version 15.3
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service sequence-numbers
service counters max age 5
no service dhcp
no platform punt-keepalive disable-kernel-core
platform console virtual
!
hostname csr1000v
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
logging buffered 65535
enable secret 5 xxxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
clock timezone JST 9 0
no ip source-route
!
!
!
!
!


no ip domain lookup
!
!
!
!
!
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
username admin privilege 15 secret 5 $1$BlOm$igkCrzZj/nED9mjRaXmXy.
!
redundancy
 mode none
!
!
!
ip tftp source-interface GigabitEthernet0
!
!
!
!
interface GigabitEthernet1
 ip address 192.168.1.48 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 negotiation auto
!
interface GigabitEthernet2
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address dhcp
 negotiation auto
!
router bgp 65000
 bgp router-id 192.168.1.48
 bgp log-neighbor-changes
 bgp deterministic-med
 no bgp default ipv4-unicast
 bgp rpki server tcp 210.173.170.254 port 323 refresh 60
 neighbor 192.168.1.49 remote-as 65001
 neighbor 192.168.1.49 description ### To_firefly ###
 neighbor 192.168.1.49 timers 30 90
 !
 address-family ipv4
  bgp bestpath prefix-validate allow-invalid
  neighbor 192.168.1.49 activate
  neighbor 192.168.1.49 remove-private-as
  neighbor 192.168.1.49 soft-reconfiguration inbound
  neighbor 192.168.1.49 route-map origin-validation in
 exit-address-family
!
!
virtual-service csr_mgmt
 activate
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 192.168.1.254
!
!
route-map origin-validation permit 10
 match rpki invalid
 set local-preference 90
!
route-map origin-validation permit 20
 match rpki not-found
 set local-preference 100
!
route-map origin-validation permit 30
 match rpki valid
 set local-preference 110
!
!
!
control-plane
!
!
line con 0
 exec-timeout 30 0
 exec prompt timestamp
 stopbits 1
line aux 0
 stopbits 1
line vty 0
 exec-timeout 30 0
 logging synchronous
 login local
 exec prompt timestamp
line vty 1
 exec-timeout 30 0
 logging synchronous
 login local
 exec prompt timestamp
 length 0
line vty 2 4
 exec-timeout 30 0
 logging synchronous
 login local
 exec prompt timestamp
!
ntp server 192.168.1.254
onep
!
end