th1-br2.router.fr.clara.net spawn ssh -c 3des -x -l rancid_user th1-br2.router.fr.clara.net rancid_user@th1-br2.router.fr.clara.net's password: ####################################### ### Unauthorised access prohibited ### ####################################### ### Disconnect now if you are not ### ### an authorised user. ### ####################################### ### All connection attempts are ### ### logged. ### ####################################### th1-br2>enable Password: th1-br2# th1-br2#term length 0 th1-br2#sh run Building configuration... crypto_cs_config: stub. Current configuration : 34547 bytes ! ! Last configuration change at 11:06:30 CET Fri Mar 6 2009 by benj ! NVRAM config last updated at 11:06:32 CET Fri Mar 6 2009 by benj ! version 12.2 service nagle no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption no service dhcp ! hostname th1-br2 ! boot-start-marker boot system disk2:c7200-k91p-mz.122-31.SB2.bin boot system disk2: boot-end-marker ! logging snmp-authfail logging rate-limit all 200 enable secret 5 $1$y/yJ$0TCqSpPa63qoO4U7YxGd61 ! aaa new-model ! ! aaa authentication login default group tacacs+ enable aaa authentication enable default group tacacs+ enable aaa accounting commands 15 default start-stop group tacacs+ ! ! ! ! aaa session-id common clock timezone CET 1 ip subnet-zero no ip source-route ip flow-cache mpls label-positions 1 ip cef ! ! ip tcp path-mtu-discovery ip tftp source-interface Loopback0 ip domain list fr.clara.net ip domain name fr.clara.net ip name-server 212.43.194.2 ip name-server 212.43.194.3 no ip dhcp use vrf connected ! ! no ip bootp server ip multicast-routing ! ! ipv6 unicast-routing ipv6 cef mpls traffic-eng tunnels mpls traffic-eng logging tunnel path change no mpls traffic-eng auto-bw timers frequency 0 mpls label protocol ldp call rsvp-sync ! key chain is-is-key-chain key 1 key-string 7 1043080B0B12435F no scripting tcl init no scripting tcl encdir ! ! ! ! ! ! ! no file verify auto ! ! ! interface Tunnel0 description TELIA IPv6 no ip address ipv6 address 2001:2000:3080:6::2/64 ipv6 traffic-filter debug-v6 out tunnel source 213.248.98.42 tunnel destination 213.248.72.214 tunnel mode ipv6ip no clns route-cache ! interface Null0 no ip unreachables ! interface Loopback0 description LOOPBACK ip address 212.43.193.45 255.255.255.255 no clns route-cache ! interface Loopback1 description VPNv4 ip address 212.43.193.63 255.255.255.255 no clns route-cache ! interface Loopback2 ip address 62.240.250.5 255.255.255.255 no ip redirects no ip proxy-arp ipv6 address 2001:A70:FF::7/128 no clns route-cache ! interface Loopback3 description IPv4-Mcast ip address 62.240.250.159 255.255.255.255 no clns route-cache ! interface GigabitEthernet0/1 description TH1-CR1 dampening mtu 4470 ip address 212.43.193.102 255.255.255.252 no ip redirects no ip proxy-arp ip flow ingress ip pim sparse-mode ip router isis media-type gbic speed auto duplex auto negotiation auto mpls traffic-eng tunnels mpls ip no cdp enable isis network point-to-point isis hello-interval minimal ! interface GigabitEthernet0/2 description TELIA (Ref : IC 111167) dampening ip address 213.248.98.42 255.255.255.252 ip access-group davetest_20080902 in no ip redirects no ip proxy-arp ip pim bsr-border ip pim sparse-mode ip multicast boundary multicast-filter media-type gbic speed auto duplex auto negotiation auto no cdp enable no clns route-cache ! interface GigabitEthernet0/3 description TH1-CR2 dampening mtu 4470 ip address 212.43.193.94 255.255.255.252 no ip redirects no ip proxy-arp ip router isis media-type gbic speed auto duplex full negotiation auto mpls traffic-eng tunnels mpls ip no cdp enable isis network point-to-point isis hello-interval minimal ! interface GigabitEthernet2/0 description DE via EU-networks dampening mtu 1600 ip address 212.82.224.62 255.255.255.252 ip access-group davetest_20080902 in no ip redirects no ip proxy-arp no negotiation auto mpls bgp forwarding no cdp enable isis metric 64 ! interface FastEthernet3/0 description PARIX dampening no ip address no ip redirects no ip proxy-arp ip accounting mac-address input ip accounting mac-address output duplex full no cdp enable no clns route-cache ! interface FastEthernet3/0.2 description PARIX_OLD encapsulation dot1Q 2 ip address 198.32.247.83 255.255.255.0 ip access-group davetest_20080902 in ip verify unicast source reachable-via any allow-default allow-self-ping no ip redirects no ip proxy-arp shutdown no snmp trap link-status no cdp enable ! interface FastEthernet3/0.3 description PARIX-FE-vlan3 encapsulation dot1Q 3 ip address 193.251.216.83 255.255.255.0 ip access-group davetest_20080902 in ip verify unicast source reachable-via any allow-default allow-self-ping no ip redirects no ip proxy-arp ipv6 address 2001:7F8:2D:A:1:0:8975:1/48 ipv6 enable ipv6 nd suppress-ra no snmp trap link-status no cdp enable ! interface FastEthernet3/0.5 description PARIX-FE-vlan5 encapsulation dot1Q 5 no snmp trap link-status no cdp enable ! router isis net 49.8975.0000.2120.4319.3045.00 is-type level-2-only authentication mode md5 authentication key-chain is-is-key-chain ispf level-1-2 metric-style wide fast-flood set-overload-bit on-startup wait-for-bgp spf-interval 5 5 50 prc-interval 5 5 50 lsp-gen-interval 5 5 50 no hello padding log-adjacency-changes all passive-interface GigabitEthernet2/0 passive-interface Loopback0 passive-interface Loopback1 passive-interface Loopback2 passive-interface Loopback3 mpls traffic-eng router-id Loopback0 mpls traffic-eng level-2 ! router bgp 8975 template peer-policy Telia-IPv6 route-map Telia-IPv6-in in route-map Telia-IPv6-out out prefix-list ipv6-ebgp-strict in prefix-list ipv6-ebgp-strict out exit-peer-policy ! template peer-policy Telia-IPv4 route-map Telia-IPv4-in in route-map Telia-IPv4-out out prefix-list bogons in prefix-list bogons out send-community exit-peer-policy ! template peer-policy Telia-IPv4-Mcast inherit peer-policy Telia-IPv4 10 exit-peer-policy ! template peer-policy DE-IPv4 route-map DE-in in route-map DE-out out prefix-list bogons in prefix-list bogons out next-hop-self send-community exit-peer-policy ! template peer-policy DE-VPNv4 route-map DE-VPNv4-in in route-map DE-VPNv4-out out next-hop-self maximum-prefix 10000 send-community extended exit-peer-policy ! template peer-session DE-IPv4 no transport path-mtu-discovery ttl-security hops 1 exit-peer-session ! no bgp default ipv4-unicast no bgp default route-target filter bgp log-neighbor-changes bgp confederation identifier 8426 bgp confederation peers 8196 8426 bgp deterministic-med bgp bestpath compare-routerid bgp maxas-limit 50 timers bgp 30 90 neighbor RR-IPv4 peer-group neighbor RR-IPv4 remote-as 8975 no neighbor RR-IPv4 transport path-mtu-discovery neighbor RR-IPv4 password 7 020B054905035E74 neighbor RR-IPv4 update-source Loopback0 neighbor RR-IPv4 timers 5 15 neighbor PARIX-IPv6 peer-group no neighbor PARIX-IPv6 transport path-mtu-discovery neighbor RR-IPv6 peer-group neighbor RR-IPv6 remote-as 8975 no neighbor RR-IPv6 transport path-mtu-discovery neighbor RR-IPv6 password 7 020B054905035E74 neighbor RR-IPv6 update-source Loopback2 neighbor RR-VPNv4 peer-group neighbor RR-VPNv4 remote-as 8975 neighbor RR-VPNv4 description REFLECTOR_VPN no neighbor RR-VPNv4 transport path-mtu-discovery neighbor RR-VPNv4 password 7 020B054905035E74 neighbor RR-VPNv4 update-source Loopback1 neighbor PARIX-IPv4 peer-group no neighbor PARIX-IPv4 transport path-mtu-discovery neighbor RR-IPv4-Mcast peer-group neighbor RR-IPv4-Mcast remote-as 8975 no neighbor RR-IPv4-Mcast transport path-mtu-discovery neighbor RR-IPv4-Mcast password 7 1104181719175A59 neighbor RR-IPv4-Mcast update-source Loopback3 neighbor 2001:688:1FE0:0:1:0:1273:1 remote-as 1273 neighbor 2001:688:1FE0:0:1:0:1273:1 peer-group PARIX-IPv6 neighbor 2001:688:1FE0:0:1:0:1273:1 description CABLE & WIRELESS neighbor 2001:688:1FE0:0:1:0:1273:1 shutdown neighbor 2001:688:1FE0:0:1:0:1273:1 password 7 097F590E2322310822242A202A0C02 neighbor 2001:688:1FE0:0:1:0:3257:1 remote-as 3257 neighbor 2001:688:1FE0:0:1:0:3257:1 peer-group PARIX-IPv6 neighbor 2001:688:1FE0:0:1:0:3257:1 description TISCALI (disabled 05/03/07 peering on Free-IX) neighbor 2001:688:1FE0:0:1:0:3257:1 shutdown neighbor 2001:688:1FE0:0:1:0:3257:1 password 7 151B18030B79182C213B neighbor 2001:688:1FE0:0:1:1:3193:1 remote-as 13193 neighbor 2001:688:1FE0:0:1:1:3193:1 peer-group PARIX-IPv6 neighbor 2001:688:1FE0:0:1:1:3193:1 description NERIM neighbor 2001:688:1FE0:0:2:0:2486:1 remote-as 2486 neighbor 2001:688:1FE0:0:2:0:2486:1 peer-group PARIX-IPv6 neighbor 2001:688:1FE0:0:2:0:2486:1 description AFNIC neighbor 2001:688:1FE0:0:2:0:2486:1 password 7 060D1A7368410808101217 neighbor 2001:688:1FE0:0:4:0:7500:1 remote-as 7500 neighbor 2001:688:1FE0:0:4:0:7500:1 peer-group PARIX-IPv6 neighbor 2001:688:1FE0:0:4:0:7500:1 description WIDE-M-ROOT-SERVER neighbor 2001:688:1FE0:0:4:0:7500:1 shutdown neighbor 2001:688:1FE0:0:4:0:7500:1 password 7 0119095C7F040901285846 neighbor 2001:7F8:2D:0:2:3:781:1 remote-as 30781 neighbor 2001:7F8:2D:0:2:3:781:1 peer-group PARIX-IPv6 neighbor 2001:7F8:2D:0:2:3:781:1 description JAGUAR neighbor 2001:2000:3080:6::1 remote-as 1299 neighbor 2001:2000:3080:6::1 description TELIA neighbor 62.240.250.3 peer-group RR-IPv6 neighbor 62.240.250.8 peer-group RR-IPv6 neighbor 62.240.250.153 peer-group RR-IPv4-Mcast neighbor 62.240.250.155 peer-group RR-IPv4-Mcast neighbor 193.251.216.13 remote-as 2686 neighbor 193.251.216.13 peer-group PARIX-IPv4 neighbor 193.251.216.13 description ATT neighbor 193.251.216.56 remote-as 30781 neighbor 193.251.216.56 peer-group PARIX-IPv4 neighbor 193.251.216.56 description JAGUAR neighbor 193.251.216.56 password 7 013D07167A05080036484B1B170A19162E1E161F3B neighbor 193.251.216.70 remote-as 4589 neighbor 193.251.216.70 peer-group PARIX-IPv4 neighbor 193.251.216.70 description EASYNET neighbor 193.251.216.70 password 7 12290A141A5D020522 neighbor 193.251.216.77 remote-as 8220 neighbor 193.251.216.77 peer-group PARIX-IPv4 neighbor 193.251.216.77 description COLT neighbor 193.251.216.77 password 7 014B5F0C495F0F21247A580623 neighbor 193.251.216.82 remote-as 5436 neighbor 193.251.216.82 peer-group PARIX-IPv4 neighbor 193.251.216.82 description BTAH neighbor 193.251.216.82 password 7 131D181D08040B25 neighbor 193.251.216.84 remote-as 24963 neighbor 193.251.216.84 peer-group PARIX-IPv4 neighbor 193.251.216.84 description YACAST neighbor 193.251.216.84 password 7 123D1553540F270B1A neighbor 193.251.216.99 remote-as 15557 neighbor 193.251.216.99 peer-group PARIX-IPv4 neighbor 193.251.216.99 description LDCOM neighbor 193.251.216.100 remote-as 174 neighbor 193.251.216.100 peer-group PARIX-IPv4 neighbor 193.251.216.100 description COGENT neighbor 193.251.216.105 remote-as 21409 neighbor 193.251.216.105 description IK0ULA neighbor 193.251.216.112 remote-as 24963 neighbor 193.251.216.112 peer-group PARIX-IPv4 neighbor 193.251.216.112 description YACAST neighbor 193.251.216.112 password 7 123D1553540F270B1A neighbor 212.43.193.49 peer-group RR-IPv4 neighbor 212.43.193.51 peer-group RR-IPv4 neighbor 212.43.193.59 peer-group RR-VPNv4 neighbor 212.43.193.65 peer-group RR-VPNv4 neighbor 212.82.224.61 remote-as 8196 neighbor 212.82.224.61 inherit peer-session DE-IPv4 neighbor 212.82.224.61 description DE neighbor 213.248.98.41 remote-as 1299 neighbor 213.248.98.41 description TELIA neighbor 213.248.98.41 password 7 07240A5F653F0F2C2F ! address-family ipv4 neighbor RR-IPv4 send-community neighbor RR-IPv4 next-hop-self neighbor RR-IPv4 prefix-list bogons in neighbor RR-IPv4 prefix-list bogons out neighbor PARIX-IPv4 remove-private-as neighbor PARIX-IPv4 prefix-list ipv4-ebgp-filter in neighbor PARIX-IPv4 prefix-list ipv4-ebgp-filter out neighbor PARIX-IPv4 route-map PARIX-in in neighbor PARIX-IPv4 route-map PARIX-out out neighbor PARIX-IPv4 maximum-prefix 125000 neighbor 193.251.216.13 activate neighbor 193.251.216.13 maximum-prefix 200 restart 30 neighbor 193.251.216.56 activate neighbor 193.251.216.56 maximum-prefix 120 restart 30 neighbor 193.251.216.70 activate neighbor 193.251.216.70 maximum-prefix 400 restart 30 neighbor 193.251.216.77 activate neighbor 193.251.216.77 maximum-prefix 3000 restart 30 neighbor 193.251.216.82 activate neighbor 193.251.216.82 maximum-prefix 100 restart 30 neighbor 193.251.216.84 activate neighbor 193.251.216.84 soft-reconfiguration inbound neighbor 193.251.216.84 maximum-prefix 500 restart 30 neighbor 193.251.216.99 activate neighbor 193.251.216.99 maximum-prefix 800 80 restart 30 neighbor 193.251.216.100 activate neighbor 193.251.216.100 maximum-prefix 40000 restart 30 neighbor 193.251.216.105 activate neighbor 193.251.216.105 maximum-prefix 50 restart 30 neighbor 193.251.216.112 activate neighbor 193.251.216.112 soft-reconfiguration inbound neighbor 193.251.216.112 maximum-prefix 500 restart 30 neighbor 212.43.193.49 activate neighbor 212.43.193.51 activate neighbor 212.82.224.61 activate neighbor 212.82.224.61 inherit peer-policy DE-IPv4 neighbor 213.248.98.41 activate neighbor 213.248.98.41 inherit peer-policy Telia-IPv4 no auto-summary no synchronization bgp dampening exit-address-family ! address-family ipv4 multicast neighbor RR-IPv4-Mcast send-community neighbor RR-IPv4-Mcast next-hop-self neighbor RR-IPv4-Mcast prefix-list bogons in neighbor RR-IPv4-Mcast prefix-list bogons out neighbor 62.240.250.153 activate neighbor 62.240.250.155 activate neighbor 213.248.98.41 activate neighbor 213.248.98.41 inherit peer-policy Telia-IPv4-Mcast no auto-summary exit-address-family ! address-family vpnv4 neighbor RR-VPNv4 send-community extended neighbor RR-VPNv4 next-hop-self neighbor 212.43.193.59 activate neighbor 212.43.193.65 activate neighbor 212.82.224.61 activate neighbor 212.82.224.61 send-community extended neighbor 212.82.224.61 inherit peer-policy DE-VPNv4 exit-address-family ! address-family ipv6 neighbor PARIX-IPv6 remove-private-as neighbor PARIX-IPv6 soft-reconfiguration inbound neighbor PARIX-IPv6 prefix-list ipv6-ebgp-relaxed in neighbor PARIX-IPv6 prefix-list ipv6-ebgp-relaxed out neighbor PARIX-IPv6 route-map PARIX-in in neighbor PARIX-IPv6 route-map PARIX-out out neighbor PARIX-IPv6 maximum-prefix 100 neighbor RR-IPv6 send-community neighbor RR-IPv6 next-hop-self neighbor RR-IPv6 send-label neighbor 2001:688:1FE0:0:1:0:1273:1 activate neighbor 2001:688:1FE0:0:1:0:1273:1 maximum-prefix 500 restart 30 neighbor 2001:688:1FE0:0:1:0:3257:1 activate neighbor 2001:688:1FE0:0:1:0:3257:1 maximum-prefix 150 restart 30 neighbor 2001:688:1FE0:0:1:1:3193:1 activate neighbor 2001:688:1FE0:0:1:1:3193:1 maximum-prefix 10 restart 30 neighbor 2001:688:1FE0:0:2:0:2486:1 activate neighbor 2001:688:1FE0:0:2:0:2486:1 maximum-prefix 5 restart 30 neighbor 2001:688:1FE0:0:4:0:7500:1 activate neighbor 2001:688:1FE0:0:4:0:7500:1 maximum-prefix 10 restart 30 neighbor 2001:7F8:2D:0:2:3:781:1 activate neighbor 2001:7F8:2D:0:2:3:781:1 maximum-prefix 10 restart 30 neighbor 2001:2000:3080:6::1 activate neighbor 2001:2000:3080:6::1 override-capability-neg neighbor 2001:2000:3080:6::1 inherit peer-policy Telia-IPv6 neighbor 62.240.250.3 activate neighbor 62.240.250.8 activate redistribute connected route-map IPv6-connected-routes-bgp no synchronization exit-address-family ! ip default-gateway 212.43.193.65 ip classless ip route 10.66.66.66 255.255.255.255 Null0 ip route 62.240.224.0 255.255.224.0 Null0 250 ip route 212.43.192.0 255.255.192.0 Null0 250 ip route 212.43.236.192 255.255.255.192 212.43.193.81 ip flow-export source Loopback0 ip flow-export version 5 ip flow-top-talkers top 50 sort-by packets ! no ip http server ip tacacs source-interface Loopback0 ! ip extcommunity-list 99 permit rt 8426:1 ip extcommunity-list 99 permit rt 8426:9990 ip extcommunity-list 99 permit rt 8426:9998 ip extcommunity-list 99 permit rt 8975:100 ip extcommunity-list 99 permit rt 8196:100 ip extcommunity-list 99 permit rt 8196:200 ip extcommunity-list 99 permit rt 8426:10107 ip extcommunity-list 99 permit rt 8426:10018 ip extcommunity-list 99 permit rt 8426:10031 ip extcommunity-list 99 permit rt 8426:10044 ip extcommunity-list 99 permit rt 8426:10040 ip extcommunity-list 99 permit rt 8426:10086 ip extcommunity-list 99 permit rt 8426:10091 ip extcommunity-list 99 permit rt 8426:10099 ip extcommunity-list 99 permit rt 8426:10103 ip extcommunity-list 99 permit rt 8426:10106 ip extcommunity-list 99 permit rt 8426:10125 ip extcommunity-list 99 permit rt 8426:10142 ip extcommunity-list 99 permit rt 8426:10148 ip extcommunity-list 99 permit rt 8426:10152 ip extcommunity-list 99 permit rt 8426:10153 ip extcommunity-list 99 permit rt 8426:10173 ip extcommunity-list 99 permit rt 8426:10185 ip extcommunity-list 99 permit rt 8426:10187 ip extcommunity-list 99 permit rt 8426:10190 ip extcommunity-list 99 permit rt 8426:10191 ip extcommunity-list 99 permit rt 8426:10192 ip extcommunity-list 99 permit rt 8426:10210 ip extcommunity-list 99 permit rt 8426:10218 ip extcommunity-list 99 permit rt 8426:10223 ip extcommunity-list 99 permit rt 8426:10230 ip extcommunity-list 99 permit rt 8426:10248 ip extcommunity-list 99 permit rt 8196:3900 ip extcommunity-list 99 permit rt 8483:14200 ip extcommunity-list 99 permit rt 8483:10001 ip extcommunity-list 99 permit rt 8483:10009 ip extcommunity-list 99 permit rt 8196:4300 ip extcommunity-list 99 permit rt 8196:6500 ip extcommunity-list 99 permit rt 8196:7100 ip extcommunity-list 99 permit rt 8196:8100 ip extcommunity-list 99 permit rt 8196:10000 ip extcommunity-list 99 permit rt 8196:10100 ip extcommunity-list 99 permit rt 8196:10400 ip extcommunity-list 99 permit rt 20869:9998 ip extcommunity-list 99 permit rt 20869:10001 ip extcommunity-list 99 permit rt 20869:10004 ip extcommunity-list 99 permit rt 5533:20000 ip extcommunity-list 99 permit rt 5533:20001 ip extcommunity-list 99 permit rt 5533:20002 ip extcommunity-list 99 permit rt 5533:20003 ip extcommunity-list 99 permit rt 5533:20004 ip extcommunity-list 99 permit rt 5533:20005 ip extcommunity-list 99 permit rt 5533:20006 ip extcommunity-list 99 permit rt 5533:20007 ip extcommunity-list 99 permit rt 5533:20008 ip extcommunity-list 99 permit rt 5533:20009 ip extcommunity-list 99 permit rt 5533:20010 ip extcommunity-list 99 permit rt 5533:20011 ip extcommunity-list 99 permit rt 5533:20012 ip extcommunity-list 99 permit rt 5533:20013 ip extcommunity-list 99 permit rt 5533:20014 ip extcommunity-list 99 permit rt 5533:20015 ip extcommunity-list 99 permit rt 5533:20016 ip extcommunity-list 99 permit rt 5533:20017 ip extcommunity-list 99 permit rt 5533:20018 ip extcommunity-list 99 permit rt 5533:20019 ip extcommunity-list standard VPNv4-cust-rmix permit rt 8196:200 ip extcommunity-list standard VPNv4-mgmt-DE permit rt 8196:100 ip bgp-community new-format ip community-list standard DE:DE-peerings permit 8196:13000 ip community-list standard DE:DE-peerings permit 8196:15000 ip community-list standard DE:DE permit 8196:14010 ip community-list standard UK:UK permit 8426:100 ip community-list standard UK:UK-peerings permit 8426:799 ip community-list standard FR:FR-transit permit 8975:12000 ip community-list standard FR:FR-peerings permit 8975:13000 ip community-list standard FR:FR permit 8975:14010 ip community-list standard FR:UK-peerings permit 8975:15020 ip community-list standard FR:DE-peerings permit 8975:15030 ip community-list standard UK:UK-transit permit 8426:599 ip community-list standard FR:UK permit 8975:14020 ip community-list standard FR:DE permit 8975:14030 ip community-list standard EU:FR-AS permit 8975:1 ip community-list standard EU:FR-other-AS permit 8975:2000 ip community-list standard EU:FR permit 8975:100 ip community-list standard EU:FR-peerings permit 8975:799 ip community-list standard EU:FR-transit permit 8975:599 ip community-list standard EU:UK-AS permit 8426:1 ip community-list standard EU:UK-other-AS permit 8426:2000 ip community-list standard EU:UK permit 8426:100 ip community-list standard EU:UK-peerings permit 8426:799 ip community-list standard EU:UK-transit permit 8426:599 ip community-list standard EU:DE-AS permit 8196:1 ip community-list standard EU:DE-other-AS permit 8196:2000 ip community-list standard EU:DE permit 8196:100 ip community-list standard EU:DE-peerings permit 8196:799 ip community-list standard EU:DE-transit permit 8196:599 ip community-list standard DE:DE-transit permit 8196:12000 ip community-list standard DE:UK permit 8196:14020 ip community-list standard FR:internal permit 8975:50000 ip community-list standard FR:neuf-bas-radius permit 8975:50051 ip community-list standard FR:sfr-claranet-lns-radius permit 8975:50052 ip community-list standard FR:sfr-customers permit 8975:50053 ip community-list standard ES:ES permit 20869:100 ip community-list standard ES:ES-peerings permit 20869:799 ip community-list standard FR:ES permit 8975:14040 ip community-list standard FR:ES-peerings permit 8975:15040 ip community-list standard NL:NL permit 8483:100 ip community-list standard NL:NL-peerings permit 8483:799 ip community-list standard FR:NL permit 8975:14050 ip community-list standard FR:NL-peerings permit 8975:15050 ip community-list standard EU:AMEN-AS permit 28677:1 ip community-list standard EU:AMEN-other-AS permit 28677:2000 ip community-list standard EU:AMEN permit 28677:100 ip community-list standard EU:AMEN-peerings permit 28677:799 ip community-list standard EU:AMEN-transit permit 28677:599 ip community-list standard AMEN:internal permit 28677:50000 ip community-list standard FR:CLARANET permit 8975:14000 ip community-list standard FR:CLARANET-peerings permit 8975:15000 ip community-list standard FR:CLARANET-confederation permit 8426:101 8975:14000 ip community-list standard FR:CLARANET-confederation-peerings permit 8426:101 8975:15000 ip community-list standard EU:CONFEDERATION permit 8426:101 ip community-list standard FR:artful permit 8975:50054 ip community-list standard FR:hosting-customers permit 8975:50055 ip community-list standard FR:fb-hosting-customers permit 8975:50056 ip community-list standard FR:sd-hosting-customers permit 8975:50057 ip community-list standard Telia-Blackhole permit 1299:999 ip community-list standard Above-Blackhole permit 6461:5990 ip community-list standard FR:reflex-claranet-lns-radius permit 8975:50058 ip community-list standard FR:reflex-neuf-radius permit 8975:50059 ip community-list standard FR:NYIIX permit 8975:14060 ip community-list standard FR:NYIIX-peerings permit 8975:15060 ip community-list standard NY:NY permit 65533:100 ip community-list standard NY:NYIIX-peerings permit 65533:709 ip community-list standard NY:NY-peerings permit 65533:799 ip community-list standard NY:NYIIX-deny permit 65535:709 ip community-list standard PT:PT permit 5533:100 ip community-list standard PT:PT-peerings permit 5533:799 ip community-list standard PT:PT-deny permit 65535:5533 ip community-list standard FR:PT permit 8975:14070 ip community-list standard FR:PT-peerings permit 8975:15070 ip as-path access-list 1 permit ^$ ip as-path access-list 1 permit ^34391$ ip as-path access-list 100 permit ^(15557_)+$ ip as-path access-list 200 permit \([0-9]+.*\) ip as-path access-list 400 permit ^34391$ ip pim rp-address 212.43.247.132 ! ! ip prefix-list Witbe-Seoul seq 5 permit 193.109.117.0/24 ! ip prefix-list backbone seq 20 permit 212.43.193.0/24 ge 25 ! ip prefix-list bogons seq 5 deny 0.0.0.0/8 le 32 ip prefix-list bogons seq 10 deny 10.0.0.0/8 le 32 ip prefix-list bogons seq 15 deny 127.0.0.0/8 le 32 ip prefix-list bogons seq 20 deny 172.16.0.0/12 le 32 ip prefix-list bogons seq 25 deny 169.254.0.0/16 le 32 ip prefix-list bogons seq 30 deny 192.168.0.0/16 le 32 ip prefix-list bogons seq 35 deny 192.0.2.0/24 le 32 ip prefix-list bogons seq 40 deny 224.0.0.0/3 le 32 ip prefix-list bogons seq 45 permit 0.0.0.0/0 le 32 ! ip prefix-list default seq 20 permit 0.0.0.0/0 ! ip prefix-list ipv4-ebgp-filter description External peerings should only pass up to /24 length ip prefix-list ipv4-ebgp-filter seq 5 deny 0.0.0.0/8 le 32 ip prefix-list ipv4-ebgp-filter seq 10 deny 10.0.0.0/8 le 32 ip prefix-list ipv4-ebgp-filter seq 15 deny 127.0.0.0/8 le 32 ip prefix-list ipv4-ebgp-filter seq 20 deny 172.16.0.0/12 le 32 ip prefix-list ipv4-ebgp-filter seq 25 deny 169.254.0.0/16 le 32 ip prefix-list ipv4-ebgp-filter seq 30 deny 192.168.0.0/16 le 32 ip prefix-list ipv4-ebgp-filter seq 35 deny 192.0.2.0/24 le 32 ip prefix-list ipv4-ebgp-filter seq 40 deny 224.0.0.0/3 le 32 ip prefix-list ipv4-ebgp-filter seq 45 permit 0.0.0.0/0 le 24 ! ip prefix-list superblocks-more-specific seq 20 permit 212.43.192.0/18 ge 19 ip prefix-list superblocks-more-specific seq 40 permit 62.240.224.0/19 ge 20 ! ip access-list standard clara-mpls-pe-snmp-access ip access-list standard deny-all deny any ip access-list standard multicast-filter deny 224.0.1.39 deny 224.0.1.40 deny 239.0.0.0 0.255.255.255 permit any ip access-list standard noc-access permit 212.43.194.38 permit 212.43.194.17 permit 213.253.16.104 permit 212.43.194.108 permit 195.157.6.1 permit 62.193.206.162 permit 62.193.206.153 permit 212.43.195.0 0.0.0.31 permit 212.43.232.64 0.0.0.31 permit 212.43.232.96 0.0.0.7 permit 212.43.232.32 0.0.0.31 permit 212.43.232.104 0.0.0.7 permit 212.43.193.0 0.0.0.255 permit 212.43.247.0 0.0.0.255 permit 212.43.225.0 0.0.0.3 permit 212.43.225.4 0.0.0.3 permit 212.43.225.8 0.0.0.3 permit 212.43.225.12 0.0.0.3 permit 195.8.68.0 0.0.0.255 permit 195.8.69.0 0.0.0.255 permit 195.8.70.0 0.0.0.255 permit 195.157.3.0 0.0.0.255 permit 212.82.224.0 0.0.1.255 permit 80.67.96.64 0.0.0.31 permit 62.193.207.192 0.0.0.31 permit 62.193.223.0 0.0.0.255 deny any log ip access-list standard snmp-access permit 212.43.194.38 permit 212.43.194.17 permit 212.43.194.8 permit 212.43.194.117 permit 213.253.16.104 permit 212.43.194.108 permit 195.8.69.211 permit 89.185.48.165 permit 195.8.71.57 permit 212.43.195.0 0.0.0.31 deny any log ip access-list standard snmp-qos-monitor-uk permit 195.157.6.0 0.0.0.7 ip access-list standard uk-snmp-access permit 212.43.194.17 permit 195.157.6.0 0.0.0.7 permit 212.43.232.64 0.0.0.31 ! ip access-list extended davetest_20080902 deny ip host 72.1.240.69 any deny ip host 61.172.249.173 any deny ip host 58.102.154.11 any deny ip host 69.147.235.116 any deny ip host 211.41.128.119 any deny ip host 90.156.146.44 any deny ip host 210.0.141.247 any permit ip 195.8.70.0 0.0.0.255 any permit ip host 195.8.71.66 any permit ip 195.157.6.0 0.0.0.7 any permit ip host 80.168.0.33 any permit icmp any 212.43.193.0 0.0.0.255 deny ip any 212.43.193.0 0.0.0.255 permit ip any any ip access-list extended egress_filter deny ip 212.43.192.0 0.0.63.255 any deny ip 62.240.224.0 0.0.31.255 any permit ip any any logging facility local3 logging source-interface Loopback0 logging 212.43.194.17 access-list 2 permit 212.43.194.38 access-list 2 permit 212.43.194.17 access-list 2 permit 212.43.194.8 access-list 2 permit 212.43.194.117 access-list 2 permit 213.253.16.104 access-list 2 permit 195.8.69.211 access-list 2 permit 89.185.48.165 access-list 2 permit 195.8.71.57 access-list 2 permit 212.43.195.0 0.0.0.31 access-list 2 deny any log access-list 105 permit icmp any any no cdp run ! ! ipv6 prefix-list ipv6-ebgp-relaxed seq 5 deny 3FFE::/16 le 128 ipv6 prefix-list ipv6-ebgp-relaxed seq 10 deny 2001:DB8::/32 le 128 ipv6 prefix-list ipv6-ebgp-relaxed seq 15 permit 2001::/32 ipv6 prefix-list ipv6-ebgp-relaxed seq 20 deny 2001::/32 le 128 ipv6 prefix-list ipv6-ebgp-relaxed seq 25 permit 2002::/16 ipv6 prefix-list ipv6-ebgp-relaxed seq 30 deny 2002::/16 le 128 ipv6 prefix-list ipv6-ebgp-relaxed seq 35 deny ::/8 le 128 ipv6 prefix-list ipv6-ebgp-relaxed seq 40 deny FE00::/9 le 128 ipv6 prefix-list ipv6-ebgp-relaxed seq 45 deny FF00::/8 le 128 ipv6 prefix-list ipv6-ebgp-relaxed seq 50 permit ::/0 le 48 ipv6 prefix-list ipv6-ebgp-relaxed seq 55 deny ::/0 le 128 ! ipv6 prefix-list ipv6-ebgp-strict description http://www.space.net/~gert/RIPE/ipv6-filters.html ipv6 prefix-list ipv6-ebgp-strict seq 5 deny 3FFE::/16 le 128 ipv6 prefix-list ipv6-ebgp-strict seq 10 permit 2001:500::/30 ge 48 le 48 ipv6 prefix-list ipv6-ebgp-strict seq 15 deny 2001:DB8::/32 le 128 ipv6 prefix-list ipv6-ebgp-strict seq 20 permit 2001::/32 ipv6 prefix-list ipv6-ebgp-strict seq 25 permit 2001::/16 ge 35 le 35 ipv6 prefix-list ipv6-ebgp-strict seq 30 permit 2001::/16 ge 19 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 35 permit 2001:678::/29 ge 48 le 48 ipv6 prefix-list ipv6-ebgp-strict seq 40 permit 2002::/16 ipv6 prefix-list ipv6-ebgp-strict seq 45 permit 2003::/16 ge 19 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 50 permit 2400::/12 ge 19 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 55 permit 2600::/12 ge 19 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 60 permit 2610::/23 ge 24 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 65 permit 2620::/23 ge 24 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 70 permit 2800::/12 ge 19 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 75 permit 2A00::/12 ge 19 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 80 permit 2C00::/12 ge 19 le 32 ipv6 prefix-list ipv6-ebgp-strict seq 85 deny ::/0 le 128 ! ipv6 prefix-list ipv6-fr-superblocks seq 5 permit 2001:A70::/32 route-map Telia-IPv4-in permit 10 match ip address prefix-list Witbe-Seoul set local-preference 700 set community 8975:598 8975:599 8975:10000 8975:12000 8975:12010 ! route-map Telia-IPv4-in permit 20 set local-preference 400 set community 8975:598 8975:599 8975:10000 8975:12000 8975:12010 ! route-map Telia-IPv6-in permit 10 set local-preference 400 set community 8975:598 8975:599 8975:666 8975:10000 8975:12000 8975:12010 ! route-map DE-VPNv4-in permit 10 match extcommunity 99 ! route-map PARIX-out permit 10 match as-path 200 match community FR:CLARANET set as-path prepend 8426 ! route-map PARIX-out permit 20 match community FR:CLARANET ! route-map DE-in permit 10 match community DE:DE-peerings set local-preference 695 set community 8975:10000 8975:11000 8975:11030 8975:15000 8975:15030 additive ! route-map DE-in permit 15 match community DE:DE set local-preference 1000 set community 8975:10000 8975:11000 8975:11030 8975:14000 8975:14030 additive ! route-map DE-in permit 25 match community UK:UK set local-preference 999 set community 8975:10000 8975:11000 8975:11030 8975:14000 8975:14020 additive ! route-map DE-in permit 30 match community UK:UK-peerings set local-preference 694 set community 8975:10000 8975:11000 8975:11030 8975:15000 8975:15020 additive ! route-map DE-in permit 35 match community ES:ES set local-preference 999 set community 8975:10000 8975:11000 8975:11030 8975:14000 8975:14040 additive ! route-map DE-in permit 40 match community ES:ES-peerings set local-preference 694 set community 8975:10000 8975:11000 8975:11030 8975:15000 8975:15040 additive ! route-map DE-in permit 50 match community NL:NL set local-preference 999 set community 8975:10000 8975:11000 8975:11030 8975:14000 8975:14050 additive ! route-map DE-in permit 55 match community NL:NL-peerings set local-preference 694 set community 8975:10000 8975:11000 8975:11030 8975:15000 8975:15050 additive ! route-map DE-in permit 60 match community NY:NY set local-preference 999 set community 8975:10000 8975:11000 8975:11030 8975:14000 8975:14060 additive ! route-map DE-in permit 65 match community NY:NY-peerings set local-preference 694 set community 8975:10000 8975:11000 8975:11030 8975:15000 8975:15060 additive ! route-map DE-in permit 70 match community PT:PT set local-preference 999 set community 8975:10000 8975:11000 8975:11030 8975:14000 8975:14070 additive ! route-map DE-in permit 75 match community PT:PT-peerings set local-preference 694 set community 8975:10000 8975:11000 8975:11030 8975:15000 8975:15070 additive ! route-map DE-out permit 10 match as-path 200 match community FR:CLARANET set metric +10 set local-preference 0 set as-path prepend 8426 ! route-map DE-out permit 20 match community FR:CLARANET set local-preference 0 ! route-map DE-out permit 30 match as-path 200 match community FR:CLARANET-peerings set metric +10 set local-preference 0 set as-path prepend 8426 ! route-map DE-out permit 40 match community FR:CLARANET-peerings set local-preference 0 ! route-map Telia-IPv4-out permit 10 match ip address prefix-list bogons match community FR:FR ! route-map Telia-IPv4-out permit 40 match community Telia-Blackhole ! route-map Telia-IPv6-out permit 10 match as-path 1 match community FR:FR match ipv6 address prefix-list ipv6-ebgp-strict ! route-map DE-VPNv4-out permit 10 match extcommunity 99 ! route-map IPv6-connected-routes-bgp permit 10 set community no-export local-AS ! route-map PARIX-in permit 20 set local-preference 699 set community 8975:799 8975:10000 8975:13000 8975:13010 8975:15000 8975:15010 ! snmp-server engineID local 00000009020000500B685400 snmp-server community passwordsnmp RO snmp-access snmp-server community Eiqu2oop RW snmp-qos-monitor-uk snmp-server community ieYee9oa RO clara-mpls-pe-snmp-access snmp-server community ilmppIII RO uk-snmp-access snmp-server trap-source Loopback0 snmp-server enable traps tty snmp-server enable traps sonet snmp-server host 212.43.194.17 passwordsnmp tty bgp config envmon tacacs-server host 212.43.194.17 tacacs-server directed-request tacacs-server key 7 01100A05490A085C35 ! mpls ldp router-id Loopback0 force ipv6 access-list log-update threshold 1 ! ipv6 access-list ipv6-noc permit ipv6 2001:A70:FE:1::/64 any deny ipv6 any any ! ipv6 access-list v6-debug permit ipv6 host 2001:A70:FF::7 any log permit ipv6 any host 2001:A70:FF::7 log permit ipv6 any any ! control-plane ! ! ! dial-peer cor custom ! ! ! banner motd ^C ####################################### ### Unauthorised access prohibited ### ####################################### ### Disconnect now if you are not ### ### an authorised user. ### ####################################### ### All connection attempts are ### ### logged. ### ####################################### ^C ! line con 0 stopbits 1 line aux 0 stopbits 1 line vty 0 4 access-class noc-access in exec-timeout 120 0 password 7 0256574909565F2A5F ipv6 access-class ipv6-noc in logging synchronous width 111 transport input telnet ssh line vty 5 10 access-class noc-access in ! ntp clock-period 17179932 ntp update-calendar ntp server 212.43.194.2 end th1-br2#exit Connection to th1-br2.router.fr.clara.net closed.