set version 12.1X47-D20.7
set system host-name vSRX2a
set system time-zone Asia/Tokyo
set system root-authentication encrypted-password "$1$rrcGG7cg$VH1.s1XQoOrgOU/IrGKFe0"
set system login user admin uid 2000
set system login user admin class super-user
set system login user admin authentication encrypted-password "$1$12Vt9iqa$osapuRRosRCEGCdFqwHeg/"
set system services telnet
set system syslog user * any emergency
set system syslog host 192.168.12.29 any any
set system syslog host 192.168.12.29 interactive-commands none
set system syslog file messages any any
set system syslog file messages authorization info
set system syslog file messages interactive-commands none
set system syslog file interactive-commands interactive-commands any
set system license autoupdate url https://ae1.juniper.net/junos/key_retrieval
set system ntp boot-server 192.168.12.29
set system ntp server 192.168.12.29
set interfaces ge-0/0/0 description IF-2B
set interfaces ge-0/0/0 unit 0 family inet address 10.0.21.1/30
set interfaces ge-0/0/0 unit 0 family iso
set interfaces ge-0/0/1 description IF-2C
set interfaces ge-0/0/1 unit 0 family inet address 10.0.22.1/30
set interfaces ge-0/0/1 unit 0 family iso
set interfaces ge-0/0/2 description IF-MGMT
set interfaces ge-0/0/2 unit 0 family inet address 192.168.12.21/24
set interfaces lo0 unit 0 family inet address 10.0.2.1/32
set interfaces lo0 unit 0 family iso address 49.0002.0192.0168.1221.00
set routing-options router-id 10.0.2.1
set routing-options autonomous-system 2
set routing-options flow term-order standard
set protocols bgp path-selection always-compare-med
set protocols bgp group rr type internal
set protocols bgp group rr traceoptions file bgp-trace
set protocols bgp group rr traceoptions file size 10k
set protocols bgp group rr traceoptions file files 2
set protocols bgp group rr traceoptions flag update detail
deactivate protocols bgp group rr traceoptions
set protocols bgp group rr local-address 10.0.2.1
set protocols bgp group rr export ps-exp-flow
set protocols bgp group rr neighbor 10.0.2.2 family inet unicast add-path receive
set protocols bgp group rr neighbor 10.0.2.2 family inet flow
set protocols bgp group rr neighbor 10.0.2.3 family inet unicast add-path receive
set protocols bgp group rr neighbor 10.0.2.3 family inet flow
set protocols bgp group fss type external
set protocols bgp group fss description "flowspec senders"
set protocols bgp group fss local-address 10.0.2.1
set protocols bgp group fss family inet flow no-validate ps-accept
set protocols bgp group fss export ps-reject
set protocols bgp group fss local-as 2
set protocols bgp group fss neighbor 10.0.3.9 description fss-3
set protocols bgp group fss neighbor 10.0.3.9 multihop ttl 16
set protocols bgp group fss neighbor 10.0.3.9 import ps-imp-flow-as3
set protocols bgp group fss neighbor 10.0.3.9 family inet flow prefix-limit maximum 20
set protocols bgp group fss neighbor 10.0.3.9 family inet flow prefix-limit teardown 80
set protocols bgp group fss neighbor 10.0.3.9 authentication-key "$9$Blq1EyXxd24ZKMZjq.F3lKMWLNdVYgJDNd"
set protocols bgp group fss neighbor 10.0.3.9 peer-as 3
set protocols isis level 1 disable
set protocols isis interface ge-0/0/0.0
set protocols isis interface ge-0/0/1.0
set protocols isis interface lo0.0
set policy-options policy-statement ps-accept term 1 then accept
set policy-options policy-statement ps-exp-flow term 1 from rib inetflow.0
set policy-options policy-statement ps-exp-flow term 1 then accept
set policy-options policy-statement ps-exp-flow term 999 then reject
set policy-options policy-statement ps-imp-flow-as3 term 1 from protocol bgp
set policy-options policy-statement ps-imp-flow-as3 term 1 from route-filter 10.0.3.0/24 orlonger
set policy-options policy-statement ps-imp-flow-as3 term 1 then accept
set policy-options policy-statement ps-imp-flow-as3 term 999 then reject
set policy-options policy-statement ps-reject then reject
set security forwarding-options family inet6 mode packet-based
set security forwarding-options family mpls mode packet-based
set security forwarding-options family iso mode packet-based