1
+ Using 3091 out of 522232 bytes!
2
+ !
3
+ !
4
+ !
5
+ !
6
+ !
7
+ !
8
+ !
9
+ !
10
+ !
11
+ !
12
+ !
13
+ !
14
+ !
15
+ !
16
+ !
17
+
18
+ !
19
+ ! Last configuration change at 17:52:53 UTC Wed Oct 25 2017 by demo
20
+ !
21
+ version 15.2
22
+ service timestamps debug datetime msec
23
+ service timestamps log datetime msec
24
+ !
25
+ hostname lhr-border-01
26
+ !
27
+ boot-start-marker
28
+ boot-end-marker
29
+ !
30
+ !
31
+ !
32
+ aaa new-model
33
+ !
34
+ !
35
+ aaa authorization exec default local
36
+ !
37
+ !
38
+ !
39
+ !
40
+ !
41
+ aaa session-id common
42
+ no ip icmp rate-limit unreachable
43
+ ip cef
44
+ !
45
+ !
46
+ !
47
+ !
48
+ !
49
+ !
50
+ no ip domain lookup
51
+ ip domain name demo.com
52
+ no ipv6 cef
53
+ !
54
+ !
55
+ multilink bundle-name authenticated
56
+ !
57
+ !
58
+ !
59
+ !
60
+ !
61
+ !
62
+ !
63
+ username demo privilege 15 secret 5 $1 $bOPC$Ledl3D.5Xx8hkXUgobF0i.
64
+ !
65
+ !
66
+ ip tcp synwait-time 5
67
+ ip ssh rsa keypair-name lhr-border-01 .demo.com
68
+ ip ssh version 2
69
+ !
70
+ !
71
+ !
72
+ !
73
+ !
74
+ !
75
+ !
76
+ !
77
+ !
78
+ !
79
+ !
80
+ !
81
+ interface Loopback0
82
+ ip address 10.10.255.7 255.255.255.255
83
+ !
84
+ interface Ethernet0/0
85
+ no ip address
86
+ shutdown
87
+ duplex auto
88
+ !
89
+ interface GigabitEthernet0/0
90
+ description Management Interface
91
+ ip address 192.168.60.36 255.255.255.0
92
+ media-type gbic
93
+ speed 1000
94
+ duplex full
95
+ no negotiation auto
96
+ !
97
+ interface Ethernet1/0
98
+ description link to lhr-fw-01 e1/2
99
+ ip address 10.10.10.34 255.255.255.252
100
+ ip ospf network point-to-point
101
+ duplex full
102
+ !
103
+ interface Ethernet1/1
104
+ description link to lhr-fw-02 e1/2
105
+ ip address 10.10.10.42 255.255.255.252
106
+ ip ospf network point-to-point
107
+ duplex full
108
+ !
109
+ interface Ethernet1/2
110
+ description link to fra-border-01 e1/0
111
+ ip address 10.10.20.1 255.255.255.252
112
+ duplex full
113
+ !
114
+ interface Ethernet1/3
115
+ no ip address
116
+ shutdown
117
+ duplex full
118
+ !
119
+ interface Ethernet1/4
120
+ no ip address
121
+ shutdown
122
+ duplex full
123
+ !
124
+ interface Ethernet1/5
125
+ no ip address
126
+ shutdown
127
+ duplex full
128
+ !
129
+ interface Ethernet1/6
130
+ no ip address
131
+ shutdown
132
+ duplex full
133
+ !
134
+ interface Ethernet1/7
135
+ no ip address
136
+ shutdown
137
+ duplex full
138
+ !
139
+ interface GigabitEthernet2/0
140
+ no ip address
141
+ no ip proxy-arp
142
+ shutdown
143
+ no negotiation auto
144
+ !
145
+ router ospf 1
146
+ router-id 10.10.255.7
147
+ passive-interface Ethernet1/2
148
+ passive-interface Loopback0
149
+ network 10.10.10.0 0.0.0.255 area 0
150
+ network 10.10.255.0 0.0.0.255 area 0
151
+ !
152
+ router bgp 65301
153
+ bgp router-id 10.10.255.7
154
+ bgp log-neighbor-changes
155
+ bgp bestpath compare-routerid
156
+ neighbor FW peer-group
157
+ neighbor 10.10.10.33 remote-as 65201
158
+ neighbor 10.10.10.33 peer-group FW
159
+ neighbor 10.10.10.41 remote-as 65202
160
+ neighbor 10.10.10.41 peer-group FW
161
+ neighbor 10.10.10.41 route-map SET_LOCAL_PREF in
162
+ neighbor 10.10.20.2 remote-as 65321
163
+ neighbor 10.10.20.2 route-map PROTECT_LOOPBACK in
164
+ !
165
+ ip forward-protocol nd
166
+ !
167
+ !
168
+ no ip http server
169
+ no ip http secure-server
170
+ !
171
+ ip access-list extended MATCH_ALL_BGP
172
+ permit ip any any
173
+ !
174
+ !
175
+ ip prefix-list PROTECT_LOOPBACK seq 5 deny 10.10.255.0 /28 le 32
176
+ ip prefix-list PROTECT_LOOPBACK seq 10 permit 0.0.0.0 /0 le 32
177
+ !
178
+ route-map PROTECT_LOOPBACK permit 10
179
+ match ip address prefix-list PROTECT_LOOPBACK
180
+ !
181
+ route-map SET_LOCAL_PREF permit 10
182
+ set local-preference 50
183
+ !
184
+ route-map SET_LOCAL_PREF permit 20
185
+ match ip address MATCH_ALL_BGP
186
+ !
187
+ !
188
+ !
189
+ !
190
+ control-plane
191
+ !
192
+ !
193
+ line con 0
194
+ exec-timeout 0 0
195
+ privilege level 15
196
+ logging synchronous
197
+ stopbits 1
198
+ line aux 0
199
+ exec-timeout 0 0
200
+ privilege level 15
201
+ logging synchronous
202
+ stopbits 1
203
+ line vty 0 4
204
+ transport input ssh
205
+ !
206
+ !
207
+ end
0 commit comments