version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no platform punt-keepalive disable-kernel-core
!

!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!

!
no aaa new-model
!
ip vrf KG
 rd 200:135
 route-target import 200:10000
!
ip vrf PR
 rd 200:130
 route-target export 200:1000
 route-target import 200:10000
!
ip vrf SHARED
 rd 200:145
 route-target export 200:10000
 route-target import 200:2000
 route-target import 200:1000
!
ip vrf test1
 rd 200:200
 import ipv4 unicast map global_import
!
!
!
no ip domain lookup
!
!
!
!
!
!
multilink bundle-name authenticated
!
!
!         
!
!
!
!
!
!
!
!
!
!
!
!
!
redundancy
 mode none
!
!
!
!
!
!
ip tftp source-interface GigabitEthernet0
!
! 
!
!
!
!
!
!
!
!
interface Loopback0
 ip vrf forwarding PR
 ip address 200.59.24.66 255.255.255.255
!         
interface Loopback1
 ip vrf forwarding KG
 ip address 172.20.1.1 255.255.255.0
!
interface Loopback2
 ip vrf forwarding SHARED
 ip address 10.10.10.10 255.255.255.255
!
interface Loopback3
 ip vrf forwarding test1
 ip address 1.1.1.1 255.255.255.255
!
interface Tunnel0
 ip vrf forwarding PR
 ip unnumbered Loopback0
 tunnel source Loopback0
 tunnel destination 200.59.31.125
!
interface Tunnel200
 ip vrf forwarding test1
 ip unnumbered GigabitEthernet0/0/0.200
 tunnel source GigabitEthernet0/0/0.200
 tunnel destination 3.3.3.2
!
interface GigabitEthernet0/0/0
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/0.200
 encapsulation dot1Q 200
 ip address 3.3.3.1 255.255.255.252
!
interface GigabitEthernet0/0/0.317
 encapsulation dot1Q 317
 ip vrf forwarding SHARED
!
interface GigabitEthernet0/0/0.321
 encapsulation dot1Q 321
 ip vrf forwarding test1
 ip address 192.168.61.1 255.255.255.0
!
interface GigabitEthernet0/0/0.332
 encapsulation dot1Q 332
 ip vrf forwarding SHARED
!
interface GigabitEthernet0/0/0.335
 encapsulation dot1Q 335
 ip vrf forwarding SHARED
 ip address 192.168.100.61 255.255.255.252
!
interface GigabitEthernet0/0/0.400
 encapsulation dot1Q 400
 ip vrf forwarding PR
 ip address 192.168.100.2 255.255.255.252
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!

!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address 192.168.1.254 255.255.255.0
 negotiation auto
!
interface Virtual-Template10 type tunnel
 ip vrf forwarding test1
 ip unnumbered GigabitEthernet0/0/0.200
 tunnel source GigabitEthernet0/0/0.200
 tunnel destination 3.3.3.2
!
router ospf 200 vrf SHARED
 redistribute connected subnets
 redistribute static subnets
 redistribute bgp 200 subnets
 network 0.0.0.0 255.255.255.255 area 0
!
router ospf 40 vrf test1
 redistribute connected subnets
 redistribute static subnets
 network 0.0.0.0 255.255.255.255 area 1
 default-information originate
!
router ospf 1
 redistribute connected subnets
 redistribute static subnets
 network 0.0.0.0 255.255.255.255 area 1
 default-information originate
!
router ospf 45 vrf PR
 redistribute connected subnets
 redistribute static subnets
 network 0.0.0.0 255.255.255.255 area 2
 default-information originate
!
router bgp 200
 bgp log-neighbor-changes
 !
 address-family ipv4
  redistribute connected
  redistribute static
 exit-address-family
 !
 address-family ipv4 vrf KG
  redistribute connected
  redistribute static
 exit-address-family
 !
 address-family ipv4 vrf PR
  redistribute connected
  redistribute static
 exit-address-family
 !
 address-family ipv4 vrf SHARED
  redistribute connected
  redistribute static
 exit-address-family
 !
 address-family ipv4 vrf test1
  redistribute connected
  redistribute static
 exit-address-family
!
ip forward-protocol nd
!         
no ip http server
no ip http secure-server
ip route vrf test1 0.0.0.0 0.0.0.0 192.168.61.254
!
ip access-list standard filter
 permit 10.0.0.0 0.255.255.255
!
access-list 1 deny   10.1.1.0
access-list 1 permit any
access-list 10 permit any
access-list 100 deny   ip 10.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
!
route-map filter10 deny 10
 match ip address filter
!
route-map global_import permit 10
 match ip address 10
!
route-map global_export permit 10
 match ip address 10
!
!
!
control-plane
!
!
!
!
!
line con 0
 login local
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 exec-timeout 5 0
 login local
!
!
end