examples sdn

7/24/2019 Examples SDN

1/27

Sapporo:## Last commit: 2012-08-16 13:38:38 EDT by adminversion "12.3I0 [mmiklus]";groups { global { system { time-zone America/New_York; debugger-on-panic; debugger-on-break; dump-on-panic; } }}system { apply-groups global; host-name mx80-8-4; ports { console log-out-on-disconnect; } root-authentication { encrypted-password "Obscured"; ## SECRET-DATA } login { class readonly {

permissions [ interface network routing system trace view ]; } class wheel { permissions [ admin clear field floppy interface maintenance networkreset routing shell snmp system trace view ]; } user admin { uid 2000; class super-user; authentication { encrypted-password "Obscured"; ## SECRET-DATA } }

user regress { uid 928; class superuser; shell csh; authentication { encrypted-password "Obscured; ## SECRET-DATA } } user remote { uid 9999; class superuser; shell csh; }

} services { finger; ftp; rlogin; rsh; ssh; telnet; xnm-clear-text; netconf {


2/27

ssh; } } syslog { user * { any emergency; } host log { any notice; kernel info; pfe info; interactive-commands any; } file messages { any notice; authorization info; kernel info; pfe info; archive world-readable; } file interactive-commands { interactive-commands any; } file default-log-messages {

any any;

match "(requested 'commit' operation)|(copying configuration to juniper.save)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vcadd)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|GRES"; structured-data; } file security { interactive-commands any; archive world-readable; } }

extensions { providers { juniper { license-type juniper deployment-scope private; } juniperipgcto { license-type juniper deployment-scope private; } } } processes { routing enable; ntp enable;

management enable; watchdog enable; snmp enable; inet-process enable; mib-process enable; }}chassis { dump-on-panic; fpc 0 {


3/27

pic 0 { tunnel-services { bandwidth 1g; } } } fpc 1 { pic 0 { tunnel-services { bandwidth 1g; } } } network-services all-ethernet;}interfaces { lt-0/0/10 { unit 0 { encapsulation ethernet-vpls; peer-unit 600; } unit 150 { encapsulation ethernet-vpls; peer-unit 750;

} unit 600 { encapsulation ethernet-vpls; peer-unit 0; } unit 750 { encapsulation ethernet-ccc; peer-unit 150; } } ge-1/0/0 { unit 0 { family inet {

address 10.10.10.119/24; } family mpls; } } ge-1/0/3 { unit 0 { family inet { address 10.10.12.2/30; } family mpls; } }

ge-1/0/5 { encapsulation ethernet-vpls; unit 0 { family vpls; } } ge-1/0/6 { disable; encapsulation ethernet-vpls; unit 0 {


4/27

family vpls; } } lt-1/0/10 { unit 0 { encapsulation ethernet-vpls; peer-unit 600; } unit 600 { encapsulation ethernet; peer-unit 0; family inet { address 2.2.2.1/24; } } } fxp0 { unit 0 { family inet { address 10.10.10.69/24; } } } lo0 {

unit 0 { family inet { address 127.0.0.1/32; address 10.10.10.118/32 { primary; } } } }}snmp { location OpenLab; contact "Ken Gray";

interface fxp0.0; community public { authorization read-only; } community private { authorization read-write; } trap-group space { targets { 10.10.10.141; 10.10.10.142; } }

}routing-options { router-id 10.10.10.118;}protocols { rsvp { interface all; } mpls { lsp-external-controller pccd;


5/27

traffic-engineering mpls-forwarding; label-switched-path Ny_to_Sf { from 10.10.10.118; to 10.10.10.100; inactive: primary to-e { bandwidth 1m; } lsp-external-controller pccd; } label-switched-path Ny_to_Chi { from 10.10.10.118; to 10.10.10.124; lsp-external-controller pccd; } interface ge-1/0/3.0; interface ge-1/0/6.0; } ospf { traffic-engineering; reference-bandwidth 4g; area 0.0.0.0 { interface fxp0.0 { disable; }

interface ge-1/0/3.0; interface lo0.0 { passive; } } } connections { remote-interface-switch to-Sf { interface lt-0/0/10.600; transmit-lsp Ny_to_Sf; receive-lsp Sf_to_Ny; } remote-interface-switch to-Chi {

interface lt-0/0/10.750; transmit-lsp Ny_to_Chi; receive-lsp Chi_to_Ny; } } pcep { pce primary { destination-ipv4-address 10.10.10.143; destination-port 4189; } traceoptions { file pccd size 10m world-readable; flag all;

} }}routing-instances { of-switch { instance-type vpls; interface lt-0/0/10.0; interface lt-0/0/10.150; interface ge-1/0/5.0; interface ge-1/0/6.0;


6/27

interface lt-1/0/10.0; }}openflow { switch 0 { default-action { drop; } ports { ge-1/0/5 unit 0; lt-1/0/10 unit 0; lt-0/0/10 unit 150; lt-0/0/10 unit 0; } controller { address 10.10.10.143; port 6633; } } traceoptions { file openflow size 10m files 10 world-readable; flag all; }}

Tokyo:## Last commit: 2012-08-15 21:29:44 EDT by adminversion "12.3I0 [mmiklus]";groups { global { system { time-zone America/New_York; debugger-on-panic; debugger-on-break; dump-on-panic; } }}

system { apply-groups global; host-name mx80-9-2; ports { console log-out-on-disconnect; } root-authentication { encrypted-password "$obscured."; ## SECRET-DATA } login { class readonly { permissions [ interface network routing system trace view ]; }

class wheel { permissions [ admin clear field floppy interface maintenance networkreset routing shell snmp system trace view ]; } user admin { uid 2000; class super-user; authentication { encrypted-password "$obscured."; ## SECRET-DATA }


7/27

} user regress { uid 928; class superuser; shell csh; authentication { encrypted-password "$1$obscured/"; ## SECRET-DATA } } user remote { uid 9999; class superuser; shell csh; } } services { finger; ftp; rlogin; rsh; ssh; telnet; xnm-clear-text; netconf {

ssh; } } syslog { user * { any emergency; } host log { any notice; kernel info; pfe info; interactive-commands any; }

file messages { any notice; authorization info; kernel info; pfe info; archive world-readable; } file interactive-commands { interactive-commands any; } file default-log-messages { any any; match "(requested 'commit' operation)|(copying configuration to juni

per.save)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vcadd)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|GRES"; structured-data; } file security { interactive-commands any; archive world-readable; } }


8/27

processes { routing enable; ntp enable; management enable; watchdog enable; snmp enable; inet-process enable; mib-process enable; }}chassis { dump-on-panic; network-services all-ethernet;}interfaces { ge-1/0/0 { unit 0 { family inet { address 10.10.10.107/24; } family mpls; } } ge-1/0/1 {

unit 0 { family inet { address 10.10.15.2/30; } family mpls; } } ge-1/0/3 { unit 0 { family inet { address 10.10.11.1/30; } family mpls;

} } ge-1/0/5 { unit 0 { family inet { address 10.10.13.1/30; } family mpls; } } fxp0 { unit 0 { family inet {

address 10.10.10.67/24; } } } lo0 { unit 0 { family inet { address 127.0.0.1/32; address 10.10.10.106/32 { primary;


9/27


10/27

dump-on-panic; } }}system { apply-groups global; host-name mx80-9-1; ports { console log-out-on-disconnect; } root-authentication { encrypted-password "$1$Yec1a3YQ$iWe0Ks0BJymmHpgO1t9D70"; ## SECRET-DATA } login { class readonly { permissions [ interface network routing system trace view ]; } class wheel { permissions [ admin clear field floppy interface maintenance networkreset routing shell snmp system trace view ]; } user admin { uid 2000; class super-user;

authentication { encrypted-password "$1$cal/q6Gg$icCt/diBOYQmgi7aH7HU20"; ## SECRET-DATA } } user regress { uid 928; class superuser; shell csh; authentication { encrypted-password "$1$VBYReLI2$xxKKhv/m7vROzzdUMCWYt0"; ## SECRET-DATA }

} user remote { uid 9999; class superuser; shell csh; } } services { finger; ftp; rlogin; rsh; ssh;

telnet; xnm-clear-text; netconf { ssh; } } syslog { user * { any emergency; }


11/27

host log { any notice; kernel info; pfe info; interactive-commands any; } file messages { any notice; authorization info; kernel info; pfe info; archive world-readable; } file interactive-commands { interactive-commands any; } file default-log-messages { any any; match "(requested 'commit' operation)|(copying configuration to juniper.save)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vcadd)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|GRES"; structured-data; }

file security { interactive-commands any; archive world-readable; } } extensions { providers { juniper { license-type juniper deployment-scope private; } } } processes {

routing enable; ntp enable; management enable; watchdog enable; snmp enable; inet-process enable; mib-process enable; }}chassis { dump-on-panic; fpc 0 { pic 0 {

tunnel-services { bandwidth 1g; } } } fpc 1 { pic 0 { tunnel-services { bandwidth 1g; }


12/27

} } network-services all-ethernet;}interfaces { lt-0/0/10 { unit 0 { encapsulation ethernet-vpls; peer-unit 600; } unit 150 { encapsulation ethernet-vpls; peer-unit 750; } unit 600 { encapsulation ethernet-vpls; peer-unit 0; } unit 750 { encapsulation ethernet-ccc; peer-unit 150; } } ge-1/0/0 {

disable; unit 0 { family inet { address 10.10.10.101/24; } family mpls; } } ge-1/0/2 { unit 0 { family inet { address 10.10.15.1/30; }

family mpls; } } ge-1/0/5 { encapsulation ethernet-vpls; unit 0 { family vpls; } } ge-1/0/6 { disable; encapsulation ethernet-vpls; unit 0 {

family vpls; } } lt-1/0/10 { unit 0 { encapsulation ethernet-vpls; peer-unit 600; } unit 600 { encapsulation ethernet;


13/27

peer-unit 0; family inet { address 3.3.3.1/24; } } } fxp0 { unit 0 { family inet { address 10.10.10.66/24; } } } lo0 { unit 0 { family inet { address 127.0.0.1/32; address 10.10.10.100/32 { primary; } } } }}

snmp { location OpenLab; contact "Paul Benner"; interface fxp0.0; community public { authorization read-only; } community private { authorization read-write; } trap-group space { targets { 10.10.10.141;

10.10.10.142; } }}routing-options { router-id 10.10.10.100; autonomous-system 69; forwarding-table { export pplb; }}protocols { rsvp {

interface ge-1/0/2.0; } mpls { lsp-external-controller pccd; traffic-engineering mpls-forwarding; label-switched-path Sf_to_Ny { from 10.10.10.100; to 10.10.10.118; inactive: primary to-d { bandwidth 1m;


14/27


15/27

} policy-statement pplb { then { load-balance per-packet; } } policy-statement redist { from protocol static; then accept; }}routing-instances { of-switch { instance-type vpls; interface lt-0/0/10.0; interface lt-0/0/10.150; interface ge-1/0/5.0; interface ge-1/0/6.0; interface lt-1/0/10.0; }}openflow { switch 0 { default-action {

drop; } ports { lt-1/0/10 unit 0; lt-0/0/10 unit 150; lt-0/0/10 unit 0; ge-1/0/5 unit 0; } controller { address 10.10.10.143; port 6633; } }

traceoptions { file openflow size 10m files 10 world-readable; flag all; }}

Osaka:## Last commit: 2012-08-16 17:38:57 UTC by adminversion "12.3I0 [mmiklus]";groups { global { system { time-zone America/New_Yor;

debugger-on-panic; debugger-on-break; dump-on-panic; } }}system { apply-groups global; host-name mx80-8-5; ports {


16/27

console log-out-on-disconnect; } root-authentication { encrypted-password "$1$TSpw79E8$EdD4Hks2MuXekYJIGxpi61"; ## SECRET-DATA } login { class readonly { permissions [ interface network routing system trace view ]; } class wheel { permissions [ admin clear field floppy interface maintenance networkreset routing shell snmp system trace view ]; } user admin { uid 2000; class super-user; authentication { encrypted-password "$1$.MCYkCTF$/XA2Hi4m6mV.h6JJvSvqx/"; ## SECRET-DATA } } user regress { uid 928; class super-user;

shell csh; authentication { encrypted-password "$1$h66PI4xg$B.o2pd37onMbAqfQIpBgD."; ## SECRET-DATA } } user remote { uid 9999; class superuser; shell csh; } } services {

finger; ftp; rlogin; rsh; ssh; telnet; xnm-clear-text; netconf { ssh; } } syslog { user * {

any emergency; } host log { any notice; kernel info; pfe info; interactive-commands any; } file messages { any notice;


17/27

authorization info; kernel info; pfe info; archive world-readable; } file interactive-commands { interactive-commands any; } file default-log-messages { any any; match "(requested 'commit' operation)|(copying configuration to juniper.save)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vcadd)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|GRES"; structured-data; } file security { interactive-commands any; archive world-readable; } } extensions { providers { juniper {

license-type juniper deployment-scope private; } } } processes { routing enable; ntp enable; management enable; watchdog enable; snmp enable; inet-process enable; mib-process enable; }

}chassis { dump-on-panic; fpc 0 { pic 0 { tunnel-services { bandwidth 1g; } } } fpc 1 { pic 0 { tunnel-services {

bandwidth 1g; } } } network-services all-ethernet;}interfaces { lt-0/0/10 { unit 150 { encapsulation ethernet-vpls;


18/27


19/27

peer-unit 600; } unit 600 { encapsulation ethernet; peer-unit 0; family inet { address 1.1.1.1/24; } } } fxp0 { unit 0 { family inet { address 10.10.10.65/24; } } } lo0 { unit 0 { family inet { address 127.0.0.1/32; address 10.10.10.124/32 { primary; }

} } }}snmp { location OpenLab; contact "Paul Benner"; interface fxp0.0; community public { authorization read-only; } community private { authorization read-write;

} trap-group space { targets { 10.10.10.141; 10.10.10.142; } }}routing-options { router-id 10.10.10.124; forwarding-table { traceoptions { file krt.trace;

flag consistency-checking; } consistency-checking { enable; period 30; threshold 1; } export ls; }}


20/27

protocols { rsvp { interface ge-1/0/2.0; interface ge-1/0/3.0; } mpls { lsp-external-controller pccd; traffic-engineering mpls-forwarding; label-switched-path Chi_to_Sf { from 10.10.10.124; to 10.10.10.100; lsp-external-controller pccd; } label-switched-path Chi_to_Ny { from 10.10.10.124; to 10.10.10.118; lsp-external-controller pccd; } interface ge-1/0/2.0; interface ge-1/0/3.0; } ospf { traffic-engineering; reference-bandwidth 4g;

area 0.0.0.0 { interface fxp0.0 { disable; } interface ge-1/0/2.0; interface ge-1/0/3.0; interface lo0.0 { passive; } } } connections { remote-interface-switch to-Sf {

interface lt-0/0/10.750; transmit-lsp Chi_to_Sf; receive-lsp Sf_to_Chi; } remote-interface-switch to-Ny { interface lt-0/0/10.900; transmit-lsp Chi_to_Ny; receive-lsp Ny_to_Chi; } } pcep { pce primary { destination-ipv4-address 10.10.10.143;

destination-port 4189; } traceoptions { file pccd size 10m world-readable; flag all; } }}policy-options { policy-statement ls {


21/27

then cos-next-hop-map cbf-map; }}class-of-service { forwarding-policy { next-hop-map cbf-map { forwarding-class best-effort { next-hop [ ::10.10.10.1 10.10.10.1 ]; } forwarding-class expedited-forwarding { next-hop [ ::10.10.10.1 10.10.10.1 ]; } forwarding-class assured-forwarding { next-hop [ ::10.10.10.1 10.10.10.1 ]; } forwarding-class network-control { next-hop [ ::10.10.10.1 10.10.10.1 ]; } } }}routing-instances { of-switch { instance-type vpls;

interface lt-0/0/10.150; interface ge-1/0/1.0; interface ge-1/0/4.0; interface ge-1/0/6.0; interface lt-1/0/10.0; }}openflow { switch 0 { default-action { drop; } ports {

ge-1/0/1 unit 0; ge-1/0/4 unit 0; lt-1/0/10 unit 0; lt-0/0/10 unit 150; } controller { address 10.10.10.143; port 6633; } } traceoptions { file openflow size 10m files 10 world-readable; flag all;

}}

Kagoshima:## Last commit: 2012-08-16 13:38:38 EDT by adminversion "12.3I0 [mmiklus]";groups { global { system { time-zone America/New_York;


22/27

debugger-on-panic; debugger-on-break; dump-on-panic; } }}system { apply-groups global; host-name mx80-8-4; ports { console log-out-on-disconnect; } root-authentication { encrypted-password "$1$S7Sb3T4M$U88UOHXCwcgiDssyb2SXL0"; ## SECRET-DATA } login { class readonly { permissions [ interface network routing system trace view ]; } class wheel { permissions [ admin clear field floppy interface maintenance networkreset routing shell snmp system trace view ]; } user admin {

uid 2000; class super-user; authentication { encrypted-password "$1$vrc5ExH0$QEvAl6MzRCirnrY9hGDzA0"; ## SECRET-DATA } } user regress { uid 928; class superuser; shell csh; authentication { encrypted-password "$1$yAlypLdv$sv9tQF23cOI077W7yIMtr/"; ## SECR

ET-DATA } } user remote { uid 9999; class superuser; shell csh; } } services { finger; ftp; rlogin;

rsh; ssh; telnet; xnm-clear-text; netconf { ssh; } } syslog { user * {


23/27

any emergency; } host log { any notice; kernel info; pfe info; interactive-commands any; } file messages { any notice; authorization info; kernel info; pfe info; archive world-readable; } file interactive-commands { interactive-commands any; } file default-log-messages { any any; match "(requested 'commit' operation)|(copying configuration to juniper.save)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|(vcadd)|(vc delete)|transitioned|Transferred|transfer-file|QFABRIC_NETWORK_NODE_GROUP|QFABRIC_SERVER_NODE_GROUP|QFABRIC_NODE|(license add)|(license delete)|GRES";

structured-data; } file security { interactive-commands any; archive world-readable; } } extensions { providers { juniper { license-type juniper deployment-scope private; } juniperipgcto {

license-type juniper deployment-scope private; } } } processes { routing enable; ntp enable; management enable; watchdog enable; snmp enable; inet-process enable; mib-process enable; }

}chassis { dump-on-panic; fpc 0 { pic 0 { tunnel-services { bandwidth 1g; } } }


24/27

fpc 1 { pic 0 { tunnel-services { bandwidth 1g; } } } network-services all-ethernet;}interfaces { lt-0/0/10 { unit 0 { encapsulation ethernet-vpls; peer-unit 600; } unit 150 { encapsulation ethernet-vpls; peer-unit 750; } unit 600 { encapsulation ethernet-vpls; peer-unit 0; } unit 750 {

encapsulation ethernet-ccc; peer-unit 150; } } ge-1/0/0 { unit 0 { family inet { address 10.10.10.119/24; } family mpls; } } ge-1/0/3 {

unit 0 { family inet { address 10.10.12.2/30; } family mpls; } } ge-1/0/5 { encapsulation ethernet-vpls; unit 0 { family vpls; } }

ge-1/0/6 { disable; encapsulation ethernet-vpls; unit 0 { family vpls; } } lt-1/0/10 { unit 0 { encapsulation ethernet-vpls;


25/27

peer-unit 600; } unit 600 { encapsulation ethernet; peer-unit 0; family inet { address 2.2.2.1/24; } } } fxp0 { unit 0 { family inet { address 10.10.10.69/24; } } } lo0 { unit 0 { family inet { address 127.0.0.1/32; address 10.10.10.118/32 { primary; }

} } }}snmp { location OpenLab; contact "Paul Benner"; interface fxp0.0; community public { authorization read-only; } community private { authorization read-write;

} trap-group space { targets { 10.10.10.141; 10.10.10.142; } }}routing-options { router-id 10.10.10.118;}protocols { rsvp {

interface all; } mpls { lsp-external-controller pccd; traffic-engineering mpls-forwarding; label-switched-path Ny_to_Sf { from 10.10.10.118; to 10.10.10.100; inactive: primary to-e { bandwidth 1m;


26/27

} lsp-external-controller pccd; } label-switched-path Ny_to_Chi { from 10.10.10.118; to 10.10.10.124; lsp-external-controller pccd; } interface ge-1/0/3.0; interface ge-1/0/6.0; } ospf { traffic-engineering; reference-bandwidth 4g; area 0.0.0.0 { interface fxp0.0 { disable; } interface ge-1/0/3.0; interface lo0.0 { passive; } } }

connections { remote-interface-switch to-Sf { interface lt-0/0/10.600; transmit-lsp Ny_to_Sf; receive-lsp Sf_to_Ny; } remote-interface-switch to-Chi { interface lt-0/0/10.750; transmit-lsp Ny_to_Chi; receive-lsp Chi_to_Ny; } } pcep {

pce primary { destination-ipv4-address 10.10.10.143; destination-port 4189; } traceoptions { file pccd size 10m world-readable; flag all; } }}routing-instances { of-switch { instance-type vpls;

interface lt-0/0/10.0; interface lt-0/0/10.150; interface ge-1/0/5.0; interface ge-1/0/6.0; interface lt-1/0/10.0; }}openflow { switch 0 { default-action {


27/27

drop; } ports { ge-1/0/5 unit 0; lt-1/0/10 unit 0; lt-0/0/10 unit 150; lt-0/0/10 unit 0; } controller { address 10.10.10.143; port 6633; } } traceoptions { file openflow size 10m files 10 world-readable; flag all; }}

examples sdn

Documents