Skip to content

Instantly share code, notes, and snippets.

@codeout
Created August 14, 2019 15:13
Show Gist options
  • Save codeout/e48d0e084da0c71182c2967aab4ede85 to your computer and use it in GitHub Desktop.
Save codeout/e48d0e084da0c71182c2967aab4ede85 to your computer and use it in GitHub Desktop.
version 17.4R1.16;
system {
host-name vqfx1-re;
root-authentication {
encrypted-password "xxx"; ## SECRET-DATA
ssh-rsa "ssh-rsa xxx"; ## SECRET-DATA
}
login {
user koji {
uid 2001;
class super-user;
authentication {
ssh-rsa "ssh-rsa xxx"; ## SECRET-DATA
}
}
}
services {
ssh {
root-login allow;
}
netconf {
ssh;
}
rest {
http {
port 8080;
}
enable-explorer;
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
extensions {
providers {
juniper {
license-type juniper deployment-scope commercial;
}
chef {
license-type juniper deployment-scope commercial;
}
}
}
}
interfaces {
xe-0/0/0 {
description "debian1 ens224";
unit 0 {
family ethernet-switching {
vlan {
members vlan100;
}
}
}
}
xe-0/0/1 {
description "debian1 ens256";
unit 0 {
family ethernet-switching {
vlan {
members vlan200;
}
}
}
}
xe-0/0/2 {
description "vqfx2 xe-0/0/2";
unit 0 {
family inet {
address 172.16.1.1/30;
}
}
}
xe-0/0/3 {
description servers;
unit 0 {
family inet {
address 192.168.10.11/24;
}
}
}
em0 {
unit 0 {
family inet {
address 192.168.0.103/24;
}
}
}
em1 {
unit 0 {
family inet {
address 169.254.0.2/24;
}
}
}
lo0 {
unit 0 {
family inet {
address 10.0.0.1/32;
}
}
}
}
forwarding-options {
storm-control-profiles default {
all;
}
}
routing-options {
router-id 10.0.0.1;
autonomous-system 65000;
}
protocols {
bgp {
group evpn {
type internal;
local-address 10.0.0.1;
family evpn {
signaling;
}
neighbor 192.168.10.3;
}
}
ospf {
area 0.0.0.0 {
interface lo0.0 {
passive;
metric 1;
}
interface xe-0/0/2.0 {
metric 10;
}
}
}
evpn {
vni-options {
vni 1100 {
vrf-target target:65000:1100;
}
vni 1200 {
vrf-target target:65000:1200;
}
}
encapsulation vxlan;
multicast-mode ingress-replication;
extended-vni-list all;
}
igmp-snooping {
vlan default;
}
}
policy-options {
policy-statement accept-evpn {
from community [ vni-dummy-rt target-1100 target-1200 ];
then accept;
}
community target-1100 members target:65000:1100;
community target-1200 members target:65000:1200;
community vni-dummy-rt members target:1:1;
}
switch-options {
vtep-source-interface lo0.0;
route-distinguisher 10.0.0.1:1;
vrf-import accept-evpn;
vrf-export accept-evpn;
}
vlans {
default {
vlan-id 1;
}
vlan100 {
vlan-id 100;
vxlan {
vni 1100;
}
}
vlan200 {
vlan-id 200;
vxlan {
vni 1200;
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment