# Huawei Versatile Routing Platform Software
# VRP (R) software, Version 5.170 (S6730 V200R019C00SPC200)
# Copyright (C) 2000-2019 HUAWEI TECH Co., Ltd.
# 
# DDR             Memory Size : 4096  M bytes
# FLASH Total     Memory Size : 2048  M bytes
# FLASH Available Memory Size : 1654  M bytes
# Pcb           Version   : VER.B
# BootROM       Version   : 0000.04d8
# BootLoad      Version   : 0213.0000
# CPLD          Version   : 0108 
# Software      Version   : VRP (R) Software, Version 5.170 (V200R019C00SPC200)
# FLASH         Version   : 0000
# PWR1 information
# Pcb           Version   : PWR VER.B
# FAN1 information
# Pcb           Version   : NA
# FAN2 information
# Pcb           Version   : NA
# FAN3 information
# Pcb           Version   : NA
# FAN4 information
# Pcb           Version   : NA
# S6730-H24X6C's Device status:
# Slot Sub  Type                   Online    Power    Register     Status   Role  
# -------------------------------------------------------------------------------
# 0    -    S6730-H24X6C           Present   PowerOn  Registered   Normal   Master
#      PWR1 POWER                  Present   PowerOn  Registered   Normal   NA    
#      FAN1 FAN                    Present   PowerOn  Registered   Normal   NA    
#      FAN2 FAN                    Present   PowerOn  Registered   Normal   NA    
#      FAN3 FAN                    Present   PowerOn  Registered   Normal   NA    
#      FAN4 FAN                    Present   PowerOn  Registered   Normal   NA    
!Software Version V200R019C00SPC200
#
sysname PR-TBO-A001-BKB-ONNET-001
#
ipv6
#
as-notation plain
#
vlan batch 55 80 95 99 495 497 to 498 525 to 526 633 701 798
vlan batch 891 901 912 to 914 921 to 923 960 970 to 973 975 to 978 980 to 982 985 to 986 988
vlan batch 990 to 992 999 1002 1005 1302 2002 2011 2034 2037 2198
vlan batch 2815 to 2816 2991 to 2992 3000 3002 3004 to 3007 3012 to 3013 3021 3034 3037 3101
vlan batch 3105 3110 3114 to 3116 3120 3218 3221 to 3222 3241 3245 3247 to 3248 3806 to 3807
vlan batch 3811 to 3812 3815 4001
#
lnp disable
#
stp disable
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name multi_authen_profile
authentication-profile name portal_authen_profile
#
set save-configuration interval 1440 delay 30
#
telnet server enable
#
clock timezone BRA minus 03:00:00
#
diffserv domain default
#
ip vpn-instance ONNET-CDN
 ipv4-family
  route-distinguisher 172.16.30.15:65000
  vpn-target 65000:65000 export-extcommunity
  vpn-target 65000:65000 import-extcommunity
 ipv6-family
  route-distinguisher 172.16.30.15:65000
  vpn-target 65000:65000 export-extcommunity
  vpn-target 65000:65000 import-extcommunity
#
radius-server template default
#
mpls lsr-id 172.16.30.15
mpls
 mpls te
 mpls te signaling-delay-trigger enable
 label advertise non-null
 mpls rsvp-te
 mpls rsvp-te hello
 mpls rsvp-te srefresh
 mpls rsvp-te timer refresh 45
 mpls rsvp-te hello full-gr
 mpls rsvp-te send-message suggest-label
 mpls rsvp-te send-message extend-class-type value-length-type
 mpls rsvp-te send-message session-attribute without-affinity
 mpls rsvp-te fast-reroute-bandwidth compatible
 mpls rsvp-te send-message down-reason
 mpls te cspf
 mpls te cspf preferred-igp ospf 1
#
mpls l2vpn
#
vsi VLAN3034
 pwsignal ldp
  vsi-id 3034
  peer 172.16.30.14
 mtu 1600
#
vsi VLAN960
 pwsignal ldp
  vsi-id 960
  peer 172.16.30.21
 mtu 1600
#
vsi VLAN2991
 pwsignal ldp
  vsi-id 2991
  peer 172.16.30.32
 mtu 1600
#
mpls ldp
#
#
mpls ldp remote-peer 172.16.30.8
 remote-ip 172.16.30.8
#
mpls ldp remote-peer 172.16.30.9
 remote-ip 172.16.30.9
#
mpls ldp remote-peer 172.16.30.10
 remote-ip 172.16.30.10
#
mpls ldp remote-peer 172.16.30.13
 remote-ip 172.16.30.13
#
mpls ldp remote-peer 172.16.30.14
 remote-ip 172.16.30.14
#
mpls ldp remote-peer 172.16.30.15
#
mpls ldp remote-peer 172.16.30.16
 remote-ip 172.16.30.16
#
mpls ldp remote-peer 172.16.30.19
 remote-ip 172.16.30.19
#
mpls ldp remote-peer 172.16.30.21
 remote-ip 172.16.30.21
#
mpls ldp remote-peer 172.16.30.25
 remote-ip 172.16.30.25
#
mpls ldp remote-peer 172.16.30.32
 remote-ip 172.16.30.32
#
mpls ldp remote-peer 172.16.30.33
 remote-ip 172.16.30.33
#
ecc peer-public-key 172.16.30.19 encoding-type der
 public-key-code begin
    04FE5536 1C11E883 ADB095C6 067F0403 6CB64F1E DD491927 78E9D895 49FFAB91
    C4DBD604 03A2D0E3 340B7C20 2CA6DA8F 6697ACE7 958183D5 52028BFF 6D5D21E3
    7D
 public-key-code end
peer-public-key end
#
ecc peer-public-key 172.16.30.21 encoding-type der
 public-key-code begin
    04F3C0AF 59F4227E 0089A5C2 AD2BE211 9BEC7269 E9258CBA AF2ABA76 EF093DBF
    FF458BE3 A7A7C359 FD4533E4 4A1AEC5B B9226D63 D436E70E 5E6232B7 AFE3822B
    25
 public-key-code end
peer-public-key end
#
ecc peer-public-key 172.16.30.24 encoding-type der
 public-key-code begin
    04F8600E 320CA6A5 D30B38E5 FB899077 04D1AB5C 796FDF0E 3D864C1A D514935B
    C6F85C90 F6F4708E A4DD622E ADABE954 2A377B30 FFD11639 07B1C558 F0032511
    0C
 public-key-code end
peer-public-key end
#
ecc peer-public-key 172.16.30.18 encoding-type der
 public-key-code begin
    04062BBE 42473AF2 88F9FC47 69D5ED00 0811B9DE 41E6FC83 FB4090D1 81B54D6B
    9C3AFB81 1D05A0C7 DDA9B4A1 CB033FCF 0F340C1B 5F095F27 3241469F 9E95321E
    08
 public-key-code end
peer-public-key end
#
ecc peer-public-key 172.16.30.10 encoding-type der
 public-key-code begin
    042A1544 F44E58B6 1B44BF1F 23A0A1C6 D5721EF8 168D653D 637622CA 515FD0C4
    5E581F95 9BEE0AA0 9B99468C 4FBB68C8 1BD12F23 9F490834 6504D221 458E710A
    E5
 public-key-code end
peer-public-key end
#
pki realm default
 certificate-check none
#
acl number 2000
 rule 5 permit source 10.0.0.0 0.255.255.255
 rule 10 permit source 45.225.64.0 0.0.3.255
 rule 15 permit source 177.10.56.141 0
 rule 20 permit source 177.10.56.96 0
 rule 25 permit source 18.229.197.228 0
 rule 30 permit source 45.187.80.0 0.0.3.255
#
acl number 4000
 description TRAFFIC-LIMIT-TRANSPORTE-ALT-TBO<>PGO
 rule 5 permit vlan-id 3004
acl number 4001
 description TRAFFIC-LIMIT-TRANSPORTE-ALT-TBO<>PGO-DADOS
 rule 5 permit vlan-id 3005
acl number 4002
 rule 5 permit vlan-id 3012
acl number 4003
 rule 5 permit vlan-id 3013
acl number 4004
 rule 5 permit vlan-id 3002
acl number 4005
 rule 5 permit vlan-id 960
acl number 4006
 rule 5 permit vlan-id 798
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
drop-profile default
#
vlan 798
 description Transporte: Dbug: City Turbo: Telemaco<>Imbau
vlan 901
 description Transporte Dbug: Link IP MG: Imbau<>TBO
vlan 960
 description Transporte: Dbug: City Turbo: Telemaco<>Ortigueira
vlan 2034
 description Transporte: NovaG1: PGO<->TBO
vlan 2037
 description Transprote: ALT: TBO<>PGO
vlan 2815
 description Transporte: ALT: Telemaco<>PGO: RNP: Gerencia
vlan 2816
 description Transporte: ALT: Telemaco<>PGO: RNP: Trafego
vlan 2991
 description Transporte: WiFi: Alto do Amparo<>Telemaco
vlan 2992
 description Cliente Dbug: WiFi Connect: Caetano Mendes
vlan 3000
 description Transporte: ALT: TBO<>PGO: mgmt vlan
vlan 3004
 description Transporte: ALT: TBO<>PGO
vlan 3005
 description Transporte: ALT: TBO<>PGO
vlan 3006
 description Transporte: ALT: TBO<>PGO: Conect
vlan 3012
 description Transprote: ALT: TBO<>PGO
vlan 3013
 description Transprote: ALT: TBO<>PGO
vlan 3037
 description Transprote: ALT: TBO<>PGO
vlan 3815
 description Redundancia via ALT: Dbug Reserva<>Telemaco
#
aaa
 authentication-scheme default
 authentication-scheme radius
  authentication-mode radius
 authorization-scheme default
 accounting-scheme default
 local-aaa-user password policy administrator 
  password history record number 0
  undo password alert original 
  password expire 0
 domain default
  authentication-scheme radius
  radius-server default
 domain default_admin
  authentication-scheme default
 local-user admin password irreversible-cipher $1a$M&#v!-q'*;$adG39[]~I6h25}47N0(8lp#Z~QJm+(:ZKc69,d<;$
 local-user admin privilege level 15
 local-user admin service-type telnet terminal ssh http
 local-user onnet:onnet password irreversible-cipher $1a$^#x$"+g^z9$cZK:ADlIxH):6l/>un&,SY#eV)H*D;4z1\2E!u{"$
 local-user onnet:onnet privilege level 15
 local-user onnet:onnet service-type telnet terminal ssh
 local-user onnet:onnet expire-date 2099/12/31
 local-user backup@onnet password irreversible-cipher $1a$i^,DIs.,r2$&m6t5x8|F9W\LK-MoOI"`-IK6msn7KAx}q@v=LqC$
 local-user backup@onnet privilege level 15
 local-user backup@onnet service-type ssh
 local-user tecnico:onnet password irreversible-cipher $1a$#QXgD9(@W$$(gJ$U0;YiUf=)#4V%'\C(vM'FMxgtX4Rn@HxTJ[7$
 local-user tecnico:onnet privilege level 1
 local-user tecnico:onnet service-type telnet terminal ssh
#
interface Vlanif1
#
interface Vlanif95
#
interface Vlanif99
 ip address 10.10.99.200 255.255.255.0
#
interface Vlanif495
 description Transporte: UP: Flemming: Telemaco<>Moradas
 bandwidth 1000
 mtu 2000
 ip address 192.168.2.100 255.255.255.0
 mpls l2vc 172.16.30.10 495
 statistic enable both
#
interface Vlanif497
 mtu 2000
 mpls l2vc 172.16.30.10 497
#
interface Vlanif498
 ip address 10.1.1.7 255.255.255.0
#
interface Vlanif499
#
interface Vlanif525
 mtu 2000
 mpls l2vc 172.16.30.10 525
#
interface Vlanif526
#
interface Vlanif798
 description Transporte: Dbug: City Turbo: Telemaco<>Imbau
 bandwidth 500
 mpls l2vc 172.16.30.19 798 mtu 1600
 statistic enable both
#
interface Vlanif891
 description TRANSPORTE: CAMPOS GERAIS_TIBAGI
 shutdown
 mtu 1600
 mpls l2vc 172.16.30.33 891
#
interface Vlanif901
 description Transporte Dbug: Link IP MG: Imbau<>TBO
 mpls l2vc 172.16.30.19 901 mtu 1600
 statistic enable both
#
interface Vlanif912
#
interface Vlanif913
 mtu 1600
#
interface Vlanif923
 mtu 1600
#
interface Vlanif960
 description Transporte: Dbug: City Turbo: Telemaco<>Ortigueira
 bandwidth 500
 l2 binding vsi VLAN960
 statistic enable both
#
interface Vlanif990
#
interface Vlanif999
 mtu 2000
 mpls l2vc 172.16.30.10 999
#
interface Vlanif1002
 description UPLINK: PR-PGO-A001-ONNET-VIA-IRATI
 mtu 9100
 ip address 172.16.20.6 255.255.255.252
 ospf cost 10
 ospf network-type p2p
 mpls
 mpls te
 mpls te bandwidth max-reservable-bandwidth 1410066
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
 statistic enable both
#
interface Vlanif1302
 description TRANSPORTE: CITY-TURBO-DBUG
 mpls l2vc 172.16.30.8 1302
#
interface Vlanif2002
 mtu 1600
 mpls l2vc 172.16.30.9 2002
#
interface Vlanif2011
 mtu 5000
 ip address 172.16.20.82 255.255.255.252
 ospf cost 4
 ospf network-type p2p
 mpls
 mpls te
 mpls te bandwidth max-reservable-bandwidth 1410066
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
#
interface Vlanif2024
#
interface Vlanif2034
 description TRANSPORET: NOVA G1: TELEMACO
 bandwidth 250
 mpls l2vc 172.16.30.14 2034 mtu 1600
 statistic enable both
#
interface Vlanif2037
 description Transprote: ALT: TBO<>PGO
 shutdown
 mpls l2vc 172.16.30.8 2037 mtu 1600
 statistic enable both
#
interface Vlanif2198
#
interface Vlanif2815
 description Transporte: ALT: Telemaco<>PGO: RNP: Gerencia
 shutdown
 mpls l2vc 172.16.30.8 2815 mtu 1600
 statistic enable both
#
interface Vlanif2816
 description Transporte: ALT: Telemaco<>PGO: RNP: Trafego
 shutdown
 mpls l2vc 172.16.30.8 2816 mtu 1600
 statistic enable both
#
interface Vlanif2991
 description Transporte: WiFi: Alto do Amparo<>Telemaco
 l2 binding vsi VLAN2991
#
interface Vlanif2992
 description Cliente Dbug: WiFi Connect: Caetano Mendes
 bandwidth 500
 mpls l2vc 172.16.30.19 2992 mtu 1600
 mpls l2vc 172.16.30.32 2992 mtu 1600 secondary
 statistic enable both
#
interface Vlanif3000
 description Transporte: ALT: TBO<>PGO: mgmt vlan
 shutdown
 mpls l2vc 172.16.30.8 3000 mtu 1600
 statistic enable both
#
interface Vlanif3002
 description Transporte: DBUG: TBO<>PIS: WEB
 bandwidth 2500
 mtu 1600
 statistic enable both
#
interface Vlanif3004
 description Transporte: ALT: TBO<>PGO
 mpls l2vc 172.16.30.8 3004 mtu 1600
#
interface Vlanif3005
 description Transporte: ALT: TBO<>PGO: Ligue
 mpls l2vc 172.16.30.8 3005 mtu 1600
#
interface Vlanif3006
 description Transporte: ALT: TBO<>PGO: Conect
 bandwidth 10000
 mpls l2vc 172.16.30.8 3006 mtu 1600
 statistic enable both
#
interface Vlanif3007
 description Transporte: ALT: TBO<>PGO
 mpls l2vc 172.16.30.8 3007 mtu 1600
 statistic enable both
#
interface Vlanif3012
 description Transprote: ALT: TBO<>PGO
 mpls l2vc 172.16.30.8 3012 mtu 1600
 statistic enable both
#
interface Vlanif3013
 description Transprote: ALT: TBO<>PGO
 mpls l2vc 172.16.30.8 3013 mtu 1600
 statistic enable both
#
interface Vlanif3021
 description Transporte: Dbug: MM  Imbau
 mpls l2vc 172.16.30.19 3021 mtu 1600
#
interface Vlanif3034
 description TRANSPORTE: NOVA G1
 bandwidth 250
 l2 binding vsi VLAN3034
 statistic enable both
#
interface Vlanif3037
 description Transprote: ALT: TBO<>PGO
 shutdown
 mpls l2vc 172.16.30.8 3037 mtu 1600
 statistic enable both
#
interface Vlanif3101
#
interface Vlanif3105
 mpls l2vc 172.16.30.8 3105
#
interface Vlanif3114
 description UPLINK: IMBAU
 ip address 172.16.20.58 255.255.255.252
 undo icmp redirect send
 ospf cost 20
 ospf network-type p2p
 mpls
 mpls ldp
#
interface Vlanif3115
#
interface Vlanif3116
 description UPLINK: PR-ORTIGUEIRA-A001-ONNET
 mtu 9100
 ip address 172.16.20.61 255.255.255.252
 undo icmp redirect send
 ospf cost 20
 ospf network-type p2p
 mpls
 mpls te
 mpls te bandwidth max-reservable-bandwidth 1410066
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
 statistic enable both
#
interface Vlanif3248
#
interface Vlanif3805
#
interface Vlanif3806
 description UPLINK: PR-PIS-A001-BKB-ONNET
 shutdown
 mtu 9100
 ip address 172.16.20.33 255.255.255.252
 ip address 192.168.30.1 255.255.255.0 sub
 ospf cost 1
 ospf network-type p2p
 mpls
 mpls te
 mpls te bandwidth max-reservable-bandwidth 1410066
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
#
interface Vlanif3807
 description UPLINK: PR-IRA-A001-BKB-ONNET
 mtu 9100
 ip address 172.16.20.37 255.255.255.252
 ospf cost 1
 ospf network-type p2p
 mpls
 mpls te
 mpls te bandwidth max-reservable-bandwidth 1410066
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
#
interface Vlanif3810
#
interface Vlanif3811
 description UPLINK: PR-TIB-A001-BKB-ONNET
 mtu 9000
 ip address 172.16.30.46 255.255.255.252
 undo icmp redirect send
 ospf cost 2
 ospf network-type p2p
 mpls
 mpls te
 mpls te bandwidth max-reservable-bandwidth 1410066
 mpls rsvp-te
 mpls rsvp-te hello
 mpls ldp
#
interface Vlanif3815
#
interface MEth0/0/1
#
load-balance-profile MPLS-BALANCE
 l2 field smac dmac l2-protocol vlan sport
 ipv6 field sip dip vlan l4-sport l4-dport protocol sport
 ipv4 field sip dip vlan l4-sport l4-dport protocol sport
 mpls field smac dmac top-label 2nd-label sip dip vlan sport
#
interface Eth-Trunk1
 description UPLINK: PR-TBO-DBUG
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 526 912 to 914 923 991 2198 2991 to 2992 3002 3218 3222 3248
 mode lacp
 load-balance enhanced profile MPLS-BALANCE
#
interface Eth-Trunk2
 description UPLINK: PR-IMBAU-A001-BKB-ONNET
 shutdown
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 971 to 972 975 to 978 980 to 982 3221 3807 4001
#
interface Eth-Trunk3
 description UPLINK: PR-TIB-A001-BKB
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 970 to 971 2011 3218 3811
 mode lacp
 load-balance enhanced profile MPLS-BALANCE
#
interface Eth-Trunk4
 description UPLINK: PR-RES-DBUGDIRETO
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 3222 3245 3806
 mode lacp
 load-balance enhanced profile MPLS-BALANCE
#
interface Eth-Trunk5
 description UPLINK: WEB-TELEMACO
 port link-type dot1q-tunnel
 port default vlan 3002
#
interface Eth-Trunk6
 description UPLINK: PR-ORT-A001-BKB
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 55 498 978 1302 3101 3105 3116 3120 3815
 mode lacp
 load-balance enhanced profile MPLS-BALANCE
#
interface XGigabitEthernet0/0/1
 description UPLINK: PR-TBO-SW-DBUG P:0/0/1
 eth-trunk 1
#
interface XGigabitEthernet0/0/2
 description TRANSPORTE: NIC-FIBRA-DBUG
 bandwidth 2000
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 798 923 960
#
interface XGigabitEthernet0/0/3
 description UPLINK: PR-RES-DIRETO-SW-DBUG P:9 (Desativado, usado pra CONECT)
 shutdown
 eth-trunk 4
#
interface XGigabitEthernet0/0/4
 description CUST: CONNECT-TELEMACO
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 912 914 2815 to 2816
#
interface XGigabitEthernet0/0/5
 description UPLINK: PR-TIBAGI-A001-BKB-ONNET P:1 CH:33
 eth-trunk 3
#
interface XGigabitEthernet0/0/6
 description CUST: NOSSATELECOM
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 913 990 to 991 1005 3247
#
interface XGigabitEthernet0/0/7
 description UPLINK: ALT: TRANSPROTE ATE PGO-0
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 3006 to 3007
#
interface XGigabitEthernet0/0/8
 description TRANSPORTE: WEBB-CASTRO
 eth-trunk 5
 qos lr outbound cir 2500000 cbs 312500000
 qos lr inbound cir 2500000 cbs 312500000
#
interface XGigabitEthernet0/0/9
 description UPLINK: PR-RES-DBUG P:0/0/11
 eth-trunk 4
#
interface XGigabitEthernet0/0/10
#
interface XGigabitEthernet0/0/11
 description UPLINK: TRANSPORTE -NOVAG1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 2034 2198 3034 3043
 qos lr outbound cir 250000 cbs 31250000
 qos lr inbound cir 250000 cbs 31250000
#
interface XGigabitEthernet0/0/12
 description UPLINK: DBUG-TBO-SWITCH
 eth-trunk 1
#
interface XGigabitEthernet0/0/13
 description UPLINK: ORTIGUEIRA
 eth-trunk 6
#
interface XGigabitEthernet0/0/14
 description TRANSPORTEUP: RESERVA
 port link-type access
 port default vlan 526
#
interface XGigabitEthernet0/0/15
 description UPLINK: ALT: TRANSPORTE ATE PGO-1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 3004 to 3005
#
interface XGigabitEthernet0/0/16
 description UPLINK: ALT: TRANSPORTE ATE PGO-2
 shutdown
 bandwidth 200
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 2037 3000 3037
 qos lr outbound cir 205000 cbs 25625000
 qos lr inbound cir 205000 cbs 25625000
#
interface XGigabitEthernet0/0/17
 description UPLINK: PR-ORT-BKB-ONNET-001 P:22 CH:19
 eth-trunk 6
#
interface XGigabitEthernet0/0/18
 description UPLINK: PR-ORT-BKB-ONNET-001 P:23 CH:20
 eth-trunk 6
#
interface XGigabitEthernet0/0/19
 description UPLINK: PR-ORT-BKB-ONNET-001 P:24 CH:49
 eth-trunk 6
#
interface XGigabitEthernet0/0/20
 description UPLINK: PR-TIBAGI-A001-BKB-ONNET P:2 CH:34
 eth-trunk 3
#
interface XGigabitEthernet0/0/21
 description UPLINK: PR-TIBAGI-A001-BKB-ONNET P:5 CH:35
 eth-trunk 3
#
interface XGigabitEthernet0/0/22
 description UPLINK: PR-TIBAGI-A001-BKB-ONNET P:6 CH:36
#
interface XGigabitEthernet0/0/23
 description UPLINK: IMBAU
 port link-type trunk
 port trunk allow-pass vlan 80 99 498 971 to 972 975 to 978 980 to 982 985 to 986 999 1002 3114
 port trunk allow-pass vlan 3221 3241 3807 4001
#
interface XGigabitEthernet0/0/24
 description TRANSPORTE: UP-FLEMM
 port link-type access
 port default vlan 495
 loopback-detect enable
 qos lr outbound cir 20480 cbs 2560000
 qos lr inbound cir 20480 cbs 2560000
#
interface 40GE0/0/1
 description UPLINK: IMBAU
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 80 99 498 971 to 972 975 to 978 980 to 982 985 to 986 990 1002 1005
 port trunk allow-pass vlan 3114 3120 3129 3221 3241 3247 to 3248 3807 4001
#
interface 40GE0/0/2
#
interface 40GE0/0/3
#
interface 40GE0/0/4
#
interface 40GE0/0/5
#
interface 40GE0/0/6
#
interface NULL0
#
interface LoopBack0
 ip address 172.16.30.15 255.255.255.255
#
ospf 1 router-id 172.16.30.15
 bfd all-interfaces enable
 bfd all-interfaces min-tx-interval 300 min-rx-interval 300
 import-route direct cost 2 type 1
 import-route static cost 2 type 1
 opaque-capability enable
 enable log config
 enable log state
 enable log error
 enable log snmp-trap
 enable traffic-adjustment advertise
 frr
 area 0.0.0.0
  network 172.16.20.4 0.0.0.3
  network 172.16.20.32 0.0.0.3
  network 172.16.20.36 0.0.0.3
  network 172.16.20.44 0.0.0.3
  network 172.16.20.56 0.0.0.3
  network 172.16.20.60 0.0.0.3
  network 172.16.20.80 0.0.0.3
  network 172.16.30.15 0.0.0.0
  network 172.16.30.44 0.0.0.3
  network 172.16.30.80 0.0.0.3
  mpls-te enable
#
route-policy OUT-DEFAULT permit node 50
 if-match ip-prefix AS267018_24
 apply local-preference 1000
 apply community 65534:1010
#
route-policy OUT-DEFAULT permit node 100
 apply local-preference 1000
 apply community 65534:1019
#
route-policy OUT-DEFAULT-V6 permit node 50
 if-match ipv6 address prefix-list AS267018_48
 apply local-preference 1000
 apply community 65534:1010
#
route-policy OUT-DEFAULT-V6 permit node 100
 if-match ipv6 address prefix-list AS267018_128
 apply local-preference 1000
 apply community 65534:1019
#
route-policy OUT-IPV6-RR permit node 70
 if-match ipv6 address prefix-list le_48
 apply community 65534:1620 additive
 apply mpls-label
#
route-policy OUT-IPV6-RR permit node 100
 apply mpls-label
#
route-policy OUT-IPV4-RR permit node 90
 if-match ip-prefix le_24
 apply community 65534:1620 additive
#
route-policy OUT-IPV4-RR permit node 100
#
route-policy OUT-VPNV4-RR permit node 100
#
route-policy IN-VPNV4-RR permit node 100
 if-match as-path-filter 32
#
route-policy OUT-VPNV6-RR permit node 100
 apply mpls-label
#
route-policy IN-VPNV6-RR permit node 100
 if-match as-path-filter 32
#
route-policy OUT-IPV6-CDN permit node 50
 if-match community-filter BLOCOS_CDN
#
route-policy OUT-IPV6-CDN deny node 1000
#
route-policy OUT-IPV4-CDN permit node 50
 if-match community-filter BLOCOS_CDN
#
route-policy OUT-IPV4-CDN deny node 1000
#
ip ip-prefix AS267018_24 index 5 permit 45.225.64.0 22 greater-equal 22 less-equal 24
ip ip-prefix DEFAULT index 10 permit 0.0.0.0 0
ip ip-prefix FILTRO-LSP index 10 permit 172.16.20.0 24 greater-equal 30 less-equal 32
ip ip-prefix FILTRO-LSP index 15 permit 172.16.30.0 24 greater-equal 30 less-equal 32
ip ip-prefix le_24 index 10 permit 0.0.0.0 0 less-equal 24
#
ip as-path-filter 32 permit .*
#
ip community-filter basic CLIENTES permit 65534:1010
ip community-filter basic GERENCIA permit 65534:1019
ip community-filter basic NO_PTT permit 65534:7880
ip community-filter basic NO_BRT permit 65534:2780
ip community-filter basic NO_INT permit 65534:4680
ip community-filter basic PREPEND_1 permit 65534:6001
ip community-filter basic PREPEND_2 permit 65534:6002
ip community-filter basic PREPEND_3 permit 65534:6003
ip community-filter basic BLACKHOLE permit 65534:666
ip community-filter basic NO-EXPORT permit no-export
ip community-filter basic BLOCOS_CDN permit 65534:1017
#
ip ipv6-prefix AS267018_48 index 5 permit 2804:46E4:: 32 greater-equal 32 less-equal 48
ip ipv6-prefix AS267018_128 index 5 permit 2804:46E4:: 32 greater-equal 49 less-equal 128
ip ipv6-prefix DEFAUL-v6 index 10 permit :: 0
ip ipv6-prefix le_48 index 10 permit :: 0 less-equal 48
#
traffic-limit vlan 3004 inbound acl 4000 cir 5000 pir 5000 cbs 625000 pbs 625000
traffic-limit vlan 3004 outbound acl 4000 cir 5000 pir 5000 cbs 625000 pbs 625000
traffic-limit vlan 3012 inbound acl 4002 cir 5000 pir 5000 cbs 625000 pbs 625000
traffic-limit vlan 3012 outbound acl 4002 cir 5000 pir 5000 cbs 625000 pbs 625000
traffic-limit vlan 3013 inbound acl 4003 cir 200000 pir 200000 cbs 25000000 pbs 25000000
traffic-limit vlan 3013 outbound acl 4003 cir 200000 pir 200000 cbs 25000000 pbs 25000000
traffic-limit vlan 798 inbound acl 4006 cir 500000 pir 500000 cbs 62500000 pbs 62500000
traffic-limit vlan 798 outbound acl 4006 cir 500000 pir 500000 cbs 62500000 pbs 62500000
traffic-limit vlan 3005 inbound acl 4001 cir 4000000 pir 4000000 cbs 500000000 pbs 500000000
traffic-limit vlan 3005 outbound acl 4001 cir 4000000 pir 4000000 cbs 500000000 pbs 500000000
traffic-limit vlan 960 inbound acl 4005 cir 300000 pir 300000 cbs 37500000 pbs 37500000
traffic-limit vlan 960 outbound acl 4005 cir 300000 pir 300000 cbs 37500000 pbs 37500000
#
snmp-agent
snmp-agent local-engineid 800007DB03D0C65B1BBC00
snmp-agent community read cipher %^%#e\mh0*V{'Ydi/aTddK'=&.u6=kQ./9xb=HAGOzfQbzDRY1CW8MJeo})/.xd~hgdtR7FZK*AP[=/`@|MN%^%#
snmp-agent sys-info location Telemaco
snmp-agent sys-info version v2c v3
#
stelnet server enable
ssh user backup@onnet
ssh user backup@onnet authentication-type password
ssh user backup@onnet service-type stelnet
ssh client first-time enable
ssh client 172.16.30.10 assign ecc-key 172.16.30.10
ssh client 172.16.30.18 assign ecc-key 172.16.30.18
ssh client 172.16.30.19 assign ecc-key 172.16.30.19
ssh client 172.16.30.21 assign ecc-key 172.16.30.21
ssh client 172.16.30.24 assign ecc-key 172.16.30.24
ssh server acl 2000
ssh server cipher aes256_ctr aes128_ctr
ssh server hmac sha2_256
ssh client cipher aes256_ctr aes128_ctr
ssh client hmac sha2_256
ssh server dh-exchange min-len 2048
#
user-interface con 0
 authentication-mode aaa
user-interface vty 0 4
 authentication-mode aaa
 protocol inbound all
user-interface vty 16 20
#
wlan
 traffic-profile name default
 security-profile name default
 security-profile name default-wds
 security-profile name default-mesh
 ssid-profile name default
 vap-profile name default
 wds-profile name default
 mesh-handover-profile name default
 mesh-profile name default
 regulatory-domain-profile name default
 air-scan-profile name default
 rrm-profile name default
 radio-2g-profile name default
 radio-5g-profile name default
 wids-profile name default
 ap-system-profile name default
 port-link-profile name default
 wired-port-profile name default
 ap-group name default
 provision-ap
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
ops
#
return