RP/0/RSP0/CPU0:mi-cpe-giu92-109#sh run

Mon Oct 29 17:14:53.422 MET

Building configuration...
!! IOS XR Configuration 4.1.0
!! Last configuration change at Fri Sep 14 15:11:29 2018 by dparma
!
service unsupported-transceiver
hostname mi-cpe-giu92-109
clock timezone MET 1
clock summer-time METDST recurring last sunday march 02:00 last sunday october
03:00 60
logging trap notifications
logging buffered 62653600
logging 7.0.0.76 vrf lombardia_FW_mngt
logging source-interface Loopback7
service timestamps log datetime localtime msec
service timestamps debug datetime localtime msec show-timezone
telnet vrf MGMT ipv4 server max-servers 100
telnet vrf default ipv4 server max-servers 100
telnet vrf lombardia_mngt ipv4 server max-servers 100
telnet vrf lombardia_FW_mngt ipv4 server max-servers 100
tacacs source-interface Loopback111 vrf lombardia_mngt
tacacs-server host 10.33.0.1 port 49
key 7 105F4D365C4F0A273D507E2020176174
!
aaa group server tacacs+ TAC-SERVERS
server 10.33.0.1
vrf lombardia_mngt
!
aaa authentication login default group TAC-SERVERS local
cdp
vrf MGMT
!
vrf lombardia
description "GIUNTA"
address-family ipv4 unicast
import route-policy IMPORT_POLICY_GIUNTA
import route-target
65535:104
65535:971
65535:4429
65535:4430
65535:4431
65535:4432
65535:4433
65535:4434
65535:4435
65535:4436
65535:4438
65535:4439
65535:4442
65535:4443
65535:4457
65535:4458
65535:4619
65535:4772
65535:5042
65535:5854
65535:6024
 !
export route-target
65535:104
!
!
!
vrf lombardia_arca
address-family ipv4 unicast
import route-policy IMPORT_POLICY_ARCA
import route-target
65535:104
65535:4429
65535:4435
65535:4443
65535:4772
65535:5854
!
export route-target
65535:4772
!
!
!
vrf lombardia_arpa
address-family ipv4 unicast
import route-policy IMPORT_POLICY_ARPA
import route-target
65535:104
65535:4429
65535:4430
65535:4435
65535:4438
65535:4439
65535:4443
65535:5042
65535:5854
!
export route-target
65535:4430
!
!
!
vrf lombardia_mngt
address-family ipv4 unicast
import route-policy IMPORT_POLICY_MNGT
import route-target
65535:104
65535:971
65535:4429
65535:4430
65535:4437
65535:4438
65535:4443
!
export route-target
65535:4438
!
!
!
vrf lombardia_arifl
 address-family ipv4 unicast
import route-policy IMPORT_POLICY_ARIFL
import route-target
65535:104
65535:4429
65535:4435
65535:4439
65535:4443
65535:4458
65535:5854
!
export route-target
65535:4458
!
!
!
vrf lombardia_ersaf
address-family ipv4 unicast
import route-policy IMPORT_POLICY_ERSAF
import route-target
65535:104
65535:4429
65535:4431
65535:4435
65535:4439
65535:4443
65535:5854
!
export route-target
65535:4431
!
!
!
vrf lombardia_guest
address-family ipv4 unicast
import route-policy IMPORT_POLICY_GUEST
import route-target
65535:104
65535:4429
65535:4442
65535:4443
!
export route-target
65535:4442
!
!
!
vrf lombardia_ilspa
address-family ipv4 unicast
import route-policy IMPORT_POLICY_ILSPA
import route-target
65535:104
65535:4429
65535:4435
65535:4443
65535:5854
65535:6024
!
export route-target
 65535:6024
!
!
!
vrf lombardia_lispa
address-family ipv4 unicast
import route-policy IMPORT_POLICY_LISPA
import route-target
65535:104
65535:971
65535:4429
65535:4430
65535:4431
65535:4432
65535:4433
65535:4434
65535:4435
65535:4436
65535:4438
65535:4439
65535:4442
65535:4443
65535:4457
65535:4458
65535:4772
65535:5042
65535:5854
65535:6024
!
export route-target
65535:4429
!
!
!
vrf lombardia_FW_ext
address-family ipv4 unicast
import route-policy IMPORT_POLICY_FW_EXT
import route-target
65535:53
65535:104
65535:971
65535:4429
65535:4430
65535:4431
65535:4432
65535:4433
65535:4434
65535:4435
65535:4436
65535:4438
65535:4440
65535:4442
65535:4443
65535:4457
65535:4458
65535:4619
65535:4772
65535:5042
65535:5854
 65535:6024
!
export route-target
65535:4443
!
!
!
vrf lombardia_cestec
address-family ipv4 unicast
import route-policy IMPORT_POLICY_CESTEC
import route-target
65535:104
65535:4429
65535:4432
65535:4435
65535:4438
65535:4439
65535:4443
65535:4457
65535:5854
!
export route-target
65535:4432
!
!
!
vrf lombardia_mobile
address-family ipv4 unicast
import route-policy IMPORT_POLICY_MOBILE
import route-target
65535:104
65535:4429
65535:4435
65535:4443
65535:4619
!
export route-target
65535:4619
!
!
!
vrf lombardia_FW_mngt
address-family ipv4 unicast
import route-policy IMPORT_MNGT_FW_MNGT
import route-target
65535:4437
65535:4438
!
export route-target
65535:4437
!
!
!
vrf lombardia_eupolis
address-family ipv4 unicast
import route-policy IMPORT_POLICY_EUPOLIS
import route-target
65535:104
65535:4429
 65535:4433
65535:4435
65535:4439
65535:4443
65535:5854
!
export route-target
65535:4433
!
!
!
vrf lombardia_nfs_dmz
address-family ipv4 unicast
import route-target
65535:4444
!
export route-target
65535:4444
!
!
!
vrf lombardia_prot_civ
address-family ipv4 unicast
import route-policy IMPORT_POLICY_PROT_CIV
import route-target
65535:104
65535:4429
65535:4430
65535:4435
65535:4443
65535:5042
65535:5854
!
export route-target
65535:5042
!
!
!
vrf lombardia_tornelli
address-family ipv4 unicast
import route-policy IMPORT_POLICY_TORNELLI
import route-target
65535:104
65535:4429
65535:4436
65535:4443
!
export route-target
65535:4436
!
!
!
vrf lombardia_voip_inf
address-family ipv4 unicast
import route-policy IMPORT_POLICY_VOIP_INF
import route-target
65535:104
65535:971
65535:4429
 65535:4430
65535:4431
65535:4432
65535:4433
65535:4434
65535:4435
65535:4443
65535:4457
65535:4458
65535:4619
65535:4772
65535:5042
65535:6024
!
export route-target
65535:4435
!
!
!
vrf lombardia_consiglio
address-family ipv4 unicast
import route-policy IMPORT_POLICY_CONSIGLIO
import route-target
65535:104
65535:971
65535:4429
65535:4435
65535:4438
65535:4439
65535:4443
65535:5854
!
export route-target
65535:971
!
!
!
vrf lombardia_mcast_ext
address-family ipv4 unicast
import route-target
65535:4439
!
export route-target
65535:4439
!
!
!
vrf lombardia_stream_be
address-family ipv4 unicast
import route-policy IMPORT_POLICY_STREAM_BE
import route-target
65535:4440
65535:4443
!
export route-target
65535:4440
!
!
!
vrf lombardia_fleet_mngt
address-family ipv4 unicast
import route-policy IMPORT_POLICY_FLEET_MNGT
import route-target
65535:104
65535:971
65535:4429
65535:4430
65535:4431
65535:4432
65535:4433
65535:4434
65535:4443
65535:4457
65535:4458
65535:4772
65535:5042
65535:5854
65535:6024
!
export route-target
65535:5854
!
!
!
vrf lombardia_enti_shared
address-family ipv4 unicast
import route-policy IMPORT_POLICY_ENTI_SHARED
import route-target
65535:104
65535:4429
65535:4434
65535:4435
65535:4439
65535:4443
65535:5854
!
export route-target
65535:4434
!
!
!
vrf lombardia_finlombarda
address-family ipv4 unicast
import route-policy IMPORT_POLICY_FINLOMBARDA
import route-target
65535:104
65535:4429
65535:4432
65535:4435
65535:4439
65535:4443
65535:4457
65535:5854
!
export route-target
65535:4457
!
!
!
vrf lombardia_remediation
address-family ipv4 unicast
import route-target
65535:4441
!
export route-target
65535:4441
!
!
!
vrf lombardia_videoguida_pl
address-family ipv4 unicast
import route-policy IMPORT_EXTRANET_VIDEOGUIDA_PL
import route-target
65535:53
65535:4443
!
export route-target
65535:53
!
!
!
vrf lombardia_consiglio_internet
address-family ipv4 unicast
import route-target
65535:9999
!
export route-target
65535:9999
!
!
!
line console
exec-timeout 0 0
length 0
!
line default
exec-timeout 0 0
!
vty-pool default 0 99
snmp-server vrf lombardia_FW_mngt
host 7.0.0.76 traps public
!
snmp-server host 7.0.0.76 traps public
snmp-server community fwwrcmn RW 77
snmp-server community R3gL0mRO RO
snmp-server queue-length 30
snmp-server trap-timeout 120
snmp-server traps ntp
snmp-server traps config
snmp-server traps system
snmp-server chassis-id ASR-9010-AC
snmp-server location A_7833350
snmp-server packetsize 2048
snmp-server trap-source Loopback7
ntp
server 7.0.0.254
source Loopback7
 source vrf lombardia_mngt Loopback111
source vrf lombardia_FW_ext Loopback112
!
ipv4 access-list 77
10 permit ipv4 7.0.0.0 0.0.0.255 any
20 deny ipv4 any any
!
ipv4 access-list 88
10 permit ipv4 any 239.232.0.0 0.0.255.255
!
ipv4 access-list 89
10 permit ipv4 any 239.1.0.0 0.0.255.255
20 permit ipv4 any 239.2.0.0 0.0.255.255
!
ipv4 access-list 90
10 permit ipv4 any 224.131.116.0 0.0.0.255
!
ipv4 access-list MULTICAST
10 remark permit all available multicast requests
20 permit ipv4 any 224.0.0.0 15.255.255.255
!
ipv4 access-list MCAST_SOURCE
10 permit ipv4 192.168.103.0/24 224.0.0.0/5
!
ipv4 access-list MULTICAST-RESERVED
10 remark link local scope multicast
20 permit ipv4 any 224.0.0.0 0.0.0.255
!
class-map match-any FW_HI1
match dscp ipv4 af31
match precedence ipv4 6
match mpls experimental topmost 7
end-class-map
!
class-map match-any FW_HI2
match dscp ipv4 af32
match mpls experimental topmost 6
end-class-map
!
class-map match-any FW_HI3
match dscp ipv4 af33
match mpls experimental topmost 5
end-class-map
!
class-map match-any FW_LOWX
match dscp ipv4 af11 af13
match mpls experimental topmost 1
end-class-map
!
class-map match-any FW_MID1
match dscp ipv4 af21
match mpls experimental topmost 4
end-class-map
!
class-map match-any FW_MID2
match dscp ipv4 af22
match mpls experimental topmost 3
end-class-map
!
class-map match-any FW_MID3
match dscp ipv4 af22
match mpls experimental topmost 2
end-class-map
!
class-map match-all NETWORK
match precedence ipv4 6
end-class-map
!
class-map match-any MULTICAST
match access-group ipv4 MULTICAST
end-class-map
!
class-map match-all PRECIOUS1
match dscp ipv4 af31
end-class-map
!
class-map match-all PRECIOUS2
match dscp ipv4 af32
end-class-map
!
class-map match-all PRECIOUS3
match dscp ipv4 af33
end-class-map
!
class-map match-all IMPORTANT1
match dscp ipv4 af21
end-class-map
!
class-map match-all IMPORTANT2
match dscp ipv4 af22
end-class-map
!
class-map match-all IMPORTANT3
match dscp ipv4 af23
end-class-map
!
class-map match-all BESTEFFORT1
match dscp ipv4 af11
end-class-map
!
class-map match-all BESTEFFORT3
match dscp ipv4 af13
end-class-map
!
class-map match-any MCAST_SHAPE
match access-group ipv4 MCAST_SOURCE
end-class-map
!
class-map match-any MULTICAST-RESERVED
match access-group ipv4 MULTICAST-RESERVED
end-class-map
!
policy-map BW-COMP-DOWN_RL
class FW_HI1
priority level 1
police rate percent 1
!
!
 class FW_HI2
priority level 2
police rate percent 10
!
!
class FW_HI3
bandwidth percent 2
!
class FW_MID1
bandwidth percent 10
!
class FW_MID2
bandwidth percent 10
!
class FW_MID3
bandwidth percent 10
!
class FW_LOWX
bandwidth percent 7
!
class class-default
bandwidth percent 20
!
end-policy-map
!
policy-map MVPN-LIMITER-IN_NNI-RL
class MULTICAST-RESERVED
police rate 1 mbps
!
!
class MULTICAST
police rate 50 mbps
!
set dscp af21
!
class class-default
!
end-policy-map
!
policy-map SERVICE-POLICY-LAN2MAN
class FW_HI1
set mpls experimental topmost 7
police rate percent 1
conform-action transmit
exceed-action drop
!
priority level 1
!
class FW_HI2
set mpls experimental topmost 6
police rate percent 10
conform-action transmit
exceed-action drop
!
priority level 2
!
class FW_HI3
set mpls experimental topmost 5
bandwidth percent 10
 !
class FW_MID1
set mpls experimental topmost 4
bandwidth percent 14
!
class FW_MID2
set mpls experimental topmost 3
bandwidth percent 13
!
class FW_MID3
set mpls experimental topmost 2
bandwidth percent 13
!
class FW_LOWX
set mpls experimental topmost 1
bandwidth percent 9
!
class class-default
bandwidth percent 25
!
end-policy-map
!
policy-map SERVICE-POLICY-LAN2WAN
class NETWORK
police rate percent 2
conform-action transmit
exceed-action drop
!
priority level 1
!
class MULTICAST-RESERVED
police rate 1 mbps
!
!
class MULTICAST
police rate 50 mbps
!
!
class class-default
service-policy BW-COMP-DOWN_RL
!
end-policy-map
!
interface Bundle-Ether1
!
interface Bundle-Ether1.3600
description N7K1-VDC2_ASR1_FW_MNGT
ipv4 address 172.16.129.1 255.255.255.252
encapsulation dot1q 3600
!
interface Bundle-Ether1.3601
description N7K1-VDC2_ASR1_GIUNTA
vrf lombardia
ipv4 address 172.16.129.5 255.255.255.252
encapsulation dot1q 3601
!
interface Bundle-Ether1.3602
description N7K1-VDC2_ASR1_CONSIGLIO
vrf lombardia_consiglio
 ipv4 address 172.16.129.9 255.255.255.252
encapsulation dot1q 3602
!
interface Bundle-Ether1.3603
description N7K1-VDC2_ASR1_ARPA
vrf lombardia_arpa
ipv4 address 172.16.129.13 255.255.255.252
encapsulation dot1q 3603
!
interface Bundle-Ether1.3604
description N7K1-VDC2_ASR1_LISPA
vrf lombardia_lispa
ipv4 address 172.16.129.17 255.255.255.252
encapsulation dot1q 3604
!
interface Bundle-Ether1.3605
description N7K1-VDC2_ASR1_CESTEC
vrf lombardia_cestec
ipv4 address 172.16.129.21 255.255.255.252
encapsulation dot1q 3605
!
interface Bundle-Ether1.3606
description N7K1-VDC2_ASR1_EUPOLIS
vrf lombardia_eupolis
ipv4 address 172.16.129.25 255.255.255.252
encapsulation dot1q 3606
!
interface Bundle-Ether1.3607
description N7K1-VDC2_ASR1_ERSAF
vrf lombardia_ersaf
ipv4 address 172.16.129.29 255.255.255.252
encapsulation dot1q 3607
!
interface Bundle-Ether1.3608
description N7K1-VDC2_ASR1_ENTI_SHARED
vrf lombardia_enti_shared
ipv4 address 172.16.129.33 255.255.255.252
encapsulation dot1q 3608
!
interface Bundle-Ether1.3609
description N7K1-VDC2_ASR1_FINLOMBARDA
vrf lombardia_finlombarda
ipv4 address 172.16.129.37 255.255.255.252
encapsulation dot1q 3609
!
interface Bundle-Ether1.3610
description N7K1-VDC2_ASR1_ARIFL
vrf lombardia_arifl
ipv4 address 172.16.129.41 255.255.255.252
encapsulation dot1q 3610
!
interface Bundle-Ether1.3613
description N7K1-VDC2_ASR1_PROT_CIV
vrf lombardia_prot_civ
ipv4 address 172.16.129.49 255.255.255.252
encapsulation dot1q 3613
!
interface Bundle-Ether1.3614
description N7K1-VDC2_ASR1_FLEET_MNGT
 vrf lombardia_fleet_mngt
ipv4 address 172.16.129.53 255.255.255.252
encapsulation dot1q 3614
!
interface Bundle-Ether1.3615
description N7K1-VDC2_ASR1_ILSPA
vrf lombardia_ilspa
ipv4 address 172.16.129.57 255.255.255.252
encapsulation dot1q 3615
!
interface Bundle-Ether1.3650
description N7K1-VDC2_ASR1_MAN_VOIP
vrf lombardia_voip_inf
ipv4 address 172.16.129.201 255.255.255.252
encapsulation dot1q 3650
!
interface Bundle-Ether1.3651
description N7K1-VDC2_ASR1_MAN_TORNELLI
vrf lombardia_tornelli
ipv4 address 172.16.129.205 255.255.255.252
encapsulation dot1q 3651
!
interface Bundle-Ether1.3652
description N7K1-VDC2_ASR1_MAN_EXTRANET
vrf lombardia_FW_ext
ipv4 address 172.16.129.209 255.255.255.252
encapsulation dot1q 3652
!
interface Bundle-Ether1.3653
description N7K1-VDC2_ASR1_MAN_MCAST_FE
vrf lombardia_mcast_ext
ipv4 address 172.16.129.213 255.255.255.252
encapsulation dot1q 3653
!
interface Bundle-Ether1.3654
description N7K1-VDC2_ASR1_MAN_STR_BE
vrf lombardia_stream_be
ipv4 address 172.16.129.217 255.255.255.252
encapsulation dot1q 3654
!
interface Bundle-Ether1.3655
description N7K1-VDC2_ASR1_GUEST
vrf lombardia_guest
ipv4 address 172.16.129.221 255.255.255.252
encapsulation dot1q 3655
!
interface Bundle-Ether1.3656
description N7K1-VDC2_ASR1_MNGT
vrf lombardia_mngt
ipv4 address 172.16.129.225 255.255.255.252
encapsulation dot1q 3656
!
interface Bundle-Ether1.3657
description N7K1-VDC2_ASR1_REMEDIATION
vrf lombardia_remediation
ipv4 address 172.16.129.229 255.255.255.252
encapsulation dot1q 3657
!
interface Bundle-Ether1.3658
 description N7K1-VDC2_ASR1_NFS_DMZ
vrf lombardia_nfs_dmz
ipv4 address 172.16.129.233 255.255.255.252
encapsulation dot1q 3658
!
interface Bundle-Ether1.3659
description N7K1-VDC2_ASR1_MOBILE
vrf lombardia_mobile
ipv4 address 172.16.129.237 255.255.255.252
encapsulation dot1q 3659
!
interface Bundle-Ether1.3660
description N7K1-VDC2_ASR1_ARCA
vrf lombardia_arca
ipv4 address 172.16.129.241 255.255.255.252
encapsulation dot1q 3660
!
interface Bundle-Ether1.3800
description N7K2-VDC2_ASR1_FW_MNGT
ipv4 address 172.18.129.1 255.255.255.252
encapsulation dot1q 3800
!
interface Bundle-Ether1.3801
description N7K2-VDC2_ASR1_GIUNTA
vrf lombardia
ipv4 address 172.18.129.5 255.255.255.252
encapsulation dot1q 3801
!
interface Bundle-Ether1.3802
description N7K2-VDC2_ASR1_CONSIGLIO
vrf lombardia_consiglio
ipv4 address 172.18.129.9 255.255.255.252
encapsulation dot1q 3802
!
interface Bundle-Ether1.3803
description N7K2-VDC2_ASR1_ARPA
vrf lombardia_arpa
ipv4 address 172.18.129.13 255.255.255.252
encapsulation dot1q 3803
!
interface Bundle-Ether1.3804
description N7K2-VDC2_ASR1_LISPA
vrf lombardia_lispa
ipv4 address 172.18.129.17 255.255.255.252
encapsulation dot1q 3804
!
interface Bundle-Ether1.3805
description N7K2-VDC2_ASR1_CESTEC
vrf lombardia_cestec
ipv4 address 172.18.129.21 255.255.255.252
encapsulation dot1q 3805
!
interface Bundle-Ether1.3806
description N7K2-VDC2_ASR1_EUPOLIS
vrf lombardia_eupolis
ipv4 address 172.18.129.25 255.255.255.252
encapsulation dot1q 3806
!
interface Bundle-Ether1.3807
 description N7K2-VDC2_ASR1_ERSAF
vrf lombardia_ersaf
ipv4 address 172.18.129.29 255.255.255.252
encapsulation dot1q 3807
!
interface Bundle-Ether1.3808
description N7K2-VDC2_ASR1_ENTI_SHARED
vrf lombardia_enti_shared
ipv4 address 172.18.129.33 255.255.255.252
encapsulation dot1q 3808
!
interface Bundle-Ether1.3809
description N7K2-VDC2_ASR1_FINLOMBARDA
vrf lombardia_finlombarda
ipv4 address 172.18.129.37 255.255.255.252
encapsulation dot1q 3809
!
interface Bundle-Ether1.3810
description N7K2-VDC2_ASR1_ARIFL
vrf lombardia_arifl
ipv4 address 172.18.129.41 255.255.255.252
encapsulation dot1q 3810
!
interface Bundle-Ether1.3813
description N7K2-VDC2_ASR1_PROT_CIV
vrf lombardia_prot_civ
ipv4 address 172.18.129.49 255.255.255.252
encapsulation dot1q 3813
!
interface Bundle-Ether1.3814
description N7K2-VDC2_ASR1_FLEET_MNGT
vrf lombardia_fleet_mngt
ipv4 address 172.18.129.53 255.255.255.252
encapsulation dot1q 3814
!
interface Bundle-Ether1.3815
description N7K2-VDC2_ASR1_ILSPA
vrf lombardia_ilspa
ipv4 address 172.18.129.57 255.255.255.252
encapsulation dot1q 3815
!
interface Bundle-Ether1.3850
description N7K2-VDC2_ASR1_MAN_VOIP
vrf lombardia_voip_inf
ipv4 address 172.18.129.201 255.255.255.252
encapsulation dot1q 3850
!
interface Bundle-Ether1.3851
description N7K2-VDC2_ASR1_MAN_TORNELLI
vrf lombardia_tornelli
ipv4 address 172.18.129.205 255.255.255.252
encapsulation dot1q 3851
!
interface Bundle-Ether1.3852
description N7K2-VDC2_ASR1_MAN_EXTRANET
vrf lombardia_FW_ext
ipv4 address 172.18.129.209 255.255.255.252
encapsulation dot1q 3852
!
interface Bundle-Ether1.3853
description N7K2-VDC2_ASR1_MAN_MCAST_FE
vrf lombardia_mcast_ext
ipv4 address 172.18.129.213 255.255.255.252
encapsulation dot1q 3853
!
interface Bundle-Ether1.3854
description N7K2-VDC2_ASR1_MAN_STR_BE
vrf lombardia_stream_be
ipv4 address 172.18.129.217 255.255.255.252
encapsulation dot1q 3854
!
interface Bundle-Ether1.3855
description N7K2-VDC2_ASR1_GUEST
vrf lombardia_guest
ipv4 address 172.18.129.221 255.255.255.252
encapsulation dot1q 3855
!
interface Bundle-Ether1.3856
description N7K2-VDC2_ASR1_MNGT
vrf lombardia_mngt
ipv4 address 172.18.129.225 255.255.255.252
encapsulation dot1q 3856
!
interface Bundle-Ether1.3857
description N7K2-VDC2_ASR1_REMEDIATION
vrf lombardia_remediation
ipv4 address 172.18.129.229 255.255.255.252
encapsulation dot1q 3857
!
interface Bundle-Ether1.3858
description N7K2-VDC2_ASR1_NFS_DMZ
vrf lombardia_nfs_dmz
ipv4 address 172.18.129.233 255.255.255.252
encapsulation dot1q 3858
!
interface Bundle-Ether1.3859
description N7K2-VDC2_ASR1_MOBILE
vrf lombardia_mobile
ipv4 address 172.18.129.237 255.255.255.252
encapsulation dot1q 3859
!
interface Bundle-Ether1.3860
description N7K2-VDC2_ASR1_ARCA
vrf lombardia_arca
ipv4 address 172.18.129.241 255.255.255.252
encapsulation dot1q 3860
!
interface Bundle-Ether2
service-policy output SERVICE-POLICY-LAN2WAN
!
interface Bundle-Ether2.42
vrf lombardia_prot_civ
ipv4 address 172.16.254.78 255.255.255.252
encapsulation dot1q 42
!
interface Bundle-Ether2.104
vrf lombardia
ipv4 address 172.16.254.2 255.255.255.252
 encapsulation dot1q 104
!
interface Bundle-Ether2.429
vrf lombardia_lispa
ipv4 address 172.16.254.10 255.255.255.252
encapsulation dot1q 429
!
interface Bundle-Ether2.430
vrf lombardia_arpa
ipv4 address 172.16.254.14 255.255.255.252
encapsulation dot1q 430
!
interface Bundle-Ether2.431
vrf lombardia_ersaf
ipv4 address 172.16.254.18 255.255.255.252
encapsulation dot1q 431
!
interface Bundle-Ether2.432
vrf lombardia_cestec
ipv4 address 172.16.254.22 255.255.255.252
encapsulation dot1q 432
!
interface Bundle-Ether2.433
vrf lombardia_eupolis
ipv4 address 172.16.254.26 255.255.255.252
encapsulation dot1q 433
!
interface Bundle-Ether2.434
vrf lombardia_enti_shared
ipv4 address 172.16.254.30 255.255.255.252
encapsulation dot1q 434
!
interface Bundle-Ether2.435
vrf lombardia_voip_inf
ipv4 address 172.16.254.34 255.255.255.252
encapsulation dot1q 435
!
interface Bundle-Ether2.436
vrf lombardia_tornelli
ipv4 address 172.16.254.38 255.255.255.252
encapsulation dot1q 436
!
interface Bundle-Ether2.437
ipv4 address 172.16.254.42 255.255.255.252
encapsulation dot1q 437
!
interface Bundle-Ether2.438
vrf lombardia_mngt
ipv4 address 172.16.254.46 255.255.255.252
encapsulation dot1q 438
!
interface Bundle-Ether2.439
vrf lombardia_mcast_ext
ipv4 address 172.16.254.50 255.255.255.252
encapsulation dot1q 439
!
interface Bundle-Ether2.440
vrf lombardia_stream_be
ipv4 address 172.16.254.54 255.255.255.252
 encapsulation dot1q 440
!
interface Bundle-Ether2.441
vrf lombardia_remediation
ipv4 address 172.16.254.58 255.255.255.252
encapsulation dot1q 441
!
interface Bundle-Ether2.442
vrf lombardia_guest
ipv4 address 172.16.254.62 255.255.255.252
encapsulation dot1q 442
!
interface Bundle-Ether2.457
vrf lombardia_finlombarda
ipv4 address 172.16.254.66 255.255.255.252
encapsulation dot1q 457
!
interface Bundle-Ether2.458
vrf lombardia_arifl
ipv4 address 172.16.254.70 255.255.255.252
encapsulation dot1q 458
!
interface Bundle-Ether2.619
vrf lombardia_mobile
ipv4 address 172.16.254.74 255.255.255.252
encapsulation dot1q 619
!
interface Bundle-Ether2.971
vrf lombardia_consiglio
ipv4 address 172.16.254.6 255.255.255.252
encapsulation dot1q 971
!
interface Loopback0
ipv4 address 192.168.254.21 255.255.255.255
!
interface Loopback7
ipv4 address 7.1.43.87 255.255.255.255
!
interface Loopback86
vrf lombardia_mngt
ipv4 address 10.35.0.102 255.255.255.255
!
interface Loopback87
ipv4 address 10.51.255.2 255.255.255.255
!
interface Loopback111
vrf lombardia_mngt
ipv4 address 10.32.253.21 255.255.255.255
!
interface Loopback112
vrf lombardia_FW_ext
ipv4 address 10.36.255.21 255.255.255.255
!
interface MgmtEth0/RSP0/CPU0/0
shutdown
!
interface MgmtEth0/RSP0/CPU0/1
vrf MGMT
ipv4 address 10.139.254.240 255.255.255.0
!
interface MgmtEth0/RSP1/CPU0/0
shutdown
!
interface MgmtEth0/RSP1/CPU0/1
ipv4 address 10.1.1.1 255.255.255.252
!
interface TenGigE0/0/0/0
description to ASR9K1-Pirelli
cdp
mtu 9000
service-policy output SERVICE-POLICY-LAN2MAN
ipv4 address 192.168.255.25 255.255.255.252
!
interface TenGigE0/0/0/1
description to ASR9K1-DonMinzoni
cdp
mtu 9000
service-policy output SERVICE-POLICY-LAN2MAN
ipv4 address 192.168.255.29 255.255.255.252
!
interface TenGigE0/0/0/1.100
vrf lombardia_mcast_ext
ipv4 address 172.16.129.253 255.255.255.252
shutdown
encapsulation dot1q 100
!
interface TenGigE0/0/0/2
description to Nexus 7000 #1
bundle id 1 mode active
cdp
!
interface TenGigE0/0/0/3
description LISPA_VSS_1
cdp
!
interface TenGigE0/0/0/3.4041
description LISPA_VSS_1_ASR1_GIUNTA
vrf lombardia
ipv4 address 192.168.201.1 255.255.255.252
encapsulation dot1q 4041
!
interface TenGigE0/0/0/3.4042
description LISPA_VSS_1_ASR1_CONSIGLIO
vrf lombardia_consiglio
ipv4 address 192.168.202.1 255.255.255.252
encapsulation dot1q 4042
!
interface TenGigE0/0/0/3.4043
description LISPA_VSS_1_ASR1_ARPA
vrf lombardia_arpa
ipv4 address 192.168.203.1 255.255.255.252
encapsulation dot1q 4043
!
interface TenGigE0/0/0/3.4044
description LISPA_VSS_1_ASR1_LISPA
vrf lombardia_lispa
ipv4 address 192.168.204.1 255.255.255.252
encapsulation dot1q 4044
!
interface TenGigE0/0/0/3.4045
description LISPA_VSS_1_ASR1_CESTEC
vrf lombardia_cestec
ipv4 address 192.168.205.1 255.255.255.252
encapsulation dot1q 4045
!
interface TenGigE0/0/0/3.4046
description LISPA_VSS_1_ASR1_EUPOLIS
vrf lombardia_eupolis
ipv4 address 192.168.206.1 255.255.255.252
encapsulation dot1q 4046
!
interface TenGigE0/0/0/3.4047
description LISPA_VSS_1_ASR1_ERSAF
vrf lombardia_ersaf
ipv4 address 192.168.207.1 255.255.255.252
encapsulation dot1q 4047
!
interface TenGigE0/0/0/3.4048
description LISPA_VSS_1_ASR1_ENTI_SHARED
vrf lombardia_enti_shared
ipv4 address 192.168.208.1 255.255.255.252
encapsulation dot1q 4048
!
interface TenGigE0/0/0/3.4049
description LISPA_VSS_1_ASR1_FINLOMBARDA
vrf lombardia_finlombarda
ipv4 address 192.168.209.1 255.255.255.252
encapsulation dot1q 4049
!
interface TenGigE0/0/0/3.4050
description LISPA_VSS_1_ASR1_ARIFL
vrf lombardia_arifl
ipv4 address 192.168.210.1 255.255.255.252
encapsulation dot1q 4050
!
interface TenGigE0/0/0/3.4051
description LISPA_VSS_1_ASR1_GUEST
vrf lombardia_guest
ipv4 address 192.168.214.1 255.255.255.252
encapsulation dot1q 4051
!
interface TenGigE0/0/0/3.4052
description LISPA_VSS_1_ASR1_CONSIGLIO_INTERNET
vrf lombardia_consiglio_internet
ipv4 address 192.168.215.1 255.255.255.252
encapsulation dot1q 4052
!
interface TenGigE0/0/0/3.4053
description LISPA_VSS_1_ASR1_PROT_CIV
vrf lombardia_prot_civ
ipv4 address 192.168.216.1 255.255.255.252
encapsulation dot1q 4053
!
interface TenGigE0/0/0/3.4054
description LISPA_VSS_1_ASR1_FLEET_MNGT
vrf lombardia_fleet_mngt
ipv4 address 192.168.217.1 255.255.255.252
 encapsulation dot1q 4054
!
interface TenGigE0/0/0/3.4055
description LISPA_VSS_1_ASR1_ILSPA
vrf lombardia_ilspa
ipv4 address 192.168.218.1 255.255.255.252
encapsulation dot1q 4055
!
interface TenGigE0/0/0/3.4056
description LISPA_VSS_1_ASR1_TORNELLI
vrf lombardia_tornelli
ipv4 address 192.168.211.1 255.255.255.252
encapsulation dot1q 4056
!
interface TenGigE0/0/0/3.4060
description LISPA_VSS_1_ASR1_STREAM_BE
vrf lombardia_stream_be
ipv4 address 192.168.212.1 255.255.255.252
encapsulation dot1q 4060
!
interface TenGigE0/0/0/3.4061
description LISPA_VSS_1_ASR1_NFS_DMZ
vrf lombardia_nfs_dmz
ipv4 address 192.168.213.1 255.255.255.252
encapsulation dot1q 4061
!
interface TenGigE0/1/0/0
description to ASR9K1-Lombardia
cdp
mtu 9000
service-policy output SERVICE-POLICY-LAN2MAN
ipv4 address 192.168.255.2 255.255.255.252
!
interface TenGigE0/1/0/1
description to ASR9K2-Taramelli
cdp
mtu 9000
service-policy output SERVICE-POLICY-LAN2MAN
ipv4 address 192.168.255.133 255.255.255.252
!
interface TenGigE0/1/0/1.100
vrf lombardia_mcast_ext
ipv4 address 172.16.129.249 255.255.255.252
shutdown
encapsulation dot1q 100
!
interface TenGigE0/1/0/2
description to Nexus 7000 #2
bundle id 1 mode active
cdp
!
interface TenGigE0/1/0/3
description link NNI
bundle id 2 mode active
cdp
load-interval 30
!
interface TenGigE0/2/0/0
description 4500-RemoteAccess
!
interface TenGigE0/2/0/0.3401
vrf lombardia
ipv4 address 10.139.255.17 255.255.255.252
encapsulation dot1q 3401
!
interface TenGigE0/2/0/0.3402
vrf lombardia_consiglio
ipv4 address 10.179.255.17 255.255.255.252
encapsulation dot1q 3402
!
interface TenGigE0/2/0/0.3403
vrf lombardia_arpa
ipv4 address 10.11.255.17 255.255.255.252
encapsulation dot1q 3403
!
interface TenGigE0/2/0/0.3405
vrf lombardia_cestec
ipv4 address 10.187.255.17 255.255.255.252
encapsulation dot1q 3405
!
interface TenGigE0/2/0/0.3406
vrf lombardia_eupolis
ipv4 address 10.175.255.17 255.255.255.252
encapsulation dot1q 3406
!
interface TenGigE0/2/0/0.3407
vrf lombardia_ersaf
ipv4 address 10.183.255.17 255.255.255.252
encapsulation dot1q 3407
!
interface TenGigE0/2/0/0.3408
vrf lombardia_enti_shared
ipv4 address 10.189.255.17 255.255.255.252
encapsulation dot1q 3408
!
interface TenGigE0/2/0/0.3409
vrf lombardia_finlombarda
ipv4 address 10.166.255.17 255.255.255.252
encapsulation dot1q 3409
!
interface TenGigE0/2/0/0.3410
vrf lombardia_arifl
ipv4 address 10.167.255.17 255.255.255.252
encapsulation dot1q 3410
!
interface TenGigE0/2/0/0.3411
vrf lombardia_mngt
ipv4 address 10.33.1.17 255.255.255.252
encapsulation dot1q 3411
!
interface TenGigE0/2/0/0.3414
vrf lombardia_stream_be
ipv4 address 10.37.255.17 255.255.255.252
encapsulation dot1q 3414
!
interface TenGigE0/2/0/0.3415
vrf lombardia_voip_inf
ipv4 address 10.39.255.17 255.255.255.252
 encapsulation dot1q 3415
!
interface TenGigE0/2/0/0.3416
vrf lombardia_arca
ipv4 address 10.165.255.17 255.255.255.252
encapsulation dot1q 3416
!
interface TenGigE0/2/0/0.3417
vrf lombardia_mobile
ipv4 address 10.52.255.17 255.255.255.252
encapsulation dot1q 3417
!
interface TenGigE0/2/0/0.3418
vrf lombardia_prot_civ
ipv4 address 10.171.255.17 255.255.255.252
encapsulation dot1q 3418
!
interface TenGigE0/2/0/0.3419
vrf lombardia_tornelli
ipv4 address 10.43.255.17 255.255.255.252
encapsulation dot1q 3419
!
interface TenGigE0/2/0/0.3420
vrf lombardia_fleet_mngt
ipv4 address 10.54.157.17 255.255.255.252
encapsulation dot1q 3420
!
interface TenGigE0/2/0/0.3421
vrf lombardia_ilspa
ipv4 address 10.161.255.17 255.255.255.252
encapsulation dot1q 3421
!
interface TenGigE0/2/0/1
shutdown
!
interface TenGigE0/2/0/2
l2transport
!
!
interface TenGigE0/2/0/3
description link NNI
bundle id 2 mode active
cdp
load-interval 30
!
rd-set RD_LISPA
65535:4429
end-set
!
extcommunity-set rt ARCA_RT
65535:4772
end-set
!
extcommunity-set rt ARPA_RT
65535:4430
end-set
!
extcommunity-set rt ENTI_RT
65535:4429,
 65535:4430,
65535:4431,
65535:4432,
65535:4433,
65535:4434,
65535:971,
65535:4457,
65535:4458,
65535:4438,
65535:4619,
65535:4772,
65535:5042
end-set
!
extcommunity-set rt MNGT_RT
65535:4438
end-set
!
extcommunity-set rt VOIP_RT
65535:4435
end-set
!
extcommunity-set rt ARIFL_RT
65535:4458
end-set
!
extcommunity-set rt ERSAF_RT
65535:4431
end-set
!
extcommunity-set rt FLEET_RT
65535:5854
end-set
!
extcommunity-set rt GUEST_RT
65535:4442
end-set
!
extcommunity-set rt ILSPA_RT
65535:6024
end-set
!
extcommunity-set rt LISPA_RT
65535:4429
end-set
!
extcommunity-set rt CESTEC_RT
65535:4432
end-set
!
extcommunity-set rt GIUNTA_RT
65535:104
end-set
!
extcommunity-set rt MOBILE_RT
65535:4619
end-set
!
extcommunity-set rt STREAM_RT
 65535:4440
end-set
!
extcommunity-set rt EUPOLIS_RT
65535:4433
end-set
!
extcommunity-set rt FW_MNGT_RT
65535:4437
end-set
!
extcommunity-set rt PROT_CIV_RT
65535:5042
end-set
!
extcommunity-set rt TORNELLI_RT
65535:4436
end-set
!
extcommunity-set rt CONSIGLIO_RT
65535:971
end-set
!
extcommunity-set rt ENTI_SHARED_RT
65535:4434
end-set
!
extcommunity-set rt FINLOMBARDA_RT
65535:4457
end-set
!
extcommunity-set rt RLMatchAllEnti
65535:104,
65535:4443,
65535:4430,
65535:4432,
65535:971,
65535:4434,
65535:4431,
65535:4433,
65535:4429,
65535:4457,
65535:4458,
65535:4438,
65535:4619
end-set
!
extcommunity-set rt VIDEOGUIDA_PL_RT
65535:53
end-set
!
extcommunity-set rt LOMBARDIA_FW_EXT_RT
65535:4443
end-set
!
prefix-set Loop112
10.36.255.21/32
end-set
!
prefix-set ARCA_PREFIX
10.165.0.0/16 le 32
end-set
!
prefix-set ARPA_PREFIX
10.8.0.0/14 le 32,
10.20.0.0/16 le 32,
172.16.1.0/24,
172.16.2.0/24
end-set
!
prefix-set MNGT_PREFIX
10.32.255.0/24,
10.32.2.0/24,
10.33.255.0/24,
10.33.254.0/24,
10.33.244.0/24,
10.32.253.0/24 le 32,
10.33.253.0/24 le 32,
10.34.255.0/24,
10.32.247.0/24,
10.32.248.0/22,
10.33.248.0/22,
10.34.248.0/22,
10.33.0.0/24,
10.33.3.0/24 le 32,
10.35.0.0/16 le 27
end-set
!
prefix-set ARIFL_PREFIX
10.167.0.0/16 le 32
end-set
!
prefix-set ERSAF_PREFIX
10.180.0.0/14 le 32,
172.17.0.0/24,
172.17.1.0/24,
172.17.2.0/24,
172.17.128.0/24
end-set
!
prefix-set FLEET_PREFIX
10.54.0.0/16 le 32
end-set
!
prefix-set GUEST_PREFIX
10.44.0.0/22,
10.44.4.0/22,
10.44.8.0/21,
10.44.64.0/22,
10.44.68.0/22,
10.44.127.0/24,
10.44.128.0/22,
10.44.132.0/22,
10.45.0.0/16 le 24
end-set
!
prefix-set ILSPA_PREFIX
10.161.0.0/16 le 32
end-set
!
prefix-set LISPA_PREFIX
end-set
!
prefix-set PREFIX_FLEET
10.54.0.0/16 le 32
end-set
!
prefix-set PREFIX_ILSPA
10.161.0.0/16 le 32
end-set
!
prefix-set CESTEC_PREFIX
10.184.0.0/14 le 32
end-set
!
prefix-set FW_EXT_PREFIX
10.36.0.0/24,
10.36.64.0/24,
10.36.128.0/24,
10.36.255.21/32,
10.36.255.22/32,
10.36.1.0/24
end-set
!
prefix-set GIUNTA_PREFIX
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0,
10.211.1.0/24
end-set
!
prefix-set MOBILE_PREFIX
10.52.0.0/16 le 32
end-set
!
prefix-set DEFAULT_PREFIX
0.0.0.0/0,
10.211.1.0/24,
10.211.2.0/24,
10.192.0.0/10,
10.39.254.0/24,
10.192.224.0/19,
10.221.224.0/19
end-set
!
prefix-set EUPOLIS_PREFIX
10.172.8.0/22,
10.173.64.0/22,
10.173.68.0/22,
10.172.20.0/24,
10.172.74.0/24,
10.172.4.0/22,
10.172.108.0/24,
10.173.50.0/29,
10.173.251.188/30,
10.172.0.0/14 le 24
end-set
!
prefix-set FW_MNGT_PREFIX
10.51.0.0/29,
10.51.64.0/29
end-set
!
prefix-set MNGT_SEC_PREFIX
10.33.0.0/24
end-set
!
prefix-set PROT_CIV_PREFIX
10.168.0.0/14 le 32
end-set
!
prefix-set TORNELLI_PREFIX
10.40.0.0/14 le 32
end-set
!
prefix-set VOIP_NEW_PREFIX
10.129.49.0/24,
10.139.49.0/24,
10.131.68.0/22,
10.39.129.0/24,
10.39.0.0/16 le 24
end-set
!
prefix-set ARPA_MNGT_PREFIX
10.10.0.0/20,
10.10.36.0/24
end-set
!
prefix-set CONSIGLIO_PREFIX
10.176.0.0/14 le 32
end-set
!
prefix-set LISPA_PREFIX_ARCA
0.0.0.0/0,
10.192.0.0/10
end-set
!
prefix-set LISPA_PREFIX_ARPA
10.192.0.0/10,
10.211.1.0/24,
10.211.2.0/24,
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_ENTE
0.0.0.0/0,
10.192.0.0/10,
10.192.224.0/19,
10.221.224.0/19,
10.211.1.0/24,
10.211.2.0/24
end-set
!
prefix-set LISPA_PREFIX_MNGT
0.0.0.0/0
end-set
!
prefix-set CESTEC_FARM_PREFIX
10.184.17.0/24
end-set
!
prefix-set ENTI_SHARED_PREFIX
10.188.0.0/16 le 32,
10.189.0.0/16 le 32,
10.190.250.0/24 le 32,
10.190.251.0/24 le 32,
10.11.12.0/22
end-set
!
prefix-set FINLOMBARDA_PREFIX
10.166.0.0/16 le 32
end-set
!
prefix-set FW_EXT_MNGT_PREFIX
10.36.1.0/24,
10.36.66.0/24,
10.36.64.0/24,
10.128.108.0/22,
10.139.253.0/24,
10.131.253.0/24,
10.131.112.0/24,
10.36.65.0/24,
10.128.136.0/28,
10.128.136.16/28
end-set
!
prefix-set GIUNTA_PREFIX_ARCA
0.0.0.0/0,
10.192.0.0/10,
10.211.1.0/24,
10.211.2.0/24
end-set
!
prefix-set GIUNTA_PREFIX_ARPA
10.192.0.0/10
end-set
!
prefix-set GIUNTA_PREFIX_MNGT
0.0.0.0/0,
10.128.46.0/24,
10.131.46.0/24,
10.139.46.0/24,
10.139.12.0/22,
10.128.106.0/23,
10.131.253.0/24,
10.145.106.0/24
end-set
!
prefix-set LISPA_PREFIX_ARIFL
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0,
10.192.0.0/10,
10.211.1.0/24,
10.211.2.0/24
end-set
!
prefix-set LISPA_PREFIX_ERSAF
10.192.0.0/10,
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_FLEET
10.211.1.0/24,
10.211.2.0/24,
10.219.160.0/21,
10.220.8.0/22,
10.220.32.0/21,
10.220.40.0/21,
10.220.57.0/24,
10.220.58.0/24,
10.212.0.0/16,
10.219.96.0/24,
10.221.0.0/18 le 24
end-set
!
prefix-set LISPA_PREFIX_GUEST
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_ILSPA
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0,
10.192.0.0/10
end-set
!
prefix-set MNGT_FW_EXT_PREFIX
10.32.2.0/24,
10.33.0.0/24,
10.33.247.0/24,
10.32.248.0/22,
10.33.248.0/22,
10.34.248.0/22,
10.32.255.0/24,
10.33.255.0/24,
10.34.255.0/24,
10.35.0.0/16 le 27
end-set
!
prefix-set DMZ_COMDASYS_PREFIX
10.39.254.0/24
end-set
!
prefix-set EXTRA_STREAM_PREFIX
10.37.128.200/32,
10.37.128.201/32
end-set
!
prefix-set GIUNTA_FLEET_PREFIX
10.128.0.0/11 le 32,
10.160.0.0/16 le 32,
 10.163.0.0/16 le 32
end-set
!
prefix-set GIUNTA_PREFIX_ARIFL
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0,
10.211.1.0/24,
10.211.2.0/24
end-set
!
prefix-set GIUNTA_PREFIX_ERSAF
10.192.0.0/10,
10.192.224.0/19,
10.221.224.0/19,
10.211.1.0/24,
10.211.2.0/24
end-set
!
prefix-set GIUNTA_PREFIX_GUEST
0.0.0.0/0
end-set
!
prefix-set GIUNTA_PREFIX_ILSPA
10.192.224.0/19,
10.221.224.0/19,
10.192.0.0/10,
0.0.0.0/0,
10.211.1.0/24,
10.211.2.0/24
end-set
!
prefix-set LISPA_PREFIX_CESTEC
10.192.0.0/10,
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_FW_EXT
10.192.224.0/19,
10.221.224.0/19,
10.192.0.0/10,
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_GIUNTA
0.0.0.0/0,
10.192.0.0/10,
10.192.224.0/19,
10.221.224.0/19
end-set
!
prefix-set LISPA_PREFIX_MOBILE
0.0.0.0/0
end-set
!
prefix-set MNGT_FW_MNGT_PREFIX
10.32.2.0/24
end-set
!
prefix-set STREAM_EXTRA_PREFIX
10.36.255.21/32
end-set
!
prefix-set ARPA_PREFIX_PROT_CIV
10.10.56.0/22,
10.10.48.0/23,
10.10.52.0/22,
10.10.60.0/22
end-set
!
prefix-set CONSIGLIO_SEC_PREFIX
10.177.0.0/16,
10.157.0.0/16
end-set
!
prefix-set GIUNTA_PREFIX_CESTEC
10.192.0.0/10
end-set
!
prefix-set GIUNTA_PREFIX_FW_EXT
10.192.224.0/19,
10.221.224.0/19,
10.192.0.0/10,
0.0.0.0/0
end-set
!
prefix-set GIUNTA_PREFIX_MOBILE
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_EUPOLIS
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0,
10.192.0.0/10,
10.211.1.0/24,
10.211.2.0/24
end-set
!
prefix-set LOOPBACK_MNGT_PREFIX
10.32.253.21/32,
10.35.0.102/32
end-set
!
prefix-set PROT_CIV_PREFIX_ARPA
10.169.129.0/24,
10.169.108.0/22
end-set
!
prefix-set VIDEOGUIDA_PL_PREFIX
10.53.0.0/24
end-set
!
prefix-set GIUNTA_PREFIX_EUPOLIS
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_PROT_CIV
10.192.0.0/10,
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_TORNELLI
10.192.0.0/10,
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_VOIP_INF
10.192.224.0/19,
10.221.224.0/19,
10.192.0.0/10,
0.0.0.0/0
end-set
!
prefix-set GIUNTA_PREFIX_PROT_CIV
10.192.0.0/10,
10.128.0.0/22,
10.128.4.0/22,
10.128.8.0/22,
10.128.12.0/22,
10.128.16.0/22,
10.128.20.0/22,
10.128.24.0/22,
10.128.28.0/22,
10.128.32.0/22,
10.128.80.0/21,
10.128.115.0/24,
10.128.46.0/24,
10.131.46.0/24,
10.139.46.0/24,
10.139.12.0/22,
10.139.80.0/21,
10.131.16.0/22,
10.148.4.0/22,
10.141.4.0/22,
10.163.4.0/22,
10.142.4.0/22,
10.151.4.0/22,
10.143.4.0/22,
10.147.4.0/22,
10.144.4.0/22,
10.149.4.0/22,
10.160.4.0/22,
10.146.4.0/22
end-set
!
prefix-set GIUNTA_PREFIX_TORNELLI
10.192.0.0/10
end-set
!
prefix-set GIUNTA_PREFIX_VOIP_INF
10.192.224.0/19,
10.221.224.0/19,
10.192.0.0/10,
0.0.0.0/0
end-set
!
prefix-set LISPA_PREFIX_CONSIGLIO
10.192.0.0/10,
0.0.0.0/0,
10.211.1.0/24,
10.211.2.0/24
end-set
!
prefix-set FINLOMBARDA_FARM_PREFIX
10.166.5.0/24
end-set
!
prefix-set GIUNTA_PREFIX_CONSIGLIO
10.192.0.0/10
end-set
!
prefix-set LOOPBACK_FW_MNGT_PREFIX
7.1.43.87/32,
10.51.255.2/32,
172.16.254.40/30,
172.16.129.0/30,
172.18.129.0/30
end-set
!
prefix-set LISPA_PREFIX_ENTI_SHARED
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0,
10.192.0.0/10
end-set
!
prefix-set LISPA_PREFIX_FINLOMBARDA
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0,
10.192.0.0/10
end-set
!
prefix-set GIUNTA_PREFIX_ENTI_SHARED
10.192.224.0/19,
10.221.224.0/19,
0.0.0.0/0,
10.211.1.0/24
end-set
!
prefix-set GIUNTA_PREFIX_FINLOMBARDA
10.192.224.0/19,
10.221.224.0/19,
10.192.0.0/10,
0.0.0.0/0,
10.211.1.0/24
end-set
!
prefix-set VIDEOGUIDA_EXTRANET_PREFIX
10.36.0.0/24,
10.36.64.0/24,
10.128.108.0/22
end-set
!
community-set CommSetVoIPMAN
65000:998
end-set
!
community-set CommSetVoIPWAN
65000:999
end-set
!
community-set CommunitySetEntiMAN
65000:996
end-set
!
route-policy block
drop
end-policy
!
route-policy SET-LP
if destination in CESTEC_FARM_PREFIX then
set local-preference 150
else
pass
endif
end-policy
!
route-policy permit
pass
end-policy
!
route-policy BGP_PIC
set path-selection backup 1 install multipath-protect advertise
end-policy
!
route-policy red_mgmt
if destination in LOOPBACK_MNGT_PREFIX then
pass
else
drop
endif
end-policy
!
route-policy red_FW_mgmt
if destination in LOOPBACK_FW_MNGT_PREFIX then
pass
else
drop
endif
end-policy
!
route-policy FLEET-TO-VSS
if destination in PREFIX_FLEET then
pass
else
drop
endif
end-policy
!
route-policy IMPORT_LISPA
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
else
pass
endif
end-policy
!
route-policy RL-NNI-PRI-in
if community matches-any CommSetVoIPWAN then
drop
else
pass
endif
end-policy
!
route-policy SET-LP-CESTEC
if destination in CESTEC_FARM_PREFIX then
set local-preference 150
else
pass
endif
end-policy
!
route-policy RL-NNI-PRI-out
if community matches-any CommSetVoIPMAN or community matches-any CommSetVoIPWAN
then
drop
else
pass
endif
end-policy
!
route-policy IMPORT_LISPA_ENTI
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every EUPOLIS_RT and not destination in EUPOLIS_PREFIX
then
drop
endif
if extcommunity rt matches-every ARIFL_RT and not destination in ARIFL_PREFIX
then
drop
endif
if extcommunity rt matches-every ENTI_SHARED_RT and not destination in
ENTI_SHARED_PREFIX then
drop
endif
if extcommunity rt matches-every FINLOMBARDA_RT and not destination in
FINLOMBARDA_PREFIX then
drop
endif
if extcommunity rt matches-every ERSAF_RT and not destination in ERSAF_PREFIX
then
drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in MNGT_PREFIX then
drop
 endif
if extcommunity rt matches-every GUEST_RT and not destination in GUEST_PREFIX
then
drop
endif
if extcommunity rt matches-every ARPA_RT and not destination in ARPA_PREFIX then
drop
endif
if extcommunity rt matches-every CESTEC_RT and not destination in CESTEC_PREFIX
then
drop
endif
if extcommunity rt matches-every CONSIGLIO_RT and not destination in
CONSIGLIO_PREFIX then
drop
endif
if extcommunity rt matches-every MOBILE_RT and not destination in MOBILE_PREFIX
then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every ARCA_RT and not destination in ARCA_PREFIX then
drop
endif
if extcommunity rt matches-every PROT_CIV_RT and not destination in
PROT_CIV_PREFIX then
drop
endif
if extcommunity rt matches-every TORNELLI_RT and not destination in
TORNELLI_PREFIX then
drop
endif
if extcommunity rt matches-every ILSPA_RT and not destination in ILSPA_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT-FW_EXT-VOIP
if extcommunity rt matches-every VOIP_RT and not destination in VOIP_NEW_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT-VOIP-FW_EXT
if extcommunity rt matches-every LOMBARDIA_FW_EXT_RT and not destination in
FW_EXT_PREFIX then
drop
endif
pass
end-policy
!
route-policy IMPORT_FW_EXT_ENTI
 if extcommunity rt matches-any LISPA_RT and not destination in
LISPA_PREFIX_FW_EXT then
drop
endif
if extcommunity rt matches-any ENTI_RT and destination in DEFAULT_PREFIX then
drop
endif
if extcommunity rt matches-every VOIP_RT and not destination in VOIP_NEW_PREFIX
then
drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in
MNGT_FW_EXT_PREFIX then
drop
endif
if extcommunity rt matches-every VIDEOGUIDA_PL_RT and not destination in
VIDEOGUIDA_PL_PREFIX then
drop
endif
pass
end-policy
!
route-policy IMPORT_GIUNTA_MNGT
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_MNGT then
drop
endif
if extcommunity rt matches-every LOMBARDIA_FW_EXT_RT and not destination in
FW_EXT_MNGT_PREFIX then
drop
endif
if extcommunity rt matches-every CESTEC_RT and not destination in
CESTEC_FARM_PREFIX then
drop
endif
if extcommunity rt matches-every CONSIGLIO_RT and not destination in
CONSIGLIO_SEC_PREFIX then
drop
endif
if extcommunity rt matches-every FW_MNGT_RT and not destination in FW_MNGT_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_POLICY_ARCA
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_ARCA
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_ARCA then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ARCA then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_ARPA
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_ARPA
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_ARPA then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ARPA then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every PROT_CIV_RT and not destination in
PROT_CIV_PREFIX_ARPA then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in MNGT_SEC_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_MNGT
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_MNGT
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_MNGT then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_MNGT then
drop
endif
if extcommunity rt matches-every LOMBARDIA_FW_EXT_RT and not destination in
FW_EXT_MNGT_PREFIX then
drop
endif
if extcommunity rt matches-every CONSIGLIO_RT and not destination in
CONSIGLIO_SEC_PREFIX then
drop
endif
if extcommunity rt matches-every FW_MNGT_RT and not destination in
FW_MNGT_PREFIX then
drop
endif
if extcommunity rt matches-every ARPA_RT and not destination in
ARPA_MNGT_PREFIX then
drop
endif
pass
endif
end-policy
!
route-policy RED_CONNECT_FW_EXT
if destination in Loop112 then
pass
else
drop
endif
end-policy
!
route-policy RL-NNI-PRI-VoIP-in
if community matches-any CommSetVoIPWAN then
pass
else
drop
endif
end-policy
!
route-policy SET-LP-FINLOMBARDA
if destination in FINLOMBARDA_FARM_PREFIX then
set local-preference 150
else
pass
endif
end-policy
!
route-policy IMPORT_GIUNTA_GUEST
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_GUEST then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
 endif
if extcommunity rt matches-every GIUNTA_RT and not destination in GIUNTA_PREFIX
then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_MNGT_FW_MNGT
if extcommunity rt matches-every MNGT_RT and not destination in
MNGT_FW_MNGT_PREFIX then
drop
endif
pass
end-policy
!
route-policy IMPORT_POLICY_ARIFL
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_ARIFL
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_ARIFL then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ARIFL then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_ERSAF
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_ERSAF
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_ERSAF then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
 endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ERSAF then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_GUEST
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_GUEST
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_GUEST then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_GUEST then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_ILSPA
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_ILSPA
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_ILSPA then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ILSPA then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
 endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_LISPA
if extcommunity rt matches-every LISPA_RT then
pass
endif
if destination in LISPA_PREFIX_ENTE then
drop
endif
pass
end-policy
!
route-policy RL-NNI-PRI-VoIP-out
if community matches-any CommSetVoIPMAN then
pass
elseif extcommunity rt matches-any RLMatchAllEnti then
set community CommunitySetEntiMAN additive
endif
end-policy
!
route-policy IMPORT_LISPA_EUPOLIS
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every EUPOLIS_RT and not destination in EUPOLIS_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_POLICY_CESTEC
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_CESTEC
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_CESTEC then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_CESTEC then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in MNGT_SEC_PREFIX
then
drop
endif
 if extcommunity rt matches-every FINLOMBARDA_RT and destination in
FINLOMBARDA_FARM_PREFIX then
drop
endif
if extcommunity rt matches-every FINLOMBARDA_RT and not destination in
FINLOMBARDA_PREFIX then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_FW_EXT
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_FW_EXT
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_FW_EXT then
set local-preference 90
else
if extcommunity rt matches-any LISPA_RT and not destination in
LISPA_PREFIX_FW_EXT then
drop
endif
if extcommunity rt matches-any ENTI_RT and destination in DEFAULT_PREFIX then
drop
endif
if extcommunity rt matches-every VOIP_RT and not destination in VOIP_NEW_PREFIX
then
drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in
MNGT_FW_EXT_PREFIX then
drop
endif
if extcommunity rt matches-every VIDEOGUIDA_PL_RT and not destination in
VIDEOGUIDA_PL_PREFIX then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
if extcommunity rt matches-every STREAM_RT and not destination in
EXTRA_STREAM_PREFIX then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_GIUNTA
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_GIUNTA
then
set local-preference 95
 else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every EUPOLIS_RT and not destination in
EUPOLIS_PREFIX then
drop
endif
if extcommunity rt matches-every ARIFL_RT and not destination in ARIFL_PREFIX
then
drop
endif
if extcommunity rt matches-every ENTI_SHARED_RT and not destination in
ENTI_SHARED_PREFIX then
drop
endif
if extcommunity rt matches-every FINLOMBARDA_RT and not destination in
FINLOMBARDA_PREFIX then
drop
endif
if extcommunity rt matches-every ERSAF_RT and not destination in ERSAF_PREFIX
then
drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in MNGT_PREFIX
then
drop
endif
if extcommunity rt matches-every GUEST_RT and not destination in GUEST_PREFIX
then
drop
endif
if extcommunity rt matches-every ARPA_RT and not destination in ARPA_PREFIX
then
drop
endif
if extcommunity rt matches-every CESTEC_RT and not destination in CESTEC_PREFIX
then
drop
endif
if extcommunity rt matches-every CONSIGLIO_RT and not destination in
CONSIGLIO_PREFIX then
drop
endif
if extcommunity rt matches-every MOBILE_RT and not destination in MOBILE_PREFIX
then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every ARCA_RT and not destination in ARCA_PREFIX
then
drop
endif
if extcommunity rt matches-every PROT_CIV_RT and not destination in
PROT_CIV_PREFIX then
 drop
endif
if extcommunity rt matches-every TORNELLI_RT and not destination in
TORNELLI_PREFIX then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_MOBILE
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_MOBILE
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_MOBILE then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_MOBILE then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_VOIP_INF_ENTI
if extcommunity rt matches-any LISPA_RT and not destination in
LISPA_PREFIX_VOIP_INF then
drop
endif
if extcommunity rt matches-any ENTI_RT and destination in DEFAULT_PREFIX then
drop
endif
if extcommunity rt matches-every LOMBARDIA_FW_EXT_RT and not destination in
FW_EXT_PREFIX then
drop
endif
pass
end-policy
!
route-policy IMPORT_POLICY_EUPOLIS
if extcommunity rt matches-every LISPA_RT and destination in LISPA_PREFIX_EUPOLIS
then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_EUPOLIS then
 set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in GIUNTA_PREFIX
then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy RL-NNI-PRI-GIUNTA-out
if community matches-any CommSetVoIPWAN then
drop
else
pass
endif
end-policy
!
route-policy IMPORT_POLICY_PROT_CIV
if extcommunity rt matches-every LISPA_RT and destination in
LISPA_PREFIX_PROT_CIV then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in (10.192.0.0/10)
then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_PROT_CIV then
drop
endif
if extcommunity rt matches-every ARPA_RT and not destination in
ARPA_PREFIX_PROT_CIV then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_TORNELLI
 if extcommunity rt matches-every LISPA_RT and destination in
LISPA_PREFIX_TORNELLI then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_TORNELLI then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_TORNELLI then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_VOIP_INF
if extcommunity rt matches-every LISPA_RT and destination in
LISPA_PREFIX_VOIP_INF then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_VOIP_INF then
set local-preference 90
else
if extcommunity rt matches-any LISPA_RT and not destination in
LISPA_PREFIX_VOIP_INF then
drop
endif
if extcommunity rt matches-any ENTI_RT and destination in DEFAULT_PREFIX then
drop
endif
if extcommunity rt matches-every LOMBARDIA_FW_EXT_RT and not destination in
FW_EXT_PREFIX then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_CONSIGLIO
if extcommunity rt matches-every LISPA_RT and destination in
LISPA_PREFIX_CONSIGLIO then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_CONSIGLIO then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_CONSIGLIO then
drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in MNGT_SEC_PREFIX
then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_STREAM_BE
if extcommunity rt matches-every LOMBARDIA_FW_EXT_RT and not destination in
STREAM_EXTRA_PREFIX then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_ARCA
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ARCA then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_ARPA
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ARPA then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every PROT_CIV_RT and not destination in
PROT_CIV_PREFIX_ARPA then
drop
endif
pass
end-policy
!
route-policy IMPORT_POLICY_FLEET_MNGT
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_FLEET_PREFIX then
drop
 endif
if extcommunity rt matches-every CONSIGLIO_RT and not destination in
CONSIGLIO_PREFIX then
drop
endif
if extcommunity rt matches-every LISPA_RT and not destination in
LISPA_PREFIX_FLEET then
drop
endif
if extcommunity rt matches-every ARPA_RT and not destination in ARPA_PREFIX then
drop
endif
if extcommunity rt matches-every ERSAF_RT and not destination in ERSAF_PREFIX
then
drop
endif
if extcommunity rt matches-every CESTEC_RT and not destination in CESTEC_PREFIX
then
drop
endif
if extcommunity rt matches-every EUPOLIS_RT and not destination in EUPOLIS_PREFIX
then
drop
endif
if extcommunity rt matches-every ENTI_SHARED_RT and not destination in
ENTI_SHARED_PREFIX then
drop
endif
if extcommunity rt matches-every ARCA_RT and not destination in ARCA_PREFIX then
drop
endif
if extcommunity rt matches-every ARIFL_RT and not destination in ARIFL_PREFIX
then
drop
endif
if extcommunity rt matches-every FINLOMBARDA_RT and not destination in
FINLOMBARDA_PREFIX then
drop
endif
if extcommunity rt matches-every PROT_CIV_RT and not destination in
PROT_CIV_PREFIX then
drop
endif
if extcommunity rt matches-every LOMBARDIA_FW_EXT_RT and not destination in
FW_EXT_MNGT_PREFIX then
drop
endif
if extcommunity rt matches-every ILSPA_RT and not destination in ILSPA_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_ARIFL
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
 if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ARIFL then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_ERSAF
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ERSAF then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_POLICY_ENTI_SHARED
if extcommunity rt matches-every LISPA_RT and destination in
LISPA_PREFIX_ENTI_SHARED then
set local-preference 95
elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_ENTI_SHARED then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ENTI_SHARED then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_POLICY_FINLOMBARDA
if extcommunity rt matches-every LISPA_RT and destination in
LISPA_PREFIX_FINLOMBARDA then
set local-preference 95
 elseif extcommunity rt matches-every GIUNTA_RT and destination in
GIUNTA_PREFIX_FINLOMBARDA then
set local-preference 90
else
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_FINLOMBARDA then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every CESTEC_RT and destination in
CESTEC_FARM_PREFIX then
drop
endif
if extcommunity rt matches-every CESTEC_RT and not destination in CESTEC_PREFIX
then
drop
endif
if extcommunity rt matches-every FLEET_RT and not destination in FLEET_PREFIX
then
drop
endif
pass
endif
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_CESTEC
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_CESTEC then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in MNGT_SEC_PREFIX
then
drop
endif
if extcommunity rt matches-every FINLOMBARDA_RT and destination in
FINLOMBARDA_FARM_PREFIX then
drop
endif
if extcommunity rt matches-every FINLOMBARDA_RT and not destination in
FINLOMBARDA_PREFIX then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_MOBILE
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_MOBILE then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_PROT_CIV
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_PROT_CIV then
drop
endif
if extcommunity rt matches-every ARPA_RT and not destination in
ARPA_PREFIX_PROT_CIV then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_TORNELLI
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_TORNELLI then
drop
endif
pass
end-policy
!
route-policy IMPORT_EXTRANET_VIDEOGUIDA_PL
if extcommunity rt matches-every LOMBARDIA_FW_EXT_RT and destination in
VIDEOGUIDA_EXTRANET_PREFIX then
pass
endif
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_CONSIGLIO
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_CONSIGLIO then
 drop
endif
if extcommunity rt matches-every MNGT_RT and not destination in MNGT_SEC_PREFIX
then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_ENTI_SHARED
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_ENTI_SHARED then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
pass
end-policy
!
route-policy IMPORT_LISPA_GIUNTA_FINLOMBARDA
if extcommunity rt matches-every LISPA_RT and not destination in LISPA_PREFIX
then
drop
endif
if extcommunity rt matches-every GIUNTA_RT and not destination in
GIUNTA_PREFIX_FINLOMBARDA then
drop
endif
if extcommunity rt matches-every VOIP_RT and destination in DMZ_COMDASYS_PREFIX
then
drop
endif
if extcommunity rt matches-every CESTEC_RT and destination in CESTEC_FARM_PREFIX
then
drop
endif
if extcommunity rt matches-every CESTEC_RT and not destination in CESTEC_PREFIX
then
drop
endif
pass
end-policy
!
router static
vrf MGMT
address-family ipv4 unicast
0.0.0.0/0 10.139.254.254
!
!
!
router ospf 1
nsr
log adjacency changes
router-id 192.168.254.21
mpls ldp sync
fast-reroute per-link enable
nsf cisco
auto-cost reference-bandwidth 1000000
area 0
fast-reroute per-link enable
interface Loopback0
passive enable
!
interface TenGigE0/0/0/0
authentication-key encrypted 012155030A5B085C
authentication
network point-to-point
!
interface TenGigE0/0/0/1
authentication-key encrypted 073D724B1F591756
authentication
network point-to-point
!
interface TenGigE0/1/0/0
authentication-key encrypted 097E1D0E48551941
authentication
network point-to-point
!
interface TenGigE0/1/0/1
cost 50
authentication-key encrypted 097E1D0E48551941
authentication
network point-to-point
!
!
!
snmp-server traps bgp
router bgp 65535
nsr
timers bgp 2 6
bgp router-id 192.168.254.21
address-family ipv4 unicast
additional-paths receive
additional-paths send
redistribute connected route-policy red_FW_mgmt
!
address-family vpnv4 unicast
retain local-label 5
additional-paths receive
additional-paths send
advertise best-external
additional-paths selection route-policy BGP_PIC
!
address-family ipv4 mdt
!
neighbor 172.16.129.2
remote-as 65533
timers 2 6
 address-family ipv4 unicast
route-policy permit in
route-policy permit out
soft-reconfiguration inbound always
!
!
neighbor 172.16.254.41
remote-as 12874
timers 15 45
description "NNI Fastweb Management"
address-family ipv4 unicast
send-community-ebgp
route-policy permit in
route-policy permit out
soft-reconfiguration inbound always
!
!
neighbor 172.18.129.2
remote-as 65533
timers 2 6
address-family ipv4 unicast
route-policy permit in
route-policy permit out
soft-reconfiguration inbound always
!
!
neighbor 192.168.254.11
remote-as 65535
capability additional-paths receive
capability additional-paths send
description I-BGP to PE-Lombardia-1
update-source Loopback0
address-family ipv4 unicast
!
address-family vpnv4 unicast
!
address-family ipv4 mdt
!
!
neighbor 192.168.254.12
remote-as 65535
capability additional-paths receive
capability additional-paths send
description I-BGP to PE-Lombardia-2
update-source Loopback0
address-family ipv4 unicast
!
address-family vpnv4 unicast
!
address-family ipv4 mdt
!
!
neighbor 192.168.254.22
remote-as 65535
capability additional-paths receive
capability additional-paths send
description I-BGP to PE-Taramelli-2
update-source Loopback0
address-family ipv4 unicast
 !
address-family vpnv4 unicast
!
address-family ipv4 mdt
!
!
neighbor 192.168.254.31
remote-as 65535
capability additional-paths receive
capability additional-paths send
description I-BGP to PE-Pirelli-1
update-source Loopback0
address-family ipv4 unicast
!
address-family vpnv4 unicast
!
address-family ipv4 mdt
!
!
neighbor 192.168.254.32
remote-as 65535
capability additional-paths receive
capability additional-paths send
description I-BGP to PE-Pirelli-2
update-source Loopback0
address-family ipv4 unicast
!
address-family vpnv4 unicast
!
address-family ipv4 mdt
!
!
neighbor 192.168.254.41
remote-as 65535
capability additional-paths receive
capability additional-paths send
description I-BGP to PE-DonMinzoni-1
update-source Loopback0
address-family ipv4 unicast
!
address-family vpnv4 unicast
!
address-family ipv4 mdt
!
!
neighbor 192.168.254.42
remote-as 65535
capability additional-paths receive
capability additional-paths send
description I-BGP to PE-DonMinzoni-2
update-source Loopback0
address-family ipv4 unicast
!
address-family vpnv4 unicast
!
address-family ipv4 mdt
!
!
vrf lombardia
 rd 65535:104
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.139.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.6
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:104
!
!
neighbor 172.16.254.1
remote-as 12874
timers 15 45
description "NNI Ente GIUNTA"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-GIUNTA-out out
as-override
soft-reconfiguration inbound always
site-of-origin 65535:104
!
!
neighbor 172.18.129.6
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:104
!
!
neighbor 192.168.201.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:104
!
!
!
vrf lombardia_arca
rd 65535:4772
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.165.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4772
!
!
neighbor 172.16.129.242
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4772
!
!
neighbor 172.18.129.242
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4772
!
!
!
vrf lombardia_arpa
rd 65535:4430
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.11.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65535:44304500
!
!
neighbor 172.16.129.14
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
 soft-reconfiguration inbound always
site-of-origin 65535:44307000
!
!
neighbor 172.16.254.13
remote-as 12874
timers 15 45
description "NNI Ente ARPA"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4434
!
!
neighbor 172.18.129.14
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65535:44307000
!
!
neighbor 192.168.203.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4430
!
!
!
vrf lombardia_mngt
rd 65535:4438
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
redistribute connected route-policy red_mgmt
!
neighbor 10.33.1.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.226
remote-as 65533
address-family ipv4 unicast
route-policy permit in
 route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4438
!
!
neighbor 172.16.254.45
remote-as 12874
timers 15 45
description "NNI Regione Lombardia Management"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
soft-reconfiguration inbound always
!
!
neighbor 172.18.129.226
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4438
!
!
!
vrf lombardia_arifl
rd 65535:4458
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.167.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.42
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4458
!
!
neighbor 172.16.254.69
remote-as 12874
timers 15 45
description "NNI Regione Lombardia ARIFL"
address-family ipv4 unicast
send-community-ebgp
 route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4458
!
!
neighbor 172.18.129.42
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4458
!
!
neighbor 192.168.210.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4458
!
!
!
vrf lombardia_ersaf
rd 65535:4431
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.183.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.30
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4431
!
!
neighbor 172.16.254.17
remote-as 12874
timers 15 45
description "NNI Ente ERSAF"
address-family ipv4 unicast
 send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4431
!
!
neighbor 172.18.129.30
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4431
!
!
neighbor 192.168.207.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4431
!
!
!
vrf lombardia_guest
rd 65535:4442
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 172.16.129.222
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4442
!
!
neighbor 172.16.254.61
remote-as 12874
timers 15 45
description "NNI Guest"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4442
!
!
 neighbor 172.18.129.222
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4442
!
!
neighbor 192.168.214.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4442
!
!
!
vrf lombardia_ilspa
rd 65535:6024
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.161.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.58
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:6024
!
!
neighbor 172.18.129.58
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:6024
!
!
neighbor 192.168.218.2
remote-as 65533
 timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:6024
!
!
!
vrf lombardia_lispa
rd 65535:4429
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 172.16.129.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4429
!
!
neighbor 172.16.254.9
remote-as 12874
timers 15 45
description "NNI Ente LISPA"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
soft-reconfiguration inbound always
!
!
neighbor 172.18.129.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4429
!
!
neighbor 192.168.204.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4429
!
!
!
vrf lombardia_FW_ext
rd 65535:4443
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
redistribute connected route-policy RED_CONNECT_FW_EXT
!
neighbor 172.16.129.210
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4443
!
!
neighbor 172.18.129.210
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4443
!
!
!
vrf lombardia_cestec
rd 65535:4432
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.187.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.22
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4432
!
!
neighbor 172.16.254.21
remote-as 12874
timers 15 45
description "NNI Ente CESTEC"
address-family ipv4 unicast
send-community-ebgp
 route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4432
!
!
neighbor 172.18.129.22
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4432
!
!
neighbor 192.168.205.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy SET-LP-CESTEC in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4432
!
!
!
vrf lombardia_mobile
rd 65535:4619
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.52.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4619
!
!
neighbor 172.16.129.238
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4619
!
!
neighbor 172.16.254.73
remote-as 12874
timers 15 45
description "NNI VRF MOBILE"
 address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4619
!
!
neighbor 172.18.129.238
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4619
!
!
!
vrf lombardia_eupolis
rd 65535:4433
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.175.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.26
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4433
!
!
neighbor 172.16.254.25
remote-as 12874
timers 15 45
description "NNI Ente EUPOLIS"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4433
!
!
neighbor 172.18.129.26
 remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4433
!
!
neighbor 192.168.206.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4433
!
!
!
vrf lombardia_nfs_dmz
rd 65535:4444
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 172.16.129.234
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4444
!
!
neighbor 172.18.129.234
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4444
!
!
neighbor 192.168.213.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4444
!
!
!
vrf lombardia_prot_civ
rd 65535:5042
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.171.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.50
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:5042
!
!
neighbor 172.16.254.77
remote-as 12874
timers 15 45
description "NNI Ente Protezione Civile"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 65535:5042
!
!
neighbor 172.18.129.50
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:5042
!
!
neighbor 192.168.216.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:5042
!
!
!
vrf lombardia_tornelli
rd 65535:4436
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.43.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.206
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4436
!
!
neighbor 172.16.254.37
remote-as 12874
timers 15 45
description "NNI TORNELLI"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
soft-reconfiguration inbound always
!
!
neighbor 172.18.129.206
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4436
!
!
neighbor 192.168.211.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4436
!
!
!
vrf lombardia_voip_inf
rd 65535:4435
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.39.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 1:4435
!
!
neighbor 172.16.129.202
remote-as 65533
address-family ipv4 unicast
send-community-ebgp
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4435
!
!
neighbor 172.16.254.33
remote-as 12874
timers 15 45
description "NNI VoIP Infrastructures"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-VoIP-in in
route-policy RL-NNI-PRI-VoIP-out out
soft-reconfiguration inbound always
!
!
neighbor 172.18.129.202
remote-as 65533
address-family ipv4 unicast
send-community-ebgp
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4435
!
!
!
vrf lombardia_consiglio
rd 65535:971
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.179.255.18
remote-as 65533
address-family ipv4 unicast
 route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.10
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:971
!
!
neighbor 172.16.254.5
remote-as 12874
timers 15 45
description "NNI Ente CONSIGLIO"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:971
!
!
neighbor 172.18.129.10
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:971
!
!
neighbor 192.168.202.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:971
!
!
!
vrf lombardia_mcast_ext
rd 65535:4439
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 172.16.129.214
remote-as 65533
 address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.254.49
remote-as 12874
timers 15 45
description "NNI Multivast Extranet"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
soft-reconfiguration inbound always
!
!
neighbor 172.18.129.214
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
!
vrf lombardia_stream_be
rd 65535:4440
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.37.255.18
remote-as 65533
timers 15 45
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.218
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4440
!
!
neighbor 172.16.254.53
remote-as 12874
timers 15 45
description "NNI Streaming Backend"
address-family ipv4 unicast
 send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
soft-reconfiguration inbound always
!
!
neighbor 172.18.129.218
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4440
!
!
neighbor 192.168.212.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4440
!
!
!
vrf lombardia_fleet_mngt
rd 65535:5854
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.54.157.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.54
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:5854
!
!
neighbor 172.18.129.54
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
 soft-reconfiguration inbound always
site-of-origin 65533:5854
!
!
neighbor 192.168.217.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy FLEET-TO-VSS out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:5854
!
!
!
vrf lombardia_enti_shared
rd 65535:4434
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.189.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.34
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4434
!
!
neighbor 172.16.254.29
remote-as 12874
timers 15 45
description "NNI Enti Shared"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4434
!
!
neighbor 172.18.129.34
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
 as-override
soft-reconfiguration inbound always
site-of-origin 65533:4434
!
!
neighbor 192.168.208.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4434
!
!
!
vrf lombardia_finlombarda
rd 65535:4457
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 10.166.255.18
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
!
!
neighbor 172.16.129.38
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4457
!
!
neighbor 172.16.254.65
remote-as 12874
timers 15 45
description "NNI Regione Lombardia FINLOMBARDA"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
as-override
soft-reconfiguration inbound always
site-of-origin 12874:4457
!
!
neighbor 172.18.129.38
remote-as 65533
address-family ipv4 unicast
route-policy permit in
 route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4457
!
!
neighbor 192.168.209.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy SET-LP-FINLOMBARDA in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:4457
!
!
!
vrf lombardia_remediation
rd 65535:4441
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 172.16.129.230
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4441
!
!
neighbor 172.16.254.57
remote-as 12874
timers 15 45
description "NNI Remediation"
address-family ipv4 unicast
send-community-ebgp
route-policy RL-NNI-PRI-in in
route-policy RL-NNI-PRI-out out
soft-reconfiguration inbound always
!
!
neighbor 172.18.129.230
remote-as 65533
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 65533:4441
!
!
!
vrf lombardia_videoguida_pl
rd 65535:53
timers bgp 2 6
 label-allocation-mode per-ce
address-family ipv4 unicast
!
!
vrf lombardia_consiglio_internet
rd 65535:9999
timers bgp 2 6
label-allocation-mode per-ce
address-family ipv4 unicast
!
neighbor 192.168.215.2
remote-as 65533
timers 10 30
address-family ipv4 unicast
route-policy permit in
route-policy permit out
as-override
soft-reconfiguration inbound always
site-of-origin 198319:9999
!
!
!
!
l2vpn
pw-class pw-mpls
encapsulation mpls
!
!
xconnect group L2TEST
p2p TUNNEL
interface TenGigE0/2/0/2
neighbor 192.168.254.12 pw-id 1221
pw-class pw-mpls
!
description L2VPN-to-Lombardia2
!
!
!
snmp-server traps mpls traffic-eng reroute
snmp-server traps mpls ldp up
snmp-server traps mpls ldp down
snmp-server traps rsvp all
snmp-server traps mpls l3vpn all
mpls ldp
router-id 192.168.254.21
nsr
igp sync delay 10
log
neighbor
!
interface TenGigE0/0/0/0
!
interface TenGigE0/0/0/1
!
interface TenGigE0/1/0/0
!
interface TenGigE0/1/0/1
!
!
snmp-server traps pim neighbor-change
snmp-server traps pim interface-state-change
multicast-routing
address-family ipv4
interface Loopback0
enable
!
interface TenGigE0/0/0/0
enable
!
interface TenGigE0/0/0/1
enable
!
interface TenGigE0/1/0/0
enable
!
interface TenGigE0/1/0/1
enable
!
nsf
mdt source Loopback0
ssm range 88
rate-per-route
accounting per-prefix
!
vrf lombardia
address-family ipv4
interface Bundle-Ether1.3601
enable
!
interface Bundle-Ether1.3801
enable
!
mdt mtu 9000
mdt data 239.232.26.0/24 threshold 1000
log-traps
mdt default ipv4 239.232.0.26
rate-per-route
accounting per-prefix
!
!
vrf lombardia_arpa
address-family ipv4
interface Bundle-Ether1.3603
enable
!
interface Bundle-Ether1.3803
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
vrf lombardia_arifl
address-family ipv4
interface Bundle-Ether1.3610
enable
!
 interface Bundle-Ether1.3810
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
vrf lombardia_ersaf
address-family ipv4
interface Bundle-Ether1.3607
enable
!
interface Bundle-Ether1.3807
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
vrf lombardia_lispa
address-family ipv4
interface Bundle-Ether1.3604
enable
!
interface Bundle-Ether1.3804
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
vrf lombardia_cestec
address-family ipv4
interface Bundle-Ether1.3605
enable
!
interface Bundle-Ether1.3805
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
vrf lombardia_eupolis
address-family ipv4
interface Bundle-Ether1.3606
enable
!
interface Bundle-Ether1.3806
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
vrf lombardia_consiglio
address-family ipv4
interface Bundle-Ether1.3602
enable
!
interface Bundle-Ether1.3802
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
vrf lombardia_mcast_ext
address-family ipv4
interface Bundle-Ether2.439
enable
!
interface Bundle-Ether1.3653
enable
!
interface Bundle-Ether1.3853
enable
!
mdt mtu 9000
mdt data 239.232.25.0/24 threshold 1000
log-traps
mdt default ipv4 239.232.0.25
rate-per-route
accounting per-prefix
!
!
vrf lombardia_enti_shared
address-family ipv4
interface Bundle-Ether1.3608
enable
!
interface Bundle-Ether1.3808
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
vrf lombardia_finlombarda
address-family ipv4
interface Bundle-Ether1.3609
enable
!
interface Bundle-Ether1.3809
enable
!
log-traps
rate-per-route
accounting per-prefix
!
!
!
ssh server vrf MGMT
ssh server vrf default
ssh server vrf lombardia_mngt
ipsla
responder
!
!
router pim
address-family ipv4
log neighbor changes
interface Loopback0
enable
!
interface TenGigE0/0/0/0
enable
!
interface TenGigE0/0/0/1
enable
!
interface TenGigE0/1/0/0
enable
!
interface TenGigE0/1/0/1
enable
!
!
vrf lombardia
address-family ipv4
hello-interval 5
rp-address 172.16.0.224 90
rp-address 172.16.1.1 89
interface Bundle-Ether1.3601
enable
!
interface Bundle-Ether1.3801
enable
!
!
!
vrf lombardia_arpa
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3603
enable
!
interface Bundle-Ether1.3803
enable
!
!
!
vrf lombardia_arifl
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3610
enable
!
 interface Bundle-Ether1.3810
enable
!
!
!
vrf lombardia_ersaf
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3607
enable
!
interface Bundle-Ether1.3807
enable
!
!
!
vrf lombardia_lispa
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3604
enable
!
interface Bundle-Ether1.3804
enable
!
!
!
vrf lombardia_cestec
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3605
enable
!
interface Bundle-Ether1.3805
enable
!
!
!
vrf lombardia_eupolis
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3606
enable
!
interface Bundle-Ether1.3806
enable
!
!
!
vrf lombardia_consiglio
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3602
enable
 !
interface Bundle-Ether1.3802
enable
!
!
!
vrf lombardia_mcast_ext
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether2.439
!
interface Bundle-Ether1.3653
enable
!
interface Bundle-Ether1.3853
enable
!
!
!
vrf lombardia_enti_shared
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3608
enable
!
interface Bundle-Ether1.3808
enable
!
!
!
vrf lombardia_finlombarda
address-family ipv4
hello-interval 5
rp-address 172.16.1.1 89
interface Bundle-Ether1.3609
enable
!
interface Bundle-Ether1.3809
enable
!
!
!
!
end

RP/0/RSP0/CPU0:mi-cpe-giu92-109#
RP/0/RSP0/CPU0:mi-cpe-giu92-109#
RP/0/RSP0/CPU0:mi-cpe-giu92-109#
RP/0/RSP0/CPU0:mi-cpe-giu92-109#
RP/0/RSP0/CPU0:mi-cpe-giu92-109#