@itentialopensource/adapter-mockdevice 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +16 -0
- package/LICENSE +201 -0
- package/README.md +193 -0
- package/adapter.js +506 -0
- package/configs/arista-dcs +58 -0
- package/configs/cisco-asa +105 -0
- package/configs/cisco-ios +269 -0
- package/configs/cisco-ios-xr +77 -0
- package/configs/cisco-nx +40 -0
- package/configs/dungeon-os +7 -0
- package/configs/f5-bigip +33 -0
- package/configs/juniper-junos +238 -0
- package/configs/test +6 -0
- package/devices/CORE-ATL0.json +38 -0
- package/devices/ZRK001.json +33 -0
- package/devices/device.json +25 -0
- package/mockDeviceSchema.json +51 -0
- package/package.json +84 -0
- package/pronghorn.json +87 -0
- package/propertiesSchema.json +7 -0
- package/refs?service=git-upload-pack +0 -0
- package/sampleProperties.json +38 -0
- package/utils/artifactize.js +146 -0
- package/utils/packModificationScript.js +35 -0
- package/utils/pre-commit.sh +27 -0
- package/utils/setup.js +33 -0
- package/utils/testRunner.js +298 -0
|
@@ -0,0 +1,269 @@
|
|
|
1
|
+
!
|
|
2
|
+
version 12.3
|
|
3
|
+
no service pad
|
|
4
|
+
service timestamps debug datetime msec
|
|
5
|
+
service timestamps log datetime msec
|
|
6
|
+
no service password-encryption
|
|
7
|
+
!
|
|
8
|
+
hostname retail
|
|
9
|
+
!
|
|
10
|
+
boot-start-marker
|
|
11
|
+
boot-end-marker
|
|
12
|
+
!
|
|
13
|
+
enable password cisco123
|
|
14
|
+
!
|
|
15
|
+
username jsomeone password 0 cg6#107X
|
|
16
|
+
aaa new-model
|
|
17
|
+
!
|
|
18
|
+
aaa group server radius rad_eap
|
|
19
|
+
server 10.0.1.1 auth-port 1812 acct-port 1813
|
|
20
|
+
!
|
|
21
|
+
aaa authentication login eap_methods group rad_eap
|
|
22
|
+
aaa session-id common
|
|
23
|
+
ip subnet-zero
|
|
24
|
+
ip cef
|
|
25
|
+
!
|
|
26
|
+
vpdn enable
|
|
27
|
+
vpdn-group 1
|
|
28
|
+
request-dialin
|
|
29
|
+
protocol pppoe
|
|
30
|
+
!
|
|
31
|
+
interface dialer 1
|
|
32
|
+
ip address negotiated
|
|
33
|
+
ppp authentication chap
|
|
34
|
+
dialer pool 1
|
|
35
|
+
dialer-group 1
|
|
36
|
+
!
|
|
37
|
+
dialer-list 1 protocol ip permit
|
|
38
|
+
ip nat inside source list 1 interface dialer 0 overload
|
|
39
|
+
ip classless (default)
|
|
40
|
+
ip route 10.10.25.2 0.255.255.255 dialer 0
|
|
41
|
+
!
|
|
42
|
+
ip dhcp excluded-address 10.0.1.1 10.0.1.10
|
|
43
|
+
ip dhcp excluded-address 10.0.2.1 10.0.2.10
|
|
44
|
+
ip dhcp excluded-address 10.0.3.1 10.0.3.10
|
|
45
|
+
!
|
|
46
|
+
ip dhcp pool vlan1
|
|
47
|
+
network 10.0.1.0 255.255.255.0
|
|
48
|
+
default-router 10.0.1.1
|
|
49
|
+
!
|
|
50
|
+
ip dhcp pool vlan2
|
|
51
|
+
network 10.0.2.0 255.255.255.0
|
|
52
|
+
default-router 10.0.2.1
|
|
53
|
+
!
|
|
54
|
+
ip dhcp pool vlan3
|
|
55
|
+
network 10.0.3.0 255.255.255.0
|
|
56
|
+
default-router 10.0.3.1
|
|
57
|
+
!
|
|
58
|
+
ip ips po max-events 100
|
|
59
|
+
no ftp-server write-enable
|
|
60
|
+
!
|
|
61
|
+
bridge irb
|
|
62
|
+
!
|
|
63
|
+
interface FastEthernet2
|
|
64
|
+
no ip address
|
|
65
|
+
!
|
|
66
|
+
interface FastEthernet3
|
|
67
|
+
no ip address
|
|
68
|
+
!
|
|
69
|
+
interface FastEthernet4
|
|
70
|
+
no ip address
|
|
71
|
+
!
|
|
72
|
+
interface FastEthernet5
|
|
73
|
+
no ip address
|
|
74
|
+
!
|
|
75
|
+
interface FastEthernet6
|
|
76
|
+
no ip address
|
|
77
|
+
!
|
|
78
|
+
interface FastEthernet7
|
|
79
|
+
no ip address
|
|
80
|
+
!
|
|
81
|
+
interface FastEthernet8
|
|
82
|
+
no ip address
|
|
83
|
+
!
|
|
84
|
+
interface FastEthernet9
|
|
85
|
+
switchport mode trunk
|
|
86
|
+
no ip address
|
|
87
|
+
!
|
|
88
|
+
interface FastEthernet0
|
|
89
|
+
ip address 192.1.12.2 255.255.255.0
|
|
90
|
+
no ip directed-broadcast (default)
|
|
91
|
+
ip nat outside
|
|
92
|
+
ip access-group 103 in
|
|
93
|
+
no cdp enable
|
|
94
|
+
crypto ipsec client ezvpn ezvpnclient outside
|
|
95
|
+
crypto map static-map
|
|
96
|
+
duplex auto
|
|
97
|
+
speed auto
|
|
98
|
+
!
|
|
99
|
+
interface FastEthernet1
|
|
100
|
+
no ip address
|
|
101
|
+
duplex auto
|
|
102
|
+
speed auto
|
|
103
|
+
!
|
|
104
|
+
crypto isakmp policy 1
|
|
105
|
+
encryption 3des
|
|
106
|
+
authentication pre-share
|
|
107
|
+
group 2
|
|
108
|
+
lifetime 480
|
|
109
|
+
!
|
|
110
|
+
crypto isakmp client configuration group rtr-remote
|
|
111
|
+
key secret-password
|
|
112
|
+
dns 10.50.10.1 10.60.10.1
|
|
113
|
+
domain company.com
|
|
114
|
+
pool dynpool
|
|
115
|
+
!
|
|
116
|
+
crypto ipsec transform-set vpn1 esp-3des esp-sha-hmac
|
|
117
|
+
!
|
|
118
|
+
crypto ipsec security-association lifetime seconds 86400
|
|
119
|
+
!
|
|
120
|
+
crypto dynamic-map dynmap 1
|
|
121
|
+
set transform-set vpn1
|
|
122
|
+
reverse-route
|
|
123
|
+
!
|
|
124
|
+
crypto map static-map 1 ipsec-isakmp dynamic dynmap
|
|
125
|
+
crypto map dynmap isakmp authorization list rtr-remote
|
|
126
|
+
crypto map dynmap client configuration address respond
|
|
127
|
+
|
|
128
|
+
crypto ipsec client ezvpn ezvpnclient
|
|
129
|
+
connect auto
|
|
130
|
+
group 2 key secret-password
|
|
131
|
+
mode client
|
|
132
|
+
peer 192.168.100.1
|
|
133
|
+
!
|
|
134
|
+
interface Dot11Radio0
|
|
135
|
+
no ip address
|
|
136
|
+
!
|
|
137
|
+
broadcast-key vlan 1 change 45
|
|
138
|
+
!
|
|
139
|
+
encryption vlan 1 mode ciphers tkip
|
|
140
|
+
!
|
|
141
|
+
ssid cisco
|
|
142
|
+
vlan 1
|
|
143
|
+
authentication open
|
|
144
|
+
authentication network-eap eap_methods
|
|
145
|
+
authentication key-management wpa optional
|
|
146
|
+
!
|
|
147
|
+
ssid ciscowep
|
|
148
|
+
vlan 2
|
|
149
|
+
authentication open
|
|
150
|
+
!
|
|
151
|
+
ssid ciscowpa
|
|
152
|
+
vlan 3
|
|
153
|
+
authentication open
|
|
154
|
+
!
|
|
155
|
+
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
|
|
156
|
+
rts threshold 2312
|
|
157
|
+
power local cck 50
|
|
158
|
+
power local ofdm 30
|
|
159
|
+
channel 2462
|
|
160
|
+
station-role root
|
|
161
|
+
!
|
|
162
|
+
interface Dot11Radio0.1
|
|
163
|
+
description Cisco Open
|
|
164
|
+
encapsulation dot1Q 1 native
|
|
165
|
+
no cdp enable
|
|
166
|
+
bridge-group 1
|
|
167
|
+
bridge-group 1 subscriber-loop-control
|
|
168
|
+
bridge-group 1 spanning-disabled
|
|
169
|
+
bridge-group 1 block-unknown-source
|
|
170
|
+
no bridge-group 1 source-learning
|
|
171
|
+
no bridge-group 1 unicast-flooding
|
|
172
|
+
!
|
|
173
|
+
interface Dot11Radio0.2
|
|
174
|
+
encapsulation dot1Q 2
|
|
175
|
+
bridge-group 2
|
|
176
|
+
bridge-group 2 subscriber-loop-control
|
|
177
|
+
bridge-group 2 spanning-disabled
|
|
178
|
+
bridge-group 2 block-unknown-source
|
|
179
|
+
no bridge-group 2 source-learning
|
|
180
|
+
no bridge-group 2 unicast-flooding
|
|
181
|
+
!
|
|
182
|
+
interface Dot11Radio0.3
|
|
183
|
+
encapsulation dot1Q 3
|
|
184
|
+
bridge-group 3
|
|
185
|
+
bridge-group 3 subscriber-loop-control
|
|
186
|
+
bridge-group 3 spanning-disabled
|
|
187
|
+
bridge-group 3 block-unknown-source
|
|
188
|
+
no bridge-group 3 source-learning
|
|
189
|
+
no bridge-group 3 unicast-flooding
|
|
190
|
+
!
|
|
191
|
+
interface Vlan1
|
|
192
|
+
ip address 192.168.1.1 255.255.255.0
|
|
193
|
+
no ip directed-broadcast (default)
|
|
194
|
+
crypto ipsec client ezvpn ezvpnclient inside
|
|
195
|
+
ip inspect firewall in
|
|
196
|
+
no cdp enable
|
|
197
|
+
bridge-group 1
|
|
198
|
+
bridge-group 1 spanning-disabled
|
|
199
|
+
!
|
|
200
|
+
interface Vlan2
|
|
201
|
+
no ip address
|
|
202
|
+
bridge-group 2
|
|
203
|
+
bridge-group 2 spanning-disabled
|
|
204
|
+
!
|
|
205
|
+
interface Vlan3
|
|
206
|
+
no ip address
|
|
207
|
+
bridge-group 3
|
|
208
|
+
bridge-group 3 spanning-disabled
|
|
209
|
+
!
|
|
210
|
+
interface BVI1
|
|
211
|
+
ip address 10.0.1.1 255.255.255.0
|
|
212
|
+
ip nat inside
|
|
213
|
+
!
|
|
214
|
+
interface BVI2
|
|
215
|
+
ip address 10.0.2.1 255.255.255.0
|
|
216
|
+
!
|
|
217
|
+
interface BVI3
|
|
218
|
+
ip address 10.0.3.1 255.255.255.0
|
|
219
|
+
!
|
|
220
|
+
ip classless
|
|
221
|
+
!
|
|
222
|
+
ip http server
|
|
223
|
+
no ip http secure-server
|
|
224
|
+
!
|
|
225
|
+
radius-server local
|
|
226
|
+
nas 10.0.1.1 key 0 cisco123
|
|
227
|
+
group rad_eap
|
|
228
|
+
!
|
|
229
|
+
user jsomeone nthash 7 0529575803696F2C492143375828267C7A760E1113734624452725707C010B065B
|
|
230
|
+
user AMER\jsomeone nthash 7 0224550C29232E041C6A5D3C5633305D5D560C09027966167137233026580E0B0D
|
|
231
|
+
!
|
|
232
|
+
radius-server host 10.0.1.1 auth-port 1812 acct-port 1813 key cisco123
|
|
233
|
+
!
|
|
234
|
+
control-plane
|
|
235
|
+
!
|
|
236
|
+
bridge 1 route ip
|
|
237
|
+
bridge 2 route ip
|
|
238
|
+
bridge 3 route ip
|
|
239
|
+
!
|
|
240
|
+
ip inspect name firewall tcp
|
|
241
|
+
ip inspect name firewall udp
|
|
242
|
+
ip inspect name firewall rtsp
|
|
243
|
+
ip inspect name firewall h323
|
|
244
|
+
ip inspect name firewall netshow
|
|
245
|
+
ip inspect name firewall ftp
|
|
246
|
+
ip inspect name firewall sqlnet
|
|
247
|
+
!
|
|
248
|
+
access-list 103 permit udp host 200.1.1.1 any eq isakmp
|
|
249
|
+
access-list 103 permit udp host 200.1.1.1 eq isakmp any
|
|
250
|
+
access-list 103 permit esp host 200.1.1.1 any
|
|
251
|
+
access-list 103 permit icmp any any
|
|
252
|
+
access-list 103 deny ip any any
|
|
253
|
+
access-list 105 permit ip 10.1.1.0 0.0.0.255 192.168.0.0 0.0.255.255
|
|
254
|
+
no cdp run
|
|
255
|
+
!
|
|
256
|
+
line con 0
|
|
257
|
+
password cisco123
|
|
258
|
+
no modem enable
|
|
259
|
+
transport preferred all
|
|
260
|
+
transport output all
|
|
261
|
+
line aux 0
|
|
262
|
+
transport preferred all
|
|
263
|
+
transport output all
|
|
264
|
+
line vty 0 4
|
|
265
|
+
password cisco123
|
|
266
|
+
transport preferred all
|
|
267
|
+
transport input all
|
|
268
|
+
transport output all
|
|
269
|
+
!
|
|
@@ -0,0 +1,77 @@
|
|
|
1
|
+
!
|
|
2
|
+
hostname router
|
|
3
|
+
logging console debugging
|
|
4
|
+
telnet ipv4 server max-servers 5
|
|
5
|
+
username iosxr
|
|
6
|
+
password 7 011F0706
|
|
7
|
+
group root-system
|
|
8
|
+
group cisco-support
|
|
9
|
+
!
|
|
10
|
+
ntp
|
|
11
|
+
interface Loopback99
|
|
12
|
+
broadcast
|
|
13
|
+
!
|
|
14
|
+
interface Loopback999
|
|
15
|
+
broadcast
|
|
16
|
+
!
|
|
17
|
+
interface Loopback9999
|
|
18
|
+
broadcast
|
|
19
|
+
!
|
|
20
|
+
authenticate
|
|
21
|
+
max-associations 2000
|
|
22
|
+
!
|
|
23
|
+
interface Loopback0
|
|
24
|
+
ipv4 address 10.1.2.3 255.255.0.0
|
|
25
|
+
load-interval 0
|
|
26
|
+
!
|
|
27
|
+
interface Loopback1
|
|
28
|
+
ipv4 address 10.4.5.6 255.255.0.0
|
|
29
|
+
!
|
|
30
|
+
interface Loopback7
|
|
31
|
+
load-interval 0
|
|
32
|
+
!
|
|
33
|
+
interface Loopback2000
|
|
34
|
+
load-interval 0
|
|
35
|
+
!
|
|
36
|
+
interface Loopback2001
|
|
37
|
+
load-interval 0
|
|
38
|
+
!
|
|
39
|
+
interface Loopback2003
|
|
40
|
+
load-interval 0
|
|
41
|
+
!
|
|
42
|
+
interface MgmtEth0/RP1/CPU0/0
|
|
43
|
+
ipv4 address 10.11.12.13 255.255.0.0
|
|
44
|
+
!
|
|
45
|
+
interface POS0/0/0/0
|
|
46
|
+
shutdown
|
|
47
|
+
!
|
|
48
|
+
interface POS0/0/0/1
|
|
49
|
+
shutdown
|
|
50
|
+
!
|
|
51
|
+
interface POS0/0/0/2
|
|
52
|
+
shutdown
|
|
53
|
+
!
|
|
54
|
+
interface POS0/0/0/3
|
|
55
|
+
shutdown
|
|
56
|
+
!
|
|
57
|
+
interface POS0/3/0/0
|
|
58
|
+
shutdown
|
|
59
|
+
!
|
|
60
|
+
interface POS0/3/0/1
|
|
61
|
+
shutdown
|
|
62
|
+
!
|
|
63
|
+
interface POS0/3/0/2
|
|
64
|
+
shutdown
|
|
65
|
+
!
|
|
66
|
+
interface POS0/3/0/3
|
|
67
|
+
shutdown
|
|
68
|
+
!
|
|
69
|
+
interface preconfigure MgmtEth0/RP0/CPU0/0
|
|
70
|
+
shutdown
|
|
71
|
+
!
|
|
72
|
+
router static
|
|
73
|
+
address-family ipv4 unicast
|
|
74
|
+
0.0.0.0/0 MgmtEth0/RP1/CPU0/0
|
|
75
|
+
!
|
|
76
|
+
!
|
|
77
|
+
end
|
package/configs/cisco-nx
ADDED
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
version 4.2(1)N2(1)
|
|
2
|
+
feature fcoe
|
|
3
|
+
feature telnet
|
|
4
|
+
feature tacacs+
|
|
5
|
+
feature udld
|
|
6
|
+
feature interface-vlan
|
|
7
|
+
feature lacp
|
|
8
|
+
feature vpc
|
|
9
|
+
feature lldp
|
|
10
|
+
feature fex
|
|
11
|
+
snmp-server enable traps entity fru
|
|
12
|
+
role name default-role
|
|
13
|
+
description This is a system defined role and applies to all users.
|
|
14
|
+
rule 5 permit command feature environment
|
|
15
|
+
rule 4 permit command feature hardware
|
|
16
|
+
rule 3 permit command feature module
|
|
17
|
+
rule 2 permit command feature snmp
|
|
18
|
+
rule 1 permit command feature system
|
|
19
|
+
role name praveena
|
|
20
|
+
username admin password 5 $1$VrQsB2KX$4jkUcx3sXWU8lhI1mlwLa/ role network-admin
|
|
21
|
+
username oregon password 5 $1$p3VJ0/BY$Kp22A08NeqCQ0asxUKXq91 role network-oper
|
|
22
|
+
ator
|
|
23
|
+
no password strength-check
|
|
24
|
+
ip domain-lookup
|
|
25
|
+
ip host switch 192.168.2.215
|
|
26
|
+
ip host BEND-1 192.168.2.215
|
|
27
|
+
tacacs-server host 192.168.2.54 key 7 "wawy1234"
|
|
28
|
+
aaa group server tacacs+ t1
|
|
29
|
+
server 192.168.2.54
|
|
30
|
+
use-vrf management
|
|
31
|
+
aaa group server tacacs+ tacacs
|
|
32
|
+
radius-server host 192.168.2.5 key 7 "KkwyCet" authentication accounting
|
|
33
|
+
aaa group server radius r1
|
|
34
|
+
server 192.168.2.5
|
|
35
|
+
use-vrf management
|
|
36
|
+
hostname switch
|
|
37
|
+
logging event link-status default
|
|
38
|
+
errdisable recovery interval 30
|
|
39
|
+
no errdisable detect cause link-flap
|
|
40
|
+
errdisable recovery cause pause-rate-limit
|
package/configs/f5-bigip
ADDED
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
; ARX-4000
|
|
2
|
+
; Version 6.01.000.14059 (Aug 12 2011 20:10:50) [nbuilds]
|
|
3
|
+
; Database version: 601000.106
|
|
4
|
+
; Generated running-config Thu Aug 18 02:22:14 2011
|
|
5
|
+
; System UUID d9bdece8-9866-11d8-91e3-f48e42637d58
|
|
6
|
+
; ip private vlan internal 1010 metalog 1011 subnet 169.254.80.0 255.255.255.0
|
|
7
|
+
;
|
|
8
|
+
terminal character-set unicode-utf-8
|
|
9
|
+
;================================= vlan ==================================
|
|
10
|
+
config
|
|
11
|
+
vlan 25
|
|
12
|
+
description "personnel dept."
|
|
13
|
+
members 2/5 to 2/5
|
|
14
|
+
exit
|
|
15
|
+
|
|
16
|
+
vlan 25
|
|
17
|
+
description rtTestVlan
|
|
18
|
+
members 2/6 to 2/6
|
|
19
|
+
exit
|
|
20
|
+
|
|
21
|
+
exit
|
|
22
|
+
|
|
23
|
+
;============================ config-if-vlan =============================
|
|
24
|
+
config
|
|
25
|
+
interface vlan 25
|
|
26
|
+
ip address 192.168.25.5 255.255.255.0
|
|
27
|
+
no shutdown
|
|
28
|
+
exit
|
|
29
|
+
|
|
30
|
+
interface vlan 25
|
|
31
|
+
ip address 10.46.11.253 255.255.0.0
|
|
32
|
+
no shutdown
|
|
33
|
+
exit
|
|
@@ -0,0 +1,238 @@
|
|
|
1
|
+
version 12.1R5.5;
|
|
2
|
+
system {
|
|
3
|
+
root-authentication {
|
|
4
|
+
encrypted-password"$1$ltXYoZky$Gg3OHOmBGCBKwPET6ijPw0";##SECRET-DATA
|
|
5
|
+
}
|
|
6
|
+
name-server {
|
|
7
|
+
8.8.8.8;
|
|
8
|
+
}
|
|
9
|
+
services {
|
|
10
|
+
web-management {
|
|
11
|
+
http;
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
syslog {
|
|
15
|
+
file default-message {
|
|
16
|
+
any any;
|
|
17
|
+
}
|
|
18
|
+
}
|
|
19
|
+
}
|
|
20
|
+
interfaces {
|
|
21
|
+
ge-0/0/0 {
|
|
22
|
+
unit 0 {
|
|
23
|
+
family inet {
|
|
24
|
+
address 10.204.115.166/24;
|
|
25
|
+
address 30.30.30.1/24;
|
|
26
|
+
}
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
ge-0/0/1 {
|
|
30
|
+
unit 0 {
|
|
31
|
+
family inet {
|
|
32
|
+
address 10.10.99.1/30;
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
ge-0/0/2 {
|
|
37
|
+
unit 0 {
|
|
38
|
+
family inet {
|
|
39
|
+
address 20.20.20.1/24;
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
ge-0/0/4 {
|
|
44
|
+
unit 0 {
|
|
45
|
+
family inet {
|
|
46
|
+
address 4.4.4.1/30;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
ge-0/0/5 {
|
|
51
|
+
unit 0 {
|
|
52
|
+
family inet {
|
|
53
|
+
address 5.5.5.1/30;
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
}
|
|
57
|
+
lo0 {
|
|
58
|
+
unit 0 {
|
|
59
|
+
family inet {
|
|
60
|
+
address 172.16.1.1/24;
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
}
|
|
64
|
+
st0 {
|
|
65
|
+
unit 0 {
|
|
66
|
+
multipoint;
|
|
67
|
+
family inet {
|
|
68
|
+
mtu 1500;
|
|
69
|
+
address 10.255.1.5/24;
|
|
70
|
+
}
|
|
71
|
+
}
|
|
72
|
+
unit 1 {
|
|
73
|
+
multipoint;
|
|
74
|
+
family inet {
|
|
75
|
+
mtu 1500;
|
|
76
|
+
address 10.255.2.5/24;
|
|
77
|
+
}
|
|
78
|
+
}
|
|
79
|
+
}
|
|
80
|
+
}
|
|
81
|
+
routing-options {
|
|
82
|
+
static {
|
|
83
|
+
route 0.0.0.0/0 next-hop 10.204.115.254;
|
|
84
|
+
route 172.16.0.0/24 next-hop [ 10.255.1.254 10.255.2.254 ];
|
|
85
|
+
}
|
|
86
|
+
forwarding-table {
|
|
87
|
+
export load-balancing-policy;
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
policy-options {
|
|
91
|
+
policy-statement load-balancing-policy {
|
|
92
|
+
then {
|
|
93
|
+
load-balance per-packet;
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
}
|
|
97
|
+
security {
|
|
98
|
+
ike {
|
|
99
|
+
policy preShared {
|
|
100
|
+
mode main;
|
|
101
|
+
proposal-set standard;
|
|
102
|
+
pre-shared-key ascii-text "$9$5Q69tuORcypuxNVwg469CA1RvWL"; ##
|
|
103
|
+
SECRET-DATA
|
|
104
|
+
}
|
|
105
|
+
policy preShared_2 {
|
|
106
|
+
mode main;
|
|
107
|
+
proposal-set standard;
|
|
108
|
+
pre-shared-key ascii-text "$9$-9V24JGDkmfZGCt0BEh24oaikFn/"; ##
|
|
109
|
+
SECRET-DATA
|
|
110
|
+
}
|
|
111
|
+
gateway DCA_1 {
|
|
112
|
+
ike-policy preShared;
|
|
113
|
+
address 4.4.4.2;
|
|
114
|
+
external-interface ge-0/0/4.0;
|
|
115
|
+
}
|
|
116
|
+
gateway DCA_2 {
|
|
117
|
+
ike-policy preShared_2;
|
|
118
|
+
address 5.5.5.2;
|
|
119
|
+
external-interface ge-0/0/5.0;
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
ipsec {
|
|
123
|
+
vpn-monitor-options {
|
|
124
|
+
interval 5;
|
|
125
|
+
threshold 5;
|
|
126
|
+
}
|
|
127
|
+
policy std {
|
|
128
|
+
proposal-set standard;
|
|
129
|
+
}
|
|
130
|
+
vpn DCA_1 {
|
|
131
|
+
bind-interface st0.0;
|
|
132
|
+
vpn-monitor {
|
|
133
|
+
optimized;
|
|
134
|
+
}
|
|
135
|
+
ike {
|
|
136
|
+
gateway DCA_1;
|
|
137
|
+
no-anti-replay;
|
|
138
|
+
proxy-identity {
|
|
139
|
+
local 0.0.0.0/0;
|
|
140
|
+
remote 0.0.0.0/0;
|
|
141
|
+
service any;
|
|
142
|
+
}
|
|
143
|
+
ipsec-policy std;
|
|
144
|
+
}
|
|
145
|
+
establish-tunnels immediately;
|
|
146
|
+
}
|
|
147
|
+
vpn DCA_2 {
|
|
148
|
+
bind-interface st0.1;
|
|
149
|
+
vpn-monitor {
|
|
150
|
+
optimized;
|
|
151
|
+
}
|
|
152
|
+
ike {
|
|
153
|
+
gateway DCA_2;
|
|
154
|
+
no-anti-replay;
|
|
155
|
+
proxy-identity {
|
|
156
|
+
local 0.0.0.0/0;
|
|
157
|
+
remote 0.0.0.0/0;
|
|
158
|
+
service any;
|
|
159
|
+
}
|
|
160
|
+
ipsec-policy std;
|
|
161
|
+
}
|
|
162
|
+
establish-tunnels immediately;
|
|
163
|
+
}
|
|
164
|
+
}
|
|
165
|
+
policies {
|
|
166
|
+
default-policy {
|
|
167
|
+
permit-all;
|
|
168
|
+
}
|
|
169
|
+
}
|
|
170
|
+
zones {
|
|
171
|
+
functional-zone management {
|
|
172
|
+
interfaces {
|
|
173
|
+
ge-0/0/2.0;
|
|
174
|
+
}
|
|
175
|
+
host-inbound-traffic {
|
|
176
|
+
system-services {
|
|
177
|
+
all;
|
|
178
|
+
}
|
|
179
|
+
protocols {
|
|
180
|
+
all;
|
|
181
|
+
}
|
|
182
|
+
}
|
|
183
|
+
}
|
|
184
|
+
security-zone untrust {
|
|
185
|
+
host-inbound-traffic {
|
|
186
|
+
system-services {
|
|
187
|
+
all;
|
|
188
|
+
}
|
|
189
|
+
protocols {
|
|
190
|
+
all;
|
|
191
|
+
}
|
|
192
|
+
}
|
|
193
|
+
interfaces {
|
|
194
|
+
ge-0/0/0.0 {
|
|
195
|
+
host-inbound-traffic {
|
|
196
|
+
system-services {
|
|
197
|
+
any-service;
|
|
198
|
+
}
|
|
199
|
+
protocols {
|
|
200
|
+
all;
|
|
201
|
+
}
|
|
202
|
+
}
|
|
203
|
+
}
|
|
204
|
+
lo0.0;
|
|
205
|
+
ge-0/0/1.0;
|
|
206
|
+
ge-0/0/4.0;
|
|
207
|
+
ge-0/0/5.0;
|
|
208
|
+
}
|
|
209
|
+
}
|
|
210
|
+
security-zone trust {
|
|
211
|
+
address-book {
|
|
212
|
+
address 0.0.0.0/0 0.0.0.0/0;
|
|
213
|
+
}
|
|
214
|
+
host-inbound-traffic {
|
|
215
|
+
system-services {
|
|
216
|
+
any-service;
|
|
217
|
+
}
|
|
218
|
+
protocols {
|
|
219
|
+
all;
|
|
220
|
+
}
|
|
221
|
+
}
|
|
222
|
+
}
|
|
223
|
+
security-zone VPN {
|
|
224
|
+
host-inbound-traffic {
|
|
225
|
+
system-services {
|
|
226
|
+
all;
|
|
227
|
+
}
|
|
228
|
+
protocols {
|
|
229
|
+
all;
|
|
230
|
+
}
|
|
231
|
+
}
|
|
232
|
+
interfaces {
|
|
233
|
+
st0.0;
|
|
234
|
+
st0.1;
|
|
235
|
+
}
|
|
236
|
+
}
|
|
237
|
+
}
|
|
238
|
+
}
|