Appendix: Full Device Configurations
This appendix provides the baseline configuration for all devices in the example topology shown in Figure 1. To quickly configure this topology, modify the configurations to match your network and copy them onto your devices.
Note:
These configurations don't reflect optional features like DHCP. To to add the optional functionality, simply add the optional configuration to the baseline configurations below.
Core Device Configurations
Core 1 Configuration
set interfaces ge-0/0/0 description to_distribution1 set interfaces ge-0/0/0 mtu 9000 set interfaces ge-0/0/0 unit 0 family inet address 10.1.11.1/30 set interfaces ge-0/0/1 description to_distribution2 set interfaces ge-0/0/1 mtu 9000 set interfaces ge-0/0/1 unit 0 family inet address 10.1.12.1/30 set interfaces ge-0/0/2 description to_mx set interfaces ge-0/0/2 mtu 9000 set interfaces ge-0/0/2 unit 0 family inet address 10.1.112.1/30 set interfaces ge-0/0/4 vlan-tagging set interfaces ge-0/0/4 mtu 9000 set interfaces ge-0/0/4 unit 101 description v101_to_srx set interfaces ge-0/0/4 unit 101 vlan-id 101 set interfaces ge-0/0/4 unit 101 family inet address 10.1.111.1/30 set interfaces ge-0/0/4 unit 102 description v102_to_srx set interfaces ge-0/0/4 unit 102 vlan-id 102 set interfaces ge-0/0/4 unit 102 family inet address 10.1.121.1/30 set interfaces irb mtu 9000 set interfaces irb unit 101 proxy-macip-advertisement set interfaces irb unit 101 virtual-gateway-accept-data set interfaces irb unit 101 family inet address 10.1.101.1/24 virtual-gateway-address 10.1.101.254 set interfaces irb unit 101 virtual-gateway-v4-mac 00:12:12:12:12:12 set interfaces irb unit 102 proxy-macip-advertisement set interfaces irb unit 102 virtual-gateway-accept-data set interfaces irb unit 102 family inet address 10.1.102.1/24 virtual-gateway-address 10.1.102.254 set interfaces irb unit 102 virtual-gateway-v4-mac 00:12:12:12:12:12 set interfaces irb unit 103 proxy-macip-advertisement set interfaces irb unit 103 virtual-gateway-accept-data set interfaces irb unit 103 family inet address 10.1.103.1/24 virtual-gateway-address 10.1.103.254 set interfaces irb unit 103 virtual-gateway-v4-mac 00:12:12:12:12:12 set interfaces lo0 unit 0 family inet address 10.1.255.1/32 set interfaces lo0 unit 101 family inet address 10.101.255.1/32 set interfaces lo0 unit 102 family inet address 10.102.255.1/32 set interfaces lo0 unit 103 family inet address 10.103.255.1/32 set policy-options policy-statement adv-vrfs term 1 from protocol static set policy-options policy-statement adv-vrfs term 1 from route-filter 10.1.101.0/24 exact set policy-options policy-statement adv-vrfs term 1 then accept set policy-options policy-statement default-rt term 1 from route-filter 0.0.0.0/0 exact set policy-options policy-statement default-rt term 1 then accept set policy-options policy-statement default-rt term 2 then reject set policy-options policy-statement lb_policy then load-balance per-packet set policy-options policy-statement lb_policy then accept set policy-options policy-statement serverB_imp term 1 from community serverC set policy-options policy-statement serverB_imp term 1 from route-filter 10.1.103.0/24 exact set policy-options policy-statement serverB_imp term 1 then accept set policy-options policy-statement serverC_imp term 1 from community serverB set policy-options policy-statement serverC_imp term 1 from route-filter 10.1.102.0/24 exact set policy-options policy-statement serverC_imp term 1 then accept set policy-options community serverB members target:65000:102 set policy-options community serverC members target:65000:103 set routing-instances vrf_101 instance-type vrf set routing-instances vrf_101 routing-options router-id 10.101.255.1 set routing-instances vrf_101 protocols ospf area 0.0.0.0 interface irb.101 passive set routing-instances vrf_101 protocols ospf area 0.0.0.0 interface lo0.101 set routing-instances vrf_101 protocols ospf area 0.0.0.0 interface ge-0/0/4.101 interface-type p2p set routing-instances vrf_101 interface ge-0/0/4.101 set routing-instances vrf_101 interface irb.101 set routing-instances vrf_101 interface lo0.101 set routing-instances vrf_101 route-distinguisher 10.101.255.1:101 set routing-instances vrf_101 vrf-target target:65000:101 set routing-instances vrf_102 instance-type vrf set routing-instances vrf_102 routing-options router-id 10.102.255.1 set routing-instances vrf_102 routing-options auto-export set routing-instances vrf_102 protocols ospf area 0.0.0.0 interface irb.102 passive set routing-instances vrf_102 protocols ospf area 0.0.0.0 interface lo0.102 set routing-instances vrf_102 protocols ospf area 0.0.0.0 interface ge-0/0/4.102 interface-type p2p set routing-instances vrf_102 interface ge-0/0/4.102 set routing-instances vrf_102 interface irb.102 set routing-instances vrf_102 interface lo0.102 set routing-instances vrf_102 route-distinguisher 10.102.255.1:102 set routing-instances vrf_102 vrf-import serverB_imp set routing-instances vrf_102 vrf-target target:65000:102 set routing-instances vrf_103 instance-type vrf set routing-instances vrf_103 routing-options auto-export set routing-instances vrf_103 interface irb.103 set routing-instances vrf_103 interface lo0.103 set routing-instances vrf_103 route-distinguisher 10.103.255.1:103 set routing-instances vrf_103 vrf-import serverC_imp set routing-instances vrf_103 vrf-target target:65000:103 set routing-instances vs_1 instance-type virtual-switch set routing-instances vs_1 protocols evpn encapsulation vxlan set routing-instances vs_1 protocols evpn default-gateway no-gateway-community set routing-instances vs_1 protocols evpn extended-vni-list all set routing-instances vs_1 vtep-source-interface lo0.0 set routing-instances vs_1 route-distinguisher 10.1.255.1:1 set routing-instances vs_1 vrf-target target:65000:1 set routing-instances vs_1 vrf-target auto set routing-instances vs_1 vlans v101 vlan-id 101 set routing-instances vs_1 vlans v101 l3-interface irb.101 set routing-instances vs_1 vlans v101 vxlan vni 1101 set routing-instances vs_1 vlans v101 vxlan ingress-node-replication set routing-instances vs_1 vlans v102 vlan-id 102 set routing-instances vs_1 vlans v102 l3-interface irb.102 set routing-instances vs_1 vlans v102 vxlan vni 1102 set routing-instances vs_1 vlans v102 vxlan ingress-node-replication set routing-instances vs_1 vlans v103 vlan-id 103 set routing-instances vs_1 vlans v103 l3-interface irb.103 set routing-instances vs_1 vlans v103 vxlan vni 1103 set routing-instances vs_1 vlans v103 vxlan ingress-node-replication set routing-options router-id 10.1.255.1 set routing-options autonomous-system 65000 set routing-options static route 10.1.101.0/24 next-table vrf_101.inet.0 set routing-options rib-groups wan import-rib inet.0 set routing-options rib-groups wan import-rib vrf_101.inet.0 set routing-options rib-groups wan import-policy default-rt set routing-options forwarding-table export lb_policy set protocols bgp group OVERLAY type internal set protocols bgp group OVERLAY local-address 10.1.255.1 set protocols bgp group OVERLAY family evpn signaling set protocols bgp group OVERLAY cluster 10.1.255.255 set protocols bgp group OVERLAY multipath set protocols bgp group OVERLAY neighbor 10.1.255.11 set protocols bgp group OVERLAY neighbor 10.1.255.12 set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 interface-type p2p set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 interface-type p2p set protocols ospf area 0.0.0.0 interface ge-0/0/2.0 interface-type p2p set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf rib-groups inet wan set protocols ospf export adv-vrfs
Core 2 Configuration
set interfaces ge-0/0/0 description to_distribution1 set interfaces ge-0/0/0 mtu 9000 set interfaces ge-0/0/0 unit 0 family inet address 10.1.21.1/30 set interfaces ge-0/0/1 description to_distribution2 set interfaces ge-0/0/1 mtu 9000 set interfaces ge-0/0/1 unit 0 family inet address 10.1.22.1/30 set interfaces ge-0/0/2 description to_mx set interfaces ge-0/0/2 mtu 9000 set interfaces ge-0/0/2 unit 0 family inet address 10.1.212.1/30 set interfaces ge-0/0/3 vlan-tagging set interfaces ge-0/0/3 mtu 9000 set interfaces ge-0/0/3 unit 101 description v101_to_srx set interfaces ge-0/0/3 unit 101 vlan-id 101 set interfaces ge-0/0/3 unit 101 family inet address 10.1.211.1/30 set interfaces ge-0/0/3 unit 102 description v102_to_srx set interfaces ge-0/0/3 unit 102 vlan-id 102 set interfaces ge-0/0/3 unit 102 family inet address 10.1.221.1/30 set interfaces irb mtu 9000 set interfaces irb unit 101 proxy-macip-advertisement set interfaces irb unit 101 virtual-gateway-accept-data set interfaces irb unit 101 family inet address 10.1.101.2/24 virtual-gateway-address 10.1.101.254 set interfaces irb unit 101 virtual-gateway-v4-mac 00:12:12:12:12:12 set interfaces irb unit 102 proxy-macip-advertisement set interfaces irb unit 102 virtual-gateway-accept-data set interfaces irb unit 102 family inet address 10.1.102.2/24 virtual-gateway-address 10.1.102.254 set interfaces irb unit 102 virtual-gateway-v4-mac 00:12:12:12:12:12 set interfaces irb unit 103 proxy-macip-advertisement set interfaces irb unit 103 virtual-gateway-accept-data set interfaces irb unit 103 family inet address 10.1.103.2/24 virtual-gateway-address 10.1.103.254 set interfaces irb unit 103 virtual-gateway-v4-mac 00:12:12:12:12:12 set interfaces lo0 unit 0 family inet address 10.1.255.2/32 set interfaces lo0 unit 101 family inet address 10.101.255.2/32 set interfaces lo0 unit 102 family inet address 10.102.255.2/32 set interfaces lo0 unit 103 family inet address 10.103.255.2/32 set policy-options policy-statement adv-vrfs term 1 from protocol static set policy-options policy-statement adv-vrfs term 1 from route-filter 10.1.101.0/24 exact set policy-options policy-statement adv-vrfs term 1 then accept set policy-options policy-statement default-rt term 1 from route-filter 0.0.0.0/0 exact set policy-options policy-statement default-rt term 1 then accept set policy-options policy-statement default-rt term 2 then reject set policy-options policy-statement lb_policy then load-balance per-packet set policy-options policy-statement lb_policy then accept set policy-options policy-statement serverB_imp term 1 from community serverC set policy-options policy-statement serverB_imp term 1 from route-filter 10.1.103.0/24 exact set policy-options policy-statement serverB_imp term 1 then accept set policy-options policy-statement serverC_imp term 1 from community serverB set policy-options policy-statement serverC_imp term 1 from route-filter 10.1.102.0/24 exact set policy-options policy-statement serverC_imp term 1 then accept set policy-options community serverB members target:65000:102 set policy-options community serverC members target:65000:103 set routing-instances vrf_101 instance-type vrf set routing-instances vrf_101 routing-options router-id 10.101.255.2 set routing-instances vrf_101 protocols ospf area 0.0.0.0 interface irb.101 passive set routing-instances vrf_101 protocols ospf area 0.0.0.0 interface lo0.101 set routing-instances vrf_101 protocols ospf area 0.0.0.0 interface ge-0/0/3.101 interface-type p2p set routing-instances vrf_101 interface ge-0/0/3.101 set routing-instances vrf_101 interface irb.101 set routing-instances vrf_101 interface lo0.101 set routing-instances vrf_101 route-distinguisher 10.101.255.2:101 set routing-instances vrf_101 vrf-target target:65000:101 set routing-instances vrf_102 instance-type vrf set routing-instances vrf_102 routing-options router-id 10.102.255.2 set routing-instances vrf_102 routing-options auto-export set routing-instances vrf_102 protocols ospf area 0.0.0.0 interface irb.102 passive set routing-instances vrf_102 protocols ospf area 0.0.0.0 interface lo0.102 set routing-instances vrf_102 protocols ospf area 0.0.0.0 interface ge-0/0/3.102 interface-type p2p set routing-instances vrf_102 interface ge-0/0/3.102 set routing-instances vrf_102 interface irb.102 set routing-instances vrf_102 interface lo0.102 set routing-instances vrf_102 route-distinguisher 10.102.255.2:102 set routing-instances vrf_102 vrf-import serverB_imp set routing-instances vrf_102 vrf-target target:65000:102 set routing-instances vrf_103 instance-type vrf set routing-instances vrf_103 routing-options auto-export set routing-instances vrf_103 interface irb.103 set routing-instances vrf_103 interface lo0.103 set routing-instances vrf_103 route-distinguisher 10.103.255.2:103 set routing-instances vrf_103 vrf-import serverC_imp set routing-instances vrf_103 vrf-target target:65000:103 set routing-instances vs_1 instance-type virtual-switch set routing-instances vs_1 protocols evpn encapsulation vxlan set routing-instances vs_1 protocols evpn default-gateway no-gateway-community set routing-instances vs_1 protocols evpn extended-vni-list all set routing-instances vs_1 vtep-source-interface lo0.0 set routing-instances vs_1 route-distinguisher 10.1.255.2:1 set routing-instances vs_1 vrf-target target:65000:1 set routing-instances vs_1 vrf-target auto set routing-instances vs_1 vlans v101 vlan-id 101 set routing-instances vs_1 vlans v101 l3-interface irb.101 set routing-instances vs_1 vlans v101 vxlan vni 1101 set routing-instances vs_1 vlans v101 vxlan ingress-node-replication set routing-instances vs_1 vlans v102 vlan-id 102 set routing-instances vs_1 vlans v102 l3-interface irb.102 set routing-instances vs_1 vlans v102 vxlan vni 1102 set routing-instances vs_1 vlans v102 vxlan ingress-node-replication set routing-instances vs_1 vlans v103 vlan-id 103 set routing-instances vs_1 vlans v103 l3-interface irb.103 set routing-instances vs_1 vlans v103 vxlan vni 1103 set routing-instances vs_1 vlans v103 vxlan ingress-node-replication set routing-options router-id 10.1.255.2 set routing-options autonomous-system 65000 set routing-options static route 10.1.101.0/24 next-table vrf_101.inet.0 set routing-options rib-groups wan import-rib inet.0 set routing-options rib-groups wan import-rib vrf_101.inet.0 set routing-options rib-groups wan import-policy default-rt set routing-options forwarding-table export lb_policy set protocols bgp group OVERLAY type internal set protocols bgp group OVERLAY local-address 10.1.255.2 set protocols bgp group OVERLAY family evpn signaling set protocols bgp group OVERLAY cluster 10.1.255.255 set protocols bgp group OVERLAY multipath set protocols bgp group OVERLAY neighbor 10.1.255.11 set protocols bgp group OVERLAY neighbor 10.1.255.12 set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 interface-type p2p set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 interface-type p2p set protocols ospf area 0.0.0.0 interface ge-0/0/2.0 interface-type p2p set protocols ospf area 0.0.0.0 interface lo0.0 passive set protocols ospf rib-groups inet wan set protocols ospf export adv-vrfs
Distribution Device Configurations
Distribution 1 Configuration
set chassis aggregated-devices ethernet device-count 1 set interfaces ge-0/0/0 description to_core1 set interfaces ge-0/0/0 mtu 9000 set interfaces ge-0/0/0 unit 0 family inet address 10.1.11.2/30 set interfaces ge-0/0/1 description to_core2 set interfaces ge-0/0/1 mtu 9000 set interfaces ge-0/0/1 unit 0 family inet address 10.1.21.2/30 set interfaces ge-0/0/2 description to_access1 set interfaces ge-0/0/2 ether-options 802.3ad ae0 set interfaces ae0 mtu 9000 set interfaces ae0 esi 00:00:01:01:01:01:01:01:01:01 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options minimum-links 1 set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 00:00:01:01:01:01 set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk set interfaces ae0 unit 0 family ethernet-switching vlan members v101 set interfaces ae0 unit 0 family ethernet-switching vlan members v102 set interfaces ae0 unit 0 family ethernet-switching vlan members v103 set interfaces lo0 unit 0 family inet address 10.1.255.11/32 set policy-options policy-statement lb_policy then load-balance per-packet set policy-options policy-statement lb_policy then accept set routing-options router-id 10.1.255.11 set routing-options autonomous-system 65000 set routing-options forwarding-table export lb_policy set protocols bgp group OVERLAY type internal set protocols bgp group OVERLAY local-address 10.1.255.11 set protocols bgp group OVERLAY family evpn signaling set protocols bgp group OVERLAY multipath set protocols bgp group OVERLAY neighbor 10.1.255.1 set protocols bgp group OVERLAY neighbor 10.1.255.2 set protocols evpn encapsulation vxlan set protocols evpn multicast-mode ingress-replication set protocols evpn extended-vni-list 1101 set protocols evpn extended-vni-list 1102 set protocols evpn extended-vni-list 1103 set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 interface-type p2p set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 interface-type p2p set protocols ospf area 0.0.0.0 interface lo0.0 passive set switch-options vtep-source-interface lo0.0 set switch-options route-distinguisher 10.1.255.11:1 set switch-options vrf-target target:65000:1 set switch-options vrf-target auto set vlans v101 vlan-id 101 set vlans v101 vxlan vni 1101 set vlans v101 vxlan ingress-node-replication set vlans v102 vlan-id 102 set vlans v102 vxlan vni 1102 set vlans v102 vxlan ingress-node-replication set vlans v103 vlan-id 103 set vlans v103 vxlan vni 1103 set vlans v103 vxlan ingress-node-replication
Distribution 2 Configuration
set chassis aggregated-devices ethernet device-count 1 set interfaces ge-0/0/0 description to_core1 set interfaces ge-0/0/0 mtu 9000 set interfaces ge-0/0/0 unit 0 family inet address 10.1.12.2/30 set interfaces ge-0/0/1 description to_core2 set interfaces ge-0/0/1 mtu 9000 set interfaces ge-0/0/1 unit 0 family inet address 10.1.22.2/30 set interfaces ge-0/0/2 description to_access1 set interfaces ge-0/0/2 ether-options 802.3ad ae0 set interfaces ge-0/0/3 description to_access2 set interfaces ge-0/0/3 mtu 9000 set interfaces ge-0/0/3 unit 0 family ethernet-switching interface-mode trunk set interfaces ge-0/0/3 unit 0 family ethernet-switching vlan members v101 set interfaces ge-0/0/3 unit 0 family ethernet-switching vlan members v102 set interfaces ae0 mtu 9000 set interfaces ae0 esi 00:00:01:01:01:01:01:01:01:01 set interfaces ae0 esi all-active set interfaces ae0 aggregated-ether-options minimum-links 1 set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 aggregated-ether-options lacp system-id 00:00:01:01:01:01 set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk set interfaces ae0 unit 0 family ethernet-switching vlan members v101 set interfaces ae0 unit 0 family ethernet-switching vlan members v102 set interfaces ae0 unit 0 family ethernet-switching vlan members v103 set interfaces lo0 unit 0 family inet address 10.1.255.12/32 set policy-options policy-statement lb_policy then load-balance per-packet set policy-options policy-statement lb_policy then accept set routing-options router-id 10.1.255.12 set routing-options autonomous-system 65000 set routing-options forwarding-table export lb_policy set protocols bgp group OVERLAY type internal set protocols bgp group OVERLAY local-address 10.1.255.12 set protocols bgp group OVERLAY family evpn signaling set protocols bgp group OVERLAY multipath set protocols bgp group OVERLAY neighbor 10.1.255.1 set protocols bgp group OVERLAY neighbor 10.1.255.2 set protocols evpn encapsulation vxlan set protocols evpn multicast-mode ingress-replication set protocols evpn extended-vni-list 1101 set protocols evpn extended-vni-list 1102 set protocols evpn extended-vni-list 1103 set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 interface-type p2p set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 interface-type p2p set protocols ospf area 0.0.0.0 interface lo0.0 passive set switch-options vtep-source-interface lo0.0 set switch-options route-distinguisher 10.1.255.12:1 set switch-options vrf-target target:65000:1 set switch-options vrf-target auto set vlans v101 vlan-id 101 set vlans v101 vxlan vni 1101 set vlans v101 vxlan ingress-node-replication set vlans v102 vlan-id 102 set vlans v102 vxlan vni 1102 set vlans v102 vxlan ingress-node-replication set vlans v103 vlan-id 103 set vlans v103 vxlan vni 1103 set vlans v103 vxlan ingress-node-replication
Access Device Configurations
Access 1 Configuration
set chassis aggregated-devices ethernet device-count 1 set interfaces ge-0/0/0 description to_dist1 set interfaces ge-0/0/0 ether-options 802.3ad ae0 set interfaces ge-0/0/1 description to_dist2 set interfaces ge-0/0/1 ether-options 802.3ad ae0 set interfaces ge-0/0/2 mtu 9000 set interfaces ge-0/0/2 unit 0 family ethernet-switching interface-mode trunk set interfaces ge-0/0/2 unit 0 family ethernet-switching vlan members v101 set interfaces ge-0/0/3 mtu 9000 set interfaces ge-0/0/3 unit 0 family ethernet-switching interface-mode trunk set interfaces ge-0/0/3 unit 0 family ethernet-switching vlan members v103 set interfaces ae0 mtu 9000 set interfaces ae0 aggregated-ether-options minimum-links 1 set interfaces ae0 aggregated-ether-options lacp active set interfaces ae0 aggregated-ether-options lacp periodic fast set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk set interfaces ae0 unit 0 family ethernet-switching vlan members v101 set interfaces ae0 unit 0 family ethernet-switching vlan members v103 set vlans v101 vlan-id 101 set vlans v103 vlan-id 103
Access 2 Configuration
set interfaces ge-0/0/0 mtu 9000 set interfaces ge-0/0/0 unit 0 family ethernet-switching interface-mode trunk set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members v102 set interfaces ge-0/0/1 mtu 9000 set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode access set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan members v102 set vlans v102 vlan-id 102
MX Series Router Configuration
set interfaces ge-0/0/0 description to_core1 set interfaces ge-0/0/0 mtu 9000 set interfaces ge-0/0/0 unit 0 family inet address 10.1.112.2/30 set interfaces ge-0/0/1 description to_core2 set interfaces ge-0/0/1 mtu 9000 set interfaces ge-0/0/1 unit 0 family inet address 10.1.212.2/30 set interfaces ge-0/0/2 mtu 9000 set interfaces ge-0/0/2 unit 0 family inet address 172.16.1.1/30 set interfaces lo0 unit 0 family inet address 10.1.255.112/32 set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 interface-type p2p set protocols ospf area 0.0.0.0 interface ge-0/0/1.0 interface-type p2p set protocols ospf area 0.0.0.0 interface lo0.0 set protocols ospf area 0.0.0.0 interface ge-0/0/2.0 passive set protocols ospf export adv-stat set policy-options policy-statement adv-stat term 1 from protocol static set policy-options policy-statement adv-stat term 1 then accept set routing-options router-id 10.1.255.112 set routing-options static route 0.0.0.0/0 next-hop 172.16.1.2
SRX Series Device Configuration
set security address-book global address v101 10.1.101.0/24 set security address-book global address v102 10.1.102.0/24 set security policies from-zone v101 to-zone v102 policy v101_to_v102 match source-address v101 set security policies from-zone v101 to-zone v102 policy v101_to_v102 match destination-address v102 set security policies from-zone v101 to-zone v102 policy v101_to_v102 match application any set security policies from-zone v101 to-zone v102 policy v101_to_v102 then permit set security policies from-zone v102 to-zone v101 policy v102_to_v101 match source-address v102 set security policies from-zone v102 to-zone v101 policy v102_to_v101 match destination-address v101 set security policies from-zone v102 to-zone v101 policy v102_to_v101 match application any set security policies from-zone v102 to-zone v101 policy v102_to_v101 then permit set security zones security-zone v101 host-inbound-traffic system-services ping set security zones security-zone v101 host-inbound-traffic protocols ospf set security zones security-zone v101 interfaces ge-0/0/0.101 set security zones security-zone v101 interfaces ge-0/0/1.101 set security zones security-zone v102 host-inbound-traffic system-services ping set security zones security-zone v102 host-inbound-traffic protocols ospf set security zones security-zone v102 interfaces ge-0/0/1.102 set security zones security-zone v102 interfaces ge-0/0/0.102 set interfaces ge-0/0/0 description to_core1 set interfaces ge-0/0/0 vlan-tagging set interfaces ge-0/0/0 mtu 9000 set interfaces ge-0/0/0 unit 101 vlan-id 101 set interfaces ge-0/0/0 unit 101 family inet address 10.1.111.2/30 set interfaces ge-0/0/0 unit 102 vlan-id 102 set interfaces ge-0/0/0 unit 102 family inet address 10.1.121.2/30 set interfaces ge-0/0/1 description to_core2 set interfaces ge-0/0/1 vlan-tagging set interfaces ge-0/0/1 mtu 9000 set interfaces ge-0/0/1 unit 101 vlan-id 101 set interfaces ge-0/0/1 unit 101 family inet address 10.1.211.2/30 set interfaces ge-0/0/1 unit 102 vlan-id 102 set interfaces ge-0/0/1 unit 102 family inet address 10.1.221.2/30 set interfaces lo0 unit 1 family inet address 10.1.255.111/32 set routing-instances v101_v102 instance-type virtual-router set routing-instances v101_v102 routing-options router-id 10.1.255.111 set routing-instances v101_v102 protocols ospf area 0.0.0.0 interface ge-0/0/0.101 interface-type p2p set routing-instances v101_v102 protocols ospf area 0.0.0.0 interface ge-0/0/0.102 interface-type p2p set routing-instances v101_v102 protocols ospf area 0.0.0.0 interface ge-0/0/1.101 interface-type p2p set routing-instances v101_v102 protocols ospf area 0.0.0.0 interface ge-0/0/1.102 interface-type p2p set routing-instances v101_v102 protocols ospf area 0.0.0.0 interface lo0.1 set routing-instances v101_v102 interface ge-0/0/0.101 set routing-instances v101_v102 interface ge-0/0/0.102 set routing-instances v101_v102 interface ge-0/0/1.101 set routing-instances v101_v102 interface ge-0/0/1.102 set routing-instances v101_v102 interface lo0.1