hostname PAR0001
buggy
!
logging buffered debug 10240
logging file debug /var/log/freertr.log
logging rotate 655360000 /var/log/freertr.old
!
crypto rsakey rsa import $v10$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
!
crypto dsakey dsa import $v10$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
!
crypto ecdsakey ecdsa import $v10$TUhNQ0FRRUVIMVhSUXpKaU9qZUgwd0lQODRZNTJ5S3Y4a2hEc3VkSjJsNkQyTUVCQmFTZ0J3WUZLNEVFQUFxaFJBTkNBQVRnbERKOWxqM2dvWlR2R1g1WlBOUUlrSFIyRm9kNDFFQm9RU0l0Y2F1bURoM3VBVEtkOXdMOXdIKzl1RFZaRjZNRHFaRzBaWDNhbWJtdnVDa3diWXNR
!
aaa userlist usr
 username rare
 username rare password $v10$cmFyZQ==
 exit
!
scheduler errors
 time 600000
 delay 30000
 command clear errors freerror@nop.hu
 start
 exit
!
scheduler upgrade
 time 600000
 delay 60000
 random-time 60000
 random-delay 300000
 command flash upgrade
 start
 exit
!
prefix-list all4
 sequence 10 permit 0.0.0.0/0 ge 0 le 0
 exit
!
prefix-list all6
 sequence 10 permit ::/0 ge 0 le 0
 exit
!
vrf definition CORE
 rd 1:1
 rt4import 1:1
 rt4export 1:1
 rt6import 1:1
 rt6export 1:1
 iface4start 1000
 iface6start 1000
 label4mode per-prefix
 label6mode per-prefix
 exit
!
vrf definition INB_MGNT
 rd 20965:6
 rt4import 20965:1
 rt4export 20965:1
 rt6import 20965:1
 rt6export 20965:1
 exit
!
vrf definition lin
 exit
!
vrf definition oob
 exit
!
vrf definition p4
 description P4 VRF _NEVER_EVER_ CONFIGURE IT
 exit
!
router ospf4 1
 vrf CORE
 router-id 10.6.6.6
 traffeng-id 0.0.0.0
 segrout 100
 bier 256 100
 area 0 enable
 area 0 spf-bidir
 area 0 segrout
 area 0 bier
 exit
!
router ospf6 1
 vrf CORE
 router-id 10.6.6.6
 traffeng-id ::
 segrout 100
 bier 256 100
 area 0 enable
 area 0 spf-bidir
 area 0 segrout
 area 0 bier
 exit
!
interface template1
 description core links
 lldp enable
 vrf forwarding CORE
 ipv4 address dynamic dynamic
 ipv4 pim enable
 ipv4 pim bier-tunnel 6
 ipv4 pim join-source loopback0
 ipv6 address dynamic dynamic
 ipv6 enable
 ipv6 pim enable
 ipv6 pim bier-tunnel 6
 ipv6 pim join-source loopback0
 polka enable 6 65536 100
 mpls enable
 mpls rsvp4
 mpls rsvp6
 router ospf4 1 enable
 router ospf4 1 area 0
 router ospf4 1 suppress-prefix
 router ospf4 1 segrout index 6
 router ospf4 1 bier index 6
 router ospf6 1 enable
 router ospf6 1 area 0
 router ospf6 1 suppress-prefix
 router ospf6 1 segrout index 6
 router ospf6 1 bier index 6
 shutdown
 no log-link-change
 exit
!
interface loopback0
 description PAR0001@lo0
 vrf forwarding CORE
 ipv4 address 10.6.6.6 255.255.255.255
 ipv6 address fd00:515e:898::a:6:6:6 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
 template template1
 router ospf4 1 unsuppress-prefix
 router ospf6 1 unsuppress-prefix
 no shutdown
 exit
!
interface loopback20965
 vrf forwarding INB_MGNT
 ipv4 address 172.16.66.6 255.255.255.255
 no shutdown
 no log-link-change
 exit
!
interface ethernet0
 description CPU_PORT _NEVER_EVER_ CONFIGURE IT
 no shutdown
 no log-link-change
 exit
!
interface ethernet1
 description out of band management port
 macaddr 0001.0a06.0606
 vrf forwarding oob
 ipv4 address dynamic dynamic
 ipv4 gateway-prefix all4
 ipv4 dhcp-client enable
 ipv4 dhcp-client early
 ipv6 address dynamic dynamic
 ipv6 gateway-prefix all6
 ipv6 slaac-client enable
 ipv6 prefix-suppress
 no shutdown
 no log-link-change
 exit
!
interface ethernet2
 description linux tuntap management interface
 vrf forwarding lin
 ipv4 address 10.255.255.254 255.255.255.0
 no shutdown
 no log-link-change
 exit
!
interface sdn1
 description TEST WITH ANDREY
 mtu 1500
 macaddr 002f.350b.3603
 lldp enable
 no shutdown
 no log-link-change
 exit
!
interface sdn1.2200
 vrf forwarding CORE
 ipv4 address 10.22.0.2 255.255.255.0
 ipv6 address fd00:515e:898::a:16:0:2 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 template template1
 no shutdown
 exit
!
router bgp4 1
 vrf CORE
 local-as 64512
 router-id 10.6.6.6
 no safe-ebgp
 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor 10.3.3.3 remote-as 64512
 neighbor 10.3.3.3 local-as 64512
 neighbor 10.3.3.3 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor 10.3.3.3 distance 200
 neighbor 10.3.3.3 update-source loopback0
 neighbor 10.3.3.3 pmsitun
 neighbor 10.3.3.3 send-community all
 afi-vrf INB_MGNT enable
 afi-vrf INB_MGNT redistribute connected
 exit
!
router bgp6 1
 vrf CORE
 local-as 64512
 router-id 10.6.6.6
 no safe-ebgp
 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor fd00:51e5::a:3:3:3 remote-as 64512
 neighbor fd00:51e5::a:3:3:3 local-as 64512
 neighbor fd00:51e5::a:3:3:3 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor fd00:51e5::a:3:3:3 distance 200
 neighbor fd00:51e5::a:3:3:3 update-source loopback0
 neighbor fd00:51e5::a:3:3:3 pmsitun
 neighbor fd00:51e5::a:3:3:3 send-community all
 redistribute connected
 redistribute static
 exit
!
proxy-profile oob
 vrf oob
 exit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route oob 172.16.11.0 255.255.255.0 172.16.26.254 interface ethernet1
ipv4 route oob 192.168.113.0 255.255.255.0 172.16.26.254 interface ethernet1
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
sensor bgp4peer
 path bgp4/peer/peer
 prefix freertr-bgp4peer
 prepend bgp4_peer_
 command sho ipv4 bgp 1 summ
 name 4 peer=
 key name bgp4/peer
 replace \. _
 column 1 name learn
 column 2 name advert
 column 3 name state
 column 3 replace false 0
 column 3 replace true 1
 exit
!
sensor bgp4perf
 path bgp4/perf/perf
 prefix freertr-bgp4perf
 prepend bgp4_perf_
 command sho ipv4 bgp 1 best | exc last
 key name bgp4/perf
 replace \s _
 column 1 name val
 exit
!
sensor bgp6peer
 path bgp6/peer/peer
 prefix freertr-bgp6peer
 prepend bgp6_peer_
 command sho ipv6 bgp 1 summ
 name 4 peer=
 key name bgp6/peer
 replace \: _
 column 1 name learn
 column 2 name advert
 column 3 name state
 column 3 replace false 0
 column 3 replace true 1
 exit
!
sensor bgp6perf
 path bgp6/perf/perf
 prefix freertr-bgp6perf
 prepend bgp6_perf_
 command sho ipv6 bgp 1 best | exc last
 key name bgp6/perf
 replace \s _
 column 1 name val
 exit
!
sensor dvigp4int
 path dvigp4int/peer/peer
 prefix freertr-dvigp4int
 prepend dvigp4_iface_
 command sho ipv4 pvrp 1 interface
 name 0 proto="pvrp1",ifc=
 key name dvigp4int/peer
 replace \. _
 column 1 name neighbors
 exit
!
sensor dvigp4peer
 path dvigp4peer/peer/peer
 prefix freertr-dvigp4peer
 prepend dvigp4_peers_
 command sho ipv4 pvrp 1 summary
 name 4 proto="pvrp1",ip=
 key name dvigp4peer/peer
 replace \. _
 column 5 name learn
 column 6 name advert
 exit
!
sensor dvigp6int
 path dvigp6int/peer/peer
 prefix freertr-dvigp6int
 prepend dvigp6_iface_
 command sho ipv6 pvrp 1 interface
 name 0 proto="pvrp1",ifc=
 key name dvigp6int/peer
 replace \. _
 column 1 name neighbors
 exit
!
sensor dvigp6peer
 path dvigp6peer/peer/peer
 prefix freertr-dvigp6peer
 prepend dvigp6_peers_
 command sho ipv6 pvrp 1 summary
 name 4 proto="pvrp1",ip=
 key name dvigp6peer/peer
 replace \: _
 column 5 name learn
 column 6 name advert
 exit
!
sensor ifaces-hw
 path interfaces-hw/interface/counter
 prefix freertr-ifaces
 prepend iface_hw_byte_
 command sho inter hwsumm
 name 0 ifc=
 key name interfaces-hw/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-hwp
 path interfaces-hwp/interface/counter
 prefix freertr-ifaces
 prepend iface_hw_pack_
 command sho inter hwpsumm
 name 0 ifc=
 key name interfaces-hwp/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-sw
 path interfaces-sw/interface/counter
 prefix freertr-ifaces
 prepend iface_sw_byte_
 command sho inter swsumm
 name 0 ifc=
 key name interfaces-sw/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-swp
 path interfaces-swp/interface/counter
 prefix freertr-ifaces
 prepend iface_sw_pack_
 command sho inter swpsumm
 name 0 ifc=
 key name interfaces-swp/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor lsigp4int
 path lsigp4int/peer/peer
 prefix freertr-lsigp4int
 prepend lsigp4_iface_
 command sho ipv4 ospf 1 interface
 name 0 proto="ospf1",ifc=
 key name lsigp4int/peer
 replace \. _
 column 1 name neighbors
 exit
!
sensor lsigp4peer
 path lsigp4peer/peer/peer
 prefix freertr-lsigp4peer
 prepend lsigp4_peers_
 command sho ipv4 ospf 1 topology 0
 name 0 proto="ospf1",node=
 key name lsigp4peer/peer
 replace \. _
 column 1 name reachable
 column 1 replace false 0
 column 1 replace true 1
 column 6 name neighbors
 exit
!
sensor lsigp4perf
 path lsigp4perf/peer/peer
 prefix freertr-lsigp4perf
 prepend lsigp4_perf_
 command sho ipv4 ospf 1 spf 0 | inc reachable|fill|calc|run
 key name lsigp4perf/peer
 labels proto="ospf1"
 skip 0
 column 1 name val
 exit
!
sensor lsigp6int
 path lsigp6int/peer/peer
 prefix freertr-lsigp6int
 prepend lsigp6_iface_
 command sho ipv6 ospf 1 interface
 name 0 proto="ospf1",ifc=
 key name lsigp6int/peer
 replace \. _
 column 1 name neighbors
 exit
!
sensor lsigp6peer
 path lsigp6peer/peer/peer
 prefix freertr-lsigp6peer
 prepend lsigp6_peers_
 command sho ipv6 ospf 1 topology 0
 name 0 proto="ospf1",node=
 key name lsigp6peer/peer
 replace \. _
 replace \/ _
 column 1 name reachable
 column 1 replace false 0
 column 1 replace true 1
 column 6 name neighbors
 exit
!
sensor lsigp6perf
 path lsigp6perf/peer/peer
 prefix freertr-lsigp6perf
 prepend lsigp6_perf_
 command sho ipv6 ospf 1 spf 0 | inc reachable|fill|calc|run
 key name lsigp6perf/peer
 labels proto="ospf1"
 skip 0
 column 1 name val
 exit
!
sensor routing4
 path routing4/peer/peer
 prefix freertr-routing4
 prepend routing4_
 command sho ipv4 protocol v1 | beg computed
 name 0 proto=
 key name routing4/peer
 addname 1 * id=
 skip 2
 column 2 name ifaces
 column 3 name neighbors
 column 4 name computed_unicast
 column 5 name computed_multicast
 column 6 name computed_flowspec
 column 7 name computed_changed
 column 9 name redisted_unicast
 column 10 name redisted_multicast
 column 11 name redisted_flowspec
 column 12 name redisted_changed
 exit
!
sensor routing6
 path routing6/peer/peer
 prefix freertr-routing6
 prepend routing6_
 command sho ipv6 protocol v1 | beg computed
 name 0 proto=
 key name routing6/peer
 addname 1 * id=
 skip 2
 column 2 name ifaces
 column 3 name neighbors
 column 4 name computed_unicast
 column 5 name computed_multicast
 column 6 name computed_flowspec
 column 7 name computed_changed
 column 9 name redisted_unicast
 column 10 name redisted_multicast
 column 11 name redisted_flowspec
 column 12 name redisted_changed
 exit
!
sensor sensor
 path sensor/peer/peer
 prefix freertr-sensor
 prepend sensor_
 command sho sensor
 name 0 met=
 key name sensor/peer
 column 1 name asked
 column 2 name time
 exit
!
!
!
!
!
!
!
!
!
!
!
alias exec tna-set-profile sticky-param GEANT_TESTBED
!
!
!
!
!
!
!
!
!
!
server telnet INB_MGNT
 security protocol telnet
 exec logging
 no exec authorization
 no login authentication
 login logging
 interface loopback20965
 vrf INB_MGNT
 exit
!
server telnet oob
 security authentication usr
 security rsakey rsa
 security dsakey dsa
 security ecdsakey ecdsa
 second-port 22
 exec logging
 no exec authorization
 login authentication usr
 login logging
 vrf oob
 exit
!
server telnet p4
 security protocol telnet
 exec logging
 no exec authorization
 no login authentication
 login logging
 vrf p4
 exit
!
server p4lang p4
 export-vrf CORE 1
 export-vrf INB_MGNT 2
 export-port sdn1 128 10 0 0 0
 interconnect ethernet0
 vrf p4
 exit
!
server prometheus pr
 sensor bgp4peer
 sensor bgp4perf
 sensor bgp6peer
 sensor bgp6perf
 sensor dvigp4int
 sensor dvigp4peer
 sensor dvigp6int
 sensor dvigp6peer
 sensor ifaces-hw
 sensor ifaces-hwp
 sensor ifaces-sw
 sensor ifaces-swp
 sensor lsigp4int
 sensor lsigp4peer
 sensor lsigp4perf
 sensor lsigp6int
 sensor lsigp6peer
 sensor lsigp6perf
 sensor routing4
 sensor routing6
 sensor sensor
 vrf oob
 exit
!
client proxy oob
client name-server 1.1.1.1
client upgrade-server http://upgrade.nop.hu/
client upgrade-backup
client config-server http://wdv.rare.nmaas.eu/webdav/
client config-username rare
client config-password $v10$cmFyZQ==
client config-backup
client config-archive
client time-server europe.pool.ntp.org
client time-zone CET
!
end
