39 lines
991 B
INI
39 lines
991 B
INI
|
hostname mia-sw01
|
||
|
|
|
||
|
|
ip routing
|
||
|
|
|
||
|
|
interface Ethernet1
|
||
|
|
no switchport
|
||
|
|
ip address 10.0.2.1/24
|
||
|
|
|
||
|
|
interface Ethernet2
|
||
|
|
no switchport
|
||
|
|
ip address 172.16.1.189/31
|
||
|
|
|
||
|
|
! GRE tunnel to biscayne (simulates doublezero0)
|
||
|
|
interface Tunnel1
|
||
|
|
mtu 1476
|
||
|
|
ip address 169.254.7.6/31
|
||
|
|
tunnel mode gre
|
||
|
|
tunnel source 10.0.2.1
|
||
|
|
tunnel destination 10.0.2.2
|
||
|
|
|
||
|
|
! Inbound: route 137.239.194.65 to biscayne via GRE tunnel
|
||
|
|
ip route 137.239.194.65/32 169.254.7.7
|
||
|
|
|
||
|
|
! Outbound: redirect traffic sourced from 137.239.194.65 to was-sw01 via backbone
|
||
|
|
ip access-list VALIDATOR-OUTBOUND-ACL
|
||
|
|
10 permit ip 137.239.194.65/32 any
|
||
|
|
|
||
|
|
traffic-policy VALIDATOR-OUTBOUND
|
||
|
|
match VALIDATOR-OUTBOUND-ACL
|
||
|
|
set nexthop 172.16.1.188
|
||
|
|
|
||
|
|
system-rule overriding-action redirect
|
||
|
|
|
||
|
|
! Apply on the GRE tunnel interface — this is what we're validating.
|
||
|
|
! If cEOS doesn't support traffic-policy on Tunnel, test.sh has a
|
||
|
|
! fallback that applies it on Ethernet1 instead.
|
||
|
|
interface Tunnel1
|
||
|
|
traffic-policy input VALIDATOR-OUTBOUND
|