set interfaces ge-6/0/14 description "ROUTE LEAK VPN TEST" set interfaces ge-6/0/14 vlan-tagging set interfaces ge-6/0/14 mtu 9192 set interfaces ge-6/0/14 unit 0 vlan-id 10 set interfaces ge-6/0/14 unit 0 family inet address 10.2.2.1/30 set interfaces ge-6/0/14 unit 1 vlan-id 11 set interfaces ge-6/0/14 unit 1 family inet address 10.3.3.1/30 set interfaces ge-6/0/14 unit 2 vlan-id 12 set interfaces ge-6/0/14 unit 2 family inet address 10.4.4.1/30 set interfaces ge-6/0/14 unit 3 vlan-id 13 set interfaces ge-6/0/14 unit 3 family inet address 10.5.5.1/30 set interfaces ge-6/0/14 unit 4 vlan-id 14 set interfaces ge-6/0/14 unit 4 family inet address 10.6.6.1/30 set interfaces st0 unit 30 family inet mtu 9000 set interfaces st0 unit 31 family inet mtu 9000 set interfaces st0 unit 32 family inet mtu 9000 set interfaces st0 unit 33 family inet mtu 9000 set interfaces st0 unit 34 family inet mtu 9000 set interfaces lo0 unit 5 family inet address 10.11.0.1/32 set interfaces lo0 unit 5 family inet address 10.11.0.2/32 set interfaces lo0 unit 6 family inet address 10.11.1.1/32 set interfaces lo0 unit 6 family inet address 10.11.1.2/32 set interfaces lo0 unit 7 family inet address 10.11.2.1/32 set interfaces lo0 unit 7 family inet address 10.11.2.2/32 set interfaces lo0 unit 8 family inet address 10.11.3.1/32 set interfaces lo0 unit 8 family inet address 10.11.3.2/32 set interfaces lo0 unit 9 family inet address 10.11.4.1/32 set interfaces lo0 unit 9 family inet address 10.11.4.2/32 set policy-options policy-statement BP-TEST-SITE1 term 10 from route-filter 10.15.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE1 term 10 then accept set policy-options policy-statement BP-TEST-SITE1 term 20 then reject set policy-options policy-statement BP-TEST-SITE2 term 10 from route-filter 10.16.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE2 term 10 then accept set policy-options policy-statement BP-TEST-SITE2 term 20 then reject set policy-options policy-statement BP-TEST-SITE3 term 10 from route-filter 10.17.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE3 term 10 then accept set policy-options policy-statement BP-TEST-SITE3 term 20 then reject set policy-options policy-statement BP-TEST-SITE4 term 10 from route-filter 10.18.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE4 term 10 then accept set policy-options policy-statement BP-TEST-SITE4 term 20 then reject set policy-options policy-statement BP-TEST-SITE5 term 10 from route-filter 10.19.0.0/24 orlonger set policy-options policy-statement BP-TEST-SITE5 term 10 then accept set policy-options policy-statement BP-TEST-SITE5 term 20 then reject set security ike proposal PSK-AES256-SHA256-DH14 authentication-method pre-shared-keys set security ike proposal PSK-AES256-SHA256-DH14 dh-group group14 set security ike proposal PSK-AES256-SHA256-DH14 authentication-algorithm sha-256 set security ike proposal PSK-AES256-SHA256-DH14 encryption-algorithm aes-256-cbc set security ike proposal PSK-AES256-SHA256-DH14 lifetime-seconds 3600 set security ike policy BP-TEST-SITE1 mode main set security ike policy BP-TEST-SITE1 proposals PSK-AES256-SHA256-DH14 set security ike policy BP-TEST-SITE1 pre-shared-key ascii-text (password) set security ike policy BP-TEST-SITE2 mode main set security ike policy BP-TEST-SITE2 proposals PSK-AES256-SHA256-DH14 set security ike policy BP-TEST-SITE2 pre-shared-key ascii-text (password) set security ike policy BP-TEST-SITE3 mode main set security ike policy BP-TEST-SITE3 proposals PSK-AES256-SHA256-DH14 set security ike policy BP-TEST-SITE3 pre-shared-key ascii-text (password) set security ike policy BP-TEST-SITE4 mode main set security ike policy BP-TEST-SITE4 proposals PSK-AES256-SHA256-DH14 set security ike policy BP-TEST-SITE4 pre-shared-key ascii-text (password) set security ike policy BP-TEST-SITE5 mode main set security ike policy BP-TEST-SITE5 proposals PSK-AES256-SHA256-DH14 set security ike policy BP-TEST-SITE5 pre-shared-key ascii-text (password) set security ike gateway BP-TEST-SITE1 ike-policy BP-TEST-SITE1 set security ike gateway BP-TEST-SITE1 address 10.8.0.1 set security ike gateway BP-TEST-SITE1 dead-peer-detection interval 10 set security ike gateway BP-TEST-SITE1 dead-peer-detection threshold 2 set security ike gateway BP-TEST-SITE1 external-interface lo0.5 set security ike gateway BP-TEST-SITE1 local-address 10.11.0.1 set security ike gateway BP-TEST-SITE2 ike-policy BP-TEST-SITE2 set security ike gateway BP-TEST-SITE2 address 10.8.0.2 set security ike gateway BP-TEST-SITE2 dead-peer-detection interval 10 set security ike gateway BP-TEST-SITE2 dead-peer-detection threshold 2 set security ike gateway BP-TEST-SITE2 external-interface lo0.6 set security ike gateway BP-TEST-SITE2 local-address 10.11.1.1 set security ike gateway BP-TEST-SITE3 ike-policy BP-TEST-SITE3 set security ike gateway BP-TEST-SITE3 address 10.8.0.3 set security ike gateway BP-TEST-SITE3 dead-peer-detection interval 10 set security ike gateway BP-TEST-SITE3 dead-peer-detection threshold 2 set security ike gateway BP-TEST-SITE3 external-interface lo0.7 set security ike gateway BP-TEST-SITE3 local-address 10.11.2.1 set security ike gateway BP-TEST-SITE4 ike-policy BP-TEST-SITE4 set security ike gateway BP-TEST-SITE4 address 10.8.0.4 set security ike gateway BP-TEST-SITE4 dead-peer-detection interval 10 set security ike gateway BP-TEST-SITE4 dead-peer-detection threshold 2 set security ike gateway BP-TEST-SITE4 external-interface lo0.8 set security ike gateway BP-TEST-SITE4 local-address 10.11.3.1 set security ike gateway BP-TEST-SITE5 ike-policy BP-TEST-SITE5 set security ike gateway BP-TEST-SITE5 address 10.8.0.5 set security ike gateway BP-TEST-SITE5 dead-peer-detection interval 10 set security ike gateway BP-TEST-SITE5 dead-peer-detection threshold 2 set security ike gateway BP-TEST-SITE5 external-interface lo0.9 set security ike gateway BP-TEST-SITE5 local-address 10.11.4.1 set security zones security-zone DOUG-IPV6-TEST interfaces lo0.2 set security zones security-zone BP-TEST-SITE1 host-inbound-traffic system-services all set security zones security-zone BP-TEST-SITE1 host-inbound-traffic protocols all set security zones security-zone BP-TEST-SITE1 interfaces lo0.5 set security zones security-zone BP-TEST-SITE1 interfaces ge-6/0/14.0 set security zones security-zone BP-TEST-SITE1 interfaces st0.30 set security zones security-zone BP-TEST-SITE1 interfaces ge-0/0/6.600 set security zones security-zone BP-TEST-SITE2 host-inbound-traffic system-services all set security zones security-zone BP-TEST-SITE2 host-inbound-traffic protocols all set security zones security-zone BP-TEST-SITE2 interfaces lo0.6 set security zones security-zone BP-TEST-SITE2 interfaces st0.31 set security zones security-zone BP-TEST-SITE2 interfaces ge-6/0/14.1 set security zones security-zone BP-TEST-SITE2 interfaces ge-0/0/6.601 set security zones security-zone BP-TEST-SITE3 host-inbound-traffic system-services all set security zones security-zone BP-TEST-SITE3 host-inbound-traffic protocols all set security zones security-zone BP-TEST-SITE3 interfaces lo0.7 set security zones security-zone BP-TEST-SITE3 interfaces st0.32 set security zones security-zone BP-TEST-SITE3 interfaces ge-6/0/14.2 set security zones security-zone BP-TEST-SITE3 interfaces ge-0/0/6.602 set security zones security-zone BP-TEST-SITE4 host-inbound-traffic system-services all set security zones security-zone BP-TEST-SITE4 host-inbound-traffic protocols all set security zones security-zone BP-TEST-SITE4 interfaces lo0.8 set security zones security-zone BP-TEST-SITE4 interfaces st0.33 set security zones security-zone BP-TEST-SITE4 interfaces ge-6/0/14.3 set security zones security-zone BP-TEST-SITE4 interfaces ge-0/0/6.603 set security zones security-zone BP-TEST-SITE5 host-inbound-traffic system-services all set security zones security-zone BP-TEST-SITE5 host-inbound-traffic protocols all set security zones security-zone BP-TEST-SITE5 interfaces lo0.9 set security zones security-zone BP-TEST-SITE5 interfaces st0.34 set security zones security-zone BP-TEST-SITE5 interfaces ge-6/0/14.4 set security zones security-zone BP-TEST-SITE5 interfaces ge-0/0/6.604 set routing-instances BP-TEST-SITE1 instance-type virtual-router set routing-instances BP-TEST-SITE1 interface ge-0/0/6.600 set routing-instances BP-TEST-SITE1 interface ge-6/0/14.0 set routing-instances BP-TEST-SITE1 interface lo0.5 set routing-instances BP-TEST-SITE1 interface st0.30 set routing-instances BP-TEST-SITE1 routing-options static route 10.8.0.1/32 next-hop 10.2.2.2 set routing-instances BP-TEST-SITE1 routing-options static route 10.10.0.1/32 next-hop st0.30 set routing-instances BP-TEST-SITE1 protocols bgp local-as 63001 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 type external set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 multihop ttl 3 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 local-address 10.11.0.2 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 hold-time 20 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 log-updown set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 export BP-TEST-SITE1 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 peer-as 64001 set routing-instances BP-TEST-SITE1 protocols bgp group BP-TEST-SITE1 neighbor 10.10.0.1 set routing-instances BP-TEST-SITE2 instance-type virtual-router set routing-instances BP-TEST-SITE2 interface ge-0/0/6.601 set routing-instances BP-TEST-SITE2 interface ge-6/0/14.1 set routing-instances BP-TEST-SITE2 interface lo0.6 set routing-instances BP-TEST-SITE2 interface st0.31 set routing-instances BP-TEST-SITE2 routing-options static route 10.8.0.2/32 next-hop 10.3.3.2 set routing-instances BP-TEST-SITE2 routing-options static route 10.10.1.1/32 next-hop st0.31 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 type external set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 multihop ttl 3 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 local-address 10.11.1.2 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 export BP-TEST-SITE2 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 peer-as 64002 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 local-as 63002 set routing-instances BP-TEST-SITE2 protocols bgp group BP-TEST-SITE2 neighbor 10.10.1.1 set routing-instances BP-TEST-SITE3 instance-type virtual-router set routing-instances BP-TEST-SITE3 interface ge-0/0/6.602 set routing-instances BP-TEST-SITE3 interface ge-6/0/14.2 set routing-instances BP-TEST-SITE3 interface lo0.7 set routing-instances BP-TEST-SITE3 interface st0.32 set routing-instances BP-TEST-SITE3 routing-options static route 10.8.0.3/32 next-hop 10.4.4.2 set routing-instances BP-TEST-SITE3 routing-options static route 10.10.2.1/32 next-hop st0.32 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 type external set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 multihop ttl 3 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 local-address 10.11.2.2 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 export BP-TEST-SITE3 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 peer-as 64003 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 local-as 63003 set routing-instances BP-TEST-SITE3 protocols bgp group BP-TEST-SITE3 neighbor 10.10.2.1 set routing-instances BP-TEST-SITE4 instance-type virtual-router set routing-instances BP-TEST-SITE4 interface ge-0/0/6.603 set routing-instances BP-TEST-SITE4 interface ge-6/0/14.3 set routing-instances BP-TEST-SITE4 interface lo0.8 set routing-instances BP-TEST-SITE4 interface st0.33 set routing-instances BP-TEST-SITE4 routing-options static route 10.8.0.4/32 next-hop 10.5.5.2 set routing-instances BP-TEST-SITE4 routing-options static route 10.10.3.1/32 next-hop st0.33 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 type external set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 multihop ttl 3 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 local-address 10.11.3.2 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 export BP-TEST-SITE4 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 peer-as 64004 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 local-as 63004 set routing-instances BP-TEST-SITE4 protocols bgp group BP-TEST-SITE4 neighbor 10.10.3.1 set routing-instances BP-TEST-SITE5 instance-type virtual-router set routing-instances BP-TEST-SITE5 interface ge-0/0/6.604 set routing-instances BP-TEST-SITE5 interface ge-6/0/14.4 set routing-instances BP-TEST-SITE5 interface lo0.9 set routing-instances BP-TEST-SITE5 interface st0.34 set routing-instances BP-TEST-SITE5 routing-options static route 10.8.0.5/32 next-hop 10.6.6.2 set routing-instances BP-TEST-SITE5 routing-options static route 10.10.4.1/32 next-hop st0.34 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 type external set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 multihop ttl 3 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 local-address 10.11.4.2 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 import BP-TEST-DEFAULT set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 export BP-TEST-SITE5 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 peer-as 64005 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 local-as 63005 set routing-instances BP-TEST-SITE5 protocols bgp group BP-TEST-SITE5 neighbor 10.10.4.1 set security ipsec proposal HMAC-SHA1 protocol esp set security ipsec proposal HMAC-SHA1 authentication-algorithm hmac-sha1-96 set security ipsec proposal HMAC-SHA1 encryption-algorithm aes-256-cbc set security ipsec proposal HMAC-SHA1 lifetime-seconds 3600 set security ipsec policy BP-TEST-SITE1 perfect-forward-secrecy keys group14 set security ipsec policy BP-TEST-SITE1 proposals HMAC-SHA1 set security ipsec policy BP-TEST-SITE2 perfect-forward-secrecy keys group14 set security ipsec policy BP-TEST-SITE2 proposals HMAC-SHA1 set security ipsec policy BP-TEST-SITE3 perfect-forward-secrecy keys group14 set security ipsec policy BP-TEST-SITE3 proposals HMAC-SHA1 set security ipsec policy BP-TEST-SITE4 perfect-forward-secrecy keys group14 set security ipsec policy BP-TEST-SITE4 proposals HMAC-SHA1 set security ipsec policy BP-TEST-SITE5 perfect-forward-secrecy keys group14 set security ipsec policy BP-TEST-SITE5 proposals HMAC-SHA1 set security policies from-zone BP-TEST-SITE1 to-zone BP-TEST-SITE1 policy all-traffic match source-address any set security policies from-zone BP-TEST-SITE1 to-zone BP-TEST-SITE1 policy all-traffic match destination-address any set security policies from-zone BP-TEST-SITE1 to-zone BP-TEST-SITE1 policy all-traffic match application any set security policies from-zone BP-TEST-SITE1 to-zone BP-TEST-SITE1 policy all-traffic then permit set security policies from-zone BP-TEST-SITE2 to-zone BP-TEST-SITE2 policy all-traffic match source-address any set security policies from-zone BP-TEST-SITE2 to-zone BP-TEST-SITE2 policy all-traffic match destination-address any set security policies from-zone BP-TEST-SITE2 to-zone BP-TEST-SITE2 policy all-traffic match application any set security policies from-zone BP-TEST-SITE2 to-zone BP-TEST-SITE2 policy all-traffic then permit set security policies from-zone BP-TEST-SITE3 to-zone BP-TEST-SITE3 policy all-traffic match source-address any set security policies from-zone BP-TEST-SITE3 to-zone BP-TEST-SITE3 policy all-traffic match destination-address any set security policies from-zone BP-TEST-SITE3 to-zone BP-TEST-SITE3 policy all-traffic match application any set security policies from-zone BP-TEST-SITE3 to-zone BP-TEST-SITE3 policy all-traffic then permit set security policies from-zone BP-TEST-SITE4 to-zone BP-TEST-SITE4 policy all-traffic match source-address any set security policies from-zone BP-TEST-SITE4 to-zone BP-TEST-SITE4 policy all-traffic match destination-address any set security policies from-zone BP-TEST-SITE4 to-zone BP-TEST-SITE4 policy all-traffic match application any set security policies from-zone BP-TEST-SITE4 to-zone BP-TEST-SITE4 policy all-traffic then permit set security policies from-zone BP-TEST-SITE5 to-zone BP-TEST-SITE5 policy all-traffic match source-address any set security policies from-zone BP-TEST-SITE5 to-zone BP-TEST-SITE5 policy all-traffic match destination-address any set security policies from-zone BP-TEST-SITE5 to-zone BP-TEST-SITE5 policy all-traffic match application any set security policies from-zone BP-TEST-SITE5 to-zone BP-TEST-SITE5 policy all-traffic then permit