[CIS 553 Spring 2015] (GROUP L) Project 1 Part 3 Config

## Last changed: 2015-02-28 19:19:18 UTC
version 11.4R7.5;
system {
    host-name byway1;
    root-authentication {
        encrypted-password "$1$FnTmFZYN$UX4Vu53Y0Bgi354AdaeEc0"; ## SECRET-DATA
    }
    services {
        ssh {
            protocol-version v2;
        }
        netconf {
            ssh;
        }
        web-management {
            http;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    ge-0/0/0 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/1 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan_100;
                }
            }
        }
    }
    ge-0/0/2 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan_200;
                }
            }
        }
    }
    ge-0/0/3 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan_300;
                }
            }
        }
    }
    ge-0/0/6 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/1/0 {
        unit 0 {
            family ethernet-switching;
        }
    }
    xe-0/1/0 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/1/1 {
        unit 0 {
            family ethernet-switching;
        }
    }
    xe-0/1/1 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/1/2 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/1/3 {
        unit 0 {
            family ethernet-switching;
        }
    }
    vlan {
        unit 100 {
            family inet {
                address 10.1.1.1/24;
            }
        }
        unit 200 {
            family inet {
                address 10.2.2.1/24;
            }
        }
        unit 300 {
            family inet {
                address 10.10.10.1/24;
            }
        }
    }
    vme {
        unit 0 {
            family inet {
                address 158.130.6.250/23;
            }
        }
    }
}
routing-options {
    static {
        route 0.0.0.0/0 next-hop 158.130.6.1;
    }
}
protocols {
    ospf {
        area 0.0.0.0 {
            interface vlan.100;
            interface vlan.200;
            interface vlan.300;
        }
    }
    igmp-snooping {
        vlan all;
    }
    rstp;
    lldp {
        interface all;
    }
    lldp-med {
        interface all;
    }
}
class-of-service {
    forwarding-classes {
        queue 1 congestion;
        queue 2 udp_only;
    }
    interfaces {
        ge-0/0/2 {
            scheduler-map bandwidth-limit;
            shaping-rate 1k;
        }
    }
    scheduler-maps {
        bandwidth-limit {
            forwarding-class udp_only scheduler Q0;
            forwarding-class congestion scheduler Q1;
        }
    }
    schedulers {
        Q0 {
            buffer-size percent 50;
            priority strict-high;
        }
        Q1 {
            transmit-rate percent 20;
            buffer-size percent 50;
            priority low;
        }
    }
}
firewall {
    family ethernet-switching {
        filter filt {
            term termOne {
                from {
                    source-address {
                        10.2.2.61/32;
                    }
                    protocol udp;
                }
                then {
                    forwarding-class udp_only;
                    loss-priority low;
                    policer theFuzz;
                }
            }
            term termTwo {
                then {
                    forwarding-class congestion;
                    loss-priority high;
                }
            }
        }
    }
    policer theFuzz {
        if-exceeding {
            bandwidth-limit 5m;
            burst-size-limit 300;
        }
        then discard;
    }
}
services {
    rpm {
        probe 10.1.1.1 {
            test icmp-test {
                probe-type icmp-ping-timestamp;
                target address 10.2.2.1;
                probe-count 15;
                probe-interval 1;
                test-interval 600;
            }
        }
    }
}
ethernet-switching-options {
    storm-control {
        interface all;
    }
}
vlans {
    vlan_100 {
        vlan-id 100;
        l3-interface vlan.100;
    }
    vlan_200 {
        vlan-id 200;
        filter {
            input filt;
        }
        l3-interface vlan.200;
    }
    vlan_300 {
        vlan-id 300;
        l3-interface vlan.300;
    }
}
poe {
    interface all;
}