# Hostname: HK1-AJ15-CORE-MX480-A-19U # Model: mx480 # Junos: 21.2R3-S6.11 # JUNOS OS Kernel 64-bit [20230531.8cb8c20_builder_stable_12_212] # JUNOS OS libs [20230531.8cb8c20_builder_stable_12_212] # JUNOS OS runtime [20230531.8cb8c20_builder_stable_12_212] # JUNOS OS time zone information [20230531.8cb8c20_builder_stable_12_212] # JUNOS network stack and utilities [20230818.132727_builder_junos_212_r3_s6] # JUNOS libs [20230818.132727_builder_junos_212_r3_s6] # JUNOS OS libs compat32 [20230531.8cb8c20_builder_stable_12_212] # JUNOS OS 32-bit compatibility [20230531.8cb8c20_builder_stable_12_212] # JUNOS libs compat32 [20230818.132727_builder_junos_212_r3_s6] # JUNOS runtime [20230818.132727_builder_junos_212_r3_s6] # Junos vmguest package [20230818.132727_builder_junos_212_r3_s6] # JUNOS sflow mx [20230818.132727_builder_junos_212_r3_s6] # JUNOS py extensions [20230818.132727_builder_junos_212_r3_s6] # JUNOS py base [20230818.132727_builder_junos_212_r3_s6] # JUNOS OS vmguest [20230531.8cb8c20_builder_stable_12_212] # JUNOS OS crypto [20230531.8cb8c20_builder_stable_12_212] # JUNOS OS boot-ve files [20230531.8cb8c20_builder_stable_12_212] # JUNOS na telemetry [21.2R3-S6.11] # JUNOS Security Intelligence [20230818.132727_builder_junos_212_r3_s6] # JUNOS mx libs compat32 [20230818.132727_builder_junos_212_r3_s6] # JUNOS mx runtime [20230818.132727_builder_junos_212_r3_s6] # JUNOS RPD Telemetry Application [21.2R3-S6.11] # JUNOS Routing mpls-oam-basic [20230818.132727_builder_junos_212_r3_s6] # JUNOS Routing mpls-oam-advanced [20230818.132727_builder_junos_212_r3_s6] # JUNOS Routing lsys [20230818.132727_builder_junos_212_r3_s6] # JUNOS Routing controller-internal [20230818.132727_builder_junos_212_r3_s6] # JUNOS Routing controller-external [20230818.132727_builder_junos_212_r3_s6] # JUNOS Routing 32-bit Compatible Version [20230818.132727_builder_junos_212_r3_s6] # JUNOS Routing aggregated [20230818.132727_builder_junos_212_r3_s6] # Redis [20230818.132727_builder_junos_212_r3_s6] # JUNOS probe utility [20230818.132727_builder_junos_212_r3_s6] # JUNOS common platform support [20230818.132727_builder_junos_212_r3_s6] # JUNOS Openconfig [21.2R3-S6.11] # JUNOS mtx network modules [20230818.132727_builder_junos_212_r3_s6] # JUNOS modules [20230818.132727_builder_junos_212_r3_s6] # JUNOS mx modules [20230818.132727_builder_junos_212_r3_s6] # JUNOS mx libs [20230818.132727_builder_junos_212_r3_s6] # JUNOS SQL Sync Daemon [20230818.132727_builder_junos_212_r3_s6] # JUNOS mtx Data Plane Crypto Support [20230818.132727_builder_junos_212_r3_s6] # JUNOS daemons [20230818.132727_builder_junos_212_r3_s6] # JUNOS mx daemons [20230818.132727_builder_junos_212_r3_s6] # JUNOS Broadband Egde User Plane Apps [21.2R3-S6.11] # JUNOS appidd-mx application-identification daemon [20230818.132727_builder_junos_212_r3_s6] # JUNOS TPM2 [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services URL Filter package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services TLB Service PIC package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Telemetry [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services TCP-LOG [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services SSL [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services SOFTWIRE [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Stateful Firewall [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services RTCOM [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services RPM [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services PCEF package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services NAT [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Mobile Subscriber Service Container package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services MobileNext Software package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Logging Report Framework package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services LL-PDF Container package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Jflow Container package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Deep Packet Inspection package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services IPSec [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services IDS [20230818.132727_builder_junos_212_r3_s6] # JUNOS IDP Services [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services HTTP Content Management package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services DNS Filter package (i386) [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Crypto [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Captive Portal and Content Delivery Container package [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services COS [20230818.132727_builder_junos_212_r3_s6] # JUNOS AppId Services [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services Application Level Gateways [20230818.132727_builder_junos_212_r3_s6] # JUNOS Services AACL Container package [20230818.132727_builder_junos_212_r3_s6] # JUNOS SDN Software Suite [20230818.132727_builder_junos_212_r3_s6] # JUNOS Extension Toolkit [20230818.132727_builder_junos_212_r3_s6] # JUNOS Packet Forwarding Engine Support (wrlinux9) [20230818.132727_builder_junos_212_r3_s6] # JUNOS Packet Forwarding Engine Support (MX/EX92XX Common) [20230818.132727_builder_junos_212_r3_s6] # JUNOS Packet Forwarding Engine Support (M/T Common) [20230818.132727_builder_junos_212_r3_s6] # JUNOS Packet Forwarding Engine Support (aft) [20230818.132727_builder_junos_212_r3_s6] # JUNOS Packet Forwarding Engine Support (MX Common) [20230818.132727_builder_junos_212_r3_s6] # JUNOS Juniper Malware Removal Tool (JMRT) [1.0.0+20230818.132727_builder_junos_212_r3_s6] # JUNOS J-Insight [20230818.132727_builder_junos_212_r3_s6] # JUNOS jfirmware [20230818.132727_builder_junos_212_r3_s6] # JUNOS Online Documentation [20230818.132727_builder_junos_212_r3_s6] # JUNOS jail runtime [20230531.8cb8c20_builder_stable_12_212] # Hardware inventory: # Item Version Part number Serial number Description # Chassis JN1250DEDAFB MX480 # Midplane REV 55 750-047862 JABA8965 Enhanced MX480 Midplane # FPM Board REV 08 760-059208 EBAT4356 Front Panel Display # PEM 0 Rev 02 740-063046 QCS2226U0DA PS 1.4-2.52kW; 90-264V AC in # PEM 1 Rev 02 740-063046 QCS2226U01V PS 1.4-2.52kW; 90-264V AC in # PEM 2 Rev 02 740-063046 QCS2226U05S PS 1.4-2.52kW; 90-264V AC in # PEM 3 Rev 02 740-063046 QCS2226U05M PS 1.4-2.52kW; 90-264V AC in # Routing Engine 0 REV 24 750-054758 EBAS2953 RE-S-2X00x6 # Routing Engine 1 REV 24 750-054758 EBAS2747 RE-S-2X00x6 # CB 0 REV 13 750-087559 EBAT4491 Enhanced MX SCB 2 # CB 1 REV 13 750-087559 EBAT1673 Enhanced MX SCB 2 # FPC 2 REV 49 750-062581 CAGT4418 MPC 3D 16x 10GE # CPU REV 03 711-062579 CAGV2415 AMPC PMB # PIC 0 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 NON-JNPR HC101K73106 SFP+-10G-SR # PIC 1 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # PIC 2 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # PIC 3 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # FPC 3 REV 33 750-028467 ABBV1467 MPC 3D 16x 10GE # CPU REV 11 711-029089 ABBV1005 AMPC PMB # PIC 0 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 NON-JNPR HC101K73618 SFP+-10G-SR # PIC 1 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 `| NON-JNPR 2308220008 SFP+-10G-SR # PIC 2 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # PIC 3 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # FPC 4 REV 26 750-028467 ABBH0983 MPC 3D 16x 10GE # CPU REV 10 711-029089 ABBH0665 AMPC PMB # PIC 0 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 NON-JNPR ANJ084V SFP+-10G-SR # Xcvr 1 NON-JNPR HC101K73142 SFP+-10G-SR # PIC 1 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 NON-JNPR ANJ084V SFP+-10G-SR # PIC 2 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 NON-JNPR 1810200054 SFP-SX # PIC 3 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 1 NON-JNPR HC101K73894 SFP+-10G-SR # Xcvr 2 REV 01 740-021309 AQ7128D SFP+-10G-LR # Xcvr 3 e NON-JNPR VE153401015 SFP+-10G-SR # FPC 5 REV 29 750-028467 ABBL6553 MPC 3D 16x 10GE # CPU REV 10 711-029089 ABBM3183 AMPC PMB # PIC 0 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 NON-JNPR HC101K72869 SFP+-10G-SR # Xcvr 1 NON-JNPR 1810200766 SFP-SX # PIC 1 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 NON-JNPR ANJ084V SFP+-10G-SR # PIC 2 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 0 NON-JNPR TP1903110001 SFP-SX # PIC 3 BUILTIN BUILTIN 4x 10GE(LAN) SFP+ # Xcvr 1 NON-JNPR BJ392B1 SFP-SX # Xcvr 2 e NON-JNPR VE153401015 SFP+-10G-LR # Xcvr 3 e NON-JNPR VE153401015 SFP+-10G-SR # Fan Tray Enhanced Left Fan Tray # License usage: # Licenses Licenses Licenses Expiry # Feature name used installed needed # scale-subscriber 10 0 permanent # scale-l2tp 0 1000 0 permanent # mobile-next-scaling 0 1000 0 permanent # mobile-next-http-app-scaling 0 1000 0 permanent # mobile-next-policy-prepaid-scaling 0 1000 0 permanent # mobile-next-DPI-base 0 1000 0 permanent # # Licenses installed: none # ## Last commit: 2024-07-23 21:30:24 CST by mofangjp version 21.2R3-S6.11; system { host-name HK1-AJ15-CORE-MX480-A-19U; root-authentication { encrypted-password "$6$9f2f1qb2$cjOt89VmU5jda1f.Uj5c6K5VkwzENWn958qf2nVGVzqwf6r9DDTmb.v0d5Kh6N4qu4FL3yCQtlNcQ0FphpCTe."; ## SECRET-DATA } commit synchronize; login { class netadmin { idle-timeout 20; permissions all; } class opadmin { idle-timeout 10; permissions all; deny-commands reboot,delete; } class ops { idle-timeout 10; permissions [ configure firewall firewall-control interface interface-control view view-configuration ]; } user admin { uid 2000; class super-user; authentication { encrypted-password "$6$vNYtrHds$NCmgYNx2ivQwxH5f0xI.0pSUc8hMbhMopWJ4HKD8nzFh/CcJjbw4uRlzIF55sL3dgLS1ad6GADyAbI2UsdqL6/"; ## SECRET-DATA } } user netadmin { full-name "user with all permission"; uid 2001; class netadmin; } user opadmin { full-name "operator manager has most permissions except reboot,format"; uid 2002; class opadmin; } user ops { full-name "clear, network, reset, trace, and view"; uid 2003; class ops; } } services { ssh { root-login deny; protocol-version v2; connection-limit 10; rate-limit 60; } } time-zone Asia/Shanghai; arp-system-cache-limit 150000; authentication-order [ tacplus password ]; tacplus-server { 107.148.128.2 secret "$9$5z/tu0IcyKO1WxN-2gTz3ntO1RhyevB1"; ## SECRET-DATA } accounting { events interactive-commands; destination { tacplus; } } syslog { file interactive-commands { interactive-commands any; } file messages { any notice; authorization info; } } processes { dhcp-service { traceoptions { file dhcp_logfile size 10m; level all; flag packet; } } } ddos-protection { global { flow-detection; flow-report-rate 100; } } ntp { server 107.148.128.2 prefer; } } chassis { redundancy { graceful-switchover; } aggregated-devices { ethernet { device-count 10; } } network-services enhanced-ip; } interfaces { xe-2/0/0 { description "lag23-HK1-AJ21-Rakcloud-BD-CE6820-A-42U@47"; gigether-options { 802.3ad ae23; } } xe-3/0/0 { description "lag23-HK1-AJ21-Rakcloud-BD-CE6820-B-41U@47"; gigether-options { 802.3ad ae23; } } xe-3/1/0 { vlan-tagging; unit 20 { vlan-id 20; family inet { address 107.149.254.14/29; } } } xe-4/0/0 { description "lag21-HK1-AJ15-BAS-CE6851-A-25U@47"; gigether-options { 802.3ad ae21; } } xe-4/0/1 { description "lag22-HK1-AJ15-BAS-CE6851-B-21U@47"; gigether-options { 802.3ad ae22; } } xe-4/1/0 { description "lag4-HK1-AJ19-CORE-MX480-B-8U@xe-4/1/0"; gigether-options { 802.3ad ae4; } } xe-4/2/0 { description "lag23-HK1-AJ21-Rakcloud-BD-CE6820-A-42U@48"; disable; gigether-options { 802.3ad ae23; } } xe-4/3/1 { description "lag2-HK1-AJ15-MR-CE5850-A-33U@51"; gigether-options { 802.3ad ae2; } } xe-4/3/2 { description "lag5-hk1-aj15-dwdm-n3064-27u@44"; gigether-options { 802.3ad ae5; } } xe-4/3/3 { description "lag6-hk1-aj15-bd-mx480-8u@4/2/3"; gigether-options { 802.3ad ae6; } } xe-5/0/0 { description "lag21-HK1-AJ15-BAS-CE6851-A-25U@48"; gigether-options { 802.3ad ae21; } } xe-5/0/1 { description "lag22-HK1-AJ15-BAS-CE6851-B-21U@48"; gigether-options { 802.3ad ae22; } } xe-5/1/0 { description "lag4-HK1-AJ19-CORE-MX480-B-8U@xe-5/1/0"; gigether-options { 802.3ad ae4; } } xe-5/2/0 { description "lag23-HK1-AJ21-Rakcloud-BD-CE6820-B-41U@48"; disable; gigether-options { 802.3ad ae23; } } xe-5/3/1 { description "lag2-HK1-AJ15-MR-CE5850-A-33U@52"; gigether-options { 802.3ad ae2; } } xe-5/3/2 { description "lag5-hk1-aj15-dwdm-n3064-27u@45"; gigether-options { 802.3ad ae5; } } xe-5/3/3 { description "lag6-hk1-aj15-bd-mx480-8u@5/2/3"; gigether-options { 802.3ad ae6; } } ae2 { description HK1-AJ15-MR-CE5850-33U-lag2; enable; aggregated-ether-options { lacp { active; } } unit 0 { family inet { address 10.255.129.22/31; } } } ae4 { description "HK1-AJ19-CORE-MX480-B-8U@lag4"; enable; flexible-vlan-tagging; aggregated-ether-options { lacp { active; } } unit 27 { description HK1-AJ19-CORE-MX480-B-8U-lag4.27; vlan-id 27; family inet { address 10.255.129.101/31; } } unit 28 { description HK1-AJ19-CORE-MX480-B-8U-lag4.28; vlan-id 28; family inet { address 10.255.129.103/31; } } unit 29 { description HK1-AJ19-CORE-MX480-B-8U-lag4.29; vlan-id 29; family inet { address 10.255.129.105/31; } } unit 30 { description HK1-AJ19-CORE-MX480-B-8U-lag4.30; vlan-id 30; family inet { address 10.255.129.107/31; } } } ae5 { description hk1-aj15-dwdm-n3064-27u-lag5; flexible-vlan-tagging; aggregated-ether-options { lacp { active; } } unit 17 { description hk2-z449-bd-mx480-8u-lag8.17; vlan-id 17; family inet { address 10.255.248.235/31; } } unit 18 { description hk2-z449-bd-mx480-8u-lag8.18; vlan-id 18; family inet { address 10.255.248.237/31; } } unit 19 { description hk2-z449-bd-mx480-8u-lag8.19; vlan-id 19; family inet { address 10.255.248.239/31; } } unit 20 { description hk2-z449-bd-mx480-8u-lag8.20; vlan-id 20; family inet { address 10.255.248.241/31; } } } ae6 { description hk1-aj15-bd-mx480-8u-lag6; flexible-vlan-tagging; aggregated-ether-options { lacp { active; } } unit 27 { description hk1-aj15-bd-mx480-8u-lag6.27; vlan-id 27; family inet { address 10.255.248.227/31; } } unit 28 { description hk1-aj15-bd-mx480-8u-lag6.28; vlan-id 28; family inet { address 10.255.248.229/31; } } unit 29 { description hk1-aj15-bd-mx480-8u-lag6.29; vlan-id 29; family inet { address 10.255.248.231/31; } } unit 30 { description hk1-aj15-bd-mx480-8u-lag6.30; vlan-id 30; family inet { address 10.255.248.233/31; } } } ae21 { description HK1-AJ15-BAS-CE6851-A-25U-lag1; flexible-vlan-tagging; aggregated-ether-options { lacp { active; } } unit 27 { description CN2ONLY; vlan-id 27; family inet { rpf-check { mode loose; } address 107.148.44.110/28; } } unit 28 { description STREAM01; vlan-id 28; family inet { rpf-check { mode loose; } address 107.148.46.126/27; address 107.148.46.30/28; address 107.148.46.62/27; } } unit 29 { description CTVRF01; vlan-id 29; family inet { rpf-check { mode loose; } address 107.148.128.126/26; address 104.233.252.30/27; address 104.233.253.62/26; address 107.148.129.254/24; address 104.233.254.54/29; address 107.148.12.62/27; address 107.148.12.94/27; address 107.148.128.30/28; address 107.148.128.222/27; address 107.148.130.254/24; address 107.148.131.254/24; address 107.148.128.190/26; address 104.233.252.62/27; address 104.233.252.94/27; address 104.233.252.126/27; address 104.233.252.158/27; address 104.233.255.190/27; address 107.148.128.62/27; address 104.233.252.190/28; address 104.233.253.238/28; address 104.233.253.254/28; address 104.233.253.190/28; address 104.233.255.158/29; } } unit 30 { description global; vlan-id 30; family inet { rpf-check { mode loose; } filter { input icmp-redirect2cn2only; } address 107.148.48.94/27; address 107.148.48.254/27; address 107.148.55.94/27; address 107.148.55.254/27; address 107.148.60.46/29; address 107.148.73.158/29; address 107.148.48.158/27; address 38.63.72.158/27; address 103.88.188.126/25; address 107.148.48.30/27; address 107.148.48.166/29; address 107.148.48.222/27; address 107.148.55.62/27; address 107.148.73.126/27; address 107.148.48.126/27; address 38.177.141.254/27; address 38.177.142.254/27; address 38.177.144.190/27; address 38.177.147.126/27; address 38.177.148.126/27; address 38.177.149.62/27; address 38.177.150.62/27; address 38.177.151.62/27; address 107.148.55.190/27; address 107.148.73.142/28; address 107.148.73.190/28; address 107.148.75.46/28; address 107.149.219.62/27; address 107.148.60.190/27; address 38.177.189.62/27; address 38.177.190.62/27; address 38.177.176.126/27; address 38.177.109.190/27; address 38.177.174.158/27; address 38.173.246.254/27; address 38.177.183.62/27; address 38.177.184.62/27; address 38.11.252.254/26; address 38.177.183.126/26; address 38.177.184.126/26; address 107.148.141.62/26; address 38.14.4.62/26; address 38.14.5.62/26; address 38.14.6.62/26; address 38.14.8.62/26; address 38.11.243.126/26; address 38.11.249.126/26; address 38.11.251.126/26; address 38.14.6.126/26; address 103.88.190.190/26; address 116.204.238.126/26; address 103.88.189.62/26; address 103.88.191.190/26; address 38.11.255.254/27; address 38.11.233.254/27; address 38.11.252.126/27; address 38.11.253.190/27; address 38.11.254.158/27; address 38.11.138.190/27; address 38.14.31.62/27; address 38.33.161.62/27; address 103.88.190.126/25; address 107.149.217.30/29; address 107.148.75.102/29; address 107.148.75.110/29; address 107.148.60.70/29; address 38.33.166.254/26; address 38.33.163.254/26; address 38.33.170.126/26; address 38.33.171.126/26; address 107.148.75.70/29; address 107.149.217.62/29; address 107.149.217.54/29; address 107.148.75.94/29; address 107.148.75.86/29; address 38.63.76.254/26; address 38.63.89.254/26; address 38.63.73.126/26; address 38.63.74.62/26; address 38.173.234.126/26; address 38.173.235.126/26; address 38.173.236.126/26; address 38.173.239.126/26; address 38.14.28.126/26; address 38.11.237.190/26; address 38.173.9.254/26; address 38.173.58.254/26; address 38.11.245.62/27; address 38.11.246.30/27; address 38.11.247.30/27; address 38.33.168.94/27; address 38.173.23.254/27; address 38.173.243.158/27; address 38.173.245.158/27; address 38.33.168.158/27; address 107.149.244.1/27; address 38.33.187.254/24; address 103.88.190.254/26; address 103.88.191.254/26; address 116.204.238.62/26; address 103.88.189.126/26; address 38.33.172.126/26; address 38.33.173.126/26; address 38.33.170.254/26; address 38.33.171.254/26; address 38.173.29.62/26; address 38.173.20.62/26; address 38.11.146.254/26; address 38.11.147.190/26; address 38.11.144.254/26; address 38.11.145.254/26; address 38.11.146.126/26; address 38.33.170.62/26; address 38.33.171.62/26; address 38.33.172.62/26; address 38.33.173.62/26; address 38.173.246.126/26; address 38.177.146.254/24; address 38.11.156.254/24; address 107.149.217.78/28; address 107.148.75.54/29; address 107.149.254.62/28; address 38.63.94.126/26; address 38.63.95.126/26; address 107.148.141.190/26; address 38.63.91.126/26; address 38.177.182.254/24; address 38.177.184.254/26; address 107.148.141.254/26; address 38.11.148.190/26; address 38.177.138.254/26; address 38.63.70.62/26; address 38.63.80.62/26; address 38.63.88.190/26; address 38.63.87.190/26; address 38.14.19.254/26; address 38.14.27.254/26; address 38.33.163.190/26; address 38.11.129.254/26; address 38.173.49.254/26; address 38.173.18.126/26; address 38.11.237.126/26; address 38.11.241.126/26; address 38.63.91.62/26; address 38.11.150.126/26; address 38.33.182.126/26; address 38.11.232.126/26; address 107.148.139.254/24; address 38.177.133.254/26; address 38.177.191.190/26; address 38.177.174.62/26; address 38.177.178.62/26; address 38.173.21.254/26; address 38.11.153.190/26; address 38.33.185.190/26; address 38.177.140.254/26; } } } ae22 { description HK1-AJ15-BAS-CE6851-B-21U-lag1; flexible-vlan-tagging; aggregated-ether-options { lacp { active; } } unit 27 { description CN2ONLY; vlan-id 27; family inet { rpf-check { mode loose; } address 107.148.44.46/28; } } unit 28 { description STREAM01; vlan-id 28; family inet { rpf-check { mode loose; } address 107.148.46.94/27; address 107.148.46.158/27; address 107.148.46.254/27; } } unit 29 { description CTVRF01; vlan-id 29; family inet { rpf-check { mode loose; } address 104.233.254.126/27; address 104.233.254.254/26; address 104.233.253.126/27; address 104.233.253.174/28; address 104.233.255.142/28; } } unit 30 { description global; vlan-id 30; family inet { rpf-check { mode loose; } filter { input icmp-redirect2cn2only; } address 107.148.48.62/27; address 107.148.55.14/28; address 107.148.55.126/27; address 107.148.55.142/28; address 107.148.55.222/27; address 107.148.60.254/26; address 107.148.60.30/28; address 107.148.73.30/27; address 107.148.73.62/27; address 38.173.54.254/24; address 107.148.60.158/27; address 107.148.73.94/27; address 38.12.0.1/24; address 38.173.52.254/24; address 38.173.246.62/27; address 38.173.247.30/27; address 38.11.253.254/27; address 38.173.0.94/27; address 38.173.5.30/27; address 38.173.6.30/27; address 38.11.254.222/27; address 38.11.252.158/27; address 38.11.249.62/26; address 38.11.251.62/26; address 38.11.243.62/26; address 38.14.27.126/26; address 107.148.55.158/28; address 107.148.60.62/29; address 107.148.73.174/29; address 107.148.75.62/29; address 107.149.217.22/29; address 38.33.161.94/27; address 38.33.165.30/27; address 38.33.166.30/27; address 38.33.175.126/27; address 38.33.176.126/27; address 38.33.172.222/27; address 38.33.173.222/27; address 38.33.177.94/27; address 38.11.135.94/27; address 38.12.226.254/27; address 38.12.232.62/27; address 38.12.233.62/27; address 38.12.234.62/27; address 38.12.231.94/27; address 38.12.228.158/27; address 38.12.229.158/27; address 38.12.230.158/27; address 107.149.217.94/29; address 107.149.219.78/29; address 38.63.74.126/26; address 38.63.75.62/26; address 38.63.78.62/26; address 38.63.87.62/26; address 38.63.75.126/26; address 38.63.78.126/26; address 38.63.87.126/26; address 38.63.65.62/26; address 107.149.219.126/27; address 38.177.159.190/26; address 38.177.139.62/26; address 38.177.140.62/26; address 38.177.141.62/26; address 38.173.6.126/26; address 38.173.7.126/26; address 38.173.30.62/26; address 38.173.240.62/26; address 107.149.219.94/29; address 38.173.250.126/27; address 38.173.252.126/27; address 38.173.10.126/27; address 38.33.168.62/27; address 38.33.181.254/27; address 38.63.91.254/27; address 38.173.23.222/27; address 38.11.245.30/27; address 38.173.55.254/26; address 38.173.13.254/26; address 38.173.224.254/26; address 38.173.232.254/26; address 38.177.150.94/27; address 38.177.151.94/27; address 38.177.147.158/27; address 38.177.152.30/27; address 38.177.153.30/27; address 38.177.149.190/27; address 38.177.154.62/27; address 38.63.72.62/27; address 38.173.45.190/26; address 38.12.235.126/26; address 38.12.224.254/26; address 38.11.232.62/26; address 38.177.170.158/27; address 38.11.228.126/27; address 38.11.229.126/27; address 38.11.255.62/27; address 38.177.132.190/27; address 38.177.136.254/27; address 38.177.137.254/27; address 38.177.174.190/27; address 38.14.18.190/26; address 38.14.28.190/26; address 38.14.20.190/26; address 38.12.250.126/26; address 38.177.177.126/26; address 38.177.179.62/26; address 38.177.180.62/26; address 38.177.176.254/26; address 38.33.164.254/26; address 38.33.165.254/26; address 38.33.161.254/26; address 38.33.162.254/26; address 38.12.243.254/24; address 38.173.248.126/26; address 38.173.251.126/26; address 38.173.255.190/26; address 38.173.254.126/26; address 107.148.60.94/28; address 107.148.75.14/28; address 38.173.19.126/26; address 38.173.237.126/26; address 38.173.238.126/26; address 38.177.169.254/26; address 38.173.7.30/27; address 38.11.255.222/27; address 38.11.233.222/27; address 38.14.9.190/27; address 38.14.11.190/27; address 38.14.25.126/27; address 38.14.5.190/27; address 38.14.6.190/27; address 38.63.73.62/26; address 38.177.133.126/26; address 38.177.134.126/26; address 38.177.132.254/26; address 38.14.17.190/26; address 38.11.154.190/26; address 38.11.250.190/26; address 38.11.128.190/26; address 38.63.94.62/26; address 38.63.95.62/26; address 38.173.13.190/26; address 38.173.11.190/26; address 38.33.167.254/24; address 38.14.10.190/27; address 38.14.3.254/27; address 38.14.4.94/27; address 38.14.5.94/27; address 38.63.68.30/27; address 38.63.69.30/27; address 38.63.64.158/27; address 38.63.83.30/27; address 38.14.22.62/26; address 38.11.130.62/26; address 38.11.135.254/26; address 38.11.138.126/26; address 38.177.172.254/24; address 38.173.236.222/27; address 38.173.235.222/27; address 38.173.255.254/27; address 38.173.240.126/27; address 38.14.1.254/27; address 38.14.12.254/27; address 38.14.13.254/27; address 38.14.14.190/27; } } } ae23 { description HK1-AJ21-Rakcloud-BD-CE6820-AB-lag23; flexible-vlan-tagging; aggregated-ether-options { lacp { active; } } unit 27 { description CN2ONLY; vlan-id 27; family inet { rpf-check { mode loose; } address 107.148.45.254/24; address 104.233.220.254/24; } } unit 28 { description STREAM01; vlan-id 28; family inet { rpf-check { mode loose; } address 107.148.47.254/24; address 107.149.214.254/24; } } unit 29 { description CTVRF01; vlan-id 29; family inet { rpf-check { mode loose; } address 104.233.253.158/28; address 107.148.8.254/24; address 107.148.9.254/24; address 107.148.12.254/25; address 107.148.13.254/24; address 107.148.14.254/24; address 107.148.15.254/24; address 107.148.236.254/24; address 107.148.237.254/24; address 107.148.238.254/24; address 107.148.239.254/24; address 107.148.10.254/24; address 107.148.11.254/24; address 104.233.254.46/28; address 104.233.254.190/26; } } unit 30 { description global; vlan-id 30; family inet { rpf-check { mode loose; } filter { input icmp-redirect2cn2only; } address 107.148.50.254/24; address 107.148.49.254/24; address 107.148.51.254/24; address 107.148.52.254/24; address 107.148.53.254/24; address 38.163.109.126/26; address 38.163.110.126/26; address 38.163.111.126/26; address 38.163.107.126/26; address 107.148.54.254/24; address 107.148.61.254/24; address 107.148.62.254/24; address 107.148.63.254/24; address 38.63.85.254/24; address 38.177.96.126/27; address 38.177.97.126/27; address 38.177.98.126/27; address 38.177.99.126/27; address 38.177.100.126/27; address 38.177.101.126/27; address 38.177.102.126/27; address 38.177.103.62/27; address 107.148.72.254/24; address 38.63.84.254/24; address 38.173.37.254/24; address 38.173.46.254/24; address 38.63.93.254/26; address 38.173.59.190/26; address 38.173.56.62/26; address 38.173.60.62/26; address 38.177.128.126/26; address 38.177.129.126/26; address 38.177.130.126/26; address 38.177.131.126/26; address 38.177.85.254/27; address 38.177.86.254/27; address 38.177.87.254/27; address 38.177.104.94/27; address 38.177.105.30/27; address 38.177.106.30/27; address 38.177.107.30/27; address 38.177.108.30/27; address 38.173.47.254/24; address 38.63.67.254/26; address 38.63.68.254/26; address 38.63.69.254/26; address 38.173.20.158/27; address 38.173.21.158/27; address 38.173.18.254/27; address 38.173.22.190/27; address 38.173.19.254/27; address 107.148.74.254/24; address 38.177.173.94/27; address 38.177.163.94/27; address 38.173.2.190/27; address 38.173.3.190/27; address 38.163.123.126/27; address 38.177.108.94/27; address 38.177.91.222/27; address 38.177.185.254/27; address 38.177.73.126/27; address 38.177.74.190/27; address 38.177.152.222/27; address 38.177.153.222/27; address 38.163.186.94/27; address 38.177.69.94/27; address 38.177.161.222/27; address 38.177.162.158/27; address 38.177.168.94/27; address 38.163.121.254/27; address 38.177.69.62/27; address 38.177.70.62/27; address 38.177.78.30/27; address 38.177.84.222/27; address 38.177.73.190/26; address 38.177.75.254/26; address 38.177.163.254/27; address 38.177.145.126/27; address 38.177.164.126/27; address 38.173.1.254/27; address 38.173.2.222/27; address 38.173.3.222/27; address 38.173.21.30/27; address 38.173.3.254/27; address 38.173.35.62/27; address 38.173.36.62/27; address 38.173.235.30/27; address 38.173.236.30/27; address 38.173.239.30/27; address 38.177.103.222/27; address 38.177.105.94/27; address 38.177.106.94/27; address 38.173.58.126/26; address 38.173.228.126/26; address 38.173.241.254/24; address 38.177.89.222/27; address 38.177.80.94/27; address 38.177.90.94/27; address 38.177.91.94/27; address 38.177.92.94/27; address 38.177.93.94/27; address 38.177.94.30/27; address 38.177.96.94/27; address 107.148.75.254/25; address 38.177.102.190/27; address 38.177.103.190/27; address 38.177.104.62/27; address 38.177.133.190/27; address 38.177.139.254/27; address 38.177.158.94/27; address 38.177.159.94/27; address 38.177.155.158/27; address 38.177.158.254/26; address 107.148.143.62/26; address 116.204.237.254/24; address 38.177.148.158/27; address 38.177.166.94/27; address 38.177.168.30/27; address 38.177.67.254/27; address 38.177.178.126/27; address 38.177.70.254/27; address 38.177.179.126/27; address 38.177.180.126/27; address 38.177.161.190/26; address 38.177.157.126/26; address 38.173.244.190/26; address 38.173.246.190/26; address 38.177.150.254/27; address 38.177.151.254/27; address 38.177.154.126/27; address 38.177.145.62/27; address 107.149.216.254/24; address 38.177.165.62/27; address 38.177.166.62/27; address 38.177.168.62/27; address 38.177.145.158/27; address 38.177.94.222/27; address 38.177.173.62/27; address 38.177.176.62/27; address 38.177.177.62/27; address 107.148.138.254/24; address 38.177.165.126/27; address 38.177.166.126/27; address 38.177.65.222/27; address 38.177.67.222/27; address 38.177.178.94/27; address 38.177.185.126/27; address 38.177.186.126/27; address 38.177.187.126/27; address 38.173.25.62/27; address 38.173.26.62/27; address 38.177.189.94/27; address 38.177.190.94/27; address 38.173.27.30/27; address 38.173.28.62/27; address 38.177.92.222/27; address 38.177.103.94/27; address 38.177.189.254/27; address 38.173.27.190/27; address 38.173.44.158/27; address 38.173.49.62/27; address 38.173.50.62/27; address 38.177.94.94/27; address 38.177.157.222/27; address 38.177.191.30/27; address 38.173.2.158/27; address 38.173.3.158/27; address 38.177.69.254/27; address 38.177.68.158/27; address 38.177.173.126/27; address 38.177.94.190/27; address 38.177.186.254/27; address 38.177.187.254/27; address 38.177.188.190/27; address 38.177.177.222/27; address 38.177.185.158/27; address 38.177.171.190/27; address 38.177.163.126/27; address 38.177.72.94/27; address 38.177.169.62/27; address 38.177.64.94/27; address 38.177.107.94/27; address 38.177.66.222/27; address 38.177.186.158/27; address 38.177.170.30/27; address 38.173.25.126/27; address 38.173.26.126/27; address 38.177.66.94/27; address 38.173.60.222/27; address 38.173.49.158/27; address 38.173.238.158/27; address 38.173.234.158/27; address 38.173.239.158/27; address 38.173.24.158/27; address 38.173.59.222/27; address 38.173.56.94/27; address 38.173.60.94/27; address 38.173.22.30/27; address 38.173.17.222/27; address 38.177.189.190/27; address 38.177.190.190/27; address 38.173.59.94/27; address 38.173.61.62/27; address 38.173.244.62/27; address 38.177.81.222/27; address 38.173.23.158/27; address 38.173.16.94/27; address 38.173.17.30/27; address 38.173.18.30/27; address 38.177.187.190/27; address 38.173.29.126/27; address 38.173.16.126/27; address 38.173.17.62/27; address 38.173.18.62/27; address 38.173.19.30/27; address 38.173.237.222/27; address 38.173.30.158/27; address 38.173.19.62/27; address 38.173.237.254/27; address 38.173.235.158/27; address 38.173.236.158/27; address 38.177.81.254/27; address 38.173.23.190/27; address 38.11.245.94/27; address 38.11.246.94/27; address 38.11.247.126/27; address 38.11.245.158/27; address 38.11.246.158/27; address 38.11.248.30/27; address 38.177.74.254/27; address 38.177.75.190/27; address 38.177.76.254/27; address 38.177.71.126/27; address 38.173.238.62/27; address 38.173.239.254/27; address 38.177.170.126/27; address 38.173.255.222/27; address 38.11.233.62/27; address 38.11.225.190/27; address 38.11.226.190/27; address 38.11.228.190/27; address 38.11.230.126/27; address 38.11.231.126/27; address 38.11.229.190/27; address 38.177.71.94/27; address 38.177.191.126/27; address 38.177.101.254/27; address 38.177.102.254/27; address 38.177.176.190/27; address 38.173.22.62/27; address 38.173.23.62/27; address 38.173.17.254/27; address 38.173.16.254/27; address 38.173.239.222/27; address 38.177.170.94/27; address 38.173.238.30/27; address 38.11.255.94/27; address 38.11.233.94/27; address 38.11.225.222/27; address 38.11.226.222/27; address 38.11.228.222/27; address 38.11.238.254/24; address 38.11.233.190/27; address 38.11.254.62/27; address 38.11.234.62/27; address 38.177.92.158/27; address 38.177.92.190/27; address 38.177.132.158/27; address 38.177.136.222/27; address 38.177.137.222/27; address 38.173.27.222/27; address 38.173.28.94/27; address 38.173.0.158/27; address 38.173.1.158/27; address 38.177.165.190/27; address 38.177.166.158/27; address 38.177.145.222/27; address 38.177.164.222/27; address 38.177.88.94/27; address 38.177.71.158/27; address 38.177.82.158/27; address 38.177.89.30/27; address 38.177.84.158/27; address 38.177.148.254/27; address 38.177.152.126/27; address 38.177.153.126/27; address 38.177.88.62/27; address 38.177.166.190/27; address 38.177.165.222/27; address 38.177.64.222/27; address 38.177.191.222/27; address 38.177.174.94/27; address 38.177.173.30/27; address 38.177.176.30/27; address 38.173.247.254/25; address 38.177.100.94/27; address 38.177.101.94/27; address 38.177.102.94/27; address 38.177.103.158/27; address 38.177.105.62/27; address 38.177.106.62/27; address 38.177.107.62/27; address 38.177.149.254/27; address 38.177.133.30/27; address 38.177.134.30/27; address 38.177.135.30/27; address 38.177.140.190/27; address 38.177.128.222/27; address 38.177.129.222/27; address 38.177.130.222/27; address 38.177.157.158/27; address 38.173.49.190/27; address 38.177.177.254/27; address 38.177.185.190/27; address 38.177.186.190/27; address 38.177.187.158/27; address 38.173.29.94/27; address 38.173.254.62/27; address 38.173.255.62/27; address 38.173.237.30/27; address 38.173.27.126/27; address 38.173.22.254/27; address 38.177.181.62/27; address 107.149.218.254/24; address 38.11.231.190/27; address 38.11.248.254/27; address 38.11.230.190/27; address 38.11.253.126/27; address 38.11.254.126/27; address 38.11.234.126/27; address 38.11.246.254/27; address 38.11.247.254/27; address 38.14.9.62/27; address 38.11.224.30/27; address 38.11.234.158/27; address 38.14.24.30/27; address 38.14.25.30/27; address 38.14.26.30/27; address 38.14.9.158/27; address 38.14.11.158/27; address 38.14.29.158/27; address 38.14.30.158/27; address 38.14.27.158/27; address 38.14.24.94/27; address 38.14.25.94/27; address 38.14.26.94/27; address 38.14.9.222/27; address 38.14.11.222/27; address 38.14.29.222/27; address 38.11.224.62/27; address 38.11.234.190/27; address 38.14.9.126/27; address 38.14.11.126/27; address 38.14.27.62/27; address 38.14.25.62/27; address 38.14.26.62/27; address 38.14.27.190/27; address 38.14.24.126/27; address 38.14.26.126/27; address 38.11.249.158/27; address 38.11.251.158/27; address 38.11.243.158/27; address 38.14.5.158/27; address 38.14.6.158/27; address 38.14.24.222/27; address 38.14.25.222/27; address 38.14.26.222/27; address 38.11.251.222/27; address 38.14.4.222/27; address 38.14.8.222/27; address 38.11.227.126/25; address 38.14.30.126/27; address 38.14.29.254/27; address 38.14.25.254/27; address 38.14.26.254/27; address 38.11.251.254/27; address 38.14.4.254/27; address 38.14.8.254/27; address 38.11.249.222/27; address 38.11.244.254/24; address 38.14.12.126/26; address 38.14.13.126/26; address 38.14.14.126/26; address 38.14.0.190/26; address 38.11.249.254/27; address 38.14.8.94/27; address 38.11.243.222/27; address 38.11.227.158/27; address 38.11.240.30/27; address 38.14.0.30/27; address 38.14.1.30/27; address 38.14.12.30/27; address 107.148.143.126/26; address 107.148.141.126/26; address 38.14.14.254/26; address 38.11.250.126/26; address 38.11.151.62/27; address 38.11.154.62/27; address 38.11.128.62/27; address 38.11.129.62/27; address 38.11.131.254/27; address 38.11.132.190/27; address 38.11.133.190/27; address 38.11.134.190/27; address 38.11.140.254/27; address 38.11.141.254/27; address 38.11.142.254/27; address 38.11.143.190/27; address 38.11.144.190/27; address 38.11.145.190/27; address 38.11.146.62/27; address 38.11.147.62/27; address 38.11.157.254/25; address 38.14.22.222/27; address 38.11.130.222/27; address 38.11.132.30/27; address 38.11.133.30/27; address 38.11.134.30/27; address 38.11.135.30/27; address 38.11.136.158/27; address 38.11.137.158/27; address 38.11.159.126/26; address 38.14.19.126/26; address 38.11.150.254/26; address 38.11.145.62/26; address 38.11.139.254/26; address 38.11.140.190/26; address 38.11.141.190/26; address 38.11.142.190/26; address 38.11.158.126/26; address 38.11.159.190/26; address 38.14.19.190/26; address 38.11.157.126/26; address 38.11.158.190/26; address 38.11.143.62/26; address 38.11.144.62/26; address 38.11.145.126/26; address 38.33.162.126/26; address 38.33.163.126/26; address 38.33.164.126/26; address 38.33.165.126/26; address 38.11.237.254/26; address 38.11.241.190/26; address 38.14.18.254/26; address 38.14.28.254/26; address 38.33.188.190/26; address 38.33.189.190/26; address 38.11.128.254/26; address 38.14.22.126/26; address 38.11.130.126/26; address 38.11.129.190/26; address 38.11.239.158/27; address 38.11.136.30/27; address 38.11.137.30/27; address 38.14.22.190/27; address 38.11.130.190/27; address 38.14.3.94/27; address 38.14.7.94/27; address 38.14.10.94/27; address 38.14.16.254/24; address 38.12.251.30/27; address 38.12.252.30/27; address 38.12.253.30/27; address 38.12.254.30/27; address 38.12.255.30/27; address 38.14.7.158/27; address 38.14.10.158/27; address 38.14.3.222/27; address 38.11.155.254/24; address 38.33.185.126/26; address 38.12.225.126/26; address 38.12.226.126/26; address 38.12.228.254/27; address 38.12.229.254/27; address 38.12.230.254/27; address 38.12.231.190/27; address 38.12.238.94/27; address 38.12.232.158/27; address 38.12.233.158/27; address 38.12.234.158/27; address 38.12.227.254/24; address 38.33.160.254/24; address 38.12.232.254/27; address 38.12.233.254/27; address 38.12.234.254/27; address 38.12.238.190/27; address 38.12.239.94/27; address 38.12.240.94/27; address 38.12.241.94/27; address 38.12.247.30/27; address 38.12.249.158/27; address 38.12.236.158/27; address 38.12.248.94/27; address 38.12.249.94/27; address 38.12.236.94/27; address 38.12.239.222/27; address 38.12.247.222/27; address 38.12.248.222/27; address 38.12.247.126/27; address 38.12.239.190/27; address 38.12.240.190/27; address 38.12.241.190/27; address 38.63.76.62/27; address 38.63.89.62/27; address 38.63.73.190/27; address 38.63.66.158/27; address 38.63.74.158/27; address 38.63.75.158/27; address 38.63.78.158/27; address 38.63.94.222/27; address 38.63.77.254/24; address 38.63.95.254/27; address 38.63.88.126/27; address 38.63.93.190/27; address 38.63.70.222/27; address 38.63.69.158/27; address 38.63.72.222/27; address 38.63.71.94/27; address 38.63.80.222/27; address 38.12.249.254/27; address 38.12.236.254/27; address 38.63.67.62/27; address 38.63.68.62/27; address 38.63.69.62/27; address 38.63.64.190/27; address 38.63.70.126/27; address 38.63.88.222/27; address 38.63.80.94/27; address 38.63.83.94/27; address 38.63.76.158/27; address 38.63.89.158/27; address 107.149.217.254/25; address 107.149.219.254/25; address 38.177.162.94/27; address 38.177.163.158/27; address 38.177.161.94/27; address 38.177.166.222/27; address 38.12.225.190/26; address 38.173.0.30/27; address 38.173.1.30/27; address 38.173.2.30/27; address 38.173.3.30/27; address 38.173.21.126/27; address 38.173.22.126/27; address 38.173.23.126/27; address 38.173.18.222/27; address 107.149.240.254/24; address 38.173.35.254/26; address 38.173.43.126/26; address 38.173.44.254/26; address 38.173.49.126/26; address 38.173.60.158/27; address 38.173.61.30/27; address 38.173.27.254/27; address 38.173.28.126/27; address 38.173.0.190/27; address 38.173.7.62/27; address 38.173.5.62/27; address 38.173.6.62/27; address 38.173.27.158/27; address 38.173.35.126/27; address 38.173.44.190/27; address 38.173.49.30/27; address 38.173.50.30/27; address 38.173.24.190/27; address 38.173.59.254/27; address 38.173.56.126/27; address 38.173.51.254/24; address 38.173.7.254/26; address 38.63.87.254/26; address 38.63.65.254/26; address 38.177.167.126/26; address 38.173.9.190/26; address 38.173.58.190/26; address 38.173.254.190/26; address 38.173.228.190/26; address 38.173.246.222/27; address 38.173.242.126/27; address 38.173.248.62/27; address 38.173.251.62/27; address 38.33.162.62/27; address 38.33.163.62/27; address 38.33.164.62/27; address 38.11.138.222/27; address 38.33.177.254/27; address 38.14.18.126/27; address 38.173.254.222/27; address 38.173.228.222/27; address 38.173.25.254/26; address 38.173.26.254/26; address 38.173.41.190/26; address 38.173.34.190/26; address 38.173.237.190/26; address 38.173.41.254/26; address 38.173.34.254/26; address 38.173.62.190/26; address 38.173.62.254/26; address 38.173.225.190/26; address 38.173.227.190/26; address 38.173.230.190/26; address 38.63.83.62/27; address 38.63.69.94/27; address 38.63.64.222/27; address 38.63.70.94/27; address 38.33.181.190/27; address 38.63.91.190/27; address 38.173.243.94/27; address 38.173.245.94/27; address 107.149.242.254/24; address 38.173.250.190/26; address 38.173.252.254/26; address 38.33.168.254/26; address 38.173.10.190/26; address 38.33.168.190/27; address 38.173.10.222/27; address 38.173.55.30/27; address 38.173.11.30/27; address 38.173.13.30/27; address 38.173.15.30/27; address 38.173.224.30/27; address 38.173.232.30/27; address 38.33.182.30/27; address 38.173.55.62/27; address 38.173.11.62/27; address 38.173.15.62/27; address 38.173.10.254/27; address 38.173.13.94/27; address 38.173.224.94/27; address 38.173.232.94/27; address 38.177.132.94/27; address 38.177.128.158/27; address 38.177.129.158/27; address 38.177.130.158/27; address 38.177.178.190/27; address 38.177.179.190/27; address 38.177.180.190/27; address 38.177.185.62/27; address 38.11.147.126/27; address 38.11.148.62/27; address 38.11.149.62/27; address 38.11.150.62/27; address 38.14.3.126/27; address 38.14.7.126/27; address 38.14.10.126/27; address 38.11.239.30/27; address 38.173.14.254/27; address 38.173.243.62/27; address 38.173.245.62/27; address 38.173.250.62/27; address 38.173.252.62/27; address 38.173.10.62/27; address 38.33.181.158/27; address 38.63.91.158/27; address 38.14.20.62/27; address 38.33.185.62/27; address 38.12.225.62/27; address 38.12.226.62/27; address 38.11.153.222/27; address 38.12.228.30/27; address 38.12.229.30/27; address 38.12.230.30/27; address 38.173.15.254/26; address 38.173.231.126/26; address 38.173.234.190/27; address 38.173.238.222/27; address 38.177.183.190/27; address 38.173.243.190/27; address 38.173.245.190/27; address 38.173.231.62/27; address 38.173.61.126/27; address 38.173.230.222/27; address 38.173.55.190/27; address 38.173.224.190/27; address 38.173.232.190/27; address 38.173.45.62/27; address 38.173.45.126/27; address 38.173.15.190/27; address 38.173.8.254/24; address 38.12.232.30/27; address 38.12.233.30/27; address 38.12.234.30/27; address 38.14.17.94/27; address 38.11.151.94/27; address 38.11.154.94/27; address 38.11.128.94/27; address 38.173.14.30/27; address 38.12.235.30/27; address 38.12.231.62/27; address 38.33.169.30/27; address 38.12.224.158/27; address 38.12.250.30/27; address 107.149.243.254/24; address 38.14.29.190/27; address 38.14.24.158/27; address 38.14.25.158/27; address 38.14.26.158/27; address 38.14.4.158/27; address 38.14.8.158/27; address 38.11.131.30/27; address 38.14.19.30/27; address 38.12.251.62/27; address 38.12.252.62/27; address 38.12.229.126/27; address 38.12.230.126/27; address 38.12.226.222/27; address 38.12.250.62/27; address 38.12.235.62/27; address 38.12.224.190/27; address 38.12.240.254/26; address 38.12.241.254/26; address 38.12.247.190/26; address 38.12.248.190/26; address 38.63.66.254/26; address 38.14.5.254/26; address 38.14.6.254/26; address 38.173.11.254/26; address 107.149.245.254/24; address 38.177.164.30/27; address 38.177.163.222/27; address 38.177.145.94/27; address 38.177.165.94/27; address 38.177.179.94/27; address 38.177.180.94/27; address 38.177.185.94/27; address 38.177.186.94/27; address 38.177.164.94/27; address 38.177.145.190/27; address 38.177.165.158/27; address 38.177.187.94/27; address 38.173.5.158/27; address 38.173.6.158/27; address 38.173.7.158/27; address 38.173.21.62/27; address 107.149.247.254/24; address 38.177.189.222/27; address 38.63.88.30/27; address 38.177.176.158/27; address 38.177.188.222/27; address 38.177.169.94/27; address 38.173.60.254/27; address 38.173.235.190/27; address 38.173.236.190/27; address 38.14.21.254/24; address 38.63.66.126/26; address 38.63.67.190/26; address 38.173.234.62/26; address 38.177.179.254/26; address 38.177.128.62/27; address 38.177.129.62/27; address 38.177.130.62/27; address 38.177.132.126/27; address 38.177.133.62/27; address 38.177.134.62/27; address 38.177.135.62/27; address 38.177.137.62/27; address 38.177.150.190/27; address 38.177.151.190/27; address 38.63.72.94/27; address 38.177.155.94/27; address 38.177.154.158/27; address 38.177.157.30/27; address 38.177.158.30/27; address 38.177.159.30/27; address 38.11.226.94/27; address 38.11.228.94/27; address 38.11.255.126/27; address 38.11.233.126/27; address 38.11.231.222/27; address 38.11.248.158/27; address 38.11.252.62/27; address 38.11.253.62/27; address 107.149.244.254/24; address 38.173.237.62/27; address 38.177.171.158/27; address 38.173.244.30/27; address 38.11.224.126/27; address 38.11.225.30/27; address 38.11.226.30/27; address 38.11.228.30/27; address 38.11.229.30/27; address 38.14.17.254/26; address 38.11.151.254/26; address 38.11.154.254/26; address 38.11.250.254/26; address 38.173.50.254/25; address 38.177.162.190/27; address 38.177.168.126/27; address 38.173.0.62/27; address 38.173.1.222/27; address 38.173.4.158/27; address 38.173.21.94/27; address 38.173.22.94/27; address 38.173.23.94/27; address 38.173.249.254/24; address 107.149.246.254/24; address 107.149.252.1/24; address 38.173.231.254/25; address 38.11.225.254/27; address 38.11.226.254/27; address 38.11.228.254/27; address 38.11.231.254/27; address 38.11.229.254/27; address 38.11.233.158/27; address 38.11.252.30/27; address 38.11.253.30/27; address 107.149.241.254/24; address 38.63.64.30/27; address 38.63.66.30/27; address 38.63.68.158/27; address 38.63.70.158/27; address 38.173.245.254/26; address 38.173.250.254/26; address 38.173.252.190/26; address 38.177.171.254/26; address 38.173.30.254/27; address 38.173.236.254/27; address 38.173.59.62/27; address 38.173.235.254/27; address 38.11.248.94/27; address 38.11.247.190/27; address 38.11.224.94/27; address 38.11.245.222/27; address 38.14.12.222/27; address 38.14.13.222/27; address 38.14.14.158/27; address 38.11.250.30/27; address 38.14.17.30/27; address 38.11.129.94/27; address 38.11.151.158/27; address 38.11.239.94/27; address 38.11.131.126/27; address 38.11.132.126/27; address 38.11.133.126/27; address 38.11.134.126/27; address 38.11.135.126/27; address 38.11.239.190/27; address 38.11.136.62/27; address 38.11.137.62/27; address 38.11.151.30/27; address 38.11.154.30/27; address 38.11.128.30/27; address 38.11.129.30/27; address 38.11.131.222/27; address 38.11.132.158/27; address 38.11.133.158/27; address 38.11.134.158/27; address 38.11.136.254/27; address 38.11.137.254/27; address 38.11.140.222/27; address 38.11.141.222/27; address 38.11.142.222/27; address 38.11.143.158/27; address 38.11.144.158/27; address 38.11.145.158/27; address 38.11.146.30/27; address 38.11.147.30/27; address 38.11.143.222/27; address 38.11.148.30/27; address 38.11.149.30/27; address 38.11.150.30/27; address 38.14.19.62/27; address 38.11.138.158/27; address 38.11.147.94/27; address 38.14.31.30/27; address 38.33.161.30/27; address 38.33.162.30/27; address 38.33.175.30/27; address 38.33.176.30/27; address 38.33.172.254/27; address 38.33.173.254/27; address 38.14.31.94/27; address 38.33.162.190/27; address 38.33.177.126/27; address 38.33.178.94/27; address 38.33.175.158/27; address 38.33.176.158/27; address 38.11.237.30/27; address 38.11.241.30/27; address 38.11.241.254/27; address 38.33.178.190/27; address 38.33.188.62/27; address 38.33.189.62/27; address 38.33.190.62/27; address 38.14.1.158/27; address 38.14.13.190/27; address 38.14.3.30/27; address 38.33.190.94/27; address 38.14.3.62/27; address 38.14.7.30/27; address 38.14.10.30/27; address 38.33.179.62/27; address 38.14.22.158/27; address 38.11.130.158/27; address 38.11.136.94/27; address 38.33.190.190/27; address 38.14.7.62/27; address 38.14.10.62/27; address 38.11.137.94/27; address 38.33.179.94/27; address 38.11.131.158/27; address 38.11.239.254/27; address 38.11.140.126/27; address 38.12.253.62/27; address 38.63.83.254/26; address 38.177.169.190/26; address 38.173.14.190/26; address 38.173.243.254/26; address 38.63.71.62/27; address 38.63.80.190/27; address 38.177.128.30/27; address 38.177.129.30/27; address 38.177.130.30/27; address 38.177.131.30/27; address 38.177.132.30/27; address 38.177.138.62/27; address 38.12.252.254/27; address 38.12.255.222/27; address 38.12.225.254/27; address 38.12.226.190/27; address 38.12.232.190/27; address 38.12.233.190/27; address 38.12.234.190/27; address 38.12.238.158/27; address 38.177.150.30/27; address 38.177.151.30/27; address 38.177.144.222/27; address 38.177.149.94/27; address 38.177.131.62/27; address 38.177.132.62/27; address 38.177.128.190/27; address 38.177.129.190/27; address 38.177.130.190/27; address 38.177.137.30/27; address 38.177.138.30/27; address 38.177.139.126/27; address 38.173.38.254/24; address 38.173.23.30/27; address 38.173.16.222/27; address 38.173.26.94/27; address 38.173.30.190/27; address 38.173.238.190/27; address 38.173.239.190/27; address 38.177.170.62/27; address 38.173.59.126/27; address 38.11.226.126/27; address 38.11.229.94/27; address 38.11.255.30/27; address 38.11.233.30/27; address 38.11.225.158/27; address 38.11.228.158/27; address 38.11.230.94/27; address 38.11.231.94/27; address 38.11.149.190/26; address 38.173.55.126/26; address 38.177.180.254/26; address 38.177.188.126/26; address 38.177.137.94/27; address 38.177.138.126/27; address 38.177.140.126/27; address 38.177.141.94/27; address 38.177.142.94/27; address 38.177.139.158/27; address 38.177.144.30/27; address 38.177.147.94/27; address 38.173.48.254/24; address 38.177.162.30/27; address 38.177.163.30/27; address 38.177.145.30/27; address 38.177.164.62/27; address 38.177.165.30/27; address 38.177.166.30/27; address 38.177.181.158/27; address 38.177.178.158/27; address 38.173.20.126/26; address 38.173.16.62/26; address 38.173.17.126/26; address 38.177.159.254/26; address 38.173.57.254/24; address 38.33.180.254/24; address 38.33.183.254/24; address 38.11.226.158/27; address 38.11.229.158/27; address 38.11.248.190/27; address 38.11.254.190/27; address 38.173.0.126/27; address 38.11.252.190/27; address 38.14.29.126/27; address 38.14.30.94/27; address 38.11.254.254/27; address 38.14.25.190/27; address 38.14.26.190/27; address 38.11.249.190/27; address 38.11.251.190/27; address 38.11.243.190/27; address 38.14.4.190/27; address 38.14.8.190/27; address 38.33.186.254/24; address 38.177.161.254/27; address 38.177.191.62/27; address 38.173.58.30/27; address 38.177.170.190/27; address 38.11.246.190/27; address 38.11.248.126/27; address 38.11.247.158/27; address 38.11.224.158/27; address 38.177.181.254/26; address 38.177.186.62/26; address 38.177.187.62/26; address 38.63.64.126/26; address 38.11.229.222/27; address 38.11.231.158/27; address 38.11.248.222/27; address 38.11.253.94/27; address 38.11.254.94/27; address 38.11.234.94/27; address 38.11.246.222/27; address 38.11.247.222/27; address 38.14.31.254/26; address 38.11.230.62/26; address 38.11.231.62/26; address 38.33.166.190/26; address 38.63.93.126/25; address 38.173.42.254/24; address 38.11.236.254/24; address 38.11.242.254/24; address 38.173.24.126/26; address 38.173.4.254/26; address 38.173.1.126/26; address 38.11.153.62/26; address 38.11.132.62/27; address 38.11.133.62/27; address 38.11.134.62/27; address 38.11.135.62/27; address 38.11.136.190/27; address 38.11.137.190/27; address 38.11.138.62/27; address 38.11.139.62/27; address 107.148.140.254/24; address 107.148.143.254/25; address 107.149.252.254/24; address 38.11.232.254/25; address 38.33.169.254/25; address 38.177.191.254/27; address 38.177.174.126/27; address 38.177.177.30/27; address 38.173.0.222/27; address 38.177.181.190/27; address 38.173.17.158/27; address 38.173.18.158/27; address 38.173.19.190/27; address 38.63.71.254/25; address 38.11.252.94/27; address 38.11.253.158/27; address 38.14.9.30/27; address 38.14.11.30/27; address 38.14.29.30/27; address 38.14.30.62/27; address 38.14.24.190/27; address 38.11.250.62/27; address 38.11.253.222/27; address 38.14.17.62/27; address 38.11.129.126/27; address 38.11.151.190/27; address 38.14.22.254/27; address 38.11.130.254/27; address 38.11.239.126/27; address 38.11.131.62/27; address 38.63.90.254/25; address 38.11.132.254/27; address 38.11.133.254/27; address 38.11.134.254/27; address 38.11.135.190/27; address 38.33.190.126/27; address 38.14.0.254/27; address 38.14.1.190/27; address 38.14.13.158/27; address 38.11.139.126/26; address 38.11.140.62/26; address 38.11.141.62/26; address 38.11.142.62/26; address 38.14.14.62/27; address 38.11.227.222/27; address 38.11.240.94/27; address 38.14.1.222/27; address 38.33.188.94/27; address 38.33.189.222/27; address 38.11.239.62/27; address 38.11.136.126/27; address 38.11.139.158/27; address 38.14.4.126/27; address 38.14.5.126/27; address 38.14.7.254/27; address 38.14.10.254/27; address 38.33.179.254/27; address 38.14.20.30/27; address 38.11.153.254/27; address 38.14.20.222/27; address 38.33.185.222/27; address 38.63.76.30/27; address 38.63.89.30/27; address 38.63.73.158/27; address 38.63.66.190/27; address 38.63.74.190/27; address 38.63.75.190/27; address 107.149.253.254/24; address 38.33.182.254/25; address 38.63.92.254/24; address 38.173.41.126/25; address 38.177.156.254/24; address 107.149.250.254/25; address 38.177.137.126/27; address 38.177.131.222/27; address 38.177.133.158/27; address 38.177.144.254/27; address 38.173.62.126/25; address 38.63.64.62/27; address 38.63.66.62/27; address 38.63.68.190/27; address 38.63.70.190/27; address 38.63.73.254/27; address 38.63.74.254/27; address 38.63.75.254/27; address 38.63.78.254/27; address 38.177.149.126/27; address 38.177.150.126/27; address 38.177.151.126/27; address 38.177.147.190/27; address 38.177.148.190/27; address 38.177.152.62/27; address 38.177.153.62/27; address 38.177.154.30/27; address 107.148.142.126/25; address 107.148.142.254/25; address 38.177.147.222/27; address 38.177.149.158/27; address 38.177.150.158/27; address 38.177.151.158/27; address 38.177.152.158/27; address 38.177.153.158/27; address 38.177.155.30/27; address 38.177.158.126/27; address 38.177.160.254/24; address 38.11.235.254/25; address 38.173.29.254/25; address 38.177.190.254/26; address 107.149.255.254/24; address 38.177.159.126/27; address 38.63.72.190/27; address 38.177.155.190/27; address 38.177.157.190/27; address 38.177.161.62/27; address 38.177.162.62/27; address 38.177.163.62/27; address 38.173.2.254/27; address 38.177.188.62/27; address 38.173.16.158/27; address 38.173.17.190/27; address 38.173.18.190/27; address 38.173.19.158/27; address 38.173.30.94/27; address 38.173.35.94/27; address 38.173.25.94/27; address 38.11.152.254/24; address 38.173.15.126/26; address 38.33.179.190/26; address 38.173.14.126/26; address 38.173.11.126/26; address 38.11.246.126/27; address 38.11.247.94/27; address 38.11.245.190/27; address 38.11.248.62/27; address 38.173.30.222/27; address 38.173.59.30/27; address 38.173.1.190/27; address 38.173.27.94/27; address 38.173.22.222/27; address 38.177.181.30/27; address 38.177.189.30/27; address 38.177.190.30/27; address 38.177.176.94/27; address 38.177.183.30/27; address 38.177.184.30/27; address 38.11.245.254/27; address 38.11.234.222/27; address 38.173.9.62/27; address 38.11.230.158/27; address 38.14.11.62/27; address 38.14.29.62/27; address 38.14.30.30/27; address 38.14.9.94/27; address 38.14.27.30/27; address 38.14.11.94/27; address 38.14.24.62/27; address 38.14.30.190/27; address 38.14.8.126/27; address 38.11.243.254/27; address 38.11.227.190/27; address 38.11.240.62/27; address 38.14.0.62/27; address 38.14.1.62/27; address 38.14.13.62/27; address 38.11.132.222/27; address 38.11.133.222/27; address 38.11.134.222/27; address 38.11.135.158/27; address 38.11.138.30/27; address 38.11.139.30/27; address 107.148.137.254/24; address 38.63.94.158/27; address 38.63.95.158/27; address 38.177.145.254/27; address 38.177.164.254/27; address 38.177.165.254/27; address 38.177.179.158/27; address 38.177.180.158/27; address 38.177.185.30/27; address 38.177.188.30/27; address 38.177.162.126/27; address 38.177.163.190/27; address 38.177.161.126/27; address 38.177.166.254/27; address 38.173.61.94/27; address 38.177.183.158/27; address 38.173.55.158/27; address 38.173.16.190/27; address 38.173.25.30/27; address 38.11.136.222/27; address 38.11.137.222/27; address 38.33.175.62/27; address 38.33.176.62/27; address 38.33.170.158/27; address 38.33.171.158/27; address 38.33.170.190/27; address 38.33.171.190/27; address 38.33.172.158/27; address 38.33.173.158/27; address 38.33.177.30/27; address 38.33.178.30/27; address 38.33.175.94/27; address 38.33.176.94/27; address 38.33.172.190/27; address 38.33.173.190/27; address 38.33.177.62/27; address 38.33.178.62/27; address 38.33.175.190/27; address 38.33.176.190/27; address 38.11.237.62/27; address 38.11.241.62/27; address 38.177.174.254/26; address 38.177.177.190/26; address 38.177.181.126/26; address 38.177.183.254/26; address 38.11.235.126/26; address 38.63.90.126/26; address 38.63.83.190/26; address 38.173.2.126/26; address 107.149.224.254/24; address 38.33.178.126/27; address 38.11.241.222/27; address 38.33.188.30/27; address 38.33.189.30/27; address 38.33.190.30/27; address 38.14.0.222/27; address 38.11.240.158/27; address 38.11.137.126/27; address 38.173.3.126/26; address 38.173.4.62/26; address 38.173.9.126/26; address 38.11.255.190/26; address 38.14.0.126/26; address 38.14.1.126/26; address 38.14.30.254/26; address 38.11.240.254/26; address 38.63.76.126/27; address 38.63.89.126/27; address 38.63.88.62/27; address 38.33.178.158/27; address 38.33.179.126/27; address 38.11.131.190/27; address 38.11.239.222/27; address 38.11.140.94/27; address 107.149.225.254/24; address 38.14.29.94/27; address 38.14.7.222/27; address 38.33.185.254/27; address 38.63.94.254/27; address 38.63.95.222/27; address 38.63.88.94/27; address 38.63.93.158/27; address 38.63.70.254/27; address 38.33.191.254/24; address 38.173.10.94/27; address 38.63.91.222/27; address 38.11.246.62/27; address 38.11.247.62/27; address 38.173.235.62/27; address 38.173.236.62/27; address 38.173.239.62/27; address 38.173.254.30/27; address 38.173.255.30/27; address 38.173.238.254/27; address 38.173.246.30/27; address 38.173.247.62/27; address 38.173.247.126/26; address 38.173.234.254/26; address 38.173.225.254/26; address 38.173.227.254/26; address 38.177.175.254/24; address 107.148.136.254/24; address 38.11.141.94/27; address 38.11.142.94/27; address 38.14.7.190/27; address 38.14.10.222/27; address 38.33.179.222/27; address 38.33.185.30/27; address 38.14.20.254/27; address 38.63.78.190/27; address 38.14.20.126/26; address 38.177.87.126/27; address 38.173.254.254/27; address 38.173.228.254/27; address 38.14.17.126/27; address 38.11.151.126/27; address 38.11.154.126/27; address 38.11.128.126/27; address 38.173.14.222/27; address 38.177.167.254/25; address 38.173.251.254/25; address 38.173.248.30/27; address 38.173.251.30/27; address 38.173.9.30/27; address 38.173.243.30/27; address 38.173.245.30/27; address 38.173.250.30/27; address 38.173.252.30/27; address 38.173.10.30/27; address 38.14.18.62/26; address 38.14.28.62/26; address 38.11.153.126/26; address 38.11.235.62/26; address 38.33.163.30/27; address 38.33.164.30/27; address 38.11.138.254/27; address 38.14.31.126/27; address 38.33.161.126/27; address 38.33.165.62/27; address 38.33.166.62/27; address 38.33.162.158/27; address 38.173.232.126/27; address 38.173.224.158/27; address 38.173.45.30/27; address 38.173.15.158/27; address 38.173.231.30/27; address 38.33.169.62/27; address 38.173.36.94/27; address 38.173.35.158/27; address 38.177.138.94/27; address 38.177.149.222/27; address 38.177.150.222/27; address 38.177.151.222/27; address 38.177.154.94/27; address 38.11.228.62/27; address 38.11.229.62/27; address 38.11.254.30/27; address 38.173.240.94/27; address 38.173.242.94/27; address 38.173.13.62/27; address 38.173.224.126/27; address 38.173.232.158/27; address 38.173.45.94/27; address 38.173.36.126/27; address 38.173.35.190/27; address 38.177.162.254/26; address 38.177.184.190/26; address 38.177.164.190/26; address 38.177.167.62/26; address 38.173.43.62/26; address 38.173.50.126/26; address 38.173.24.254/26; address 38.173.20.254/26; address 38.63.73.222/27; address 38.63.74.222/27; address 38.63.75.222/27; address 38.63.78.222/27; address 38.11.234.30/27; address 38.33.188.126/27; address 38.33.189.254/27; address 38.11.240.190/27; address 38.11.234.254/27; address 38.33.190.158/27; address 38.33.179.30/27; address 38.173.230.254/27; address 38.173.14.62/27; address 38.33.168.30/27; address 38.33.181.222/27; address 38.173.224.62/27; } } } fxp0 { unit 0 { family inet { address 10.0.82.238/24 { master-only; } } } } lo0 { description HK1-AJ15-CORE-MX480-19U-local; unit 27 { description CN2ONLY; family inet { filter { input reprotection; } address 10.255.249.117/32; } } unit 28 { description STREAM01; family inet { filter { input reprotection; } address 10.255.249.118/32; } } unit 29 { description CTVRF01; family inet { filter { input reprotection; } address 10.255.249.119/32; } } unit 30 { description global; family inet { filter { input reprotection; } address 10.255.249.120/32; } } } } snmp { location "Hong Kong, China"; community raksmartv2 { authorization read-only; client-list-name acl4snmp; } } forwarding-options { dhcp-relay { forward-snooped-clients non-configured-interfaces; server-group { pxe_1 { 107.148.128.5; } } group dhcp_1 { active-server-group pxe_1; interface ae21.29; interface ae22.29; interface ae23.29; } } } policy-options { policy-statement Acrossing-Instance { term 10 { from { protocol ospf; route-filter 10.0.0.0/8 upto /24; route-filter 192.168.0.0/16 upto /24; route-filter 172.16.0.0/16 upto /19; } then reject; } term others { then accept; } } policy-statement NONE { term any { then reject; } } policy-statement bgp4import4guard { term abuse { from { protocol bgp; community abuse; } then { next-hop discard; accept; } } term blackhole { from { protocol bgp; community blackhole; } then { next-hop discard; accept; } } term others { then reject; } } policy-statement from-cn2only-ospf { term 10 { from { route-filter 10.0.0.0/8 upto /24; route-filter 192.168.0.0/16 upto /24; route-filter 172.16.0.0/12 upto /16; } then reject; } term others { from protocol ospf; then accept; } } policy-statement from-ctvrf01 { term 10 { from { protocol bgp; community blackhole; } then accept; } term others { then reject; } } policy-statement from-ctvrf01-ospf { term 10 { from { protocol ospf; route-filter 10.0.0.0/8 upto /24; route-filter 192.168.0.0/16 upto /24; route-filter 172.16.0.0/12 upto /16; } then reject; } term others { from protocol ospf; then accept; } } policy-statement from-global-ospf { term 10 { from { protocol ospf; route-filter 10.0.0.0/8 upto /24; route-filter 192.168.0.0/16 upto /24; route-filter 172.16.0.0/12 upto /16; } then reject; } term others { from protocol ospf; then accept; } } policy-statement from-stream01-ospf { term 10 { from { route-filter 10.0.0.0/8 upto /24; route-filter 192.168.0.0/16 upto /24; route-filter 172.16.0.0/12 upto /16; } then reject; } term others { from protocol ospf; then accept; } } policy-statement ibgp4export2bd { term any { from protocol bgp; then { next-hop self; accept; } } term others { then reject; } } policy-statement ibgp4export2core { term any { from protocol bgp; then { next-hop self; accept; } } term others { then reject; } } policy-statement ibgp4import4bd { term any { then accept; } } policy-statement ibgp4import4core { term any { then accept; } } policy-statement ospf4export { term ospf { from protocol ospf; then accept; } term direct { from protocol direct; then accept; } term others { then reject; } } policy-statement ospf4import { term ospf { from protocol ospf; then accept; } } community abuse members 54600:77; community blackhole members 54600:666; } firewall { family inet { filter acl4snmp { term 10 { from { source-address { 10.0.80.0/22; 10.255.249.0/24; 107.148.128.0/28; 199.180.101.96/28; 137.175.10.64/27; 137.175.13.76/32; } } then accept; } term others { then { reject; } } } filter icmp-redirect2cn2only { term mgmt-vpn { from { address { 10.0.0.0/8; 107.148.128.0/24; } } then accept; } term icmp { from { protocol icmp; } then { next-ip 121.59.101.41/32 routing-instance CN2ONLY; } } term OTHERS { then accept; } } filter reprotection { term 10 { from { source-address { 10.0.80.0/22; 10.255.249.0/24; 107.148.128.0/28; 199.180.101.96/28; 137.175.10.64/27; 198.47.96.12/32; 137.175.13.76/32; } protocol tcp; destination-port ssh; } then accept; } term 11 { from { protocol tcp; destination-port [ ssh telnet http https 830 ]; } then { count ssh-log; discard; } } term 20 { then accept; } } } } routing-instances { CN2ONLY { instance-type virtual-router; protocols { bgp { group CN2ONLY { local-as 398478; neighbor 10.255.249.127 { description hk1-aj15-bd-mx480-8u-CN2ONLY; multihop { ttl 1; } local-address 10.255.249.117; import ibgp4import4bd; peer-as 398478; } neighbor 10.255.249.227 { description hk1-z449-bd-mx480-8u-CN2ONLY; multihop { ttl 1; } local-address 10.255.249.117; import ibgp4import4bd; export ibgp4export2bd; remove-private; peer-as 398478; } neighbor 10.255.129.57 { description HK1-AJ19-CORE-MX480-B-8U-CN2ONLY; multihop { ttl 1; } local-address 10.255.249.117; import ibgp4import4core; export ibgp4export2core; remove-private; peer-as 398478; } } } ospf { area 0.0.0.0 { interface ae5.17 { interface-type p2p; } interface ae6.27 { interface-type p2p; } interface lo0.27; interface ae4.27 { interface-type p2p; } } export ospf4export; import ospf4import; } } forwarding-options { dhcp-relay { forward-only { routing-instance default; } server-group { pxe_1 { 107.148.128.5; } } group pxe_1 { active-server-group pxe_1; interface ae21.27; interface ae22.27; interface ae23.27; } } } interface ae4.27; interface ae5.17; interface ae6.27; interface ae21.27; interface ae22.27; interface ae23.27; interface lo0.27; } STREAM-01 { instance-type virtual-router; protocols { bgp { group STREAM01 { local-as 398478; neighbor 10.255.249.128 { description hk1-aj15-bd-mx480-8u-STREAM01; multihop { ttl 1; } local-address 10.255.249.118; import ibgp4import4bd; export ibgp4export2bd; remove-private; peer-as 398478; } neighbor 10.255.249.228 { description hk1-z449-bd-mx480-8u-STREAM01; multihop { ttl 1; } local-address 10.255.249.118; import ibgp4import4bd; export ibgp4export2bd; remove-private; peer-as 398478; } neighbor 10.255.129.58 { description HK1-AJ19-CORE-MX480-B-8U-STREAM01; multihop { ttl 1; } local-address 10.255.249.118; import ibgp4import4core; export ibgp4export2core; remove-private; peer-as 398478; } } } ospf { area 0.0.0.0 { interface ae5.18 { interface-type p2p; } interface ae6.28 { interface-type p2p; } interface lo0.28; interface ae4.28 { interface-type p2p; } } export ospf4export; import ospf4import; } } forwarding-options { dhcp-relay { forward-only { routing-instance default; } server-group { pxe_1 { 107.148.128.5; } } group pxe_1 { active-server-group pxe_1; interface ae21.28; interface ae22.28; interface ae23.28; } } } interface ae4.28; interface ae5.18; interface ae6.28; interface ae21.28; interface ae22.28; interface ae23.28; interface lo0.28; } global { instance-type virtual-router; routing-options { static { route 121.59.101.41/32 next-table CN2ONLY.inet.0; } } protocols { bgp { group global { local-as 398478; neighbor 10.255.249.130 { description hk1-aj15-bd-mx480-8u-global; multihop { ttl 1; } local-address 10.255.249.120; import ibgp4import4bd; export ibgp4export2bd; remove-private; peer-as 398478; } neighbor 10.255.249.230 { description hk1-z449-bd-mx480-8u-global; multihop { ttl 1; } local-address 10.255.249.120; import ibgp4import4bd; export ibgp4export2bd; remove-private; peer-as 398478; } neighbor 10.255.129.60 { description HK1-AJ19-CORE-MX480-B-8U-global; multihop { ttl 1; } local-address 10.255.249.120; import ibgp4import4core; export ibgp4export2core; remove-private; peer-as 398478; } } } ospf { area 0.0.0.0 { interface ae5.20 { interface-type p2p; } interface ae6.30 { interface-type p2p; } interface lo0.30; interface ae4.30 { interface-type p2p; } } export ospf4export; import ospf4import; } } forwarding-options { dhcp-relay { forward-only { routing-instance default; } server-group { pxe_1 { 107.148.128.5; } } group pxe_1 { active-server-group pxe_1; interface ae21.30; interface ae22.30; interface ae23.30; } } } interface ae4.30; interface ae5.20; interface ae6.30; interface ae21.30; interface ae22.30; interface ae23.30; interface lo0.30; } } routing-options { interface-routes { rib-group inet Acrossing-Instance; } rib-groups { Acrossing-Instance { import-rib [ inet.0 global.inet.0 STREAM-01.inet.0 CN2ONLY.inet.0 ]; import-policy Acrossing-Instance; } from-ctvrf01 { import-rib [ inet.0 global.inet.0 STREAM-01.inet.0 CN2ONLY.inet.0 ]; import-policy from-ctvrf01; } from-ctvrf01-ospf { import-rib [ inet.0 global.inet.0 CN2ONLY.inet.0 STREAM-01.inet.0 ]; import-policy from-ctvrf01-ospf; } from-global-ospf { import-rib [ global.inet.0 inet.0 CN2ONLY.inet.0 STREAM-01.inet.0 ]; import-policy from-global-ospf; } from-cn2only-ospf { import-rib [ CN2ONLY.inet.0 inet.0 global.inet.0 ]; import-policy from-cn2only-ospf; } from-stream01-ospf { import-rib [ STREAM-01.inet.0 inet.0 global.inet.0 ]; import-policy from-stream01-ospf; } } nonstop-routing; } protocols { router-advertisement { interface fxp0.0 { managed-configuration; } } bgp { family inet { unicast { rib-group from-ctvrf01; } } group CTVRF01 { local-as 398478; neighbor 10.255.249.129 { description hk1-aj15-bd-mx480-8u-CTVRF01; multihop { ttl 1; } local-address 10.255.249.119; import ibgp4import4bd; export ibgp4export2bd; remove-private; peer-as 398478; } neighbor 10.255.249.229 { description hk1-z449-bd-mx480-8u-CTVRF01; multihop { ttl 1; } local-address 10.255.249.119; import ibgp4import4bd; export ibgp4export2bd; remove-private; peer-as 398478; } neighbor 10.255.129.77 { description hk1-aj15-guard-s5720-38u-CTVRF01; multihop; local-address 10.255.249.119; import bgp4import4guard; export NONE; remove-private; peer-as 64701; } neighbor 10.255.129.59 { description HK1-AJ19-CORE-MX480-B-8U-CTVRF01; multihop { ttl 1; } local-address 10.255.249.119; import ibgp4import4core; export ibgp4export2core; remove-private; peer-as 398478; } } } ospf { area 0.0.0.0 { interface ae5.19 { interface-type p2p; } interface ae6.29 { interface-type p2p; } interface lo0.29; interface ae2.0 { interface-type p2p; } interface ae4.29 { interface-type p2p; } } export ospf4export; import ospf4import; } lldp { interface all; } }