spine-02.conf

system {
    host-name spine-02;
    time-zone America/Los_Angeles;
    root-authentication {
        encrypted-password "$1$ZUlES4dp$OUwWo1g7cLoV/aMWpHUnC/";
    }
    name-server {
        192.168.5.68;
        192.168.60.131;
    }
    services {
        netconf {
            ssh;
        }
        ssh;
    }
    login {
        message "This is the property of Example Corp. Do not login without express permission. ";
    }
    syslog  {
        user * {
            any emergency;
        }
        file messages {
            any notice;
        }
        file cli-commands {
            interactive-commands any;
            explicit-priority;
        }
        time-format millisecond;
    }
    ntp {
        server 172.17.28.5;
    }
}
interfaces {
    em0 {
        unit 0 {
            family inet {
              address 0.0.0.0/<subnet mask>;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 100.0.0.12/32
            }
        }
    }
}
snmp {
    location "Site 1";
    contact "John Doe";
    community public {
        authorization read-only;
    }
}
routing-options {
  static {
    route 172.0.0.0/8 {
      next-hop 10.94.194.254;
      retain;
      no-readvertise;
    }
  }
}
protocols {
    lldp {
        interface all;
    }
}
/* This block of configuration has been generated by the role overlay-evpn-qfx-l3 for Ansible */

protocols {
    bgp {
        group overlay-evpn {
            type internal;
            family evpn {
                signaling;
            }
            local-as 65200;
            local-address 100.0.0.12;
            multipath;
            neighbor 100.0.0.21;
            neighbor 100.0.0.22;
            cluster 2.2.2.2;
        }
        bfd-liveness-detection {
            minimum-interval 350;
            multiplier 3;
            session-mode automatic;
        }
        group overlay-evpn-rr {
            type internal;
            family evpn signaling;
            local-as 65200;
            local-address 100.0.0.12;
            multipath;
            neighbor 100.0.0.11;
            neighbor 100.0.0.13;
            neighbor 100.0.0.14;
        }
    }
}

protocols {
    evpn {
        encapsulation vxlan;
        extended-vni-list [  9105  9106  9107  9108  9109  9100  9101  9102  9103  9104  ];
        multicast-mode ingress-replication;
        vni-options {
            vni 9105 {
                vrf-target export target:1:9105;
            }
            vni 9106 {
                vrf-target export target:1:9106;
            }
            vni 9107 {
                vrf-target export target:1:9107;
            }
            vni 9108 {
                vrf-target export target:1:9108;
            }
            vni 9109 {
                vrf-target export target:1:9109;
            }
            vni 9100 {
                vrf-target export target:1:9100;
            }
            vni 9101 {
                vrf-target export target:1:9101;
            }
            vni 9102 {
                vrf-target export target:1:9102;
            }
            vni 9103 {
                vrf-target export target:1:9103;
            }
            vni 9104 {
                vrf-target export target:1:9104;
            }
        }
    }
}

routing-options {
    router-id 100.0.0.12;
    forwarding-table {
        ecmp-fast-reroute;
    }
}

routing-instances {
    VRF_TENANT_11 {
        instance-type vrf;
        interface lo0.11;
        interface irb.105;
        interface irb.106;
        interface irb.107;
        interface irb.108;
        interface irb.109;
        route-distinguisher 100.0.0.12:11;
        vrf-target target:10:11;
    }
    VRF_TENANT_10 {
        instance-type vrf;
        interface lo0.10;
        interface irb.100;
        interface irb.101;
        interface irb.102;
        interface irb.103;
        interface irb.104;
        route-distinguisher 100.0.0.12:10;
        vrf-target target:10:10;
    }
}


interfaces {
    irb {
        unit 105 {
            description " * TENANT 11 - vlan 105 - vni 9105 "
            family inet {
                address 10.0.6.22/24 {
                    virtual-gateway-address 10.0.6.1;
                }
            }
        }
        unit 106 {
            description " * TENANT 11 - vlan 106 - vni 9106 "
            family inet {
                address 10.0.7.22/24 {
                    virtual-gateway-address 10.0.7.1;
                }
            }
        }
        unit 107 {
            description " * TENANT 11 - vlan 107 - vni 9107 "
            family inet {
                address 10.0.8.22/24 {
                    virtual-gateway-address 10.0.8.1;
                }
            }
        }
        unit 108 {
            description " * TENANT 11 - vlan 108 - vni 9108 "
            family inet {
                address 10.0.9.22/24 {
                    virtual-gateway-address 10.0.9.1;
                }
            }
        }
        unit 109 {
            description " * TENANT 11 - vlan 109 - vni 9109 "
            family inet {
                address 10.0.10.22/24 {
                    virtual-gateway-address 10.0.10.1;
                }
            }
        }
        unit 100 {
            description " * TENANT 10 - vlan 100 - vni 9100 "
            family inet {
                address 10.0.1.22/24 {
                    virtual-gateway-address 10.0.1.1;
                }
            }
        }
        unit 101 {
            description " * TENANT 10 - vlan 101 - vni 9101 "
            family inet {
                address 10.0.2.22/24 {
                    virtual-gateway-address 10.0.2.1;
                }
            }
        }
        unit 102 {
            description " * TENANT 10 - vlan 102 - vni 9102 "
            family inet {
                address 10.0.3.22/24 {
                    virtual-gateway-address 10.0.3.1;
                }
            }
        }
        unit 103 {
            description " * TENANT 10 - vlan 103 - vni 9103 "
            family inet {
                address 10.0.4.22/24 {
                    virtual-gateway-address 10.0.4.1;
                }
            }
        }
        unit 104 {
            description " * TENANT 10 - vlan 104 - vni 9104 "
            family inet {
                address 10.0.5.22/24 {
                    virtual-gateway-address 10.0.5.1;
                }
            }
        }
    }
    lo0 {
        unit 11 {
            family inet {
                address 101.0.11.22/32;
            }
        }
    }
    lo0 {
        unit 10 {
            family inet {
                address 101.0.10.22/32;
            }
        }
    }
}

switch-options {
    vtep-source-interface lo0.0;
    vrf-import LEAF-IN;
    vrf-target target:9999:9999;
    route-distinguisher 100.0.0.12:1;
}

policy-options {
     policy-statement LEAF-IN {
        term import_vni9105 {
            from community com9105;
            then accept;
        }
        term import_vni9106 {
            from community com9106;
            then accept;
        }
        term import_vni9107 {
            from community com9107;
            then accept;
        }
        term import_vni9108 {
            from community com9108;
            then accept;
        }
        term import_vni9109 {
            from community com9109;
            then accept;
        }
        term import_vni9100 {
            from community com9100;
            then accept;
        }
        term import_vni9101 {
            from community com9101;
            then accept;
        }
        term import_vni9102 {
            from community com9102;
            then accept;
        }
        term import_vni9103 {
            from community com9103;
            then accept;
        }
        term import_vni9104 {
            from community com9104;
            then accept;
        }
        term import_leaf_esi {
            from community comm-leaf_esi;
            then accept;
        }
        term default {
            then reject;
        }
    }
    community comm-leaf_esi members target:9999:9999;
    community com9105 members target:1:9105;
    community com9106 members target:1:9106;
    community com9107 members target:1:9107;
    community com9108 members target:1:9108;
    community com9109 members target:1:9109;
    community com9100 members target:1:9100;
    community com9101 members target:1:9101;
    community com9102 members target:1:9102;
    community com9103 members target:1:9103;
    community com9104 members target:1:9104;
}

vlans {
    bd9105 {
        vlan-id 105;
        l3-interface irb.105;
        vxlan {
            vni 9105;
            ingress-node-replication;
        }
    }
    bd9106 {
        vlan-id 106;
        l3-interface irb.106;
        vxlan {
            vni 9106;
            ingress-node-replication;
        }
    }
    bd9107 {
        vlan-id 107;
        l3-interface irb.107;
        vxlan {
            vni 9107;
            ingress-node-replication;
        }
    }
    bd9108 {
        vlan-id 108;
        l3-interface irb.108;
        vxlan {
            vni 9108;
            ingress-node-replication;
        }
    }
    bd9109 {
        vlan-id 109;
        l3-interface irb.109;
        vxlan {
            vni 9109;
            ingress-node-replication;
        }
    }
    bd9100 {
        vlan-id 100;
        l3-interface irb.100;
        vxlan {
            vni 9100;
            ingress-node-replication;
        }
    }
    bd9101 {
        vlan-id 101;
        l3-interface irb.101;
        vxlan {
            vni 9101;
            ingress-node-replication;
        }
    }
    bd9102 {
        vlan-id 102;
        l3-interface irb.102;
        vxlan {
            vni 9102;
            ingress-node-replication;
        }
    }
    bd9103 {
        vlan-id 103;
        l3-interface irb.103;
        vxlan {
            vni 9103;
            ingress-node-replication;
        }
    }
    bd9104 {
        vlan-id 104;
        l3-interface irb.104;
        vxlan {
            vni 9104;
            ingress-node-replication;
        }
    }
}
/* This block of configuration has been generated by the role underlay-ebgp for Ansible */

interfaces {
    xe-0/0/3 {
        description " * to fabric-02";
        mtu 9192;
        unit 0 {
            family inet {
                mtu 9000;
                address 172.16.0.14/31;
            }
        }
    }
    xe-0/0/1 {
        description " * to leaf-02";
        mtu 9192;
        unit 0 {
            family inet {
                mtu 9000;
                address 172.16.0.6/31;
            }
        }
    }
    xe-0/0/2 {
        description " * to fabric-01";
        mtu 9192;
        unit 0 {
            family inet {
                mtu 9000;
                address 172.16.0.12/31;
            }
        }
    }
    xe-0/0/0 {
        description " * to leaf-01";
        mtu 9192;
        unit 0 {
            family inet {
                mtu 9000;
                address 172.16.0.4/31;
            }
        }
    }
}

protocols {
    bgp {
        log-updown;
        graceful-restart;
        group underlay-ipfabric {
            import bgp-ipclos-in;
            export  bgp-ipclos-out;
            type external;
            mtu-discovery;
            local-as 65022;
            bfd-liveness-detection {
                minimum-interval 350;
                multiplier 3;
                session-mode automatic;
            }
            multipath multiple-as;
            neighbor 172.16.0.15 {
                peer-as 65012;
            }
            neighbor 172.16.0.7 {
                peer-as 65032;
            }
            neighbor 172.16.0.13 {
                peer-as 65011;
            }
            neighbor 172.16.0.5 {
                peer-as 65031;
            }
        }
    }
}

routing-options {
    router-id 100.0.0.12;
    forwarding-table {
        export pfe-ecmp;
    }
}

policy-options {
    policy-statement pfe-ecmp {
        then {
            load-balance per-packet;
        }
    }
    policy-statement bgp-ipclos-in {
        term loopbacks {
            from {
                route-filter 100.0.0.0/16 orlonger;
            }
            then accept;
        }
    }
    policy-statement bgp-ipclos-out {
        term loopback {
            from {
                protocol direct;
                route-filter 100.0.0.12/32 orlonger;
            }
            then {
                community add MYCOMMUNITY;
                next-hop self;
                accept;
            }
        }
        term as-path {
            from {
                as-path asPathLength2;
                community MYCOMMUNITY;
            }
            then reject;
        }
    }
    as-path asPathLength2 ".{2,}";
    community MYCOMMUNITY members target:12345:111;
}