This article discusses Hub and Spoke in Spoke to Spoke Direct configuration via Versa Director GUI. Hub and Spoke Topology (Link Here) is referred in doing the Hub and Spoke configuration. Workflow Template is used to Stage FlexVNF as HUB and SPOKE. In Spoke to Spoke Direct a direct connection between two spokes (within a spoke-group), bypassing a hub. Spoke will have LAN routes for other spoke as direct next hop. You can also have backup route via hub if required.
Prerequisite: Versa director and Controller setup is already done. Should be aware of Workflow Template and Branch On boarding.
Configuring Hub1 Template
To configure the HUB:
In the Versa Director, Select Configuration > Workflow>Templates > Create Template. Fill the required information and make sure (Key Value) Device type should be HUB.
Interfaces> Assign WAN interface (LAN interface is optional). If LAN interface is selected, HUB will have LAN-VR and spoke will also have backup routes via HUB, with direct routes to other spoke as active.
Follow Workflow Template to create device. Configuration > Workflow>Devices> + Add Device and Device Group for HUB staging
=> Before configuring spoke group Hub should be deployed and ZTP should be completed.
Configuring Spoke Group
Create Spoke-Group that will group Spoke 1, Spoke 2. Select Configuration > Workflow>Spoke Groups > select + Add. Fill the required details, we selected (Key Value) Spoke Group type as Spoke to Spoke Direct. Set HUB priority to 1. In the multiple hub case, you can give different priorities to make one hub preferred over other for traffic forwarding to or via it.
Add Community
Select the created community and Save
Configuring Spoke1 and Spoke2 Template:
Create template for Spoke Configuration > Workflow>Templates > Create Template and fill the required information, make sure (Key Value) Device type should be Spoke select Spoke-Group from drop down
Interfaces> Assign WAN and LAN interfaces, click Continue and Create Template.
Follow work flow template to created Device Configuration > Workflow>Devices> + Add Device and Device Group for Spoke staging. Follow the same steps to create Spoke2. Spoke Group will be same as S2SviaHUB1
Check HUB and Spoke status post staging. Administration > Appliances
Validation:
@HUB:
“LAN-VR” and “LAN-VR-Export” of hub will have routes for network behind spoke's. Hub will act as a backup path for spoke to spoke communication.
admin@HUB1-cli> show route routing-instance DUN-SubOrg-LAN-VR-Export
Prot Type Dest Address/Mask Next-hop Age Interface name
---- ---- ----------------- -------- --- --------------
BGP RTI +192.168.77.0/24 0.0.0.0 01:50:06 Indirect
BGP RTI +192.168.88.0/24 0.0.0.0 01:49:56 Indirect
admin@HUB1-cli> show route routing-instance DUN-SubOrg-LAN-VR
Prot Type Dest Address/Mask Next-hop Age Interface name
---- ---- ----------------- -------- --- --------------
conn N/A +192.168.56.0/24 0.0.0.0 02:58:10 vni-0/2.0
local N/A +192.168.56.1/32 0.0.0.0 02:58:10 directly connected
BGP N/A +192.168.77.0/24 10.4.64.103 01:50:09 Indirect
BGP N/A +192.168.88.0/24 10.4.64.105 01:50:00 Indirect
admin@HUB1-cli> show interfaces brief
ptvi17 n/a up up 2 DUN-SubOrg-Control-VR 10.4.64.2/32
tvi-0/17.0 n/a up up 2 DUN-SubOrg-Control-VR 10.4.64.104/32
@SPOKE1:
Spoke 1 will have direct route to spoke 2 subnet as (+) active and a backup route with next hop as hub tvi-0/17 (.104).There will be route for network behind hub on spoke 1.
admin@SPOKE1-cli> show route routing-instance DUN-SubOrg-LAN-VR
Prot Type Dest Address/Mask Next-hop Age Interface name
---- ---- ----------------- -------- --- --------------
BGP N/A +192.168.56.0/24 10.4.64.104 03:04:06 Indirect
conn N/A +192.168.77.0/24 0.0.0.0 6d11h33m vni-0/2.0
local N/A +192.168.77.1/32 0.0.0.0 6d11h33m directly connected
BGP N/A 192.168.88.0/24 10.4.64.104 01:55:56 Indirect
BGP N/A +192.168.88.0/24 10.4.64.105 01:55:55 Indirectadmin@SPOKE1-cli> show interfaces brief
ptvi17 n/a up up 2 DUN-SubOrg-Control-VR 10.4.64.2/32
tvi-0/17.0 n/a up up 2 DUN-SubOrg-Control-VR 10.4.64.103/32
@SPOKE2:
Similarly Spoke2 will have direct route to spoke 1 subnet as (+)active and a backup route with next hop as hub tvi-0/17 (.104). There will be route for network behind hub on spoke 2.
admin@SPOKE2-cli> show route routing-instance DUN-SubOrg-LAN-VR
Prot Type Dest Address/Mask Next-hop Age Interface name
---- ---- ----------------- -------- --- --------------
BGP N/A +192.168.56.0/24 10.4.64.104 03:10:19 Indirect
BGP N/A +192.168.77.0/24 10.4.64.103 02:01:54 Indirect
BGP N/A 192.168.77.0/24 10.4.64.104 02:02:18 Indirect
conn N/A +192.168.88.0/24 0.0.0.0 6d09h31m vni-0/2.0
local N/A +192.168.88.1/32 0.0.0.0 6d09h31m directly connected
admin@SPOKE2-cli> show interfaces brief
ptvi17 n/a up up 2 DUN-SubOrg-Control-VR 10.4.64.2/32
tvi-0/17.0 n/a up up 2 DUN-SubOrg-Control-VR 10.4.64.105/32CLI Configuration
@HUB
set routing-instances DUN-SubOrg-Control-VR instance-type virtual-router
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term Paired-TVI-Reject match address 169.254.0.0/16
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term Paired-TVI-Reject action reject
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term SDWAN-TVI2-Reject match address 10.4.64.104/32
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term SDWAN-TVI2-Reject action reject
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT match protocol direct
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT action accept
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT action set-origin igp
set routing-instances DUN-SubOrg-Control-VR policy-options redistribute-to-bgp Control-VR-Policy
set routing-instances DUN-SubOrg-Control-VR mpls-vpn-core
set routing-instances DUN-SubOrg-Control-VR interfaces [ ptvi17 tvi-0/17.0 ]
set routing-instances DUN-SubOrg-Control-VR routing-options mpls-vpn-local-router-interface family inet
set routing-instances DUN-SubOrg-Control-VR routing-options mpls-vpn-local-router-interface interface tvi-0/17.0
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 local-address 10.4.64.104
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart enable
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart maximum-restart-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart recovery-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart select-defer-time 30
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart stalepath-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart multiplier 8
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-SDWAN-Policy term Allow-All action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-SDWAN-Policy term Allow-All action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-SDWAN-Policy term Allow-All action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-SDWAN-Policy term Allow-VersaPvt-All match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-SDWAN-Policy term Allow-VersaPvt-All action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term Wildcard action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 router-id 10.4.64.104
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 local-as as-number 64512
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group type internal
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet-vpn unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet6-vpn unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group import Import-From-SDWAN-Policy
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group export TO_SDWAN
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group peer-as 64512
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group neighbor 10.4.64.1
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group neighbor 10.4.64.2
set routing-instances DUN-SubOrg-LAN-VR instance-type vrf
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT match protocol direct
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action accept
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action set-origin igp
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action set-local-preference 110
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy To-DUN-SubOrg-LAN-VR-Export term T1_SPOKE_SDWAN match protocol bgp
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy To-DUN-SubOrg-LAN-VR-Export term T1_SPOKE_SDWAN match community 8000:1
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy To-DUN-SubOrg-LAN-VR-Export term T1_SPOKE_SDWAN action accept
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribute-to-bgp Default-Policy-To-BGP
set routing-instances DUN-SubOrg-LAN-VR global-vrf-id 36
set routing-instances DUN-SubOrg-LAN-VR networks [ LAN-HUB1 ]
set routing-instances DUN-SubOrg-LAN-VR mpls-vpn-core-instance DUN-SubOrg-Control-VR
set routing-instances DUN-SubOrg-LAN-VR route-distinguisher 8036L:104
set routing-instances DUN-SubOrg-LAN-VR vrf-export-target target:8036L:104
set routing-instances DUN-SubOrg-LAN-VR vrf-both-target target:36L:36
set routing-instances DUN-SubOrg-LAN-VR-Export instance-type vrf
set routing-instances DUN-SubOrg-LAN-VR-Export policy-options redistribution-policy Default-Policy term T1_TO_SDWAN action accept
set routing-instances DUN-SubOrg-LAN-VR-Export policy-options redistribution-policy Default-Policy term T1_TO_SDWAN action set-community 8000:0
set routing-instances DUN-SubOrg-LAN-VR-Export policy-options redistribute-to-bgp Default-Policy
set routing-instances DUN-SubOrg-LAN-VR-Export policy-options redistribute-to-bgp6 Default-Policy
set routing-instances DUN-SubOrg-LAN-VR-Export policy-options instance-import from-instance DUN-SubOrg-LAN-VR family inet policy To-DUN-SubOrg-LAN-VR-Export
set routing-instances DUN-SubOrg-LAN-VR-Export policy-options instance-import from-instance DUN-SubOrg-LAN-VR family inet6 policy To-DUN-SubOrg-LAN-VR-Export
set routing-instances DUN-SubOrg-LAN-VR-Export global-vrf-id 16036
set routing-instances DUN-SubOrg-LAN-VR-Export mpls-vpn-core-instance DUN-SubOrg-Control-VR
set routing-instances DUN-SubOrg-LAN-VR-Export route-distinguisher 16036L:104
set routing-instances DUN-SubOrg-LAN-VR-Export vrf-export-target target:16036L:104@SPOKE1
set routing-instances DUN-SubOrg-Control-VR instance-type virtual-router
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term Paired-TVI-Reject match address 169.254.0.0/16
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term Paired-TVI-Reject action reject
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term SDWAN-TVI2-Reject match address 10.4.64.103/32
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term SDWAN-TVI2-Reject action reject
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT match protocol direct
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT action accept
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT action set-origin igp
set routing-instances DUN-SubOrg-Control-VR policy-options redistribute-to-bgp Control-VR-Policy
set routing-instances DUN-SubOrg-Control-VR mpls-vpn-core
set routing-instances DUN-SubOrg-Control-VR interfaces [ ptvi17 tvi-0/17.0 ]
set routing-instances DUN-SubOrg-Control-VR routing-options mpls-vpn-local-router-interface family inet
set routing-instances DUN-SubOrg-Control-VR routing-options mpls-vpn-local-router-interface interface tvi-0/17.0
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 local-address 10.4.64.103
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart enable
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart maximum-restart-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart recovery-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart select-defer-time 30
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart stalepath-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart multiplier 8
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR match community "(^|,)8010:1100($|,)"
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Reject-VersaPvt-Spokes match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Reject-VersaPvt-Spokes match community "((^|,)8000:1($|,))|((^|,)8000:2($|,))"
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Reject-VersaPvt-Spokes action reject
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR match community "(^|,)8010:1100($|,)"
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR match extended-community target:36L:36
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR match extended-community "target:16036L:104 target:8036L:104"
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR action set-local-preference 101
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-All action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-All action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-All action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-VersaPvt-All match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-VersaPvt-All action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 action community 8010:1100
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 action next-term VersaPvt-Wildcard-Spoke
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard-Spoke match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard-Spoke action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard-Spoke action community 8000:1
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard-Spoke action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term Wildcard action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 router-id 10.4.64.103
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 local-as as-number 64512
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group type internal
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet-vpn unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet6-vpn unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group import Import-From-Hubs-Policy
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group export TO_SDWAN
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group peer-as 64512
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group neighbor 10.4.64.1
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group neighbor 10.4.64.2
set routing-instances DUN-SubOrg-LAN-VR instance-type vrf
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT match protocol direct
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action accept
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action set-community "8001:104 8000:1 8010:1100"
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action set-origin igp
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action set-local-preference 110
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribute-to-bgp Default-Policy-To-BGP
set routing-instances DUN-SubOrg-LAN-VR global-vrf-id 36
set routing-instances DUN-SubOrg-LAN-VR networks [ LAN-SPOKE1 ]
set routing-instances DUN-SubOrg-LAN-VR mpls-vpn-core-instance DUN-SubOrg-Control-VR
set routing-instances DUN-SubOrg-LAN-VR route-distinguisher 36L:36
set routing-instances DUN-SubOrg-LAN-VR vrf-import-target target:16036L:104
set routing-instances DUN-SubOrg-LAN-VR vrf-both-target target:36L:36@SPOKE2
set routing-instances DUN-SubOrg-Control-VR instance-type virtual-router
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term Paired-TVI-Reject match address 169.254.0.0/16
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term Paired-TVI-Reject action reject
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term SDWAN-TVI2-Reject match address 10.4.64.105/32
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term SDWAN-TVI2-Reject action reject
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT match protocol direct
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT action accept
set routing-instances DUN-SubOrg-Control-VR policy-options redistribution-policy Control-VR-Policy term DIRECT action set-origin igp
set routing-instances DUN-SubOrg-Control-VR policy-options redistribute-to-bgp Control-VR-Policy
set routing-instances DUN-SubOrg-Control-VR mpls-vpn-core
set routing-instances DUN-SubOrg-Control-VR interfaces [ ptvi17 tvi-0/17.0 ]
set routing-instances DUN-SubOrg-Control-VR routing-options mpls-vpn-local-router-interface family inet
set routing-instances DUN-SubOrg-Control-VR routing-options mpls-vpn-local-router-interface interface tvi-0/17.0
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 local-address 10.4.64.105
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart enable
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart maximum-restart-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart recovery-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart select-defer-time 30
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart stalepath-time 3600
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 graceful-restart multiplier 8
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR match community "(^|,)8010:1100($|,)"
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-VersaPvt-Spokes-DUN-SubOrg-LAN-VR action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Reject-VersaPvt-Spokes match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Reject-VersaPvt-Spokes match community "((^|,)8000:1($|,))|((^|,)8000:2($|,))"
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Reject-VersaPvt-Spokes action reject
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR match community "(^|,)8010:1100($|,)"
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR match extended-community target:36L:36
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Accept-Direct-Spokes-DUN-SubOrg-LAN-VR action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR match extended-community "target:16036L:104 target:8036L:104"
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Hub-Priority1-DUN-SubOrg-LAN-VR action set-local-preference 101
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-All action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-All action community 8009:8009
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-All action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-VersaPvt-All match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy Import-From-Hubs-Policy term Allow-VersaPvt-All action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 action community 8010:1100
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term SpokeGroup-Community-VersaPvt-1 action next-term VersaPvt-Wildcard-Spoke
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard-Spoke match family versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard-Spoke action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard-Spoke action community 8000:1
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term VersaPvt-Wildcard-Spoke action community-action set-specific
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 routing-peer-policy TO_SDWAN term Wildcard action accept
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 router-id 10.4.64.105
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 local-as as-number 64512
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group type internal
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet versa-private
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet-vpn unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group family inet6-vpn unicast
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group import Import-From-Hubs-Policy
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group export TO_SDWAN
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group peer-as 64512
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group neighbor 10.4.64.1
set routing-instances DUN-SubOrg-Control-VR protocols bgp 8 group Controllers-Group neighbor 10.4.64.2
set routing-instances DUN-SubOrg-LAN-VR instance-type vrf
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT match protocol direct
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action accept
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action set-community "8001:104 8000:1 8010:1100"
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action set-origin igp
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribution-policy Default-Policy-To-BGP term T2-DIRECT action set-local-preference 110
set routing-instances DUN-SubOrg-LAN-VR policy-options redistribute-to-bgp Default-Policy-To-BGP
set routing-instances DUN-SubOrg-LAN-VR global-vrf-id 36
set routing-instances DUN-SubOrg-LAN-VR networks [ LAN-SPOKE2 ]
set routing-instances DUN-SubOrg-LAN-VR mpls-vpn-core-instance DUN-SubOrg-Control-VR
set routing-instances DUN-SubOrg-LAN-VR route-distinguisher 36L:36
set routing-instances DUN-SubOrg-LAN-VR vrf-import-target target:16036L:104
set routing-instances DUN-SubOrg-LAN-VR vrf-both-target target:36L:36