!
! Last configuration change at 00:45:21 UTC Mon Jan 4 2021
!
version 16.6
service timestamps debug datetime msec
service timestamps log datetime msec
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
platform console serial
!
hostname INTERNET
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
!
!
!
!
!
no ip domain lookup
!
!
!
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
crypto pki trustpoint TP-self-signed-3571684561
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3571684561
 revocation-check none
 rsakeypair TP-self-signed-3571684561
!
!
crypto pki certificate chain TP-self-signed-3571684561
!
!
!
!
!
!
!
!
!
license udi pid CSR1000V sn 9OSGTX0X6N9
diagnostic bootup level minimal
spanning-tree extend system-id
!
!
!
!
redundancy
!
!
!
!
!
!
! 
!
!
!
!
!
!
!
!
!
!
!
!
! 
! 
!
!
interface Loopback50
 no shutdown
 description simulation of public address
 ip address 50.50.50.50 255.255.255.255
!
interface GigabitEthernet1
 no shutdown
 description link to BREAKOUT
 ip address 100.100.100.2 255.255.255.252
 negotiation auto
 no mop enabled
 no mop sysid
!
interface GigabitEthernet2
 no shutdown
 no ip address
 shutdown
 negotiation auto
 no mop enabled
 no mop sysid
!
interface GigabitEthernet3
 no shutdown
 no ip address
 shutdown
 negotiation auto
 no mop enabled
 no mop sysid
!
interface GigabitEthernet4
 no shutdown
 no ip address
 shutdown
 negotiation auto
 no mop enabled
 no mop sysid
!
router bgp 200
 bgp log-neighbor-changes
 neighbor 100.100.100.1 remote-as 65489
 !
 address-family ipv4
  redistribute connected
  redistribute static
  neighbor 100.100.100.1 activate
  neighbor 100.100.100.1 default-originate
  neighbor 100.100.100.1 soft-reconfiguration inbound
  neighbor 100.100.100.1 prefix-list DEFAULT-ONLY out
  neighbor 100.100.100.1 route-map INBOUND in
  default-information originate
 exit-address-family
!
!
virtual-service csr_mgmt
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
!
ip prefix-list DEFAULT-ONLY seq 5 permit 0.0.0.0/0
!
ip prefix-list PERMIT-PUBLIC-ONLY seq 5 permit 99.99.99.0/29
!
!
route-map INBOUND permit 10 
 match ip address prefix-list PERMIT-PUBLIC-ONLY
 set local-preference 200
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 stopbits 1
line vty 0
 login
line vty 1 2
 login
 length 0
line vty 3 4
 login
!
!
!
!
!
!
end
