226 lines
3.7 KiB
Django/Jinja
226 lines
3.7 KiB
Django/Jinja
service timestamps debug datetime msec
|
|
service timestamps log datetime msec
|
|
no service password-encryption
|
|
no service password-recovery
|
|
!
|
|
hostname {{ hostname }}
|
|
!
|
|
boot-start-marker
|
|
boot-end-marker
|
|
!
|
|
!
|
|
!
|
|
aaa new-model
|
|
!
|
|
!
|
|
aaa group server radius LAB-RADIUS
|
|
server-private 192.168.0.247 auth-port 1812 acct-port 1813 key Juniper1
|
|
deadtime 5
|
|
!
|
|
aaa authentication login default group LAB-RADIUS local
|
|
aaa authorization exec default group LAB-RADIUS local
|
|
aaa accounting exec default start-stop group LAB-RADIUS
|
|
aaa accounting system default start-stop group LAB-RADIUS
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
aaa session-id common
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
no ip domain lookup
|
|
ip domain name macf.dev
|
|
ip cef
|
|
no ipv6 cef
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
multilink bundle-name authenticated
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
cts logging verbose
|
|
license udi pid C897VA-K9 sn FCZ202990B6
|
|
!
|
|
!
|
|
username dom privilege 15 secret Juniper1
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
controller VDSL 0
|
|
shutdown
|
|
lldp run
|
|
!
|
|
ip ssh version 2
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
interface Loopback0
|
|
ip address {{ loopback_ip }} 255.255.255.255
|
|
ip ospf 1 area 0
|
|
!
|
|
interface BRI0
|
|
no ip address
|
|
encapsulation hdlc
|
|
shutdown
|
|
isdn termination multidrop
|
|
!
|
|
interface Ethernet0
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface GigabitEthernet0
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface GigabitEthernet1
|
|
description "{{ hostname }} GigabitEthernet1 <--> ge-0/0/1 LAB-SRX300"
|
|
switchport access vlan 10
|
|
no ip address
|
|
!
|
|
interface GigabitEthernet2
|
|
description "{{ hostname }} GigabitEthernet2 <--> ge-0/0/2 LAB-SRX300"
|
|
switchport access vlan 20
|
|
no ip address
|
|
!
|
|
interface GigabitEthernet3
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface GigabitEthernet4
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface GigabitEthernet5
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface GigabitEthernet6
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface GigabitEthernet7
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface GigabitEthernet8
|
|
description "{{ hostname }} GigabitEthernet8 <--> gigabitEthernet1 LAB-RELAY"
|
|
ip address 10.0.0.3 255.255.255.254
|
|
ip ospf network point-to-point
|
|
ip ospf 1 area 0
|
|
duplex auto
|
|
speed auto
|
|
no shut
|
|
!
|
|
interface Vlan1
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface Vlan10
|
|
ip address 10.0.0.5 255.255.255.254
|
|
ip ospf network point-to-point
|
|
ip ospf 1 area 0
|
|
!
|
|
interface Vlan20
|
|
ip address 10.0.0.7 255.255.255.254
|
|
ip ospf network point-to-point
|
|
ip ospf 1 area 0
|
|
!
|
|
router ospf 1
|
|
router-id {{ loopback_ip }}
|
|
!
|
|
router bgp 65002
|
|
bgp router-id {{ loopback_ip }}
|
|
bgp log-neighbor-changes
|
|
neighbor 1.1.1.1 remote-as 65001
|
|
neighbor 1.1.1.1 ebgp-multihop 10
|
|
neighbor 1.1.1.1 update-source Loopback0
|
|
!
|
|
ip forward-protocol nd
|
|
no ip http server
|
|
no ip http secure-server
|
|
!
|
|
!
|
|
snmp-server group neteng-snmp v3 priv read ViewDefault
|
|
snmp-server view ViewDefault iso included
|
|
snmp-server user snmp-user neteng-snmp v3 auth sha Juniper1 priv aes 128 Juniper1
|
|
snmp-server ifindex persist
|
|
snmp-server trap-source GigabitEthernet8
|
|
snmp-server source-interface informs GigabitEthernet8
|
|
snmp-server ip precedence 7
|
|
!
|
|
!
|
|
!
|
|
control-plane
|
|
!
|
|
!
|
|
mgcp behavior rsip-range tgcp-only
|
|
mgcp behavior comedia-role none
|
|
mgcp behavior comedia-check-media-src disable
|
|
mgcp behavior comedia-sdp-force disable
|
|
!
|
|
mgcp profile default
|
|
!
|
|
!
|
|
!
|
|
ip route 192.168.0.0 255.255.255.0 10.0.0.2
|
|
!
|
|
!
|
|
!
|
|
line con 0
|
|
logging synchronous
|
|
no modem enable
|
|
line aux 0
|
|
line vty 0 4
|
|
privilege level 15
|
|
transport input telnet ssh
|
|
line vty 5 15
|
|
access-class 23 in
|
|
privilege level 15
|
|
transport input telnet ssh
|
|
!
|
|
!
|
|
scheduler allocate 20000 1000
|
|
!
|
|
!
|
|
!
|
|
event manager applet crypto-key
|
|
event timer cron cron-entry "@reboot"
|
|
action 1.0 cli command "enable"
|
|
action 1.1 cli command "config t"
|
|
action 1.2 cli command "file prompt quiet"
|
|
action 1.3 cli command "crypto key generate rsa modulus 2048"
|
|
action 1.4 cli command "no event manager applet crypto-key"
|
|
action 1.5 cli command "do wr mem"
|
|
!
|
|
end |