## Last commit: 2017-05-18 08:39:52 UTC by root
version 12.1X46-D20.5;
system {
    host-name vsrx1;
    root-authentication {
        encrypted-password "$1$gpbfk/Jr$lF2foqHYBd/Sp56dlmkXH1"; ## SECRET-DATA
    }
    name-server {
        8.8.8.8;
        8.8.4.4;
    }
    services {
        ssh;
        web-management {
            http {
                interface ge-0/0/0.0;
            }
        }
    }
    syslog {
        file messages {
            any any;
        }
    }
    license {
        autoupdate {
            url https://ae1.juniper.net/junos/key_retrieval;
        }
    }
    ntp {
        peer 46.243.48.4;
        peer 147.251.48.140;
        peer 46.243.48.88;
    }
}
interfaces {
    ge-0/0/0 {
        unit 0 {
            family inet {
                address {{ private_address }}/24;
            }
        }
    }
    ge-0/0/1 {
        unit 0 {
            family inet {
                address {{ public_address }}/24;
            }
        }
    }
    ge-0/0/2 {
        unit 0 {
            family inet {
                address {{ admin_address }};
            }
        }
    }
}
routing-options {
    route-distinguisher-id {{ private_address }};
    autonomous-system 64512;
    dynamic-tunnels {
        dynamic_overlay_tunnels {
            source-address {{ private_address }};
            gre;
            destination-networks {
                {{ private_network }}/24;
            }
        }
    }
}
protocols {
    mpls {
        interface all;
    }
    bgp {
        group Contrail_Controller {
            type internal;
            local-address 172.16.10.90;
            keep all;
            family inet-vpn {
                unicast;
            }
            allow {{ private_network }}/24;
        }
    }
}
security {
    forwarding-options {
        family {
            mpls {
                mode packet-based;
            }
        }
    }
}
routing-instances {
    public {
        instance-type vrf;
        interface ge-0/0/1.0;
        vrf-target target:64512:10000;
        vrf-table-label;
        routing-options {
            static {
                route {{ public_network }} discard;
                route 0.0.0.0/0 next-hop {{ public_network_gateway }};
            }
        }
    }
}