hostname mia-sw01

ip routing

interface Ethernet1
   no switchport
   ip address 10.0.2.1/24

interface Ethernet2
   no switchport
   ip address 172.16.1.189/31

! GRE tunnel to biscayne (simulates doublezero0)
interface Tunnel1
   mtu 1476
   ip address 169.254.7.6/31
   tunnel mode gre
   tunnel source 10.0.2.1
   tunnel destination 10.0.2.2

! Inbound: route 137.239.194.65 to biscayne via GRE tunnel
ip route 137.239.194.65/32 169.254.7.7

! Outbound: redirect traffic sourced from 137.239.194.65 to was-sw01 via backbone
ip access-list VALIDATOR-OUTBOUND-ACL
   10 permit ip 137.239.194.65/32 any

traffic-policy VALIDATOR-OUTBOUND
   match VALIDATOR-OUTBOUND-ACL
      set nexthop 172.16.1.188

system-rule overriding-action redirect

! Apply on the GRE tunnel interface — this is what we're validating.
! If cEOS doesn't support traffic-policy on Tunnel, test.sh has a
! fallback that applies it on Ethernet1 instead.
interface Tunnel1
   traffic-policy input VALIDATOR-OUTBOUND