! version 12.4 service timestamps debug datetime service timestamps log datetime service password-encryption ! hostname EXT_PE ! boot-start-marker boot-end-marker ! enable secret 5 $1$EFrv$Q6NZkC15IH4PY5lLKE4DW/ ! no aaa new-model memory-size iomem 5 ip cef ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! archive log config hidekeys ! ! ! ! ! ! interface Loopback0 description LAN ip address 172.20.0.1 255.255.0.0 ! interface Loopback1 description LAN ip address 172.21.0.1 255.255.0.0 ! interface Loopback2 description LAN ip address 172.22.0.1 255.255.0.0 ! interface Loopback3 description LAN ip address 172.23.0.1 255.255.0.0 ! interface FastEthernet0/0 description EXTERNAL IC to EXT_PE_RRC fa2/0 ip address 172.19.253.2 255.255.255.252 speed 100 full-duplex ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! router bgp 65002 no synchronization bgp log-neighbor-changes network 172.20.0.0 network 172.21.0.0 network 172.22.0.0 network 172.23.0.0 neighbor 172.19.253.1 remote-as 65001 neighbor 172.19.253.1 next-hop-self neighbor 172.19.253.1 send-community neighbor 172.19.253.1 soft-reconfiguration inbound neighbor 172.19.253.1 route-map COLORIZE_IN in neighbor 172.19.253.1 filter-list 2 in neighbor 172.19.253.1 route-map STRIP_COLORS_OUT out neighbor 172.19.253.1 filter-list 1 out no auto-summary ! ip forward-protocol nd ! ip bgp-community new-format ip as-path access-list 1 deny 65001 ip as-path access-list 1 permit ^(65002_)*(_[0-9]+)*$ ip as-path access-list 1 deny .* ip as-path access-list 2 deny _(_[0-9]+)_\1_\1_\1_\1_\1_\1_\1_\1_\1_ ip as-path access-list 2 permit ^(65001_)+([0-9]+)*$ ip as-path access-list 2 deny .* ip as-path access-list 3 permit ^(65001_)+([0-9]+)+$ ip as-path access-list 3 deny .* ! ip http server no ip http secure-server ! ! ip prefix-list ISP1 seq 5 permit 172.19.0.0/16 ip prefix-list ISP1 seq 10 permit 172.25.0.0/16 ip prefix-list ISP1 seq 15 permit 172.26.0.0/16 ip prefix-list ISP1 seq 20 permit 172.27.0.0/16 ip prefix-list ISP1 seq 25 permit 172.28.0.0/16 ip prefix-list ISP1 seq 30 permit 172.29.0.0/16 ip prefix-list ISP1 seq 35 permit 172.30.0.0/16 route-map COLORIZE_IN permit 10 match ip address prefix-list ISP1 set community 65001:1000 additive ! route-map COLORIZE_IN permit 20 match as-path 3 set community 65001:2000 ! route-map COLORIZE_IN deny 300 ! route-map STRIP_COLORS_OUT permit 10 set community none ! ! ! control-plane ! ! ! ! ! ! ! ! ! line con 0 line aux 0 line vty 0 4 password 7 02050D480809 login line vty 5 15 password 7 02050D480809 login ! ! end