|  | ## Last commit: 2017-05-18 08:39:52 UTC by root | 
|  | version 12.1X46-D20.5; | 
|  | system { | 
|  | host-name vsrx1; | 
|  | root-authentication { | 
|  | encrypted-password "$1$gpbfk/Jr$lF2foqHYBd/Sp56dlmkXH1"; ## SECRET-DATA | 
|  | } | 
|  | name-server { | 
|  | 8.8.8.8; | 
|  | 8.8.4.4; | 
|  | } | 
|  | services { | 
|  | ssh; | 
|  | web-management { | 
|  | http { | 
|  | interface ge-0/0/0.0; | 
|  | } | 
|  | } | 
|  | } | 
|  | syslog { | 
|  | file messages { | 
|  | any any; | 
|  | } | 
|  | } | 
|  | license { | 
|  | autoupdate { | 
|  | url https://ae1.juniper.net/junos/key_retrieval; | 
|  | } | 
|  | } | 
|  | ntp { | 
|  | peer 46.243.48.4; | 
|  | peer 147.251.48.140; | 
|  | peer 46.243.48.88; | 
|  | } | 
|  | } | 
|  | interfaces { | 
|  | ge-0/0/0 { | 
|  | unit 0 { | 
|  | family inet { | 
|  | address {{ private_address }}/24; | 
|  | } | 
|  | } | 
|  | } | 
|  | ge-0/0/1 { | 
|  | unit 0 { | 
|  | family inet { | 
|  | address {{ public_address }}/24; | 
|  | } | 
|  | } | 
|  | } | 
|  | ge-0/0/2 { | 
|  | unit 0 { | 
|  | family inet { | 
|  | address {{ admin_address }}; | 
|  | } | 
|  | } | 
|  | } | 
|  | } | 
|  | routing-options { | 
|  | route-distinguisher-id {{ private_address }}; | 
|  | autonomous-system 64512; | 
|  | dynamic-tunnels { | 
|  | dynamic_overlay_tunnels { | 
|  | source-address {{ private_address }}; | 
|  | gre; | 
|  | destination-networks { | 
|  | {{ private_network }}/24; | 
|  | } | 
|  | } | 
|  | } | 
|  | } | 
|  | protocols { | 
|  | mpls { | 
|  | interface all; | 
|  | } | 
|  | bgp { | 
|  | group Contrail_Controller { | 
|  | type internal; | 
|  | local-address 172.16.10.90; | 
|  | keep all; | 
|  | family inet-vpn { | 
|  | unicast; | 
|  | } | 
|  | allow {{ private_network }}/24; | 
|  | } | 
|  | } | 
|  | } | 
|  | security { | 
|  | forwarding-options { | 
|  | family { | 
|  | mpls { | 
|  | mode packet-based; | 
|  | } | 
|  | } | 
|  | } | 
|  | } | 
|  | routing-instances { | 
|  | public { | 
|  | instance-type vrf; | 
|  | interface ge-0/0/1.0; | 
|  | vrf-target target:64512:10000; | 
|  | vrf-table-label; | 
|  | routing-options { | 
|  | static { | 
|  | route {{ public_network }} discard; | 
|  | route 0.0.0.0/0 next-hop {{ public_network_gateway }}; | 
|  | } | 
|  | } | 
|  | } | 
|  | } |