root@vSRX-NG4> show configuration | display set set version 21.4R1.12 set system host-name vSRX-NG4 set system root-authentication encrypted-password "$6$XwfspixK$VvUgmfLis6IY6paO7nf5PnlNevNA7X..OiXQSvMsAkhLpePvBZkWkkcPsj9Kyi4wxrsfjhPajIdkQE2gnDvuH." set system services ssh set system services web-management http interface fxp0.0 set system services web-management https system-generated-certificate set system services web-management https interface fxp0.0 set system syslog file interactive-commands interactive-commands any set system syslog file messages any any set system syslog file messages authorization info set system license autoupdate url https://ae1.juniper.net/junos/key_retrieval set security forwarding-options family mpls mode packet-based set security zones security-zone trust address-book address LAN_to_Switch 192.168.4.0/24 set security zones security-zone trust address-book address LAN_to_Backup_Juniper 10.0.0.0/24 set security zones security-zone trust host-inbound-traffic system-services all set security zones security-zone trust host-inbound-traffic protocols all set security zones security-zone trust host-inbound-traffic protocols vrrp set security zones security-zone trust interfaces ge-0/0/2.0 set security zones security-zone trust interfaces ge-0/0/1.0 set interfaces ge-0/0/0 unit 0 description Link_To_R2 set interfaces ge-0/0/0 unit 0 family inet address 192.168.2.2/24 set interfaces ge-0/0/1 unit 0 description Link_To_LAN_Switch_R5 set interfaces ge-0/0/1 unit 0 family inet address 192.168.4.3/24 vrrp-group 1 virtual-address 192.168.4.1 set interfaces ge-0/0/1 unit 0 family inet address 192.168.4.3/24 vrrp-group 1 accept-data set interfaces ge-0/0/2 unit 0 description Link_To_vSRX-NG4 set interfaces ge-0/0/2 unit 0 family inet address 10.0.0.2/24 set interfaces fxp0 unit 0 set policy-options policy-statement advertised_networks_ibgp term 1 from route-filter 0.0.0.0/0 exact set policy-options policy-statement advertised_networks_ibgp term 1 from route-filter 192.168.4.0/24 address-mask 0.0.0.255 set policy-options policy-statement advertised_networks_ibgp term 1 then accept set policy-options policy-statement advertised_networks_primary term 1 from route-filter 192.168.4.0/24 exact set policy-options policy-statement advertised_networks_primary term 1 then as-path-prepend 200 set policy-options policy-statement advertised_networks_primary term 1 then accept set policy-options policy-statement received_networks_ibgp term 1 from route-filter 0.0.0.0/0 exact set policy-options policy-statement received_networks_ibgp term 1 then local-preference 160 set policy-options policy-statement received_networks_primary term 1 from route-filter 0.0.0.0/0 exact set protocols bgp group bgp-customer1 type external set protocols bgp group bgp-customer1 local-as 200 set protocols bgp group bgp-customer1 neighbor 192.168.2.1 local-address 192.168.2.2 set protocols bgp group bgp-customer1 neighbor 192.168.2.1 import received_networks_primary set protocols bgp group bgp-customer1 neighbor 192.168.2.1 export advertised_networks_primary set protocols bgp group bgp-customer1 neighbor 192.168.2.1 peer-as 100 set protocols bgp group bgp-customer1 neighbor 192.168.2.1 local-as 200 set protocols bgp group ibgp-customer1 type internal set protocols bgp group ibgp-customer1 local-as 200 set protocols bgp group ibgp-customer1 neighbor 10.0.0.1 local-address 10.0.0.2 set protocols bgp group ibgp-customer1 neighbor 10.0.0.1 import received_networks_ibgp set protocols bgp group ibgp-customer1 neighbor 10.0.0.1 export advertised_networks_ibgp set protocols bgp group ibgp-customer1 neighbor 10.0.0.1 peer-as 200 set protocols bgp group ibgp-customer1 neighbor 10.0.0.1 local-as 200 root@vSRX-NG4>