## Last changed: 2013-01-10 14:59:33 UTC
version 12.1R2.9;
groups {
    LAB {
        system {
            root-authentication {
                encrypted-password "$1$29iXAfAV$7PolDwLA88JNlQdTtzNOS1"; ## SECRET-DATA
            }
            services {
                ssh;
            }
        }
        interfaces {
            ge-0/0/0 {
                unit 0 {
                    family inet {
                        address 172.16.16.65/16;
                    }
                }
            }
        }
        routing-options {
            static {
                route 10.0.0.0/8 next-hop 172.16.1.254;
            }
        }
        security {
            zones {
                security-zone VLAN16 {
                    host-inbound-traffic {
                        system-services {
                            all;
                        }
                        protocols {
                            all;
                        }
                    }
                    interfaces {
                        ge-0/0/0.0;
                    }
                }
            }
        }
    }
    HOST-INBOUND-TRAFFIC-ALL {
        security {
            zones {
                security-zone <VPN-*> {
                    host-inbound-traffic {
                        system-services {
                            all;
                        }
                        protocols {
                            all;
                        }
                    }
                }
            }
        }
    }
}
apply-groups [ LAB HOST-INBOUND-TRAFFIC-ALL ];
system {
    host-name PE-2;
    login {
        announcement "BCH:maquette encours";
        message "BCH:maquette encours";
    }
}
interfaces {
    lt-0/0/0 {
        unit 0 {
            encapsulation ethernet;
            peer-unit 1;
            family inet {
                address 1.1.0.1/30;
            }
        }
        unit 1 {
            encapsulation ethernet;
            peer-unit 0;
            family inet {
                filter {
                    input PACKET-MODE;
                }
                address 1.1.0.2/30;
            }
        }
    }
    ge-0/0/1 {
        unit 0 {
            description "to CE";
            family inet {
                address 1.1.220.2/24;
            }
        }
    }
    ge-0/0/2 {
        unit 0 {
            description "to MPLS Core";
            family inet {
                address 1.1.12.2/24;
            }
            family mpls;
        }
    }
    ge-0/0/3 {
        disable;
        unit 0 {
            family inet {
                address 1.1.23.2/24;
            }
            family mpls;
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 1.1.1.2/32;
            }
        }
    }
}
routing-options {
    router-id 1.1.1.2;
    autonomous-system 12;
}
protocols {
    mpls {
        traceoptions {
            file MPLS.log;
            flag all;
        }
        interface all;
    }
    bgp {
        traceoptions {
            file bgp.log;
            flag all;
        }
        group MP-BGP {
            type internal;
            local-address 1.1.1.2;
            family inet-vpn {
                unicast;
            }
            family l2vpn {
                signaling;
            }
            neighbor 1.1.1.1;
            neighbor 1.1.1.3;
        }
    }
    ospf {
        area 0.0.0.0 {
            interface ge-0/0/2.0;
            interface lo0.0;
            interface ge-0/0/3.0;
        }
    }
    ldp {
        interface all;
        interface lo0.0;
    }
}
security {
    policies {
        global {
            policy PERMIT-ALL {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
    }
    zones {
        security-zone VPN-C12-CE-LT {
            interfaces {
                lt-0/0/0.0;
            }
        }
        security-zone VPN-C12-CORE-LT {
            interfaces {
                lt-0/0/0.1;
            }
        }
        security-zone VPN-C12-CE {
            interfaces {
                ge-0/0/1.0;
            }
        }
        security-zone VPN-CORE {
            interfaces {
                ge-0/0/3.0;
                ge-0/0/2.0;
                lo0.0;
            }
        }
    }
}
firewall {
    filter PACKET-MODE {
        term ICMP {
            from {
                protocol icmp;
            }
            then accept;
        }
        term ELSE {
            then {
                count pckts;
                packet-mode;
                accept;
            }
        }
    }
}
routing-instances {
    VPN-C1-CE {
        instance-type virtual-router;
        interface lt-0/0/0.0;
        interface ge-0/0/1.0;
        routing-options {
            static {
                route 0.0.0.0/0 next-hop 1.1.0.2;
            }
        }
    }
    VPN-C1-CORE {
        instance-type vrf;
        interface lt-0/0/0.1;
        route-distinguisher 1.1.1.2:23;
        vrf-target target:12:23;
        routing-options {
            static {
                route 1.1.220.0/24 next-hop 1.1.0.1;
            }
        }
    }
}