#gerado pelo ZDM do Thales Moises
#www.thalesmoises.com
!inicio da config
!cria ip-prefix
#
ip ip-prefix ROTA-DEFAULT-IPV4 permit 0.0.0.0 0
ip ip-prefix CLI-[VAR2]_AS[VAR4]-[VAR10]-22ATE24 permit [VAR10] 22 greater-equal 22 less-equal 24
ip ip-prefix BLACKHOLE-CLI-[VAR2]-[VAR10] permit [VAR10] 22 greater-equal 32 less-equal 32
ip ip-prefix ROTA-DEFAULT-IPV4 permit 0.0.0.0 0
ip ipv6-prefix ROTA-DEFAULT-IPV6 permit :: 0
ip ipv6-prefix CLI-[VAR2]_AS[VAR4]-[VAR11]-32ATE48 permit [VAR11] 32 greater-equal 32 less-equal 48
#
#
!CRIA ROUTE POLICY DE IMPORT IPV4
route-policy CLIENTE-[VAR2]-V4-IMPORT deny node 200
 if-match ip-prefix DESCARTE-GENERICO-V4
route-policy CLIENTE-[VAR2]-V4-IMPORT permit node 210
if-match ip-prefix BLACKHOLE-CLIENTE-[VAR2]-[VAR10]
!criar e ajustar community de blackhole
!if-match community blackhole
!apply blackhole
route-policy CLIENTE-[VAR2]-V4-IMPORT permit node 220
if-match ip-prefix CLIENTE-[VAR2]-[VAR10]-22ate24
apply local-preference 1000
#
!CRIA ROUTE POLICY DE EXPORT IPV4
#
route-policy CLIENTE-[VAR2]-V4-EXPORT permit node 200
 if-match ip-prefix ROTA-DEFAULT-IPV4
route-policy CLIENTE-[VAR2]-V4-EXPORT deny node 65000
#
!CONFIG PEER V4
bgp [VAR1]
 peer [VAR3] as-number [VAR4]
 peer [VAR3] description CLIENTE-[VAR2]-V4
 peer [VAR3] timer keepalive 3 hold 30
Y
 peer [VAR3] connect-interface [VAR5]
ipv4-family unicast
 peer [VAR3] enable
 peer [VAR3] public-as-only
 peer [VAR3] route-policy CLIENTE-[VAR2]-V4-IMPORT  import
 peer [VAR3] route-policy CLIENTE-[VAR2]-V4-EXPORT  export
 peer [VAR3] advertise-community
 peer [VAR3] advertise-ext-community
#
#
!CRIA ROUTE POLICY V6
route-policy CLIENTE-[VAR2]-V6-IMPORT deny node 200
if-match ipv6 address prefix-list DESCARTE-GENERICO-V6
route-policy CLIENTE-[VAR2]-V6-IMPORT permit node 65000
if-match ipv6 address prefix-list CLI-[VAR2]_AS[VAR4]-[VAR11]-32ATE48
apply local-preference 1000
!CRIA ROUTE POLICY EXPORT IPV6
route-policy CLIENTE-[VAR2]-V6-EXPORT permit node 200
if-match ipv6 address prefix-list ROTA-DEFAULT-IPV6
route-policy CLIENTE-[VAR2]-V6-EXPORT deny node 65000
#
!CONFIG PEER V6
bgp [VAR1]
 peer [VAR6] as-number [VAR4]
 peer [VAR6] description CLIENTE-[VAR2]-V6
 peer [VAR6] timer keepalive 3 hold 30
Y
 peer [VAR6] connect-interface [VAR7]
 peer [VAR6] connect-only
ipv6-family unicast
 peer [VAR6] enable
Y
 peer [VAR6] public-as-only
 peer [VAR6] route-policy CLIENTE-[VAR2]-V6-IMPORT  import
 peer [VAR6] route-policy CLIENTE-[VAR2]-V6-EXPORT  export
 peer [VAR6] advertise-community
 peer [VAR6] advertise-ext-community
#
#FIM DA CONFIG
#