version 12.1X46-D45.4; system { host-name fusix; root-authentication { encrypted-password ""; ## SECRET-DATA } name-server { 208.67.222.222; 208.67.220.220; } login { user cybertinus { full-name ""; uid 2001; class super-user; authentication { encrypted-password ""; ## SECRET-DATA ssh-rsa "ssh-rsa "; ## SECRET-DATA } } } services { ssh { root-login deny; protocol-version v2; } telnet; xnm-clear-text; web-management { http { interface vlan.0; } https { system-generated-certificate; interface vlan.0; } } } syslog { archive size 100k files 3; user * { any emergency; } file messages { any critical; authorization info; } file interactive-commands { interactive-commands error; } } max-configurations-on-flash 5; max-configuration-rollbacks 5; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } } interfaces { ge-0/0/0 { unit 0 { description "Coloclue euNetworks"; family ethernet-switching { port-mode trunk; vlan { members [ coloclue-transit-eun coloclue-crossconnect ]; } } } } ge-0/0/1 { unit 0 { description "Coloclue DCG"; family ethernet-switching { port-mode trunk; vlan { members [ coloclue-transit-dcg coloclue-crossconnect ]; } } } } ge-0/0/2 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/3 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/4 { unit 0 { description "Transit for: Cloud.nl"; family ethernet-switching { port-mode access; vlan { members cloudnl-transit; } } } } ge-0/0/5 { unit 0 { family ethernet-switching { port-mode tagged-access; vlan { members cloudnl-transit; } } } } ge-0/0/6 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/7 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/8 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/9 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/10 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/11 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/12 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/13 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/14 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/15 { unit 0 { family ethernet-switching { vlan { members management; } } } } vlan { unit 0 { family inet { address 192.168.1.1/24; } } unit 104 { family inet { address 37.139.140.26/31; } } unit 110 { family inet { address 37.139.140.22/31; } } unit 600 { family inet { address 37.139.150.4/31; } } unit 1232 { family inet { address 10.12.32.7/24; } } } } routing-options { static { route 0.0.0.0/0 next-hop 10.12.32.254; } martians { 0.0.0.0/8 prefix-length-range /8-/32; 10.0.0.0/8 prefix-length-range /8-/32; 127.0.0.0/8 prefix-length-range /8-/32; 172.16.0.0/12 prefix-length-range /12-/32; 192.0.0.0/24 prefix-length-range /24-/32; 192.0.2.0/24 prefix-length-range /24-/32; 192.168.0.0/16 prefix-length-range /16-/32; 198.18.0.0/15 prefix-length-range /15-/32; 198.51.100.0/24 prefix-length-range /24-/32; 203.0.113.0/24 prefix-length-range /24-/32; 224.0.0.0/3 prefix-length-range /3-/32; 100.64.0.0/10 prefix-length-range /10-/32; 193.239.116.0/22 prefix-length-range /22-/32; 80.249.208.0/21 prefix-length-range /21-/32; 185.1.94.0/24 prefix-length-range /24-/32; 185.1.95.0/24 prefix-length-range /24-/32; 164.138.24.80/29 prefix-length-range /29-/32; 169.254.0.0/16 prefix-length-range /16-/32; } router-id 37.139.139.1; } protocols { bgp { local-as 57866; group coloclue_eun { description "Transit to Coloclue EUN"; local-address 37.139.140.26; peer-as 8283; neighbor 37.139.140.27; } group coloclue_dcg { description "Transit to Coloclue DCG"; local-address 37.139.140.22; peer-as 8283; neighbor 37.139.140.23; } group cloudnl { description "Transit for Cloud.nl"; local-address 37.139.150.4; peer-as 60950; neighbor 37.139.150.5; } } stp { interface ge-0/0/4.0 { disable; } } } security { screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } nat { source { rule-set trust-to-untrust { from zone trust; to zone untrust; rule source-nat-rule { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } } } policies { from-zone trust to-zone untrust { policy trust-to-untrust { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone trust to-zone trust { policy trust-to-trust { match { source-address any; destination-address any; application any; } then { permit; } } } } zones { security-zone trust { host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { vlan.0; vlan.104; vlan.110; ge-0/0/4.0; ge-0/0/5.0; vlan.1232; vlan.600; } } security-zone untrust { screen untrust-screen; } } } vlans { cloudnl-transit { vlan-id 600; interface { ge-0/0/4.0; } l3-interface vlan.600; } coloclue-crossconnect { vlan-id 108; interface { ge-0/0/0.0; ge-0/0/1.0; } } coloclue-transit-dcg { vlan-id 110; interface { ge-0/0/1.0; } l3-interface vlan.110; } coloclue-transit-eun { vlan-id 104; interface { ge-0/0/0.0; } l3-interface vlan.104; } management { vlan-id 1232; l3-interface vlan.1232; } vlan-trust { vlan-id 3; l3-interface vlan.0; } }