0134.68.107.1718121813truetrue101F0D580235303A23140D3F2C711C167A1E153E350B501129.79.216.16218121813truetrue075E250D492B3B3438022C180C730407703E270A250D100134.68.107.1749truetrue045C19550E355F4D590D111129.79.216.16249truetrue020116080A121C221C5A1D10MgmtEth0/RP1/CPU0/0admintruetrue$1$Deue$X82bIHI1qqWRVZv.oWjm50root-systemtruesweenytruetrue0612072842451A09171E1C0Croot-systemtrueexecdefaultRadiusLocalNonelogindefaultRadiusLocaltrueconsole000Indefault600LOGIN-L3-HOSTSdefault01619401trueLevel249.2160.2419.1224.00trueIETFStandardNSFIPv4UnicastNotSetDisabledConnectedDisabledIPv6UnicastNotSetDisabledtrueDisabledLoopback0truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueLoopback1truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/0trueLevel2IPv4UnicasttrueNotSet766IPv6UnicasttrueNotSet766TenGigE0/2/0/1truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/2trueLevel2IPv4UnicasttrueNotSet719IPv6UnicasttrueNotSet719TenGigE0/5/0/0trueLevel2IPv4UnicasttrueNotSet1338IPv6UnicasttrueNotSet1338TenGigE0/5/0/1truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/1.151truePassiveLevel2IPv4UnicasttrueTenGigE0/2/0/1.152trueLevel2NotSetNeverIPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/1.199truePassiveLevel2IPv4UnicasttruenLr-monReadOnlyQUERY-HOSTS216.24.191.224019401true216.24.191.224120360trueIPv4Unicasttrue216.24.176.020INTERNALIPv4Multicasttrue216.24.176.020INTERNALIPv6Unicasttrue2001:4880::32INTERNALIPv6Multicasttrue2001:4880::32INTERNALFEDtrueIPv4UnicasttruetrueFED-IN300075falseFED-OUTtruetruetrueIPv4MulticasttruetrueFED-IN300075falseFED-OUTtruetruetrueFED6trueIPv6UnicasttruetrueFED-IN200075falseFED-OUTtruetruetrueIPv6MulticasttruetrueFED-IN50075falseFED-OUTtruetruetrueINTLtrueIPv4UnicasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueIPv4MulticasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueEVENTtrueuse for special events e.g. sc06--sets *highest* local-prefIPv4UnicasttruetrueEVENT-INEVENT-OUTtruetruetrueIPv4MulticasttruetrueEVENT-INEVENT-OUTtruetruetrueINTL6trueIPv6UnicasttruetrueINTL-IN200075falseINTL-OUTtruetruetrueIPv6MulticasttruetrueINTL-IN50075falseINTL-OUTtruetruetrueEVENT6trueuse for special-events--use with care--sets *HIGHEST* local-pref!IPv6UnicasttruetrueEVENT-INEVENT-OUTtruetruetrueIPv6MulticasttruetrueEVENT-INEVENT-OUTtruetruetrueREPEERtrueIPv4UnicasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetrueIPv4MulticasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetruemembertrueIPv4UnicasttruetrueMEMBER-OUTtruetruetrueIPv4MulticasttrueMEMBER-OUTtruetrueNLRviewtrueIPv4UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv4MulticasttrueREJECT-ALL175falseALLOW-ALLtruetruemember6trueIPv6UnicasttruetrueMEMBER-OUTtruetruetrueIPv6MulticasttruetrueMEMBER-OUTtruetruetrueNLRview6trueIPv6UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv6MulticasttrueREJECT-ALL175falseALLOW-ALLtruetrueibgp-meshtrue019401falsetrue130B0D1E111E1ELoopback0IPv4UnicasttruetrueIPv4Multicasttruetrueipv6-ibgp-meshtrue019401Loopback019401ipv6-ibgp-meshIPv6UnicasttruetruetruetrueIPv6MulticasttruetruetruetrueFED-MEMBERSONLYtrueIPv4UnicasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueINTL-MEMBERSONLYtrueIPv4UnicasttruetrueINTL-MEMBERSONLY-IN300075falseINTL-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueINTL-MEMBERSONLY-IN300075falseINTL-MEMBERSONLY-OUTtruetruetrue74.200.188.6026468memberfalsetrue061217791440054A[MEMBER] LEARN secondary (hous)IPv4UnicasttrueLEARN-INIPv4MulticasttrueLEARN-IN128.109.70.105081membertrue[MEMBER] North Carolina/Duke [NO-MONITOR]IPv4UnicasttrueNC-INIPv4MulticasttrueNC-IN143.215.193.2010490membertrueMEMBER SLR 10GIPv4UnicasttrueSLR-INIPv4MulticasttrueSLR-IN198.32.173.253011096memberfalsetrue110C0A0D1E0208090FFLR layer3 backup (JACK, vlan106)IPv4UnicasttrueFLR-INIPv4MulticasttrueFLR-IN198.86.17.249081member[MEMBER] North Carolina/Duke primary (rale)IPv4UnicasttrueNC-INIPv4MulticasttrueNC-IN199.77.193.2010490membertruetrueMEMBER SLR 10GIPv4UnicasttrueSLR-INIPv4MulticasttrueSLR-IN216.24.187.4065506NLRviewNLRview-1G [NO-MONITOR]216.24.191.225ibgp-meshCHIC216.24.191.226ibgp-meshDENV216.24.191.227ibgp-meshHOUS216.24.191.228ibgp-meshLOSA216.24.191.229ibgp-meshNEWY216.24.191.230ibgp-meshSEAT216.24.191.231ibgp-meshWASH216.24.191.252ibgp-meshKANS-SBC12001:4880:0:2::ipv6-ibgp-meshCHIC v6 loopback2001:4880:0:3::ipv6-ibgp-meshDENV v6 loopback2001:4880:0:4::ipv6-ibgp-meshHOUS v6 loopback2001:4880:0:5::ipv6-ibgp-meshLOSA v6 loopback2001:4880:0:6::ipv6-ibgp-meshNEWY v6 loopback2001:4880:0:7::ipv6-ibgp-meshSEAT v6 loopback2001:4880:0:8::ipv6-ibgp-meshWASH v6 loopback2001:4880:2:2::4065506NLRview6NLRview-1G v62001:4880:100:4::2011096member6FLR Layer3 backup (JACK, vlan 106)IPv6UnicasttrueFLR-IN6IPv6MulticasttrueFLR-IN62001:4880:100:5::2010490member6falsetrue0518561723595413MEMBER SLR [NO-MONITOR]IPv6UnicasttrueSLR-IN6IPv6MulticasttrueSLR-IN6129.79.0.016152.49.13.2250134.68.0.016152.49.13.2250192.12.206.024152.49.13.2250216.24.191.25332Null02001:4880::32Null0trueDebugLocal0134.68.107.9true100000Loopback0flowmaptrue9true003010000Loopback0216.24.187.4flowmonmaptrueipv4-rawflowmaptrue10000flowsamplertrueRandom1500EnableEnableEnableEnableEnableEnableQUERY-HOSTS10PermitIPV4134.68.142.820PermitIPV4134.68.107.2330PermitIPV4129.79.6.13740PermitIPV4129.79.216.7950PermitIPV4134.68.107.2260PermitIPV4134.68.107.12370DenyIPV4LOGIN-L3-HOSTS10skip.grnoc.iu.edu20PermitIPV4134.68.142.5030hop-external.grnoc.iu.edu40PermitIPV4134.68.107.850dc-1.grnoc.iu.edu60PermitIPV4134.68.107.2270jump.grnoc.iu.edu80PermitIPV4192.12.206.19681nlrmon.grnoc.iu.edu - XML82PermitIPV4134.68.142.890BB addresses100PermitIPV4216.24.186.00.0.0.255110Loopback addresses120PermitIPV4216.24.191.2240.0.0.31130Local racklan140PermitIPV4152.49.13.00.0.0.31150dev.grnoc.iu.edu160PermitIPV4134.68.107.21170dc-2.grnoc.iu.edu - VN XML180PermitIPV4134.68.107.20MCAST-BOUNDARY10DenyIPV4224.0.1.3920DenyIPV4224.0.1.4030DenyIPV4239.0.0.00.255.255.25540PermitIPV4QUERY-HOSTSEnabledLOGIN-L3-HOSTSEnabledMCAST-BOUNDARYEnabled129.79.5.100Servertrue216.24.191.254trueTenGigE0/2/0/3truetrueTenGigE0/2/0/5truetrueTenGigE0/5/0/1truetrueTenGigE0/2/0/1.103truetrueTenGigE0/2/0/1.106truetrueTenGigE0/2/0/1.151truetrueTenGigE0/2/0/1.152truetrueTenGigE0/2/0/1.200truetrueTenGigE0/2/0/1.201truetrueTenGigE0/2/0/1.315truetrueLoopback0Loopback074.200.188.6trueTenGigE0/2/0/1.315LEARN128.109.70.105trueTenGigE0/2/0/1.103North Carolina/Duke143.215.194.253trueSLR 10G198.32.173.253trueTenGigE0/2/0/1.106FLR-l3 backup [NO-MONITOR]198.86.17.249trueNCLR199.77.194.253trueSLR 10G216.24.191.225truechic-crsinternal216.24.191.226truedenv-crsinternal216.24.191.227truehous-crsinternal216.24.191.228truelosa-crsinternal216.24.191.229truenewy-crsinternal216.24.191.230trueseat-crsinternal216.24.191.231truewash-crsinternaltrueTenGigE0/2/0/3MCAST-BOUNDARYTenGigE0/2/0/5MCAST-BOUNDARYTenGigE0/5/0/1MCAST-BOUNDARYTenGigE0/2/0/1.103MCAST-BOUNDARYTenGigE0/2/0/1.106MCAST-BOUNDARYTenGigE0/2/0/1.151MCAST-BOUNDARYTenGigE0/2/0/1.152MCAST-BOUNDARYTenGigE0/2/0/1.200MCAST-BOUNDARYTenGigE0/2/0/1.201MCAST-BOUNDARYTenGigE0/2/0/1.315MCAST-BOUNDARYtrueNCprefix-set NC
128.109.0.0/16 le 32,
149.168.0.0/16 le 32,
150.216.0.0/16 le 32,
152.1.0.0/16 le 32,
152.3.0.0/16 le 32,
152.16.0.0/16 le 32,
152.48.192.0/24 le 32,
152.48.253.0/24 le 32,
152.7.0.0/16 le 32,
152.14.0.0/16 le 32,
152.11.0.0/16 le 32,
152.17.0.0/16 le 32,
152.16.0.0/16 le 32,
152.19.0.0/16 le 32,
152.2.0.0/15 le 32,
152.4.0.0/14 le 32,
152.8.0.0/13 le 32,
152.16.0.0/12 le 32,
152.32.0.0/12 le 32,
152.40.0.0/15 le 32,
152.42.0.0/16 le 32,
152.45.0.0/16 le 32,
152.46.0.0/15 le 32,
192.73.4.0/24 le 32,
192.101.21.0/24 le 32,
192.101.22.0/23 le 32,
192.101.24.0/24 le 32,
192.147.30.0/24 le 32,
192.189.244.0/24 le 32,
198.85.0.0/16 le 32,
198.135.235.0/24 le 32,
198.232.64.0/19 le 32,
198.232.96.0/21 le 32,
199.90.0.0/16 le 32,
204.84.0.0/15 le 32,
204.211.0.0/16 le 32,
204.238.30.0/24 le 32,
207.4.0.0/16 le 32,
207.192.0.0/18 le 32,
152.2.0.0/16 le 32,
152.4.0.0/16 le 32,
198.86.17.60/30 le 32,
198.86.0.0/16 le 32,
192.154.33.0/24 le 32,
192.154.38.0/24 le 32,
192.154.41.0/24 le 32,
192.154.43.0/24 le 32,
192.154.54.0/24 le 32,
192.154.55.0/24 le 32,
192.154.61.0/24 le 32,
192.154.67.0/24 le 32,
192.154.78.0/24 le 32,
152.36.0.0/16 le 32,
152.41.0.0/16 le 32,
204.152.2.0/23 le 32,
192.154.62.0/24 le 32,
152.53.0.0/19 le 32,
192.67.134.0/24 le 32,
192.153.129.0/24 le 32,
204.62.251.0/24 le 32,
205.167.24.0/24 le 32,
205.167.25.0/24 le 32,
209.95.64.0/19 le 32,
152.33.0.0/16 le 32,
199.120.166.0/23 le 32,
192.154.64.0/24 le 32,
152.54.0.0/20 le 32,
192.154.40.0/24 le 32,
192.154.95.0/24 le 32,
152.23.0.0/16 le 32,
192.154.46.0/23 le 32,
152.43.0.0/16 le 32,
198.62.72.0/24 le 32,
192.137.210.0/24 le 32,
#Duke University
67.159.64.0/18 le 32,
# NOAA
140.90.0.0/16
end-set
FLRprefix-set FLR
# University of Florida
128.227.0.0/16 le 32,
159.178.0.0/16 le 32,
192.5.2.0/24 le 32,
8.6.244.0/24 le 32,
# University of Florida @ TELX
8.6.245.0/24 le 32,
# University of North Florida
139.62.0.0/16 le 32,
# Florida State University
128.186.0.0/16 le 32,
144.174.0.0/16 le 32,
146.201.0.0/16 le 32,
192.80.53.0/24 le 32,
168.223.0.0/16 le 32,
# Florida State University @ TELX
192.12.121.0/24 le 32,
# University of West Florida
143.88.0.0/16 le 32,
# Florida Atlantic University
131.91.0.0/16 le 32,
192.26.251.0/24 le 32,
# Nova Southeastern University
137.52.0.0/16 le 32,
# University of Central Florida
132.170.0.0/16 le 32,
# Florida Institute of Technology
163.118.0.0/16 le 32,
# Florida International University
131.94.0.0/16 le 32,
# University of Miami
129.171.0.0/16 le 32,
192.88.124.0/24 le 32,
192.31.89.0/24 le 32,
192.70.171.0/24 le 32,
192.111.123.0/24 le 32,
199.242.231.0/24 le 32,
199.242.232.0/24 le 32,
199.242.233.0/24 le 32,
204.145.157.0/24 le 32,
204.68.64.0/19 le 32,
65.115.176.0/24 le 32,
147.70.0.0/16 le 32,
# FLR Backbone
198.32.155.0/24 le 32,
198.32.173.0/24 le 32,
198.32.166.0/24 le 32,
# FLR direct assignment
64.56.80.0/20 le 32,
# Palm Beach Comm College
206.224.192.0/19 le 32,
216.114.80.0/20 le 32,
66.195.118.0/23 le 32,
# SFGP
134.202.0.0/16 le 27,
136.145.0.0/16 le 27,
192.65.176.0/24 le 27,
192.231.93.0/24 le 27,
192.231.95.0/24 le 27,
168.184.0.0/16 le 27,
139.229.0.0/16 le 27,
129.171.0.0/16 le 27,
65.115.176.0/24 le 27,
168.184.0.0/16 le 32
end-set
SLRprefix-set SLR
64.156.8.128/25 le 32,
64.156.216.128/25 le 32,
65.115.176.0/24 le 32,
128.23.0.0/16 le 32,
128.61.0.0/16 le 32,
128.163.0.0/16 le 32,
128.163.11.0/24 le 32,
128.186.0.0/16 le 32,
128.192.0.0/16 le 32,
128.227.0.0/16 le 32,
129.59.0.0/16 le 32,
129.171.0.0/16 le 32,
129.171.0.0/19 le 32,
129.171.32.0/19 le 32,
129.171.64.0/19 le 32,
129.171.96.0/19 le 32,
129.171.128.0/19 le 32,
129.171.160.0/19 le 32,
129.171.192.0/19 le 32,
129.171.224.0/19 le 32,
129.252.0.0/16 le 32,
130.127.0.0/16 le 32,
130.160.0.0/16 le 32,
130.207.0.0/16 le 32,
131.91.0.0/16 le 32,
131.96.0.0/16 le 32,
131.144.128.0/20 le 32,
131.204.0.0/16 le 32,
131.247.0.0/16 le 32,
132.170.0.0/16 le 32,
138.26.0.0/16 le 32,
# Georgia Tech
143.215.0.0/16 le 32,
144.174.0.0/16 le 32,
146.201.0.0/16 le 32,
146.229.0.0/16 le 32,
152.32.0.0/12 le 32,
159.178.0.0/16 le 32,
160.36.0.0/16 le 32,
160.129.0.0/16 le 32,
# Emory University Systems of Health Care
163.246.0.0/16 le 32,
164.111.0.0/16 le 32,
# Tenn Grad School of Med
165.6.5.0/24 le 32,
# Tenn Grad School of Med
165.6.6.0/24 le 32,
# Tenn Grad School of Med
165.6.7.0/24 le 32,
# Tenn Grad School of Med
165.6.15.0/24 le 32,
# Tenn Grad School of Med
165.6.24.0/24 le 32,
168.223.0.0/16 le 32,
170.140.0.0/16 le 32,
192.31.89.0/24 le 32,
192.70.171.0/24 le 32,
192.80.53.0/24 le 32,
192.88.124.0/24 le 32,
192.111.108.0/24 le 32,
192.111.109.0/24 le 32,
192.111.110.0/24 le 32,
192.111.123.0/24 le 32,
192.249.1.0/24 le 32,
192.249.2.0/23 le 32,
192.249.4.0/22 le 32,
192.249.8.0/21 le 32,
192.249.11.0/24 le 32,
198.78.192.0/19 le 32,
198.137.16.0/20 le 32,
199.4.250.0/24 le 32,
199.4.250.0/23 le 32,
199.4.251.0/24 le 32,
199.76.32.0/20 le 32,
199.76.144.0/20 le 32,
199.76.160.0/19 le 32,
199.76.192.0/24 le 32,
199.77.128.0/17 le 32,
199.78.112.0/22 le 32,
199.242.231.0/24 le 32,
199.242.232.0/24 le 32,
199.242.233.0/24 le 32,
204.29.106.0/23 le 32,
204.68.64.0/19 le 32,
204.89.132.0/24 le 32,
204.89.132.0/23 le 32,
204.89.133.0/24 le 32,
204.145.157.0/24 le 32,
204.145.215.0/24 le 32,
204.198.72.0/22 le 32,
204.198.76.0/23 le 32,
206.240.24.0/22 le 32,
206.240.192.0/19 le 32,
206.240.216.0/24 le 32,
206.240.220.0/24 le 32,
206.240.221.0/24 le 32,
209.149.48.0/20 le 32,
# UNF
139.62.0.0/16 le 32,
# Florida Atlantic University400
147.70.0.0/16 le 32,
# Sewanee, The University of the South sewanee.edu
152.97.0.0/16 le 32,
161.45.0.0/16 le 32,
# Morehouse School of Medicine
192.83.232.0/24 le 32,
204.246.192.0/21 le 32,
# Meharry Medical College
216.64.76.0/24 le 32,
# University of Tennessee at Chattanooga
150.182.128.0/18 le 32,
# University of Tennessee at Chattanooga
192.30.208.0/24 le 32,
# Florida Institute of Tech temp thru SOX 6626:2
163.118.0.0/16 le 32,
# Middle Tennessee State U.
204.152.130.0/24 le 32,
# Univ of West Florida via FLR
143.88.0.0/16 le 32,
128.192.0.0/16 le 32,
129.66.0.0/16 le 32,
129.66.20.0/24 le 32,
130.218.0.0/16 le 32,
130.254.0.0/16 le 32,
131.144.0.0/16 le 32,
134.224.0.0/16 le 32,
137.220.0.0/16 le 32,
141.165.0.0/16 le 32,
157.149.0.0/16 le 32,
158.93.0.0/16 le 32,
160.10.0.0/16 le 32,
# SC - Richland County Library
167.7.38.0/24 le 32,
# SC - Richland County Library
167.7.39.0/24 le 32,
# SC - York County School District 1
167.7.210.0/27 le 32,
# SC - Dorchester County School District 2
167.7.241.0/24 le 32,
# SC - Lexington County School District 1
167.7.248.64/27 le 32,
# SC - Greenwood County School District 52
167.7.251.0/27 le 32,
168.8.0.0/15 le 32,
168.12.0.0/14 le 32,
168.16.0.0/15 le 32,
168.18.0.0/15 le 32,
168.20.0.0/15 le 32,
168.22.0.0/15 le 32,
168.24.0.0/15 le 32,
168.26.0.0/15 le 32,
168.28.0.0/15 le 32,
168.30.0.0/15 le 32,
# SC schools
169.150.0.0/16 le 32,
192.48.117.0/24 le 32,
192.88.111.0/24 le 32,
192.103.126.0/24 le 32,
192.107.44.0/24 le 32,
192.111.112.0/24 le 32,
# SC schools
192.152.249.0/24 le 32,
192.203.127.0/24 le 32,
192.211.32.0/21 le 32,
192.211.40.0/22 le 32,
192.211.44.0/24 le 32,
192.211.45.0/24 le 32,
192.245.221.0/24 le 32,
192.245.222.0/24 le 32,
192.245.223.0/24 le 32,
192.245.224.0/24 le 32,
198.49.31.0/24 le 32,
198.72.72.0/22 le 32,
198.137.22.0/24 le 32,
198.180.132.0/22 le 32,
# SC schools
198.190.216.0/24 le 32,
198.200.158.0/24 le 32,
# SC schools
198.204.92.0/24 le 32,
199.5.154.0/23 le 32,
199.20.16.0/20 le 32,
199.33.130.0/24 le 32,
199.33.131.0/24 le 32,
199.33.132.0/24 le 32,
199.33.133.0/24 le 32,
199.33.134.0/24 le 32,
199.80.8.0/21 le 32,
199.88.16.0/20 le 32,
199.248.173.0/24 le 32,
199.248.174.0/24 le 32,
199.248.175.0/24 le 32,
199.248.176.0/24 le 32,
199.248.177.0/24 le 32,
199.248.178.0/24 le 32,
204.27.217.0/24 le 32,
204.29.64.0/18 le 32,
205.174.48.0/20 le 32,
# SC schools
206.197.240.0/24 le 32,
# SC schools
206.219.128.0/18 le 32,
207.157.0.0/17 le 32,
# SC schools - Public K12 and Libraries
207.232.128.0/18 le 32,
# SC schools - Public K12 and Libraries
209.133.128.0/17 le 32,
216.109.0.0/18 le 32,
# Kentucky Post Secondary Education Network
147.133.0.0/16 le 32,
# Kentucky Post Secondary Education Network
157.89.0.0/16 le 32,
# KPEN
192.122.237.0/24 le 32,
# KPEN
161.6.0.0/16 le 32,
# KPEN
216.249.132.0/22 le 32,
# KPEN
216.249.144.0/20 le 32,
# KPEN
216.249.160.0/20 le 32,
# KPEN
216.249.176.0/20 le 32,
# KPEN
216.69.0.0/18 le 32,
# Tennessee Technological University
149.149.0.0/16 le 32,
# South Carolina Info Network
153.9.0.0/16 le 32,
# Kentucky dept of education
170.180.0.0/14 le 32,
# Kentucky dept of education
170.185.0.0/16 le 32,
# Kentucky dept of education
205.204.242.0/24 le 32,
205.204.238.0/24 le 32,
# Meharry Medical College
72.158.165.0/24 le 32,
146.82.167.176/29,
199.77.192.16/29,
# SC SEGP - Will Lou Grey School
167.7.127.176/29,
# SC SEGP - Beaufort County School District
167.7.248.112/29,
# SC SEGP - Richland County School District 2
167.7.248.120/29,
# SC SEGP - Richand County School District 2
167.7.248.208/29,
# SC SEGP - Greenwood County School District 52
167.7.251.32/29,
# SC SEGP - Green County School District 51
167.7.251.64/29,
# SC SEGP - Darlington County School District
167.7.251.80/29,
# SC SEGP - Greenwood County School District 50
167.7.251.96/29,
# SC SEGP - Calhoun County Library
167.7.251.128/28,
# SC SEGP - Greenwood County School District 50
167.7.251.144/28,
# SC SEGP - Chesterfield County School District
167.7.251.160/28,
# SC SEGP - Chester County School District
167.7.251.192/29,
# Oak Ridge National Labs (ORNL)
128.219.0.0/16 le 32,
# Oak Ridge National Labs (ORNL)
#Council on Post-Sec Education & KY dept of Libs & Archives
205.204.238.0/24 le 32,
# Meharry Medical College
72.158.165.0/24 le 32,
146.82.167.176/29,
199.77.192.16/29,
# SC SEGP - Will Lou Grey School
167.7.127.176/29,
# SC SEGP - Beaufort County School District
167.7.248.112/29,
# SC SEGP - Richland County School District 2
167.7.248.120/29,
# SC SEGP - Richand County School District 2
167.7.248.208/29,
# SC SEGP - Greenwood County School District 52
167.7.251.32/29,
# SC SEGP - Green County School District 51
167.7.251.64/29,
# SC SEGP - Darlington County School District
167.7.251.80/29,
# SC SEGP - Greenwood County School District 50
167.7.251.96/29,
# SC SEGP - Calhoun County Library
167.7.251.128/28,
# SC SEGP - Greenwood County School District 50
167.7.251.144/28,
# SC SEGP - Chesterfield County School District
167.7.251.160/28,
# SC SEGP - Chester County School District
167.7.251.192/29,
# Oak Ridge National Labs (ORNL)
128.219.0.0/16 le 32,
# Oak Ridge National Labs (ORNL)
160.91.0.0/16 le 32,
# Oak Ridge National Labs (ORNL)
192.31.96.0/24 le 32,
# Oak Ridge National Labs (ORNL)
134.167.0.0/16 le 32,
# Oak Ridge National Labs (ORNL)
198.136.139.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.148.251.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.203.246.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.207.237.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.207.238.0/23 le 32,
# Oak Ridge National Labs (ORNL)
198.207.240.0/24 le 32,
# Oak Ridge National Labs (ORNL)
199.201.153.0/24 le 32,
# Oak Ridge National Labs (ORNL)
199.201.154.0/24 le 32,
# Oak Ridge National Labs (ORNL)
199.201.156.0/23 le 32,
# Oak Ridge National Labs (ORNL)
199.201.158.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.124.41.0/24 le 32,
# Oak Ridge National Labs (ORNL)
192.103.127.0/24 le 32,
# Oak Ridge National Labs (ORNL)
192.188.177.0/24 le 32,
# Oak Ridge National Labs (ORNL)
192.188.182.0/24 le 32,
66.4.0.0/15 le 32,
207.191.176.0/21 le 32,
208.182.0.0/15 le 32,
205.137.240.0/20 le 32,
199.201.155.0/24 le 32,
162.114.37.0/24,
192.154.46.0/23,
199.190.174.0/24 le 32,
206.57.72.0/21 le 32,
64.214.127.128/27 le 32,
72.250.245.0/24 le 32,
# Duke University
67.159.64.0/18 le 32,
96.4.0.0/15,
192.137.210.0/24 le 32,
72.250.230.0/24 le 32,
66.20.220.0/24 le 32,
152.43.0.0/16 le 32,
198.62.72.0/24 le 32,
170.185.0.0/16,
98.17.253.0/24 le 32
end-set
FLR6prefix-set FLR6
2001:468:1e00::/40
end-set
LONIprefix-set LONI
208.69.128.0/22,
130.39.0.0/16,
137.30.0.0/16,
192.195.100.0/24,
192.207.173.0/24,
192.203.199.0/24,
192.203.200.0/24,
192.233.131.0/24,
192.233.168.0/24,
198.62.89.0/24,
199.190.250.0/23,
199.190.252.0/24,
204.90.38.0/23,
204.90.40.0/22,
204.90.50.0/23,
204.196.106.0/24,
204.196.161.0/24,
204.196.162.0/24,
204.196.163.0/24,
204.196.167.0/24,
208.100.64.0/20,
208.100.64.0/18,
208.100.80.0/20,
208.100.123.0/24,
208.100.124.0/22,
76.165.24.0/22,
76.165.28.0/22,
76.165.240.0/20,
#Tulane University
129.81.0.0/16 le 32,
130.70.0.0/16,
#Mississippi State
130.18.0.0/16,
192.208.128.0/20,
192.208.144.0/21,
192.208.152.0/22,
192.208.156.0/23,
#University of Mississippi
130.74.0.0/16,
#University of Southern Mississippi
131.95.0.0/16,
192.208.139.0/24,
198.49.215.0/24,
#Jackson State University
143.132.0.0/16
end-set
SLR6prefix-set SLR6
# v6 for SLR member 10G primary layer3 connection
2001:4880:600::/40
end-set
LEARNprefix-set LEARN
66.64.64.0/19,
128.194.0.0/16,
165.91.0.0/16,
209.21.112.0/20,
128.62.0.0/16 le 32,
128.83.0.0/16 le 32,
129.106.0.0/16 le 32,
129.107.0.0/16 le 32,
129.108.0.0/16 le 32,
129.109.0.0/16 le 32,
129.110.0.0/16 le 32,
129.111.0.0/16 le 32,
129.113.0.0/16 le 32,
129.114.0.0/18 le 32,
129.114.128.0/17 le 32,
129.115.0.0/16 le 32,
129.116.0.0/16 le 32,
129.117.0.0/16 le 32,
139.52.0.0/16 le 32,
140.158.0.0/16 le 32,
143.111.0.0/16 le 32,
146.6.0.0/16 le 32,
147.26.0.0/16 le 32,
158.135.0.0/16 le 32,
162.89.0.0/16 le 32,
192.12.10.0/24 le 32,
192.16.72.0/24 le 32,
192.88.11.0/24 le 32,
192.92.115.0/24 le 32,
192.105.235.0/24 le 32,
192.124.225.0/24 le 32,
192.124.226.0/24 le 32,
192.124.227.0/24 le 32,
192.124.228.0/24 le 32,
192.124.229.0/24 le 32,
192.124.230.0/24 le 32,
192.133.17.0/24 le 32,
192.150.93.0/24 le 32,
192.206.244.0/22 le 32,
198.17.195.0/24 le 32,
198.22.91.0/24 le 32,
198.97.62.0/24 le 32,
198.147.138.0/23 le 32,
198.153.169.0/24 le 32,
198.213.0.0/16 le 32,
198.214.0.0/16 le 32,
198.215.0.0/16 le 32,
198.216.0.0/16 le 32,
204.158.0.0/16 le 32,
206.40.176.0/20 le 32,
206.76.0.0/16 le 32,
206.77.0.0/16 le 32,
207.80.0.0/16 le 32,
216.7.224.0/19 le 32,
198.215.0.0/16 le 32,
205.165.0.0/16 le 32,
207.64.0.0/16 le 32,
198.133.222.0/24 le 32,
74.200.188.0/24 le 32,
69.62.0.0/17 le 32,
216.38.84.0/22 le 32,
128.42.0.0/16,
128.249.0.0/16,
129.7.0.0/16,
168.7.0.0/16,
192.31.88.0/24,
192.58.120.0/24,
192.70.188.0/24,
192.136.144.0/24,
192.136.146.0/24,
192.138.193.0/24,
192.138.194.0/24,
192.147.26.0/24,
192.225.19.0/24,
192.225.23.0/24,
208.117.128.0/18,
198.32.236.0/24,
206.223.141.32/27
end-set
NCRENprefix-set NCREN
128.109.0.0/16 le 32,
149.168.0.0/16 le 32,
150.216.0.0/16 le 32,
152.1.0.0/16 le 32,
152.3.0.0/16 le 32,
152.7.0.0/16 le 32,
152.14.0.0/16 le 32,
152.11.0.0/16 le 32,
152.17.0.0/16 le 32,
152.16.0.0/16 le 32,
152.19.0.0/16 le 32,
152.2.0.0/15 le 32,
152.4.0.0/14 le 32,
152.8.0.0/13 le 32,
152.16.0.0/12 le 32,
152.32.0.0/12 le 32,
152.40.0.0/15 le 32,
152.42.0.0/16 le 32,
152.45.0.0/16 le 32,
152.46.0.0/15 le 32,
192.73.4.0/24 le 32,
192.101.21.0/24 le 32,
192.101.22.0/23 le 32,
192.101.24.0/24 le 32,
192.147.30.0/24 le 32,
192.189.244.0/24 le 32,
198.85.0.0/16 le 32,
198.135.235.0/24 le 32,
198.232.64.0/19 le 32,
198.232.96.0/21 le 32,
199.90.0.0/16 le 32,
204.84.0.0/15 le 32,
204.211.0.0/16 le 32,
204.238.30.0/24 le 32,
207.4.0.0/16 le 32,
207.192.0.0/18 le 32,
152.2.0.0/16 le 32,
152.4.0.0/16 le 32,
198.86.17.60/30 le 32,
198.85.0.0/16 le 32,
198.86.0.0/16 le 32,
192.154.33.0/24 le 32,
192.154.38.0/24 le 32,
192.154.41.0/24 le 32,
192.154.43.0/24 le 32,
192.154.54.0/24 le 32,
192.154.55.0/24 le 32,
192.154.61.0/24 le 32,
192.154.67.0/24 le 32,
192.154.78.0/24 le 32,
152.36.0.0/16 le 32,
152.41.0.0/16 le 32,
204.152.2.0/23 le 32,
192.154.62.0/24 le 32,
152.53.0.0/19 le 32,
192.67.134.0/24 le 32,
192.153.129.0/24 le 32,
204.62.251.0/24 le 32,
205.167.24.0/24 le 32,
205.167.25.0/24 le 32,
209.95.64.0/19 le 32,
152.33.0.0/16 le 32,
199.120.166.0/23 le 32,
192.154.64.0/24 le 32,
152.54.0.0/20 le 32,
192.154.40.0/24 le 32,
192.154.95.0/24 le 32,
152.23.0.0/16 le 32,
192.154.46.0/23,
192.137.210.0/24,
152.43.0.0/16 le 32,
198.62.72.0/24 le 32,
198.85.164.0/23,
198.85.166.0/24,
# NOAA
140.90.0.0/16
end-set
INTERNALprefix-set INTERNAL
216.24.176.0/20 ge 20,
2001:4880::/32 ge 32
end-set
MARTIANSprefix-set MARTIANS
0.0.0.0/7 ge 7,
2.0.0.0/8 ge 8,
5.0.0.0/8 ge 8,
7.0.0.0/8 ge 8,
10.0.0.0/8 ge 8,
23.0.0.0/8 ge 8,
27.0.0.0/8 ge 8,
31.0.0.0/8 ge 8,
36.0.0.0/7 ge 7,
39.0.0.0/8 ge 8,
42.0.0.0/8 ge 8,
49.0.0.0/8 ge 8,
50.0.0.0/8 ge 8,
92.0.0.0/8 ge 8,
93.0.0.0/8 ge 8,
100.0.0.0/6 ge 6,
104.0.0.0/6 ge 6,
112.0.0.0/5 ge 5,
120.0.0.0/8 ge 8,
127.0.0.0/8 ge 8,
169.254.0.0/16 ge 16,
172.16.0.0/12 ge 12,
173.0.0.0/8 ge 8,
174.0.0.0/7 ge 7,
176.0.0.0/5 ge 5,
184.0.0.0/6 ge 6,
192.0.2.0/24 ge 24,
192.168.0.0/16 ge 16,
197.0.0.0/8 ge 8,
198.18.0.0/15 ge 15,
223.0.0.0/8 ge 8,
224.0.0.0/3
end-set
AS112routeprefix-set AS112route
192.175.48.0/24
end-set
TOO-SMALL-PREFIX-24prefix-set TOO-SMALL-PREFIX-24
0.0.0.0/0 ge 25 le 32
end-set
TOO-SMALL-PREFIX-27prefix-set TOO-SMALL-PREFIX-27
0.0.0.0/0 ge 28 le 32
end-set
I2as-path-set I2
ios-regex '_11537_'
end-set
PRIVATEas-path-set PRIVATE
ios-regex '_(65[0-5][0-9][0-9])_',
ios-regex '_(645[2-9][0-9])_',
ios-regex '_(6451[2-9])_',
ios-regex '_(64[6-9][0-9][0-9])_'
end-set
COMMERCIALas-path-set COMMERCIAL
ios-regex '_1_',
ios-regex '_174_',
ios-regex '_1239_',
ios-regex '_1673_',
ios-regex '_1740_',
ios-regex '_1800_',
ios-regex '_1833_',
ios-regex '_2548_',
ios-regex '_2551_',
ios-regex '_2685_',
ios-regex '_2914_',
ios-regex '_3549_',
ios-regex '_3561_',
ios-regex '_3847_',
ios-regex '_3951_',
ios-regex '_3967_',
ios-regex '_4183_',
ios-regex '_4200_',
ios-regex '_5683_',
ios-regex '_6113_',
ios-regex '_6172_',
ios-regex '_6461_',
ios-regex '_7018_'
end-set
PREF200community-set PREF200
19401:200
end-set
PREF400community-set PREF400
19401:400
end-set
PREF500community-set PREF500
19401:500
end-set
PREF600community-set PREF600
19401:600
end-set
NOTtoFEDcommunity-set NOTtoFED
19401:970,
19401:924
end-set
NOTtoINTLcommunity-set NOTtoINTL
19401:950,
19401:924
end-set
DISCARD911community-set DISCARD911
19401:911
end-set
NOTtoEVENTcommunity-set NOTtoEVENT
19401:960,
19401:924
end-set
MEMBERS-ONLYcommunity-set MEMBERS-ONLY
# "I want to hear only NLR MEMBER prefixes"
19401:924
end-set
NOTtoMEMBERScommunity-set NOTtoMEMBERS
19401:920
end-set
NOTtoREpeerscommunity-set NOTtoREpeers
19401:940,
19401:924
end-set
PREPEND-fed1community-set PREPEND-fed1
19401:971
end-set
PREPEND-fed2community-set PREPEND-fed2
19401:972
end-set
PREPEND-fed3community-set PREPEND-fed3
19401:973
end-set
PREPEND-comm1community-set PREPEND-comm1
19401:981
end-set
PREPEND-comm2community-set PREPEND-comm2
19401:982
end-set
PREPEND-comm3community-set PREPEND-comm3
19401:983
end-set
PREPEND-intl1community-set PREPEND-intl1
19401:951
end-set
PREPEND-intl2community-set PREPEND-intl2
19401:952
end-set
PREPEND-intl3community-set PREPEND-intl3
19401:953
end-set
PREPEND-event1community-set PREPEND-event1
19401:961
end-set
PREPEND-event2community-set PREPEND-event2
19401:962
end-set
PREPEND-event3community-set PREPEND-event3
19401:963
end-set
NOTtoCOMM-peerscommunity-set NOTtoCOMM-peers
19401:990,
19401:924
end-set
PREPEND-REpeers1community-set PREPEND-REpeers1
19401:941
end-set
PREPEND-REpeers2community-set PREPEND-REpeers2
19401:942
end-set
PREPEND-REpeers3community-set PREPEND-REpeers3
19401:943
end-set
PREPEND-members1community-set PREPEND-members1
19401:921
end-set
PREPEND-members2community-set PREPEND-members2
19401:922
end-set
PREPEND-members3community-set PREPEND-members3
19401:923
end-set
NOTtoCOMM-memberscommunity-set NOTtoCOMM-members
19401:980,
19401:924
end-set
PREPEND-commpeer1community-set PREPEND-commpeer1
19401:991
end-set
PREPEND-commpeer2community-set PREPEND-commpeer2
19401:992
end-set
PREPEND-commpeer3community-set PREPEND-commpeer3
19401:993
end-set
NC-INroute-policy NC-IN
# Duke/NC member, 1g connection
if destination in NC then
apply MEMBER-IN(450, 2001)
endif
end-policy
FED-INroute-policy FED-IN
# default incoming RP for fednets
apply SANITY-IN
set local-preference 300
set community (19401:7000) additive
end-policy
FLR-INroute-policy FLR-IN
# member FLR 1g (their only layer3 connection)
if destination in FLR then
apply MEMBER-IN(450, 2001)
# for temporary LONI backup through FLR 6/07--brs
elseif destination in LONI then
apply MEMBER-IN(450, 2001)
endif
end-policy
SLR-INroute-policy SLR-IN
# SLR member, 10g primary connection
if destination in SLR then
apply MEMBER-IN(500, 2000)
endif
end-policy
FED-OUTroute-policy FED-OUT
# use for all fednets as default outgoing route-policy.
# if user wants these prefixes NOT sent to feds:
if community matches-any NOTtoFED or community matches-any MEMBERS-ONLY then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
FLR-IN6route-policy FLR-IN6
# member FLR 1G (jack)
if destination in FLR6 then
apply MEMBER-IN(450, 2001)
endif
end-policy
INTL-INroute-policy INTL-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# default incoming RP for international peer nets
apply SANITY-IN
set local-preference 300
set community (19401:5000) additive
endif
end-policy
LONI-INroute-policy LONI-IN
# backup LONI connection from bato
if destination in LONI then
apply MEMBER-IN(450, 2001)
endif
end-policy
SLR-IN6route-policy SLR-IN6
# member SLR 10G primary connection
if destination in SLR6 then
apply MEMBER-IN(500, 2000)
endif
end-policy
EVENT-INroute-policy EVENT-IN
# default incoming RP for special-events e.g. SC06
# **apply with care** because of the high pref!
apply SANITY-IN
set local-preference 1000
set community (19401:10000) additive
end-policy
INTERNALroute-policy INTERNAL
set community (19401:1000)
end-policy
INTL-OUTroute-policy INTL-OUT
# use for international peers as default outgoing route-policy
if community matches-any NOTtoINTL or community matches-any MEMBERS-ONLY then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
LEARN-INroute-policy LEARN-IN
# LEARN backup connection
if destination in LEARN then
apply MEMBER-IN(450, 2001)
endif
end-policy
ALLOW-ALLroute-policy ALLOW-ALL
pass
end-policy
EVENT-OUTroute-policy EVENT-OUT
# use for special events outgoing route-policy
if community matches-any NOTtoEVENT then
drop
else
# otherwise tell them everything we know...
apply SANITY-OUT
endif
# prepending toward event
if community matches-any PREPEND-event1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-event2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-event3 then
prepend as-path 19401 3
endif
end-policy
MEMBER-INroute-policy MEMBER-IN($pref, $communitytag)
#
# this route-policy is a common default for all members
#
# each member's bgp stanza calls a member-specific policy
# which calls this; it passes parameters as noted above
#
# see bgp-communities doc for pref/community values, but
# most common are pref=450/500 and community=2001/2000
# for 1G/10G connections, respectively.
#
# SANITY-IN checks for private-ASs and nlr-internal prefixes
apply SANITY-IN
set local-preference $pref
set community (19401:$communitytag) additive
apply PREF-NUDGING
apply KILL-DISCARD
end-policy
REPEER-INroute-policy REPEER-IN
# default incoming RP for R&E peer nets e.g. ultralight
apply SANITY-IN
set local-preference 300
set community (19401:4000) additive
end-policy
SANITY-INroute-policy SANITY-IN
if as-path in PRIVATE then
drop
endif
if as-path in I2 then
drop
endif
if destination in MARTIANS then
drop
endif
if destination in INTERNAL then
drop
else
pass
endif
end-policy
MEMBER-OUTroute-policy MEMBER-OUT
# use for all members as default outgoing route-policy
if community matches-any NOTtoMEMBERS then
drop
else
# otherwise tell them everything we know...
apply SANITY-OUT
endif
# prepending toward members
if community matches-any PREPEND-members1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-members2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-members3 then
prepend as-path 19401 3
endif
end-policy
REJECT-ALLroute-policy REJECT-ALL
drop
end-policy
REPEER-OUTroute-policy REPEER-OUT
# default outgoing route-policy for research & educ peers
if community matches-any NOTtoREpeers or community matches-any MEMBERS-ONLY then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-REpeers1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-REpeers2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-REpeers3 then
prepend as-path 19401 3
endif
end-policy
SANITY-OUTroute-policy SANITY-OUT
replace as-path private-as
if as-path in PRIVATE then
drop
endif
if destination in MARTIANS then
drop
else
set med igp-cost
endif
end-policy
KILL-DISCARDroute-policy KILL-DISCARD
# only members are allowed to kill prefixes
#
# need to do sanity-check against allowed-prefixes
if community matches-every DISCARD911 then
set next-hop 216.24.191.253
endif
end-policy
PREF-NUDGINGroute-policy PREF-NUDGING
# only members allowed to set these values
if community matches-every PREF600 then
set local-preference 600
elseif community matches-every PREF500 then
set local-preference 500
elseif community matches-every PREF400 then
set local-preference 400
elseif community matches-every PREF200 then
set local-preference 200
else
pass
endif
end-policy
FED-MEMBERSONLY-INroute-policy FED-MEMBERSONLY-IN
# just like FED-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:7000) additive
end-policy
FED-MEMBERSONLY-OUTroute-policy FED-MEMBERSONLY-OUT
# outgoing route-policy for fednets
# who want *only member prefixes*
#
# if source wants prefix NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-MEMBERSONLY-INroute-policy INTL-MEMBERSONLY-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# just like INTL-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:5000) additive
endif
end-policy
INTL-MEMBERSONLY-OUTroute-policy INTL-MEMBERSONLY-OUT
# outgoing route-policy for international-peers
# who want only member prefixes
#
# if peer wants prefix NOT sent to intls:
if community matches-any NOTtoINTL then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
actLoopback0true216.24.191.224255.255.255.255actLoopback1Loopback for RP
true216.24.191.254255.255.255.255actTenGigE0/2/0/0BB to WASH te0/2/0/0 | NLR-ATLA-WASH-10GE-64trueTenGigE92169174216.24.186.20255.255.255.25430flowmonmapflowsamplerflowsampleractTenGigE0/2/0/1BB to ATLA 6509 te1/2trueTenGigE9212actTenGigE0/2/0/2BB ATLA-CHIC-169 over ORNL-Qwest pathtrueTenGigE92169000216.24.186.35255.255.255.25430actTenGigE0/2/0/3MEMBER SLR 10G Layer3 connectiontrueTenGigE92169000143.215.193.1255.255.255.252actTenGigE0/2/0/4truetrueactTenGigE0/2/0/5NCLR layer3 primary 10G | NLR-ATLA-RALE-10GE-63TenGigE9216198.86.17.250255.255.255.252actTenGigE0/2/0/6trueactTenGigE0/2/0/7trueactTenGigE0/5/0/0BB to HOUS te0/2/0/2 | NLR-ATLA-HOUS-10GE-70trueTenGigE9216216.24.186.9255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/5/0/1meas-test 10gig PC9000216.24.187.9255.255.255.252actTenGigE0/5/0/2no xenpak despite show inttrueactTenGigE0/5/0/3trueactTenGigE0/5/0/4Ultralight to Chicago | NLR-ATLA-JACK-10GE-135TenGigE9080216.24.184.29255.255.255.252actTenGigE0/5/0/5trueactTenGigE0/5/0/6trueactTenGigE0/5/0/7trueactTenGigE0/2/0/1.103layer3 backup to NCLR AS19718, vlan 103128.109.70.106255.255.255.252Defaultflowmonmapflowsamplerflowsampler103actTenGigE0/2/0/1.106layer3 backup to FLR, AS11096, vlan 1069000198.32.173.254255.255.255.252Defaultflowmonmapflowsamplerflowsampler106actTenGigE0/2/0/1.151ATLA-VINI, vlan 1519000216.24.178.113255.255.255.248Defaultflowmonmapflowsamplerflowsampler151actTenGigE0/2/0/1.152ATLA-MEAS Measurement PCs, vlan 1529000216.24.187.1255.255.255.248Defaultflowmonmapflowsamplerflowsampler152actTenGigE0/2/0/1.200NASA OOB Terminal Server, via 6509 & 2950, vlan 200sub_vlan9000216.24.184.73255.255.255.252Defaultflowmonmapflowsamplerflowsampler200actTenGigE0/2/0/1.201Cisco OOB Terminal Server, via 6509 & 2950, vlan 201sub_vlan9000216.24.184.77255.255.255.252Defaultflowmonmapflowsamplerflowsampler201actTenGigE0/2/0/1.315layer3 backup to LEARN/Houston, AS26468, vlan 315900074.200.188.5255.255.255.252Defaultflowmonmapflowsamplerflowsampler315actMgmtEth0/RP0/CPU0/0RP0 to Racklan f0/9
true152.49.13.5255.255.255.224actMgmtEth0/RP1/CPU0/0RP1 to Racklan f0/10true152.49.13.6255.255.255.224
0134.68.107.1718121813truetrue15430F4D0308091530612412013E2E16066C0A5C5D6C231129.79.216.16218121813truetrue005517470379293717735D7E1B203D0215315F002413090134.68.107.1749truetrue08265E1D080D1614421F181129.79.216.16249truetrue094B5C5A181104115B181010MgmtEth0/RP1/CPU0/0admintruetrue$1$6oq1$OM6d3Ph5fqzkLofNkX5g51root-systemtruesweenytruetrue02120C52050D1C315E47071Eroot-systemtrueexecdefaultRadiusLocalNonelogindefaultRadiusLocaltrueconsole000Indefault6000LOGIN-L3-HOSTS60InOutdefault01619401trueLevel249.2160.2419.1225.00trueIETFStandardNSFIPv4UnicastNotSetDisabledConnectedDisabledIPv6UnicastNotSetDisabledtrueConnectedDisabledLoopback0truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueLoopback1truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/1/0/1trueLevel2IPv4UnicasttrueNotSet719IPv6UnicasttrueNotSet719TenGigE0/2/0/0trueLevel2IPv4UnicasttrueNotSet941IPv6UnicasttrueNotSet941TenGigE0/5/0/0trueLevel2IPv4UnicasttrueNotSet1350IPv6UnicasttrueNotSet1350TenGigE0/5/0/2trueLevel2IPv4UnicasttrueNotSet1791IPv6UnicasttrueNotSet1791TenGigE0/5/0/5trueLevel2IPv4UnicasttrueNotSet1171IPv6UnicasttrueNotSet1171TenGigE0/5/0/4.76trueLevel2NotSetNeverIPv4UnicasttrueNotSet10000TenGigE0/5/0/4.152trueLevel2NotSetNeverIPv4UnicasttruenLr-monReadOnlyQUERY-HOSTS019401true216.24.191.225120360trueIPv4Unicasttrue88216.24.176.020INTERNAL216.24.191.024INTERNALIPv4Multicasttrue216.24.176.020INTERNALIPv6Unicasttrue2001:4880::32INTERNALIPv6Multicasttrue2001:4880::32INTERNALFEDtrueIPv4UnicasttruetrueFED-IN300075falseFED-OUTtruetruetrueIPv4MulticasttruetrueFED-IN300075falseFED-OUTtruetruetrueFED6trueIPv6UnicasttruetrueFED-IN200075falseFED-OUTtruetruetrueIPv6MulticasttruetrueFED-IN50075falseFED-OUTtruetruetrueINTLtrueIPv4UnicasttruetrueINTL-IN400075falseINTL-OUTtruetruetrueIPv4MulticasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueINTL6trueIPv6UnicasttruetrueINTL-IN200075falseINTL-OUTtruetruetrueIPv6MulticasttruetrueINTL-IN50075falseINTL-OUTtruetruetrueREPEERtrueIPv4UnicasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetrueIPv4MulticasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetruemembertrueIPv4UnicasttruetrueMEMBER-OUTtruetruetrueIPv4MulticasttruetrueMEMBER-OUTtruetruetrueNLRviewtruebgp looking-glasses like NLRview--send everything, accept nothingIPv4UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv4MulticasttrueREJECT-ALL175falseALLOW-ALLtruetrueREPEER6trueR&E network peers that aren't internationals or fednetsIPv6UnicasttruetrueREPEER-IN200075trueREPEER-OUTtruetruetrueIPv6MulticasttruetrueREPEER-IN50075trueREPEER-OUTtruetruetruemember6trueIPv6UnicasttruetrueMEMBER-OUTtruetruetrueIPv6MulticasttruetrueMEMBER-OUTtruetruetrueNLRview6truebgp looking-glasses like NLRview--send everything, accept nothingIPv6UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv6MulticasttrueREJECT-ALL175falseALLOW-ALLtruetrueibgp-meshtrue019401falsetrue0608152D565C13Loopback0IPv4UnicasttruetruetruetrueIPv4Multicasttruetrueipv6-ibgp-meshtrue019401Loopback0IPv6UnicasttruetruetruetrueIPv6Multicasttruetrue19401ipv6-ibgp-meshIPv6MulticasttruetrueFED-MEMBERSONLYtrueIPv4UnicasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueFED-MEMBERSONLY6trueIPv6UnicasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueIPv6MulticasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueINTL-MEMBERSONLYtrueIPv4UnicasttruetrueINTL-MEMBERSONLY-IN300075falseINTL-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueINTL-MEMBERSONLY-IN300075falseINTL-MEMBERSONLY-OUTtruetruetrueINTL-MEMBERSONLY6trueIPv6UnicasttruetrueINTL-MEMBERSONLY-IN100075falseINTL-MEMBERSONLY-OUTtruetruetrueIPv6MulticasttruetrueINTL-MEMBERSONLY-IN100075falseINTL-MEMBERSONLY-OUTtruetruetruemember-membersonlytrueIPv4UnicasttruetrueMEMBERS-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueMEMBERS-MEMBERSONLY-OUTtruetruetruemember-membersonly6trueIPv6UnicasttruetrueMEMBERS-MEMBERSONLY-OUTtruetruefalseIPv6MulticasttruetrueMEMBERS-MEMBERSONLY-OUTtruetruefalse138.18.155.290668FED-MEMBERSONLYfalsetrue080F607C2D2B2039405B5C52DREN via Starlight144.92.164.173059member-membersonlyfalsetrue1505021F0767080D0B7E3B2E01UWISC via CIC, 10G, vlan 2077IPv4UnicasttrueWISC-INIPv4MulticasttrueWISC-IN149.165.254.225019782member-membersonlyfalsetrue045205020620424F440B0A1419184DIndiana GigapopIPv4UnicasttrueIndiana-INIPv4MulticasttrueIndiana-INtruetrue164.58.245.8505078memberONENETIPv4UnicasttrueONENET-INIPv4MulticasttrueONENET-IN192.5.40.17017memberPURDUE through CICIPv4UnicasttruePURDUE-INIPv4MulticasttruePURDUE-IN192.5.143.20103memberfalsetrue135040145F09077879NLR-CIC-NORTHWESTERN [NO-MONITOR]IPv4UnicasttrueNORTHWESTERN-INIPv4MulticasttrueNORTHWESTERN-IN192.17.10.49038memberfalsetrue06100620634307103518225A5C23UIUC via CIC [NO-MONITOR]IPv4UnicasttrueUIUC-INIPv4MulticasttrueUIUC-IN192.31.99.145020388INTLGLORIAD via Starlight192.35.86.169057memberfalsetrue1327434052585C7D7E3E0B626477415E404D550101UMN/Northern Lights via CICIPv4UnicasttrueUMN-INIPv4MulticasttrueUMN-IN192.41.213.12201842FEDfalsetrue1537392337040716USGSIPv4UnicasttrueUSGS-INtruetrue192.88.114.20005050member[MEMBER] PSC Backup via L2IPv4UnicasttruePSC-INIPv4MulticasttruePSC-IN192.122.183.1810237memberfalsetrue132F3E071300211A612B2D6B1CMERIT through CICIPv4UnicasttrueMERIT-INIPv4MulticasttrueMERIT-IN198.17.196.901224memberfalsetrue113C0A561F18595B13NCSA via UIUC via CICIPv4UnicasttrueNCSA-INIPv4MulticasttrueNCSA-IN198.125.140.2220293FED-MEMBERSONLYfalsetrue112735375A373802013EESnet via Starlight211.79.48.15307539INTLfalsetrue07210D7E033D0E04251705TWAREN via Starlight vla 398TenGigE0/5/0/1.398216.24.184.706509INTL-MEMBERSONLYCA*Net TorontoTenGigE0/5/0/1.367216.24.184.906509INTL-MEMBERSONLYCA*Net WinnipegTenGigE0/5/0/1.366216.24.184.22010764INTLfalsetrue06351B205E60252BStarlightTenGigE0/5/0/1.372IPv4UnicasttrueSTARLIGHT-IN500075falseSTARLIGHT-OUTIPv4MulticasttrueSTARLIGHT-IN500075falseSTARLIGHT-OUT216.24.184.26014041memberfalsetrue0220367C3B2823131D1E2E0C0B15000E0D0F2B29282D[MEMBER] UCAR Backup via L2IPv4UnicasttrueUCAR-INIPv4MulticasttrueUCAR-IN216.24.184.34032361falsetrue120C0903000A020838Ultralight via Jax circ#134IPv4UnicasttrueULTRALIGHT-INULTRALIGHT-OUTtruetrue216.24.184.50032666memberfalsetrue000712150116050A1DCase WesternIPv4UnicasttrueCASE-INIPv4MulticasttrueCASE-IN216.24.187.100065507NLRviewNLRview Chicago (dc) [NO-MONITOR]216.24.191.224ibgp-meshATLA216.24.191.226ibgp-meshDENV216.24.191.227ibgp-meshHOUS216.24.191.228ibgp-meshLOSA216.24.191.229ibgp-meshNEWY216.24.191.230ibgp-meshSEAT216.24.191.231ibgp-meshWASH216.24.191.252ibgp-meshKANS-SBC12001:5e8:0:fffd:0:9:1:10105050member6[MEMBER] PSC Backup via L2IPv6UnicasttruePSC6-IN2001:e10:ffff:308::107539INTL6falsetrue07210D7E033D0E04251705TWAREN via SL194012001:e10:ffff:308::1TenGigE0/5/0/1.3982001:18e8:ff00:7::1019782member-membersonly6falsetrue045205020620424F440B0A1419184DIndiana Gigapop v6IPv6UnicasttrueINDIANA-IN6IPv6MulticasttrueINDIANA-IN62001:4880:0:1::ipv6-ibgp-meshATLA v6 loopback2001:4880:0:3::ipv6-ibgp-meshDENV v6 loopback2001:4880:0:4::ipv6-ibgp-meshHOUS v6 loopback2001:4880:0:5::ipv6-ibgp-meshLOSA v6 loopback2001:4880:0:6::ipv6-ibgp-meshNEWY v6 loopback2001:4880:0:7::ipv6-ibgp-meshSEAT v6 loopback2001:4880:0:8::ipv6-ibgp-meshWASH v6 loopback2001:4880:2:4::100065507NLRview6NLRview Chicago v6 (dc) [NO-MONITOR]2001:4880:100:7::20293FED6falsetrue112735375A373802013EESnet v6IPv6UnicasttrueFED-MEMBERSONLY-OUTIPv6MulticasttrueFED-MEMBERSONLY-OUT2001:4880:100:b::2032361REPEER6falsetrue120C0903000A020838Ultralight v6 -- te0/5/0/62001:4880:100:f::2057member6falsetrue1327434052585C7D7E3E0B626477415E404D550101UMN via CICIPv6UnicasttrueUMN6-INIPv6MulticasttrueUMN6-IN2001:4880:100:10::20668FED-MEMBERSONLY6falsetrue080F607C2D2B2039405B5C52DREN v6 via Starlight216.24.176.020Null0253216.24.191.25332Null02001:4880::32Null0trueCritical134.68.107.9trueLoopback0flowmaptrue9true003010001Loopback0216.24.187.100flowmonmaptrueipv4-rawflowmaptrue10000flowsamplertrueRandom1500trueEnableEnableEnableEnableEnableEnableQUERY-HOSTS10PermitIPV4134.68.142.820PermitIPV4134.68.107.2330PermitIPV4129.79.6.13740PermitIPV4129.79.216.7950PermitIPV4134.68.107.2260PermitIPV4134.68.107.12370DenyIPV4LOGIN-L3-HOSTS10skip.grnoc.iu.edu20PermitIPV4134.68.142.5030hop-external.grnoc.iu.edu40PermitIPV4134.68.107.850dc-1.grnoc.iu.edu60PermitIPV4134.68.107.2270jump.grnoc.iu.edu80PermitIPV4192.12.206.19681nlrmon.grnoc.iu.edu - XML82PermitIPV4134.68.142.890BB addresses100PermitIPV4216.24.186.00.0.0.255110Loopback addresses120PermitIPV4216.24.191.2240.0.0.31130Local racklan140PermitIPV4152.49.13.00.0.0.31150dev.grnoc.iu.edu160PermitIPV4134.68.107.21170dc-2.grnoc.iu.edu - VN XML180PermitIPV4134.68.107.20MCAST-BOUNDARY10DenyIPV4224.0.1.3920DenyIPV4224.0.1.4030DenyIPV4239.0.0.00.255.255.25540PermitIPV4QUERY-HOSTSEnabledLOGIN-L3-HOSTSEnabledMCAST-BOUNDARYEnabled129.79.5.100Server134.68.1.9Servertrue216.24.191.254trueTenGigE0/1/0/2truetrueTenGigE0/1/0/5truetrueTenGigE0/2/0/5truetrueTenGigE0/5/0/6truetrueTenGigE0/5/0/4.66truetrueTenGigE0/5/0/4.99truetrueTenGigE0/5/0/1.366truetrueTenGigE0/5/0/1.367truetrueTenGigE0/5/0/1.371truetrueTenGigE0/5/0/1.372truetrueTenGigE0/5/0/1.373truetrueTenGigE0/5/0/1.374truetrueTenGigE0/5/0/1.388truetrueTenGigE0/5/0/1.391truetrueTenGigE0/5/0/1.398truetrueTenGigE0/5/0/4.107truetrueTenGigE0/5/0/4.112truetrueTenGigE0/5/0/4.152truetrueTenGigE0/5/0/4.197truetrueTenGigE0/5/0/4.384truetrueTenGigE0/5/0/4.650truetrueTenGigE0/5/0/4.843truetrueTenGigE0/1/0/0.2077truetrueTenGigE0/1/0/0.2079truetrueTenGigE0/1/0/0.2084truetrueTenGigE0/1/0/0.2087truetrueTenGigE0/1/0/0.2093truetrueTenGigE0/1/0/0.2094truetrueTenGigE0/1/0/0.2095truetrueLoopback0Loopback0130.126.0.145trueUIUC via CIC Loopback peeringtrue134.55.3.2trueESnet via Starlight138.18.11.253trueDREN--loopback144.92.164.173trueTenGigE0/1/0/0.2077WISC via CIC, AS59149.165.254.225trueTenGigE0/1/0/0.2093Indiana GigaPoP164.58.245.85trueTenGigE0/1/0/2Onenet-Tulsa192.5.109.253trueCase Western AS32666192.17.10.49trueTenGigE0/1/0/0.2095UIUC(10G) via CIC192.31.99.253trueTenGigE0/5/0/1.391GLORIAD192.35.86.169trueTenGigE0/1/0/0.2084UMN/Northern Lights 1G via CIC198.17.196.9trueTenGigE0/1/0/0.2075NCSA 199.249.169.102trueTenGigE0/1/0/0.2082Northwestern Univ 1G via CIC211.79.48.153trueTenGigE0/5/0/1.398TWAREN via SL as7539216.24.184.22trueTenGigE0/5/0/1.372Starlight AS10764true216.24.191.224trueatla-crsinternal216.24.191.226truedenv-crsinternal216.24.191.227truehous-crsinternal216.24.191.228truelosa-crsinternal216.24.191.229truenewy-crsinternal216.24.191.230trueseat-crsinternal216.24.191.231truewash-crsinternaltrueTenGigE0/1/0/2MCAST-BOUNDARYTenGigE0/1/0/5MCAST-BOUNDARYTenGigE0/2/0/5MCAST-BOUNDARYTenGigE0/5/0/6MCAST-BOUNDARYTenGigE0/5/0/4.66MCAST-BOUNDARYTenGigE0/5/0/4.99MCAST-BOUNDARYTenGigE0/5/0/1.366MCAST-BOUNDARYTenGigE0/5/0/1.367MCAST-BOUNDARYTenGigE0/5/0/1.371MCAST-BOUNDARYTenGigE0/5/0/1.372MCAST-BOUNDARYTenGigE0/5/0/1.373MCAST-BOUNDARYTenGigE0/5/0/1.374MCAST-BOUNDARYTenGigE0/5/0/1.388MCAST-BOUNDARYTenGigE0/5/0/1.391MCAST-BOUNDARYTenGigE0/5/0/1.398MCAST-BOUNDARYTenGigE0/5/0/4.107MCAST-BOUNDARYTenGigE0/5/0/4.112MCAST-BOUNDARYTenGigE0/5/0/4.152MCAST-BOUNDARYTenGigE0/5/0/4.197MCAST-BOUNDARYTenGigE0/5/0/4.384MCAST-BOUNDARYTenGigE0/5/0/4.650MCAST-BOUNDARYTenGigE0/5/0/4.843MCAST-BOUNDARYTenGigE0/1/0/0.2077MCAST-BOUNDARYTenGigE0/1/0/0.2079MCAST-BOUNDARYTenGigE0/1/0/0.2084MCAST-BOUNDARYTenGigE0/1/0/0.2087MCAST-BOUNDARYTenGigE0/1/0/0.2093MCAST-BOUNDARYTenGigE0/1/0/0.2094MCAST-BOUNDARYTenGigE0/1/0/0.2095MCAST-BOUNDARYtruetruePSCprefix-set PSC
63.118.64.0/23,
66.71.0.0/17,
66.230.74.32/28,
72.237.88.0/22,
128.2.0.0/16,
128.118.0.0/16,
128.182.0.0/16 le 32,
128.237.0.0/16,
130.49.0.0/16 le 32,
130.203.0.0/16,
136.142.0.0/16,
146.186.0.0/16,
147.72.107.0/24,
147.72.108.0/22,
147.72.112.0/22,
147.72.116.0/23,
147.72.118.0/24,
147.72.67.192/26,
147.73.0.0/16,
150.212.0.0/16,
150.231.0.0/16,
150.232.0.0/16,
157.182.0.0/16,
192.12.32.0/24,
192.58.107.0/24,
192.88.99.0/24,
192.88.114.0/24,
192.88.115.0/24 le 32,
192.88.209.0/24,
192.88.210.0/24,
198.32.224.0/24,
198.206.16.0/20,
204.154.139.0/24,
63.133.224.0/24 le 32,
63.133.225.0/24 le 32,
63.133.226.0/24 le 32,
63.133.227.0/24 le 32,
63.133.228.0/24 le 32,
63.133.229.0/24 le 32,
63.133.230.0/24 le 32,
63.133.231.0/24 le 32,
63.133.232.0/24 le 32,
63.133.233.0/24 le 32,
63.133.234.0/24 le 32,
63.133.235.0/24 le 32,
63.133.236.0/24 le 32,
63.133.237.0/24 le 32,
63.133.238.0/24 le 32,
63.133.239.0/24 le 32,
63.133.240.0/24 le 32,
63.133.241.0/24 le 32,
63.133.242.0/24 le 32,
63.133.243.0/24 le 32,
63.133.244.0/24 le 32,
63.133.245.0/24 le 32,
63.133.246.0/24 le 32,
63.133.247.0/24 le 32,
63.133.248.0/24 le 32,
63.133.249.0/24 le 32,
63.133.250.0/24 le 32,
63.133.251.0/24 le 32,
63.133.252.0/24 le 32,
63.133.253.0/24 le 32,
63.133.254.0/24 le 32,
64.83.132.0/24 le 32,
64.83.133.0/24 le 32,
64.83.134.0/24 le 32,
64.83.135.0/24 le 32,
64.83.136.0/24 le 32,
64.83.137.0/24 le 32,
64.83.138.0/24 le 32,
64.83.140.0/24 le 32,
64.83.141.0/24 le 32,
64.83.142.0/24 le 32,
64.83.143.0/24 le 32,
64.83.152.0/24 le 32,
64.83.153.0/24 le 32,
64.83.155.0/24 le 32,
64.83.158.0/24 le 32,
65.110.114.0/24 le 32,
204.154.140.0/24,
204.194.28.0/22,
208.40.149.48/28,
208.40.161.64/27,
208.40.177.0/24,
208.40.180.0/24,
208.40.194.0/24,
209.114.143.0/24,
209.114.144.0/23 le 32,
209.114.187.8/29,
209.114.187.240/29
end-set
UMNprefix-set UMN
# from UMN/Northern Lights AS57
128.101.0.0/16,
129.176.0.0/16,
131.212.0.0/16,
134.84.0.0/16,
134.129.48.0/20,
134.129.64.0/18,
134.129.128.0/18,
134.129.192.0/19,
137.216.0.0/16,
146.57.0.0/16,
151.159.0.0/16,
160.94.0.0/16,
192.41.204.0/24,
192.55.228.0/24,
192.236.32.0/19,
198.190.250.0/23,
198.190.252.0/24,
204.73.80.0/22,
204.221.228.0/22,
206.8.98.0/23,
206.144.192.0/20,
206.145.208.0/20,
206.176.0.0/20,
206.176.18.0/24,
206.176.38.0/24,
206.176.57.0/24,
206.176.58.0/24,
206.209.0.0/20,
209.32.16.0/20,
64.8.128.0/18,
130.71.0.0/16,
134.29.0.0/16,
134.129.0.0/16,
137.22.0.0/16,
138.129.0.0/16,
138.192.0.0/16,
140.209.0.0/16,
140.225.0.0/16,
141.140.0.0/16,
141.224.0.0/16,
156.98.26.0/23,
156.98.60.0/22,
156.98.64.0/21,
165.234.0.0/20,
165.234.7.0/24,
165.234.8.0/22,
165.234.12.0/23,
165.234.14.0/24,
165.234.32.0/21,
165.234.40.0/22,
165.234.44.0/23,
165.234.48.0/20,
165.234.65.0/24,
165.234.71.0/24,
165.234.98.0/23,
165.234.100.0/22,
165.234.104.0/21,
165.234.112.0/21,
165.234.120.0/23,
165.234.123.0/24,
165.234.124.0/23,
165.234.126.0/24,
165.234.127.0/24,
165.234.128.0/21,
165.234.146.0/23,
165.234.160.0/24,
165.234.164.0/22,
165.234.165.0/24,
165.234.168.0/22,
165.234.172.0/22,
165.234.176.0/22,
165.234.180.0/22,
165.234.184.0/21,
165.234.192.0/20,
165.234.206.0/24,
165.234.208.0/20,
192.231.160.0/24,
198.22.19.0/24,
198.52.0.0/22,
198.174.0.0/24,
198.174.16.0/20,
198.174.217.0/24,
198.174.218.0/23,
198.174.220.0/22,
198.174.224.0/21,
198.174.232.0/24,
198.176.160.0/24,
199.17.0.0/16,
199.86.72.0/21,
204.72.0.0/17,
204.72.192.0/19,
204.72.224.0/21,
204.72.232.0/22,
204.72.246.0/23,
204.72.248.0/21,
204.73.20.0/22,
204.73.112.0/20,
204.77.32.0/19,
204.147.94.0/24,
204.169.0.0/16,
204.220.192.0/19,
204.220.224.0/20,
205.178.192.0/18,
205.215.222.0/24,
206.8.192.0/19,
206.8.224.0/23,
206.8.238.0/24,
206.9.147.0/24,
206.9.148.0/22,
206.11.192.0/20,
206.131.0.0/17,
206.131.128.0/19,
138.247.0.0/16,
206.176.20.0/24,
206.176.21.0/24,
206.176.39.0/24,
206.176.40.0/24,
206.176.41.0/24,
206.176.42.0/24,
206.176.44.0/24,
198.177.154.0/24,
140.88.0.0/16,
138.236.0.0/16,
206.176.54.0/24
end-set
CASEprefix-set CASE
#member Case Western, AS32666
129.22.0.0/16,
192.5.109.0/24,
192.5.110.0/24,
192.5.111.0/24,
192.5.112.0/24,
192.5.113.0/24
end-set
NCSAprefix-set NCSA
141.142.0.0/16,
198.17.196.0/24
end-set
PSC6prefix-set PSC6
::/0 le 128
end-set
UCARprefix-set UCAR
128.116.0.0/16,
128.117.0.0/16,
128.138.0.0/16,
128.198.0.0/16,
129.19.0.0/16,
129.72.0.0/16,
129.82.0.0/16 le 32,
130.253.0.0/16,
132.163.0.0/16,
132.194.0.0/16,
137.75.0.0/16,
138.67.0.0/16,
140.172.0.0/16,
140.226.0.0/16,
147.153.0.0/16,
156.108.0.0/16,
161.97.0.0/16,
161.98.0.0/16,
164.47.0.0/16,
164.104.0.0/16,
165.127.0.0/16,
169.133.248.0/21,
192.12.240.0/24,
192.26.83.0/24,
192.43.217.0/24,
192.43.244.0/24,
192.52.106.0/24,
192.70.175.0/24,
192.111.53.0/24,
192.136.70.0/24,
192.149.148.0/24,
192.156.134.0/24,
192.160.49.0/24,
192.188.155.0/24,
198.11.16.0/20,
198.59.2.0/24,
198.59.7.0/24,
198.59.46.0/24,
198.59.47.0/24,
198.59.48.0/24,
198.59.49.0/24,
198.59.55.0/24,
198.59.61.0/24,
198.59.69.0/24,
198.59.81.0/24,
198.59.82.0/24,
198.59.83.0/24,
198.118.206.0/24,
198.178.254.0/24,
198.202.202.0/24,
204.228.64.0/24,
204.228.67.0/24,
204.228.68.0/24,
204.228.69.0/24,
204.228.78.0/24,
204.228.80.0/24,
205.170.168.0/21,
128.110.0.0/16,
129.123.0.0/16,
134.50.0.0/16,
134.250.0.0/16,
137.190.0.0/16,
140.197.0.0/16,
144.17.0.0/16,
144.17.192.0/18,
144.35.0.0/16,
144.38.0.0/16,
144.39.0.0/20,
144.39.0.0/16,
146.86.0.0/16,
155.97.0.0/16,
155.98.0.0/16,
155.98.32.0/20,
155.98.60.0/22,
155.99.0.0/16,
155.100.0.0/16,
155.101.0.0/16,
158.91.0.0/17,
158.91.128.0/18,
160.7.0.0/17,
160.7.128.0/18,
161.28.0.0/16,
161.119.0.0/16,
163.6.0.0/16,
163.248.0.0/16,
165.239.0.0/16,
168.177.0.0/16,
168.178.0.0/16,
168.179.0.0/16,
168.180.0.0/16,
192.41.96.0/22,
192.84.171.0/24,
192.107.180.0/23,
192.120.193.0/24,
198.60.0.0/23,
198.60.2.0/24,
198.60.4.0/23,
198.60.8.0/21,
198.60.16.0/24,
198.60.226.0/24,
199.104.76.0/23,
199.104.87.0/24,
199.104.88.0/23,
199.104.93.0/24,
204.99.153.0/24,
204.99.154.0/23,
204.113.0.0/19,
204.113.0.0/16,
204.113.116.0/22,
204.113.128.0/19,
205.118.0.0/24,
205.118.0.0/15,
205.118.16.0/21,
205.118.26.0/23,
205.118.28.0/22,
205.118.32.0/19,
205.118.64.0/22,
205.118.76.0/23,
205.118.90.0/23,
205.118.92.0/23,
205.118.98.0/23,
205.118.100.0/22,
205.118.112.0/23,
205.119.28.0/23,
205.119.34.0/23,
205.119.36.0/22,
205.119.40.0/21,
205.119.48.0/23,
205.119.64.0/19,
205.119.80.0/24,
205.119.96.0/22,
205.119.126.0/23,
205.120.0.0/13,
205.124.22.0/23,
205.125.40.0/21,
205.127.108.0/23,
205.127.110.0/23,
205.127.112.0/23,
205.127.116.0/22,
205.127.120.0/21,
205.127.128.0/19,
205.127.160.0/24,
205.127.176.0/21,
205.127.184.0/22,
205.127.200.0/21,
205.127.208.0/21,
205.127.216.0/22,
205.127.230.0/23,
205.127.232.0/21,
204.99.159.0/24,
204.99.160.0/20,
204.99.176.0/23,
129.19.64.0/30,
129.19.92.0/24,
129.19.93.0/24,
129.19.150.0/24,
129.19.176.0/20,
132.194.3.8/30,
132.194.3.16/30,
132.194.3.32/29,
132.194.3.40/30,
132.194.3.56/30,
147.153.0.0/16,
161.97.0.0/16,
192.111.53.0/24,
198.59.2.0/24
end-set
UIUCprefix-set UIUC
72.36.126.0/23,
72.36.64.0/18,
192.17.0.0/16,
128.174.0.0/16,
130.126.0.0/16,
141.142.0.0/16,
130.126.0.145/32,
64.22.176.0/20 le 21
end-set
UMN6prefix-set UMN6
# UMN/Northern Lights, AS57
2001:468:1900::/40,
2001:4930::/32
end-set
USGSprefix-set USGS
130.11.0.0/16,
130.118.0.0/16,
136.177.0.0/16,
137.227.160.0/19,
137.227.224.0/19,
144.47.0.0/16,
152.61.0.0/16,
159.189.0.0/16,
159.189.157.0/24,
192.55.108.0/24,
192.58.224.0/23,
199.242.141.0/24
end-set
WISCprefix-set WISC
# Wisc through CIC
72.33.0.0/16,
128.104.0.0/16,
128.105.0.0/16,
144.92.0.0/16,
146.151.0.0/16,
192.172.224.0/24,
198.51.254.0/24,
198.133.224.0/24,
198.133.225.0/24
end-set
MERITprefix-set MERIT
# UMich and MSU prefixes through CIC
# UMich:
141.211.0.0/16,
141.212.0.0/16,
141.213.0.0/16,
141.214.0.0/16,
141.215.0.0/16,
141.216.0.0/16,
192.122.183.0/24,
#MSU:
35.0.0.0/8
end-set
ONENETprefix-set ONENET
129.15.0.0/16,
129.244.0.0/16,
130.184.0.0/16,
139.78.0.0/16,
144.30.0.0/16,
144.167.0.0/16,
156.110.0.0/16,
157.142.0.0/16,
159.150.0.0/16,
162.58.0.0/16,
164.58.0.0/16,
192.31.83.0/24,
192.35.96.0/23,
192.35.98.0/24,
192.78.4.0/24,
192.133.17.0/24,
192.135.141.0/24,
192.146.206.0/24,
192.149.244.0/24,
192.150.147.0/24,
192.173.32.0/20,
192.173.48.0/22,
192.198.4.0/22,
192.203.164.0/24,
192.206.65.0/24,
192.231.3.0/24,
192.231.56.0/24,
192.234.12.0/23,
198.11.4.0/22,
198.17.223.0/24,
198.102.159.0/24,
198.178.194.0/24,
198.183.248.0/23,
198.187.154.0/24,
198.203.153.0/24,
198.204.126.0/24,
198.207.222.0/24,
199.27.8.0/21,
199.120.0.0/21,
199.120.8.0/22,
199.164.253.0/24,
199.181.88.0/22,
199.184.200.0/22,
199.190.128.0/23,
199.223.171.0/24,
199.245.163.0/24,
199.245.164.0/23,
199.245.166.0/24,
199.248.134.0/23,
204.29.164.0/24,
204.61.0.0/21,
204.61.8.0/22,
204.61.12.0/23,
204.62.16.0/21,
204.62.24.0/22,
204.63.216.0/21,
204.87.64.0/18,
204.87.241.0/24,
204.126.2.0/23,
204.126.138.0/23,
204.126.144.0/23,
204.126.162.0/23,
204.126.186.0/23,
204.126.188.0/22,
204.154.112.0/21,
205.143.136.0/21,
205.143.216.0/21,
205.153.220.0/24,
205.159.237.0/24,
205.235.84.0/23,
205.235.86.0/23,
205.235.88.0/23,
205.235.91.0/24,
206.202.192.0/18,
206.203.81.0/24,
147.97.0.0/16,
192.153.53.0/24,
206.61.156.0/24
end-set
PURDUEprefix-set PURDUE
128.211.128.0/19
end-set
INDIANAprefix-set INDIANA
65.254.96.0/20 le 27,
66.205.160.0/20 le 27,
66.254.224.0/19 le 27,
72.12.215.0/24 le 27,
128.10.0.0/16 le 27,
128.46.0.0/16 le 27,
128.210.0.0/16 le 27,
128.211.0.0/16 le 27,
128.252.0.0/16 le 27,
129.74.0.0/16 le 27,
129.79.0.0/16 le 32,
134.68.0.0/16 le 27,
140.182.0.0/16 le 27,
149.159.0.0/16 le 27,
149.160.0.0/16 le 27,
149.161.0.0/16 le 27,
149.162.0.0/16 le 27,
149.163.0.0/16 le 27,
149.164.0.0/16 le 27,
149.165.0.0/16 le 27,
149.166.0.0/16 le 27,
156.56.0.0/16 le 27,
157.91.0.0/16 le 27,
165.134.0.0/16 le 27,
192.12.206.0/24 le 27,
192.88.99.0/24 le 27,
192.245.116.0/24 le 27,
204.52.32.0/20 le 27,
205.137.32.0/20 le 27,
149.165.251.0/24 le 27,
216.88.164.0/24 le 27,
12.159.195.0/24 le 27,
12.159.206.0/23 le 27,
12.159.209.0/24 le 27,
69.51.160.0/19 le 27,
131.93.0.0/16 le 27,
137.112.0.0/16 le 27,
139.102.0.0/16 le 27,
147.53.0.0/16 le 27,
147.226.0.0/16 le 27,
152.228.0.0/16 le 27,
157.91.0.0/19 le 27,
157.91.48.0/20 le 27,
157.91.64.0/18 le 27,
157.91.128.0/17 le 27,
159.28.0.0/16 le 27,
159.218.0.0/16 le 27,
159.242.0.0/16 le 27,
161.32.0.0/16 le 27,
163.120.0.0/16 le 27,
163.245.0.0/16 le 27,
165.138.0.0/16 le 27,
165.139.0.0/16 le 27,
167.217.0.0/16 le 27,
168.91.0.0/16 le 27,
168.102.0.0/16 le 27,
192.146.191.0/24 le 27,
192.146.192.0/24 le 27,
192.189.3.0/24 le 27,
192.195.225.0/24 le 27,
192.195.226.0/23 le 27,
192.195.228.0/23 le 27,
192.195.230.0/24 le 27,
192.200.128.0/21 le 27,
192.206.9.0/24 le 27,
192.206.10.0/23 le 27,
192.207.174.0/23 le 27,
192.207.176.0/23 le 27,
192.207.178.0/24 le 27,
198.51.243.0/24 le 27,
198.51.244.0/24 le 27,
198.62.84.0/24 le 27,
198.62.98.0/24 le 27,
199.8.0.0/16 le 27,
204.52.48.0/20 le 27,
205.215.64.0/18 le 27
end-set
INDIANA6prefix-set INDIANA6
2001:468:400::/40,
2001:18e8::/32
end-set
INTERNALprefix-set INTERNAL
216.24.176.0/20 ge 20,
2001:4880::/32 ge 32
end-set
MARTIANSprefix-set MARTIANS
0.0.0.0/7 ge 7,
2.0.0.0/8 ge 8,
5.0.0.0/8 ge 8,
7.0.0.0/8 ge 8,
10.0.0.0/8 ge 8,
23.0.0.0/8 ge 8,
27.0.0.0/8 ge 8,
31.0.0.0/8 ge 8,
36.0.0.0/7 ge 7,
39.0.0.0/8 ge 8,
42.0.0.0/8 ge 8,
49.0.0.0/8 ge 8,
50.0.0.0/8 ge 8,
92.0.0.0/8 ge 8,
93.0.0.0/8 ge 8,
100.0.0.0/6 ge 6,
104.0.0.0/6 ge 6,
112.0.0.0/5 ge 5,
120.0.0.0/8 ge 8,
127.0.0.0/8 ge 8,
169.254.0.0/16 ge 16,
172.16.0.0/12 ge 12,
173.0.0.0/8 ge 8,
174.0.0.0/7 ge 7,
176.0.0.0/5 ge 5,
184.0.0.0/6 ge 6,
192.0.2.0/24 ge 24,
192.168.0.0/16 ge 16,
197.0.0.0/8 ge 8,
198.18.0.0/15 ge 15,
223.0.0.0/8 ge 8,
224.0.0.0/3
end-set
AS112routeprefix-set AS112route
192.175.48.0/24
end-set
ULTRALIGHTprefix-set ULTRALIGHT
131.225.0.0/16 le 26,
141.211.43.96/27,
198.32.43.0/24 le 29,
198.32.44.0/24 le 29,
192.84.86.0/24 le 29,
192.65.196.0/23 le 29,
200.143.197.192/26 le 29,
200.136.80.0/24 le 29,
192.41.230.0/23
end-set
NORTHWESTERNprefix-set NORTHWESTERN
129.105.0.0/16,
165.124.0.0/16,
199.74.64.0/18,
192.26.85.0/24,
192.26.86.0/24,
192.26.87.0/24,
192.31.155.0/24,
192.31.253.0/24,
199.249.165.0/24,
199.249.166.0/24,
199.249.167.0/24,
199.249.168.0/24,
199.249.169.0/24,
192.5.143.0/24
end-set
TOO-SMALL-PREFIX-24prefix-set TOO-SMALL-PREFIX-24
0.0.0.0/0 ge 25 le 32
end-set
TOO-SMALL-PREFIX-27prefix-set TOO-SMALL-PREFIX-27
0.0.0.0/0 ge 28 le 32
end-set
I2as-path-set I2
ios-regex '_11537_'
end-set
PRIVATEas-path-set PRIVATE
ios-regex '_(65[0-5][0-9][0-9])_',
ios-regex '_(645[2-9][0-9])_',
ios-regex '_(6451[2-9])_',
ios-regex '_(64[6-9][0-9][0-9])_'
end-set
COMMERCIALas-path-set COMMERCIAL
ios-regex '_1_',
ios-regex '_174_',
ios-regex '_1239_',
ios-regex '_1673_',
ios-regex '_1740_',
ios-regex '_1800_',
ios-regex '_1833_',
ios-regex '_2548_',
ios-regex '_2551_',
ios-regex '_2685_',
ios-regex '_2914_',
ios-regex '_3549_',
ios-regex '_3561_',
ios-regex '_3847_',
ios-regex '_3951_',
ios-regex '_3967_',
ios-regex '_4183_',
ios-regex '_4200_',
ios-regex '_5683_',
ios-regex '_6113_',
ios-regex '_6172_',
ios-regex '_6461_',
ios-regex '_7018_'
end-set
STARLIGHT-ASas-path-set STARLIGHT-AS
ios-regex '_10764_'
end-set
PREF200community-set PREF200
19401:200
end-set
PREF400community-set PREF400
19401:400
end-set
PREF500community-set PREF500
19401:500
end-set
PREF600community-set PREF600
19401:600
end-set
NOTtoFEDcommunity-set NOTtoFED
19401:970,
19401:924
end-set
NOTtoINTLcommunity-set NOTtoINTL
19401:950,
19401:924
end-set
DISCARD911community-set DISCARD911
19401:911
end-set
NOTtoEVENTcommunity-set NOTtoEVENT
19401:960,
19401:924
end-set
MEMBERS-ONLYcommunity-set MEMBERS-ONLY
# "I want to hear only NLR MEMBER prefixes"
19401:924
end-set
NOTtoMEMBERScommunity-set NOTtoMEMBERS
19401:920
end-set
NOTtoREpeerscommunity-set NOTtoREpeers
19401:940,
19401:924
end-set
PREPEND-fed1community-set PREPEND-fed1
19401:971
end-set
PREPEND-fed2community-set PREPEND-fed2
19401:972
end-set
PREPEND-fed3community-set PREPEND-fed3
19401:973
end-set
PREPEND-comm1community-set PREPEND-comm1
19401:981
end-set
PREPEND-comm2community-set PREPEND-comm2
19401:982
end-set
PREPEND-comm3community-set PREPEND-comm3
19401:983
end-set
PREPEND-intl1community-set PREPEND-intl1
19401:951
end-set
PREPEND-intl2community-set PREPEND-intl2
19401:952
end-set
PREPEND-intl3community-set PREPEND-intl3
19401:953
end-set
PREPEND-event1community-set PREPEND-event1
19401:961
end-set
PREPEND-event2community-set PREPEND-event2
19401:962
end-set
PREPEND-event3community-set PREPEND-event3
19401:963
end-set
NOTtoCOMM-peerscommunity-set NOTtoCOMM-peers
19401:990,
19401:924
end-set
PREPEND-REpeers1community-set PREPEND-REpeers1
19401:941
end-set
PREPEND-REpeers2community-set PREPEND-REpeers2
19401:942
end-set
PREPEND-REpeers3community-set PREPEND-REpeers3
19401:943
end-set
PREPEND-members1community-set PREPEND-members1
19401:921
end-set
PREPEND-members2community-set PREPEND-members2
19401:922
end-set
PREPEND-members3community-set PREPEND-members3
19401:923
end-set
NOTtoCOMM-memberscommunity-set NOTtoCOMM-members
19401:980,
19401:924
end-set
PREPEND-commpeer1community-set PREPEND-commpeer1
19401:991
end-set
PREPEND-commpeer2community-set PREPEND-commpeer2
19401:992
end-set
PREPEND-commpeer3community-set PREPEND-commpeer3
19401:993
end-set
FED-INroute-policy FED-IN
# default incoming RP for fednets
apply SANITY-IN
set local-preference 300
set community (19401:7000) additive
end-policy
PSC-INroute-policy PSC-IN
# member PSC 1G backup
if destination in PSC then
apply MEMBER-IN(450, 2001)
endif
end-policy
UMN-INroute-policy UMN-IN
if destination in UMN then
apply MEMBER-IN(500, 2000)
endif
end-policy
CASE-INroute-policy CASE-IN
# member Case Western, AS32666--primary 10G from CLEV
if destination in CASE then
apply MEMBER-IN(500, 2000)
endif
end-policy
FED-OUTroute-policy FED-OUT
# use for all fednets as default outgoing route-policy
# if user wants these prefixes NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# otherwise, they get everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-INroute-policy INTL-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# default incoming RP for international peer nets
apply SANITY-IN
set local-preference 300
set community (19401:5000) additive
endif
end-policy
NCSA-INroute-policy NCSA-IN
if destination in NCSA then
apply MEMBER-IN(500, 2000)
endif
end-policy
PSC6-INroute-policy PSC6-IN
# member PSC 1G backup
if destination in PSC6 then
apply MEMBER-IN(450, 2000)
endif
end-policy
UCAR-INroute-policy UCAR-IN
# member UCAR 1g backup via denver
if destination in UCAR then
apply MEMBER-IN(450, 2001)
endif
end-policy
UIUC-INroute-policy UIUC-IN
# UIUC connection through CIC,10G, AS40387 changing to AS38
if destination in UIUC then
apply MEMBER-IN(500, 2000)
endif
end-policy
UMN6-INroute-policy UMN6-IN
# UMN via CIC, AS57
if destination in UMN6 then
apply MEMBER-IN(500, 2000)
endif
end-policy
USGS-INroute-policy USGS-IN
if destination in USGS then
set local-preference 300
set community (19401:7000) additive
endif
end-policy
WISC-INroute-policy WISC-IN
if destination in WISC then
apply MEMBER-IN(500, 2000)
endif
end-policy
EVENT-INroute-policy EVENT-IN
# default incoming RP for special-events e.g. SC06
# **apply with care** because of the high pref!
apply SANITY-IN
set local-preference 1000
set community (19401:10000) additive
end-policy
INTERNALroute-policy INTERNAL
set community (19401:1000)
end-policy
INTL-OUTroute-policy INTL-OUT
if community matches-any NOTtoINTL then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
MERIT-INroute-policy MERIT-IN
# primary 10G connection through CIC. AS 237
if destination in MERIT then
apply MEMBER-IN(500, 2000)
endif
end-policy
ALLOW-ALLroute-policy ALLOW-ALL
pass
end-policy
MEMBER-INroute-policy MEMBER-IN($pref, $communitytag)
#
#
#
# this route-policy is a common default for all members
#
# each member's bgp stanza calls a member-specific policy
# which calls this; it passes parameters as noted above
#
# SANITY-IN checks for private-ASs and nlr-internal prefixes
apply SANITY-IN
set local-preference $pref
set community (19401:$communitytag) additive
apply PREF-NUDGING
apply KILL-DISCARD
end-policy
ONENET-INroute-policy ONENET-IN
if destination in ONENET then
apply MEMBER-IN(500, 2000)
endif
end-policy
PURDUE-INroute-policy PURDUE-IN
if destination in PURDUE then
apply MEMBER-IN(500, 2000)
endif
end-policy
REPEER-INroute-policy REPEER-IN
# default incoming RP for R&E peer nets e.g. ultralight
apply SANITY-IN
set local-preference 300
set community (19401:4000) additive
end-policy
SANITY-INroute-policy SANITY-IN
if as-path in PRIVATE then
drop
endif
if as-path in I2 then
drop
endif
if destination in MARTIANS then
drop
endif
if destination in INTERNAL then
drop
else
pass
endif
end-policy
Indiana-INroute-policy Indiana-IN
# member Indiana primary connection via CIC
if destination in INDIANA then
apply MEMBER-IN(500, 2000)
endif
end-policy
MEMBER-OUTroute-policy MEMBER-OUT
# use for all members as default outgoing route-policy
if community matches-any NOTtoMEMBERS then
drop
else
# otherwise tell them everything we know...
apply SANITY-OUT
endif
# prepending toward members
if community matches-any PREPEND-members1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-members2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-members3 then
prepend as-path 19401 3
endif
end-policy
REJECT-ALLroute-policy REJECT-ALL
drop
end-policy
REPEER-OUTroute-policy REPEER-OUT
# default outgoing route-policy for research & educ peers
if community matches-any NOTtoREpeers or community matches-any MEMBERS-ONLY then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-REpeers1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-REpeers2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-REpeers3 then
prepend as-path 19401 3
endif
end-policy
SANITY-OUTroute-policy SANITY-OUT
replace as-path private-as
if as-path in PRIVATE then
drop
endif
if destination in MARTIANS then
drop
else
set med igp-cost
pass
endif
end-policy
INDIANA-IN6route-policy INDIANA-IN6
# member Indiana Gigapop primary connection via CIC
if destination in INDIANA6 then
apply MEMBER-IN(500, 2000)
endif
end-policy
KILL-DISCARDroute-policy KILL-DISCARD
# only members are allowed to kill prefixes
#
# need to do sanity-check against allowed-prefixes
if community matches-every DISCARD911 then
set next-hop 216.24.191.253
endif
end-policy
PREF-NUDGINGroute-policy PREF-NUDGING
# only members allowed to set these values
if community matches-every PREF600 then
set local-preference 600
elseif community matches-every PREF500 then
set local-preference 500
elseif community matches-every PREF400 then
set local-preference 400
elseif community matches-every PREF200 then
set local-preference 200
else
pass
endif
end-policy
STARLIGHT-INroute-policy STARLIGHT-IN
if (as-path passes-through '11537') then
drop
endif
if as-path in PRIVATE then
drop
endif
if destination in MARTIANS then
drop
endif
if as-path in COMMERCIAL then
drop
endif
if destination in INTERNAL then
drop
else
set local-preference 300
set community (19401:5000) additive
pass
endif
end-policy
STARLIGHT-OUTroute-policy STARLIGHT-OUT
if as-path in STARLIGHT-AS then
drop
else
if community matches-any NOTtoINTL then
drop
else
apply SANITY-OUT
endif
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
ULTRALIGHT-INroute-policy ULTRALIGHT-IN
if destination in ULTRALIGHT then
set local-preference 300
set community (19401:4000) additive
else
drop
endif
end-policy
ULTRALIGHT-OUTroute-policy ULTRALIGHT-OUT
set med igp-cost
apply SANITY-OUT
end-policy
NORTHWESTERN-INroute-policy NORTHWESTERN-IN
#1G
if destination in NORTHWESTERN then
apply MEMBER-IN(500, 2000)
endif
end-policy
FED-MEMBERSONLY-INroute-policy FED-MEMBERSONLY-IN
# just like FED-IN and setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:7000) additive
end-policy
FED-MEMBERSONLY-OUTroute-policy FED-MEMBERSONLY-OUT
# outgoing route-policy for fednets
# who want *only member prefixes*
#
# if source wants prefix NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
# drop all non-MEMBER prefixes
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-MEMBERSONLY-INroute-policy INTL-MEMBERSONLY-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# just like INTL-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:5000) additive
endif
end-policy
INTL-MEMBERSONLY-OUTroute-policy INTL-MEMBERSONLY-OUT
# outgoing route-policy for international-peers
# who want only member prefixes
#
# if peer wants prefix NOT sent to intls:
if community matches-any NOTtoINTL then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
# drop all non-MEMBER prefixes
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
MEMBERS-MEMBERSONLY-OUTroute-policy MEMBERS-MEMBERSONLY-OUT
# outgoing route-policy for members
# who want only member prefixes
#
# if source doesn't want their prefix sent to members then drop:
if community matches-any NOTtoMEMBERS then
drop
elseif community matches-any (19401:[4000..9999]) then
# drop all non-MEMBER prefixes
drop
else
apply SANITY-OUT
endif
#
# prepending toward members
if community matches-any PREPEND-members1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-members2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-members3 then
prepend as-path 19401 3
endif
end-policy
actLoopback0true216.24.191.225255.255.255.255actLoopback1Loopback for RPtrue216.24.191.254255.255.255.255actTenGigE0/1/0/0[MEMBER] CICTenGigE9200actTenGigE0/1/0/1BB ATLA-CHIC-169 over ORNL-Qwest pathtrueTenGigE92169000216.24.186.34255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/1/0/2[MEMBER] ONENET AS5078 | NLR-TULS-CHIC-10GE-97trueTenGigE92169000164.58.245.86255.255.255.252flowmonmapflowsamplerflowsampleractTenGigE0/1/0/3trueactTenGigE0/1/0/4trueactTenGigE0/1/0/5[MEMBER] Case AS32666 | NLR-CHIC-CLEV-10GE-65trueTenGigE92169000216.24.184.49255.255.255.252flowmonmapflowsamplerflowsampleractTenGigE0/1/0/6trueactTenGigE0/1/0/7trueactTenGigE0/2/0/0BB to WASH te0/2/0/4 | NLR-CHIC-WASH-10GE-59trueTenGigE92169174216.24.186.18255.255.255.25430flowmonmapflowsamplerflowsampleractTenGigE0/2/0/1availableTenGigE92169000actTenGigE0/2/0/2unusedtrueactTenGigE0/2/0/3unusedtrueactTenGigE0/2/0/4unused (was NLR-CHIC-DENV-10GE-125)trueactTenGigE0/2/0/5NLRview PC9000216.24.187.113255.255.255.252actTenGigE0/2/0/6unusedtrueactTenGigE0/2/0/7unusedtrueactTenGigE0/5/0/0BB to DENV te0/2/0/0 | NLR-DENV-CHIC-10GE-36trueTenGigE92169174216.24.186.4255.255.255.25430flowmonmapflowsamplerflowsampleractTenGigE0/5/0/1Starlight Force10 | NLR-CHIC-STAR-10GE-126TenGigE9200actTenGigE0/5/0/2BB to HOUS te0/5/0/5 | NLR-CHIC-HOUS-10GE-67trueTenGigE9216216.24.186.25255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/5/0/3unusedtrueactTenGigE0/5/0/4BB to CHIC 6509 te1/4trueTenGigE92121actTenGigE0/5/0/5BB to NEWY te0/2/0/0 | NLR-NEWY-CHIC-10GE-100trueTenGigE9216216.24.186.32255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/5/0/6Ultralight to Jax | NLR-CHIC-STAR-10GE-134TenGigE9216216.24.184.33255.255.255.252flowmonmapflowsamplerflowsampleractTenGigE0/5/0/7unusedtrueactTenGigE0/5/0/4.66vini-chin via L2216.24.178.65255.255.255.248Default66actTenGigE0/5/0/4.76"Telepresence CHIC-KANS via L2 VLAN 76"216.24.184.61255.255.255.254Default76actTenGigE0/5/0/4.99testing192.168.37.1255.255.255.252Default99actTenGigE0/5/0/1.366CA*Net Winnipeg9174216.24.184.8255.255.255.254Defaultflowmonmapflowsamplerflowsampler366actTenGigE0/5/0/1.367CA*Net Toronto9174216.24.184.6255.255.255.254Defaultflowmonmapflowsamplerflowsampler367actTenGigE0/5/0/1.371USGS via Starlight | AS18421500192.41.213.121255.255.255.252Defaultflowmonmapflowsamplerflowsampler371actTenGigE0/5/0/1.372Starlight router | AS107649170216.24.184.21255.255.255.252Defaultflowmonmapflowsamplerflowsampler372actTenGigE0/5/0/1.373ESnet v49000198.125.140.221255.255.255.252Defaultflowmonmapflowsamplerflowsampler373actTenGigE0/5/0/1.374DREN via Starlight | AS6689000138.18.155.30255.255.255.252Defaultflowmonmapflowsamplerflowsampler374actTenGigE0/5/0/1.388ESnet v6-onlyDefaultflowmonmapflowsamplerflowsampler388actTenGigE0/5/0/1.391GLORIAD, AS203889174192.31.99.146255.255.255.252Defaultflowmonmapflowsamplerflowsampler391actTenGigE0/5/0/1.398TWAREN | AS 75399000211.79.48.154255.255.255.252Defaultflowmonmapflowsamplerflowsampler398actTenGigE0/5/0/4.107PSC Backup via L2- vlan 107 to pitt192.88.114.201255.255.255.254Defaultflowmonmapflowsamplerflowsampler107actTenGigE0/5/0/4.112NOC Connection via L2149.165.254.5255.255.255.254Default112actTenGigE0/5/0/4.152CHIC NLRview PCs, vlan 1529000216.24.187.97255.255.255.240Default152actTenGigE0/5/0/4.384LEARN-TAMU to Starlight Optiputer layer2Defaultflowmonmapflowsamplerflowsampler384actTenGigE0/5/0/4.650OOB for KAN Calient via L2 vlan 650216.24.188.1255.255.255.252Defaultflowmonmapflowsamplerflowsampler650actTenGigE0/5/0/4.843UCAR Backup via L2-vlan 843 to denv216.24.184.25255.255.255.252Defaultflowmonmapflowsamplerflowsampler843actMgmtEth0/RP0/CPU0/0RP0 to Racklan f0/14true152.49.3.5255.255.255.224actMgmtEth0/RP1/CPU0/0RP1 to Racklan f0/13true152.49.3.6255.255.255.224actTenGigE0/1/0/0.2075MEMBER: NLR-CIC-UIUC-NCSA AS12249000198.17.196.10255.255.255.252Defaultflowmonmapflowsamplerflowsampler2075actTenGigE0/1/0/0.2077MEMBER: NLR-CIC-WISC AS599000144.92.164.174255.255.255.252Defaultflowmonmapflowsamplerflowsampler2077actTenGigE0/1/0/0.2079MEMBER: NLR-CIC-Purdue AS179000192.5.40.18255.255.255.25210.12.14.17255.255.255.240Defaultflowmonmapflowsamplerflowsampler2079actTenGigE0/1/0/0.2082MEMBER: NLR-CIC-NORTHWESTERN AS1039000192.5.143.3255.255.255.254Defaultflowmonmapflowsamplerflowsampler2082actTenGigE0/1/0/0.2084MEMBER: NLR-CIC-UMN AS579000192.35.86.170255.255.255.252Defaultflowmonmapflowsamplerflowsampler2084actTenGigE0/1/0/0.2087MEMBER: NLR-CIC-MERIT AS2379000192.122.183.182255.255.255.252Defaultflowmonmapflowsamplerflowsampler2087actTenGigE0/1/0/0.2093MEMBER: NLR-CIC-IndianaGigapop AS197829000149.165.254.226255.255.255.252Defaultflowmonmapflowsamplerflowsampler2093actTenGigE0/1/0/0.2094MEMBER: NLR-CIC-testpoint9000216.24.184.57255.255.255.252Defaultflowmonmapflowsamplerflowsampler2094actTenGigE0/1/0/0.2095MEMBER: NLR-CIC-UIUC AS4038 changing to AS389000192.17.10.50255.255.255.252Defaultflowmonmapflowsamplerflowsampler2095
0134.68.107.1718121813truetrue040A0F4708036E7F512E3F02163B0A14320E73211137081129.79.216.16218121813truetrue1248015615292E35721C1E3D370524031F335408745B720134.68.107.1749truetrue08265E1D080D1614421F181129.79.216.16249truetrue094B5C5A181104115B181010MgmtEth0/RP1/CPU0/0admintruetrue$1$HWDx$kTrV8hdyTmGga2P.aiQzd0root-systemtruesweenytruetrue031053020804325C5C001702root-systemtrueexecdefaultRadiusLocalNonelogindefaultRadiusLocaltrueconsole00NoneCONSOLE-LOGIN0Indefault6000LOGIN-L3-HOSTS15InOuttVRFtrueIPv4Unicasttruedefault01619401trueLevel249.2160.2419.1226.00trueIETFStandardNSFIPv4UnicastNotSetDisabledLevel2Loopback2DisabledIPv6UnicastNotSetDisabledtrueDisabledLoopback0truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueLoopback1truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueLoopback2truePassiveLevel2IPv4UnicasttrueTenGigE0/2/0/0trueLevel2IPv4UnicasttrueNotSet1350IPv6UnicasttrueNotSet1350TenGigE0/2/0/1trueLevel2IPv4UnicasttrueNotSet1355IPv6UnicasttrueNotSet1355TenGigE0/2/0/2trueLevel2IPv4UnicasttrueNotSet1462IPv6UnicasttrueNotSet1462TenGigE0/2/0/3truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/6truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/5/0/0trueLevel2IPv4UnicasttrueNotSet1449IPv6UnicasttrueNotSet1549TenGigE0/5/0/1trueLevel2IPv4UnicasttrueNotSet1554IPv6UnicasttrueNotSet1554TenGigE0/5/0/5trueLevel2IPv4UnicasttrueNotSet1719IPv6UnicasttrueNotSet1719TenGigE0/2/0/4.77trueLevel2NotSetNeverIPv4UnicasttrueNotSet10000TenGigE0/2/0/4.152trueLevel2NotSetNeverIPv4UnicasttrueTenGigE0/2/0/6.805truePassiveLevel2IPv4UnicasttrueIPv6UnicasttruenLr-monReadOnlyQUERY-HOSTSLoopback2019401true216.24.191.226120360trueIPv4Unicasttrue88216.24.176.020INTERNALIPv4Multicasttrue216.24.176.020INTERNALIPv6Unicasttrue2001:4880::32INTERNALIPv6Multicasttrue2001:4880::32INTERNALFEDtrueIPv4Unicasttruetrue300075falsetruetruetrueIPv4Multicasttruetrue300075falsetruetruetrueFED6trueIPv6Unicasttruetrue200075falsetruetruetrueIPv6Multicasttruetrue50075falsetruetruetrueINTLtrueIPv4UnicasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueIPv4MulticasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueINTL6trueIPv6UnicasttruetrueINTL-IN200075falseINTL-OUTtruetruetrueIPv6MulticasttruetrueINTL-IN50075falseINTL-OUTtruetruetrueREPEERtrueIPv4UnicasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetrueIPv4MulticasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetruemembertrueIPv4UnicasttruetrueMEMBER-OUTtruetruetrueIPv4MulticasttruetrueMEMBER-OUTtruetruetrueNLRviewtruebgp looking-glasses like NLRview--send everything, accept nothingIPv4UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv4MulticasttrueREJECT-ALL175falseALLOW-ALLtruetruemember6trueIPv6UnicasttruetrueMEMBER-OUTtruetruetrueIPv6MulticasttruetrueMEMBER-OUTtruetruetrueNLRview6truebgp looking-glasses like NLRview--send everything, accept nothingIPv6UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv6MulticasttrueREJECT-ALL175falseALLOW-ALLtruetrueibgp-meshtrue019401falsetrue05051C033B5E54Loopback0IPv4UnicasttruetrueIPv4Multicasttruetrueipv6-ibgp-meshtrue019401Loopback0IPv6Unicasttrue19401ipv6-ibgp-meshIPv6UnicasttruetruetrueIPv6MulticasttruetruetruetrueFED-MEMBERSONLYtrueIPv4UnicasttruetrueFED-MEMBERSONLY-IN300075falsetruetruetrueIPv4MulticasttruetrueFED-MEMBERSONLY-IN300075falsetruetruetrueINTL-MEMBERSONLYtrueIPv4UnicasttruetrueINTL-MEMBERSONLY-IN300075falsetruetruetrueIPv4MulticasttruetrueINTL-MEMBERSONLY-IN300075falsetruetruetrue129.24.198.105040498memberMEMBER UNM 10G primaryIPv4UnicasttrueUNM-INIPv4MulticasttrueUNM-IN192.43.217.137014041memberfalsetrue0322692C36210D7E1F593E101910190905212A262436[MEMBER] UCARIPv4UnicasttrueUCAR-INIPv4MulticasttrueUCAR-IN216.24.187.164065508NLRviewNLRview-1G (dc) [NO-MONITOR]216.24.191.224ibgp-meshATLA216.24.191.225ibgp-meshCHIC216.24.191.227ibgp-meshHOUS216.24.191.228ibgp-meshLOSA216.24.191.229ibgp-meshNEWY216.24.191.230ibgp-meshSEAT216.24.191.231ibgp-meshWASH216.24.191.252ibgp-meshKANS-SBC12001:4880:0:1::ipv6-ibgp-meshATLA v6 loopback2001:4880:0:2::ipv6-ibgp-meshCHIC v6 loopback2001:4880:0:4::ipv6-ibgp-meshHOUS v6 loopback2001:4880:0:5::ipv6-ibgp-meshLOSA v6 loopback2001:4880:0:6::ipv6-ibgp-meshNEWY v6 loopback2001:4880:0:7::ipv6-ibgp-meshSEAT v6 loopback2001:4880:0:8::ipv6-ibgp-meshWASH v6 loopback2001:4880:2:9::164065508NLRview6NLRview-1G v6 (dc) [NO-MONITOR]129.79.0.016152.49.23.2250134.68.0.016152.49.23.2250192.12.206.024152.49.23.2250216.24.191.25332Null02001:4880::32Null0truetunnel-te1true10NotSpecifiedNotSpecifiedTenGigE0/5/0/5true15010050NotSpecifiedNotSpecifiedSubPoolDebugDebugInfo20000Local0syslog.grnoc.iu.edutrue129.79.9.1trueLoopback0denv.layer3trueTenGigE0/5/0/5trueflowmaptrue9true003010002Loopback0216.24.187.164flowmonmaptrueipv4-rawflowmaptrue10000flowsamplertrueRandom1500EnableEnableEnableEnableEnableEnableQUERY-HOSTS10PermitIPV4134.68.142.820PermitIPV4134.68.107.2330PermitIPV4129.79.6.13740PermitIPV4129.79.216.7950PermitIPV4134.68.107.2260PermitIPV4134.68.107.12370DenyIPV4CONSOLE-LOGIN10PermitIPV4LOGIN-L3-HOSTS10skip.grnoc.iu.edu20PermitIPV4134.68.142.5030hop-external.grnoc.iu.edu40PermitIPV4134.68.107.850dc-1.grnoc.iu.edu60PermitIPV4134.68.107.2270jump.grnoc.iu.edu80PermitIPV4192.12.206.19681nlrmon.grnoc.iu.edu - XML82PermitIPV4134.68.142.890BB addresses100PermitIPV4216.24.186.00.0.0.255110Loopback addresses120PermitIPV4216.24.191.2240.0.0.31130Local racklan140PermitIPV4152.49.13.00.0.0.31150dev.grnoc.iu.edu160PermitIPV4134.68.107.21170dc-2.grnoc.iu.edu - VN XML180PermitIPV4134.68.107.20MCAST-BOUNDARY10DenyIPV4224.0.1.3920DenyIPV4224.0.1.4030DenyIPV4239.0.0.00.255.255.25540PermitIPV4QUERY-HOSTSEnabledCONSOLE-LOGINEnabledLOGIN-L3-HOSTSEnabledMCAST-BOUNDARYEnabled129.79.5.100Server134.68.1.9Servertrue216.24.191.254trueTenGigE0/2/0/5truetrueTenGigE0/2/0/4.151truetrueTenGigE0/2/0/4.152truetrueTenGigE0/2/0/5.823truetrueTenGigE0/2/0/6.805truetrueLoopback0Loopback0192.43.217.137trueFRGP208.77.76.1truenew UNM216.24.191.224trueatla-crsinternal216.24.191.225truechic-crsinternal216.24.191.227truehous-crsinternal216.24.191.228truelosa-crsinternal216.24.191.229truenewy-crsinternal216.24.191.230trueseat-crsinternal216.24.191.231truewash-crsinternaltrueTenGigE0/2/0/5MCAST-BOUNDARYTenGigE0/2/0/4.151MCAST-BOUNDARYTenGigE0/2/0/4.152MCAST-BOUNDARYTenGigE0/2/0/6.805MCAST-BOUNDARYTenGigE0/2/0/6.823MCAST-BOUNDARYtruetrueUNMprefix-set UNM
198.59.97.0/24,
64.106.0.0/17,
64.234.128.0/18,
206.192.128.0/18,
129.24.0.0/16,
198.59.130.0/24,
198.59.131.0/24,
198.59.132.0/24,
198.59.133.0/24,
198.59.145.0/24,
198.59.152.0/24,
198.59.154.0/24,
198.59.155.0/24,
198.59.169.0/24,
204.69.153.0/24,
192.67.133.0/24,
192.88.138.0/24,
192.65.78.0/24,
128.123.0.0/16,
192.65.77.0/24,
146.88.0.0/24,
192.132.89.0/24,
192.136.110.0/24,
192.207.226.0/24,
192.41.211.0/24,
192.67.132.0/24,
192.88.137.0/24,
192.88.139.0/24,
192.88.140.0/24,
192.94.216.0/24,
198.176.219.0/24,
198.187.251.0/24,
198.59.106.0/24,
198.59.107.0/24,
198.59.108.0/24,
198.59.153.0/24,
198.59.187.0/24,
198.59.188.0/24,
198.59.189.0/24,
198.59.190.0/24,
204.134.102.0/24,
204.134.103.0/24,
204.134.48.0/24,
204.134.49.0/24,
204.134.50.0/24,
204.134.54.0/24,
204.134.55.0/24,
204.134.56.0/24,
204.134.57.0/24,
204.134.66.0/24,
204.134.67.0/24,
204.134.68.0/24,
204.134.85.0/24,
205.167.120.0/23,
206.206.136.0/21,
206.206.144.0/24,
206.206.145.0/24,
206.206.147.0/24,
206.206.148.0/24,
206.206.149.0/24,
206.206.150.0/24,
206.206.151.0/24,
206.206.152.0/24,
206.206.153.0/24,
206.206.154.0/24,
206.206.155.0/24,
206.206.156.0/24,
206.206.157.0/24,
206.206.158.0/24,
206.206.159.0/24,
216.161.32.0/23,
63.225.1.0/24,
208.77.76.0/22,
63.225.1.0/24,
192.65.77.0/24,
192.65.78.0/24,
192.67.132.0/24,
192.88.137.0/24,
192.88.138.0/24,
192.88.139.0/25,
192.88.139.0/24,
192.88.140.0/24,
192.94.216.0/24,
192.132.89.0/24,
192.136.110.0/24,
192.207.226.0/24,
198.59.106.0/24,
198.59.107.0/24,
198.59.108.0/24,
198.59.153.0/24,
198.59.187.0/24,
198.59.188.0/24,
198.59.189.0/24,
198.59.190.0/24,
198.176.219.0/24,
198.187.251.0/24,
204.134.48.0/24,
204.134.50.0/24,
204.134.54.0/24,
204.134.55.0/24,
204.134.56.0/24,
204.134.57.0/24,
204.134.66.0/24,
204.134.67.0/24,
204.134.68.0/24,
204.134.85.0/24,
204.134.102.0/24,
204.134.103.0/24,
206.206.136.0/21,
206.206.144.0/20,
216.161.32.0/23,
128.123.0.0/16,
192.41.211.0/24,
129.138.0.0/16,
204.121.0.0/16,
128.165.0.0/16
end-set
UCARprefix-set UCAR
128.116.0.0/16,
128.117.0.0/16,
128.138.0.0/16,
128.198.0.0/16,
129.19.0.0/16,
129.72.0.0/16,
129.82.0.0/16 le 32,
130.253.0.0/16,
132.163.0.0/16,
132.194.0.0/16,
137.75.0.0/16,
138.67.0.0/16,
140.172.0.0/16,
140.226.0.0/16,
147.153.0.0/16,
156.108.0.0/16,
161.97.0.0/16,
161.98.0.0/16,
164.47.0.0/16,
164.104.0.0/16,
165.127.0.0/16,
169.133.248.0/21,
192.12.240.0/24,
192.26.83.0/24,
192.43.217.0/24,
192.43.244.0/24,
192.52.106.0/24,
192.70.175.0/24,
192.111.53.0/24,
192.136.70.0/24,
192.149.148.0/24,
192.156.134.0/24,
192.160.49.0/24,
192.188.155.0/24,
198.11.16.0/20,
198.59.2.0/24,
198.59.7.0/24,
198.59.46.0/24,
198.59.47.0/24,
198.59.48.0/24,
198.59.49.0/24,
198.59.55.0/24,
198.59.61.0/24,
198.59.69.0/24,
198.59.81.0/24,
198.59.82.0/24,
198.59.83.0/24,
198.118.206.0/24,
198.178.254.0/24,
198.202.202.0/24,
204.228.64.0/24,
204.228.67.0/24,
204.228.68.0/24,
204.228.69.0/24,
204.228.78.0/24,
204.228.80.0/24,
205.170.168.0/21,
128.110.0.0/16,
129.123.0.0/16,
134.50.0.0/16,
134.250.0.0/16,
137.190.0.0/16,
140.197.0.0/16,
144.17.0.0/16,
144.17.192.0/18,
144.35.0.0/16,
144.38.0.0/16,
144.39.0.0/20,
144.39.0.0/16,
146.86.0.0/16,
155.97.0.0/16,
155.98.0.0/16,
155.98.32.0/20,
155.98.60.0/22,
155.99.0.0/16,
155.100.0.0/16,
155.101.0.0/16,
158.91.0.0/17,
158.91.128.0/18,
160.7.0.0/17,
160.7.128.0/18,
161.28.0.0/16,
161.119.0.0/16,
163.6.0.0/16,
163.248.0.0/16,
165.239.0.0/16,
168.177.0.0/16,
168.178.0.0/16,
168.179.0.0/16,
168.180.0.0/16,
192.41.96.0/22,
192.84.171.0/24,
192.107.180.0/23,
192.120.193.0/24,
198.60.0.0/23,
198.60.2.0/24,
198.60.4.0/23,
198.60.8.0/21,
198.60.16.0/24,
198.60.226.0/24,
199.104.76.0/23,
199.104.87.0/24,
199.104.88.0/23,
199.104.93.0/24,
204.99.153.0/24,
204.99.154.0/23,
204.113.0.0/19,
204.113.0.0/16,
204.113.116.0/22,
204.113.128.0/19,
205.118.0.0/24,
205.118.0.0/15,
205.118.16.0/21,
205.118.26.0/23,
205.118.28.0/22,
205.118.32.0/19,
205.118.64.0/22,
205.118.76.0/23,
205.118.90.0/23,
205.118.92.0/23,
205.118.98.0/23,
205.118.100.0/22,
205.118.112.0/23,
205.119.28.0/23,
205.119.34.0/23,
205.119.36.0/22,
205.119.40.0/21,
205.119.48.0/23,
205.119.64.0/19,
205.119.80.0/24,
205.119.96.0/22,
205.119.126.0/23,
205.120.0.0/13,
205.124.22.0/23,
205.125.40.0/21,
205.127.108.0/23,
205.127.110.0/23,
205.127.112.0/23,
205.127.116.0/22,
205.127.120.0/21,
205.127.128.0/19,
205.127.160.0/24,
205.127.176.0/21,
205.127.184.0/22,
205.127.200.0/21,
205.127.208.0/21,
205.127.216.0/22,
205.127.230.0/23,
205.127.232.0/21,
204.99.159.0/24,
204.99.160.0/20,
204.99.176.0/23,
129.19.64.0/30,
129.19.92.0/24,
129.19.93.0/24,
129.19.150.0/24,
129.19.176.0/20,
132.194.3.8/30,
132.194.3.16/30,
132.194.3.32/29,
132.194.3.40/30,
132.194.3.56/30,
147.153.0.0/16,
161.97.0.0/16,
192.111.53.0/24,
198.59.2.0/24
end-set
INTERNALprefix-set INTERNAL
216.24.176.0/20 ge 20,
2001:4880::/32 ge 32
end-set
MARTIANSprefix-set MARTIANS
0.0.0.0/7 ge 7,
2.0.0.0/8 ge 8,
5.0.0.0/8 ge 8,
7.0.0.0/8 ge 8,
10.0.0.0/8 ge 8,
23.0.0.0/8 ge 8,
27.0.0.0/8 ge 8,
31.0.0.0/8 ge 8,
36.0.0.0/7 ge 7,
39.0.0.0/8 ge 8,
42.0.0.0/8 ge 8,
49.0.0.0/8 ge 8,
50.0.0.0/8 ge 8,
92.0.0.0/8 ge 8,
93.0.0.0/8 ge 8,
100.0.0.0/6 ge 6,
104.0.0.0/6 ge 6,
112.0.0.0/5 ge 5,
120.0.0.0/8 ge 8,
127.0.0.0/8 ge 8,
169.254.0.0/16 ge 16,
172.16.0.0/12 ge 12,
173.0.0.0/8 ge 8,
174.0.0.0/7 ge 7,
176.0.0.0/5 ge 5,
184.0.0.0/6 ge 6,
192.0.2.0/24 ge 24,
192.168.0.0/16 ge 16,
197.0.0.0/8 ge 8,
198.18.0.0/15 ge 15,
223.0.0.0/8 ge 8,
224.0.0.0/3
end-set
AS112routeprefix-set AS112route
192.175.48.0/24
end-set
TOO-SMALL-PREFIX-24prefix-set TOO-SMALL-PREFIX-24
0.0.0.0/0 ge 25 le 32
end-set
TOO-SMALL-PREFIX-27prefix-set TOO-SMALL-PREFIX-27
0.0.0.0/0 ge 28 le 32
end-set
I2as-path-set I2
ios-regex '_11537_'
end-set
PRIVATEas-path-set PRIVATE
ios-regex '_(65[0-5][0-9][0-9])_',
ios-regex '_(645[2-9][0-9])_',
ios-regex '_(6451[2-9])_',
ios-regex '_(64[6-9][0-9][0-9])_'
end-set
COMMERCIALas-path-set COMMERCIAL
ios-regex '_1_',
ios-regex '_174_',
ios-regex '_1239_',
ios-regex '_1673_',
ios-regex '_1740_',
ios-regex '_1800_',
ios-regex '_1833_',
ios-regex '_2548_',
ios-regex '_2551_',
ios-regex '_2685_',
ios-regex '_2914_',
ios-regex '_3549_',
ios-regex '_3561_',
ios-regex '_3847_',
ios-regex '_3951_',
ios-regex '_3967_',
ios-regex '_4183_',
ios-regex '_4200_',
ios-regex '_5683_',
ios-regex '_6113_',
ios-regex '_6172_',
ios-regex '_6461_',
ios-regex '_7018_'
end-set
PREF200community-set PREF200
19401:200
end-set
PREF400community-set PREF400
19401:400
end-set
PREF500community-set PREF500
19401:500
end-set
PREF600community-set PREF600
19401:600
end-set
NOTtoFEDcommunity-set NOTtoFED
19401:970,
19401:924
end-set
NOTtoINTLcommunity-set NOTtoINTL
19401:950,
19401:924
end-set
DISCARD911community-set DISCARD911
19401:911
end-set
NOTtoEVENTcommunity-set NOTtoEVENT
19401:960,
19401:924
end-set
MEMBERS-ONLYcommunity-set MEMBERS-ONLY
# "I want to hear only NLR MEMBER prefixes"
19401:924
end-set
NOTtoMEMBERScommunity-set NOTtoMEMBERS
19401:920
end-set
NOTtoREpeerscommunity-set NOTtoREpeers
19401:940,
19401:924
end-set
PREPEND-fed1community-set PREPEND-fed1
19401:971
end-set
PREPEND-fed2community-set PREPEND-fed2
19401:972
end-set
PREPEND-fed3community-set PREPEND-fed3
19401:973
end-set
PREPEND-comm1community-set PREPEND-comm1
19401:981
end-set
PREPEND-comm2community-set PREPEND-comm2
19401:982
end-set
PREPEND-comm3community-set PREPEND-comm3
19401:983
end-set
PREPEND-intl1community-set PREPEND-intl1
19401:951
end-set
PREPEND-intl2community-set PREPEND-intl2
19401:952
end-set
PREPEND-intl3community-set PREPEND-intl3
19401:953
end-set
PREPEND-event1community-set PREPEND-event1
19401:961
end-set
PREPEND-event2community-set PREPEND-event2
19401:962
end-set
PREPEND-event3community-set PREPEND-event3
19401:963
end-set
NOTtoCOMM-peerscommunity-set NOTtoCOMM-peers
19401:990,
19401:924
end-set
PREPEND-REpeers1community-set PREPEND-REpeers1
19401:941
end-set
PREPEND-REpeers2community-set PREPEND-REpeers2
19401:942
end-set
PREPEND-REpeers3community-set PREPEND-REpeers3
19401:943
end-set
PREPEND-members1community-set PREPEND-members1
19401:921
end-set
PREPEND-members2community-set PREPEND-members2
19401:922
end-set
PREPEND-members3community-set PREPEND-members3
19401:923
end-set
NOTtoCOMM-memberscommunity-set NOTtoCOMM-members
19401:980,
19401:924
end-set
PREPEND-commpeer1community-set PREPEND-commpeer1
19401:991
end-set
PREPEND-commpeer2community-set PREPEND-commpeer2
19401:992
end-set
PREPEND-commpeer3community-set PREPEND-commpeer3
19401:993
end-set
FED-INroute-policy FED-IN
# default incoming RP for fednets
apply SANITY-IN
set local-preference 300
set community (19401:7000) additive
end-policy
UNM-INroute-policy UNM-IN
# UNM 10G primary from ALBU
if destination in UNM then
apply MEMBER-IN(500, 2000)
endif
end-policy
FED-OUTroute-policy FED-OUT
# use for all fednets as default outgoing route-policy
# if user wants these prefixes NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# otherwise, they get everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-INroute-policy INTL-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# default incoming RP for international peer nets
apply SANITY-IN
set local-preference 300
set community (19401:5000) additive
endif
end-policy
UCAR-INroute-policy UCAR-IN
# member UCAR (denver) primary 10G connection
if destination in UCAR then
apply MEMBER-IN(500, 2000)
endif
end-policy
EVENT-INroute-policy EVENT-IN
# default incoming RP for special-events e.g. SC06
# **apply with care** because of the high pref!
apply SANITY-IN
set local-preference 1000
set community (19401:10000) additive
end-policy
INTERNALroute-policy INTERNAL
set community (19401:1000)
end-policy
INTL-OUTroute-policy INTL-OUT
# use for international peers as default outgoing route-policy
if community matches-any NOTtoINTL or community matches-any MEMBERS-ONLY then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
ALLOW-ALLroute-policy ALLOW-ALL
pass
end-policy
MEMBER-INroute-policy MEMBER-IN($pref, $communitytag)
#
# this route-policy is a common default for all members
#
# each member's bgp stanza calls a member-specific policy
# which calls this; it passes parameters as noted above
#
# see bgp-communities doc for pref/community values, but
# most common are pref=450/500 and community=2001/2000
# for 1G/10G connections, respectively.
#
# SANITY-IN checks for private-ASs and nlr-internal prefixes
apply SANITY-IN
set local-preference $pref
set community (19401:$communitytag) additive
apply PREF-NUDGING
apply KILL-DISCARD
end-policy
REPEER-INroute-policy REPEER-IN
# default incoming RP for R&E peer nets e.g. ultralight
apply SANITY-IN
set local-preference 300
set community (19401:4000) additive
end-policy
SANITY-INroute-policy SANITY-IN
if as-path in PRIVATE then
drop
endif
if as-path in I2 then
drop
endif
if destination in MARTIANS then
drop
endif
if destination in INTERNAL then
drop
else
pass
endif
end-policy
MEMBER-OUTroute-policy MEMBER-OUT
# use for all members as default outgoing route-policy
if community matches-any NOTtoMEMBERS then
drop
else
# otherwise tell them everything we know...
apply SANITY-OUT
endif
# prepending toward members
if community matches-any PREPEND-members1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-members2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-members3 then
prepend as-path 19401 3
endif
end-policy
REJECT-ALLroute-policy REJECT-ALL
drop
end-policy
REPEER-OUTroute-policy REPEER-OUT
# default outgoing route-policy for research & educ peers
if community matches-any NOTtoREpeers or community matches-any MEMBERS-ONLY then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-REpeers1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-REpeers2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-REpeers3 then
prepend as-path 19401 3
endif
end-policy
SANITY-OUTroute-policy SANITY-OUT
replace as-path private-as
if as-path in PRIVATE then
drop
endif
if destination in MARTIANS then
drop
else
set med igp-cost
endif
end-policy
KILL-DISCARDroute-policy KILL-DISCARD
# only members are allowed to kill prefixes
#
# need to do sanity-check against allowed-prefixes
if community matches-every DISCARD911 then
set next-hop 216.24.191.253
endif
end-policy
PREF-NUDGINGroute-policy PREF-NUDGING
# only members allowed to set these values
if community matches-every PREF600 then
set local-preference 600
elseif community matches-every PREF500 then
set local-preference 500
elseif community matches-every PREF400 then
set local-preference 400
elseif community matches-every PREF200 then
set local-preference 200
else
pass
endif
end-policy
FED-MEMBERSONLY-INroute-policy FED-MEMBERSONLY-IN
# just like FED-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:7000) additive
end-policy
FED-MEMBERSONLY-OUTroute-policy FED-MEMBERSONLY-OUT
# outgoing route-policy for fednets
# who want *only member prefixes*
#
# if source wants prefix NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
# drop all non-MEMBER prefixes
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-MEMBERSONLY-INroute-policy INTL-MEMBERSONLY-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# just like INTL-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:5000) additive
endif
end-policy
INTL-MEMBERSONLY-OUTroute-policy INTL-MEMBERSONLY-OUT
# outgoing route-policy for international-peers
# who want only member prefixes
#
# if peer wants prefix NOT sent to intls:
if community matches-any NOTtoINTL then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
# drop all non-MEMBER prefixes
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
actLoopback0true216.24.191.226255.255.255.255actLoopback1Loopback for RPtrue216.24.191.254255.255.255.255actLoopback2tVRFtrue192.168.0.3255.255.255.255acttunnel-te1tVRF10.1.1.2255.255.255.252PreStandardDSTE01192.168.0.4Active1DynamicNoneactTenGigE0/2/0/0BB to CHIC te0/5/0/0 | NLR-DENV-CHIC-10GE-36trueTenGigE92169174216.24.186.5255.255.255.25430flowmonmapflowsamplerflowsampleractTenGigE0/2/0/1BB to CHIC te0/2/0/4 | NLR-CHIC-DENV-10GE-125 [NO-MONITOR]trueTenGigE92169174216.24.186.3255.255.255.254true30flowmonmapflowsamplerflowsampleractTenGigE0/2/0/2BB to LOSA te0/2/0/6 | NLR-DENV-LOSA-10GE-90trueTenGigE9216216.24.186.29255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/2/0/3NLRview-Denver 10G test PC [NO-MONITOR]9000216.24.187.177255.255.255.252actTenGigE0/2/0/4BB to DENV 6509 te1/1trueTenGigE9212216.24.176.2255.255.255.252flowmonmapflowsamplerflowsampleractTenGigE0/2/0/5MEMBER UNM AS 3388 | NLR-ALBU-DENV-10GE-95trueTenGigE92169000129.24.198.106255.255.255.25230flowmonmapflowsamplerflowsampleractTenGigE0/2/0/6to UCAR 6509TenGigE921230actTenGigE0/2/0/7trueactTenGigE0/5/0/0BB to SEAT te0/5/0/0 | NLR-DENV-SEAT-10GE-58trueTenGigE92169174216.24.186.6255.255.255.25430flowmonmapflowsamplerflowsampleractTenGigE0/5/0/1BB to SEAT te0/2/0/3 | NLR-DENV-SEAT-10GE-120 [NO-MONITOR]trueTenGigE92169174216.24.186.10255.255.255.254true30actTenGigE0/5/0/2trueactTenGigE0/5/0/3trueactTenGigE0/5/0/4unusedtrueTenGigE92169174216.24.186.1255.255.255.254true30actTenGigE0/5/0/5BB to HOUS te0/5/0/0 | NLR-DENV-HOUS-10GE-82trueTenGigE9216216.24.186.26255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/5/0/6trueactTenGigE0/5/0/7trueactTenGigE0/2/0/4.77"Telepresence DENV-KANS via L2 VLAN 77"216.24.184.63255.255.255.254Default77actTenGigE0/2/0/4.152NLRview & Denv measurement PCs, vlan 1529000216.24.187.161255.255.255.240Default152actTenGigE0/2/0/6.805UCAR (AS 14041) M20 peering vlan 805192.43.217.134255.255.255.252Default30flowmonmapflowsamplerflowsampler805actTenGigE0/2/0/6.823UCAR (private AS 64514 gets stripped)--vlan 823192.43.217.138255.255.255.252Default30flowmonmapflowsamplerflowsampler823actMgmtEth0/RP0/CPU0/0RP0 to Racklan f0/13true152.49.23.5255.255.255.224actMgmtEth0/RP1/CPU0/0RP1 to Racklan f0/14true152.49.23.6255.255.255.224
0134.68.107.1718121813truetrue075E250D492B3B341E333D013C78393C236B0C370422271129.79.216.16218121813truetrue06570B604B6C2B280C362406345638332F700A203536360134.68.107.1749truetrue08265E1D080D1614421F181129.79.216.16249truetrue08265E1D080D1614421F1810MgmtEth0/RP1/CPU0/0admintruetrue$1$ZPGY$NQTAM51Q.31fi7JT.E6vv0root-systemtruesweenytruetrue111D110C1919181C16232523root-systemtrueexecdefaultRadiusLocalNonelogindefaultRadiusLocaltruedefault600LOGIN-L3-HOSTS60InOuttVRFtruedefault01619401trueLevel249.2160.2419.1227.00trueIETFStandardNSFIPv4UnicastNotSetDisabledLevel2Loopback2DisabledIPv6UnicastNotSetDisabledtrueDisabledLoopback0truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueLoopback1truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueLoopback2truePassiveLevel2IPv4UnicasttrueTenGigE0/2/0/0trueLevel2IPv4UnicasttrueNotSet1440IPv6UnicasttrueNotSet1440TenGigE0/2/0/2trueLevel2IPv4UnicasttrueNotSet1338IPv6UnicasttrueNotSet1338TenGigE0/5/0/0trueLevel2IPv4UnicasttrueNotSet1719IPv6UnicasttrueNotSet1719TenGigE0/5/0/3truePassiveLevel2IPv4UnicasttrueTenGigE0/5/0/5trueLevel2IPv4UnicasttrueNotSet1791IPv6UnicasttrueNotSet1791TenGigE0/2/0/1.78trueLevel2NotSetNeverIPv4UnicasttrueNotSet10000TenGigE0/2/0/1.151truePassiveLevel2IPv4UnicasttrueTenGigE0/2/0/1.152trueLevel2NotSetNeverIPv4UnicasttruenLr-monReadOnlyQUERY-HOSTSLoopback2019401true120360trueIPv4Unicasttrue216.24.176.020INTERNALIPv4Multicasttrue216.24.176.020INTERNALIPv6Unicasttrue2001:4880::32INTERNALIPv6Multicasttrue2001:4880::32INTERNALFEDtrueIPv4UnicasttruetrueFED-IN300075falseFED-OUTtruetruetrueIPv4MulticasttruetrueFED-IN300075falseFED-OUTtruetruetrueFED6trueIPv6UnicasttruetrueFED-IN200075falseFED-OUTtruetruetrueIPv6MulticasttruetrueFED-IN50075falseFED-OUTtruetruetrueINTLtrueIPv4UnicasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueIPv4MulticasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueEVENTtrueuse for special events e.g. sc06--sets *highest* local-prefIPv4UnicasttruetrueEVENT-INEVENT-OUTtruetruetrueIPv4MulticasttruetrueEVENT-INEVENT-OUTtruetruetrueINTL6trueIPv6UnicasttruetrueINTL-IN200075falseINTL-OUTtruetruetrueIPv6MulticasttruetrueINTL-IN50075falseINTL-OUTtruetruetrueEVENT6trueuse for special events e.g. sc06--sets *highest* local-prefIPv6UnicasttruetrueEVENT-INEVENT-OUTtruetruetrueIPv6MulticasttruetrueEVENT-INEVENT-OUTtruetruetrueREPEERtrueIPv4UnicasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetrueIPv4MulticasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetruemembertrueIPv4UnicasttruetrueMEMBER-OUTtruetruetrueIPv4MulticasttruetrueMEMBER-OUTtruetruetrueNLRviewtruebgp looking-glasses like NLRview--send everything, accept nothingIPv4UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv4MulticasttrueREJECT-ALL175falseALLOW-ALLtruetruemember6trueIPv6UnicasttruetrueMEMBER-OUTtruetruetrueIPv6MulticasttruetrueMEMBER-OUTtruetruetrueNLRview6truebgp looking-glasses like NLRview--send everything, accept nothingIPv6UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv6MulticasttrueREJECT-ALL175falseALLOW-ALLtruetrueibgp-meshtrue019401falsetrue130B0D1E111E1E19401ibgp-meshLoopback0IPv4UnicasttruetrueIPv4Multicasttruetrueipv6-ibgp-meshtrue019401Loopback0IPv6UnicasttruetruetruetrueIPv6MulticasttruetruetruetrueFED-MEMBERSONLYtrueIPv4UnicasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueINTL-MEMBERSONLYtrueIPv4UnicasttruetrueINTL-MEMBERSONLY-IN300075falseINTL-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueINTL-MEMBERSONLY-IN300075falseINTL-MEMBERSONLY-OUTtruetruetrue74.200.188.34026468memberfalsetrue061217791440054ALEARN primary 10G IPv4UnicasttrueLEARN-INIPv4MulticasttrueLEARN-IN164.58.245.8905078member"ONENET backup PacketNet"IPv4UnicasttrueONENET-INIPv4MulticasttrueONENET-IN192.124.229.22010550memberfalsetrue061217791440054ALEARN primary 10G [NO-MONITOR]IPv4UnicasttrueLEARN-INIPv4MulticasttrueLEARN-IN198.32.155.253011096memberfalsetrue09495D011015141700FLR primary (over 10G shared with LONI)IPv4UnicasttrueFLR-INIPv4MulticasttrueFLR-IN208.100.127.2032440memberLONIIPv4UnicasttrueLONI-INIPv4MulticasttrueLONI-IN216.24.184.42010490memberSLR backup (Atla, vlan 124)IPv4UnicasttrueSLR-INIPv4MulticasttrueSLR-IN216.24.187.37065509NLRviewNLRview via 6509 [NO-MONITOR]216.24.191.224ibgp-meshATLA216.24.191.225ibgp-meshCHIC216.24.191.226ibgp-meshDENV216.24.191.228ibgp-meshLOSA216.24.191.229ibgp-meshNEWY216.24.191.230ibgp-meshSEAT216.24.191.231ibgp-meshWASH216.24.191.252ibgp-meshKANS-SBC12001:4880:0:1::ipv6-ibgp-meshATLA v6 loopback2001:4880:0:2::ipv6-ibgp-meshCHIC v6 loopback2001:4880:0:3::ipv6-ibgp-meshDENV v6 loopback2001:4880:0:5::ipv6-ibgp-meshLOSA v6 loopback2001:4880:0:6::ipv6-ibgp-meshNEWY v6 loopback2001:4880:0:7::ipv6-ibgp-meshSEAT v6 loopback2001:4880:0:8::ipv6-ibgp-meshWASH v6 loopback2001:4880:2:8::76065509NLRview6NLRview via racklan instead of 1G2001:4880:100:9::2011912member6falsetrue120D1D4F4A050057LEARNIPv6UnicasttrueLEARN6-INIPv6MulticasttrueLEARN6-IN129.79.0.016216.24.177.66250134.68.0.016216.24.177.66250192.12.206.024216.24.177.662502001:4880::32Null0truetunnel-te1true10NotSpecifiedNotSpecifiedTenGigE0/5/0/0true15010050NotSpecifiedNotSpecifiedSubPooltrueNotice100000Local0134.68.107.9trueLoopback0trueTenGigE0/5/0/0trueflowmaptrue9true003010000Loopback0216.24.187.37flowmonmaptrueipv4-rawflowmaptrue10000flowsamplertrueRandom1500EnableEnableEnableEnableEnableEnableLOGIN-HOSTS10skip
20PermitIPV4134.68.142.5030jump
40PermitIPV4192.12.206.19650hop-external
60PermitIPV4134.68.107.870loadrunner.uits.iu.edu - RANCID
80PermitIPV4134.68.142.2290dc-1.grnoc.iu.edu - RANCID
100PermitIPV4134.68.107.22101hop-external
102PermitIPV4134.68.107.8103nlrmon.grnoc.iu.edu - XML
104PermitIPV4134.68.142.8110DenyIPV4QUERY-HOSTS10PermitIPV4134.68.142.820PermitIPV4134.68.107.2330PermitIPV4129.79.6.13740PermitIPV4129.79.216.7950PermitIPV4134.68.107.2260PermitIPV4134.68.107.12370DenyIPV4CONSOLE-LOGIN10PermitIPV4LOGIN-L3-HOSTS10skip.grnoc.iu.edu20PermitIPV4134.68.142.5030hop-external.grnoc.iu.edu40PermitIPV4134.68.107.850dc-1.grnoc.iu.edu60PermitIPV4134.68.107.2270jump.grnoc.iu.edu80PermitIPV4192.12.206.19681nlrmon.grnoc.iu.edu - XML82PermitIPV4134.68.142.890BB addresses100PermitIPV4216.24.186.00.0.0.255110Loopback addresses120PermitIPV4216.24.191.2240.0.0.31130Local racklan140PermitIPV4152.49.13.00.0.0.31150dev.grnoc.iu.edu160PermitIPV4134.68.107.21170dc-2.grnoc.iu.edu - VN XML180PermitIPV4134.68.107.20MCAST-BOUNDARY10DenyIPV4224.0.1.3920DenyIPV4224.0.1.4030DenyIPV4239.0.0.00.255.255.25540PermitIPV4LOGIN-HOSTSEnabledQUERY-HOSTSEnabledCONSOLE-LOGINEnabledLOGIN-L3-HOSTSEnabledMCAST-BOUNDARYEnabled129.79.5.100Server134.68.1.2Server216.24.177.66Peertruetrue216.24.191.254trueLoopback1true30TenGigE0/2/0/3truetrueTenGigE0/5/0/3truetrueTenGigE0/2/0/1.109truetrueTenGigE0/2/0/1.124truetrueTenGigE0/2/0/1.151truetrueTenGigE0/2/0/1.152truetrueTenGigE0/2/0/1.314truetrueTenGigE0/5/0/1.512truetrueTenGigE0/5/0/1.513truetrueTenGigE0/5/0/3trueLoopback0Loopback0192.124.229.22trueTenGigE0/2/0/3LEARN-10G198.32.155.253trueTenGigE0/5/0/1.513"FLR [NO-MONITOR]"208.100.124.21trueTenGigE0/5/0/1.512LONI216.24.191.224trueatla-crsinternal216.24.191.225truechic-crsinternal216.24.191.226truedenv-crsinternal216.24.191.228truelosa-crsinternal216.24.191.229truenewy-crsinternal216.24.191.230trueseat-crsinternal216.24.191.231truewash-crsinternaltrueTenGigE0/2/0/3MCAST-BOUNDARYTenGigE0/5/0/3MCAST-BOUNDARYTenGigE0/2/0/1.109MCAST-BOUNDARYTenGigE0/2/0/1.124MCAST-BOUNDARYTenGigE0/2/0/1.151MCAST-BOUNDARYTenGigE0/2/0/1.152MCAST-BOUNDARYTenGigE0/2/0/1.314MCAST-BOUNDARYTenGigE0/5/0/1.512MCAST-BOUNDARYTenGigE0/5/0/1.513MCAST-BOUNDARYtruetrueFLRprefix-set FLR
# University of Florida
128.227.0.0/16 le 32,
159.178.0.0/16 le 32,
192.5.2.0/24 le 32,
8.6.244.0/24 le 32,
# University of Florida @ TELX
8.6.245.0/24 le 32,
# University of North Florida
139.62.0.0/16 le 32,
# Florida State University
128.186.0.0/16 le 32,
144.174.0.0/16 le 32,
146.201.0.0/16 le 32,
192.80.53.0/24 le 32,
168.223.0.0/16 le 32,
# Florida State University @ TELX
192.12.121.0/24 le 32,
# University of West Florida
143.88.0.0/16 le 32,
# Florida Atlantic University
131.91.0.0/16 le 32,
192.26.251.0/24 le 32,
# Nova Southeastern University
137.52.0.0/16 le 32,
# University of Central Florida
132.170.0.0/16 le 32,
# Florida Institute of Technology
163.118.0.0/16 le 32,
# Florida International University
131.94.0.0/16 le 32,
# University of Miami
129.171.0.0/16 le 32,
192.88.124.0/24 le 32,
192.31.89.0/24 le 32,
192.70.171.0/24 le 32,
192.111.123.0/24 le 32,
199.242.231.0/24 le 32,
199.242.232.0/24 le 32,
199.242.233.0/24 le 32,
204.145.157.0/24 le 32,
204.68.64.0/19 le 32,
65.115.176.0/24 le 32,
147.70.0.0/16 le 32,
# FLR Backbone
198.32.155.0/24 le 32,
198.32.173.0/24 le 32,
198.32.166.0/24 le 32,
# FLR direct assignment
206.224.192.0/19 le 32,
64.56.80.0/20 le 32,
# Palm Beach Comm College
216.114.80.0/20 le 32,
66.195.118.0/23 le 32,
# SFGP
134.202.0.0/16 le 27,
136.145.0.0/16 le 27,
192.65.176.0/24 le 27,
192.231.93.0/24 le 27,
192.231.95.0/24 le 27,
168.184.0.0/16 le 27,
139.229.0.0/16 le 27,
129.171.0.0/16 le 27,
168.184.0.0/16 le 32,
65.115.176.0/24 le 27,
168.184.0.0/16 le 32
end-set
SLRprefix-set SLR
# this is a copy of the SLR prefix-set at atla
64.156.8.128/25 le 32,
64.156.216.128/25 le 32,
65.115.176.0/24 le 32,
128.23.0.0/16 le 32,
128.61.0.0/16 le 32,
128.163.0.0/16 le 32,
128.163.11.0/24 le 32,
128.186.0.0/16 le 32,
128.192.0.0/16 le 32,
128.227.0.0/16 le 32,
129.59.0.0/16 le 32,
129.171.0.0/16 le 32,
129.171.0.0/19 le 32,
129.171.32.0/19 le 32,
129.171.64.0/19 le 32,
129.171.96.0/19 le 32,
129.171.128.0/19 le 32,
129.171.160.0/19 le 32,
129.171.192.0/19 le 32,
129.171.224.0/19 le 32,
129.252.0.0/16 le 32,
130.127.0.0/16 le 32,
130.160.0.0/16 le 32,
130.207.0.0/16 le 32,
131.91.0.0/16 le 32,
131.96.0.0/16 le 32,
131.144.128.0/20 le 32,
131.204.0.0/16 le 32,
131.247.0.0/16 le 32,
132.170.0.0/16 le 32,
138.26.0.0/16 le 32,
# Georgia Tech
143.215.0.0/16 le 32,
144.174.0.0/16 le 32,
146.201.0.0/16 le 32,
146.229.0.0/16 le 32,
152.32.0.0/12 le 32,
159.178.0.0/16 le 32,
160.36.0.0/16 le 32,
160.129.0.0/16 le 32,
# Emory University Systems of Health Care
163.246.0.0/16 le 32,
164.111.0.0/16 le 32,
# Tenn Grad School of Med
165.6.5.0/24 le 32,
# Tenn Grad School of Med
165.6.6.0/24 le 32,
# Tenn Grad School of Med
165.6.7.0/24 le 32,
# Tenn Grad School of Med
165.6.15.0/24 le 32,
# Tenn Grad School of Med
165.6.24.0/24 le 32,
168.223.0.0/16 le 32,
170.140.0.0/16 le 32,
192.31.89.0/24 le 32,
192.70.171.0/24 le 32,
192.80.53.0/24 le 32,
192.88.124.0/24 le 32,
192.111.108.0/24 le 32,
192.111.109.0/24 le 32,
192.111.110.0/24 le 32,
192.111.123.0/24 le 32,
192.249.1.0/24 le 32,
192.249.2.0/23 le 32,
192.249.4.0/22 le 32,
192.249.8.0/21 le 32,
192.249.11.0/24 le 32,
198.78.192.0/19 le 32,
198.137.16.0/20 le 32,
199.4.250.0/24 le 32,
199.4.250.0/23 le 32,
199.4.251.0/24 le 32,
199.76.32.0/20 le 32,
199.76.144.0/20 le 32,
199.76.160.0/19 le 32,
199.76.192.0/24 le 32,
199.77.128.0/17 le 32,
199.78.112.0/22 le 32,
199.242.231.0/24 le 32,
199.242.232.0/24 le 32,
199.242.233.0/24 le 32,
204.29.106.0/23 le 32,
204.68.64.0/19 le 32,
204.89.132.0/24 le 32,
204.89.132.0/23 le 32,
204.89.133.0/24 le 32,
204.145.157.0/24 le 32,
204.145.215.0/24 le 32,
204.198.72.0/22 le 32,
204.198.76.0/23 le 32,
206.240.24.0/22 le 32,
206.240.192.0/19 le 32,
206.240.216.0/24 le 32,
206.240.220.0/24 le 32,
206.240.221.0/24 le 32,
209.149.48.0/20 le 32,
# UNF
139.62.0.0/16 le 32,
# Florida Atlantic University400
147.70.0.0/16 le 32,
# Sewanee, The University of the South sewanee.edu
152.97.0.0/16 le 32,
161.45.0.0/16 le 32,
# Morehouse School of Medicine
192.83.232.0/24 le 32,
204.246.192.0/21 le 32,
# Meharry Medical College
216.64.76.0/24 le 32,
# University of Tennessee at Chattanooga
150.182.128.0/18 le 32,
# University of Tennessee at Chattanooga
192.30.208.0/24 le 32,
# Florida Institute of Tech temp thru SOX 6626:2
163.118.0.0/16 le 32,
# Middle Tennessee State U.
204.152.130.0/24 le 32,
# Univ of West Florida via FLR
143.88.0.0/16 le 32,
128.192.0.0/16 le 32,
129.66.0.0/16 le 32,
129.66.20.0/24 le 32,
130.218.0.0/16 le 32,
130.254.0.0/16 le 32,
131.144.0.0/16 le 32,
134.224.0.0/16 le 32,
137.220.0.0/16 le 32,
141.165.0.0/16 le 32,
157.149.0.0/16 le 32,
158.93.0.0/16 le 32,
160.10.0.0/16 le 32,
# SC - Richland County Library
167.7.38.0/24 le 32,
# SC - Richland County Library
167.7.39.0/24 le 32,
# SC - York County School District 1
167.7.210.0/27 le 32,
# SC - Dorchester County School District 2
167.7.241.0/24 le 32,
# SC - Lexington County School District 1
167.7.248.64/27 le 32,
# SC - Greenwood County School District 52
167.7.251.0/27 le 32,
168.8.0.0/15 le 32,
168.12.0.0/14 le 32,
168.16.0.0/15 le 32,
168.18.0.0/15 le 32,
168.20.0.0/15 le 32,
168.22.0.0/15 le 32,
168.24.0.0/15 le 32,
168.26.0.0/15 le 32,
168.28.0.0/15 le 32,
168.30.0.0/15 le 32,
# SC schools
169.150.0.0/16 le 32,
192.48.117.0/24 le 32,
192.88.111.0/24 le 32,
192.103.126.0/24 le 32,
192.107.44.0/24 le 32,
192.111.112.0/24 le 32,
# SC schools
192.152.249.0/24 le 32,
192.203.127.0/24 le 32,
192.211.32.0/21 le 32,
192.211.40.0/22 le 32,
192.211.44.0/24 le 32,
192.211.45.0/24 le 32,
192.245.221.0/24 le 32,
192.245.222.0/24 le 32,
192.245.223.0/24 le 32,
192.245.224.0/24 le 32,
198.49.31.0/24 le 32,
198.72.72.0/22 le 32,
198.137.22.0/24 le 32,
198.180.132.0/22 le 32,
# SC schools
198.190.216.0/24 le 32,
198.200.158.0/24 le 32,
# SC schools
198.204.92.0/24 le 32,
199.5.154.0/23 le 32,
199.20.16.0/20 le 32,
199.33.130.0/24 le 32,
199.33.131.0/24 le 32,
199.33.132.0/24 le 32,
199.33.133.0/24 le 32,
199.33.134.0/24 le 32,
199.80.8.0/21 le 32,
199.88.16.0/20 le 32,
199.248.173.0/24 le 32,
199.248.174.0/24 le 32,
199.248.175.0/24 le 32,
199.248.176.0/24 le 32,
199.248.177.0/24 le 32,
199.248.178.0/24 le 32,
204.27.217.0/24 le 32,
204.29.64.0/18 le 32,
205.174.48.0/20 le 32,
# SC schools
206.197.240.0/24 le 32,
# SC schools
206.219.128.0/18 le 32,
207.157.0.0/17 le 32,
# SC schools - Public K12 and Libraries
207.232.128.0/18 le 32,
# SC schools - Public K12 and Libraries
209.133.128.0/17 le 32,
216.109.0.0/18 le 32,
# Kentucky Post Secondary Education Network
147.133.0.0/16 le 32,
# Kentucky Post Secondary Education Network
157.89.0.0/16 le 32,
# KPEN
192.122.237.0/24 le 32,
# KPEN
161.6.0.0/16 le 32,
# KPEN
216.249.132.0/22 le 32,
# KPEN
216.249.144.0/20 le 32,
# KPEN
216.249.160.0/20 le 32,
# KPEN
216.249.176.0/20 le 32,
# KPEN
216.69.0.0/18 le 32,
# Tennessee Technological University
149.149.0.0/16 le 32,
# South Carolina Info Network
153.9.0.0/16 le 32,
# Kentucky dept of education
170.180.0.0/14 le 32,
# Kentucky dept of education
170.185.0.0/16 le 32,
# Kentucky dept of education
205.204.242.0/24 le 32,
205.204.238.0/24 le 32,
# Meharry Medical College
72.158.165.0/24 le 32,
146.82.167.176/29,
199.77.192.16/29,
# SC SEGP - Will Lou Grey School
167.7.127.176/29,
# SC SEGP - Beaufort County School District
167.7.248.112/29,
# SC SEGP - Richland County School District 2
167.7.248.120/29,
# SC SEGP - Richand County School District 2
167.7.248.208/29,
# SC SEGP - Greenwood County School District 52
167.7.251.32/29,
# SC SEGP - Green County School District 51
167.7.251.64/29,
# SC SEGP - Darlington County School District
167.7.251.80/29,
# SC SEGP - Greenwood County School District 50
167.7.251.96/29,
# SC SEGP - Calhoun County Library
167.7.251.128/28,
# SC SEGP - Greenwood County School District 50
167.7.251.144/28,
# SC SEGP - Chesterfield County School District
167.7.251.160/28,
# SC SEGP - Chester County School District
167.7.251.192/29,
# Oak Ridge National Labs (ORNL)
128.219.0.0/16 le 32,
# Oak Ridge National Labs (ORNL)
#Council on Post-Sec Education & KY dept of Libs & Archives
205.204.238.0/24 le 32,
# Meharry Medical College
72.158.165.0/24 le 32,
146.82.167.176/29,
199.77.192.16/29,
# SC SEGP - Will Lou Grey School
167.7.127.176/29,
# SC SEGP - Beaufort County School District
167.7.248.112/29,
# SC SEGP - Richland County School District 2
167.7.248.120/29,
# SC SEGP - Richand County School District 2
167.7.248.208/29,
# SC SEGP - Greenwood County School District 52
167.7.251.32/29,
# SC SEGP - Green County School District 51
167.7.251.64/29,
# SC SEGP - Darlington County School District
167.7.251.80/29,
# SC SEGP - Greenwood County School District 50
167.7.251.96/29,
# SC SEGP - Calhoun County Library
167.7.251.128/28,
# SC SEGP - Greenwood County School District 50
167.7.251.144/28,
# SC SEGP - Chesterfield County School District
167.7.251.160/28,
# SC SEGP - Chester County School District
167.7.251.192/29,
# Oak Ridge National Labs (ORNL)
128.219.0.0/16 le 32,
# Oak Ridge National Labs (ORNL)
160.91.0.0/16 le 32,
# Oak Ridge National Labs (ORNL)
192.31.96.0/24 le 32,
# Oak Ridge National Labs (ORNL)
134.167.0.0/16 le 32,
# Oak Ridge National Labs (ORNL)
198.136.139.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.148.251.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.203.246.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.207.237.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.207.238.0/23 le 32,
# Oak Ridge National Labs (ORNL)
198.207.240.0/24 le 32,
# Oak Ridge National Labs (ORNL)
199.201.153.0/24 le 32,
# Oak Ridge National Labs (ORNL)
199.201.154.0/24 le 32,
# Oak Ridge National Labs (ORNL)
199.201.155.0/24 le 32,
199.201.156.0/23 le 32,
# Oak Ridge National Labs (ORNL)
199.201.158.0/24 le 32,
# Oak Ridge National Labs (ORNL)
198.124.41.0/24 le 32,
# Oak Ridge National Labs (ORNL)
192.103.127.0/24 le 32,
# Oak Ridge National Labs (ORNL)
192.188.177.0/24 le 32,
# Oak Ridge National Labs (ORNL)
192.188.182.0/24 le 32,
162.114.37.0/24,
192.154.46.0/23,
199.190.174.0/24 le 32,
64.214.127.128/27 le 32,
206.57.72.0/21 le 32,
72.250.230.0/24 le 32,
72.250.245.0/24 le 32,
# Duke University
67.159.64.0/18 le 32,
96.4.0.0/15,
152.43.0.0/16 le 32,
192.137.210.0/24 le 32,
198.62.72.0/24 le 32,
205.137.240.0/20 le 32,
207.191.176.0/21 le 32,
208.182.0.0/15 le 32,
66.20.220.0/24 le 32,
66.4.0.0/15 le 32,
170.185.0.0/16,
98.17.253.0/24 le 32
end-set
FLR6prefix-set FLR6
2001:468:1e00::/40
end-set
LONIprefix-set LONI
208.69.128.0/22,
130.39.0.0/16,
137.30.0.0/16,
192.195.100.0/24,
192.207.173.0/24,
192.203.199.0/24,
192.203.200.0/24,
192.233.131.0/24,
192.233.168.0/24,
198.62.89.0/24,
199.190.250.0/23,
199.190.252.0/24,
204.90.38.0/23,
204.90.40.0/22,
204.90.50.0/23,
204.196.106.0/24,
204.196.161.0/24,
204.196.162.0/24,
204.196.163.0/24,
204.196.167.0/24,
208.100.64.0/20,
208.100.64.0/18,
208.100.80.0/20,
208.100.123.0/24,
208.100.124.0/22,
76.165.24.0/22,
76.165.28.0/22,
76.165.240.0/20,
#Tulane University
129.81.0.0/16 le 32,
130.70.0.0/16,
#Mississippi State
130.18.0.0/16,
192.208.128.0/20,
192.208.144.0/21,
192.208.152.0/22,
192.208.156.0/23,
#University of Mississippi
130.74.0.0/16,
#University of Southern Mississippi
131.95.0.0/16,
192.208.139.0/24,
198.49.215.0/24,
#Jackson State University
143.132.0.0/16
end-set
LEARNprefix-set LEARN
192.92.115.0/24 le 32,
66.64.64.0/19,
128.194.0.0/16,
165.91.0.0/16,
209.21.112.0/20,
128.62.0.0/16 le 32,
128.83.0.0/16 le 32,
129.106.0.0/16 le 32,
129.107.0.0/16 le 32,
129.108.0.0/16 le 32,
129.109.0.0/16 le 32,
129.110.0.0/16 le 32,
129.111.0.0/16 le 32,
129.113.0.0/16 le 32,
129.114.0.0/18 le 32,
129.114.128.0/17 le 32,
129.115.0.0/16 le 32,
129.116.0.0/16 le 32,
129.117.0.0/16 le 32,
139.52.0.0/16 le 32,
140.158.0.0/16 le 32,
143.111.0.0/16 le 32,
146.6.0.0/16 le 32,
162.89.0.0/16 le 32,
192.12.10.0/24 le 32,
192.16.72.0/24 le 32,
192.88.11.0/24 le 32,
192.105.235.0/24 le 32,
192.124.225.0/24 le 32,
192.124.226.0/24 le 32,
192.124.227.0/24 le 32,
192.124.228.0/24 le 32,
192.124.229.0/24 le 32,
192.124.230.0/24 le 32,
192.133.17.0/24 le 32,
192.150.93.0/24 le 32,
192.206.244.0/22 le 32,
198.17.195.0/24 le 32,
198.22.91.0/24 le 32,
198.97.62.0/24 le 32,
198.147.138.0/23 le 32,
198.153.169.0/24 le 32,
198.213.0.0/16 le 32,
198.214.0.0/16 le 32,
198.215.0.0/16 le 32,
198.216.0.0/16 le 32,
204.158.0.0/16 le 32,
206.40.176.0/20 le 32,
206.76.0.0/16 le 32,
206.77.0.0/16 le 32,
207.80.0.0/16 le 32,
216.7.224.0/19 le 32,
198.215.0.0/16 le 32,
205.165.0.0/16 le 32,
207.64.0.0/16 le 32,
147.26.0.0/16 le 32,
198.133.222.0/24 le 32,
69.62.0.0/17 le 32,
74.200.188.0/24 le 32,
216.38.84.0/22 le 32,
158.135.0.0/16 le 32,
128.42.0.0/16,
128.249.0.0/16,
129.7.0.0/16,
168.7.0.0/16,
192.31.88.0/24,
192.58.120.0/24,
192.70.188.0/24,
192.136.144.0/24,
192.136.146.0/24,
192.138.193.0/24,
192.138.194.0/24,
192.147.26.0/24,
192.225.19.0/24,
192.225.23.0/24,
208.117.128.0/18,
198.32.236.0/24,
206.223.141.32/27
end-set
LEARN6prefix-set LEARN6
#member allocation for LEARN from NLR space
2001:4880:700::/40
end-set
ONENETprefix-set ONENET
129.15.0.0/16,
129.244.0.0/16,
130.184.0.0/16,
139.78.0.0/16,
144.30.0.0/16,
144.167.0.0/16,
156.110.0.0/16,
157.142.0.0/16,
159.150.0.0/16,
162.58.0.0/16,
164.58.0.0/16,
192.31.83.0/24,
192.35.96.0/23,
192.35.98.0/24,
192.78.4.0/24,
192.133.17.0/24,
192.135.141.0/24,
192.146.206.0/24,
192.149.244.0/24,
192.150.147.0/24,
192.173.32.0/20,
192.173.48.0/22,
192.198.4.0/22,
192.203.164.0/24,
192.206.65.0/24,
192.231.3.0/24,
192.231.56.0/24,
192.234.12.0/23,
198.11.4.0/22,
198.17.223.0/24,
198.102.159.0/24,
198.178.194.0/24,
198.183.248.0/23,
198.187.154.0/24,
198.203.153.0/24,
198.204.126.0/24,
198.207.222.0/24,
199.27.8.0/21,
199.120.0.0/21,
199.120.8.0/22,
199.164.253.0/24,
199.181.88.0/22,
199.184.200.0/22,
199.190.128.0/23,
199.223.171.0/24,
199.245.163.0/24,
199.245.164.0/23,
199.245.166.0/24,
199.248.134.0/23,
204.29.164.0/24,
204.61.0.0/21,
204.61.8.0/22,
204.61.12.0/23,
204.62.16.0/21,
204.62.24.0/22,
204.63.216.0/21,
204.87.64.0/18,
204.87.241.0/24,
204.126.2.0/23,
204.126.138.0/23,
204.126.144.0/23,
204.126.162.0/23,
204.126.186.0/23,
204.126.188.0/22,
204.154.112.0/21,
205.143.136.0/21,
205.143.216.0/21,
205.153.220.0/24,
205.159.237.0/24,
205.235.84.0/23,
205.235.86.0/23,
205.235.88.0/23,
205.235.91.0/24,
206.202.192.0/18,
206.203.81.0/24,
147.97.0.0/16,
192.153.53.0/24,
206.61.156.0/24
end-set
INTERNALprefix-set INTERNAL
216.24.176.0/20 ge 20,
2001:4880::/32 ge 32
end-set
MARTIANSprefix-set MARTIANS
0.0.0.0/7 ge 7,
2.0.0.0/8 ge 8,
5.0.0.0/8 ge 8,
7.0.0.0/8 ge 8,
10.0.0.0/8 ge 8,
23.0.0.0/8 ge 8,
27.0.0.0/8 ge 8,
31.0.0.0/8 ge 8,
36.0.0.0/7 ge 7,
39.0.0.0/8 ge 8,
42.0.0.0/8 ge 8,
49.0.0.0/8 ge 8,
50.0.0.0/8 ge 8,
92.0.0.0/8 ge 8,
93.0.0.0/8 ge 8,
100.0.0.0/6 ge 6,
104.0.0.0/6 ge 6,
112.0.0.0/5 ge 5,
120.0.0.0/8 ge 8,
127.0.0.0/8 ge 8,
169.254.0.0/16 ge 16,
172.16.0.0/12 ge 12,
173.0.0.0/8 ge 8,
174.0.0.0/7 ge 7,
176.0.0.0/5 ge 5,
184.0.0.0/6 ge 6,
192.0.2.0/24 ge 24,
192.168.0.0/16 ge 16,
197.0.0.0/8 ge 8,
198.18.0.0/15 ge 15,
223.0.0.0/8 ge 8,
224.0.0.0/3
end-set
AS112routeprefix-set AS112route
192.175.48.0/24
end-set
TOO-SMALL-PREFIX-27prefix-set TOO-SMALL-PREFIX-27
0.0.0.0/0 ge 28 le 32
end-set
I2as-path-set I2
ios-regex '_11537_'
end-set
PRIVATEas-path-set PRIVATE
ios-regex '_(65[0-5][0-9][0-9])_',
ios-regex '_(645[2-9][0-9])_',
ios-regex '_(6451[2-9])_',
ios-regex '_(64[6-9][0-9][0-9])_'
end-set
COMMERCIALas-path-set COMMERCIAL
ios-regex '_1_',
ios-regex '_174_',
ios-regex '_1239_',
ios-regex '_1673_',
ios-regex '_1740_',
ios-regex '_1800_',
ios-regex '_1833_',
ios-regex '_2548_',
ios-regex '_2551_',
ios-regex '_2685_',
ios-regex '_2914_',
ios-regex '_3549_',
ios-regex '_3561_',
ios-regex '_3847_',
ios-regex '_3951_',
ios-regex '_3967_',
ios-regex '_4183_',
ios-regex '_4200_',
ios-regex '_5683_',
ios-regex '_6113_',
ios-regex '_6172_',
ios-regex '_6461_',
ios-regex '_7018_'
end-set
PREF200community-set PREF200
19401:200
end-set
PREF400community-set PREF400
19401:400
end-set
PREF500community-set PREF500
19401:500
end-set
PREF600community-set PREF600
19401:600
end-set
NOTtoFEDcommunity-set NOTtoFED
19401:970,
19401:924
end-set
NOTtoINTLcommunity-set NOTtoINTL
19401:950,
19401:924
end-set
DISCARD911community-set DISCARD911
19401:911
end-set
NOTtoEVENTcommunity-set NOTtoEVENT
19401:960,
19401:924
end-set
MEMBERS-ONLYcommunity-set MEMBERS-ONLY
# "I want to hear only NLR MEMBER prefixes"
19401:924
end-set
NOTtoMEMBERScommunity-set NOTtoMEMBERS
19401:920
end-set
NOTtoREpeerscommunity-set NOTtoREpeers
19401:940,
19401:924
end-set
PREPEND-fed1community-set PREPEND-fed1
19401:971
end-set
PREPEND-fed2community-set PREPEND-fed2
19401:972
end-set
PREPEND-fed3community-set PREPEND-fed3
19401:973
end-set
PREPEND-comm1community-set PREPEND-comm1
19401:981
end-set
PREPEND-comm2community-set PREPEND-comm2
19401:982
end-set
PREPEND-comm3community-set PREPEND-comm3
19401:983
end-set
PREPEND-intl1community-set PREPEND-intl1
19401:951
end-set
PREPEND-intl2community-set PREPEND-intl2
19401:952
end-set
PREPEND-intl3community-set PREPEND-intl3
19401:953
end-set
PREPEND-event1community-set PREPEND-event1
19401:961
end-set
PREPEND-event2community-set PREPEND-event2
19401:962
end-set
PREPEND-event3community-set PREPEND-event3
19401:963
end-set
NOTtoCOMM-peerscommunity-set NOTtoCOMM-peers
19401:990,
19401:924
end-set
PREPEND-REpeers1community-set PREPEND-REpeers1
19401:941
end-set
PREPEND-REpeers2community-set PREPEND-REpeers2
19401:942
end-set
PREPEND-REpeers3community-set PREPEND-REpeers3
19401:943
end-set
PREPEND-members1community-set PREPEND-members1
19401:921
end-set
PREPEND-members2community-set PREPEND-members2
19401:922
end-set
PREPEND-members3community-set PREPEND-members3
19401:923
end-set
NOTtoCOMM-memberscommunity-set NOTtoCOMM-members
19401:980,
19401:924
end-set
PREPEND-commpeer1community-set PREPEND-commpeer1
19401:991
end-set
PREPEND-commpeer2community-set PREPEND-commpeer2
19401:992
end-set
PREPEND-commpeer3community-set PREPEND-commpeer3
19401:993
end-set
FED-INroute-policy FED-IN
# default incoming RP for fednets
apply SANITY-IN
set local-preference 300
set community (19401:7000) additive
end-policy
FLR-INroute-policy FLR-IN
# member FLR primary (over 10G shared with LONI)
if destination in FLR then
apply MEMBER-IN(500, 2000)
endif
end-policy
SLR-INroute-policy SLR-IN
# SLR backup connection
if destination in SLR then
apply MEMBER-IN(450, 2001)
endif
end-policy
FED-OUTroute-policy FED-OUT
# use for all fednets as default outgoing route-policy
# if user wants these prefixes NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-INroute-policy INTL-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# default incoming RP for international peer nets
apply SANITY-IN
set local-preference 300
set community (19401:5000) additive
endif
end-policy
LONI-INroute-policy LONI-IN
# LONI primary connection, 10G
if destination in LONI then
apply MEMBER-IN(500, 2000)
endif
end-policy
EVENT-INroute-policy EVENT-IN
# default incoming RP for special-events e.g. SC06
# **apply with care** because of the high pref!
apply SANITY-IN
set local-preference 1000
set community (19401:10000) additive
end-policy
INTERNALroute-policy INTERNAL
set community (19401:1000)
end-policy
INTL-OUTroute-policy INTL-OUT
# use for international peers as default outgoing route-policy
if community matches-any NOTtoINTL then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
LEARN-INroute-policy LEARN-IN
#LEARN primary connection
if destination in LEARN then
apply MEMBER-IN(500, 2000)
endif
end-policy
ALLOW-ALLroute-policy ALLOW-ALL
pass
end-policy
EVENT-OUTroute-policy EVENT-OUT
# use for special events outgoing route-policy
if community matches-any NOTtoEVENT then
drop
else
# otherwise tell them everything we know...
apply SANITY-OUT
endif
# prepending toward event
if community matches-any PREPEND-event1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-event2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-event3 then
prepend as-path 19401 3
endif
end-policy
LEARN6-INroute-policy LEARN6-IN
#LEARN primary connection (v6)
if destination in LEARN6 then
apply MEMBER-IN(500, 2000)
endif
end-policy
MEMBER-INroute-policy MEMBER-IN($pref, $communitytag)
#
#
#
# this route-policy is a common default for all members
#
# each member's bgp stanza calls a member-specific policy
# which calls this; it passes parameters as noted above
#
# SANITY-IN checks for private-ASs and nlr-internal prefixes
apply SANITY-IN
set local-preference $pref
set community (19401:$communitytag) additive
apply PREF-NUDGING
apply KILL-DISCARD
end-policy
ONENET-INroute-policy ONENET-IN
# member ONENET 1g backup through tulsa
if destination in ONENET then
apply MEMBER-IN(450, 2001)
endif
end-policy
REPEER-INroute-policy REPEER-IN
# default incoming RP for R&E peer nets e.g. ultralight
apply SANITY-IN
set local-preference 300
set community (19401:4000) additive
end-policy
SANITY-INroute-policy SANITY-IN
if as-path in PRIVATE then
drop
endif
if as-path in I2 then
drop
endif
if destination in MARTIANS then
drop
endif
if destination in INTERNAL then
drop
else
pass
endif
end-policy
MEMBER-OUTroute-policy MEMBER-OUT
# use for all members as default outgoing route-policy
if community matches-any NOTtoMEMBERS then
drop
else
# otherwise tell them everything we know...
apply SANITY-OUT
endif
# prepending toward members
if community matches-any PREPEND-members1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-members2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-members3 then
prepend as-path 19401 3
endif
end-policy
REJECT-ALLroute-policy REJECT-ALL
drop
end-policy
REPEER-OUTroute-policy REPEER-OUT
# default outgoing route-policy for research & educ peers
if community matches-any NOTtoREpeers or community matches-any MEMBERS-ONLY then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-REpeers1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-REpeers2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-REpeers3 then
prepend as-path 19401 3
endif
end-policy
SANITY-OUTroute-policy SANITY-OUT
replace as-path private-as
if as-path in PRIVATE then
drop
endif
if destination in MARTIANS then
drop
else
set med igp-cost
endif
end-policy
KILL-DISCARDroute-policy KILL-DISCARD
# only members are allowed to kill prefixes
#
# need to do sanity-check against allowed-prefixes
if community matches-every DISCARD911 then
set next-hop 216.24.191.253
endif
end-policy
PREF-NUDGINGroute-policy PREF-NUDGING
# only members allowed to set these values
if community matches-every PREF600 then
set local-preference 600
elseif community matches-every PREF500 then
set local-preference 500
elseif community matches-every PREF400 then
set local-preference 400
elseif community matches-every PREF200 then
set local-preference 200
else
pass
endif
end-policy
FED-MEMBERSONLY-INroute-policy FED-MEMBERSONLY-IN
# just like FED-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:7000) additive
end-policy
FED-MEMBERSONLY-OUTroute-policy FED-MEMBERSONLY-OUT
# use for fednets outgoing route-policy who want only
# member prefixes
#
# if peer wants these prefixes NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-MEMBERSONLY-INroute-policy INTL-MEMBERSONLY-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# just like INTL-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:5000) additive
endif
end-policy
INTL-MEMBERSONLY-OUTroute-policy INTL-MEMBERSONLY-OUT
# outgoing route-policy for international-peers
# who want only member prefixes
#
# if peer wants prefix NOT sent to intls:
if community matches-any NOTtoINTL then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
actLoopback0true216.24.191.227255.255.255.255actLoopback1Loopback for RP
true216.24.191.254255.255.255.255actLoopback2tVRF
true192.168.0.4255.255.255.255acttunnel-te1tVRF10.1.1.1255.255.255.252PreStandardDSTE01192.168.0.3Active1DynamicNoneactTenGigE0/2/0/0BB to LOSA te0/5/0/2 | NLR-HOUS-LOSA-10GE-87trueTenGigE9216216.24.186.31255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/2/0/1BB to HOUS 6509 Te1/1trueTenGigE9212flowmonmapflowsamplerflowsampleractTenGigE0/2/0/2BB to ATLA te0/5/0/0 | NLR-ATLA-HOUS-10GE-70trueTenGigE9216216.24.186.8255.255.255.254actTenGigE0/2/0/3LEARN primary 10GTenGigE9212900074.200.188.33255.255.255.252flowmonmapflowsamplerflowsampleractTenGigE0/2/0/4216.24.186.27255.255.255.254trueactTenGigE0/2/0/6trueactTenGigE0/2/0/7trueactTenGigE0/5/0/0BB to DENV te0/5/0/5 | NLR-DENV-HOUS-10GE-82trueTenGigE9216216.24.186.27255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/5/0/1shared LONI/FLR 10G | NLR-BATO-HOUS-10GE-81TenGigE9216flowmonmapflowsamplerflowsampleractTenGigE0/5/0/3"NLRview test-pc 10GE"9000216.24.187.41255.255.255.252actTenGigE0/5/0/4trueactTenGigE0/5/0/5BB to CHIC Te0/5/0/2 | NLR-CHIC-HOUS-10GE-67TenGigE9216216.24.186.24255.255.255.254flowmonmapflowsamplerflowsampleractTenGigE0/5/0/6trueactTenGigE0/5/0/7trueactTenGigE0/2/0/1.78"Telepresence HOUS-KANS via L2 VLAN 78"216.24.184.65255.255.255.254Default78actTenGigE0/2/0/1.109Framenet backup to ONENET layer39000164.58.245.90255.255.255.252Defaultflowmonmapflowsamplerflowsampler109actTenGigE0/2/0/1.124SLR layer3 backup AS819000216.24.184.41255.255.255.252Defaultflowmonmapflowsamplerflowsampler124actTenGigE0/2/0/1.151VINI9000216.24.178.73255.255.255.248Defaultflowmonmapflowsamplerflowsampler151actTenGigE0/2/0/1.152NLRview vlan9000216.24.187.33255.255.255.248Defaultflowmonmapflowsamplerflowsampler152actTenGigE0/2/0/1.314LEARN primary over layer 2 until 10G available moved to Atlanta [NO-MONITOR]9000192.124.229.5255.255.255.252Defaultflowmonmapflowsamplerflowsampler314actTenGigE0/5/0/1.512LONI share of NLR-BATO-HOUS-10GE-81sub_vlan9216208.100.127.1255.255.255.252Default512actTenGigE0/5/0/1.513FLR share of NLR-BATO-HOUS-10GE-81sub_vlan9216198.32.155.254255.255.255.252Default513actMgmtEth0/RP0/CPU0/0true216.24.177.69255.255.255.240actMgmtEth0/RP1/CPU0/0true216.24.177.70255.255.255.240prePOS0/4/0/0trueprePOS0/4/0/1trueprePOS0/4/0/2trueprePOS0/4/0/3trueprePOS0/5/0/0trueprePOS0/5/0/1trueprePOS0/5/0/2trueprePOS0/5/0/3trueprePOS0/6/0/0trueprePOS0/6/0/1trueprePOS0/6/0/2trueprePOS0/6/0/3trueprePOS0/6/0/4trueprePOS0/6/0/5trueprePOS0/6/0/6trueprePOS0/6/0/7trueprePOS0/6/0/8trueprePOS0/6/0/9trueprePOS0/7/0/0trueprePOS0/7/0/1trueprePOS0/7/0/2trueprePOS0/7/0/3trueprePOS0/7/0/4trueprePOS0/7/0/5trueprePOS0/7/0/6trueprePOS0/7/0/7trueprePOS0/7/0/8trueprePOS0/7/0/9trueprePOS0/6/0/10trueprePOS0/6/0/11trueprePOS0/6/0/12trueprePOS0/6/0/13trueprePOS0/6/0/14trueprePOS0/6/0/15trueprePOS0/7/0/10trueprePOS0/7/0/11trueprePOS0/7/0/12trueprePOS0/7/0/13trueprePOS0/7/0/14trueprePOS0/7/0/15true
0134.68.107.1718121813truetrue135413530C2E261B24087C233D06033E4F39207B4A48501129.79.216.16218121813truetrue055A024E266E6C381629430203281413721E091E2632101129.79.216.16249truetrue094B5C5A181104115B18102134.68.107.1749truetrue08265E1D080D1614421F1810MgmtEth0/RP1/CPU0/0admintruetrue$1$1NvY$jnwIDBk/HSbo2F3ETe5nu.root-systemtruesweenytruetrue02120C52050D1C315E47071Eroot-systemtrueexecdefaultRadiusLocalNonelogindefaultRadiusLocaltruedefault6000LOGIN-L3-HOSTS60Indefault01619401trueLevel249.2160.2419.1228.00trueIETFStandardNSFIPv4UnicastNotSetDisabledDisabledIPv6UnicastNotSetDisabledtrueDisabledLoopback0truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueLoopback1truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/0trueLevel2IPv4UnicasttrueNotSet1351IPv6UnicasttrueNotSet1351TenGigE0/2/0/3truePassiveIPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/6trueLevel2IPv4UnicasttrueNotSet1462IPv6UnicasttrueNotSet1462TenGigE0/5/0/2trueLevel2IPv4UnicasttrueNotSet1440IPv6UnicasttrueNotSet1440TenGigE0/5/0/4truePassiveIPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/1.104truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/1.151truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/1.152trueLevel2NotSetNeverIPv4UnicasttrueTenGigE0/2/0/1.664truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/5.702truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/5.703truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/5.776truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/5.777truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/5.780truePassiveLevel2IPv4UnicasttrueIPv6UnicasttrueTenGigE0/2/0/5.781truePassiveLevel2IPv4UnicasttrueIPv6Unicasttrue129.79.9.1nlrView1000nLr-monReadOnlyQUERY-HOSTSmsdptruebgpmibtruesensortruefrucontroltruedenv-crsnoc@nlr.netLoopback0019401true216.24.191.228120360trueIPv4Unicasttrue88216.24.176.020INTERNALIPv4Multicasttrue216.24.176.020INTERNALIPv6Unicasttrue2001:4880::32INTERNALIPv6Multicasttrue2001:4880::32INTERNALFEDtrueIPv4UnicasttruetrueFED-IN300075falseFED-OUTtruetruetrueIPv4MulticasttruetrueFED-IN300075falseFED-OUTtruetruetrueFED6trueIPv6UnicasttruetrueFED-IN200075falseFED-OUTtruetruetrueIPv6MulticasttruetrueFED-IN50075falseFED-OUTtruetruetrueINTLtrueIPv4UnicasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueIPv4MulticasttruetrueINTL-IN300075falseINTL-OUTtruetruetrueEVENTtrueuse for special events e.g. sc06--sets *highest* local-prefIPv4UnicasttruetrueEVENT-INEVENT-OUTtruetruetrueIPv4MulticasttruetrueEVENT-INEVENT-OUTtruetruetrueINTL6trueIPv6UnicasttruetrueINTL-IN200075falseINTL-OUTtruetruetrueIPv6MulticasttruetrueINTL-IN50075falseINTL-OUTtruetruetrueEVENT6trueuse for special-events--use with care--sets *HIGHEST* local-pref!IPv6UnicasttruetrueEVENT-INEVENT-OUTtruetruetrueIPv6MulticasttruetrueEVENT-INEVENT-OUTtruetruetrueREPEERtrueResearch&Educ networks, like hopi or ultralightIPv4UnicasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetrueIPv4MulticasttruetrueREPEER-IN300075falseREPEER-OUTtruetruetruemembertrueIPv4UnicasttruetrueMEMBER-OUTtruetruetrueIPv4MulticasttruetrueMEMBER-OUTtruetruetrue19401NLRviewtruebgp looking-glasses like NLRview--send everything, accept nothingIPv4UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv4MulticasttrueREJECT-ALL175falseALLOW-ALLtruetruemember6trueIPv6UnicasttruetrueMEMBER-OUTtruetruetrueIPv6MulticasttruetrueMEMBER-OUTtruetruetrueNLRview6truebgp looking-glasses like NLRview--send everything, accept nothingIPv6UnicasttrueREJECT-ALL175falseALLOW-ALLtruetrueIPv6MulticasttrueREJECT-ALL175falseALLOW-ALLtruetrueibgp-meshtrue019401falsetrue05051C033B5E54Loopback0IPv4UnicasttruetrueIPv4Multicasttruetrueipv6-ibgp-meshtrue019401Loopback0IPv6UnicasttruetruetruetrueIPv6MulticasttruetruetruetrueFED-MEMBERSONLYtrueIPv4UnicasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueFED-MEMBERSONLY-IN300075falseFED-MEMBERSONLY-OUTtruetruetrueINTL-MEMBERSONLYtrueIPv4UnicasttruetrueINTL-MEMBERSONLY-IN300075falseINTL-MEMBERSONLY-OUTtruetruetrueIPv4MulticasttruetrueINTL-MEMBERSONLY-IN300075falseINTL-MEMBERSONLY-OUTtruetruetrueINTL-MEMBERSONLY6trueIPv6UnicasttruetrueINTL-MEMBERSONLY-IN100075falseINTL-MEMBERSONLY-OUTtruetruetrueIPv6MulticasttruetrueINTL-MEMBERSONLY-IN100075falseINTL-MEMBERSONLY-OUTtruetruetrue129.24.198.109040498memberUNM layer3 backup through ALBUIPv4UnicasttrueUNM-INIPv4MulticasttrueUNM-IN137.164.26.13002153memberfalsetrue014A5453085F515827151DCENIC [NO-MONITOR]IPv4UnicasttruetrueCENIC-INIPv4MulticasttrueCENIC-IN207.231.242.140023855INTL-MEMBERSONLYfalsetrue013D2A3609380F01266D7C2C37Singaren on std-frames vlan 703207.231.242.14607610INTLfalsetrue124A0411160D5F0172National Univ of Singapore [NO-MONITOR]216.24.184.14032361REPEERfalsetrue00111F12165A050A1D"UltraLight 1"216.24.187.196065510NLRviewNLRview-1G (dc) [NO-MONITOR]216.24.191.224ibgp-meshATLA216.24.191.225ibgp-meshCHIC216.24.191.226ibgp-meshDENV216.24.191.227ibgp-meshHOUS216.24.191.229ibgp-meshNEWY216.24.191.230ibgp-meshSEAT216.24.191.231ibgp-meshWASH216.24.191.252ibgp-meshKANS-SBC12001:468:e00:fa4::102153member6falsetrue09151C5E4A5140450D5557CENICIPv6UnicasttrueCENIC6-INIPv6MulticasttrueCENIC6-IN2001:504:b:21::140023855INTL-MEMBERSONLY6falsetrue002A3F345668020808007E6B27Singaren on std-frames vlan 7032001:4880:0:1::ipv6-ibgp-meshATLA v6 loopback2001:4880:0:2::ipv6-ibgp-meshCHIC v6 loopback2001:4880:0:3::ipv6-ibgp-meshDENV v6 loopback2001:4880:0:4::ipv6-ibgp-meshHOUS v6 loopback2001:4880:0:6::ipv6-ibgp-meshNEWY v6 loopback2001:4880:0:7::ipv6-ibgp-meshSEAT v6 loopback2001:4880:0:8::ipv6-ibgp-meshWASH v6 loopback2001:4880:2:10::196065510NLRview6NLRview-1G (dc) v6 [NO-MONITOR]129.79.0.016216.24.177.50250134.68.0.016216.24.177.50250192.12.206.024216.24.177.50250216.24.191.25332Null02001:4880::32Null0truetrueDebug16384Local0134.68.107.9trueLoopback0losa.layer3flowmaptrue9true003010000Loopback0216.24.187.196flowmonmaptrueipv4-rawflowmaptrue10000flowsamplertrueRandom1500EnableEnableEnableEnableEnableEnableQUERY-HOSTS10PermitIPV4134.68.142.820PermitIPV4134.68.107.2330PermitIPV4129.79.6.13740PermitIPV4129.79.216.7950PermitIPV4134.68.107.2260PermitIPV4134.68.107.12370DenyIPV4LOGIN-L3-HOSTS10skip.grnoc.iu.edu20PermitIPV4134.68.142.5030hop-external.grnoc.iu.edu40PermitIPV4134.68.107.850dc-1.grnoc.iu.edu60PermitIPV4134.68.107.2270jump.grnoc.iu.edu80PermitIPV4192.12.206.19681nlrmon.grnoc.iu.edu - XML82PermitIPV4134.68.142.890BB addresses100PermitIPV4216.24.186.00.0.0.255110Loopback addresses120PermitIPV4216.24.191.2240.0.0.31130Local racklan140PermitIPV4152.49.13.00.0.0.31150dev.grnoc.iu.edu160PermitIPV4134.68.107.21170dc-2.grnoc.iu.edu - VN XML180PermitIPV4134.68.107.20MCAST-BOUNDARY10DenyIPV4224.0.1.3920DenyIPV4224.0.1.4030DenyIPV4239.0.0.00.255.255.25540PermitIPV4QUERY-HOSTSEnabledLOGIN-L3-HOSTSEnabledMCAST-BOUNDARYEnabled129.79.5.100Server134.68.1.9Servertrue216.24.191.254trueTenGigE0/2/0/2truetrueTenGigE0/2/0/3truetrueTenGigE0/5/0/0truetrueTenGigE0/5/0/1truetrueTenGigE0/2/0/1.104truetrueTenGigE0/2/0/1.151truetrueTenGigE0/2/0/1.152truetrueTenGigE0/2/0/1.664truetrueTenGigE0/2/0/5.702truetrueTenGigE0/2/0/5.703truetrueTenGigE0/2/0/5.776truetrueTenGigE0/2/0/5.777truetrueTenGigE0/2/0/5.780truetrueTenGigE0/2/0/5.781truetrueLoopback0Loopback0137.164.26.130true"[MEMBER] CENIC"208.77.76.1truenew UNM216.24.191.224trueatla-crsinternal216.24.191.225truechic-crsinternal216.24.191.226truedenv-crsinternal216.24.191.227truehous-crsinternal216.24.191.229truenewy-crsinternal216.24.191.230trueseat-crsinternal216.24.191.231truewash-crsinternaltrueTenGigE0/2/0/2MCAST-BOUNDARYTenGigE0/2/0/3MCAST-BOUNDARYTenGigE0/5/0/0MCAST-BOUNDARYTenGigE0/5/0/1MCAST-BOUNDARYTenGigE0/2/0/1.104MCAST-BOUNDARYTenGigE0/2/0/1.151MCAST-BOUNDARYTenGigE0/2/0/1.152MCAST-BOUNDARYTenGigE0/2/0/1.664MCAST-BOUNDARYTenGigE0/2/0/5.702MCAST-BOUNDARYTenGigE0/2/0/5.703MCAST-BOUNDARYTenGigE0/2/0/5.776MCAST-BOUNDARYTenGigE0/2/0/5.777MCAST-BOUNDARYTenGigE0/2/0/5.780MCAST-BOUNDARYTenGigE0/2/0/5.781MCAST-BOUNDARYtruetrueUNMprefix-set UNM
198.59.97.0/24,
64.106.0.0/17,
64.234.128.0/18,
206.192.128.0/18,
129.24.0.0/16,
198.59.130.0/24,
198.59.131.0/24,
198.59.132.0/24,
198.59.133.0/24,
198.59.145.0/24,
198.59.152.0/24,
198.59.154.0/24,
198.59.155.0/24,
198.59.169.0/24,
204.69.153.0/24,
192.67.133.0/24,
192.88.138.0/24,
192.65.78.0/24,
128.123.0.0/16,
192.65.77.0/24,
146.88.0.0/24,
192.132.89.0/24,
192.136.110.0/24,
192.207.226.0/24,
192.41.211.0/24,
192.67.132.0/24,
192.88.137.0/24,
192.88.139.0/24,
192.88.140.0/24,
192.94.216.0/24,
198.176.219.0/24,
198.187.251.0/24,
198.59.106.0/24,
198.59.107.0/24,
198.59.108.0/24,
198.59.153.0/24,
198.59.187.0/24,
198.59.188.0/24,
198.59.189.0/24,
198.59.190.0/24,
204.134.102.0/24,
204.134.103.0/24,
204.134.48.0/24,
204.134.49.0/24,
204.134.50.0/24,
204.134.54.0/24,
204.134.55.0/24,
204.134.56.0/24,
204.134.57.0/24,
204.134.66.0/24,
204.134.67.0/24,
204.134.68.0/24,
204.134.85.0/24,
205.167.120.0/23,
206.206.136.0/21,
206.206.144.0/24,
206.206.145.0/24,
206.206.147.0/24,
206.206.148.0/24,
206.206.149.0/24,
206.206.150.0/24,
206.206.151.0/24,
206.206.152.0/24,
206.206.153.0/24,
206.206.154.0/24,
206.206.155.0/24,
206.206.156.0/24,
206.206.157.0/24,
206.206.158.0/24,
206.206.159.0/24,
216.161.32.0/23,
63.225.1.0/24,
208.77.76.0/22,
63.225.1.0/24,
192.65.77.0/24,
192.65.78.0/24,
192.67.132.0/24,
192.88.137.0/24,
192.88.138.0/24,
192.88.139.0/25,
192.88.139.0/24,
192.88.140.0/24,
192.94.216.0/24,
192.132.89.0/24,
192.136.110.0/24,
192.207.226.0/24,
198.59.106.0/24,
198.59.107.0/24,
198.59.108.0/24,
198.59.153.0/24,
198.59.187.0/24,
198.59.188.0/24,
198.59.189.0/24,
198.59.190.0/24,
198.176.219.0/24,
198.187.251.0/24,
204.134.48.0/24,
204.134.50.0/24,
204.134.54.0/24,
204.134.55.0/24,
204.134.56.0/24,
204.134.57.0/24,
204.134.66.0/24,
204.134.67.0/24,
204.134.68.0/24,
204.134.85.0/24,
204.134.102.0/24,
204.134.103.0/24,
206.206.136.0/21,
206.206.144.0/20,
216.161.32.0/23,
128.123.0.0/16,
192.41.211.0/24,
129.138.0.0/16,
128.165.0.0/16,
204.121.0.0/16
end-set
CENICprefix-set CENIC
36.0.0.0/8 le 32,
44.0.0.0/8 le 32,
63.202.49.0/24 le 32,
63.207.252.0/22 le 32,
63.247.0.0/19 le 32,
64.54.0.0/16 le 32,
68.181.0.0/16 le 32,
76.78.96.0/19 le 32,
128.9.0.0/16 le 32,
128.12.0.0/16 le 32,
128.32.0.0/16 le 32,
128.48.0.0/16 le 32,
128.54.0.0/16 le 32,
128.97.0.0/16 le 32,
128.111.0.0/16 le 32,
128.114.0.0/16 le 32,
128.120.0.0/16 le 32,
128.125.0.0/16 le 32,
128.149.0.0/16 le 32,
128.195.0.0/16 le 32,
128.200.0.0/16 le 32,
128.218.0.0/16 le 32,
130.237.14.0/23 le 32,
131.179.0.0/16 le 32,
131.215.0.0/16 le 32,
131.216.0.0/16 le 32,
132.239.0.0/16 le 32,
132.249.0.0/16 le 32,
134.4.0.0/16 le 32,
134.79.0.0/16 le 32,
134.154.0.0/16 le 32,
134.197.0.0/16 le 32,
136.152.0.0/16 le 32,
137.78.0.0/16 le 32,
137.79.0.0/16 le 32,
137.110.0.0/16 le 32,
137.131.0.0/16 le 32,
137.228.0.0/16 le 32,
138.23.0.0/16 le 32,
140.148.0.0/16 le 32,
140.173.0.0/16 le 32,
149.142.0.0/16 le 32,
152.79.0.0/16 le 32,
153.105.0.0/16 le 32,
160.87.0.0/16 le 32,
164.67.0.0/16 le 32,
165.157.0.0/16 le 32,
169.228.64.0/21 le 32,
169.228.128.0/19 le 32,
169.228.160.0/20 le 32,
169.229.0.0/16 le 32,
169.230.0.0/16 le 32,
169.231.0.0/16 le 32,
169.232.0.0/16 le 32,
169.233.0.0/16 le 32,
169.237.0.0/16 le 32,
170.91.128.0/18 le 32,
171.64.0.0/14 le 32,
192.5.10.0/24 le 32,
192.5.19.0/24 le 32,
192.12.19.0/24 le 32,
192.12.207.0/24 le 32,
192.12.234.0/24 le 32,
192.17.47.0/24 le 32,
192.26.250.0/23 le 32,
192.26.251.0/24 le 32,
192.26.252.0/23 le 32,
192.26.254.0/24 le 32,
192.31.21.0/24 le 32,
192.31.43.0/24 le 32,
192.31.95.0/24 le 32,
192.31.105.0/24 le 32,
192.31.146.0/24 le 32,
192.31.153.0/24 le 32,
192.31.161.0/24 le 32,
192.35.209.0/24 le 32,
192.35.210.0/24 le 32,
192.35.212.0/23 le 32,
192.35.214.0/24 le 32,
192.35.215.0/24 le 32,
192.35.221.0/26 le 32,
192.35.225.0/24 le 32,
192.35.228.0/24 le 32,
192.41.208.0/24 le 32,
192.42.82.0/24 le 32,
192.55.87.0/24 le 32,
192.195.153.0/24 le 32,
192.195.154.0/23 le 32,
208.71.24.0/22 le 32,
192.58.221.0/24 le 32,
192.65.200.0/24 le 32,
192.67.20.0/24 le 32,
192.67.21.0/24 le 32,
192.67.81.0/24 le 32,
192.67.82.0/24 le 32,
192.84.86.0/24 le 32,
192.100.172.0/24 le 32,
192.101.37.0/24 le 32,
192.101.42.0/24 le 32,
192.107.102.0/24 le 32,
192.107.192.0/24 le 32,
192.135.237.0/24 le 32,
192.135.238.0/24 le 32,
192.138.85.0/24 le 32,
192.150.186.0/23 le 32,
192.150.216.0/24 le 32,
192.150.216.0/23 le 32,
192.154.2.0/24 le 32,
192.154.6.0/24 le 32,
192.159.138.0/24 le 32,
192.159.141.0/24 le 32,
192.172.226.0/24 le 32,
192.251.158.0/24 le 32,
198.17.46.0/23 le 32,
198.17.47.0/24 le 32,
198.17.101.0/24 le 32,
198.32.16.0/24 le 32,
198.32.248.0/24 le 32,
198.32.249.0/24 le 32,
198.51.111.0/24 le 32,
198.94.52.0/24 le 32,
198.133.185.0/24 le 32,
198.134.135.0/24 le 32,
198.147.151.0/24 le 32,
198.148.64.0/21 le 32,
198.148.72.0/22 le 32,
198.183.128.0/22 le 32,
198.186.182.0/24 le 32,
198.187.221.0/24 le 32,
198.187.222.0/24 le 32,
198.202.64.0/18 le 32,
198.202.126.0/23 le 32,
199.105.0.0/18 le 32,
199.120.153.0/24 le 32,
199.164.237.0/24 le 32,
199.165.16.0/24 le 32,
199.165.17.0/24 le 32,
199.165.19.0/24 le 32,
199.233.182.0/24 le 32,
200.23.5.0/24 le 32,
204.48.128.0/17 le 32,
204.57.0.0/21 le 32,
204.88.128.0/19 le 32,
204.115.168.0/21 le 32,
204.118.32.0/24 le 32,
204.128.156.0/24 le 32,
204.250.96.0/20 le 32,
205.143.88.0/21 le 32,
205.153.156.0/24 le 32,
205.153.157.0/24 le 32,
205.153.158.0/24 le 32,
205.153.159.0/24 le 32,
205.159.27.0/24 le 32,
205.167.46.0/23 le 32,
205.173.40.0/21 le 32,
205.174.240.0/20 le 32,
206.78.128.0/19 le 32,
206.78.144.0/21 le 32,
206.78.232.0/22 le 32,
206.194.0.0/18 le 32,
206.197.121.0/24 le 32,
206.213.128.0/18 le 32,
207.31.0.0/18 le 32,
207.31.128.0/17 le 32,
207.197.0.0/18 le 32,
207.197.64.0/18 le 32,
208.1.64.0/19 le 32,
208.70.24.0/21 le 32,
209.68.128.0/19 le 32,
137.164.0.0/16 le 32,
198.32.251.0/24 le 32,
134.173.0.0/16 le 32,
129.219.0.0/16 le 32,
149.169.0.0/16 le 32,
206.117.32.0/24 le 32,
192.6.26.0/24 le 32,
192.101.37.0/24 le 32,
199.111.161.0/24 le 32,
204.107.152.0/24 le 32,
204.152.100.0/22 le 32,
209.242.165.0/24 le 32,
209.242.165.32/27 le 32,
209.242.165.128/25 le 32,
209.242.166.0/24 le 32,
209.242.166.160/27 le 32,
216.230.176.0/20 le 32,
134.114.0.0/16 le 32,
192.174.2.0/24 le 32,
192.174.3.0/24 le 32,
207.241.224.0/20 le 32,
63.199.32.0/21 le 32,
64.39.112.0/20 le 32,
129.8.0.0/16 le 32,
129.65.0.0/16 le 32,
130.17.0.0/16 le 32,
130.65.0.0/16 le 32,
130.86.0.0/16 le 32,
130.150.0.0/16 le 32,
130.157.0.0/16 le 32,
130.166.0.0/16 le 32,
130.182.0.0/16 le 32,
130.191.0.0/16 le 32,
130.212.0.0/16 le 32,
132.241.0.0/16 le 32,
134.71.0.0/16 le 32,
134.139.0.0/16 le 32,
134.154.0.0/16 le 32,
136.168.0.0/16 le 32,
137.145.0.0/16 le 32,
137.150.0.0/16 le 32,
137.151.0.0/16 le 32,
139.182.0.0/16 le 32,
140.144.0.0/16 le 32,
144.37.0.0/16 le 32,
146.244.0.0/16 le 32,
147.144.0.0/16 le 32,
153.18.0.0/16 le 32,
155.135.0.0/16 le 32,
156.1.0.0/16 le 32,
157.233.0.0/16 le 32,
159.115.0.0/16 le 32,
160.227.0.0/16 le 32,
163.150.0.0/16 le 32,
165.196.0.0/16 le 32,
169.199.0.0/16 le 32,
169.236.0.0/16 le 32,
192.30.115.0/24 le 32,
192.78.182.0/24 le 32,
192.86.78.0/24 le 32,
192.103.56.0/24 le 32,
192.104.166.0/24 le 32,
192.111.213.0/24 le 32,
192.138.184.0/24 le 32,
192.189.45.0/24 le 32,
192.189.46.0/24 le 32,
192.189.47.0/24 le 32,
192.189.48.0/24 le 32,
192.190.38.0/24 le 32,
192.190.45.0/24 le 32,
192.195.41.0/24 le 32,
192.207.184.0/24 le 32,
198.49.104.0/24 le 32,
198.62.142.0/24 le 32,
198.102.103.0/24 le 32,
198.133.204.0/24 le 32,
198.137.147.0/24 le 32,
198.137.151.0/24 le 32,
198.137.152.0/24 le 32,
198.137.152.0/23 le 32,
198.137.153.0/24 le 32,
198.137.224.0/24 le 32,
198.175.250.0/24 le 32,
198.181.223.0/24 le 32,
198.181.224.0/23 le 32,
198.181.226.0/24 le 32,
198.188.0.0/16 le 32,
198.189.0.0/16 le 32,
198.202.144.0/24 le 32,
198.202.145.0/24 le 32,
198.207.153.0/24 le 32,
198.207.154.0/24 le 32,
198.207.155.0/24 le 32,
198.207.156.0/24 le 32,
199.88.104.0/23 le 32,
199.230.32.0/20 le 32,
199.230.48.0/22 le 32,
199.245.155.0/24 le 32,
199.253.32.0/20 le 32,
199.253.48.0/21 le 32,
204.17.179.0/24 le 32,
204.17.189.0/24 le 32,
204.62.200.0/24 le 32,
204.69.0.0/21 le 32,
204.75.249.0/24 le 32,
204.75.250.0/24 le 32,
204.75.251.0/24 le 32,
204.75.252.0/24 le 32,
204.75.253.0/24 le 32,
204.75.254.0/24 le 32,
204.75.255.0/24 le 32,
204.100.64.0/18 le 32,
204.100.128.0/17 le 32,
204.102.0.0/16 le 32,
204.102.78.0/24 le 32,
204.129.0.0/16 le 32,
204.147.16.0/20 le 32,
204.155.0.0/20 le 32,
204.238.95.0/24 le 32,
204.238.101.0/24 le 32,
205.154.0.0/16 le 32,
205.154.240.0/23 le 32,
205.154.241.0/24 le 32,
205.154.242.0/24 le 32,
205.155.0.0/16 le 32,
205.174.208.0/20 le 32,
206.15.224.0/19 le 32,
206.78.0.0/19 le 32,
206.78.64.0/19 le 32,
206.78.96.0/20 le 32,
206.78.128.0/20 le 32,
206.78.144.0/22 le 32,
206.78.148.0/23 le 32,
206.78.151.0/24 le 32,
206.78.153.0/24 le 32,
206.78.154.0/23 le 32,
206.78.156.0/22 le 32,
206.78.160.0/19 le 32,
206.78.224.0/20 le 32,
206.78.240.0/20 le 32,
206.117.0.0/16 le 32,
206.201.240.0/20 le 32,
206.211.32.0/19 le 32,
206.227.0.0/18 le 32,
207.7.139.0/24 le 32,
207.7.144.0/24 le 32,
207.21.33.0/24 le 32,
207.21.34.0/24 le 32,
207.31.128.0/18 le 32,
207.62.0.0/16 le 32,
207.99.128.0/18 le 32,
207.157.128.0/17 le 32,
207.166.0.0/18 le 32,
207.212.206.0/23 le 32,
207.233.0.0/17 le 32,
209.66.192.0/19 le 32,
209.79.64.0/19 le 32,
209.79.154.0/23 le 32,
209.79.156.0/23 le 32,
209.129.0.0/16 le 32,
209.129.38.0/23 le 32,
209.129.40.0/22 le 32,
209.129.44.0/23 le 32,
209.132.144.0/24 le 32,
209.147.0.0/18 le 32,
209.188.128.0/17 le 32,
209.232.36.0/22 le 32,
209.232.144.0/20 le 32,
216.100.88.0/21 le 32,
216.102.12.0/22 le 32,
216.102.72.0/21 le 32,
216.102.80.0/22 le 32,
206.78.32.0/19 le 32,
206.78.192.0/19 le 32,
156.3.0.0/16 le 32,
192.175.48.0/24,
134.89.0.0/16,
198.151.212.0/24,
204.27.250.0/24,
67.58.32.0/19 le 24,
169.228.0.0/16 le 24,
169.234.0.0/16 le 32,
208.75.160.0/21 le 32,
169.235.0.0/16 le 32,
138.202.0.0/16 le 32,
137.159.0.0/16,
63.247.0.0/19,
137.159.192.0/18
end-set
CENIC6prefix-set CENIC6
2001:448:3::/48 le 128,
2001:468:e00::/40 le 128,
2001:1210::/32 le 128,
2001:1310::/32 le 128,
2001:1318::/32 le 128,
2001:1328::/32 le 128,
2001:48d0::/32 le 35,
2607:f290::/32 le 128,
2607:f140::/32 le 128
end-set
SC07-6prefix-set SC07-6
2001:468:1f07::/48
end-set
SCinetprefix-set SCinet
140.221.128.0/17
end-set
INTERNALprefix-set INTERNAL
216.24.176.0/20 ge 20,
2001:4880::/32 ge 32
end-set
MARTIANSprefix-set MARTIANS
0.0.0.0/7 ge 7,
2.0.0.0/8 ge 8,
5.0.0.0/8 ge 8,
7.0.0.0/8 ge 8,
10.0.0.0/8 ge 8,
23.0.0.0/8 ge 8,
27.0.0.0/8 ge 8,
31.0.0.0/8 ge 8,
36.0.0.0/7 ge 7,
39.0.0.0/8 ge 8,
42.0.0.0/8 ge 8,
49.0.0.0/8 ge 8,
50.0.0.0/8 ge 8,
92.0.0.0/8 ge 8,
93.0.0.0/8 ge 8,
100.0.0.0/6 ge 6,
104.0.0.0/6 ge 6,
112.0.0.0/5 ge 5,
120.0.0.0/8 ge 8,
127.0.0.0/8 ge 8,
169.254.0.0/16 ge 16,
172.16.0.0/12 ge 12,
173.0.0.0/8 ge 8,
174.0.0.0/7 ge 7,
176.0.0.0/5 ge 5,
184.0.0.0/6 ge 6,
192.0.2.0/24 ge 24,
192.168.0.0/16 ge 16,
197.0.0.0/8 ge 8,
198.18.0.0/15 ge 15,
223.0.0.0/8 ge 8,
224.0.0.0/3
end-set
AS112routeprefix-set AS112route
192.175.48.0/24
end-set
TOO-SMALL-PREFIX-24prefix-set TOO-SMALL-PREFIX-24
0.0.0.0/0 ge 25 le 32
end-set
TOO-SMALL-PREFIX-27prefix-set TOO-SMALL-PREFIX-27
0.0.0.0/0 ge 28 le 32
end-set
I2as-path-set I2
ios-regex '_11537_'
end-set
PRIVATEas-path-set PRIVATE
ios-regex '_(65[0-5][0-9][0-9])_',
ios-regex '_(645[2-9][0-9])_',
ios-regex '_(6451[2-9])_',
ios-regex '_(64[6-9][0-9][0-9])_'
end-set
COMMERCIALas-path-set COMMERCIAL
ios-regex '_1_',
ios-regex '_174_',
ios-regex '_1239_',
ios-regex '_1673_',
ios-regex '_1740_',
ios-regex '_1800_',
ios-regex '_1833_',
ios-regex '_2548_',
ios-regex '_2551_',
ios-regex '_2685_',
ios-regex '_2914_',
ios-regex '_3549_',
ios-regex '_3561_',
ios-regex '_3847_',
ios-regex '_3951_',
ios-regex '_3967_',
ios-regex '_4183_',
ios-regex '_4200_',
ios-regex '_5683_',
ios-regex '_6113_',
ios-regex '_6172_',
ios-regex '_6461_',
ios-regex '_7018_'
end-set
PREF200community-set PREF200
19401:200
end-set
PREF400community-set PREF400
19401:400
end-set
PREF500community-set PREF500
19401:500
end-set
PREF600community-set PREF600
19401:600
end-set
NOTtoFEDcommunity-set NOTtoFED
19401:970,
19401:924
end-set
NOTtoINTLcommunity-set NOTtoINTL
19401:950,
19401:924
end-set
DISCARD911community-set DISCARD911
19401:911
end-set
NOTtoEVENTcommunity-set NOTtoEVENT
19401:960,
19401:924
end-set
MEMBERS-ONLYcommunity-set MEMBERS-ONLY
# "I want to hear only NLR MEMBER prefixes"
19401:924
end-set
NOTtoMEMBERScommunity-set NOTtoMEMBERS
19401:920
end-set
NOTtoREpeerscommunity-set NOTtoREpeers
19401:940,
19401:924
end-set
PREPEND-fed1community-set PREPEND-fed1
19401:971
end-set
PREPEND-fed2community-set PREPEND-fed2
19401:972
end-set
PREPEND-fed3community-set PREPEND-fed3
19401:973
end-set
PREPEND-comm1community-set PREPEND-comm1
19401:981
end-set
PREPEND-comm2community-set PREPEND-comm2
19401:982
end-set
PREPEND-comm3community-set PREPEND-comm3
19401:983
end-set
PREPEND-intl1community-set PREPEND-intl1
19401:951
end-set
PREPEND-intl2community-set PREPEND-intl2
19401:952
end-set
PREPEND-intl3community-set PREPEND-intl3
19401:953
end-set
PREPEND-event1community-set PREPEND-event1
19401:961
end-set
PREPEND-event2community-set PREPEND-event2
19401:962
end-set
PREPEND-event3community-set PREPEND-event3
19401:963
end-set
NOTtoCOMM-peerscommunity-set NOTtoCOMM-peers
19401:990,
19401:924
end-set
PREPEND-REpeers1community-set PREPEND-REpeers1
19401:941
end-set
PREPEND-REpeers2community-set PREPEND-REpeers2
19401:942
end-set
PREPEND-REpeers3community-set PREPEND-REpeers3
19401:943
end-set
PREPEND-members1community-set PREPEND-members1
19401:921
end-set
PREPEND-members2community-set PREPEND-members2
19401:922
end-set
PREPEND-members3community-set PREPEND-members3
19401:923
end-set
NOTtoCOMM-memberscommunity-set NOTtoCOMM-members
19401:980,
19401:924
end-set
PREPEND-commpeer1community-set PREPEND-commpeer1
19401:991
end-set
PREPEND-commpeer2community-set PREPEND-commpeer2
19401:992
end-set
PREPEND-commpeer3community-set PREPEND-commpeer3
19401:993
end-set
FED-INroute-policy FED-IN
# default incoming RP for fednets
apply SANITY-IN
set local-preference 300
set community (19401:7000) additive
end-policy
UNM-INroute-policy UNM-IN
# UNM 1G backup via ALBU
if destination in UNM then
apply MEMBER-IN(450, 2001)
endif
end-policy
FED-OUTroute-policy FED-OUT
# use for all fednets as default outgoing route-policy.
# if user wants these prefixes NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-INroute-policy INTL-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# default incoming RP for international peer nets
apply SANITY-IN
set local-preference 300
set community (19401:5000) additive
endif
end-policy
UNM-OUTroute-policy UNM-OUT
#UNM 1g backup via ALBU
if community matches-any (19401:[1000..7999], 19401:10000) then
apply SANITY-OUT
endif
end-policy
CENIC-INroute-policy CENIC-IN
# CENIC 10G primary connection
if destination in CENIC then
apply MEMBER-IN(500, 2000)
endif
end-policy
EVENT-INroute-policy EVENT-IN
# default incoming RP for special-events e.g. SC06
# **apply with care** because of the high pref!
apply SANITY-IN
set local-preference 1000
set community (19401:10000) additive
end-policy
INTERNALroute-policy INTERNAL
set community (19401:1000)
end-policy
INTL-OUTroute-policy INTL-OUT
# use for international peers as default outgoing route-policy
if community matches-any NOTtoINTL then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
ALLOW-ALLroute-policy ALLOW-ALL
pass
end-policy
CENIC6-INroute-policy CENIC6-IN
# member CENIC primary 10G connection
if destination in CENIC6 then
apply MEMBER-IN(500, 2000)
endif
end-policy
EVENT-OUTroute-policy EVENT-OUT
# use for special events outgoing route-policy
if community matches-any NOTtoEVENT then
drop
else
# otherwise tell them everything we know...
apply SANITY-OUT
endif
# prepending toward event
if community matches-any PREPEND-event1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-event2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-event3 then
prepend as-path 19401 3
endif
end-policy
MEMBER-INroute-policy MEMBER-IN($pref, $communitytag)
#
# this route-policy is a common default for all members
#
# each member's bgp stanza calls a member-specific policy
# which calls this; it passes parameters as noted above
#
# see bgp-communities doc for pref/community values, but
# most common are pref=450/500 and community=2001/2000
# for 1G/10G connections, respectively.
#
# SANITY-IN checks for private-ASs and nlr-internal prefixes
apply SANITY-IN
set local-preference $pref
set community (19401:$communitytag) additive
apply PREF-NUDGING
apply KILL-DISCARD
end-policy
REPEER-INroute-policy REPEER-IN
# default incoming RP for R&E peer nets e.g. ultralight
apply SANITY-IN
set local-preference 300
set community (19401:4000) additive
end-policy
SANITY-INroute-policy SANITY-IN
if as-path in PRIVATE then
drop
endif
if as-path in I2 then
drop
endif
if destination in MARTIANS then
drop
endif
if destination in INTERNAL then
drop
else
pass
endif
end-policy
MEMBER-OUTroute-policy MEMBER-OUT
# use for all members as default outgoing route-policy
if community matches-any NOTtoMEMBERS then
drop
else
# otherwise tell them everything we know...
apply SANITY-OUT
endif
# prepending toward members
if community matches-any PREPEND-members1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-members2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-members3 then
prepend as-path 19401 3
endif
end-policy
REJECT-ALLroute-policy REJECT-ALL
drop
end-policy
REPEER-OUTroute-policy REPEER-OUT
# for research&educ peers (like ultralight or hopi)
if community matches-any NOTtoREpeers then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
else
# else send everything we know...
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-REpeers1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-REpeers2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-REpeers3 then
prepend as-path 19401 3
endif
end-policy
SANITY-OUTroute-policy SANITY-OUT
replace as-path private-as
if as-path in PRIVATE then
drop
endif
if destination in MARTIANS then
drop
else
set med igp-cost
endif
end-policy
KILL-DISCARDroute-policy KILL-DISCARD
# only members are allowed to kill prefixes
#
# need to do sanity-check against allowed-prefixes
if community matches-every DISCARD911 then
set next-hop 216.24.191.253
endif
end-policy
PREF-NUDGINGroute-policy PREF-NUDGING
# only members allowed to set these values
if community matches-every PREF600 then
set local-preference 600
elseif community matches-every PREF500 then
set local-preference 500
elseif community matches-every PREF400 then
set local-preference 400
elseif community matches-every PREF200 then
set local-preference 200
else
pass
endif
end-policy
FED-MEMBERSONLY-INroute-policy FED-MEMBERSONLY-IN
# just like FED-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:7000) additive
end-policy
FED-MEMBERSONLY-OUTroute-policy FED-MEMBERSONLY-OUT
# outgoing route-policy for fednets
# who want *only member prefixes*
#
# if source wants prefix NOT sent to feds:
if community matches-any NOTtoFED then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-fed1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-fed2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-fed3 then
prepend as-path 19401 3
endif
end-policy
INTL-MEMBERSONLY-INroute-policy INTL-MEMBERSONLY-IN
# if the prefix in AS112 (see http://public.as112.net) drop, else check sanity
if destination in AS112route then
drop
else
# just like INTL-IN plus setting members-only community
apply SANITY-IN
set local-preference 300
set community MEMBERS-ONLY additive
set community (19401:5000) additive
endif
end-policy
INTL-MEMBERSONLY-OUTroute-policy INTL-MEMBERSONLY-OUT
# outgoing route-policy for international-peers
# who want only member prefixes
#
# if peer wants prefix NOT sent to intls:
if community matches-any NOTtoINTL then
drop
elseif destination in TOO-SMALL-PREFIX-27 then
drop
elseif community matches-any (19401:[4000..9999]) then
drop
else
apply SANITY-OUT
endif
# outgoing prepending
if community matches-any PREPEND-intl1 then
prepend as-path 19401 1
elseif community matches-any PREPEND-intl2 then
prepend as-path 19401 2
elseif community matches-any PREPEND-intl3 then
prepend as-path 19401 3
endif
end-policy
actLoopback0true216.24.191.228255.255.255.255actLoopback1Loopback for RP
true216.24.191.254255.255.255.255actTenGigE