
## Last commit: 2026-02-03 16:27:33 GMT by isivkov
version 21.4R3-S9.5;
groups {
    MAINTENANCE {
        system {
            login {
                announcement "DEVICE MAINTENANCE POLICY IS APPLIED ON THIS DEVICE\n\n'show configuration groups MAINTENANCE' for details\n";
            }
        }
        policy-options {
            policy-statement <*_BGP_ADV_V4> {
                term accept-example-ipv4-public-prefixes {
                    from {
                        route-filter-list CORP_BGP_ADV_V4_PREFIXES;
                    }
                    then {
                        as-path-prepend "64900 64900 64900 64900 64900";
                        accept;
                    }
                }
            }
            policy-statement <*_BGP_ADV_V6> {
                term accept-example-ipv6-public-prefixes {
                    from {
                        route-filter-list CORP_BGP_ADV_V6_PREFIXES;
                    }
                    then {
                        as-path-prepend "64900 64900 64900 64900 64900";
                        accept;
                    }
                }
            }
        }
        protocols {
            isis {
                interface <lo0.*> {
                    level 2 metric 16777214;
                }
                overload;
            }
        }
    }
    DDOS {
        system {
            login {
                announcement "DEVICE DDOS POLICY IS APPLIED ON THIS DEVICE\n\n'show configuration groups DDOS' for details\n";
            }
        }
        policy-options {
            policy-statement LUMEN_BGP_ADV_V4 {
                term accept-example-ipv4-public-prefixes {
                    from {
                        route-filter-list CORP_BGP_ADV_V4_PREFIXES;
                    }
                    then {
                        as-path-prepend 64900;
                        accept;
                    }
                }
            }
            policy-statement <*_BGP_ADV_V4> {
                term accept-example-ipv4-public-prefixes {
                    from {
                        route-filter-list CORP_BGP_ADV_V4_PREFIXES;
                    }
                    then {
                        as-path-prepend "64900 64900 64900 64900 64900";
                        accept;
                    }
                }
            }
            policy-statement <*_BGP_ADV_V6> {
                term accept-example-ipv6-public-prefixes {
                    from {
                        route-filter-list CORP_BGP_ADV_V6_PREFIXES;
                    }
                    then {
                        as-path-prepend "64900 64900 64900 64900 64900";
                        accept;
                    }
                }
            }
        }
    }
}
system {
    host-name peer-a-rt-01;
    root-authentication {
        encrypted-password "<REDACTED>";
    }
    login {
        retry-options {
            tries-before-disconnect 3;
            backoff-threshold 3;
            backoff-factor 10;
            lockout-period 4;
        }
        idle-timeout 15;
        class config_backup {
            permissions [ secret view view-configuration ];
            deny-commands all;
        }
        class config_control {
            permissions [ configure control view ];
        }
        class network-operations-team {
            permissions all;
        }
        class read_only {
            permissions [ network routing view-configuration ];
            allow-commands show;
            deny-commands "(clear)|(file)|(file show)|(help)|(load)|(monitor)|(op)|(request)|(save)|(set)|(start)|(test)";
            deny-configuration all;
        }
        user netadmin4 {
            uid 1117;
            class network-operations-team;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> admin@example.com";
            }
        }
        user gandalf {
            uid 2105;
            class config_control;
            authentication {
                ssh-rsa "<REDACTED-SSH-KEY> gandalf";
            }
        }
        user netadmin3 {
            uid 1121;
            class network-operations-team;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> admin@example.com";
            }
        }
        user isivkov {
            uid 1122;
            class network-operations-team;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> Ilya.Sivkov@YubiKey-5C-NFC";
                ssh-ecdsa "<REDACTED-SSH-KEY> Ilya.Sivkov@YubiKey-5-NFC";
            }
        }
        user junos_backup {
            uid 2101;
            class config_backup;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY>";
            }
        }
        user netadmin5 {
            uid 1112;
            class read_only;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> admin@example.com";
            }
        }
        user netadmin2 {
            uid 1123;
            class network-operations-team;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> admin@example.com";
            }
        }
        user oelliott {
            uid 1120;
            class read_only;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> oliver.elliott@YubiKey1";
                ssh-ecdsa "<REDACTED-SSH-KEY> oliver.elliott@YubiKey2";
            }
        }
        user sdaniels {
            uid 1119;
            class read_only;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> shaun Key Management";
                ssh-ecdsa "<REDACTED-SSH-KEY> shaun Key Management";
            }
        }
        user ttotev {
            uid 1115;
            class read_only;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> ttotev@mirkwoodmac";
            }
        }
        user velvet {
            uid 2000;
            class network-operations-team;
            authentication {
                encrypted-password "<REDACTED>";
            }
        }
        user netadmin1 {
            uid 1116;
            class network-operations-team;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> admin@example.com";
            }
        }
        user netadmin6 {
            uid 1125;
            class network-operations-team;
            authentication {
                ssh-ecdsa "<REDACTED-SSH-KEY> admin@example.com";
            }
        }
        message "\n\n=================================================================\n\n WARNING! \n\n\n This is a private computer system. Unauthorized access or use \n is prohibited and subject to prosecution and/or disciplinary \n action. All use of this system constitutes consent to \n monitoring at all times and users are not entitled to any \n expectation of privacy. If monitoring reveals possible evidence \n of violation of criminal statutes, this evidence and any other \n related information, including identification information about \n the user, may be provided to law enforcement officials. \n If monitoring reveals violations of security regulations or \n unauthorized use, employees who violate security regulations or \n make unauthorized use of this system are subject to appropriate \n disciplinary action.\n\n=================================================================\n\n";
    }
    services {
        ssh {
            root-login deny;
            max-sessions-per-connection 32;
            sftp-server;
        }
        extension-service {
            request-response {
                grpc {
                    clear-text {
                        port 32767;
                    }
                    skip-authentication;
                }
            }
            notification {
                allow-clients {
                    address [ 10.1.238.240/32 10.1.247.240/32 ];
                }
            }
        }
        netconf {
            ssh;
        }
    }
    domain-name net.example.com;
    time-zone GMT;
    no-redirects;
    no-redirects-ipv6;
    no-ping-time-stamp;
    internet-options {
        no-source-quench;
    }
    authentication-order password;
    name-server {
        10.1.251.12;
        10.1.251.18;
    }
    schema {
        openconfig {
            unhide;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        host 10.1.148.10 {
            any notice;
        }
        host 10.1.238.240 {
            any notice;
            authorization info;
            match "!(.*usage requires a license.*|.*is Unreachable.*|.*last message repeated.*|.*kernel time sync enabled.*|.*tcp_timer_keep.*|.*RT_IPSEC_BAD_SPI.*|.*JTASK_IO_CONNECT_FAILED.*)";
        }
        file default-log-messages {
            any any;
            match "(requested 'commit' operation)|(requested 'commit synchronize' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|QF_NODE|QF_SERVER_NODE_GROUP|QF_INTERCONNECT|QF_DIRECTOR|QF_NETWORK_NODE_GROUP|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)";
            archive size 5m files 10;
            structured-data;
        }
        file messages {
            any notice;
            authorization info;
            match "!(.*usage requires a license.*|.*is Unreachable.*|.*last message repeated.*|.*kernel time sync enabled.*|.*tcp_timer_keep.*|.*RT_IPSEC_BAD_SPI.*|.*JTASK_IO_CONNECT_FAILED.*)";
            archive size 5m files 10;
            structured-data;
        }
        source-address 10.3.254.7;
    }
    ddos-protection {
        traceoptions {
            file ddos-protection size 5m files 3 world-readable;
            level all;
            flag protocol;
            flag events;
        }
        global {
            flow-report-rate 100;
        }
        protocols {
            icmp {
                aggregate {
                    flow-detection-mode on;
                    flow-level-bandwidth {
                        subscriber 1000;
                        logical-interface 20000;
                    }
                    flow-level-detection {
                        subscriber on;
                        logical-interface on;
                        physical-interface on;
                    }
                }
            }
            arp {
                aggregate {
                    flow-detection-mode on;
                    flow-level-bandwidth {
                        subscriber 1000;
                        logical-interface 20000;
                    }
                    flow-level-detection {
                        subscriber on;
                        logical-interface on;
                        physical-interface on;
                    }
                }
            }
            ttl {
                aggregate {
                    flow-detection-mode on;
                    flow-level-bandwidth {
                        subscriber 1000;
                        logical-interface 20000;
                    }
                    flow-level-detection {
                        subscriber on;
                        logical-interface on;
                        physical-interface on;
                    }
                }
            }
            ndpv6 {
                invalid-hop-limit {
                    disable-logging;
                }
            }
        }
    }
    ntp {
        server 10.1.251.49;
        server 10.1.238.49;
        server 10.1.247.49;
        server 10.1.243.49;
        source-address 10.3.254.7;
    }
}
chassis {
    aggregated-devices {
        ethernet {
            device-count 20;
        }
    }
    fpc 0 {
        pic 0 {
            number-of-ports 0;
        }
        pic 1 {
            port 0 {
                speed 100g;
            }
            port 1 {
                speed 100g;
            }
            port 2 {
                speed 100g;
            }
            port 3 {
                speed 100g;
            }
            port 4 {
                speed 100g;
            }
            port 5 {
                speed 100g;
            }
            port 6 {
                speed 100g;
            }
            port 7 {
                speed 100g;
            }
            port 8 {
                speed 100g;
            }
            port 9 {
                speed 100g;
            }
            port 10 {
                number-of-sub-ports 4;
                speed 10g;
            }
            port 11 {
                number-of-sub-ports 4;
                speed 10g;
            }
        }
    }
}
interfaces {
    et-0/1/0 {
        description peer-a-rt-02;
        gigether-options {
            802.3ad ae0;
        }
    }
    et-0/1/1 {
        description peer-a-rt-02;
        gigether-options {
            802.3ad ae0;
        }
    }
    et-0/1/2 {
        description peer-a-sw-01a;
        mtu 9216;
        unit 0 {
            family inet {
                address 10.2.42.50/31;
            }
            family inet6 {
                address 2a07:7940:dc:18:51:101:0:2/127;
            }
        }
    }
    et-0/1/3 {
        description peer-a-sw-01b;
        mtu 9216;
        unit 0 {
            family inet {
                address 10.2.42.54/31;
            }
            family inet6 {
                address 2a07:7940:dc:18:51:121:0:2/127;
            }
        }
    }
    et-0/1/4 {
        description peer-a-ISP-TransitB-447600952;
        unit 0 {
            family inet {
                filter {
                    input filter-internet-traffic;
                }
                address 203.0.113.185/30;
            }
            family inet6 {
                filter {
                    input filter-internet-traffic-v6;
                }
                address 2001:1900:5:2:2::1a7a/126;
            }
        }
    }
    et-0/1/5 {
        description peer-a-IX-DECIX;
        mtu 9216;
        unit 0 {
            family inet {
                filter {
                    input filter-internet-traffic;
                }
                address 198.51.100.134/21;
            }
            family inet6 {
                filter {
                    input filter-internet-traffic-v6;
                }
                address 2001:7f8::8bd1:0:1/64;
            }
        }
    }
    et-0/1/6 {
        description peer-a-MCC-Microsoft-CAS-140448-W2X9F0;
        gigether-options {
            802.3ad ae6;
        }
    }
    et-0/1/7 {
        description peer-a-rt-01-WL-dc04-rt-02-LE-305718;
        mtu 9216;
        unit 0 {
            family inet {
                address 192.0.2.208/31;
            }
            family iso;
            family inet6 {
                address 2a07:7940:bb::26/127;
            }
        }
    }
    et-0/1/8 {
        description peer-a-ntw-aci-01;
        gigether-options {
            802.3ad ae10;
        }
    }
    et-0/1/9 {
        description peer-a-ntw-aci-01;
        gigether-options {
            802.3ad ae10;
        }
    }
    xe-0/1/10:0 {
        description peer-a-ntw-infra-01;
        unit 0 {
            family inet {
                address 10.2.200.33/27 {
                    preferred;
                }
                address 10.2.249.4/31;
            }
        }
    }
    xe-0/1/10:3 {
        description peer-a-fw-01b;
        encapsulation ethernet-bridge;
        unit 0;
    }
    xe-0/1/11:0 {
        description peer-a-EquinixMLPE-23082593;
        gigether-options {
            802.3ad ae4;
        }
    }
    xe-0/1/11:3 {
        description peer-a-fw-01a;
        encapsulation ethernet-bridge;
        unit 0;
    }
    ae0 {
        description peer-a-rt-02;
        mtu 9216;
        aggregated-ether-options {
            lacp {
                active;
                periodic fast;
            }
        }
        unit 0 {
            family inet {
                address 10.2.254.18/31;
            }
            family iso;
            family inet6 {
                address 2a07:7940:bb::a/127;
            }
        }
    }
    ae4 {
        description peer-a-IX-EquinixMLPE;
        mac 00:33:00:00:70:04;
        aggregated-ether-options {
            lacp {
                active;
                periodic fast;
            }
        }
        unit 0 {
            family inet {
                filter {
                    input filter-internet-traffic;
                }
                address 198.51.100.24/24;
            }
            family inet6 {
                filter {
                    input filter-internet-traffic-v6;
                }
                address 2001:7f8:bd::3:5793:1/64;
            }
        }
    }
    ae6 {
        description peer-a-PEER-Microsoft;
        mtu 9216;
        aggregated-ether-options {
            lacp {
                active;
                periodic fast;
            }
        }
        unit 0 {
            family inet {
                filter {
                    input filter-internet-traffic;
                }
                address 198.51.100.166/31;
            }
            family inet6 {
                filter {
                    input filter-internet-traffic-v6;
                }
                address 2a01:111:2000:1::2045/126;
            }
        }
    }
    ae10 {
        description peer-a-ntw-aci-01;
        flexible-vlan-tagging;
        mtu 9216;
        encapsulation flexible-ethernet-services;
        aggregated-ether-options {
            lacp {
                active;
                periodic fast;
            }
        }
        unit 10 {
            description peer-a-ntw-aci-01-vlan10;
            vlan-id 10;
            family inet {
                address 203.0.113.76/31;
            }
        }
        unit 20 {
            description peer-a-ntw-aci-01-gw;
            vlan-id 20;
            family inet {
                address 10.5.128.1/25;
            }
        }
        unit 3901 {
            description peer-a-ntw-aep-vm-gw;
            vlan-id 3901;
            family inet {
                address 10.5.128.129/25;
            }
            family inet6 {
                address 2a07:7940:ae:18::1/64;
            }
        }
    }
    fxp0 {
        description DCN-Management;
        unit 0 {
            family inet {
                filter {
                    input filter-all-in-one;
                }
                address 10.1.42.51/24 {
                    preferred;
                }
                address 192.168.0.51/24;
            }
            family inet6 {
                filter {
                    input filter-all-in-one-v6;
                }
            }
        }
    }
    irb {
        description peer-a-fw-01;
        unit 0 {
            family inet {
                address 10.2.254.1/31;
            }
            family inet6 {
                address 2a07:7940:dc:18:51:1:0:3/127;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                filter {
                    input filter-all-in-one;
                }
                address 10.3.254.7/32;
            }
            family iso {
                address 49.0001.0100.0325.4007.00;
            }
            family inet6 {
                filter {
                    input filter-all-in-one-v6;
                }
                address 2a07:7940:0:ffff:18::1/128;
            }
        }
    }
}
snmp {
    location PEER-A;
    v3 {
        usm {
            local-engine {
                user snmp_librenms_amer {
                    authentication-sha {
                        authentication-key "REDACTED";
                    }
                    privacy-aes128 {
                        privacy-key "<REDACTED>";
                    }
                }
                user snmp_librenms_emea {
                    authentication-sha {
                        authentication-key "REDACTED";
                    }
                    privacy-aes128 {
                        privacy-key "<REDACTED>";
                    }
                }
                user snmp_librenms_apac {
                    authentication-sha {
                        authentication-key "REDACTED";
                    }
                    privacy-aes128 {
                        privacy-key "<REDACTED>";
                    }
                }
                user snmp_telegraf {
                    authentication-sha {
                        authentication-key "REDACTED";
                    }
                    privacy-aes128 {
                        privacy-key "<REDACTED>";
                    }
                }
            }
        }
        vacm {
            security-to-group {
                security-model usm {
                    security-name snmp_librenms_amer {
                        group snmp_group_ro;
                    }
                    security-name snmp_librenms_emea {
                        group snmp_group_ro;
                    }
                    security-name snmp_librenms_apac {
                        group snmp_group_ro;
                    }
                    security-name snmp_telegraf {
                        group snmp_group_ro;
                    }
                }
            }
            access {
                group snmp_group_ro {
                    default-context-prefix {
                        security-model usm {
                            security-level privacy {
                                read-view snmp_view;
                            }
                        }
                    }
                }
            }
        }
    }
    engine-id {
        local 00c52c443d42;
    }
    view snmp_view {
        oid .1 include;
    }
}
policy-options {
    prefix-list 636-to-peer-c-security {
        198.51.100.188/27;
        198.51.100.114/32;
        192.0.2.122/32;
        192.0.2.123/32;
        203.0.113.129/32;
        198.51.100.115/32;
        198.51.100.179/24;
        192.0.2.26/27;
        203.0.113.106/25;
        203.0.113.156/32;
        192.0.2.197/25;
        192.0.2.13/28;
    }
    prefix-list BGP-locals-inst-v4 {
        apply-path "routing-instances <*> protocols bgp group <*> local-address <*.*>";
    }
    prefix-list BGP-locals-inst-v6 {
        apply-path "routing-instances <*> protocols bgp group <*> neighbor <*:*> local-address <*:*>";
    }
    prefix-list BGP-locals-v4 {
        apply-path "protocols bgp group <*> neighbor <*> local-address <*.*>";
    }
    prefix-list BGP-locals-v6 {
        apply-path "protocols bgp group <*> neighbor <*:*> local-address <*:*>";
    }
    prefix-list BGP-neighbors-inst-v4 {
        apply-path "routing-instances <*> protocols bgp group <*> neighbor <*.*>";
    }
    prefix-list BGP-neighbors-inst-v6 {
        apply-path "routing-instances <*> protocols bgp group <*> neighbor <*:*>";
    }
    prefix-list BGP-neighbors-v4 {
        apply-path "protocols bgp group <*> neighbor <*.*>";
    }
    prefix-list BGP-neighbors-v6 {
        apply-path "protocols bgp group <*> neighbor <*:*>";
    }
    prefix-list DNS-servers-v4 {
        apply-path "system name-server <*.*>";
    }
    prefix-list DNS-servers-v6 {
        apply-path "system name-server <*:*>";
    }
    prefix-list GRPC-SERVERS-v4 {
        10.1.238.240/32;
        10.1.247.240/32;
        10.1.251.240/32;
    }
    prefix-list LOCALS-v4 {
        apply-path "interfaces <*> unit <*> family inet address <*>";
    }
    prefix-list LOCALS-v6 {
        apply-path "interfaces <*> unit <*> family inet6 address <*>";
    }
    prefix-list MICROSOFT_IPS {
        203.0.113.139/11;
        203.0.113.157/12;
        192.0.2.102/12;
        192.0.2.169/14;
    }
    prefix-list NTP-servers-v4 {
        apply-path "system ntp server <*.*>";
    }
    prefix-list NTP-servers-v6 {
        apply-path "system ntp server <*:*>";
    }
    prefix-list RADIUS-servers {
        apply-path "system radius-server <*>";
    }
    prefix-list SNMP-clients {
        10.1.238.199/32;
        10.1.238.240/32;
        10.1.243.199/32;
        10.1.247.240/32;
        10.1.251.42/32;
        10.1.251.199/32;
    }
    prefix-list SNMP-community-clients {
        apply-path "snmp community REDACTED clients <*>";
    }
    prefix-list example-lighthouse {
        198.51.100.55/32;
        203.0.113.65/32;
    }
    prefix-list example-office-networks {
        192.0.2.216/32;
        192.0.2.186/28;
        203.0.113.99/32;
        198.51.100.109/32;
        192.0.2.170/29;
        192.0.2.83/29;
        198.51.100.138/32;
        198.51.100.147/27;
        192.0.2.190/32;
        198.51.100.249/32;
        198.51.100.91/32;
        198.51.100.179/24;
        198.51.100.210/32;
        198.51.100.183/32;
    }
    prefix-list example-office-networks-v6 {
        2405:a280:ff80::/44;
        2a07:7940:fffd::/48;
        2a07:7940:fffe::/48;
        2a07:7940:ffff::/48;
        2a07:7947:ff40::/44;
        2a07:7947:ff80::/44;
        2a07:7947:ffc0::/44;
    }
    prefix-list all-dhcp-relay-pxe-servers {
        apply-path "forwarding-options dhcp-relay server-group <*> <*>";
    }
    prefix-list all-unit0-interfaces {
        apply-path "interfaces <*> unit 0 family inet address <*>";
    }
    prefix-list dco-external-ssh {
        198.51.100.19/29;
        198.51.100.251/32;
        203.0.113.47/32;
        203.0.113.156/32;
        192.0.2.240/32;
    }
    prefix-list dr2-public-ip-net {
        198.51.100.117/25;
        198.51.100.228/27;
        192.0.2.193/25;
        203.0.113.31/25;
        192.0.2.189/24;
        192.0.2.160/25;
        198.51.100.229/25;
        203.0.113.158/25;
        198.51.100.215/26;
        192.0.2.6/26;
        198.51.100.245/26;
        203.0.113.252/25;
        198.51.100.202/26;
        192.0.2.86/25;
        192.0.2.180/25;
        203.0.113.182/25;
        198.51.100.230/24;
        198.51.100.83/25;
        203.0.113.116/26;
        192.0.2.32/26;
        198.51.100.140/26;
        203.0.113.170/27;
        192.0.2.183/25;
        192.0.2.197/26;
        192.0.2.112/26;
        198.51.100.74/25;
        192.0.2.219/24;
        203.0.113.210/24;
        203.0.113.248/25;
        192.0.2.158/26;
        198.51.100.153/25;
        203.0.113.73/24;
        198.51.100.29/25;
        198.51.100.143/25;
        203.0.113.105/25;
        203.0.113.21/25;
    }
    prefix-list dr2-public-ip-net-v6 {
        2602:80b:6012:97::/64;
        2602:80b:6012:99::/64;
        2602:80b:6036:97::/64;
        2602:80b:6039:97::/64;
        2602:80b:603a:97::/64;
        2a07:7940:12:97::/64;
        2a07:7940:12:99::/64;
        2a07:7940:14:97::/64;
        2a07:7940:14:98::/64;
        2a07:7940:14:99::/64;
        2a07:7940:14:100::/64;
        2a07:7940:16:99::/64;
        2a07:7940:18:97::/64;
        2a07:7940:18:98::/64;
        2a07:7940:18:99::/64;
        2a07:7940:18:100::/64;
    }
    prefix-list elk-servers-v4 {
        198.51.100.2/32;
        203.0.113.32/32;
        192.0.2.104/32;
        203.0.113.79/32;
    }
    prefix-list global-example-fwag {
        198.51.100.23/32;
        192.0.2.211/32;
        192.0.2.178/32;
        198.51.100.57/32;
        203.0.113.164/32;
        192.0.2.58/32;
        192.0.2.14/32;
        192.0.2.171/32;
        203.0.113.208/32;
        203.0.113.242/32;
        198.51.100.201/32;
        192.0.2.162/32;
        198.51.100.114/32;
        192.0.2.76/32;
        192.0.2.249/32;
        203.0.113.160/32;
        198.51.100.161/32;
        192.0.2.103/32;
        203.0.113.187/32;
        203.0.113.140/32;
        192.0.2.98/32;
        198.51.100.226/32;
        192.0.2.124/32;
        203.0.113.46/32;
        192.0.2.252/32;
        203.0.113.86/32;
        198.51.100.154/32;
        198.51.100.144/32;
        203.0.113.87/32;
        192.0.2.137/32;
        198.51.100.152/32;
        192.0.2.234/32;
        198.51.100.75/32;
        203.0.113.246/32;
        198.51.100.73/32;
        203.0.113.28/32;
        198.51.100.203/32;
        198.51.100.193/32;
        192.0.2.145/32;
        203.0.113.91/32;
        192.0.2.69/32;
        198.51.100.39/32;
        192.0.2.194/32;
        192.0.2.36/32;
        198.51.100.15/32;
        192.0.2.218/32;
        203.0.113.39/32;
        192.0.2.48/32;
        198.51.100.45/32;
        192.0.2.174/32;
        203.0.113.89/32;
        198.51.100.162/32;
        203.0.113.212/32;
        198.51.100.231/32;
        203.0.113.234/32;
        203.0.113.23/32;
        192.0.2.163/32;
        198.51.100.3/32;
        192.0.2.195/32;
        192.0.2.67/32;
        203.0.113.50/32;
        198.51.100.195/32;
        203.0.113.110/32;
        192.0.2.207/32;
        192.0.2.223/32;
        198.51.100.238/32;
        192.0.2.72/32;
        203.0.113.159/32;
        198.51.100.104/32;
        192.0.2.127/32;
        203.0.113.52/32;
        192.0.2.82/32;
        198.51.100.192/32;
        192.0.2.224/32;
        203.0.113.238/32;
        198.51.100.207/32;
        198.51.100.176/32;
        198.51.100.112/32;
        203.0.113.192/32;
        203.0.113.223/32;
        198.51.100.87/32;
        192.0.2.57/32;
        192.0.2.9/32;
        192.0.2.221/32;
        203.0.113.71/32;
        203.0.113.3/32;
        198.51.100.54/32;
        192.0.2.232/32;
        198.51.100.163/32;
        203.0.113.67/32;
        192.0.2.192/32;
        192.0.2.19/32;
        203.0.113.245/32;
        192.0.2.99/32;
        192.0.2.134/32;
        198.51.100.16/32;
        203.0.113.193/32;
        192.0.2.198/32;
        198.51.100.58/32;
        198.51.100.35/32;
        192.0.2.11/32;
        203.0.113.55/32;
        198.51.100.182/32;
        203.0.113.161/32;
        192.0.2.151/32;
        203.0.113.29/32;
        198.51.100.27/32;
        203.0.113.201/32;
        203.0.113.200/32;
        192.0.2.70/32;
        192.0.2.181/32;
        192.0.2.33/32;
        203.0.113.30/32;
        198.51.100.131/32;
        192.0.2.140/32;
        203.0.113.218/32;
        203.0.113.225/32;
        198.51.100.133/32;
        192.0.2.91/32;
        198.51.100.165/32;
        192.0.2.227/32;
    }
    prefix-list global-example-prefixes {
        192.0.2.184/22;
        198.51.100.10/22;
        192.0.2.131/22;
        198.51.100.101/22;
        203.0.113.117/23;
        203.0.113.184/23;
        203.0.113.37/22;
        192.0.2.50/22;
        203.0.113.38/22;
        203.0.113.222/22;
        192.0.2.136/23;
        198.51.100.169/23;
    }
    prefix-list global-example-prefixes-v6 {
        2405:a280:22::/48;
        2405:a280:32::/48;
        2405:a280:33::/48;
        2405:a280:34::/48;
        2405:a280:42::/48;
        2405:a280:43::/48;
        2602:80b:6012::/48;
        2602:80b:6013::/48;
        2602:80b:6014::/48;
        2602:80b:6015::/48;
        2602:80b:6016::/48;
        2602:80b:6022::/48;
        2602:80b:6032::/48;
        2602:80b:6033::/48;
        2602:80b:6034::/48;
        2602:80b:6035::/48;
        2602:80b:6036::/48;
        2602:80b:6037::/48;
        2602:80b:6038::/48;
        2602:80b:6039::/48;
        2602:80b:603a::/48;
        2602:80b:6042::/48;
        2602:80b:6044::/48;
        2602:80b:6045::/48;
        2602:80b:6046::/48;
        2602:80b:6047::/48;
        2a07:7940:12::/48;
        2a07:7940:13::/48;
        2a07:7940:15::/48;
        2a07:7940:16::/48;
        2a07:7940:17::/48;
        2a07:7940:18::/48;
        2a07:7940:41::/48;
        2a07:7940:42::/48;
        2a07:7940:44::/48;
        2a07:7940:45::/48;
        2a07:7940:46::/48;
        2a07:7940:47::/48;
        2a07:7940:48::/48;
    }
    prefix-list internet-DNS-servers-v4 {
        203.0.113.85/32;
        192.0.2.141/32;
        192.0.2.209/32;
        203.0.113.103/32;
    }
    prefix-list not-owned-by-example-prefixes {
        192.0.2.203/26;
        198.51.100.205/26;
        198.51.100.105/24;
        192.0.2.121/22;
        203.0.113.107/24;
        192.0.2.59/27;
        203.0.113.5/26;
        198.51.100.246/26;
        198.51.100.102/26;
        192.0.2.65/26;
        203.0.113.168/24;
        198.51.100.121/24;
        203.0.113.145/27;
        198.51.100.234/26;
        192.0.2.202/26;
        198.51.100.84/26;
        198.51.100.237/27;
        192.0.2.81/28;
        192.0.2.228/24;
        192.0.2.168/24;
        192.0.2.189/24;
        203.0.113.19/26;
        192.0.2.177/24;
        192.0.2.115/24;
        198.51.100.123/24;
        198.51.100.180/24;
        203.0.113.153/24;
        203.0.113.231/26;
        203.0.113.243/27;
        192.0.2.222/25;
        203.0.113.57/26;
        198.51.100.124/26;
        192.0.2.132/27;
        203.0.113.203/26;
        192.0.2.61/24;
        203.0.113.72/24;
        203.0.113.154/27;
        198.51.100.230/24;
        192.0.2.210/25;
        203.0.113.147/26;
        203.0.113.54/24;
        198.51.100.1/26;
        198.51.100.248/27;
        198.51.100.216/28;
        198.51.100.26/26;
        203.0.113.109/24;
        192.0.2.185/26;
        198.51.100.119/27;
        198.51.100.12/27;
        198.51.100.224/26;
        192.0.2.13/28;
        192.0.2.133/26;
        192.0.2.1/25;
        203.0.113.251/25;
        192.0.2.3/25;
        198.51.100.42/26;
        198.51.100.222/27;
        198.51.100.94/26;
        203.0.113.204/27;
        203.0.113.73/24;
        203.0.113.125/24;
        192.0.2.251/25;
    }
    prefix-list not-owned-by-example-prefixes-v6 {
        2001:8c1:5840::/48;
        2001:1a68:37::/48;
        2401:a040:10::/48;
        2402:1c00:101::/48;
        2402:6c00:d003::/48;
        2405:ec00:fa03::/48;
        2806:1080:1500::/48;
        2806:1080:1700::/48;
        2a00:1a28:1154::/48;
        2a00:1a28:2411::/48;
        2a00:1f68:ff::/48;
        2a00:da60:b01::/48;
        2a01:288:400e::/48;
        2a01:ae20:851:4092::/64;
        2a02:480:3419::/48;
        2a02:a40:324::/48;
        2a02:2160:8001::/48;
        2a05:a900:100::/48;
        2a06:e8c0:a::/48;
        2a07:9300:8000::/48;
        2a0a:a142::/48;
        2c0f:1f00::/48;
    }
    prefix-list og-att-lte-ranges-GLB {
        198.51.100.219/32;
        192.0.2.2/30;
        192.0.2.173/30;
    }
    prefix-list on-prem-customers {
        203.0.113.53/32;
        192.0.2.73/32;
        198.51.100.65/32;
        198.51.100.212/32;
        192.0.2.77/32;
    }
    prefix-list on-prem-servers {
        198.51.100.2/32;
        203.0.113.32/32;
        192.0.2.104/32;
        203.0.113.79/32;
    }
    prefix-list pondmobile-lte-ranges {
        203.0.113.172/24;
        198.51.100.239/24;
    }
    prefix-list pondmobile-lte-ranges-AP {
        203.0.113.196/32;
        203.0.113.114/32;
    }
    prefix-list pondmobile-lte-ranges-EU {
        203.0.113.135/32;
        192.0.2.196/31;
        192.0.2.92/31;
        198.51.100.113/32;
        198.51.100.93/31;
        198.51.100.13/31;
        203.0.113.155/32;
        198.51.100.128/31;
        198.51.100.68/31;
        203.0.113.236/32;
        203.0.113.101/31;
        192.0.2.179/31;
        192.0.2.172/32;
        198.51.100.191/31;
        203.0.113.183/31;
        203.0.113.166/32;
        203.0.113.42/31;
        198.51.100.181/31;
        203.0.113.118/32;
        192.0.2.39/31;
        198.51.100.116/31;
        198.51.100.103/29;
        203.0.113.24/32;
        203.0.113.216/31;
        203.0.113.75/31;
        203.0.113.221/32;
        198.51.100.14/31;
        198.51.100.159/31;
        192.0.2.55/32;
        198.51.100.125/31;
        203.0.113.177/31;
        192.0.2.204/29;
        203.0.113.232/32;
        203.0.113.127/31;
        203.0.113.43/31;
    }
    prefix-list pondmobile-lte-ranges-US {
        198.51.100.31/31;
        192.0.2.43/29;
        203.0.113.51/29;
        203.0.113.219/30;
        203.0.113.219/32;
        198.51.100.60/31;
        192.0.2.89/32;
        203.0.113.56/30;
        192.0.2.155/32;
        198.51.100.170/31;
        198.51.100.78/29;
    }
    prefix-list public-NTP-servers-v4 {
        203.0.113.240/32;
        192.0.2.100/32;
        203.0.113.10/32;
        203.0.113.112/32;
    }
    prefix-list public-NTP-servers-v6 {
        2405:a280:33:66::49/128;
        2602:80b:6012:66::49/128;
        2a07:7940:12:66::49/128;
        2a07:7940:14:66::49/128;
        2a07:7940:18:66::49/128;
    }
    prefix-list source-ip-bfd {
        10.2.0.0/16;
    }
    prefix-list source-ip-prefixes {
        10.1.0.0/16;
    }
    prefix-list ztp-interface {
        apply-path "interfaces <*> unit 0 family inet address <10.2.*>";
    }
    route-filter-list CORP_BGP_ADV_V4_PREFIXES {
        198.51.100.121/24 exact;
        198.51.100.215/24 exact;
        203.0.113.72/24 exact;
        203.0.113.37/24 exact;
        203.0.113.116/24 exact;
        192.0.2.28/24 exact;
        192.0.2.197/24 exact;
        192.0.2.50/24 exact;
        192.0.2.71/24 exact;
        192.0.2.219/24 exact;
        203.0.113.210/24 exact;
    }
    route-filter-list CORP_BGP_ADV_V6_PREFIXES {
        2a07:7940:18::/48 exact;
    }
    policy-statement 1-X_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_IX_BGP_RCV_V4;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_1-X;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement 1-X_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_IX_BGP_RCV_V6;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_1-X;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement A1_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_A1;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement A1_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_A1;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CDNA_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_CDNA;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CDNA_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_CDNA;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement PEERB_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_PEERB;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement PEERB_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_PEERB;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement AWS_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_AWS;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement AWS_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_AWS;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement BAHNHOF_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_BAHNHOF;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement BAHNHOF_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_BAHNHOF;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement BB_BGP_ADV_V4 {
        term accept-all-bgp {
            from protocol bgp;
            then {
                next-hop self;
                accept;
            }
        }
        then reject;
    }
    policy-statement BB_BGP_ADV_V6 {
        term accept-all-bgp-self-v6 {
            from {
                family inet6;
                protocol bgp;
            }
            then {
                next-hop self;
                accept;
            }
        }
        then reject;
    }
    policy-statement BB_BGP_RCV_V4 {
        term accept-all-bgp-routes {
            from protocol bgp;
            then accept;
        }
        then reject;
    }
    policy-statement BB_BGP_RCV_V6 {
        term accept-all-bgp-v6-routes {
            from {
                family inet6;
                protocol bgp;
            }
            then accept;
        }
        then reject;
    }
    policy-statement BEZEQ_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_BEZEQ;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement BEZEQ_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_BEZEQ;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement BOUYGUES_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_BOUYGUES;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement BOUYGUES_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_BOUYGUES;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CELLCOM_BGP_ADV_V4 {
        term accept-example-ipv4-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                as-path-prepend "64900 64900 64900 64900 64900";
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CELLCOM_BGP_ADV_V6 {
        term accept-example-ipv6-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V6_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                as-path-prepend "64900 64900 64900 64900 64900";
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CELLCOM_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_CELLCOM;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CELLCOM_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_CELLCOM;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CLARANET_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_CLARANET;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CLARANET_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_CLARANET;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CLOUDFLARE_BGP_ADV_V4 {
        term accept-example-ipv4-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                as-path-prepend "64900 64900 64900 64900 64900";
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CLOUDFLARE_BGP_ADV_V6 {
        term accept-example-ipv6-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V6_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                as-path-prepend "64900 64900 64900 64900 64900";
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CLOUDFLARE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_CLOUDFLARE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement CLOUDFLARE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_CLOUDFLARE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement COLT_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_ISP_BGP_RCV_V4;
            then next term;
        }
        term reject-transitc-scrubbing-asn-203 {
            from as-path orig-in-203;
            then reject;
        }
        term setting-communities {
            then {
                community REDACTED SET_TYPE_INTERNET_TRANSIT;
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement COLT_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_ISP_BGP_RCV_V6;
            then next term;
        }
        term reject-transitc-scrubbing-asn-203 {
            from as-path orig-in-203;
            then reject;
        }
        term setting-communities {
            then {
                community REDACTED SET_TYPE_INTERNET_TRANSIT;
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement COLT_IXBGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_TYPE_IX_COLT;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement COLT_IXBGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_TYPE_IX_COLT;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement DAISY_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_DAISY;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement DAISY_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_DAISY;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement DECIX_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_IX_BGP_RCV_V4;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_DECIX;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement DECIX_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_IX_BGP_RCV_V6;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_DECIX;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement DENY_BGP_ALL {
        then reject;
    }
    policy-statement DFN_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_DFN;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement DFN_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_DFN;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement DU_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_DU;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement DU_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_DU;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement ETISALAT_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_TYPE_IX_ETISALAT;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement ETISALAT_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_TYPE_IX_ETISALAT;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement EXPONENTIALE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_EXPONENTIALE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement EXPONENTIALE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_EXPONENTIALE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement FASTWEB_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_FASTWEB;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement FASTWEB_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_FASTWEB;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement PEER-A-FW-01_BGP_ADV_V4 {
        term t1 {
            from {
                route-filter 10.2.249.0/24 exact;
                route-filter 10.2.200.0/24 orlonger;
                route-filter 10.3.254.0/24 orlonger;
                route-filter 10.3.249.0/24 orlonger;
            }
            then accept;
        }
        term t2 {
            then reject;
        }
    }
    policy-statement PEER-A-FW-01_BGP_RCV_V4 {
        term t1 {
            from {
                route-filter 10.1.144.0/24 orlonger;
                route-filter 10.1.145.0/24 orlonger;
                route-filter 10.1.252.0/24 orlonger;
                route-filter 10.1.238.0/24 orlonger;
                route-filter 10.1.248.0/24 orlonger;
                route-filter 10.1.251.0/24 orlonger;
                route-filter 10.1.253.0/24 orlonger;
                route-filter 10.1.247.0/24 orlonger;
            }
            then accept;
        }
        term t2 {
            then reject;
        }
    }
    policy-statement PEER-A-NTW-INFRA-01_BGP_ADV_V4 {
        term bb-routes {
            from {
                route-filter 10.1.144.0/24 orlonger;
                route-filter 10.1.252.0/24 orlonger;
                route-filter 10.2.249.0/24 exact;
                route-filter 10.3.249.0/24 exact;
                route-filter 10.1.251.0/24 exact;
                route-filter 203.0.113.250/24 orlonger;
                route-filter 10.5.0.0/16 orlonger;
                route-filter 10.1.247.0/24 exact;
            }
            then accept;
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement PEER-A-NTW-INFRA-01_BGP_RCV_V4 {
        term management-route {
            from {
                route-filter 10.3.249.0/24 orlonger;
                route-filter 203.0.113.117/24 orlonger;
                route-filter 203.0.113.250/24 orlonger;
            }
            then {
                local-preference 300;
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement PEER-A-SW-01_BGP_ADV_V4 {
        term accept-default-route {
            from {
                route-filter 0.0.0.0/0 exact;
            }
            then {
                next-hop self;
                accept;
            }
        }
        term accept-management {
            from {
                route-filter 10.2.254.0/24 orlonger;
                route-filter 10.3.254.0/24 orlonger;
                route-filter 10.2.200.0/24 orlonger;
            }
            then {
                next-hop self;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement PEER-A-SW-01_BGP_ADV_V6 {
        term accept-default-route {
            from {
                route-filter ::/0 exact;
            }
            then {
                next-hop self;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement PEER-A-SW-01_BGP_RCV_V4 {
        term match-globally-significant-subnet {
            from {
                route-filter 198.51.100.215/24 exact;
                route-filter 192.0.2.50/24 exact;
                route-filter 192.0.2.71/24 exact;
                route-filter 192.0.2.219/24 exact;
                route-filter 203.0.113.210/24 exact;
            }
            then accept;
        }
        term reject-ipv4-default-route {
            from {
                route-filter 0.0.0.0/0 exact;
            }
            then reject;
        }
        then reject;
    }
    policy-statement PEER-A-SW-01_BGP_RCV_V6 {
        term match-globally-significant-subnet {
            from {
                route-filter 2a07:7940:18::/48 orlonger;
            }
            then accept;
        }
        term reject-ipv6-default-route {
            from {
                route-filter ::/0 exact;
            }
            then reject;
        }
        then reject;
    }
    policy-statement FREENET_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_FREENET;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement FREENET_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_FREENET;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement FREEPRO_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_FREEPRO;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement FREEPRO_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_FREEPRO;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement GENERIC_BGP_ADV_V4 {
        term accept-example-ipv4-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement GENERIC_BGP_ADV_V6 {
        term accept-example-ipv6-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V6_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement GENERIC_DIRECT_BGP_RCV_V4 {
        term reject-ipv4-default-route {
            from {
                route-filter 0.0.0.0/0 exact;
            }
            then reject;
        }
        term reject-ipv4-iana-reserved {
            from {
                route-filter 0.0.0.0/8 orlonger;
                route-filter 10.0.0.0/8 orlonger;
                route-filter 100.64.0.0/10 orlonger;
                route-filter 127.0.0.0/8 orlonger;
                route-filter 169.254.0.0/16 orlonger;
                route-filter 172.16.0.0/12 orlonger;
                route-filter 192.0.2.205/24 orlonger;
                route-filter 198.51.100.50/24 orlonger;
                route-filter 192.168.0.0/16 orlonger;
                route-filter 224.0.0.0/3 orlonger;
            }
            then reject;
        }
        term reject-example-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then reject;
        }
        term check-validation-database {
            from validation-database invalid;
            then reject;
        }
        term strip-communities {
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                next term;
            }
        }
        term tag-all-ipv4-routes-upto-24 {
            from {
                protocol bgp;
                route-filter 0.0.0.0/0 upto /24;
            }
            then {
                local-preference 3000;
                next term;
            }
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                next term;
            }
        }
        term directly-connected-to-the-data-center {
            from community REDACTED
            then {
                local-preference 3200;
                next term;
            }
        }
    }
    policy-statement GENERIC_DIRECT_BGP_RCV_V6 {
        term reject-ipv6-default-route {
            from {
                route-filter ::/0 exact;
            }
            then reject;
        }
        term reject-ipv6-martians-and-privates {
            from {
                route-filter ::1/128 exact;
                route-filter ff00::/8 orlonger;
                route-filter fc00::/7 orlonger;
            }
            then reject;
        }
        term reject-example-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V6_PREFIXES;
            }
            then reject;
        }
        term check-validation-database {
            from validation-database invalid;
            then reject;
        }
        term strip-communities {
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                next term;
            }
        }
        term tag-all-ipv6-routes-upto-48 {
            from {
                protocol bgp;
                route-filter ::/0 upto /48;
            }
            then {
                local-preference 3000;
                next term;
            }
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                next term;
            }
        }
        term directly-connected-to-the-data-center {
            from community REDACTED
            then {
                local-preference 3200;
                next term;
            }
        }
    }
    policy-statement GENERIC_ISP_BGP_RCV_V4 {
        term accept-ipv4-default-route {
            from {
                protocol bgp;
                route-filter 0.0.0.0/0 exact;
            }
            then accept;
        }
        term reject-lower-than-24 {
            from {
                protocol bgp;
                route-filter 0.0.0.0/25 upto /32;
            }
            then reject;
        }
        term reject-ipv4-iana-reserved {
            from {
                route-filter 0.0.0.0/8 orlonger;
                route-filter 10.0.0.0/8 orlonger;
                route-filter 100.64.0.0/10 orlonger;
                route-filter 127.0.0.0/8 orlonger;
                route-filter 169.254.0.0/16 orlonger;
                route-filter 172.16.0.0/12 orlonger;
                route-filter 192.0.2.205/24 orlonger;
                route-filter 198.51.100.50/24 orlonger;
                route-filter 192.168.0.0/16 orlonger;
                route-filter 224.0.0.0/3 orlonger;
            }
            then reject;
        }
        term reject-example-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then reject;
        }
        term check-validation-database {
            from validation-database invalid;
            then reject;
        }
        term strip-communities {
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                next term;
            }
        }
        term accept-all-ipv4-routes-upto-24 {
            from {
                protocol bgp;
                route-filter 0.0.0.0/0 upto /24;
            }
            then {
                tag 500;
                local-preference 500;
                next term;
            }
        }
    }
    policy-statement GENERIC_ISP_BGP_RCV_V6 {
        term accept-ipv6-default-route {
            from {
                protocol bgp;
                route-filter ::/0 exact;
            }
            then accept;
        }
        term reject-lower-than-48 {
            from {
                family inet6;
                protocol bgp;
                route-filter ::/49 upto /128;
            }
            then reject;
        }
        term reject-ipv6-martians-and-privates {
            from {
                route-filter ::1/128 exact;
                route-filter ff00::/8 orlonger;
                route-filter fc00::/7 orlonger;
            }
            then reject;
        }
        term reject-example-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V6_PREFIXES;
            }
            then reject;
        }
        term check-validation-database {
            from validation-database invalid;
            then reject;
        }
        term strip-communities {
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                next term;
            }
        }
        term accept-all-ipv6-routes-upto-48 {
            from {
                protocol bgp;
                route-filter ::/0 upto /48;
            }
            then {
                tag 500;
                local-preference 500;
                next term;
            }
        }
    }
    policy-statement GENERIC_IX_BGP_RCV_V4 {
        term reject-ipv4-default-route {
            from {
                route-filter 0.0.0.0/0 exact;
            }
            then reject;
        }
        term reject-lower-than-24 {
            from {
                protocol bgp;
                route-filter 0.0.0.0/25 upto /32;
            }
            then reject;
        }
        term reject-ipv4-iana-reserved {
            from {
                route-filter 0.0.0.0/8 orlonger;
                route-filter 10.0.0.0/8 orlonger;
                route-filter 100.64.0.0/10 orlonger;
                route-filter 127.0.0.0/8 orlonger;
                route-filter 169.254.0.0/16 orlonger;
                route-filter 172.16.0.0/12 orlonger;
                route-filter 192.0.2.205/24 orlonger;
                route-filter 198.51.100.50/24 orlonger;
                route-filter 192.168.0.0/16 orlonger;
                route-filter 224.0.0.0/3 orlonger;
            }
            then reject;
        }
        term reject-example-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then reject;
        }
        term check-validation-database {
            from validation-database invalid;
            then reject;
        }
        term strip-communities {
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                next term;
            }
        }
        term tag-all-ipv4-routes-upto-24 {
            from {
                protocol bgp;
                route-filter 0.0.0.0/0 upto /24;
            }
            then {
                local-preference 700;
                next term;
            }
        }
        term assign-local-pref-aspath-length-1 {
            from {
                as-path-calc-length 1 equal;
            }
            then {
                local-preference 1000;
                next term;
            }
        }
        term assign-local-pref-aspath-length-2 {
            from {
                as-path-calc-length 2 equal;
            }
            then {
                local-preference 900;
                next term;
            }
        }
        term assign-local-pref-aspath-length-3 {
            from {
                as-path-calc-length 3 equal;
            }
            then {
                local-preference 800;
                next term;
            }
        }
        term assign-local-pref-aspath-length-6-or-more {
            from {
                as-path-calc-length 6 orhigher;
            }
            then {
                local-preference 50;
                next term;
            }
        }
    }
    policy-statement GENERIC_IX_BGP_RCV_V6 {
        term reject-ipv6-default-route {
            from {
                protocol bgp;
                route-filter ::/0 exact;
            }
            then reject;
        }
        term reject-lower-than-48 {
            from {
                family inet6;
                protocol bgp;
                route-filter ::/49 upto /128;
            }
            then reject;
        }
        term reject-ipv6-martians-and-privates {
            from {
                route-filter ::1/128 exact;
                route-filter ff00::/8 orlonger;
                route-filter fc00::/7 orlonger;
            }
            then reject;
        }
        term reject-example-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V6_PREFIXES;
            }
            then reject;
        }
        term check-validation-database {
            from validation-database invalid;
            then reject;
        }
        term strip-communities {
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                next term;
            }
        }
        term tag-all-ipv6-routes-upto-48 {
            from {
                protocol bgp;
                route-filter ::/0 upto /48;
            }
            then {
                local-preference 700;
                next term;
            }
        }
        term assign-local-pref-aspath-length-6-or-more {
            from as-path length-6-or-more;
            then {
                local-preference 50;
                next term;
            }
        }
        term assign-local-pref-aspath-length-3-or-less {
            from as-path length-3-or-less;
            then {
                local-preference 800;
                next term;
            }
        }
        term assign-local-pref-aspath-length-2-or-less {
            from as-path length-2-or-less;
            then {
                local-preference 900;
                next term;
            }
        }
        term assign-local-pref-aspath-length-1 {
            from as-path length-1;
            then {
                local-preference 1000;
                next term;
            }
        }
    }
    policy-statement GOOGLE_BGP_ADV_V4 {
        term accept-example-ipv4-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                as-path-prepend "64900 64900 64900 64900 64900";
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement GOOGLE_BGP_ADV_V6 {
        term accept-example-ipv6-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V6_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                as-path-prepend "64900 64900 64900 64900 64900";
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement GOOGLE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_GOOGLE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement GOOGLE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_GOOGLE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement HETZNER_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_HETZNER;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement HETZNER_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_HETZNER;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement HE_BGP_ADV_V4 {
        term accept-example-ipv4-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                as-path-prepend "64900 64900 64900 64900 64900";
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement HE_BGP_ADV_V6 {
        term accept-example-ipv6-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V6_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                as-path-prepend "64900 64900 64900 64900 64900";
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement HE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_IX_BGP_RCV_V4;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_HE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement HE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_IX_BGP_RCV_V6;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_HE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement I3D_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_I3D;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement I3D_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_I3D;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement INIT7_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_INIT7;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement INIT7_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_INIT7;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement LINK11_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_LINK11;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement LINK11_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_LINK11;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement M247_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_M247;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement M247_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_M247;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement MANDA_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_MANDA;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement MANDA_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_MANDA;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement MEO_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_MEO;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement MEO_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_MEO;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement MLPE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_IX_BGP_RCV_V4;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_EQIX_PEER-A;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement MLPE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_IX_BGP_RCV_V6;
            then next term;
        }
        term setting-communities {
            then {
                community REDACTED SET_ORIGIN_GEO_PEER-A;
                community REDACTED SET_TYPE_IX_EQIX_PEER-A;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement MSFT_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_MSFT;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement MSFT_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_MSFT;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement NETGLOBAL_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_NETGLOBAL;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement NETGLOBAL_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_NETGLOBAL;
                accept;
            }
        }
    }
    policy-statement OOREDOO_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_OOREDOO;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement OOREDOO_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_OOREDOO;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement ORACLE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_ORACLE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement ORACLE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_ORACLE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement OTE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_OTE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement OTE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_OTE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement QUICKLINE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_QUICKLINE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement QUICKLINE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_QUICKLINE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement SIPARTECH_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_SIPARTECH;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement SIPARTECH_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_SIPARTECH;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement TELEFONICA_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_TELEFONICA;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement TELEFONICA_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_TELEFONICA;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement TKRZ_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_TKRZ;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement TKRZ_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_TKRZ;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement VIANOVA_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_VIANOVA;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement VIANOVA_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_VIANOVA;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement WINDTRE_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_WINDTRE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement WINDTRE_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_WINDTRE;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement ZETNET_BGP_ADV_V4 {
        term accept-example-ipv4-public-prefixes {
            from {
                route-filter-list CORP_BGP_ADV_V4_PREFIXES;
            }
            then {
                community REDACTED MATCH_TYPE;
                community REDACTED MATCH_ORIGIN;
                community REDACTED MATCH_POLICY;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement ZETNET_BGP_RCV_V4 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V4;
            then {
                community REDACTED SET_TYPE_IX_ZETNET;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement ZETNET_BGP_RCV_V6 {
        term generic-policy-part {
            from policy GENERIC_DIRECT_BGP_RCV_V6;
            then {
                community REDACTED SET_TYPE_IX_ZETNET;
                accept;
            }
        }
        term reject-all {
            then reject;
        }
    }
    policy-statement loadbalance {
        then {
            load-balance per-packet;
        }
    }
    policy-statement next-hop-self {
        from route-type external;
        then {
            next-hop self;
        }
    }
    community REDACTED {
        invert-match;
        members "^64900:2101.*";
    }
    community REDACTED {
        invert-match;
        members "^2:12.*";
    }
    community REDACTED {
        invert-match;
        members 2:1200;
    }
    community REDACTED {
        invert-match;
        members 2:1201;
    }
    community REDACTED {
        invert-match;
        members 2:1210;
    }
    community REDACTED {
        invert-match;
        members 2:1220;
    }
    community REDACTED {
        invert-match;
        members 2:1230;
    }
    community REDACTED {
        invert-match;
        members 2:1204;
    }
    community REDACTED {
        invert-match;
        members 2:1240;
    }
    community REDACTED {
        invert-match;
        members 2:1205;
    }
    community REDACTED members 65105:2067;
    community REDACTED members 65105:2066;
    community REDACTED members 65105:2008;
    community REDACTED members 33560:0;
    community REDACTED members 65105:2065;
    community REDACTED members 65105:2006;
    community REDACTED members 65105:2010;
    community REDACTED members 65105:2003;
    community REDACTED members 65105:2064;
    community REDACTED members 65105:2022;
    community REDACTED members 65105:2001;
    community REDACTED members 65105:2026;
    community REDACTED members 65105:2012;
    community REDACTED members 65105:2011;
    community REDACTED members [ 12076:50002 12076:51002 ];
    community REDACTED members [ 12076:50030 12076:51030 ];
    community REDACTED members [ 12076:50008 12076:51008 ];
    community REDACTED members [ 12076:50002 12076:51002 ];
    community REDACTED members [ 12076:50004 12076:51004 ];
    community REDACTED members [ 12076:50004 12076:51004 ];
    community REDACTED members [ 12076:50006 12076:51006 ];
    community REDACTED members [ 12076:50024 12076:51024 ];
    community REDACTED members [ 12076:50005 12076:51005 ];
    community REDACTED members [ 12076:50007 12076:51007 ];
    community REDACTED members [ 12076:50026 12076:51026 ];
    community REDACTED members [ 12076:50006 12076:51006 ];
    community REDACTED members "^64900:.*";
    community REDACTED members "^64900:.*";
    community REDACTED members "^64900:2103.*";
    community REDACTED members 64900:21031;
    community REDACTED members "^64900:2104.*";
    community REDACTED members 64900:21041;
    community REDACTED members "^64900:1201.*";
    community REDACTED members 64900:12011;
    community REDACTED members "^64900:2101.*";
    community REDACTED members 64900:21012;
    community REDACTED members "^64900:1301.*";
    community REDACTED members 64900:13011;
    community REDACTED members 64900:13019;
    community REDACTED members "^64900:1302.*";
    community REDACTED members 64900:13021;
    community REDACTED members "^64900:1104.*";
    community REDACTED members 64900:11041;
    community REDACTED members "^64900:2102.*";
    community REDACTED members 64900:21021;
    community REDACTED members "^64900:1305.*";
    community REDACTED members 64900:13051;
    community REDACTED members "^64900:3103.*";
    community REDACTED members 64900:31031;
    community REDACTED members "^64900:1202.*";
    community REDACTED members 64900:12021;
    community REDACTED members "^64900:1101.*";
    community REDACTED members 64900:11011;
    community REDACTED members 64900:11013;
    community REDACTED members 64900:11014;
    community REDACTED members 64900:11012;
    community REDACTED members "^64900:1102.*";
    community REDACTED members 64900:11021;
    community REDACTED members "^64900:3101.*";
    community REDACTED members 64900:31011;
    community REDACTED members "^64900:1103.*";
    community REDACTED members 64900:11031;
    community REDACTED members "^64900:1105.*";
    community REDACTED members 64900:11051;
    community REDACTED members "^64900:3102.*";
    community REDACTED members 64900:31021;
    community REDACTED members 64900:31022;
    community REDACTED members "^64900:1303.*";
    community REDACTED members 64900:13031;
    community REDACTED members "^64900:2105.*";
    community REDACTED members 64900:21051;
    community REDACTED members "^3:.*";
    community REDACTED members "^3:1.*";
    community REDACTED members [ "^2:12.*" "^3:12.*" ];
    community REDACTED members 2:1200;
    community REDACTED members [ 2:1201 3:1201 ];
    community REDACTED members [ 2:1210 3:1210 ];
    community REDACTED members 3:1211;
    community REDACTED members 3:1212;
    community REDACTED members 3:1213;
    community REDACTED members 3:1214;
    community REDACTED members 3:1215;
    community REDACTED members 3:1216;
    community REDACTED members 3:1217;
    community REDACTED members 3:1218;
    community REDACTED members 3:1219;
    community REDACTED members 3:1202;
    community REDACTED members [ 2:1220 3:1220 ];
    community REDACTED members 3:1203;
    community REDACTED members 2:1230;
    community REDACTED members 3:1204;
    community REDACTED members 2:1240;
    community REDACTED members [ 2:1205 3:1205 ];
    community REDACTED members 3:1206;
    community REDACTED members 3:1207;
    community REDACTED members 3:1208;
    community REDACTED members 3:1209;
    community REDACTED members "^9:.*";
    community REDACTED members "^9:0$";
    community REDACTED members 9:174;
    community REDACTED members 9:3257;
    community REDACTED members 9:65105;
    community REDACTED members "^1:.*";
    community REDACTED members "^1:2.*";
    community REDACTED members "^1:5.*";
    community REDACTED members "^1:50.*";
    community REDACTED members "^1:55.*";
    community REDACTED members "^1:53.*";
    community REDACTED members "^1:54.*";
    community REDACTED members "^1:52.*";
    community REDACTED members "^1:51.*";
    community REDACTED members "^1:1010.*";
    community REDACTED members 202:202;
    community REDACTED members "^64900:2103.*";
    community REDACTED members 64900:21031;
    community REDACTED members "^64900:2104.*";
    community REDACTED members 64900:21041;
    community REDACTED members "^64900:1201.*";
    community REDACTED members 64900:12011;
    community REDACTED members "^64900:2101.*";
    community REDACTED members 64900:21012;
    community REDACTED members "^64900:1301.*";
    community REDACTED members 64900:13011;
    community REDACTED members 64900:13019;
    community REDACTED members "^64900:1302.*";
    community REDACTED members 64900:13021;
    community REDACTED members "^64900:1104.*";
    community REDACTED members 64900:11041;
    community REDACTED members "^64900:2102.*";
    community REDACTED members 64900:21021;
    community REDACTED members "^64900:1305.*";
    community REDACTED members 64900:13051;
    community REDACTED members "^64900:3103.*";
    community REDACTED members 64900:31031;
    community REDACTED members "^64900:1202.*";
    community REDACTED members 64900:12021;
    community REDACTED members "^64900:1101.*";
    community REDACTED members 64900:11011;
    community REDACTED members 64900:11013;
    community REDACTED members 64900:11014;
    community REDACTED members 64900:11012;
    community REDACTED members "^64900:1102.*";
    community REDACTED members 64900:11021;
    community REDACTED members "^64900:3101.*";
    community REDACTED members 64900:31011;
    community REDACTED members "^64900:1103.*";
    community REDACTED members 64900:11031;
    community REDACTED members "^64900:1105.*";
    community REDACTED members 64900:11051;
    community REDACTED members "^64900:3102.*";
    community REDACTED members 64900:31021;
    community REDACTED members 64900:31022;
    community REDACTED members "^64900:1303.*";
    community REDACTED members 64900:13031;
    community REDACTED members "^64900:2105.*";
    community REDACTED members 64900:21051;
    community REDACTED members 2:1200;
    community REDACTED members 2:1201;
    community REDACTED members 2:1210;
    community REDACTED members 2:1220;
    community REDACTED members 2:1230;
    community REDACTED members 2:1204;
    community REDACTED members 2:1240;
    community REDACTED members 2:1205;
    community REDACTED members 2:1206;
    community REDACTED members 9:0;
    community REDACTED members 9:174;
    community REDACTED members 9:3257;
    community REDACTED members 9:65105;
    community REDACTED members 1:2;
    community REDACTED members 1:6002;
    community REDACTED members 1:50;
    community REDACTED members 1:55;
    community REDACTED members 1:53;
    community REDACTED members 1:54;
    community REDACTED members 1:52;
    community REDACTED members 1:51;
    community REDACTED members 1:3089;
    community REDACTED members [ 1:3103 1:3104 ];
    community REDACTED members 1:3022;
    community REDACTED members 1:2022;
    community REDACTED members 1:3044;
    community REDACTED members 1:3011;
    community REDACTED members 1:3038;
    community REDACTED members 1:3097;
    community REDACTED members 1:3059;
    community REDACTED members 1:3013;
    community REDACTED members 1:3067;
    community REDACTED members 1:3057;
    community REDACTED members 1:3027;
    community REDACTED members 1:3026;
    community REDACTED members 1:3033;
    community REDACTED members 1:2012;
    community REDACTED members 1:2021;
    community REDACTED members 1:2020;
    community REDACTED members 1:3083;
    community REDACTED members 1:3056;
    community REDACTED members 1:2024;
    community REDACTED members 1:2019;
    community REDACTED members 1:2031;
    community REDACTED members 1:2015;
    community REDACTED members 1:2014;
    community REDACTED members 1:2011;
    community REDACTED members 1:2016;
    community REDACTED members 1:2018;
    community REDACTED members 1:2017;
    community REDACTED members 1:3025;
    community REDACTED members 1:3032;
    community REDACTED members 1:3023;
    community REDACTED members 1:2027;
    community REDACTED members 1:3035;
    community REDACTED members 1:3070;
    community REDACTED members 1:3012;
    community REDACTED members 1:3014;
    community REDACTED members 1:3034;
    community REDACTED members 1:3055;
    community REDACTED members 1:3102;
    community REDACTED members 1:3082;
    community REDACTED members 1:3053;
    community REDACTED members 1:3048;
    community REDACTED members 1:3093;
    community REDACTED members 1:3010;
    community REDACTED members 1:3088;
    community REDACTED members 1:3096;
    community REDACTED members 1:3091;
    community REDACTED members 1:3095;
    community REDACTED members 1:3071;
    community REDACTED members 1:3015;
    community REDACTED members 1:2013;
    community REDACTED members 1:3076;
    community REDACTED members 1:2010;
    community REDACTED members 1:3049;
    community REDACTED members 1:3043;
    community REDACTED members 1:2022;
    community REDACTED members 1:3092;
    community REDACTED members 1:3047;
    community REDACTED members 1:3081;
    community REDACTED members 1:4050;
    community REDACTED members 1:4010;
    community REDACTED members 1:10100;
    as-path length-3-or-less ".{,3}";
    as-path length-4-or-more ".{4,}";
    as-path length-1 ".{,1}";
    as-path length-2-or-less ".{,2}";
    as-path length-6-or-more ".{6,}";
    as-path orig-in-203 ".* 203";
}
firewall {
    family inet {
        filter filter-all-in-one {
            term accept-bfd {
                from {
                    source-prefix-list {
                        source-ip-bfd;
                        BGP-neighbors-v4;
                    }
                    protocol udp;
                    source-port 49152-65535;
                    destination-port [ 3784-3785 4784 ];
                }
                then accept;
            }
            term accept-bgp-dst {
                from {
                    source-prefix-list {
                        BGP-neighbors-v4;
                        BGP-neighbors-inst-v4;
                    }
                    destination-prefix-list {
                        BGP-locals-v4;
                        BGP-locals-inst-v4;
                    }
                    protocol tcp;
                    destination-port bgp;
                }
                then {
                    count accept-bgp-dst;
                    accept;
                }
            }
            term accept-bgp-src {
                from {
                    source-prefix-list {
                        BGP-neighbors-v4;
                        BGP-neighbors-inst-v4;
                    }
                    destination-prefix-list {
                        BGP-locals-v4;
                        BGP-locals-inst-v4;
                    }
                    protocol tcp;
                    source-port bgp;
                }
                then {
                    count accept-bgp-src;
                    accept;
                }
            }
            term allow-pxe {
                from {
                    address {
                        0.0.0.0/32;
                    }
                    prefix-list {
                        ztp-interface;
                        all-dhcp-relay-pxe-servers;
                    }
                    port [ 67 68 69 4011 ];
                }
                then {
                    count allow-pxe-counter;
                    accept;
                }
            }
            term accept-dns {
                from {
                    source-prefix-list {
                        DNS-servers-v4;
                    }
                    destination-prefix-list {
                        LOCALS-v4;
                    }
                    protocol [ udp tcp ];
                    source-port 53;
                }
                then {
                    policer management-1m;
                    count accept-dns;
                    accept;
                }
            }
            term accept-icmp {
                from {
                    protocol icmp;
                    icmp-type [ echo-reply echo-request time-exceeded unreachable source-quench router-advertisement parameter-problem timestamp ];
                }
                then {
                    policer management-1m;
                    count accept-icmp;
                    accept;
                }
            }
            term accept-netconf-mgmt {
                from {
                    source-prefix-list {
                        source-ip-prefixes;
                    }
                    destination-prefix-list {
                        LOCALS-v4;
                    }
                    protocol tcp;
                    destination-port 830;
                }
                then {
                    count accept-netconf;
                    log;
                    accept;
                }
            }
            term accept-ntp {
                from {
                    source-prefix-list {
                        NTP-servers-v4;
                        LOCALS-v4;
                    }
                    destination-prefix-list {
                        NTP-servers-v4;
                        LOCALS-v4;
                    }
                    protocol udp;
                    port ntp;
                }
                then {
                    policer management-512k;
                    count accept-ntp;
                    accept;
                }
            }
            term accept-grpc {
                from {
                    source-prefix-list {
                        GRPC-SERVERS-v4;
                    }
                    destination-prefix-list {
                        LOCALS-v4;
                    }
                    protocol tcp;
                    port 32767;
                }
                then {
                    count accept-grpc;
                    accept;
                }
            }
            term accept-snmp {
                from {
                    source-prefix-list {
                        SNMP-clients;
                    }
                    destination-prefix-list {
                        all-unit0-interfaces;
                    }
                    protocol udp;
                    destination-port snmp;
                }
                then {
                    count accept-snmp;
                    accept;
                }
            }
            term accept-ssh-mgmt {
                from {
                    source-prefix-list {
                        source-ip-prefixes;
                    }
                    destination-prefix-list {
                        LOCALS-v4;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then {
                    count accept-ssh;
                    log;
                    accept;
                }
            }
            term accept-ssh {
                from {
                    source-prefix-list {
                        dco-external-ssh;
                    }
                    destination-prefix-list {
                        LOCALS-v4;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then {
                    policer management-5m;
                    count accept-ssh;
                    log;
                    accept;
                }
            }
            term accept-traceroute-icmp {
                from {
                    destination-prefix-list {
                        LOCALS-v4;
                    }
                    protocol icmp;
                    ttl 1;
                    icmp-type [ echo-request echo-reply timestamp time-exceeded ];
                }
                then {
                    policer management-1m;
                    count accept-traceroute-icmp;
                    accept;
                }
            }
            term accept-traceroute-udp {
                from {
                    destination-prefix-list {
                        LOCALS-v4;
                    }
                    protocol udp;
                    ttl 1;
                    destination-port 33434-33534;
                }
                then {
                    policer management-1m;
                    count accept-traceroute-udp;
                    accept;
                }
            }
            term allow-tcp-est {
                from {
                    protocol tcp;
                    tcp-established;
                }
                then {
                    count accept-tcp-established;
                    accept;
                }
            }
            term discard-icmp-fragments {
                from {
                    is-fragment;
                    protocol icmp;
                }
                then {
                    count discard-icmp-fragments;
                    discard;
                }
            }
            term discard-icmp {
                from {
                    protocol icmp;
                }
                then {
                    count discard-icmp;
                    discard;
                }
            }
            term discard-ip-options {
                from {
                    ip-options any;
                }
                then {
                    count discard-ip-options;
                    discard;
                }
            }
            term discard-tcp {
                from {
                    protocol tcp;
                }
                then {
                    count discard-tcp;
                    discard;
                }
            }
            term discard-TTL_1-unknown {
                from {
                    ttl 1;
                }
                then {
                    count discard-TTL_1-unknown;
                    discard;
                }
            }
            term discard-udp {
                from {
                    protocol udp;
                }
                then {
                    count discard-udp;
                    discard;
                }
            }
            term discard-unknown {
                then {
                    count discard-unknown;
                    discard;
                }
            }
        }
        filter filter-internet-traffic {
            term discard-malicious-traffic {
                from {
                    source-address {
                        198.51.100.252/32;
                        192.0.2.113/32;
                    }
                }
                then {
                    count discard-malicious-traffic;
                    discard;
                }
            }
            term dc02-to-peer-a-ssh-temp {
                from {
                    source-address {
                        198.51.100.99/32;
                        203.0.113.194/32;
                    }
                    destination-address {
                        192.0.2.71/24;
                    }
                    destination-port ssh;
                }
                then {
                    count dc02-to-peer-a-ssh-temp;
                    accept;
                }
            }
            term reject-amplified-reflection-attack {
                from {
                    protocol udp;
                    source-port [ 6881 19 389 751 11211 1434 5353 137 111 17 27960 520 161 1900 27015 ];
                }
                then {
                    count reject-amplified-reflection-attack;
                    discard;
                }
            }
            term allow-any-to-it-fw {
                from {
                    destination-address {
                        203.0.113.136/32;
                        198.51.100.148/24;
                    }
                }
                then accept;
            }
            term accept-bfd {
                from {
                    source-prefix-list {
                        BGP-neighbors-v4;
                    }
                    protocol udp;
                    source-port 49152-65535;
                    destination-port [ 3784-3785 4784 ];
                }
                then accept;
            }
            term allow-tcp-est {
                from {
                    protocol tcp;
                    tcp-established;
                }
                then {
                    count allow-tcp-est;
                    accept;
                }
            }
            term accept-port-8443-to-example-lighthouse-api {
                from {
                    source-address {
                        203.0.113.22/32;
                        198.51.100.219/32;
                    }
                    destination-address {
                        198.51.100.55/32;
                        203.0.113.65/32;
                    }
                    source-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                        pondmobile-lte-ranges-US;
                        pondmobile-lte-ranges-EU;
                        pondmobile-lte-ranges-AP;
                        og-att-lte-ranges-GLB;
                    }
                    protocol tcp;
                    destination-port 8443;
                }
                then {
                    count accept-port-8443-to-example-lighthouse-api;
                    accept;
                }
            }
            term discard-port-8443-to-example-lighthouse-api {
                from {
                    destination-address {
                        198.51.100.55/32;
                        203.0.113.65/32;
                    }
                    protocol tcp;
                    destination-port 8443;
                }
                then {
                    count discard-port-8443-to-example-lighthouse-api;
                    discard;
                }
            }
            term accept-port-443-to-example-lighthouse-gui {
                from {
                    source-address {
                        198.51.100.139/32;
                        203.0.113.108/32;
                        203.0.113.61/32;
                        198.51.100.136/32;
                    }
                    destination-address {
                        198.51.100.55/32;
                        203.0.113.65/32;
                    }
                    protocol tcp;
                    destination-port 443;
                }
                then {
                    count accept-port-443-to-example-lighthouse-gui;
                    accept;
                }
            }
            term discard-ports-443-to-example-lighthouse-gui {
                from {
                    destination-address {
                        198.51.100.55/32;
                        203.0.113.65/32;
                    }
                    protocol tcp;
                    destination-port 443;
                }
                then {
                    count discard-ports-443-to-example-lighthouse-gui;
                    discard;
                }
            }
            term accept-port-8888-to-zta-server {
                from {
                    destination-address {
                        198.51.100.129/32;
                        198.51.100.18/32;
                    }
                    protocol tcp;
                    destination-port 8888;
                }
                then {
                    count accept-port-8888-to-zta-server;
                    accept;
                }
            }
            term accept-port-8800-to-zta-server {
                from {
                    destination-address {
                        198.51.100.129/32;
                        198.51.100.18/32;
                    }
                    protocol tcp;
                    destination-port 8800;
                }
                then {
                    count accept-port-8800-to-zta-server;
                    accept;
                }
            }
            term accept-port-443-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    port 443;
                }
                then {
                    count accept-port-443-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-44445-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port 44445;
                }
                then {
                    count accept-port-44445-to-example-prefixes;
                    accept;
                }
            }
            term accept-udp-port-44447-to-storage-test-poc {
                from {
                    destination-address {
                        198.51.100.218/29;
                    }
                    protocol udp;
                    destination-port 44447;
                }
                then {
                    count accept-udp-port-44447-to-storage-test-poc;
                    accept;
                }
            }
            term accept-any-to-dr2-public-ip-net {
                from {
                    destination-prefix-list {
                        dr2-public-ip-net;
                    }
                    protocol [ tcp udp esp ];
                }
                then {
                    count accept-any-to-dr2-public-ip-net;
                    accept;
                }
            }
            term accept-icmp-to-example-prefixes {
                from {
                    protocol icmp;
                    icmp-type [ echo-reply echo-request time-exceeded timestamp ];
                }
                then {
                    policer management-1m;
                    count accept-icmp-to-example-prefixes;
                    accept;
                }
            }
            term accept-cross-datacenter-vpn-esp {
                from {
                    source-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol esp;
                }
                then {
                    count accept-cross-datacenter-vpn-esp;
                    accept;
                }
            }
            term accept-cross-datacenter-vpn-udp {
                from {
                    source-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol udp;
                    destination-port [ 4500 500 ];
                }
                then {
                    count accept-cross-datacenter-vpn-udp;
                    accept;
                }
            }
            term accept-port-8200-to-peer-a-vault {
                from {
                    destination-address {
                        198.51.100.130/32;
                    }
                    protocol tcp;
                    destination-port 8200;
                }
                then {
                    count accept-port-8200-to-peer-a-vault;
                    accept;
                }
            }
            term accept-port-31032-31034-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-fwag;
                    }
                    protocol udp;
                    destination-port 31032-31034;
                }
                then {
                    count accept-port-31032-31034-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-9090-from-to-example-prefixes {
                from {
                    source-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port 9090;
                }
                then {
                    count accept-port-9090-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-9092-to-elk-on-prem {
                from {
                    destination-address {
                        198.51.100.4/32;
                        192.0.2.4/32;
                        203.0.113.211/32;
                    }
                    source-prefix-list {
                        on-prem-customers;
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port 9092;
                }
                then {
                    count accept-port-9092-to-elk-on-prem;
                    accept;
                }
            }
            term accept-tracert-udp-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol udp;
                    destination-port 33434-33534;
                }
                then {
                    policer management-1m;
                    count accept-tracert-udp-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-80-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    port 80;
                }
                then {
                    count accept-port-80-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-7780-7900-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port 7770-7800;
                }
                then {
                    count accept-port-7770-7800-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-8443-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port 8443;
                }
                then {
                    count accept-port-8443-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-8444-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port 8444;
                }
                then {
                    count accept-port-8444-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-55555-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port 55555;
                }
                then {
                    count accept-port-55555-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-55556-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port 55556;
                }
                then {
                    count accept-port-55556-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-1194-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol [ udp tcp ];
                    destination-port 1194;
                }
                then {
                    count accept-port-1194-to-example-prefixes;
                    accept;
                }
            }
            term accept-source-port-1194-to-example-prefixes {
                from {
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol udp;
                    source-port 1194;
                }
                then {
                    count accept-source-port-1194-to-example-prefixes;
                    accept;
                }
            }
            term accept-port-10000-10300-to-minidc-reverse-ssh-server {
                from {
                    destination-address {
                        198.51.100.107/32;
                        203.0.113.186/32;
                    }
                    protocol tcp;
                    destination-port 10000-10300;
                }
                then {
                    count accept-port-10000-10300-to-minidc-reverse-ssh-server;
                    accept;
                }
            }
            term accept-port-636-to-peer-c-security-01 {
                from {
                    source-address {
                        198.51.100.179/24;
                        198.51.100.188/27;
                        192.0.2.26/27;
                        198.51.100.114/32;
                        192.0.2.122/32;
                        192.0.2.123/32;
                        192.0.2.197/25;
                        203.0.113.106/25;
                        203.0.113.156/32;
                        198.51.100.115/32;
                        192.0.2.13/28;
                        203.0.113.129/32;
                        203.0.113.149/32;
                        192.0.2.75/32;
                    }
                    destination-address {
                        203.0.113.163/32;
                    }
                    protocol tcp;
                    destination-port 636;
                }
                then {
                    count accept-port-636-to-peer-c-security-01;
                    accept;
                }
            }
            term accept-port-18443-19443-to-elk-on-prem {
                from {
                    destination-address {
                        198.51.100.2/32;
                        203.0.113.32/32;
                        192.0.2.104/32;
                        203.0.113.79/32;
                    }
                    source-prefix-list {
                        on-prem-customers;
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port [ 18443 19443 ];
                }
                then {
                    count accept-port-18443-19443-to-elk-on-prem;
                    accept;
                }
            }
            term accept-dns-server {
                from {
                    destination-address {
                        192.0.2.231/32;
                        203.0.113.61/32;
                    }
                    protocol [ udp tcp ];
                    port domain;
                }
                then {
                    policer dns-server-10m;
                    count accept-dns-server;
                    accept;
                }
            }
            term accept-ntp-traffic {
                from {
                    source-prefix-list {
                        not-owned-by-example-prefixes;
                        global-example-prefixes;
                    }
                    destination-prefix-list {
                        public-NTP-servers-v4;
                    }
                    protocol udp;
                    port ntp;
                }
                then {
                    policer additional-1m;
                    count accept-ntp-traffic;
                    accept;
                }
            }
            term accept-traffic-to-ntp-servers {
                from {
                    destination-prefix-list {
                        public-NTP-servers-v4;
                        not-owned-by-example-prefixes;
                        global-example-prefixes;
                    }
                    protocol udp;
                    source-port ntp;
                }
                then {
                    policer additional-1m;
                    count accept-traffic-to-ntp-servers;
                    accept;
                }
            }
            term accept-dns-traffic {
                from {
                    source-prefix-list {
                        internet-DNS-servers-v4;
                    }
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol udp;
                    source-port 53;
                }
                then {
                    policer management-5m;
                    count accept-dns-traffic;
                    accept;
                }
            }
            term accept-ssh-to-device {
                from {
                    source-prefix-list {
                        dco-external-ssh;
                    }
                    destination-prefix-list {
                        LOCALS-v4;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then {
                    policer management-5m;
                    count accept-ssh-to-device;
                    log;
                    accept;
                }
            }
            term accept-ssh-to-dcn-jump-servers {
                from {
                    destination-address {
                        198.51.100.46/32;
                        203.0.113.130/32;
                        203.0.113.199/32;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then {
                    count accept-ssh-to-dcn-jump-servers;
                    accept;
                }
            }
            term accept-bgp-dst {
                from {
                    source-prefix-list {
                        BGP-neighbors-v4;
                        BGP-neighbors-inst-v4;
                    }
                    destination-prefix-list {
                        BGP-locals-v4;
                        BGP-locals-inst-v4;
                    }
                    protocol tcp;
                    destination-port bgp;
                }
                then {
                    count accept-bgp-dst;
                    accept;
                }
            }
            term accept-bgp-src {
                from {
                    source-prefix-list {
                        BGP-neighbors-v4;
                        BGP-neighbors-inst-v4;
                    }
                    destination-prefix-list {
                        BGP-locals-v4;
                        BGP-locals-inst-v4;
                    }
                    protocol tcp;
                    source-port bgp;
                }
                then {
                    count accept-bgp-src;
                    accept;
                }
            }
            term block-not-allowed-traffic-from-dr2-customers {
                from {
                    source-prefix-list {
                        dr2-public-ip-net;
                    }
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                }
                then {
                    count block-not-allowed-traffic-from-dr2-customers;
                    discard;
                }
            }
            term block-ssh-from-office-or-cross-dc {
                from {
                    source-prefix-list {
                        example-office-networks;
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then {
                    count block-ssh-from-office-or-cross-dc;
                    log;
                    discard;
                }
            }
            term accept-cross-datacenter-traffic {
                from {
                    source-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                }
                then {
                    count accept-cross-datacenter-traffic;
                    accept;
                }
            }
            term accept-example-office-networks {
                from {
                    source-prefix-list {
                        example-office-networks;
                    }
                    destination-prefix-list {
                        global-example-prefixes;
                        not-owned-by-example-prefixes;
                    }
                }
                then {
                    count example-office-networks;
                    accept;
                }
            }
            term discard-unknown {
                then {
                    count discard-unknown;
                    discard;
                }
            }
            term accept-port-10443_10445_10448-to-billing-server {
                from {
                    destination-address {
                        198.51.100.196/32;
                    }
                    protocol tcp;
                    port [ 10443 10445 10448 ];
                }
                then {
                    count accept-port-10443_10445_10448-to-billing-server;
                    accept;
                }
            }
            term accept-port-ssh-to-osa-jump-server {
                from {
                    destination-address {
                        203.0.113.253/32;
                        192.0.2.41/32;
                        203.0.113.195/32;
                        203.0.113.197/32;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then {
                    count accept-port-ssh-to-osa-jump-server;
                    accept;
                }
            }
            term accept-port-ssh-to-dc06-jump-server {
                from {
                    destination-address {
                        192.0.2.42/32;
                        198.51.100.17/32;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then {
                    count accept-port-ssh-to-dc06-jump-server;
                    accept;
                }
            }
            term accept-port-ssh-from-dco-jump-to-tll1-jump {
                from {
                    source-address {
                        198.51.100.115/32;
                    }
                    destination-address {
                        203.0.113.205/32;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then {
                    count accept-port-ssh-from-dco-jump-to-tll1-jump;
                    accept;
                }
            }
            term accept-port-636-to-peer-a-security-01 {
                from {
                    source-address {
                        198.51.100.179/24;
                        198.51.100.188/27;
                        192.0.2.26/27;
                        192.0.2.197/25;
                        203.0.113.106/25;
                        203.0.113.156/32;
                        198.51.100.115/32;
                        192.0.2.13/28;
                        203.0.113.129/32;
                        203.0.113.149/32;
                        192.0.2.75/32;
                    }
                    destination-address {
                        203.0.113.84/32;
                    }
                    protocol tcp;
                    destination-port 636;
                }
                then {
                    count accept-port-636-to-peer-a-security-01;
                    accept;
                }
            }
        }
    }
    family inet6 {
        filter filter-all-in-one-v6 {
            term accept-v6-icmp {
                from {
                    payload-protocol icmp6;
                    icmp-type [ echo-reply echo-request time-exceeded router-advertisement parameter-problem destination-unreachable packet-too-big router-solicit neighbor-solicit neighbor-advertisement redirect ];
                }
                then {
                    count accept-v6-icmp;
                    accept;
                }
            }
            term accept-bfd-v6 {
                from {
                    source-prefix-list {
                        BGP-neighbors-v6;
                    }
                    payload-protocol udp;
                    source-port 49152-65535;
                    destination-port [ 3784-3785 4784 ];
                }
                then accept;
            }
            term accept-tcp-est-v6 {
                from {
                    payload-protocol tcp;
                    tcp-established;
                }
                then {
                    count accept-tcp-established-v6;
                    accept;
                }
            }
            term accept-v6bgp-dst {
                from {
                    source-prefix-list {
                        BGP-neighbors-v6;
                        BGP-neighbors-inst-v6;
                    }
                    destination-prefix-list {
                        BGP-locals-v6;
                        BGP-locals-inst-v6;
                    }
                    payload-protocol tcp;
                    destination-port bgp;
                }
                then {
                    count accept-v6bgp-dst;
                    accept;
                }
            }
            term accept-v6bgp-src {
                from {
                    source-prefix-list {
                        BGP-neighbors-v6;
                        BGP-neighbors-inst-v6;
                    }
                    destination-prefix-list {
                        BGP-locals-v6;
                        BGP-locals-inst-v6;
                    }
                    payload-protocol tcp;
                    source-port bgp;
                }
                then {
                    count accept-v6bgp-src;
                    accept;
                }
            }
            term accept-v6-traceroute-udp {
                from {
                    destination-prefix-list {
                        LOCALS-v6;
                    }
                    payload-protocol udp;
                    destination-port 33434-33450;
                    hop-limit 1;
                }
                then {
                    policer management-1m;
                    count accept-v6-traceroute-udp;
                    accept;
                }
            }
            term accept-v6-traceroute-icmp {
                from {
                    destination-prefix-list {
                        LOCALS-v6;
                    }
                    payload-protocol icmp6;
                    icmp-type [ echo-reply echo-request router-advertisement parameter-problem destination-unreachable packet-too-big router-solicit neighbor-solicit neighbor-advertisement redirect ];
                    hop-limit 1;
                }
                then {
                    count accept-v6-traceroute-icmp;
                    accept;
                }
            }
            term accept-v6-dns {
                from {
                    source-prefix-list {
                        DNS-servers-v6;
                    }
                    destination-prefix-list {
                        LOCALS-v6;
                    }
                    payload-protocol udp;
                    source-port 53;
                }
                then {
                    policer management-1m;
                    count accept-v6-dns;
                }
            }
            term accept-v6-ntp {
                from {
                    source-prefix-list {
                        NTP-servers-v6;
                        LOCALS-v6;
                    }
                    destination-prefix-list {
                        LOCALS-v6;
                    }
                    payload-protocol udp;
                    destination-port ntp;
                }
                then {
                    policer management-512k;
                    count accept-v6-ntp;
                    accept;
                }
            }
            term discard-v6-tcp {
                from {
                    payload-protocol tcp;
                }
                then {
                    count discard-v6-tcp;
                    log;
                    discard;
                }
            }
            term discard-v6-udp {
                from {
                    payload-protocol udp;
                }
                then {
                    count discard-v6-udp;
                    log;
                    discard;
                }
            }
            term discard-v6-icmp {
                from {
                    destination-prefix-list {
                        LOCALS-v6;
                    }
                    payload-protocol icmp6;
                }
                then {
                    count discard-v6-icmp;
                    log;
                    discard;
                }
            }
            term discard-v6-unknown {
                then {
                    count discard-v6-unknown;
                    log;
                    discard;
                }
            }
        }
        filter filter-internet-traffic-v6 {
            term accept-v6-icmp {
                from {
                    payload-protocol icmp6;
                    icmp-type [ echo-reply echo-request time-exceeded router-advertisement parameter-problem destination-unreachable packet-too-big router-solicit neighbor-solicit neighbor-advertisement redirect ];
                }
                then {
                    count accept-v6-icmp;
                    accept;
                }
            }
            term reject-amplified-reflection-attack {
                from {
                    payload-protocol udp;
                    source-port [ 6881 19 389 751 11211 1434 5353 137 111 17 27960 520 161 1900 27015 ];
                }
                then {
                    count reject-amplified-reflection-attack;
                    discard;
                }
            }
            term accept-bfd-v6 {
                from {
                    source-prefix-list {
                        BGP-neighbors-v6;
                    }
                    payload-protocol udp;
                    source-port 49152-65535;
                    destination-port [ 3784-3785 4784 ];
                }
                then accept;
            }
            term allow-tcp-est-v6 {
                from {
                    payload-protocol tcp;
                    tcp-established;
                }
                then {
                    count allow-tcp-est;
                    accept;
                }
            }
            term accept-port-443-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    port 443;
                }
                then {
                    count accept-port-443-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-44445-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port 44445;
                }
                then {
                    count accept-port-44445-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-any-to-dr2-public-ip-net-v6 {
                from {
                    destination-prefix-list {
                        dr2-public-ip-net-v6;
                    }
                    payload-protocol [ tcp udp esp ];
                }
                then {
                    count accept-any-to-dr2-public-ip-net-v6;
                    accept;
                }
            }
            term block-ssh-from-office-or-cross-dc-v6 {
                from {
                    source-prefix-list {
                        example-office-networks-v6;
                        global-example-prefixes-v6;
                        not-owned-by-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port ssh;
                }
                then {
                    count block-ssh-from-office-or-cross-dc-v6;
                    log;
                    discard;
                }
            }
            term accept-example-office-networks-v6 {
                from {
                    source-prefix-list {
                        example-office-networks-v6;
                    }
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                }
                then {
                    count example-office-networks-v6;
                    accept;
                }
            }
            term accept-cross-datacenter-traffic-v6 {
                from {
                    source-prefix-list {
                        global-example-prefixes-v6;
                        not-owned-by-example-prefixes-v6;
                    }
                    destination-prefix-list {
                        global-example-prefixes-v6;
                        not-owned-by-example-prefixes-v6;
                    }
                }
                then {
                    count accept-cross-datacenter-traffic;
                    accept;
                }
            }
            term accept-port-9090-from-to-example-prefixes-v6 {
                from {
                    source-prefix-list {
                        global-example-prefixes-v6;
                    }
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port 9090;
                }
                then {
                    count accept-port-9090-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-tracert-udp-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol udp;
                    destination-port 33434-33534;
                }
                then {
                    policer management-1m;
                    count accept-tracert-udp-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-80-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    port 80;
                }
                then {
                    count accept-port-80-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-7780-7900-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port 7770-7800;
                }
                then {
                    count accept-port-7770-7800-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-8080-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port 8080;
                }
                then {
                    count accept-port-8080-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-8443-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port 8443;
                }
                then {
                    count accept-port-8443-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-source-port-53-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                        not-owned-by-example-prefixes-v6;
                    }
                    payload-protocol udp;
                    source-port 53;
                }
                then {
                    count accept-source-port-53-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-8444-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port 8444;
                }
                then {
                    count accept-port-8444-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-55555-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port 55555;
                }
                then {
                    count accept-port-55555-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-55556-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                    }
                    payload-protocol tcp;
                    destination-port 55556;
                }
                then {
                    count accept-port-55556-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-port-1194-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                        not-owned-by-example-prefixes-v6;
                    }
                    payload-protocol [ udp tcp ];
                    destination-port 1194;
                }
                then {
                    count accept-port-1194-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-source-port-1194-to-example-prefixes-v6 {
                from {
                    destination-prefix-list {
                        global-example-prefixes-v6;
                        not-owned-by-example-prefixes-v6;
                    }
                    payload-protocol udp;
                    source-port 1194;
                }
                then {
                    count accept-source-port-1194-to-example-prefixes-v6;
                    accept;
                }
            }
            term accept-bgp-dst-v6 {
                from {
                    source-prefix-list {
                        BGP-neighbors-v6;
                        BGP-neighbors-inst-v6;
                    }
                    destination-prefix-list {
                        BGP-locals-v6;
                        BGP-locals-inst-v6;
                    }
                    payload-protocol tcp;
                    destination-port bgp;
                }
                then {
                    count accept-bgp-dst;
                    accept;
                }
            }
            term accept-bgp-src-v6 {
                from {
                    source-prefix-list {
                        BGP-neighbors-v6;
                        BGP-neighbors-inst-v6;
                    }
                    destination-prefix-list {
                        BGP-locals-v6;
                        BGP-locals-inst-v6;
                    }
                    payload-protocol tcp;
                    source-port bgp;
                }
                then {
                    count accept-bgp-src;
                    accept;
                }
            }
            term discard-unknown {
                then {
                    count discard-unknown;
                    discard;
                }
            }
        }
    }
    policer additional-1m {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 625k;
        }
        then discard;
    }
    policer dns-server-10m {
        if-exceeding {
            bandwidth-limit 10m;
            burst-size-limit 5m;
        }
        then discard;
    }
    policer management-1m {
        if-exceeding {
            bandwidth-limit 1m;
            burst-size-limit 625k;
        }
        then discard;
    }
    policer management-512k {
        if-exceeding {
            bandwidth-limit 512k;
            burst-size-limit 25k;
        }
        then discard;
    }
    policer management-5m {
        if-exceeding {
            bandwidth-limit 5m;
            burst-size-limit 625k;
        }
        then discard;
    }
}
routing-options {
    rib inet6.0 {
        static {
            route ::/0 {
                next-hop 2001:1900:5:2:2::1a79;
                preference 180;
            }
        }
        aggregate {
            route 2a07:7940:bb::/48;
            route 2a07:7940:0:ffff::/64;
        }
    }
    router-id 10.3.254.7;
    autonomous-system 64900;
    graceful-restart;
    static {
        route 0.0.0.0/0 {
            next-hop 203.0.113.102;
            preference 180;
        }
        route 10.0.0.0/8 {
            discard;
            preference 180;
        }
        route 10.1.0.0/16 {
            next-hop 10.2.254.0;
            qualified-next-hop 10.2.254.2 {
                preference 185;
            }
            preference 180;
        }
        route 198.51.100.215/24 {
            next-hop 10.2.42.51;
            qualified-next-hop 10.2.42.55 {
                preference 185;
            }
            preference 180;
        }
        route 172.16.0.0/12 {
            discard;
            preference 180;
        }
        route 192.0.2.50/24 {
            next-hop 10.2.42.51;
            qualified-next-hop 10.2.42.55 {
                preference 185;
            }
            preference 180;
        }
        route 192.0.2.71/24 {
            next-hop 10.2.42.51;
            qualified-next-hop 10.2.42.55 {
                preference 185;
            }
            preference 180;
        }
        route 192.0.2.219/24 {
            next-hop 10.2.42.51;
            qualified-next-hop 10.2.42.55 {
                preference 185;
            }
            preference 180;
        }
        route 203.0.113.210/24 {
            next-hop 10.2.42.51;
            qualified-next-hop 10.2.42.55 {
                preference 185;
            }
            preference 180;
        }
        route 192.168.0.0/16 {
            discard;
            preference 180;
        }
    }
    aggregate {
        route 10.3.254.0/24;
    }
    forwarding-table {
        export loadbalance;
    }
    validation {
        group BGP_PREFIX_VALIDATOR {
            session 10.1.238.55 {
                refresh-time 120;
                hold-time 240;
                port 3323;
                local-address 10.3.254.7;
            }
            session 10.1.251.55 {
                refresh-time 120;
                hold-time 240;
                port 3323;
                local-address 10.3.254.7;
            }
        }
    }
}
protocols {
    bgp {
        group COLT_ISP_V6 {
            type external;
            hold-time 18;
            import COLT_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:1900:5:2:2::1a79 {
                description "TransitB HSIP Transit 447600952 v6";
                local-address 2001:1900:5:2:2::1a7a;
                peer-as 65105;
            }
        }
        group COLT_ISP_V4 {
            type external;
            hold-time 18;
            import COLT_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.102 {
                description "TransitB HSIP Transit 447600952 v4";
                local-address 203.0.113.185;
                peer-as 65105;
            }
        }
        group MSFT_PEER_V4 {
            type external;
            hold-time 18;
            import MSFT_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 198.51.100.90 {
                description "Microsoft v4 PNI";
                local-address 198.51.100.166;
                peer-as 8075;
            }
        }
        group MSFT_PEER_V6 {
            type external;
            hold-time 18;
            import MSFT_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2a01:111:2000:1::2046 {
                description "Microsoft v6 PNI";
                local-address 2a01:111:2000:1::2045;
                peer-as 8075;
            }
        }
        group MLPE_IXRC_V4 {
            type external;
            hold-time 18;
            import DENY_BGP_ALL;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.122 {
                description "Equinix MLPE Route Collector";
                local-address 198.51.100.24;
                peer-as 65517;
            }
        }
        group MLPE_IXRC_V6 {
            type external;
            hold-time 18;
            import GENERIC_BGP_ADV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8:bd::6:5517:1 {
                description "Equinix MLPE Route Collector V6";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 65517;
            }
        }
        group MLPE_IXRS_V4 {
            type external;
            hold-time 18;
            import MLPE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 198.51.100.33 {
                description "Equinix MLPE Route Server 01";
                local-address 198.51.100.24;
                peer-as 24115;
            }
            neighbor 203.0.113.162 {
                description "Equinix MLPE Route Server 02";
                local-address 198.51.100.24;
                peer-as 24115;
            }
        }
        group MLPE_IXRS_V6 {
            type external;
            hold-time 18;
            import MLPE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8:bd::2:4115:1 {
                description "Equinix MLPE Route Server 01 V6";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 24115;
            }
            neighbor 2001:7f8:bd::2:4115:2 {
                description "Equinix MLPE Route Server 02 V6";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 24115;
            }
        }
        group HE_IXPEER_V4 {
            type external;
            import HE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.105 {
                description "Hurricane Electric v4 Peer 01 via MLPE";
                local-address 198.51.100.24;
                peer-as 65107;
            }
            neighbor 203.0.113.165 {
                description "Hurricane Electric v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 65107;
            }
        }
        group HE_IXPEER_V6 {
            type external;
            import HE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8:bd::65107:1 {
                description "Hurricane Electric v6 Peer 01 via MLPE";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 65107;
            }
            neighbor 2001:7f8::1b1b:0:1 {
                description "Hurricane Electric v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65107;
            }
        }
        group CLOUDFLARE_IXPEER_V4 {
            type external;
            hold-time 18;
            import CLOUDFLARE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.199 {
                description "CLOUDFLARE v4 Peer 01 via MLPE";
                local-address 198.51.100.24;
                peer-as 13335;
            }
            neighbor 203.0.113.60 {
                description "CLOUDFLARE v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                export CLOUDFLARE_BGP_ADV_V4;
                peer-as 13335;
            }
            neighbor 203.0.113.33 {
                description "CLOUDFLARE v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                export CLOUDFLARE_BGP_ADV_V4;
                peer-as 13335;
            }
        }
        group CLOUDFLARE_IXPEER_V6 {
            type external;
            hold-time 18;
            import CLOUDFLARE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8:bd::1:3335:1 {
                description "CLOUDFLARE v6 Peer 01 via MLPE";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 13335;
            }
            neighbor 2001:7f8::3417:0:1 {
                description "CLOUDFLARE v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                export CLOUDFLARE_BGP_ADV_V6;
                peer-as 13335;
            }
            neighbor 2001:7f8::3417:0:2 {
                description "CLOUDFLARE v6 Peer 02 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                export CLOUDFLARE_BGP_ADV_V6;
                peer-as 13335;
            }
        }
        group GOOGLE_IXPEER_V4 {
            type external;
            hold-time 18;
            import GOOGLE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            authentication-key "REDACTED";
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            graceful-restart {
                restart-time 300;
            }
            neighbor 192.0.2.201 {
                description "Google v4 Peer 01 via MLPE";
                local-address 198.51.100.24;
                peer-as 15169;
            }
            neighbor 198.51.100.177 {
                description "Google v4 Peer 02 via MLPE";
                local-address 198.51.100.24;
                peer-as 15169;
            }
            neighbor 192.0.2.126 {
                description "Google v4 Peer 01 via DECIX";
                local-address 198.51.100.134;
                export GOOGLE_BGP_ADV_V4;
                peer-as 15169;
            }
            neighbor 198.51.100.47 {
                description "Google v4 Peer 02 via DECIX";
                local-address 198.51.100.134;
                export GOOGLE_BGP_ADV_V4;
                peer-as 15169;
            }
        }
        group GOOGLE_IXPEER_V6 {
            type external;
            import GOOGLE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            authentication-key "REDACTED";
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            graceful-restart {
                restart-time 300;
            }
            neighbor 2001:7f8:bd::1:5169:2 {
                description "Google v6 Peer 01 via MLPE";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 15169;
            }
            neighbor 2001:7f8:bd::1:5169:1 {
                description "Google v6 Peer 02 via MLPE";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 15169;
            }
            neighbor 2001:7f8::3b41:0:1 {
                description "Google v6 Peer 01 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                export GOOGLE_BGP_ADV_V6;
                peer-as 15169;
            }
            neighbor 2001:7f8::3b41:0:2 {
                description "Google v6 Peer 02 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                export GOOGLE_BGP_ADV_V6;
                peer-as 15169;
            }
        }
        group PEER-A-FW-01_V4 {
            type external;
            import PEER-A-FW-01_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export PEER-A-FW-01_BGP_ADV_V4;
            peer-as 4200042001;
            local-as 64900;
            neighbor 10.2.254.0 {
                description peer-a-fw-01;
                local-address 10.2.254.1;
            }
        }
        group PEER-A-SW-01_V6 {
            type external;
            import PEER-A-SW-01_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export PEER-A-SW-01_BGP_ADV_V6;
            local-as 64900;
            multipath {
                multiple-as;
            }
            neighbor 2a07:7940:dc:18:51:101::3 {
                description peer-a-sw-01a;
                local-address 2a07:7940:dc:18:51:101::2;
                peer-as 4200042101;
            }
            neighbor 2a07:7940:dc:18:51:121::3 {
                description peer-a-sw-01b;
                local-address 2a07:7940:dc:18:51:121::2;
                peer-as 4200042121;
            }
        }
        group PEER-A-SW-01_V4 {
            type external;
            import PEER-A-SW-01_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export PEER-A-SW-01_BGP_ADV_V4;
            local-as 64900;
            multipath {
                multiple-as;
            }
            neighbor 10.2.42.51 {
                description peer-a-sw-01a;
                local-address 10.2.42.50;
                peer-as 4200042101;
            }
            neighbor 10.2.42.55 {
                description peer-a-sw-01b;
                local-address 10.2.42.54;
                peer-as 4200042121;
            }
        }
        group DECIX_IXRS_V4 {
            type external;
            import DECIX_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            peer-as 6695;
            local-as 64900;
            neighbor 192.0.2.85 {
                description "DE-CIX v4 Route server 01";
                local-address 198.51.100.134;
            }
            neighbor 192.0.2.212 {
                description "DE-CIX v4 Route server 02";
                local-address 198.51.100.134;
            }
        }
        group DECIX_IXRS_V6 {
            type external;
            hold-time 18;
            import DECIX_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::1a27:5051:c09d {
                description "DECIX v6 Route server 01";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 6695;
            }
            neighbor 2001:7f8::1a27:5051:c19d {
                description "DECIX v6 Route server 02";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 6695;
            }
        }
        group AWS_IXPEER_V4 {
            type external;
            import AWS_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.106 {
                description "CLOUDA v4 Peer 01 via DECIX";
                local-address 198.51.100.134;
                peer-as 65104;
            }
            neighbor 192.0.2.35 {
                description "CLOUDA v4 Peer 02 via DECIX";
                local-address 198.51.100.134;
                peer-as 65104;
            }
        }
        group AWS_IXPEER_V6 {
            type external;
            import AWS_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::407d:0:1 {
                description "CLOUDA v6 Peer 01 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65104;
            }
            neighbor 2001:7f8::407d:0:2 {
                description "CLOUDA v6 Peer 01 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65104;
            }
        }
        group ETISALAT_IXPEER_V4 {
            type external;
            import ETISALAT_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.87 {
                description "Etisalat v4 via DECIX";
                local-address 198.51.100.134;
                peer-as 8966;
            }
        }
        group ETISALAT_IXPEER_V6 {
            type external;
            import ETISALAT_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::2306:0:1 {
                description "Etisalat v6 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8966;
            }
        }
        group COLT_IXPEER_V4 {
            type external;
            import COLT_IXBGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.224 {
                description "TransitB v4 Peer 01 via DECIX";
                local-address 198.51.100.134;
                peer-as 65106;
            }
            neighbor 198.51.100.253 {
                description "TransitB v4 Peer 02 via DECIX";
                local-address 198.51.100.134;
                peer-as 65106;
            }
        }
        group COLT_IXPEER_V6 {
            type external;
            import COLT_IXBGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::201c:0:1 {
                description "TransitB v6 Peer 01 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65106;
            }
            neighbor 2001:7f8::201c:0:2 {
                description "TransitB v6 Peer 02 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65106;
            }
        }
        group CDNA_IXPEER_V4 {
            type external;
            import CDNA_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.198 {
                description "CdnA v4 Peer 01 via DECIX";
                local-address 198.51.100.134;
                peer-as 65102;
            }
            neighbor 192.0.2.213 {
                description "CdnA v4 Peer 02 via DECIX";
                local-address 198.51.100.134;
                peer-as 65102;
            }
            neighbor 198.51.100.198 {
                description "CdnA v4 Peer 03 via DECIX";
                local-address 198.51.100.134;
                peer-as 65102;
            }
        }
        group CDNA_IXPEER_V6 {
            type external;
            import CDNA_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::51cc:0:28 {
                description "CdnA v6 Peer 01 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65102;
            }
            neighbor 2001:7f8::51cc:0:168 {
                description "CdnA v6 Peer 02 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65102;
            }
            neighbor 2001:7f8::51cc:1:168 {
                description "CdnA v6 Peer 03 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65102;
            }
        }
        group FASTWEB_IXPEER_V4 {
            type external;
            import FASTWEB_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.58 {
                description "FASTWEB v4 Peer 01 via DECIX";
                local-address 198.51.100.134;
                peer-as 12874;
            }
        }
        group FASTWEB_IXPEER_V6 {
            type external;
            import FASTWEB_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::324a:0:1 {
                description "FASTWEB v6 Peer 01 via DECIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 12874;
            }
        }
        group EXPONENTIALE_IXPEER_V4 {
            type external;
            import EXPONENTIALE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.90 {
                description "Exponential-E v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 25180;
            }
        }
        group EXPONENTIALE_IXPEER_V6 {
            type external;
            import EXPONENTIALE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::625c:0:1 {
                description "Exponential-E v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 25180;
            }
        }
        group HETZNER_IXPEER_V4 {
            type external;
            import HETZNER_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.128 {
                description "Hetzner v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 24940;
            }
            neighbor 203.0.113.59 {
                description "Hetzner v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 24940;
            }
            neighbor 198.51.100.145 {
                description "Hetzner v4 Peer 03 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 24940;
            }
        }
        group HETZNER_IXPEER_V6 {
            type external;
            import HETZNER_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::616c:0:1 {
                description "Hetzner v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 24940;
            }
            neighbor 2001:7f8::616c:0:2 {
                description "Hetzner v6 Peer 02 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 24940;
            }
            neighbor 2001:7f8::616c:0:3 {
                description "Hetzner v6 Peer 03 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 24940;
            }
        }
        group FREENET_IXPEER_V4 {
            type external;
            import FREENET_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.123 {
                description "FreenetDE v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 5430;
            }
        }
        group FREENET_IXPEER_V6 {
            type external;
            import FREENET_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::1536:0:1 {
                description "FreenetDE v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 5430;
            }
        }
        group BAHNHOF_IXPEER_V4 {
            type external;
            import BAHNHOF_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.254 {
                description "Bahnhof v4 Peer 01 via AMS-IX";
                local-address 198.51.100.134;
                peer-as 8473;
            }
        }
        group BAHNHOF_IXPEER_V6 {
            type external;
            import BAHNHOF_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::2119:0:1 {
                description "Bahnhof v6 Peer 01 via AMS-IX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8473;
            }
        }
        group TKRZ_IXPEER_V4 {
            type external;
            import TKRZ_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.133 {
                description "TKRZ v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 42184;
            }
        }
        group TKRZ_IXPEER_V6 {
            type external;
            import TKRZ_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::a4c8:0:1 {
                description "TKRZ v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 42184;
            }
        }
        group WINDTRE_IXPEER_V4 {
            type external;
            import WINDTRE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.206 {
                description "Windtre v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 1267;
            }
            neighbor 192.0.2.5 {
                description "Windtre v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 1267;
            }
        }
        group WINDTRE_IXPEER_V6 {
            type external;
            import WINDTRE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::4f3:0:1 {
                description "Windtre v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 1267;
            }
            neighbor 2001:7f8::4f3:0:2 {
                description "Windtre v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 1267;
            }
        }
        group MANDA_IXPEER_V4 {
            type external;
            import MANDA_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.17 {
                description "Manda v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8365;
            }
        }
        group MANDA_IXPEER_V6 {
            type external;
            import MANDA_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::20ad:0:1 {
                description "Manda v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8365;
            }
        }
        group TELEFONICA_IXPEER_V4 {
            type external;
            import TELEFONICA_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.107 {
                description "Telefonica v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 6805;
            }
            neighbor 203.0.113.111 {
                description "Telefonica v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 6805;
            }
        }
        group TELEFONICA_IXPEER_V6 {
            type external;
            import TELEFONICA_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::1a95:0:1 {
                description "Telefonica v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 6805;
            }
            neighbor 2001:7f8::1a95:0:2 {
                description "Telefonica v6 Peer 02 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 6805;
            }
        }
        group PEERB_IXPEER_V4 {
            type external;
            import PEERB_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.214 {
                description "PEERB v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 65103;
            }
        }
        group PEERB_IXPEER_V6 {
            type external;
            import PEERB_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::2107:0:1 {
                description "PEERB v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 65103;
            }
        }
        group M247_IXPEER_V4 {
            type external;
            import M247_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 198.51.100.100 {
                description "M247 v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 9009;
            }
        }
        group M247_IXPEER_V6 {
            type external;
            import M247_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::2331:0:1 {
                description "M247 v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 9009;
            }
        }
        group I3D_IXPEER_V4 {
            type external;
            import I3D_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.135 {
                description "i3D v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 49544;
            }
        }
        group I3D_IXPEER_V6 {
            type external;
            import I3D_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::c188:0:1 {
                description "i3D v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 49544;
            }
        }
        group DU_IXPEER_V4 {
            type external;
            import DU_BGP_RCV_V4;
            family inet {
                unicast;
            }
            authentication-key "REDACTED";
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.215 {
                description "DU v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 15802;
            }
        }
        group DU_IXPEER_V6 {
            type external;
            import DU_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            authentication-key "REDACTED";
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::3dba:0:1 {
                description "DU v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 15802;
            }
        }
        group CLARANET_IXPEER_V4 {
            type external;
            import CLARANET_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.169 {
                description "Clara.net v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8426;
            }
            neighbor 192.0.2.37 {
                description "Clara.net v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8426;
            }
        }
        group CLARANET_IXPEER_V6 {
            type external;
            import CLARANET_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::20ea:0:1 {
                description "Clara.net v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8426;
            }
            neighbor 2001:7f8::20ea:0:2 {
                description "Clara.net v6 Peer 02 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8426;
            }
        }
        group BOUYGUES_IXPEER_V4 {
            type external;
            import BOUYGUES_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.115 {
                description "Bouygues Telecom v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 5410;
            }
        }
        group BOUYGUES_IXPEER_V6 {
            type external;
            import BOUYGUES_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::1522:0:1 {
                description "Bouygues Telecom v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 5410;
            }
        }
        group CELLCOM_IXPEER_V4 {
            type external;
            import CELLCOM_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.149 {
                description "CELLCOM v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                export CELLCOM_BGP_ADV_V4;
                peer-as 1680;
            }
            neighbor 192.0.2.142 {
                description "CELLCOM v4 Peer 01 via MLPE";
                local-address 198.51.100.24;
                peer-as 1680;
            }
        }
        group CELLCOM_IXPEER_V6 {
            type external;
            import CELLCOM_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::690:194:47 {
                description "CELLCOM v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                export CELLCOM_BGP_ADV_V6;
                peer-as 1680;
            }
            neighbor 2001:7f8:bd::1680:1 {
                description "CELLCOM v6 Peer 01 via MLPE";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 1680;
            }
        }
        group FREEPRO_IXPEER_V4 {
            type external;
            import FREEPRO_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.128 {
                description "FreePro v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 30781;
            }
        }
        group FREEPRO_IXPEER_V6 {
            type external;
            import FREEPRO_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::783d:0:1 {
                description "FreePro v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 30781;
            }
        }
        group QUICKLINE_IXPEER_V4 {
            type external;
            import QUICKLINE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.226 {
                description "Quickline v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 15600;
            }
        }
        group QUICKLINE_IXPEER_V6 {
            type external;
            import QUICKLINE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::3cf0:0:1 {
                description "Quickline v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 15600;
            }
        }
        group SIPARTECH_IXPEER_V4 {
            type external;
            import SIPARTECH_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.13 {
                description "Sipartech v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8309;
            }
        }
        group SIPARTECH_IXPEER_V6 {
            type external;
            import SIPARTECH_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::2075:0:1 {
                description "Sipartech v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8309;
            }
        }
        group LINK11_IXPEER_V4 {
            type external;
            import LINK11_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.62 {
                description "LINK 11 v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 34309;
            }
            neighbor 203.0.113.131 {
                description "LINK 11 v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 34309;
            }
        }
        group LINK11_IXPEER_V6 {
            type external;
            import LINK11_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::8605:0:1 {
                description "LINK 11 v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 34309;
            }
            neighbor 2001:7f8::8605:0:2 {
                description "LINK 11 v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 34309;
            }
        }
        group DFN_IXPEER_V4 {
            type external;
            import DFN_BGP_RCV_V4;
            family inet {
                unicast;
            }
            authentication-key "REDACTED";
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 198.51.100.9 {
                description "DFN v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 680;
            }
            neighbor 198.51.100.223 {
                description "DFN v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 680;
            }
        }
        group DFN_IXPEER_V6 {
            type external;
            import DFN_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            authentication-key "REDACTED";
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::2a8:0:1 {
                description "DFN v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 680;
            }
            neighbor 2001:7f8::2a8:0:2 {
                description "DFN v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 680;
            }
        }
        group NETGLOBAL_IXPEER_V4 {
            type external;
            import NETGLOBAL_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.226 {
                description "NETGLOBAL v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 50316;
            }
        }
        group NETGLOBAL_IXPEER_V6 {
            type external;
            import NETGLOBAL_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::c48c:0:1 {
                description "NETGLOBAL v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 50316;
            }
        }
        group 1-X_IXPEER_V4 {
            type external;
            import 1-X_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 198.51.100.194 {
                description "1-X v4 Peer via MLPE";
                local-address 198.51.100.24;
                peer-as 50263;
            }
        }
        group 1-X_IXPEER_V6 {
            type external;
            import 1-X_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8:bd::5:263:1 {
                description "1-X v6 Peer  via MLPE";
                local-address 2001:7f8:bd::3:5793:1;
                peer-as 50263;
            }
        }
        group VIANOVA_IXPEER_V4 {
            type external;
            import VIANOVA_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.93 {
                description "Vianova v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 21056;
            }
        }
        group VIANOVA_IXPEER_V6 {
            type external;
            import VIANOVA_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::5240:0:1 {
                description "Vianova v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 21056;
            }
        }
        group PEER-A-NTW-INFRA-01_V4 {
            type external;
            import PEER-A-NTW-INFRA-01_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export PEER-A-NTW-INFRA-01_BGP_ADV_V4;
            peer-as 4202254003;
            local-as 64900;
            neighbor 10.2.249.5 {
                description peer-a-ntw-infra-01;
                local-address 10.2.249.4;
            }
        }
        group BB_V4 {
            type internal;
            hold-time 18;
            import BB_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export BB_BGP_ADV_V4;
            peer-as 64900;
            local-as 64900;
            multipath {
                multiple-as;
            }
            neighbor 10.3.254.5 {
                description dc03-rt-01;
                local-address 10.3.254.7;
            }
            neighbor 10.3.254.6 {
                description peer-b-rt-01;
                local-address 10.3.254.7;
            }
            neighbor 10.3.254.8 {
                description dc04-rt-01;
                local-address 10.3.254.7;
            }
            neighbor 10.3.254.133 {
                description dc03-rt-02;
                local-address 10.3.254.7;
            }
            neighbor 10.3.254.134 {
                description peer-b-rt-02;
                local-address 10.3.254.7;
            }
            neighbor 10.3.254.135 {
                description peer-a-rt-02;
                local-address 10.3.254.7;
            }
            neighbor 10.3.254.136 {
                description dc04-rt-02;
                local-address 10.3.254.7;
            }
        }
        group BB_V6 {
            type internal;
            hold-time 18;
            import BB_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export BB_BGP_ADV_V6;
            peer-as 64900;
            local-as 64900;
            multipath {
                multiple-as;
            }
            neighbor 2a07:7940:0:ffff:12::1 {
                description peer-b-rt-01;
                local-address 2a07:7940:0:ffff:18::1;
            }
            neighbor 2a07:7940:0:ffff:12::2 {
                description peer-b-rt-02;
                local-address 2a07:7940:0:ffff:18::1;
            }
            neighbor 2a07:7940:0:ffff:13::1 {
                description dc03-rt-01;
                local-address 2a07:7940:0:ffff:18::1;
            }
            neighbor 2a07:7940:0:ffff:13::2 {
                description dc03-rt-02;
                local-address 2a07:7940:0:ffff:18::1;
            }
            neighbor 2a07:7940:0:ffff:17::1 {
                description dc04-rt-01;
                local-address 2a07:7940:0:ffff:18::1;
            }
            neighbor 2a07:7940:0:ffff:17::2 {
                description dc04-rt-02;
                local-address 2a07:7940:0:ffff:18::1;
            }
            neighbor 2a07:7940:0:ffff:18::2 {
                description peer-a-rt-02;
                local-address 2a07:7940:0:ffff:18::1;
            }
        }
        group ORACLE_IXPEER_V4 {
            type external;
            import ORACLE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.152 {
                description "Oracle v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 31898;
            }
        }
        group ORACLE_IXPEER_V6 {
            type external;
            import ORACLE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::7c9a:0:1 {
                description "Oracle v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 31898;
            }
        }
        group ZETNET_IXPEER_V4 {
            type external;
            import ZETNET_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.138 {
                description "ZETNET v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 6204;
            }
        }
        group ZETNET_IXPEER_V6 {
            type external;
            import ZETNET_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::626e:0:1 {
                description "ZETNET v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 6204;
            }
        }
        group MEO_IXPEER_V4 {
            type external;
            import MEO_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.8 {
                description "MEO v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8657;
            }
        }
        group MEO_IXPEER_V6 {
            type external;
            import MEO_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::21d1:0:1 {
                description "MEO v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8657;
            }
        }
        group OOREDOO_IXPEER_V4 {
            type external;
            import OOREDOO_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.27 {
                description "Ooredoo v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8781;
            }
        }
        group OOREDOO_IXPEER_V6 {
            type external;
            import OOREDOO_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::224d:0:1 {
                description "Ooredoo v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8781;
            }
        }
        group OTE_IXPEER_V4 {
            type external;
            import OTE_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 192.0.2.117 {
                description "OTE v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 12713;
            }
        }
        group OTE_IXPEER_V6 {
            type external;
            import OTE_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::31a9:0:1 {
                description "OTE v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 12713;
            }
        }
        group BEZEQ_IXPEER_V4 {
            type external;
            import BEZEQ_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 198.51.100.77 {
                description "BEZEQ v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8551;
            }
            neighbor 203.0.113.64 {
                description "BEZEQ v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8551;
            }
        }
        group BEZEQ_IXPEER_V6 {
            type external;
            import BEZEQ_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::2167:0:1 {
                description "BEZEQ v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8551;
            }
            neighbor 2001:7f8::2167:0:2 {
                description "BEZEQ v6 Peer 02 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8551;
            }
        }
        group INIT7_IXPEER_V4 {
            type external;
            import INIT7_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.171 {
                description "Init7 v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 13030;
            }
            neighbor 198.51.100.25 {
                description "Init7 v4 Peer 02 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 13030;
            }
        }
        group INIT7_IXPEER_V6 {
            type external;
            import INIT7_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::32e6:0:1 {
                description "Init7 v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 13030;
            }
            neighbor 2001:7f8::32e6:0:2 {
                description "Init7 v6 Peer 02 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 13030;
            }
        }
        group A1_IXPEER_V4 {
            type external;
            hold-time 18;
            import A1_BGP_RCV_V4;
            family inet {
                unicast;
            }
            export GENERIC_BGP_ADV_V4;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 203.0.113.207 {
                description "A1 Telekom v4 Peer 01 via DE-CIX";
                local-address 198.51.100.134;
                peer-as 8447;
            }
        }
        group A1_IXPEER_V6 {
            type external;
            hold-time 18;
            import A1_BGP_RCV_V6;
            family inet6 {
                unicast;
            }
            export GENERIC_BGP_ADV_V6;
            remove-private {
                all;
            }
            local-as 64900;
            neighbor 2001:7f8::20ff:0:1 {
                description "A1 Telekom v6 Peer 01 via DE-CIX";
                local-address 2001:7f8::8bd1:0:1;
                peer-as 8447;
            }
        }
        traceoptions {
            file bgp size 5m files 4 world-readable;
            flag open;
            flag normal;
            flag state;
        }
        mtu-discovery;
        log-updown;
        bgp-error-tolerance {
            malformed-update-log-interval 10;
            malformed-route-limit 5;
        }
    }
    isis {
        interface et-0/1/7.0 {
            level 2 metric 900;
            point-to-point;
        }
        interface ae0.0 {
            level 2 metric 10;
            point-to-point;
        }
        interface lo0.0;
        level 1 disable;
        level 2 wide-metrics-only;
        spf-options rapid-runs 1;
        traceoptions {
            flag normal;
            flag error;
            flag state;
            file isis.log size 1m files 10 world-readable;
        }
        lsp-lifetime 65535;
    }
    lldp {
        interface all;
        interface et-0/1/4 {
            disable;
        }
        interface et-0/1/5 {
            disable;
        }
        interface et-0/1/6 {
            disable;
        }
        interface et-0/1/7 {
            disable;
        }
        interface xe-0/1/11:0 {
            disable;
        }
    }
    sflow {
        polling-interval 60;
        sample-rate egress 10000;
        source-ip 10.3.254.7;
        collector 10.1.247.240 {
            udp-port 9995;
        }
        interfaces et-0/1/2.0;
        interfaces et-0/1/3.0;
    }
}
bridge-domains {
    SRX-Redundancy {
        domain-type bridge;
        vlan-id 2;
        interface xe-0/1/10:3.0;
        interface xe-0/1/11:3.0;
        routing-interface irb.0;
    }
}
