version 6.4R2.4;
system {
    host-name berlin;
    domain-name gate.21c3.ccc.de;
    backup-router 172.18.30.200 destination 0.0.0.0/0;
    time-zone Europe/Berlin;
    authentication-order password;
    ports {
        console type vt100;
    }
    root-authentication {
        encrypted-password "$1$rRQeJ.Wc$bh.8xMqwc.uX9fNNzuFvL0"; ## SECRET-DATA
    }
    name-server {
        195.74.0.47;
        212.21.72.1;
        212.42.242.2;
        212.84.206.1;
    }
    login {
        message "You are accessing CCC 2004 Berlin. ";
        user alf {
            uid 2003;
            class superuser;
            authentication {
                encrypted-password "$1$KTkcfbMz$seOL40pHBPUfHE4cdldcp1"; ## SECRET-DATA
            }
        }
        user blackwing {
            uid 2010;
            class superuser;
            authentication {
                ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA0B2m7Nh4OElq+b5QbiC2RTGVU/m3NthJIHrrMzQV/VIRkARtYwEClEA+bH/2/krl8mbh3fMPb9XT8sXdPsRKTSAdxzoSMS1akZnu4MF2tX9VsQks//Xpu/wGWIk2yclE/uhxM8/M38CUpFdWo8dLgUDqgab02H0PEAUUsLqsXrs= blackwing"; ## SECRET-DATA
            }
        }           
        user czmok {
            uid 2011;
            class superuser;
            authentication {
                encrypted-password "$1$kgFeGUCE$DNlzYZy.npsOu/jh8zNoR."; ## SECRET-DATA
                ssh-dsa "ssh-dss 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 czmok@leuchtkerze"; ## SECRET-DATA
            }
        }
    }
    services {
        ssh {
            protocol-version v2;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
    }
    ntp {
        server 192.168.242.2;
        server 192.168.242.1;
        source-address 192.168.242.91;
    }
}
interfaces {        
    fe-0/1/0 {
        description "-- Uplink Cogent 100 mbit";
        speed 100m;
        fastether-options {
            no-flow-control;
        }
        unit 0 {
            family inet {
                address 212.20.156.86/30;
            }
        }
    }
    fe-0/1/2 {
        description InternalManagement;
        speed 100m;
        link-mode full-duplex;
        fastether-options {
            no-flow-control;
        }
        unit 0 {
            family inet {
                address 192.168.242.91/25;
            }
        }
    }
    ge-1/3/0 {
        description PrimaryTrunk;
        vlan-tagging;
        link-mode full-duplex;
        unit 0 {
            description BCIX100;
            vlan-id 100;
            family inet {
                address 193.178.185.101/25;
            }
        }
        unit 1 {
            description BCIX102;
            vlan-id 102;
            family inet6 {
                address 2001:7F8:19:1::85d8:2/64;
            }
        }
        unit 2 {
            description CCC-IPv4;
            vlan-id 910;
            family inet {
                address 82.130.0.2/29;
            }
        }
        unit 3 {
            description BCIX102;
            vlan-id 911;
            family inet6 {
                address 2001:1520:21c3:ffff::2/64;
            }
        }
        unit 921 {
            description I21_VIA_SWITCH;
            vlan-id 921;
            family inet {
                address 84.233.147.226/30;
            }
        }
    }
    fxp0 {
        unit 0 {
            family inet {
                address 172.18.30.2/16;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 127.0.0.1/32;
            }
        }
    }
}
routing-options {
    rib inet.0 {
        static {
            route 82.130.0.0/18 discard;
        }
    }
    static {
        route 0.0.0.0/0 {
            next-hop 212.20.156.85;
            no-readvertise;
        }
    }
    autonomous-system 34264;
}
protocols {
    bgp {
        group upstream-cogent {
            type external;
            log-updown;
            import upstream-cogent-in;
            export [ next-hop-self source-AS24364 ];
            local-as 34264;
            neighbor 212.20.156.85 {
                local-address 212.20.156.86;
                authentication-key "$9$UjiHm5Qnt0BfTORhcleXxNdwg"; ## SECRET-DATA
                peer-as 174;
            }
        }
        group dhosting {
            type external;
            export [ next-hop-self source-AS24364 ];
            peer-as 12732;
            neighbor 193.178.185.1 {
                description dhosting-20c3;
                family inet {
                    unicast;
                }
            }
            neighbor 193.178.185.2 {
                description dhosting-20c3;
                family inet {
                    unicast;
                }
            }
            neighbor 193.178.185.10 {
                description dhosting-20c3;
                family inet {
                    unicast;
                }
            }
            neighbor 2001:7F8:19:1::31BC:1 {
                family inet6 {
                    unicast;
                }
            }
            neighbor 2001:7F8:19:1::31BC:2 {
                description dhosting-20c3;
                family inet6 {
                    unicast;
                }
            }
            neighbor 2001:7F8:19:1::31BC:3 {
                description dhosting-20c3;
                family inet6 {
                    unicast;
                }
            }
        }
        group upstream-i21 {
            type external;
            log-updown;
            import upstream-i21-in;
            export [ next-hop-self source-AS24364 ];
            local-as 34264;
            neighbor 84.233.147.225 {
                peer-as 8928;
            }
        }
        group ccc {
            type internal;
            neighbor 82.130.0.3 {
                family inet {
                    unicast;
                }
            }
            neighbor 82.130.0.1 {
                family inet {
                    unicast;
                }
            }
            neighbor 2001:7F8:19:1::85D8:2 {
                family inet6 {
                    unicast;
                }
            }
            neighbor 2001:7F8:19:1::85D8:3 {
                family inet6 {
                    unicast;
                }
            }
            neighbor 82.130.0.2 {
                family inet {
                    unicast;
                }
            }
            neighbor 2001:7F8:19:1::85D8:1 {
                family inet6 {
                    unicast;
                }
            }       
        }
    }
}
policy-options {
    policy-statement next-hop-self {
        term set-hop {
            then {
                next-hop self;
                next policy;
            }
        }
    }
    policy-statement upstream-cogent-in {
        term set-locpref {
            then {
                local-preference 100;
                accept;
            }
        }
    }
    policy-statement source-AS24364 {
        from {
            protocol static;
            route-filter 82.130.0.0/18 exact;
        }
        then {
            origin igp;
            accept;
        }
    }
    policy-statement upstream-i21-in {
        term set-locpref {
            then {
                local-preference 110;
                accept;
            }
        }
    }               
}