set version 17.3R3-S4.2
set system host-name js584wan-01
set system auto-snapshot
set system time-zone PST8PDT
set system authentication-order tacplus
set system authentication-order password
set system ports console log-out-on-disconnect
set system ports auxiliary disable
set system root-authentication encrypted-password "$6$isJejxrM$eY1s3zZbynQWqUmC/Im8f.9hGA/SqdBMbqbFc5rhn9lFL158L8hmvu6/ajmInxNYSHBcqmJePDa6JG03nGipi/"
set system tacplus-server 10.16.22.220 port 49
set system tacplus-server 10.16.22.220 secret "$9$6WNh/u1cylKvWikz6/C1I7NdwoGHqPFn/wYz3/Cu0-Vw2GjP5FCA0ik01EyeK"
set system tacplus-server 10.16.22.220 single-connection
set system tacplus-server 10.16.22.220 source-address 10.121.0.7
set system tacplus-server 10.228.32.69 port 49
set system tacplus-server 10.228.32.69 secret "$9$6WNh/u1cylKvWikz6/C1I7NdwoGHqPFn/wYz3/Cu0-Vw2GjP5FCA0ik01EyeK"
set system tacplus-server 10.228.32.69 single-connection
set system tacplus-server 10.228.32.69 source-address 10.121.0.7
set system accounting events login
set system accounting events change-log
set system accounting events interactive-commands
set system accounting destination tacplus
set system login message "\n\n\n WARNING: This is a company computer system with access restricted to\n those with proper authorization.  Authorized parties are restricted\n to those functions which have been assigned to perform work related\n duties.  Any unauthorized access attempt will be investigated and\n prosecuted to the full extent of the law.\n\n If you are not an authorized user, disconnect now.\n\n\n\n"
set system login idle-timeout 15
set system login class RO-CLASS idle-timeout 15
set system login class RO-CLASS login-alarms
set system login class RO-CLASS permissions view
set system login class RO-CLASS permissions view-configuration
set system login class RW-CLASS idle-timeout 15
set system login class RW-CLASS login-alarms
set system login class RW-CLASS permissions all
set system login user JUNOS-RO uid 2100
set system login user JUNOS-RO class RO-CLASS
set system login user JUNOS-RW uid 2101
set system login user JUNOS-RW class RW-CLASS
set system login user admin uid 1001
set system login user admin class RW-CLASS
set system login user admin authentication encrypted-password "$1$F5PmkGIb$3Vw7MzcjrFcToP/QQgf9q/"
set system services ssh root-login allow
set system services ssh protocol-version v2
set system services ssh max-sessions-per-connection 32
set system services netconf ssh port 830
set system syslog user * any emergency
set system syslog host 10.16.150.104 any error
set system syslog host 10.16.150.104 authorization error
set system syslog host 10.16.150.104 kernel error
set system syslog host 10.16.150.104 match "!(.*pfe_bcm_l2_mac_delete().*|.*pfe_bcm_l2_mac_add().*)"
set system syslog host 10.16.150.104 facility-override local7
set system syslog host 10.16.150.104 explicit-priority
set system syslog file messages any any
set system syslog file messages authorization error
set system syslog file messages daemon info
set system syslog file messages kernel error
set system syslog file messages interactive-commands any
set system syslog file interactive-commands interactive-commands any
set system syslog file debug any verbose
set system syslog file auth authorization info
set system syslog file auth explicit-priority
set system syslog file daemon daemon info
set system syslog file daemon explicit-priority
set system syslog file firewall firewall any
set system syslog file firewall explicit-priority
set system syslog file default-log-messages any any
set system syslog file default-log-messages match "(requested 'commit' operation)|(requested 'commit synchronize' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|QF_NODE|QF_SERVER_NODE_GROUP|QF_INTERCONNECT|QF_DIRECTOR|QF_NETWORK_NODE_GROUP|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)"
set system syslog file default-log-messages structured-data
set system syslog time-format year
set system syslog time-format millisecond
set system syslog source-address 10.121.0.7
set system commit synchronize
set system ntp server 10.21.70.23
set system ntp server 10.21.70.19
set system ntp server 10.228.52.24
set system ntp server 10.228.52.27
set chassis aggregated-devices ethernet device-count 20
set chassis alarm management-ethernet link-down ignore
set interfaces xe-0/0/0 description CI_HP_Zayo_CKTID-OGYX/238149//ZYO
set interfaces xe-0/0/0 traps
set interfaces xe-0/0/0 mtu 9192
set interfaces xe-0/0/0 hold-time up 10000
set interfaces xe-0/0/0 hold-time down 60
set interfaces xe-0/0/0 unit 0 family inet mtu 9000
set interfaces xe-0/0/0 unit 0 family inet address 10.31.196.29/31
set interfaces ge-0/0/13 description CI_HP_Zayo_CKTID-440978573
set interfaces ge-0/0/13 unit 0 bandwidth 100m
set interfaces ge-0/0/13 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/13 unit 0 family ethernet-switching vlan members 30
set interfaces ge-0/0/15 description V30_DIA_1_MFW584-1A:ZAYO
set interfaces ge-0/0/15 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/15 unit 0 family ethernet-switching vlan members 30
set interfaces ge-0/0/17 description V30_DIA_1_MFW584-1B:ZAYO
set interfaces ge-0/0/17 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/17 unit 0 family ethernet-switching vlan members 30
set interfaces xe-0/0/22 description JS584WAN-02:XE-0/0/22
set interfaces xe-0/0/22 traps
set interfaces xe-0/0/22 mtu 9192
set interfaces xe-0/0/22 hold-time up 10000
set interfaces xe-0/0/22 hold-time down 60
set interfaces xe-0/0/22 unit 0 family inet mtu 9000
set interfaces xe-0/0/22 unit 0 family inet address 10.121.0.128/31
set interfaces xe-0/0/23 description JS584WAN-02:XE-0/0/23
set interfaces xe-0/0/23 traps
set interfaces xe-0/0/23 mtu 9192
set interfaces xe-0/0/23 hold-time up 10000
set interfaces xe-0/0/23 hold-time down 60
set interfaces xe-0/0/23 unit 0 family inet mtu 9000
set interfaces xe-0/0/23 unit 0 family inet address 10.121.0.130/31
set interfaces et-0/0/24 description JS584SP-01_ET-0/0/24
set interfaces et-0/0/24 traps
set interfaces et-0/0/24 mtu 9192
set interfaces et-0/0/24 hold-time up 10000
set interfaces et-0/0/24 hold-time down 60
set interfaces et-0/0/24 unit 0 family inet mtu 9000
set interfaces et-0/0/24 unit 0 family inet address 10.121.0.132/31
set interfaces et-0/0/25 description JS584SP-02_ET-0/0/24
set interfaces et-0/0/25 traps
set interfaces et-0/0/25 mtu 9192
set interfaces et-0/0/25 hold-time up 10000
set interfaces et-0/0/25 hold-time down 60
set interfaces et-0/0/25 unit 0 family inet mtu 9000
set interfaces et-0/0/25 unit 0 family inet address 10.121.0.136/31
set interfaces lo0 unit 0 family inet filter input PROTECT-RE
set interfaces lo0 unit 0 family inet address 10.121.0.7/32
set snmp location 584
set snmp contact "NSG Oncall"
set snmp v3 usm local-engine user solarwinds authentication-sha authentication-key "$9$VwbgoaZUji.Y2n/CpB1bsY4UjHqmPTzkquOREyrevWL-Vg4ZkmfLxGDkqQzhSylK8-Vw4JG2goGjH5TIEhyrvXxdbYgN-s4oaUDuOBIRSlKMN-wBIVwY4ZGp0ORreMWxsgox7-wYgJZUjH.QFCA0IhS.PRhSyKvJGUjHmFn/01R9CLxN-ws4aZU.P"
set snmp v3 usm local-engine user solarwinds privacy-aes128 privacy-key "$9$KcIvX7NdbsYo8Lk.PT3nvW8xbs24aJUjg4QF/9puO1RhlKXxdgaZhSVwg4DjCtp0BElKMx-VLX7Vs2GU69Cpu1cSev8XrlWx7NbwQF36/t0BIrlM36KM8xdVTzF/uOIRSWX7SylM8X-dbs2oDiPfz6CtoJ/CtpB1-Vbs2aik.zn/mPhSrlMWxNdboJ"
set snmp v3 vacm security-to-group security-model usm security-name solarwinds group ALL-ACCESS
set snmp v3 vacm access group ALL-ACCESS default-context-prefix security-model usm security-level privacy read-view GLOBAL
set snmp v3 vacm access group ALL-ACCESS default-context-prefix security-model usm security-level privacy write-view GLOBAL
set snmp v3 vacm access group ALL-ACCESS default-context-prefix security-model usm security-level privacy notify-view GLOBAL
set snmp engine-id local 584
set snmp view GLOBAL oid internet include
set snmp trap-group SNMP-TRAP version v2
set snmp trap-group SNMP-TRAP categories authentication
set snmp trap-group SNMP-TRAP categories chassis
set snmp trap-group SNMP-TRAP categories link
set snmp trap-group SNMP-TRAP categories startup
set snmp trap-group SNMP-TRAP categories services
set snmp trap-group SNMP-TRAP targets 10.16.150.104
set snmp traceoptions file snmp_log
set snmp traceoptions file size 10m
set snmp traceoptions file files 3
set snmp traceoptions file world-readable
set snmp traceoptions flag general
set snmp traceoptions flag protocol-timeouts
set routing-options static route 10.121.0.0/18 discard
set routing-options router-id 10.121.0.7
set routing-options autonomous-system 65469
set protocols bgp log-updown
set protocols bgp group WAN-SPINE type external
set protocols bgp group WAN-SPINE mtu-discovery
set protocols bgp group WAN-SPINE import PS_EBGP_IMPORT_FROM_SPINE
set protocols bgp group WAN-SPINE family inet any
set protocols bgp group WAN-SPINE authentication-key "$9$mPznOBEreWtu8xNd4oFn/90IKMXVbsW8DiqmTQ"
set protocols bgp group WAN-SPINE export PS_EBGP_EXPORT_TO_SPINE
set protocols bgp group WAN-SPINE local-as 65460
set protocols bgp group WAN-SPINE bfd-liveness-detection minimum-interval 2000
set protocols bgp group WAN-SPINE bfd-liveness-detection multiplier 3
set protocols bgp group WAN-SPINE bfd-liveness-detection session-mode automatic
set protocols bgp group WAN-SPINE multipath
set protocols bgp group WAN-SPINE neighbor 10.121.0.133 description JS584SP-01_ET-0/0/24
set protocols bgp group WAN-SPINE neighbor 10.121.0.133 peer-as 65461
set protocols bgp group WAN-SPINE neighbor 10.121.0.137 description JS584SP-02_ET-0/0/24
set protocols bgp group WAN-SPINE neighbor 10.121.0.137 peer-as 65462
set protocols bgp group IBGP type internal
set protocols bgp group IBGP local-address 10.121.0.7
set protocols bgp group IBGP mtu-discovery
set protocols bgp group IBGP import PS_IBGP_IMPORT
set protocols bgp group IBGP family inet any
set protocols bgp group IBGP authentication-key "$9$mPznOBEreWtu8xNd4oFn/90IKMXVbsW8DiqmTQ"
set protocols bgp group IBGP export PS_IBGP_EXPORT
set protocols bgp group IBGP local-as 65460
set protocols bgp group IBGP bfd-liveness-detection minimum-interval 2000
set protocols bgp group IBGP bfd-liveness-detection multiplier 3
set protocols bgp group IBGP bfd-liveness-detection session-mode automatic
set protocols bgp group IBGP multipath
set protocols bgp group IBGP neighbor 10.121.0.8 description JS584WAN-02:lo0.0
set protocols bgp group EBGP_REMOTE type external
set protocols bgp group EBGP_REMOTE import PS_EBGP_IMPORT
set protocols bgp group EBGP_REMOTE authentication-key "$9$mPznOBEreWtu8xNd4oFn/90IKMXVbsW8DiqmTQ"
set protocols bgp group EBGP_REMOTE export PS_EBGP_EXPORT
set protocols bgp group EBGP_REMOTE neighbor 10.31.196.28 description CS319CORE-01_ETH3/10
set protocols bgp group EBGP_REMOTE neighbor 10.31.196.28 peer-as 65100
set protocols bgp group EBGP_REMOTE neighbor 10.31.196.28 local-as 65460
set protocols ospf traceoptions file ospf_log
set protocols ospf traceoptions file size 10m
set protocols ospf traceoptions file files 10
set protocols ospf traceoptions file world-readable
set protocols ospf traceoptions flag error
set protocols ospf traceoptions flag event
set protocols ospf traceoptions flag state
set protocols ospf area 0.0.0.0 interface lo0.0 passive
set protocols ospf area 0.0.0.0 interface xe-0/0/22.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface xe-0/0/22.0 metric 12
set protocols ospf area 0.0.0.0 interface xe-0/0/22.0 authentication md5 1 key "$9$1ZWIESvMX7Nbev8x-d4o5QFn6AOBEyeMuONbY2UDk.P5Qn"
set protocols ospf area 0.0.0.0 interface xe-0/0/22.0 bfd-liveness-detection minimum-interval 2000
set protocols ospf area 0.0.0.0 interface xe-0/0/22.0 bfd-liveness-detection minimum-receive-interval 2000
set protocols ospf area 0.0.0.0 interface xe-0/0/22.0 bfd-liveness-detection multiplier 3
set protocols ospf area 0.0.0.0 interface xe-0/0/22.0 bfd-liveness-detection full-neighbors-only
set protocols ospf area 0.0.0.0 interface xe-0/0/23.0 interface-type p2p
set protocols ospf area 0.0.0.0 interface xe-0/0/23.0 metric 12
set protocols ospf area 0.0.0.0 interface xe-0/0/23.0 authentication md5 1 key "$9$1ZWIESvMX7Nbev8x-d4o5QFn6AOBEyeMuONbY2UDk.P5Qn"
set protocols ospf area 0.0.0.0 interface xe-0/0/23.0 bfd-liveness-detection minimum-interval 2000
set protocols ospf area 0.0.0.0 interface xe-0/0/23.0 bfd-liveness-detection minimum-receive-interval 2000
set protocols ospf area 0.0.0.0 interface xe-0/0/23.0 bfd-liveness-detection multiplier 3
set protocols ospf area 0.0.0.0 interface xe-0/0/23.0 bfd-liveness-detection full-neighbors-only
set protocols lldp traceoptions file lldp_log
set protocols lldp traceoptions file size 10m
set protocols lldp traceoptions file files 3
set protocols lldp traceoptions file world-readable
set protocols lldp port-id-subtype interface-name
set protocols lldp interface all
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.48/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.76/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.85/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.225/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.227/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.229/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.230/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.231/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.23.232/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.16.150.129/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.17.100.2/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.17.100.3/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.21.66.86/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.21.66.104/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.21.66.105/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.21.66.114/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.21.70.0/24
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.225.50.32/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.225.50.33/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.228.33.224/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.228.33.251/32
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 10.228.52.0/24
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 172.23.40.0/22
set policy-options prefix-list REMOTE-MANAGEMENT-STATIONS 172.23.44.0/22
set policy-options prefix-list SNMP-ACCESS-ONLY 10.16.16.100/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.16.16.209/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.16.17.148/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.16.17.171/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.16.17.184/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.16.17.198/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.16.22.14/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.16.22.85/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.14/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.15/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.16/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.17/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.18/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.19/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.20/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.21/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.22/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.23/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.24/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.25/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.30/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.31/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.32/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.33/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.34/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.37/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.46/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.47/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.48/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.49/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.50/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.51/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.52/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.53/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.54/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.55/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.56/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.17.72.57/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.228.33.162/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.228.33.230/32
set policy-options prefix-list SNMP-ACCESS-ONLY 10.228.33.231/32
set policy-options prefix-list SNMP-ACCESS-ONLY 172.27.6.235/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.1/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.2/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.3/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.4/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.5/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.6/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.7/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.8/32
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.0.64/26
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.1.0/27
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.1.32/27
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.1.64/27
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.1.96/27
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.1.128/27
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.2.0/25
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.4.0/22
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.8.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.10.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.12.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.14.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.16.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.18.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.20.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.24.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.40.0/21
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.60.0/23
set policy-options prefix-list PFL_SPINE_ROUTES 10.121.62.0/23
set policy-options prefix-list TACACS-SERVERS apply-path "system tacplus-server <*>"
set policy-options prefix-list NTP-SERVERS apply-path "system ntp server <*>"
set policy-options policy-statement PS_EBGP_EXPORT term STATIC_AGGREGATE from protocol static
set policy-options policy-statement PS_EBGP_EXPORT term STATIC_AGGREGATE from route-filter 10.121.0.0/18 exact
set policy-options policy-statement PS_EBGP_EXPORT term STATIC_AGGREGATE then community set CAMPUS_584
set policy-options policy-statement PS_EBGP_EXPORT term STATIC_AGGREGATE then accept
set policy-options policy-statement PS_EBGP_EXPORT term REJECT then reject
set policy-options policy-statement PS_EBGP_EXPORT_TO_SPINE term DEFAULT from protocol bgp
set policy-options policy-statement PS_EBGP_EXPORT_TO_SPINE term DEFAULT from route-filter 0.0.0.0/0 exact
set policy-options policy-statement PS_EBGP_EXPORT_TO_SPINE term DEFAULT then accept
set policy-options policy-statement PS_EBGP_EXPORT_TO_SPINE term REJECT then reject
set policy-options policy-statement PS_EBGP_IMPORT term BGP_DEFAULT from protocol bgp
set policy-options policy-statement PS_EBGP_IMPORT term BGP_DEFAULT from route-filter 0.0.0.0/0 exact
set policy-options policy-statement PS_EBGP_IMPORT term BGP_DEFAULT then accept
set policy-options policy-statement PS_EBGP_IMPORT term DENY then reject
set policy-options policy-statement PS_EBGP_IMPORT_FROM_SPINE term BGP from protocol bgp
set policy-options policy-statement PS_EBGP_IMPORT_FROM_SPINE term BGP from prefix-list PFL_SPINE_ROUTES
set policy-options policy-statement PS_EBGP_IMPORT_FROM_SPINE term BGP then accept
set policy-options policy-statement PS_EBGP_IMPORT_FROM_SPINE term REJECT then reject
set policy-options policy-statement PS_IBGP_EXPORT term DIRECT from protocol direct
set policy-options policy-statement PS_IBGP_EXPORT term DIRECT then accept
set policy-options policy-statement PS_IBGP_EXPORT term STATIC from protocol static
set policy-options policy-statement PS_IBGP_EXPORT term STATIC then accept
set policy-options policy-statement PS_IBGP_EXPORT term BGP from protocol bgp
set policy-options policy-statement PS_IBGP_EXPORT term BGP then next-hop self
set policy-options policy-statement PS_IBGP_EXPORT term BGP then accept
set policy-options policy-statement PS_IBGP_EXPORT term REJECT then reject
set policy-options policy-statement PS_IBGP_IMPORT term BGP_DEFAULT from protocol bgp
set policy-options policy-statement PS_IBGP_IMPORT term BGP_DEFAULT from route-filter 0.0.0.0/0 exact
set policy-options policy-statement PS_IBGP_IMPORT term BGP_DEFAULT then accept
set policy-options policy-statement PS_IBGP_IMPORT term DENY then reject
set policy-options community CAMPUS_584 members 65460:1000
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER import default
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class expedited-forwarding loss-priority low code-points cs5
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class expedited-forwarding loss-priority low code-points ef
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority low code-points cs1
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority low code-points af11
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority low code-points af12
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority low code-points af13
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority low code-points cs2
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority low code-points af21
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority low code-points af22
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority low code-points af23
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority high code-points cs3
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority high code-points af31
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority high code-points af32
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority high code-points cs4
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority high code-points af41
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority high code-points af42
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class assured-forwarding loss-priority high code-points af43
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class network-control loss-priority low code-points cs7
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class network-control loss-priority high code-points cs6
set class-of-service classifiers dscp VOICE-BA-CLASSIFIER forwarding-class best-effort loss-priority low code-points be
set class-of-service forwarding-classes class expedited-forwarding queue-num 1
set class-of-service forwarding-classes class expedited-forwarding no-loss
set class-of-service forwarding-classes class assured-forwarding queue-num 2
set class-of-service interfaces ge-* unit * classifiers dscp VOICE-BA-CLASSIFIER
set class-of-service interfaces xe-* unit * classifiers dscp VOICE-BA-CLASSIFIER
set class-of-service scheduler-maps VOICE-SCHEDULER-MAP forwarding-class best-effort scheduler BE-SCHEDULER
set class-of-service scheduler-maps VOICE-SCHEDULER-MAP forwarding-class network-control scheduler NC-SCHEDULER
set class-of-service scheduler-maps VOICE-SCHEDULER-MAP forwarding-class expedited-forwarding scheduler EF-SCHEDULER
set class-of-service scheduler-maps VOICE-SCHEDULER-MAP forwarding-class assured-forwarding scheduler AF-SCHEDULER
set class-of-service schedulers EF-SCHEDULER buffer-size percent 20
set class-of-service schedulers EF-SCHEDULER priority strict-high
set class-of-service schedulers BE-SCHEDULER buffer-size remainder
set class-of-service schedulers BE-SCHEDULER priority low
set class-of-service schedulers NC-SCHEDULER buffer-size percent 10
set class-of-service schedulers NC-SCHEDULER priority strict-high
set class-of-service schedulers AF-SCHEDULER transmit-rate percent 50
set class-of-service schedulers AF-SCHEDULER buffer-size percent 50
set class-of-service schedulers AF-SCHEDULER priority low
set firewall family inet filter PROTECT-RE term BFD1 from protocol udp
set firewall family inet filter PROTECT-RE term BFD1 from destination-port 3784
set firewall family inet filter PROTECT-RE term BFD1 from destination-port 3785
set firewall family inet filter PROTECT-RE term BFD1 then accept
set firewall family inet filter PROTECT-RE term BFD2 from protocol udp
set firewall family inet filter PROTECT-RE term BFD2 from source-port 3784
set firewall family inet filter PROTECT-RE term BFD2 from source-port 3785
set firewall family inet filter PROTECT-RE term BFD2 then accept
set firewall family inet filter PROTECT-RE term BGP1 from protocol tcp
set firewall family inet filter PROTECT-RE term BGP1 from destination-port 179
set firewall family inet filter PROTECT-RE term BGP1 then accept
set firewall family inet filter PROTECT-RE term BGP2 from protocol tcp
set firewall family inet filter PROTECT-RE term BGP2 from source-port 179
set firewall family inet filter PROTECT-RE term BGP2 then accept
set firewall family inet filter PROTECT-RE term OSPF from protocol ospf
set firewall family inet filter PROTECT-RE term OSPF then accept
set firewall family inet filter PROTECT-RE term NETCONF from source-prefix-list REMOTE-MANAGEMENT-STATIONS
set firewall family inet filter PROTECT-RE term NETCONF from protocol tcp
set firewall family inet filter PROTECT-RE term NETCONF from destination-port 830
set firewall family inet filter PROTECT-RE term NETCONF then accept
set firewall family inet filter PROTECT-RE term SNMP-ACCESS from source-prefix-list REMOTE-MANAGEMENT-STATIONS
set firewall family inet filter PROTECT-RE term SNMP-ACCESS from protocol udp
set firewall family inet filter PROTECT-RE term SNMP-ACCESS from destination-port snmp
set firewall family inet filter PROTECT-RE term SNMP-ACCESS then accept
set firewall family inet filter PROTECT-RE term SNMP-ACCESS-ONLY from source-prefix-list SNMP-ACCESS-ONLY
set firewall family inet filter PROTECT-RE term SNMP-ACCESS-ONLY from protocol udp
set firewall family inet filter PROTECT-RE term SNMP-ACCESS-ONLY from destination-port snmp
set firewall family inet filter PROTECT-RE term SNMP-ACCESS-ONLY then accept
set firewall family inet filter PROTECT-RE term SSH-ACCESS from source-prefix-list REMOTE-MANAGEMENT-STATIONS
set firewall family inet filter PROTECT-RE term SSH-ACCESS from protocol tcp
set firewall family inet filter PROTECT-RE term SSH-ACCESS from destination-port ssh
set firewall family inet filter PROTECT-RE term SSH-ACCESS then accept
set firewall family inet filter PROTECT-RE term TACACS from source-prefix-list TACACS-SERVERS
set firewall family inet filter PROTECT-RE term TACACS from source-port tacacs
set firewall family inet filter PROTECT-RE term TACACS then accept
set firewall family inet filter PROTECT-RE term ICMP from protocol icmp
set firewall family inet filter PROTECT-RE term ICMP then policer ICMP-POLICER
set firewall family inet filter PROTECT-RE term ICMP then accept
set firewall family inet filter PROTECT-RE term TRACEROUTE from protocol udp
set firewall family inet filter PROTECT-RE term TRACEROUTE from destination-port 33434-33523
set firewall family inet filter PROTECT-RE term TRACEROUTE then accept
set firewall family inet filter PROTECT-RE term NTP from source-prefix-list NTP-SERVERS
set firewall family inet filter PROTECT-RE term NTP from protocol udp
set firewall family inet filter PROTECT-RE term NTP from source-port ntp
set firewall family inet filter PROTECT-RE term NTP then policer NTP-POLICER
set firewall family inet filter PROTECT-RE term NTP then accept
set firewall family inet filter PROTECT-RE term 443_OUT from protocol tcp
set firewall family inet filter PROTECT-RE term 443_OUT from source-port 443
set firewall family inet filter PROTECT-RE term 443_OUT then accept
set firewall family inet filter PROTECT-RE term DENY then syslog
set firewall family inet filter PROTECT-RE term DENY then discard
set firewall family ethernet-switching filter VOICE-MF-CLASSIFIER-L2 term ACCEPT-VOICE from destination-port 10000-65535
set firewall family ethernet-switching filter VOICE-MF-CLASSIFIER-L2 term ACCEPT-VOICE from ip-source-address 10.121.60.0/22
set firewall family ethernet-switching filter VOICE-MF-CLASSIFIER-L2 term ACCEPT-VOICE from ip-protocol udp
set firewall family ethernet-switching filter VOICE-MF-CLASSIFIER-L2 term ACCEPT-VOICE then accept
set firewall family ethernet-switching filter VOICE-MF-CLASSIFIER-L2 term ACCEPT-VOICE then forwarding-class expedited-forwarding
set firewall family ethernet-switching filter VOICE-MF-CLASSIFIER-L2 term ACCEPT-VOICE then loss-priority low
set firewall family ethernet-switching filter VOICE-MF-CLASSIFIER-L2 term ACCEPT then accept
set firewall policer ICMP-POLICER filter-specific
set firewall policer ICMP-POLICER if-exceeding bandwidth-limit 128k
set firewall policer ICMP-POLICER if-exceeding burst-size-limit 15k
set firewall policer ICMP-POLICER then discard
set firewall policer NTP-POLICER filter-specific
set firewall policer NTP-POLICER if-exceeding bandwidth-limit 150k
set firewall policer NTP-POLICER if-exceeding burst-size-limit 15k
set firewall policer NTP-POLICER then discard
set vlans v30 description V30_DIA_1
set vlans v30 vlan-id 30
