version 15.2
no service pad
service timestamps debug datetime
service timestamps log datetime
service password-encryption
!
hostname cat-temp-gw
!
boot-start-marker
boot-end-marker
!
!
vrf definition vpn_20
 rd 100:20
 !
 address-family ipv4
  export ipv4 unicast map RM4_Export_20
  route-target export 100:20
  route-target import 100:6
 exit-address-family
 !
 address-family ipv6
  export ipv6 unicast map RM6_Export_20
  route-target export 100:20
  route-target import 100:6
 exit-address-family
!
vrf definition vpn_test
 rd 100:6
 !
 address-family ipv4
  export ipv4 unicast map TEST_MAP1
  route-target export 100:6
  route-target import 100:20
 exit-address-family
 !
 address-family ipv6
  export ipv6 unicast map TEST_MAP2
  route-target export 100:6
  route-target import 100:20
 exit-address-family
!
logging buffered informational
enable secret 5 $1$tDit$GGph3kATW03cFTBqOlO6/0
!
no aaa new-model
system mtu routing 1500
ip routing
!
!
!
ip device tracking
ipv6 unicast-routing
vtp mode transparent
!
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree extend system-id
!
spanning-tree mst configuration
 name region20
 revision 1
 instance 1 vlan 1-3, 6-19, 21-49, 51-89, 91-100, 102-189, 191-204, 206-956
 instance 1 vlan 958-4094
 instance 2 vlan 4-5, 20, 50, 90, 101, 190, 205, 957
!
!
!
!
!
!
errdisable recovery cause link-flap
errdisable recovery cause storm-control
errdisable recovery interval 60
!
!
!
!
vlan internal allocation policy ascending
!
vlan 20,85
!
vlan 4092
 name Common_NATIVE
!
ip ssh source-interface Loopback0
ip ssh version 2
!
......
interface Vlan20
 vrf forwarding vpn_20
 ip address 192.168.20.3 255.255.255.0
 ipv6 address FE80::3 link-local
 ipv6 address FC00:192:168:20::3/64
 ipv6 enable
 ospfv3 priority 0
!
interface Vlan85
 description TEST
 vrf forwarding vpn_test
 ip address 192.168.85.1 255.255.255.0
 ipv6 address FC00:192:168:85::1/64
!
router bgp 65535
 bgp log-neighbor-changes
 redistribute connected
 !
 address-family ipv4 vrf vpn_20
  redistribute connected
 exit-address-family
 !
 address-family ipv6 vrf vpn_20
  redistribute connected
 exit-address-family
 !
 address-family ipv4 vrf vpn_test
  redistribute connected
 exit-address-family
 !
 address-family ipv6 vrf vpn_test
  redistribute connected
 exit-address-family
!
ip forward-protocol nd
no ip forward-protocol udp tftp
no ip forward-protocol udp nameserver
no ip forward-protocol udp domain
no ip forward-protocol udp time
no ip forward-protocol udp netbios-ns
no ip forward-protocol udp netbios-dgm
no ip forward-protocol udp tacacs
!
no ip http server
no ip http secure-server
!
ip route vrf vpn_test 0.0.0.0 0.0.0.0 192.168.20.12
!
ip access-list standard ACL_Admin_access
 permit 192.168.20.0 0.0.0.255
 permit 192.168.50.0 0.0.0.255
 permit 192.168.51.0 0.0.0.255
 permit 192.168.90.0 0.0.0.255
 permit 192.168.101.0 0.0.0.255
 deny   any
 permit 192.168.190.0 0.0.0.255
ip access-list standard ACL_SNMP_access
 permit 192.168.50.79
 deny   any
!
!
!
ip prefix-list PL_Export_20 seq 5 permit 192.168.20.0/24
!
ip prefix-list PL_TEST seq 5 permit 192.168.85.0/24
logging trap debugging
no cdp run
ipv6 route vrf vpn_20 ::/0 fc00:192:168:20::12
ipv6 route vrf vpn_test ::/0 fc00:192:168:20::12
!
!
ipv6 prefix-list PL6_Export_20 seq 5 permit fc00:192:168:20::/64
!
ipv6 prefix-list PL6_TEST seq 5 permit FC00:192:168:85::/64
route-map RM4_Export_20 permit 10
 match ip address prefix-list PL_Export_20
!
route-map RM6_Export_20 permit 10
 match ipv6 address prefix-list PL6_Export_20
!
route-map TEST_MAP1 permit 10
 match ip address prefix-list PL_TEST
!
route-map TEST_MAP2 permit 10
 match ipv6 address prefix-list PL6_TEST
!
!
!
!
line con 0
 exec-timeout 0 0
 logging synchronous
line vty 0 4
 access-class ACL_Admin_access in
 exec-timeout 240 0
 logging synchronous
 login local
 length 0
 transport input ssh
 transport output all
line vty 5 15
 access-class ACL_Admin_access in
 exec-timeout 240 0
 logging synchronous
 login local
 length 0
 transport input ssh
 transport output all
!
mac address-table notification mac-move
end