version 6.3R1.4;
system {
    host-name istanbul;
    domain-name gate.21c3.ccc.de;
    time-zone Europe/Berlin;
    authentication-order password;
    ports {
        console type vt100;
    }
    root-authentication {
        encrypted-password "$1$JOC26FiW$qtrKq0vtc927WzLk3u0Ea0"; # SECRET-DATA
    }
    name-server {
        212.21.72.1;
        212.42.242.2;
        212.84.206.1;
    }
    login {
        message "You are accessing CCC 2004 Istanbul. ";
        user alf {
            uid 3501;
            class superuser;
            authentication {
                encrypted-password "$1$RWZG3UI5$dzyEssOsREytzg9NQi0Cb1"; # SECRET-DATA
            }
        }
        user blackwing {
            uid 2010;
            class superuser;
            authentication {
                encrypted-password "$1$q1Hd27AW$OvbV5AMQ6Qq12q95Z4mFa1"; # SECRET-DATA
                ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA0B2m7Nh4OElq+b5QbiC2RTGVU/m3NthJIHrrMzQV/VIRkARtYwEClEA+bH/2/krl8mbh3fMPb9XT8sXdPsRKTSAdxzoSMS1akZnu4MF2tX9VsQks//Xpu/wGWIk2yclE/uhxM8/M38CUpFdWo8dLgUDqgab02H0PEAUUsLqsXrs= blackwing"; # SECRET-DATA
            }
        }
        user cc {
            uid 2001;
            class superuser;
            authentication {
                encrypted-password "$1$q1Hd27AW$OvbV5AMQ6Qq12q95Z4mFa1"; # SECRET-DATA
            }
        }
        user czmok {
            uid 2011;
            class superuser;
            authentication {
                encrypted-password "$1$kgFeGUCE$DNlzYZy.npsOu/jh8zNoR."; # SECRET-DATA
                ssh-dsa "ssh-dss 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 czmok@leuchtkerze"; # SECRET-DATA
            }
        }
        user swahl {
            uid 2000;
            class superuser;
            authentication {
                encrypted-password "$1$4JyIBhTg$eIwnXGvbLte2tOVMf/FyD/"; # SECRET-DATA
            }
        }
    }
    services {
        ssh {
            protocol-version v2;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
    }
    ntp {
        server 192.168.242.2;
        server 192.168.242.1;
        source-address 192.168.242.90;
    }
}
interfaces {
    ge-0/1/0 {
        description PrimaryTrunk;
        vlan-tagging;
        link-mode full-duplex;
        unit 0 {
            description BCIX100;
            vlan-id 100;
            family inet {
                address 193.178.185.100/25;
            }
        }
        unit 1 {
            description BCIX102;
            vlan-id 102;
            family inet6 {
                address 2001:7F8:19:1::85d8:1/64;
            }
        }
        unit 2 {
            description CCC-IPv4;
            vlan-id 910;
            family inet {
                address 82.130.0.3/29;
            }
        }
        unit 3 {
            description CCC-IPv6;
            vlan-id 911;
            family inet6 {
                address 2001:1520:21c3:ffff::1/64;
            }
        }
    }
    fe-1/3/0 {
        description LocalMgmt;
        speed 100m;
        link-mode full-duplex;
        unit 0 {
            family inet {
                address 192.168.242.90/25;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 127.0.0.1/32;
            }
        }
    }
}
snmp {
    community vectra {
        clients {
            192.168.242.7/32;
        }
    }
}
routing-options {
    static {
        route 0.0.0.0/0 {
            next-hop 172.18.30.200;
            qualified-next-hop 192.168.242.6;
            no-install;
            no-readvertise;
        }
        route 82.130.0.0/18 {
            next-hop 82.130.0.1;
            install;
        }
    }
    autonomous-system 34264;
}
protocols {
    bgp {
        group ccc {
            type internal;
            description internal-bgp-sessions;
            import any;
            export any;
            neighbor 82.130.0.2 {
                family inet {
                    unicast;
                }
                family inet6 {
                    unicast;
                }
            }
            neighbor 82.130.0.1 {
                family inet {
                    unicast;
                }
                family inet6 {
                    unicast;
                }
            }
            inactive: neighbor 2001:7F8:19:1::85D8:3 {
                family inet6 {
                    unicast;
                }
            }
            inactive: neighbor 2001:7F8:19:1::85D8:2 {
                family inet6 {
                    unicast;
                }
            }
        }
        group dhosting {
            type external;
            log-updown;
            import CCC-IN;
            export srcAS34264;
            peer-as 12732;
            neighbor 193.178.185.1 {
                description dhosting-routeserver1;
                family inet {
                    unicast;
                }
                family inet6 {
                    unicast;
                }
            }
            neighbor 193.178.185.2 {
                description dhosting-routeserver2;
                family inet {
                    unicast;
                }
                family inet6 {
                    unicast;
                }
            }
            neighbor 193.178.185.10 {
                description dhosting-routeserver3;
                family inet {
                    unicast;
                }
                family inet6 {
                    unicast;
                }
            }
        }
        inactive: group dhosting6 {
            type external;
            log-updown;
            import any;
            export [ next-hop-self srcAS34264 ];
            peer-as 12732;
            neighbor 2001:7F8:19:1::31BC:1 {
                family inet6 {
                    unicast;
                }
            }
            neighbor 2001:7F8:19:1::31BC:2 {
                description dhosting-20c3;
                family inet6 {
                    unicast;
                }
            }
            neighbor 2001:7F8:19:1::31BC:3 {
                description dhosting-20c3;
                family inet6 {
                    unicast;
                }
            }
        }
    }
    ospf {
        area 0.0.0.0 {
            interface ge-0/1/0.2 {
                authentication {
                    md5 1 key "$9$LOpN-wiHqf5FaJDk.5zF/Ctu1RSyK"; # SECRET-DATA
                }
            }
        }
    }
}
policy-options {
    policy-statement next-hop-self {
        term set-hop {
            then {
                next-hop self;
                next policy;
            }
        }
    }
    policy-statement srcAS34264 {
        from {
            protocol static;
            route-filter 82.130.0.0/18 exact;
        }
        then {
            origin igp;
            accept;
        }
    }
    policy-statement any {
        then accept;
    }
    policy-statement CCC-IN {
        term DirectPeers {
            to as-path IsBGP-DirectPeer;
            then {
                local-preference 900;
                accept;
            }
        }
        term DFN {
            to as-path IsBGP-DH-DFN;
            then {
                local-preference 800;
                accept;
            }
        }
        term BCIXDirect {
            to as-path IsBGP-DHostingPeers;
            then {
                local-preference 700;
                accept;
            }
        }
        term BCIXIndirect {
            to as-path IsBGP-DH-Default;
            then {
                local-preference 300;
                accept;
            }
        }
        term CogentPeers {
            to as-path IsBGP-CogentPeers;
            then {
                local-preference 500;
                accept;
            }
        }
        term InterroutePeers {
            to as-path IsBGP-InterroutePeers;
            then {
                local-preference 500;
                accept;
            }
        }
        term DeCIX {
            to as-path IsBGP-DH-CL-DECIX;
            then {
                local-preference 400;
                accept;
            }
        }
        term DTAG {
            to as-path IsBGP-DH-PL-DTAG;
            then {
                local-preference 600;
                accept;
            }
        }
        term InterrouteDefault {
            to as-path IsBGP-Interroute-Default;
            then {
                local-preference 100;
                accept;
            }
        }
        term CogentDefault {
            to as-path IsBGP-Cogent-Default;
            then {
                local-preference 100;
                accept;
            }
        }
        term Default {
            then {
                local-preference 90;
                accept;
            }
        }
        term Freenet {
            to as-path IsBGP-DH-CL-Freenet;
            then {
                local-preference 700;
                accept;
            }
        }
        then {
            local-preference 100;
        }
    }
    policy-statement nofilter-in {
        term reject-ournet {
            from {
                route-filter 82.130.0.0/18 orlonger;
            }
            then reject;
        }
        term accept-any {
            then accept;
        }
    }
    as-path IsBGP-DirectPeer "(174|8928|12732)";
    as-path IsBGP-PeerOfDirectPeer "(174|8928|12732) .";
    as-path IsBGP-DHostingPeers "12732 .";
    as-path IsBGP-InterroutePeers "8928 .";
    as-path IsBGP-CogentPeers "174 .";
    as-path IsBGP-DH-CL-DECIX "12732 20646 .*";
    as-path IsBGP-DH-DFN "12732 680 .*";
    as-path IsBGP-DH-PL-DTAG "12732 12306 3320 .*";
    as-path IsBGP-DH-Default "12732 .*";
    as-path IsBGP-Cogent-Default "174 .*";
    as-path IsBGP-Interroute-Default "8928 .*";
    as-path IsBGP-DH-CL-Freenet "12732 20646 5430 .*";
}