## Last changed: 2013-01-10 15:11:58 UTC
version 11.4R6.5;
system {
    host-name PE-3;
    root-authentication {
        encrypted-password "$1$Z5SV1qIU$6xyjsjF/Yt7G1p8PPNYim0"; ## SECRET-DATA
    }
    services {
        ssh {
            root-login allow;
        }
    }
}
interfaces {
    lt-0/0/0 {
        unit 0 {
            encapsulation ethernet;
            peer-unit 1;
            family inet {
                address 1.1.3.2/30;
            }
        }
        unit 1 {
            encapsulation ethernet;
            peer-unit 0;
            family inet {
                filter {
                    input packet-mode;
                }
                address 1.1.3.1/30;
            }
        }
    }
    ge-0/0/1 {
        unit 0 {
            family inet {
                address 1.1.13.3/24;
            }
            family mpls;
        }
    }
    ge-0/0/3 {
        unit 0 {
            family inet {
                address 1.1.23.3/24;
            }
            family mpls;
        }
    }
    ge-0/0/4 {
        unit 0 {
            family inet {
                address 172.16.136.10/16;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 1.1.1.3/32;
            }
        }
    }
}
routing-options {
    router-id 1.1.1.3;
    autonomous-system 12;
}
protocols {
    mpls {
        interface all;
    }
    bgp {
        family inet-vpn {
            unicast;
        }
        family l2vpn {
            signaling;
        }
        local-as 12;
        group PEERS {
            type internal;
            local-address 1.1.1.3;
            peer-as 12;
            neighbor 1.1.1.2;
            neighbor 1.1.1.1;
        }
    }
    ospf {
        area 0.0.0.0 {
            interface ge-0/0/3.0;
            interface lo0.0;
            interface ge-0/0/1.0;
        }
    }
    ldp {
        interface all;
    }
}
security {
    policies {
        global {
            policy ANY {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
    }
    zones {
        security-zone SRX650 {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                ge-0/0/3.0;
                lo0.0;
                ge-0/0/1.0;
            }
        }
        security-zone Trust {
            interfaces {
                ge-0/0/4.0 {
                    host-inbound-traffic {
                        system-services {
                            ping;
                            all;
                        }
                        protocols {
                            all;
                        }
                    }
                }
            }
        }
        security-zone SRX650-FLOW {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                lt-0/0/0.0;
            }
        }
        security-zone Trust-FLOW {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                lt-0/0/0.1;
            }
        }
    }
}
firewall {
    filter packet-mode {
        term bypass-all {
            then {
                count compteur;
                packet-mode;
                accept;
            }
        }
    }
}
routing-instances {
    PACKET {
        instance-type vrf;
        interface lt-0/0/0.1;
        route-distinguisher 1.1.1.3:23;
        vrf-target target:12:23;
        routing-options {
            static {
                route 172.16.0.0/16 next-hop 1.1.3.2;
            }
        }
    }
    SERVICES {
        instance-type virtual-router;
        interface lt-0/0/0.0;
        interface ge-0/0/4.0;
        routing-options {
            static {
                route 0.0.0.0/0 next-hop 1.1.3.1;
                route 10.0.0.0/8 next-hop 172.16.1.254;
            }
        }
    }
}