hostname PRA0101
buggy
!
logging buffered debug 8192
logging file debug zzz.log
logging rotate 65536000 zzz.old
!
crypto rsakey rsa import $v10$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
!
crypto dsakey dsa import $v10$TUlJQnVRSUJBQUtCZ0NMTXJKbGNRZ0xQaHVYUUV1bndCbU5ORkRabGMxWXVndzFKVU5QcW5KOEdSaUJmVkE2b2N2QnQ4NE9nbUlnWlVqQ3Bjbmw4ZFV2R1RlUDVITlc1UExYN0R1UENDK1krTjlsWmkweEdhTjc5VE1MRm9qSHFyRzVoMWN0aW4vTFFlRi8zcHNjbUR6UHlGYlNWTWY0NGMrcUx2QWpxOGVEWDJDNFhXVmxJSVZoREFoVUE3TkhQdFM1ZmZvalU0ZEpGM0FHNzNldGdMSjBDZ1lBZVNVcDh2V2thVmgvcUNxUmY4QXpZQndkOUlraE9yUUQ5QXRzUHZ5YWgrbktBdXlSNzJUQnZITmVEcXJJWVVUdkhoWHpzZFA3WFBmSndNWDdsM3dITnluMENRNTVwaFE0SWY3YUd0bVRKLzFOWVdCUDQwYmp4RjJBUzBaK1hCV2hQS284R21WSFF6UFVBcXFob1dTNkxqZzVxdEVTSHRDMjRkYTRnZVBLR2p3S0JnQWorZVhqS0RVTDVONUtyLzdIOXNDdWdnSDlFcXhGMDNPcjRGbGQ3TlF0ekVsa0NRaW9hVUc3Sm80VUZMdXdqa0Eyc0daZE9jRVBzWEdpd0U1Q09vc1gzcFN6MDc2eXhMUVRkWm5jL2R0QzlOY1ppdHRrYUF1U1ZZZ2Z5M1l4NWFWRUN0ZTE0K1JPdy9oNnoybmJySlQ2TmFGK0w1anUwaHRVazYzQSthMlRMQWhRUzgySGVCTk8zRmMwVm5kakRwOEUzYVNHZ25BPT0=
!
crypto ecdsakey ecdsa import $v10$TUhNQ0FRRUVIMkhnOHY0WWRrZzliUkU5OXlDUmJjUXI1cUZ4dlBNSjV5VmpLekZ3Q25PZ0J3WUZLNEVFQUFxaFJBTkNBQVExRkUxNmFLNzJnd2JUNjlxVlZGRlJoQzBIcURzOWFjRmdveDBBdG94LzBkcjd0S0UvaEVSRHRvbVdaN0NsTk1Eb2gvdDFmSGd0RWVoU1RuZGFoUDdm
!
crypto ipsec WG-NMAAS
 key $v10$ZU5EMzA0RVF4WVNRbDdLMFhQRWdpNitINHBsbnRyb2h6WThaOFIxckdVdz0xNFNqaXN3RVVETzlNUk5YVUZtVjBmK2tGbzdNa2hSQjZNaGtyRHZxK0hzPQ==
 replay 0
 exit
!
aaa userlist usr
 username rare
 username rare password $v10$cmFyZQ==
 exit
!
scheduler errors
 time 600000
 delay 30000
 command clear errors freerror@nop.hu
 start
 exit
!
scheduler upgrade
 time 600000
 delay 60000
 random-time 60000
 random-delay 300000
 command flash upgrade
 start
 exit
!
object-group network host4
 sequence 10 10.255.255.0 255.255.255.0
 exit
!
object-group network host6
 sequence 10 2001:db8:ffff:ffff:: ffff:ffff:ffff:ffff::
 exit
!
object-group network lloc4
 sequence 10 169.254.0.0 255.255.0.0
 exit
!
object-group network lloc6
 sequence 10 fe80:: ffff::
 exit
!
object-group network mcast4
 sequence 10 224.0.0.0 255.255.0.0
 exit
!
object-group network mcast6
 sequence 10 ff00:: ff00::
 exit
!
access-list nat4
 sequence 10 deny all obj lloc4 all any all
 sequence 20 deny all any all obj mcast4 all
 sequence 30 deny all obj host4 all obj host4 all
 sequence 40 permit all obj host4 all any all
 exit
!
access-list nat6
 sequence 10 deny all obj lloc6 all any all
 sequence 20 deny all any all obj mcast6 all
 sequence 30 deny all obj host6 all obj host6 all
 sequence 40 permit all obj host6 all any all
 exit
!
access-list NMAAS_K8S_POD
 sequence 10 permit all any all 192.168.113.0 255.255.255.0 all
 exit
!
prefix-list all4
 sequence 10 permit 0.0.0.0/0 ge 0 le 0
 exit
!
prefix-list all6
 sequence 10 permit ::/0 ge 0 le 0
 exit
!
vrf definition CORE
 iface4start 1000
 iface6start 1000
 exit
!
vrf definition INB_MGNT
 rd 20965:12
 rt4import 20965:1
 rt4export 20965:1
 rt6import 20965:1
 rt6export 20965:1
 exit
!
vrf definition oob
 exit
!
vrf definition p4
 exit
!
router ospf4 1
 vrf CORE
 router-id 10.12.12.12
 traffeng-id 0.0.0.0
 segrout 100
 bier 256 100
 area 0 enable
 area 0 segrout
 area 0 bier
 exit
!
router ospf6 1
 vrf CORE
 router-id 10.12.12.12
 traffeng-id ::
 segrout 100
 bier 256 100
 area 0 enable
 area 0 segrout
 area 0 bier
 exit
!
interface template1
 description core links
 lldp enable
 vrf forwarding CORE
 ipv4 address dynamic dynamic
 ipv4 pim enable
 ipv4 pim bier-tunnel 12
 ipv4 pim join-source loopback0
 ipv6 address dynamic dynamic
 ipv6 enable
 ipv6 pim enable
 ipv6 pim bier-tunnel 12
 ipv6 pim join-source loopback0
 polka enable 12 65536 100
 mpls enable
 mpls rsvp4
 mpls rsvp6
 router ospf4 1 enable
 router ospf4 1 area 0
 router ospf4 1 suppress-prefix
 router ospf4 1 segrout index 12
 router ospf4 1 bier index 12
 router ospf6 1 enable
 router ospf6 1 area 0
 router ospf6 1 suppress-prefix
 router ospf6 1 segrout index 12
 router ospf6 1 bier index 12
 shutdown
 no log-link-change
 exit
!
interface loopback0
 vrf forwarding CORE
 ipv4 address 10.12.12.12 255.255.255.255
 ipv6 address fd00:51e5::a:c:c:c ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
 template template1
 router ospf4 1 unsuppress-prefix
 router ospf6 1 unsuppress-prefix
 no shutdown
 exit
!
interface loopback20965
 vrf forwarding INB_MGNT
 ipv4 address 172.16.66.12 255.255.255.255
 no shutdown
 no log-link-change
 exit
!
interface ethernet0
 description p4 cpu port
 no shutdown
 no log-link-change
 exit
!
interface ethernet1
 description oob
 vrf forwarding oob
 ipv4 address 192.168.212.136 255.255.255.0
 no shutdown
 no log-link-change
 exit
!
interface sdn1
 mtu 1500
 macaddr 0036.197d.6758
 lldp enable
 no shutdown
 no log-link-change
 exit
!
interface sdn1.106
 description PRA0101@SDN1.106[05:00.0] -> BUD0001@SDN3.106[<put GEANT ciruit # here>]
 vrf forwarding CORE
 ipv4 address 10.3.12.12 255.255.255.0
 ipv6 address fd00:51e5::a:3:c:c ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 template template1
 no shutdown
 exit
!
interface sdn1.107
 description PRA0101@SDN1.107[05:00.0] -> POZ0001@SDN3.107[<put GEANT ciruit # here>]
 vrf forwarding CORE
 ipv4 address 10.4.12.12 255.255.255.0
 ipv6 address fd00:51e5::a:4:c:c ffff:ffff:ffff:ffff:ffff:ffff:ffff:ff00
 template template1
 no shutdown
 exit
!
interface sdn2
 mtu 1500
 macaddr 0052.726c.1f75
 lldp enable
 shutdown
 no log-link-change
 exit
!
interface tunnel123
 description WG-NMAAS
 tunnel key 9010
 tunnel vrf oob
 tunnel protection WG-NMAAS
 tunnel source ethernet1
 tunnel destination 150.254.160.146
 tunnel mode wireguard
 vrf forwarding oob
 ipv4 address 192.168.122.134 255.255.255.252
 no shutdown
 no log-link-change
 exit
!
router bgp4 1
 vrf CORE
 local-as 64512
 router-id 10.12.12.12
 no safe-ebgp
 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor 10.3.3.3 remote-as 64512
 neighbor 10.3.3.3 description PRA0101@lo0[RRC] -> BUD0001@lo0[RR]
 neighbor 10.3.3.3 local-as 64512
 neighbor 10.3.3.3 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor 10.3.3.3 distance 200
 neighbor 10.3.3.3 update-source loopback0
 neighbor 10.3.3.3 pmsitun
 neighbor 10.3.3.3 next-hop-self
 neighbor 10.3.3.3 send-community all
 afi-vrf INB_MGNT enable
 afi-vrf INB_MGNT redistribute connected
 redistribute connected
 redistribute static
 exit
!
router bgp6 1
 vrf CORE
 local-as 64512
 router-id 10.12.12.12
 no safe-ebgp
 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor fd00:51e5::a:3:3:3 remote-as 64512
 neighbor fd00:51e5::a:3:3:3 description PAR0101@lo0[RRC] -> BUD0001@lo0[RR]
 neighbor fd00:51e5::a:3:3:3 local-as 64512
 neighbor fd00:51e5::a:3:3:3 address-family unicast multicast vpnuni ovpnuni vpls evpn
 neighbor fd00:51e5::a:3:3:3 distance 200
 neighbor fd00:51e5::a:3:3:3 update-source loopback0
 neighbor fd00:51e5::a:3:3:3 pmsitun
 neighbor fd00:51e5::a:3:3:3 next-hop-self
 neighbor fd00:51e5::a:3:3:3 send-community all
 redistribute connected
 redistribute static
 exit
!
proxy-profile oob
 vrf oob
 exit
!
tracker oob-nmaas
 mode icmp
 target 192.168.122.133
 vrf oob
 source tunnel123
 interval 60000
 timeout 100
 start
 exit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ipv4 route oob 0.0.0.0 0.0.0.0 192.168.212.1
ipv4 route oob 172.16.11.0 255.255.255.0 192.168.122.133
ipv4 route oob 192.168.113.0 255.255.255.0 192.168.122.133
!
!
!
!
ipv4 nat oob sequence 10 srclist NMAAS_K8S_POD interface tunnel123
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
sensor ifaces-hw
 path interfaces-hw/interface/counter
 prefix freertr-ifaces
 prepend iface_hw_byte_
 command sho inter hwsumm
 name 0 ifc=
 key name interfaces-hw/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-hwp
 path interfaces-hwp/interface/counter
 prefix freertr-ifaces
 prepend iface_hw_pack_
 command sho inter hwpsumm
 name 0 ifc=
 key name interfaces-hwp/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-sw
 path interfaces-sw/interface/counter
 prefix freertr-ifaces
 prepend iface_sw_byte_
 command sho inter swsumm
 name 0 ifc=
 key name interfaces-sw/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
sensor ifaces-swp
 path interfaces-swp/interface/counter
 prefix freertr-ifaces
 prepend iface_sw_pack_
 command sho inter swpsumm
 name 0 ifc=
 key name interfaces-swp/interface
 replace \. _
 column 1 name st
 column 1 replace admin -1
 column 1 replace down 0
 column 1 replace up 1
 column 2 name tx
 column 3 name rx
 column 4 name dr
 exit
!
alias test bash command attach shell1 socat - exec:bash,ctty,pty,stderr
alias test bash description get linux shell
!
server telnet INB_MGNT
 security protocol telnet
 exec logging
 no exec authorization
 no login authentication
 login logging
 interface loopback20965
 vrf INB_MGNT
 exit
!
server telnet oob
 security authentication usr
 security rsakey rsa
 security dsakey dsa
 security ecdsakey ecdsa
 second-port 22
 exec logging
 no exec authorization
 login authentication usr
 login logging
 interface tunnel123
 vrf oob
 exit
!
server telnet p4
 security protocol telnet
 no exec authorization
 no login authentication
 vrf p4
 exit
!
server p4lang p4
 export-vrf CORE 1
 export-vrf oob 2
 export-vrf INB_MGNT 3
 export-port sdn1 0 10 0 0 0
 export-port sdn2 1 10 0 0 0
 export-port tunnel123 dynamic 0 0 0 0
 interconnect ethernet0
 vrf p4
 exit
!
server http PRA0101-CLEARNET
 access-log
 access-rate 10 1000
 access-total 256
 access-subnet 8
 host * path /rtr/web/amt-relay/
 host * script exec
 interface loopback0
 vrf CORE
 exit
!
server dns ns
 recursion enable
 vrf CORE
 exit
!
server prometheus pr
 sensor ifaces-hw
 sensor ifaces-hwp
 sensor ifaces-sw
 sensor ifaces-swp
 interface tunnel123
 vrf oob
 exit
!
server uni2multi u2m
 source interface loopback0
 target ipv4 232.106.0.0/16
 target ipv6 ff3c:6a:cccc:cccc::/64
 logging
 interface loopback0
 vrf CORE
 exit
!
client proxy oob
client name-server 1.1.1.1
client upgrade-server http://upgrade.nop.hu/
client upgrade-backup
client config-server http://wdv.rare.nmaas.eu/webdav/
client config-username rare
client config-password $v10$cmFyZQ==
client config-backup
client config-archive
client time-server europe.pool.ntp.org
client time-zone CET
!
end
