ipsec-vpn-options local-gateway 10.8.0.3 set services service-set BP-TEST-SITE3 ipsec-vpn-rules BP-TEST-SITE3 set services service-set BP-TEST-SITE4 next-hop-service inside-service-interface ms-2/0/0.19 set services service-set BP-TEST-SITE4 next-hop-service outside-service-interface ms-2/0/0.20 set services service-set BP-TEST-SITE4 ipsec-vpn-options local-gateway 10.8.0.4 set services service-set BP-TEST-SITE4 ipsec-vpn-rules BP-TEST-SITE4 set services service-set BP-TEST-SITE5 next-hop-service inside-service-interface ms-2/0/0.21 set services service-set BP-TEST-SITE5 next-hop-service outside-service-interface ms-2/0/0.22 set services service-set BP-TEST-SITE5 ipsec-vpn-options local-gateway 10.8.0.5 set services service-set BP-TEST-SITE5 ipsec-vpn-rules BP-TEST-SITE5 set services ipsec-vpn rule BP-TEST-SITE1 term 10 from source-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE1 term 10 from destination-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE1 term 10 then remote-gateway 10.11.0.1 set services ipsec-vpn rule BP-TEST-SITE1 term 10 then dynamic ike-policy BP-TEST-SITE1 set services ipsec-vpn rule BP-TEST-SITE1 term 10 then dynamic ipsec-policy BP-TEST-SITE1 set services ipsec-vpn rule BP-TEST-SITE1 term 10 then tunnel-mtu 9000 set services ipsec-vpn rule BP-TEST-SITE1 match-direction input set services ipsec-vpn rule BP-TEST-SITE2 term 10 from source-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE2 term 10 from destination-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE2 term 10 then remote-gateway 10.11.1.1 set services ipsec-vpn rule BP-TEST-SITE2 term 10 then dynamic ike-policy BP-TEST-SITE2 set services ipsec-vpn rule BP-TEST-SITE2 term 10 then dynamic ipsec-policy BP-TEST-SITE2 set services ipsec-vpn rule BP-TEST-SITE2 term 10 then tunnel-mtu 9000 set services ipsec-vpn rule BP-TEST-SITE2 match-direction input set services ipsec-vpn rule BP-TEST-SITE3 term 10 from source-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE3 term 10 from destination-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE3 term 10 then remote-gateway 10.11.2.1 set services ipsec-vpn rule BP-TEST-SITE3 term 10 then dynamic ike-policy BP-TEST-SITE3 set services ipsec-vpn rule BP-TEST-SITE3 term 10 then dynamic ipsec-policy BP-TEST-SITE3 set services ipsec-vpn rule BP-TEST-SITE3 term 10 then tunnel-mtu 9000 set services ipsec-vpn rule BP-TEST-SITE3 match-direction input set services ipsec-vpn rule BP-TEST-SITE4 term 10 from source-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE4 term 10 from destination-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE4 term 10 then remote-gateway 10.11.3.1 set services ipsec-vpn rule BP-TEST-SITE4 term 10 then dynamic ike-policy BP-TEST-SITE4 set services ipsec-vpn rule BP-TEST-SITE4 term 10 then dynamic ipsec-policy BP-TEST-SITE4 set services ipsec-vpn rule BP-TEST-SITE4 term 10 then tunnel-mtu 9000 set services ipsec-vpn rule BP-TEST-SITE4 match-direction input set services ipsec-vpn rule BP-TEST-SITE5 term 10 from source-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE5 term 10 from destination-address 0.0.0.0/0 set services ipsec-vpn rule BP-TEST-SITE5 term 10 then remote-gateway 10.11.4.1 set services ipsec-vpn rule BP-TEST-SITE5 term 10 then dynamic ike-policy BP-TEST-SITE5 set services ipsec-vpn rule BP-TEST-SITE5 term 10 then dynamic ipsec-policy BP-TEST-SITE5 set services ipsec-vpn rule BP-TEST-SITE5 term 10 then tunnel-mtu 9000 set services ipsec-vpn rule BP-TEST-SITE5 match-direction input set services ipsec-vpn ipsec proposal HMAC-SHA1 protocol esp set services ipsec-vpn ipsec proposal HMAC-SHA1 authentication-algorithm hmac-sha1-96 set services ipsec-vpn ipsec proposal HMAC-SHA1 encryption-algorithm aes-256-cbc set services ipsec-vpn ipsec proposal HMAC-SHA1 lifetime-seconds 3600 set services ipsec-vpn ipsec policy BP-TEST-SITE1 perfect-forward-secrecy keys group14 set services ipsec-vpn ipsec policy BP-TEST-SITE1 proposals HMAC-SHA1 set services ipsec-vpn ipsec policy BP-TEST-SITE2 perfect-forward-secrecy keys group14 set services ipsec-vpn ipsec policy BP-TEST-SITE2 proposals HMAC-SHA1 set services ipsec-vpn ipsec policy BP-TEST-SITE3 perfect-forward-secrecy keys group14 set services ipsec-vpn ipsec policy BP-TEST-SITE3 proposals HMAC-SHA1 set services ipsec-vpn ipsec policy BP-TEST-SITE4 perfect-forward-secrecy keys group14 set services ipsec-vpn ipsec policy BP-TEST-SITE4 proposals HMAC-SHA1 set services ipsec-vpn ipsec policy BP-TEST-SITE5 perfect-forward-secrecy keys group14 set services ipsec-vpn ipsec policy BP-TEST-SITE5 proposals HMAC-SHA1 set services ipsec-vpn ike proposal PSK-AES256-SHA256-DH14 authentication-method pre-shared-keys set services ipsec-vpn ike proposal PSK-AES256-SHA256-DH14 dh-group group14 set services ipsec-vpn ike proposal PSK-AES256-SHA256-DH14 authentication-algorithm sha-256 set services ipsec-vpn ike proposal PSK-AES256-SHA256-DH14 encryption-algorithm aes-256-cbc set services ipsec-vpn ike proposal PSK-AES256-SHA256-DH14 lifetime-seconds 3600 set services ipsec-vpn ike policy BP-TEST-SITE1 mode main set services ipsec-vpn ike policy BP-TEST-SITE1 proposals PSK-AES256-SHA256-DH14 set services ipsec-vpn ike policy BP-TEST-SITE1 pre-shared-key ascii-text (password) set services ipsec-vpn ike policy BP-TEST-SITE2 mode main set services ipsec-vpn ike policy BP-TEST-SITE2 proposals PSK-AES256-SHA256-DH14 set services ipsec-vpn ike policy BP-TEST-SITE2 pre-shared-key ascii-text (password) set services ipsec-vpn ike policy BP-TEST-SITE3 mode main set services ipsec-vpn ike policy BP-TEST-SITE3 proposals PSK-AES256-SHA256-DH14 set services ipsec-vpn ike policy BP-TEST-SITE3 pre-shared-key ascii-text (password) set services ipsec-vpn ike policy BP-TEST-SITE4 mode main set services ipsec-vpn ike policy BP-TEST-SITE4 proposals PSK-AES256-SHA256-DH14 set services ipsec-vpn ike policy BP-TEST-SITE4 pre-shared-key ascii-text (password) set services ipsec-vpn ike policy BP-TEST-SITE5 mode main set services ipsec-vpn ike policy BP-TEST-SITE5 proposals PSK-AES256-SHA256-DH14 set services ipsec-vpn ike policy BP-TEST-SITE5 pre-shared-key ascii-text (password) set routing-options static rib-group INET-to-VR set routing-options static route 10.11.0.2/32 next-hop ms-2/0/0.13 set routing-options static route 10.11.1.2/32 next-hop ms-2/0/0.15 set routing-options static route 10.11.2.2/32 next-hop ms-2/0/0.17 set routing-options static route 10.11.3.2/32 next-hop ms-2/0/0.19 set routing-options static route 10.11.4.2/32 next-hop ms-2/0/0.21 set routing-options static route 10.11.0.1/32 next-hop 10.2.2.1 set routing-options static route 10.11.1.1/32 next-hop 10.3.3.1 set routing-options static route 10.11.2.1/32 next-hop 10.4.4.1 set routing-options static route 10.11.3.1/32 next-hop 10.5.5.1 set routing-options static route 10.11.4.1/32 next-hop 10.6.6.1 set routing-options static route 10.15.0.0/24 next-hop ms-2/0/0.13 set routing-options static route 10.16.0.0/24 next-hop ms-2/0/0.15 set routing-options static route 10.17.0.0/24 next-hop ms-2/0/0.17 set routing-options static route 10.18.0.0/24 next-hop ms-2/0/0.19 set routing-options static route 10.19.0.0/24 next-hop ms-2/0/0.21 set routing-options rib-groups SITE1-to-INET import-rib BP-TEST-SITE1.inet.0 set routing-options rib-groups SITE1-to-INET import-rib inet.0 set routing-options rib-groups SITE1-to-INET import-policy BP-TEST-SITE1 set routing-options rib-groups SITE2-to-INET import-rib BP-TEST-SITE2.inet.0 set routing-options rib-groups SITE2-to-INET import-rib inet.0 set routing-options rib-groups SITE2-to-INET import-policy BP-TEST-SITE2 set routing-options rib-groups SITE3-to-INET import-rib BP-TEST-SITE3.inet.0 set routing-options rib-groups SITE3-to-INET import-rib inet.0 set routing-options rib-groups SITE3-to-INET import-policy BP-TEST-SITE3 set routing-options rib-groups SITE4-to-INET import-rib BP-TEST-SITE4.inet.0 set routing-options rib-groups SITE4-to-INET import-rib inet.0 set routing-options rib-groups SITE4-to-INET import-policy BP-TEST-SITE4 set routing-options rib-groups SITE5-to-INET import-rib BP-TEST-SITE5.inet.0 set routing-options rib-groups SITE5-to-INET import-rib inet.0 set routing-options rib-groups SITE5-to-INET import-policy BP-TEST-SITE5 set routing-options rib-groups INET-to-VR import-rib inet.0 set routing-options rib-groups INET-to-VR import-rib LABVPNTEST.inet.0 set routing-options rib-groups INET-to-VR import-rib BP-TEST-SITE1.inet.0 set routing-options rib-groups INET-to-VR import-rib BP-TEST-SITE2.inet.0 set routing-options rib-groups INET-to-VR import-rib BP-TEST-SITE3.inet.0 set routing-options rib-groups INET-to-VR import-rib BP-TEST-SITE4.inet.0 set routing-options rib-groups INET-to-VR import-rib BP-TEST-SITE5.inet.0 set routing-options rib-groups INET-to-VR import-policy INET-to-VR set firewall filter BP-TEST-SITE1 term 10 from destination-address 0.0.0.0/0 set firewall filter BP-TEST-SITE1 term 10 then routing-instance BP-TEST-SITE1 set firewall filter BP-TEST-SITE1 term 20 then reject set firewall filter BP-TEST-SITE2 term 10 from destination-address 0.0.0.0/0 set firewall filter BP-TEST-SITE2 term 10 then routing-instance BP-TEST-SITE2 set firewall filter BP-TEST-SITE2 term 20 then reject set firewall filter BP-TEST-SITE3 term 10 from destination-address 0.0.0.0/0 set firewall filter BP-TEST-SITE3 term 10 then routing-instance BP-TEST-SITE3 set firewall filter BP-TEST-SITE3 term 20 then reject set firewall filter BP-TEST-SITE4 term 10 from destination-address 0.0.0.0/0 set firewall filter BP-TEST-SITE4 term 10 then routing-instance BP-TEST-SITE4 set firewall filter BP-TEST-SITE4 term 20 then reject set firewall filter BP-TEST-SITE5 term 10 from destination-address 0.0.0.0/0 set firewall filter BP-TEST-SITE5 term 10 then routing-instance BP-TEST-SITE5 set firewall filter BP-TEST-SITE5 term 20 then reject set routing-instances BP-TEST-SITE1 instance-type virtual-router set routing-instances BP-TEST-SITE1 interface xe-1/0/0.670 set routing-instances BP-TEST-SITE1 interface lo0.5 set routing-instances BP-TEST-SITE1 routing-options interface-routes rib-group inet SITE1-to-INET set routing-instances BP-TEST-SITE1 routing-options static rib-group SITE1-to-INET set routing-instances BP-TEST-SITE1 routing-options autonomous-system 64001 set routing-instances BP-TEST-SITE1 routing-options autonomous-system independent-domain set routing-instances BP-TEST-SITE1 protocols bgp local-as 64001 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 type external set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 multihop ttl 3 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 local-address 10.10.0.1 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 hold-time 20 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 log-updown set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 import BP-TEST-SITE1 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 export BP-TEST-DEFAULT set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 peer-as 63001 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 neighbor 10.11.0.2 BGP to next hop connected to INTERNET (Breaking Point Test) set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-INTERNET1 type external set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-INTERNET1 local-address 10.20.20.33 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-INTERNET1 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-INTERNET1 export BP-TEST-SITE1 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-INTERNET1 local-as 64001 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-INTERNET1 neighbor 10.20.20.34 peer-as 62001 set routing-instances BP-TEST-SITE2 instance-type virtual-router set routing-instances BP-TEST-SITE2 interface xe-1/0/0.671 set routing-instances BP-TEST-SITE2 interface lo0.6 set routing-instances BP-TEST-SITE2 routing-options interface-routes rib-group inet SITE2-to-INET set routing-instances BP-TEST-SITE2 routing-options static rib-group SITE2-to-INET set routing-instances BP-TEST-SITE2 routing-options autonomous-system 64002 set routing-instances BP-TEST-SITE2 routing-options autonomous-system independent-domain set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 type external set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 multihop ttl 3 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 local-address 10.10.1.1 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 import BP-TEST-SITE2 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 export BP-TEST-DEFAULT set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 peer-as 63002 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 local-as 64002 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 neighbor 10.11.1.2 BGP to next hop connected to INTERNET (Breaking Point Test) set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-INTERNET2 type external set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-INTERNET2 local-address 10.20.20.37 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-INTERNET2 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-INTERNET2 export BP-TEST-SITE2 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-INTERNET2 local-as 64002 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-INTERNET2 neighbor 10.20.20.38 peer-as 62002 set routing-instances BP-TEST-SITE3 instance-type virtual-router set routing-instances BP-TEST-SITE3 interface xe-1/0/0.672 set routing-instances BP-TEST-SITE3 interface lo0.7 set routing-instances BP-TEST-SITE3 routing-options interface-routes rib-group inet SITE3-to-INET set routing-instances BP-TEST-SITE3 routing-options static rib-group SITE3-to-INET set routing-instances BP-TEST-SITE3 routing-options autonomous-system 64003 set routing-instances BP-TEST-SITE3 routing-options autonomous-system independent-domain set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 type external set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 multihop ttl 3 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 local-address 10.10.2.1 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 import BP-TEST-SITE3 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 export BP-TEST-DEFAULT set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 peer-as 63003 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 local-as 64003 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 neighbor 10.11.2.2 BGP to next hop connected to INTERNET (Breaking Point Test) set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-INTERNET3 type external set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-INTERNET3 local-address 10.20.20.41 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-INTERNET3 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-INTERNET3 export BP-TEST-SITE3 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-INTERNET3 local-as 64003 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-INTERNET3 neighbor 10.20.20.42 peer-as 62003 set routing-instances BP-TEST-SITE4 instance-type virtual-router set routing-instances BP-TEST-SITE4 interface xe-1/0/0.673 set routing-instances BP-TEST-SITE4 interface lo0.8 set routing-instances BP-TEST-SITE4 routing-options interface-routes rib-group inet SITE4-to-INET set routing-instances BP-TEST-SITE4 routing-options static rib-group SITE4-to-INET set routing-instances BP-TEST-SITE4 routing-options autonomous-system 64004 set routing-instances BP-TEST-SITE4 routing-options autonomous-system independent-domain set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 type external set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 multihop ttl 3 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 local-address 10.10.3.1 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 import BP-TEST-SITE4 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 export BP-TEST-DEFAULT set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 peer-as 63004 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 local-as 64004 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 neighbor 10.11.3.2 BGP to next hop connected to INTERNET (Breaking Point Test) set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-INTERNET4 type external set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-INTERNET4 local-address 10.20.20.45 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-INTERNET4 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-INTERNET4 export BP-TEST-SITE4 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-INTERNET4 local-as 64004 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-INTERNET4 neighbor 10.20.20.46 peer-as 62004 set routing-instances BP-TEST-SITE5 instance-type virtual-router set routing-instances BP-TEST-SITE5 interface xe-1/0/0.674 set routing-instances BP-TEST-SITE5 interface lo0.9 set routing-instances BP-TEST-SITE5 routing-options interface-routes rib-group inet SITE5-to-INET set routing-instances BP-TEST-SITE5 routing-options static rib-group SITE5-to-INET set routing-instances BP-TEST-SITE5 routing-options autonomous-system 64005 set routing-instances BP-TEST-SITE5 routing-options autonomous-system independent-domain set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 type external set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 multihop ttl 3 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 local-address 10.10.4.1 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 import BP-TEST-SITE5 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 export BP-TEST-DEFAULT set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 peer-as 63005 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 local-as 64005 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 neighbor 10.11.4.2 BGP to next hop connected to INTERNET (Breaking Point Test) set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-INTERNET5 type external set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-INTERNET5 local-address 10.20.20.49 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-INTERNET5 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-INTERNET5 export BP-TEST-SITE5 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-INTERNET5 local-as 64005 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-INTERNET5 neighbor 10.20.20.50 peer-as 62005 set policy-options policy-statement BP-TEST-SITE1 term 10 from route-filter 10.10.0.1/32 exact set policy-options policy-statement BP-TEST-SITE1 term 10 from route-filter 10.15.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE1 term 10 then accept set policy-options policy-statement BP-TEST-SITE1 term 20 then reject set policy-options policy-statement BP-TEST-SITE2 term 10 from route-filter 10.10.1.1/32 exact set policy-options policy-statement BP-TEST-SITE2 term 10 from route-filter 10.16.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE2 term 10 then accept set policy-options policy-statement BP-TEST-SITE2 term 20 then reject set policy-options policy-statement BP-TEST-SITE3 term 10 from route-filter 10.10.2.1/32 exact set policy-options policy-statement BP-TEST-SITE3 term 10 from route-filter 10.17.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE3 term 10 then accept set policy-options policy-statement BP-TEST-SITE3 term 20 then reject set policy-options policy-statement BP-TEST-SITE4 term 10 from route-filter 10.10.3.1/32 exact set policy-options policy-statement BP-TEST-SITE4 term 10 from route-filter 10.18.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE4 term 10 then accept set policy-options policy-statement BP-TEST-SITE4 term 20 then reject set policy-options policy-statement BP-TEST-SITE5 term 10 from route-filter 10.10.4.1/32 exact set policy-options policy-statement BP-TEST-SITE5 term 10 from route-filter 10.19.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE5 term 10 then accept set policy-options policy-statement BP-TEST-SITE5 term 20 then reject set policy-options policy-statement INET-to-VR term 10 from route-filter 192.168.1.2/32 exact set policy-options policy-statement INET-to-VR term 10 from route-filter 192.168.2.2/32 exact set policy-options policy-statement INET-to-VR term 10 from route-filter 10.11.0.2/32 exact set policy-options policy-statement INET-to-VR term 10 from route-filter 10.11.1.2/32 exact set policy-options policy-statement INET-to-VR term 10 from route-filter 10.11.2.2/32 exact set policy-options policy-statement INET-to-VR term 10 from route-filter 10.11.3.2/32 exact set policy-options policy-statement INET-to-VR term 10 from route-filter 10.11.4.2/32 exact set policy-options policy-statement INET-to-VR term 10 then accept set policy-options policy-statement INET-to-VR term 20 then reject ************************************************************************************************************************ BGP is up between neighbors via route leak show bgp summary instance BP-TEST-SITE1 Groups: 2 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending BP-TEST-SITE1.inet.0 13 2 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... 10.11.0.2 63001 17304 17418 0 0 1d 2:18:50 Establ BP-TEST-SITE1.inet.0: 1/1/1/0 10.20.20.34 62001 3410 3371 0 0 1d 2:15:07 Establ BP-TEST-SITE1.inet.0: 1/12/1/0 ************************************************************************************************************************ show bgp summary instance BP-TEST-SITE2 Groups: 2 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending BP-TEST-SITE2.inet.0 13 2 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... 10.11.1.2 63002 3370 3335 0 0 1d 1:53:12 Establ BP-TEST-SITE2.inet.0: 1/1/1/0 10.20.20.38 62002 3497 3454 0 1 1d 2:53:31 Establ BP-TEST-SITE2.inet.0: 1/12/1/0 ************************************************************************************************************************ show bgp summary instance BP-TEST-SITE3 Groups: 2 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending BP-TEST-SITE3.inet.0 13 2 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... 10.11.2.2 63003 3364 3328 0 0 1d 1:50:12 Establ BP-TEST-SITE3.inet.0: 1/1/1/0 10.20.20.42 62003 3497 3453 0 1 1d 2:53:29 Establ BP-TEST-SITE3.inet.0: 1/12/1/0 ************************************************************************************************************************ show bgp summary instance BP-TEST-SITE4 Groups: 2 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending BP-TEST-SITE4.inet.0 13 2 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... 10.11.3.2 63004 3364 3328 0 0 1d 1:50:09 Establ BP-TEST-SITE4.inet.0: 1/1/1/0 10.20.20.46 62004 3497 3453 0 1 1d 2:53:26 Establ BP-TEST-SITE4.inet.0: 1/12/1/0 ************************************************************************************************************************ show bgp summary instance BP-TEST-SITE5 Groups: 2 Peers: 2 Down peers: 0 Table Tot Paths Act Paths Suppressed History Damp State Pending BP-TEST-SITE5.inet.0 13 2 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped... 10.11.4.2 63005 3363 3328 0 0 1d 1:50:08 Establ BP-TEST-SITE5.inet.0: 1/1/1/0 10.20.20.50 62005 3496 3453 0 1 1d 2:53:25 Establ BP-TEST-SITE5.inet.0: 1/12/1/0 ************************************************************************************************************************ show bgp neighbor 10.11.0.2 Peer: 10.11.0.2+179 AS 63001 Local: 10.10.0.1+56797 AS 64001 Type: External State: Established Flags: Last State: OpenConfirm Last Event: RecvKeepAlive Last Error: None Export: [ BP-TEST-DEFAULT ] Import: [ BP-TEST-SITE1 ] Options: Local Address: 10.10.0.1 Holdtime: 20 Preference: 170 Local AS: 64001 Local System AS: 0 Number of flaps: 0 Peer ID: 10.11.0.1 Local ID: 10.10.0.1 Active Holdtime: 20 Keepalive Interval: 6 Group index: 2 Peer index: 0 BFD: disabled, down NLRI for restart configured on peer: inet-unicast NLRI advertised by peer: inet-unicast NLRI for this session: inet-unicast Peer supports Refresh capability (2) Stale routes from peer are kept for: 300 Peer does not support Restarter functionality NLRI that restart is negotiated for: inet-unicast NLRI of received end-of-rib markers: inet-unicast NLRI of all end-of-rib markers sent: inet-unicast Peer supports 4 byte AS extension (peer-as 63001) Peer does not support Addpath Table BP-TEST-SITE1.inet.0 Bit: 50000 RIB State: BGP restart is complete RIB State: VPN restart is complete Send state: in sync Active prefixes: 1 Received prefixes: 1 Accepted prefixes: 1 Suppressed due to damping: 0 Advertised prefixes: 1 Last traffic (seconds): Received 1 Sent 4 Checked 15 Input messages: Total 17275 Updates 4 Refreshes 0 Octets 328293 Output messages: Total 17389 Updates 5 Refreshes 0 Octets 330666 Output Queue[4]: 0 (BP-TEST-SITE1.inet.0, inet-unicast) Trace options: open, state Trace file: /var/log/bgp-trace size 131072 files 10 ************************************************************************************************************************ ping routing-instance BP-TEST-SITE1 10.11.0.2 source 10.10.0.1 PING 10.11.0.2 (10.11.0.2): 56 data bytes 64 bytes from 10.11.0.2: icmp_seq=0 ttl=64 time=0.642 ms 64 bytes from 10.11.0.2: icmp_seq=1 ttl=64 time=0.630 ms 64 bytes from 10.11.0.2: icmp_seq=2 ttl=64 time=1.009 ms 64 bytes from 10.11.0.2: icmp_seq=3 ttl=64 time=0.619 ms 64 bytes from 10.11.0.2: icmp_seq=4 ttl=64 time=0.631 ms ^C --- 10.11.0.2 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.619/0.706/1.009/0.152 ms ping routing-instance BP-TEST-SITE2 10.11.1.2 source 10.10.1.1 PING 10.11.1.2 (10.11.1.2): 56 data bytes 64 bytes from 10.11.1.2: icmp_seq=0 ttl=64 time=0.940 ms 64 bytes from 10.11.1.2: icmp_seq=1 ttl=64 time=0.643 ms 64 bytes from 10.11.1.2: icmp_seq=2 ttl=64 time=0.600 ms 64 bytes from 10.11.1.2: icmp_seq=3 ttl=64 time=0.615 ms 64 bytes from 10.11.1.2: icmp_seq=4 ttl=64 time=0.641 ms ^C --- 10.11.1.2 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.600/0.688/0.940/0.127 ms ping routing-instance BP-TEST-SITE3 10.11.2.2 source 10.10.2.1 PING 10.11.2.2 (10.11.2.2): 56 data bytes 64 bytes from 10.11.2.2: icmp_seq=0 ttl=64 time=0.617 ms 64 bytes from 10.11.2.2: icmp_seq=1 ttl=64 time=0.606 ms 64 bytes from 10.11.2.2: icmp_seq=2 ttl=64 time=0.646 ms 64 bytes from 10.11.2.2: icmp_seq=3 ttl=64 time=0.776 ms 64 bytes from 10.11.2.2: icmp_seq=4 ttl=64 time=0.536 ms 64 bytes from 10.11.2.2: icmp_seq=5 ttl=64 time=0.806 ms ^C^X --- 10.11.2.2 ping statistics --- 6 packets transmitted, 6 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.536/0.664/0.806/0.096 ms ping routing-instance BP-TEST-SITE4 10.11.3.2 source 10.10.3.1 PING 10.11.3.2 (10.11.3.2): 56 data bytes 64 bytes from 10.11.3.2: icmp_seq=0 ttl=64 time=0.651 ms 64 bytes from 10.11.3.2: icmp_seq=1 ttl=64 time=0.632 ms 64 bytes from 10.11.3.2: icmp_seq=2 ttl=64 time=0.671 ms 64 bytes from 10.11.3.2: icmp_seq=3 ttl=64 time=0.679 ms 64 bytes from 10.11.3.2: icmp_seq=4 ttl=64 time=0.648 ms ^C --- 10.11.3.2 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.632/0.656/0.679/0.017 ms ping routing-instance BP-TEST-SITE5 10.11.4.2 source 10.10.4.1 PING 10.11.4.2 (10.11.4.2): 56 data bytes 64 bytes from 10.11.4.2: icmp_seq=0 ttl=64 time=0.655 ms 64 bytes from 10.11.4.2: icmp_seq=1 ttl=64 time=0.636 ms 64 bytes from 10.11.4.2: icmp_seq=2 ttl=64 time=0.596 ms 64 bytes from 10.11.4.2: icmp_seq=3 ttl=64 time=0.624 ms 64 bytes from 10.11.4.2: icmp_seq=4 ttl=64 time=0.620 ms ^C --- 10.11.4.2 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.596/0.626/0.655/0.019 ms ************************************************************************************************************************