tksdc@rtr.gate-agg.tbs> show route advertising-protocol bgp 114.127.255.

6 | match
202.3.211
* 43.255.199.16/28 202.3.211.60 100 I
* 202.3.208.0/24 202.3.211.60 100 I
* 202.3.209.32/27 202.3.211.60 100 I
* 202.3.209.64/27 202.3.211.61 100 I
* 202.3.210.0/24 202.3.211.61 100 I
* 202.3.211.48/28 Self 100 I

tksdc@rtr.gate-agg.tbs> show route advertising-protocol bgp 114.127.255.7 | match

202.3.211
* 43.255.199.16/28 202.3.211.60 100 I
* 202.3.208.0/24 202.3.211.60 100 I
* 202.3.209.32/27 202.3.211.60 100 I
* 202.3.209.64/27 202.3.211.61 100 I
* 202.3.210.0/24 202.3.211.61 100 I
* 202.3.211.48/28 Self 100 I

tksdc@rtr.gate-agg.tbs> show configuration interfaces ae0.211

description LAN-INET;
vlan-id 211;
family inet {
address 202.3.211.5/27;
}

{master}

tksdc@rtr.gate-agg.tbs> ping 202.3.211.1 source 202.3.211.5

PING 202.3.211.1 (202.3.211.1): 56 data bytes
64 bytes from 202.3.211.1: icmp_seq=0 ttl=64 time=1.143 ms
64 bytes from 202.3.211.1: icmp_seq=1 ttl=64 time=0.556 ms
64 bytes from 202.3.211.1: icmp_seq=2 ttl=64 time=0.599 ms
64 bytes from 202.3.211.1: icmp_seq=3 ttl=64 time=3.800 ms
64 bytes from 202.3.211.1: icmp_seq=4 ttl=64 time=0.762 ms
^C
--- 202.3.211.1 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.556/1.372/3.800/1.232 ms

{master}
tksdc@rtr.gate-agg.tbs> ping 202.3.211.19 source 202.3.211.5
PING 202.3.211.19 (202.3.211.19): 56 data bytes
64 bytes from 202.3.211.19: icmp_seq=0 ttl=64 time=24.059 ms
64 bytes from 202.3.211.19: icmp_seq=1 ttl=64 time=1.217 ms
64 bytes from 202.3.211.19: icmp_seq=2 ttl=64 time=2.207 ms
64 bytes from 202.3.211.19: icmp_seq=3 ttl=64 time=3.951 ms
64 bytes from 202.3.211.19: icmp_seq=4 ttl=64 time=3.719 ms
^C
--- 202.3.211.19 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.217/7.031/24.059/8.573 ms

{master}

tksdc@rtr.gate-agg.tbs> ping 202.3.211.27 source 202.3.211.5

PING 202.3.211.27 (202.3.211.27): 56 data bytes
64 bytes from 202.3.211.27: icmp_seq=0 ttl=255 time=1.414 ms
64 bytes from 202.3.211.27: icmp_seq=1 ttl=255 time=1.362 ms
64 bytes from 202.3.211.27: icmp_seq=2 ttl=255 time=1.360 ms
64 bytes from 202.3.211.27: icmp_seq=3 ttl=255 time=1.328 ms
64 bytes from 202.3.211.27: icmp_seq=4 ttl=255 time=1.241 ms
64 bytes from 202.3.211.27: icmp_seq=5 ttl=255 time=1.222 ms
64 bytes from 202.3.211.27: icmp_seq=6 ttl=255 time=1.301 ms
64 bytes from 202.3.211.27: icmp_seq=7 ttl=255 time=1.331 ms
64 bytes from 202.3.211.27: icmp_seq=8 ttl=255 time=2.384 ms
64 bytes from 202.3.211.27: icmp_seq=9 ttl=255 time=2.164 ms
64 bytes from 202.3.211.27: icmp_seq=10 ttl=255 time=2.227 ms
64 bytes from 202.3.211.27: icmp_seq=11 ttl=255 time=1.247 ms
64 bytes from 202.3.211.27: icmp_seq=12 ttl=255 time=1.357 ms
64 bytes from 202.3.211.27: icmp_seq=13 ttl=255 time=1.316 ms
64 bytes from 202.3.211.27: icmp_seq=14 ttl=255 time=1.297 ms
^C
--- 202.3.211.27 ping statistics ---
15 packets transmitted, 15 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.222/1.503/2.384/0.383 ms

tksdc@rtr.gate-agg.tbs> show configuration protocols bgp group IBGP-IPv4

type internal;
local-address 202.3.211.171;
export NAT-POOL-TO-BGP;
neighbor 114.127.255.6 {
description "IBGP peer to MX1-TBS";
}
neighbor 114.127.255.7 {
description "IBGP peer to MX2-TBS";
}

{master}
tksdc@rtr.gate-agg.tbs> show configuration | match ae0.211

{master}
tksdc@rtr.gate-agg.tbs> show arp no-resolve | match 202.3.211.5
b4:0c:25:e0:40:10 202.3.211.59 ae0.214 none

{master}
tksdc@rtr.gate-agg.tbs> show route 202.3.211.28

inet.0: 823777 destinations, 1648176 routes (823777 active, 0 holddown, 41 hidden)

+ = Active Route, - = Last Active, * = Both

202.3.211.0/27 *[Direct/0] 00:03:34

> via ae0.211
[OSPF/150] 6d 00:46:31, metric 0, tag 0
> to 114.124.128.5 via xe-0/1/0.0
[BGP/170] 6d 00:46:23, localpref 100, from 114.127.255.7
AS path: I, validation-state: unverified
> to 114.124.128.5 via xe-0/1/0.0
[BGP/170] 4d 23:42:24, MED 0, localpref 100, from 114.127.255.6
 AS path: I, validation-state: unverified
to 114.124.128.5 via xe-0/1/0.0
> to 114.124.128.1 via xe-0/0/0.0

NAT-DZONE-TBS.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

0.0.0.0/0 *[Static/5] 82w6d 23:12:13

> via ams0.3

NAT-IZONE-RIM-TBS.inet.0: 6 destinations, 6 routes (6 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

0.0.0.0/0 *[Static/5] 82w6d 23:12:13

tksdc@rtr.gate-agg.tbs> show configuration | no-more

## Last commit: 2020-06-30 23:57:50 WIB by tksdc
version 17.3R3.10;
system {
host-name rtr.gate-agg.tbs;
time-zone Asia/Jakarta;
authentication-order [ password tacplus ];
root-authentication {
encrypted-password "$1$04rddf1v$L6OGyJBViZ90jem9qhpsX1"; ## SECRET-DATA
}
name-server {
202.3.208.10;
202.3.208.11;
}
tacplus-server {
202.3.210.33 {
timeout 5;
source-address 202.3.211.171;
}
}
login {
announcement "By accessing this system, you agree that your actions may be
monitored\nif unauthorized usage is suspected.\n\n";
message "\nSYSTEM NAME: rtr.gate-
agg.t**\n\n=============================\nWARNING: Access is restricted to ***&$%)
(* personnel only.\nUnauthorized access is a violation of Indonesian Laws.\n!!!
Your Activities Inside this System will be logged !!!\n\n";
class view-only {
permissions [ view view-configuration ];
allow-commands "(ping)|(ssh)|(telnet)|(traceroute)|(descriptions)";
}
user tksdc {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$75pDKFtv$Xd6Hnkd0s7cWITLogXvEv/"; ## SECRET-
DATA
}
}
}
 static-host-mapping {
gate-gbr2 inet 203.130.200.97;
ext-buaran inet 202.3.211.166;
ext-gbr inet 202.3.211.161;
gate-cyber2 inet 202.3.211.164;
gate-cyber1 inet 114.127.255.65;
ext-mulia inet 202.3.211.173;
gate-mulia inet 114.127.255.17;
gate-gbr1 inet 114.127.255.49;
gate-buaran inet 114.127.255.33;
gate-gbr inet 202.3.211.162;
gate-btmctr inet 202.3.211.165;
ext-tbs inet 202.3.211.171;
}
services {
ssh {
root-login deny;
protocol-version v2;
max-sessions-per-connection 32;
}
telnet;
netconf {
ssh;
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
file config-changes {
change-log info;
}
file interface-logs {
any info;
match "(UpDown)|(lacp)";
explicit-priority;
}
file routing-logs {
any info;
match rpd;
explicit-priority;
}
file conflict-logs {
conflict-log info;
}
file default-log-messages {
any info;
match "(requested 'commit' operation)|(requested 'commit synchronize'
operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|
(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|
transfer-file|(license add)|(license delete)|(package -X update)|(package -X
delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|CFMD_CCM_DEFECT|
LFMD_3AH | RPD_MPLS_PATH_BFD|(Master Unchanged, Members Changed)|(Master Changed,
Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master
detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)|
BR_INFRA_DEVICE";
structured-data;
}
}
commit synchronize;
ntp {
server 202.3.211.121;
server 202.155.0.10;
source-address 202.3.211.171;
}
}
logical-systems {
rtr-gate-ofc2-tbs {
interfaces {
gr-0/3/0 {
unit 10 {
reassemble-packets;
description "Tunnel to rtr.ttc-ahz";
tunnel {
source 10.49.62.18;
destination 10.33.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.1/30;
}
}
unit 11 {
reassemble-packets;
description "Tunnel to rtr.gpr-binjai";
tunnel {
source 10.49.62.18;
destination 10.33.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.5/30;
}
}
unit 12 {
reassemble-packets;
description "Tunnel to rtr.reg-phijau";
tunnel {
source 10.49.62.18;
destination 10.33.6.254;
allow-fragmentation;
 }
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.9/30;
}
}
unit 13 {
reassemble-packets;
description "Tunnel to rtr.gpr-lippoplaza";
tunnel {
source 10.49.62.18;
destination 10.7.4.62;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.13/30;
}
}
unit 14 {
reassemble-packets;
description "Tunnel to rtr.gpr-sunplaza";
tunnel {
source 10.49.62.18;
destination 10.33.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.17/30;
}
}
unit 15 {
reassemble-packets;
description "Tunnel to rtr.ttc-lambaro";
tunnel {
source 10.49.62.18;
destination 10.41.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.21/30;
 }
}
unit 16 {
reassemble-packets;
description "Tunnel to rtr.gpr-bna";
tunnel {
source 10.49.62.18;
destination 10.41.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.25/30;
}
}
unit 17 {
reassemble-packets;
description "Tunnel to rtr.gpr-meulaboh";
tunnel {
source 10.49.62.18;
destination 10.41.10.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.29/30;
}
}
unit 18 {
reassemble-packets;
description "Tunnel to rtr.gpr-lhok";
tunnel {
source 10.49.62.18;
destination 10.41.6.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.33/30;
}
}
unit 19 {
reassemble-packets;
description "Tunnel to rtr.ttc-siantar";
tunnel {
source 10.49.62.18;
destination 10.36.99.241;
 allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.37/30;
}
}
unit 20 {
reassemble-packets;
description "Tunnel to rtr.gpr-siantar";
tunnel {
source 10.49.62.18;
destination 10.36.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.41/30;
}
}
unit 21 {
reassemble-packets;
description "Tunnel to rtr.gpr-sibolga";
tunnel {
source 10.49.62.18;
destination 10.36.6.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.45/30;
}
}
unit 22 {
reassemble-packets;
description "Tunnel to rtr.gpr-sidempuan";
tunnel {
source 10.49.62.18;
destination 10.36.14.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
 address 172.31.242.49/30;
}
}
unit 23 {
reassemble-packets;
description "Tunnel to rtr.gpr-kisaran";
tunnel {
source 10.49.62.18;
destination 10.36.10.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.53/30;
}
}
unit 24 {
reassemble-packets;
description "Tunnel to rtr.gpr-phijau";
tunnel {
source 10.49.62.18;
destination 10.33.26.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.244.1/30;
}
}
unit 30 {
reassemble-packets;
description "Tunnel to rtr.gpr-lpg";
tunnel {
source 10.49.62.18;
destination 10.7.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.57/30;
}
}
unit 31 {
reassemble-packets;
description "Tunnel to rtr.ttc-jambi";
tunnel {
source 10.49.62.18;
 destination 10.8.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.61/30;
}
}
unit 32 {
reassemble-packets;
description "Tunnel to rtr-jambi.backup";
tunnel {
source 10.49.62.18;
destination 10.8.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.65/30;
}
}
unit 33 {
reassemble-packets;
description "Tunnel to rtr.gpr-bungo";
tunnel {
source 10.49.62.18;
destination 10.8.5.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.69/30;
}
}
unit 34 {
reassemble-packets;
description "Tunnel to rtr.ttc-lpg2";
tunnel {
source 10.49.62.18;
destination 10.7.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
 }
address 172.31.242.73/30;
}
}
unit 35 {
reassemble-packets;
description "Tunnel to rtr.ttc-plg2";
tunnel {
source 10.49.62.18;
destination 10.9.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.77/30;
}
}
unit 36 {
reassemble-packets;
description "Tunnel to rtr.branch-lpg";
tunnel {
source 10.49.62.18;
destination 10.7.6.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.81/30;
}
}
unit 37 {
reassemble-packets;
description rtr.gpr-bengkulu;
tunnel {
source 10.49.62.18;
destination 10.9.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.85/30;
}
}
unit 38 {
reassemble-packets;
description rtr.linggau.1;
tunnel {
 source 10.49.62.18;
destination 10.9.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.89/30;
}
}
unit 39 {
reassemble-packets;
description rtr.gpr-plg;
tunnel {
source 10.49.62.18;
destination 10.9.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.93/30;
}
}
unit 40 {
reassemble-packets;
description rtr.gpr-belitung;
tunnel {
source 10.49.62.18;
destination 10.9.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.97/30;
}
}
unit 41 {
reassemble-packets;
description rtr.gpr-pkp;
tunnel {
source 10.49.62.18;
destination 10.9.25.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
 output Block_SMB_to_BC;
}
address 172.31.242.105/30;
}
}
unit 42 {
reassemble-packets;
description rtr.reg-plg;
tunnel {
source 10.49.62.18;
destination 10.9.7.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.109/30;
}
}
unit 50 {
reassemble-packets;
description "Tunnel to rtr.ofc-bsd";
tunnel {
source 10.49.62.18;
destination 10.250.0.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.113/30;
}
}
unit 51 {
reassemble-packets;
description "Tunnel to rtr.ttc-buaran";
tunnel {
source 10.49.62.18;
destination 10.251.63.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.117/30;
}
}
unit 52 {
reassemble-packets;
description "Tunnel to rtr.so-karawang";
 tunnel {
source 10.49.62.18;
destination 10.250.25.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.121/30;
}
}
unit 53 {
reassemble-packets;
description "Tunnel to rtr.gpr-alia";
tunnel {
source 10.49.62.18;
destination 10.250.17.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.125/30;
}
}
unit 54 {
reassemble-packets;
description "Tunnel to rtr.ttc-tbs";
tunnel {
source 10.49.62.18;
destination 10.2.223.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.169/30;
}
}
unit 55 {
reassemble-packets;
description "Tunnel to rtr.gpr-cibubur";
tunnel {
source 10.49.62.18;
destination 10.250.41.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
 input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.133/30;
}
}
unit 56 {
reassemble-packets;
description "Tunnel to rtr.branch-serang";
tunnel {
source 10.49.62.18;
destination 10.250.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.137/30;
}
}
unit 57 {
reassemble-packets;
description "Tunnel to rtr.gpr-gandaria";
tunnel {
source 10.49.62.18;
destination 10.250.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.141/30;
}
}
unit 58 {
reassemble-packets;
description "Tunnel to rtr.gpr-sukabumi";
tunnel {
source 10.49.62.18;
destination 10.250.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.145/30;
}
}
unit 59 {
reassemble-packets;
 description "Tunnel to rtr.gpr-bsd";
tunnel {
source 10.49.62.18;
destination 10.250.27.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.149/30;
}
}
unit 60 {
reassemble-packets;
description "Tunnel to rtr.reg-bogor.1";
tunnel {
source 10.49.62.18;
destination 10.250.39.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.153/30;
}
}
unit 61 {
reassemble-packets;
description "Tunnel to rtr.gpr-centralpark";
tunnel {
source 10.49.62.18;
destination 10.251.49.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.157/30;
}
}
unit 62 {
reassemble-packets;
description "Tunnel to rtr.gpr-serang";
tunnel {
source 10.49.62.18;
destination 10.250.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
 filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.161/30;
}
}
unit 63 {
reassemble-packets;
description "Tunnel to rtr.gpr-cilegon";
tunnel {
source 10.49.62.18;
destination 10.250.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.165/30;
}
}
unit 70 {
reassemble-packets;
description "Tunnel to rtr.ttc-dago";
tunnel {
source 10.49.62.18;
destination 10.3.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.181/30;
}
}
unit 71 {
reassemble-packets;
description "Tunnel to rtr.gpr-cirebon";
tunnel {
source 10.49.62.18;
destination 10.3.24.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.185/30;
}
}
unit 72 {
 reassemble-packets;
description "Tunnel to gpr-cianjur";
tunnel {
source 10.49.62.18;
destination 10.3.26.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.189/30;
}
}
unit 73 {
reassemble-packets;
description "Tunnel to rtr.gpr-tasik";
tunnel {
source 10.49.62.18;
destination 10.3.22.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.193/30;
}
}
unit 74 {
reassemble-packets;
description "Tunnel to rtr.gpr-bdg";
tunnel {
source 10.49.62.18;
destination 10.3.18.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.197/30;
}
}
unit 75 {
reassemble-packets;
description "Tunnel to rtr.gpr-dago";
tunnel {
source 10.49.62.18;
destination 10.3.20.254;
allow-fragmentation;
}
family inet {
 tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.201/30;
}
}
unit 76 {
reassemble-packets;
description "Tunnel to rtr.reg-bdg";
tunnel {
source 10.49.62.18;
destination 10.3.4.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.205/30;
}
}
unit 77 {
reassemble-packets;
description "Tunnel to rtr.ttc-soeta";
tunnel {
source 10.49.62.18;
destination 10.3.108.190;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.209/30;
}
}
unit 90 {
reassemble-packets;
description "Tunnel to rtr.gpr-pdg";
tunnel {
source 10.49.62.18;
destination 10.39.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.217/30;
}
}
unit 91 {
reassemble-packets;
description "Tunnel to rtr.ttc-btmctr";
tunnel {
source 10.49.62.18;
destination 10.37.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.221/30;
}
}
unit 92 {
reassemble-packets;
description "Tunnel to rtr.gpr-btm";
tunnel {
source 10.49.62.18;
destination 10.37.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.225/30;
}
}
unit 93 {
reassemble-packets;
description "Tunnel to wifi.reg-btmctr";
tunnel {
source 10.49.62.18;
destination 10.37.11.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.229/30;
}
}
unit 94 {
reassemble-packets;
description "Tunnel to rtr.ttc-kenanga";
tunnel {
source 10.49.62.18;
destination 10.35.99.241;
allow-fragmentation;
}
 family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.233/30;
}
}
unit 95 {
reassemble-packets;
description "Tunnel to rtr.ofc-marpoyan";
tunnel {
source 10.49.62.18;
destination 10.35.102.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.237/30;
}
}
unit 96 {
reassemble-packets;
description "Tunnel to rtr.gpr-pinang";
tunnel {
source 10.49.62.18;
destination 10.37.25.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.241/30;
}
}
unit 97 {
reassemble-packets;
description "Tunnel to rtr.gpr-karimun";
tunnel {
source 10.49.62.18;
destination 10.37.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.245/30;
}
}
unit 98 {
reassemble-packets;
description "Tunnel to rtr.reg-sumbangteng";
tunnel {
source 10.49.62.18;
destination 10.35.25.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.249/30;
}
}
unit 99 {
reassemble-packets;
description "Tunnel to rtr.gpr-tembilahan";
tunnel {
source 10.49.62.18;
destination 10.35.10.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.242.253/30;
}
}
unit 100 {
reassemble-packets;
description "Tunnel to rtr.gpr-dumai";
tunnel {
source 10.49.62.18;
destination 10.35.6.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.1/30;
}
}
unit 101 {
reassemble-packets;
description "Tunnel to rtr.gpr-pkb";
tunnel {
source 10.49.62.18;
destination 10.35.2.254;
allow-fragmentation;
 }
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.5/30;
}
}
unit 102 {
reassemble-packets;
description "Tunnel to rtr.gpr-skapkb";
tunnel {
source 10.49.62.18;
destination 10.35.14.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.9/30;
}
}
unit 110 {
reassemble-packets;
description "Tunnel to rtr.gpr-kudus";
tunnel {
source 10.49.62.18;
destination 10.5.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.13/30;
}
}
unit 111 {
reassemble-packets;
description "Tunnel to rtr.gpr-pwkerto";
tunnel {
source 10.49.62.18;
destination 10.5.10.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.17/30;
 }
}
unit 112 {
reassemble-packets;
description "Tunnel to rtr.gpr-solo";
tunnel {
source 10.49.62.18;
destination 10.6.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.21/30;
}
}
unit 113 {
reassemble-packets;
description "Tunnel to rtr.ttc-gombel";
tunnel {
source 10.49.62.18;
destination 10.5.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.25/30;
}
}
unit 114 {
reassemble-packets;
description "Tunnel to rtr.reg-smrpahlawan";
tunnel {
source 10.49.62.18;
destination 10.5.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.29/30;
}
}
unit 115 {
reassemble-packets;
description "Tunnel to rtr.gpr-smrpahlawan";
tunnel {
source 10.49.62.18;
destination 10.5.6.254;
 allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.33/30;
}
}
unit 116 {
reassemble-packets;
description "Tunnel to rtr.gpr-tegal";
tunnel {
source 10.49.62.18;
destination 10.5.12.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.37/30;
}
}
unit 117 {
reassemble-packets;
description "Tunnel to rtr.gpr-citra";
tunnel {
source 10.49.62.18;
destination 10.5.8.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.41/30;
}
}
unit 118 {
reassemble-packets;
description "Tunnel to rtr.gpr-yogya";
tunnel {
source 10.49.62.18;
destination 10.6.4.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
 address 172.31.243.45/30;
}
}
unit 119 {
reassemble-packets;
description "Tunnel to rtr.ttc-solo";
tunnel {
source 10.49.62.18;
destination 10.6.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.49/30;
}
}
unit 120 {
reassemble-packets;
description "Tunnel to sw.ttc-sukoharjo.1";
tunnel {
source 10.49.62.18;
destination 10.6.103.242;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.245.13/30;
}
}
unit 130 {
reassemble-packets;
description "Tunnel to rtr.ttc-gayungan.1";
tunnel {
source 10.49.62.18;
destination 10.65.183.230;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.57/30;
}
}
unit 131 {
reassemble-packets;
description "Tunnel to rtr.gpr-banyuwangi";
tunnel {
source 10.49.62.18;
 destination 10.65.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.61/30;
}
}
unit 132 {
reassemble-packets;
description "Tunnel to rtr.gpr-grapena";
tunnel {
source 10.49.62.18;
destination 10.65.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.65/30;
}
}
unit 133 {
reassemble-packets;
description "Tunnel to rtr.gpr-gresik";
tunnel {
source 10.49.62.18;
destination 10.65.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.69/30;
}
}
unit 134 {
reassemble-packets;
description "Tunnel to rtr.gpr-hrm";
tunnel {
source 10.49.62.18;
destination 10.65.37.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
 }
address 172.31.243.73/30;
}
}
unit 135 {
reassemble-packets;
description "Tunnel to rtr.gpr-jember";
tunnel {
source 10.49.62.18;
destination 10.65.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.77/30;
}
}
unit 136 {
reassemble-packets;
description "Tunnel to rtr.gpr-kediri";
tunnel {
source 10.49.62.18;
destination 10.65.27.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.81/30;
}
}
unit 137 {
reassemble-packets;
description "Tunnel to rtr.gpr-madiun";
tunnel {
source 10.49.62.18;
destination 10.65.13.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.85/30;
}
}
unit 138 {
reassemble-packets;
description "Tunnel to rtr.gpr-mlg";
tunnel {
 source 10.49.62.18;
destination 10.66.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.89/30;
}
}
unit 139 {
reassemble-packets;
description "Tunnel to rtr.gpr-pemuda";
tunnel {
source 10.49.62.18;
destination 10.65.11.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.93/30;
}
}
unit 140 {
reassemble-packets;
description "Tunnel to rtr.gpr-probo";
tunnel {
source 10.49.62.18;
destination 10.65.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.97/30;
}
}
unit 141 {
reassemble-packets;
description "Tunnel to rtr.gpr-ptcdarmo";
tunnel {
source 10.49.62.18;
destination 10.65.23.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
 output Block_SMB_to_BC;
}
address 172.31.243.101/30;
}
}
unit 142 {
reassemble-packets;
description "Tunnel to rtr.gpr-tuban";
tunnel {
source 10.49.62.18;
destination 10.65.25.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.105/30;
}
}
unit 143 {
reassemble-packets;
description "Tunnel to reg-bricat";
tunnel {
source 10.49.62.18;
destination 10.65.15.126;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.109/30;
}
}
unit 150 {
reassemble-packets;
description "Tunnel to rtr.ttc-kupang";
tunnel {
source 10.49.62.18;
destination 10.69.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.113/30;
}
}
unit 151 {
reassemble-packets;
description "Tunnel to rtr.gpr-kupang";
 tunnel {
source 10.49.62.18;
destination 10.69.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.117/30;
}
}
unit 152 {
reassemble-packets;
description "Tunnel to rtr.gpr-mataram";
tunnel {
source 10.49.62.18;
destination 10.67.22.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.121/30;
}
}
unit 153 {
reassemble-packets;
description "Tunnel to rtr.gpr-mbg";
tunnel {
source 10.49.62.18;
destination 10.67.24.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.125/30;
}
}
unit 154 {
reassemble-packets;
description "Tunnel to rtr.reg-dps";
tunnel {
source 10.49.62.18;
destination 10.67.32.1;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
 input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.129/30;
}
}
unit 155 {
reassemble-packets;
description "Tunnel to rtr.ttc-renon";
tunnel {
source 10.49.62.18;
destination 10.67.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.133/30;
}
}
unit 156 {
reassemble-packets;
description "Tunnel to rtr.gpr-phijau";
tunnel {
source 10.49.62.18;
destination 10.23.27.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.77/30;
}
}
unit 157 {
reassemble-packets;
description "Tunnel to rtr.gpr-lippoplaza";
tunnel {
source 10.49.62.18;
destination 10.23.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.25/30;
}
}
unit 158 {
reassemble-packets;
 description "Tunnel to rtr.gpr-centerpoint";
tunnel {
source 10.49.62.18;
destination 10.23.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.29/30;
}
}
unit 159 {
reassemble-packets;
description "Tunnel to rtr.gpr-kualanamu";
tunnel {
source 10.49.62.18;
destination 10.23.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.33/30;
}
}
unit 160 {
reassemble-packets;
description "Tunnel to rtr.branch-binjai";
tunnel {
source 10.49.62.18;
destination 10.23.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.37/30;
}
}
unit 161 {
reassemble-packets;
description "Tunnel to rtr.gpr-binjai";
tunnel {
source 10.49.62.18;
destination 10.23.37.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
 filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.41/30;
}
}
unit 162 {
reassemble-packets;
description "Tunnel to rtr.gpr-siantar";
tunnel {
source 10.49.62.18;
destination 10.23.39.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.45/30;
}
}
unit 163 {
reassemble-packets;
description "Tunnel to rtr.gpr-sibolga";
tunnel {
source 10.49.62.18;
destination 10.23.41.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.49/30;
}
}
unit 164 {
reassemble-packets;
description "Tunnel to rtr.gpr-psidempuan";
tunnel {
source 10.49.62.18;
destination 10.23.43.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.53/30;
}
}
unit 165 {
 reassemble-packets;
description "Tunnel to rtr.gpr-kisaran";
tunnel {
source 10.49.62.18;
destination 10.23.45.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.57/30;
}
}
unit 166 {
reassemble-packets;
description "Tunnel to rtr.gpr-aceh";
tunnel {
source 10.49.62.18;
destination 10.23.47.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.61/30;
}
}
unit 167 {
reassemble-packets;
description "Tunnel to rtr.gpr-meulaboh";
tunnel {
source 10.49.62.18;
destination 10.23.49.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.65/30;
}
}
unit 168 {
reassemble-packets;
description "Tunnel to rtr.gpr-lhoksumawe";
tunnel {
source 10.49.62.18;
destination 10.23.51.254;
allow-fragmentation;
}
family inet {
 tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.69/30;
}
}
unit 169 {
reassemble-packets;
description "Tunnel to rtr.gpr-gmpmdn";
tunnel {
source 10.49.62.18;
destination 10.23.25.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.73/30;
}
}
unit 170 {
reassemble-packets;
description "Tunnel to rtr.gpr-bjm";
tunnel {
source 10.49.62.18;
destination 10.75.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.145/30;
}
}
unit 171 {
reassemble-packets;
description "Tunnel to rtr.ttc-bpp2";
tunnel {
source 10.49.62.18;
destination 10.73.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.149/30;
}
}
unit 172 {
reassemble-packets;
description "Tunnel to rtr.gpr-tarakan";
tunnel {
source 10.49.62.18;
destination 10.73.24.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.153/30;
}
}
unit 173 {
reassemble-packets;
description "Tunnel to rtr.gpr-smd";
tunnel {
source 10.49.62.18;
destination 10.73.20.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.157/30;
}
}
unit 174 {
reassemble-packets;
description "Tunnel to rtr.gpr-bontang";
tunnel {
source 10.49.62.18;
destination 10.73.22.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.161/30;
}
}
unit 175 {
reassemble-packets;
description "Tunnel to rtr.gpr-bpp";
tunnel {
source 10.49.62.18;
destination 10.73.18.254;
allow-fragmentation;
}
 family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.165/30;
}
}
unit 176 {
reassemble-packets;
description "Tunnel to rtr.reg-sudirman";
tunnel {
source 10.49.62.18;
destination 10.73.11.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.169/30;
}
}
unit 177 {
reassemble-packets;
description "Tunnel to rtr.ttc-ptk2";
tunnel {
source 10.49.62.18;
destination 10.17.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.173/30;
}
}
unit 178 {
reassemble-packets;
description "Tunnel to rtr.gpr-ptk";
tunnel {
source 10.49.62.18;
destination 10.17.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.177/30;
}
}
unit 179 {
reassemble-packets;
description "Tunnel to rtr.gpr-plkaraya";
tunnel {
source 10.49.62.18;
destination 10.107.129.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.181/30;
}
}
unit 190 {
reassemble-packets;
description "Tunnel to rtr.ttc-pengayoman";
tunnel {
source 10.49.62.18;
destination 10.97.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.185/30;
}
}
unit 191 {
reassemble-packets;
description "Tunnel to rtr.reg-mks";
tunnel {
source 10.49.62.18;
destination 10.97.11.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.189/30;
}
}
unit 192 {
reassemble-packets;
description "Tunnel to rtr.gpr-mks";
tunnel {
source 10.49.62.18;
destination 10.97.20.254;
allow-fragmentation;
 }
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.193/30;
}
}
unit 193 {
reassemble-packets;
description "Tunnel to rtr.gpr-parepare";
tunnel {
source 10.49.62.18;
destination 10.97.26.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.197/30;
}
}
unit 194 {
reassemble-packets;
description "Tunnel to rtr.gpr-mdo";
tunnel {
source 10.49.62.18;
destination 10.99.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.201/30;
}
}
unit 195 {
reassemble-packets;
description "Tunnel to rtr.gpr-grntalo";
tunnel {
source 10.49.62.18;
destination 10.99.8.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.205/30;
 }
}
unit 196 {
reassemble-packets;
description "Tunnel to rtr.gpr-palu";
tunnel {
source 10.49.62.18;
destination 10.100.105.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.209/30;
}
}
unit 197 {
reassemble-packets;
description "Tunnel to rtr.gpr-kendari";
tunnel {
source 10.49.62.18;
destination 10.101.1.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.213/30;
}
}
unit 198 {
reassemble-packets;
description "Tunnel to rtr.ofc-sudiang";
tunnel {
source 10.49.62.18;
destination 10.97.103.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.217/30;
}
}
unit 199 {
reassemble-packets;
description "Tunnel to ttc-teling";
tunnel {
source 10.49.62.18;
destination 10.99.99.190;
 allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.221/30;
}
}
unit 200 {
reassemble-packets;
description "Tunnel to rtr.gpr-amb";
tunnel {
source 10.49.62.18;
destination 10.105.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.225/30;
}
}
unit 210 {
reassemble-packets;
description "Tunnel to rtr.gpr-sorong";
tunnel {
source 10.49.62.18;
destination 10.112.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.229/30;
}
}
unit 211 {
reassemble-packets;
description "Tunnel to rtr.gpr-manokwari";
tunnel {
source 10.49.62.18;
destination 10.112.6.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
 address 172.31.243.233/30;
}
}
unit 212 {
reassemble-packets;
description "Tunnel to rtr.ttc-tmk2";
tunnel {
source 10.49.62.18;
destination 10.115.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.237/30;
}
}
unit 213 {
reassemble-packets;
description "Tunnel to rtr.gpr-tmk";
tunnel {
source 10.49.62.18;
destination 10.115.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.241/30;
}
}
unit 214 {
reassemble-packets;
description "Tunnel to rtr.ttc-jpr2";
tunnel {
source 10.49.62.18;
destination 10.113.99.241;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.245/30;
}
}
unit 215 {
reassemble-packets;
description "Tunnel to rtr.gpr-jpr";
tunnel {
source 10.49.62.18;
 destination 10.113.2.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.249/30;
}
}
unit 216 {
reassemble-packets;
description "Tunnel to rtr.reg-puma";
tunnel {
source 10.49.62.18;
destination 10.113.0.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.243.253/30;
}
}
unit 217 {
reassemble-packets;
description "Tunnel to rtr.gpr-binjai";
tunnel {
source 10.49.62.18;
destination 10.33.1.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.244.5/30;
}
}
unit 218 {
reassemble-packets;
description "Tunnel to rtr.gpr-palembang";
tunnel {
source 10.49.62.18;
destination 10.9.14.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
 }
address 172.31.244.9/30;
}
}
unit 219 {
reassemble-packets;
description "Tunnel to rtr.gpr-pekalongan";
tunnel {
source 10.49.62.18;
destination 10.5.4.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.244.13/30;
}
}
unit 220 {
reassemble-packets;
description "Tunnel to rtr.TLT-2";
tunnel {
source 10.49.62.18;
destination 10.48.187.253;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.31.244.17/30;
}
}
unit 251 {
reassemble-packets;
description "Tunnel to it-agg-palembang(Backup-R2)";
tunnel {
source 10.49.62.18;
destination 10.32.63.1;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.65/30;
}
}
unit 252 {
reassemble-packets;
description "Tunnel to rtr.ro-palembang";
tunnel {
 source 10.49.62.18;
destination 10.32.5.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.69/30;
}
}
unit 254 {
reassemble-packets;
description "Tunnel to rtr-ttc-palembang";
tunnel {
source 10.49.62.18;
destination 10.32.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.77/30;
}
}
unit 255 {
reassemble-packets;
description "Tunnel to rtr.ttc-jambi";
tunnel {
source 10.49.62.18;
destination 10.32.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.81/30;
}
}
unit 256 {
reassemble-packets;
description "Tunnel to rtr.ttc-lampung";
tunnel {
source 10.49.62.18;
destination 10.32.23.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
 output Block_SMB_to_BC;
}
address 172.70.2.85/30;
}
}
unit 257 {
reassemble-packets;
description "Tunnel to rtr.gpr-jambi";
tunnel {
source 10.49.62.18;
destination 10.32.27.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.89/30;
}
}
unit 258 {
reassemble-packets;
description "Tunnel to rtr.gpr-muarabungo";
tunnel {
source 10.49.62.18;
destination 10.32.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.93/30;
}
}
unit 259 {
reassemble-packets;
description "Tunnel to rtr.gpr-bengkulu";
tunnel {
source 10.49.62.18;
destination 10.32.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.97/30;
}
}
unit 260 {
reassemble-packets;
description "Tunnel to rtr.gpr-linggau";
 tunnel {
source 10.49.62.18;
destination 10.32.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.101/30;
}
}
unit 261 {
reassemble-packets;
description "Tunnel to rtr.gpr-lampung";
tunnel {
source 10.49.62.18;
destination 10.32.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.105/30;
}
}
unit 262 {
reassemble-packets;
description "Tunnel to rtr.grapari-veteran";
tunnel {
source 10.49.62.18;
destination 10.32.37.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.109/30;
}
}
unit 263 {
reassemble-packets;
description "Tunnel to rtr.gpr-belitung";
tunnel {
source 10.49.62.18;
destination 10.32.39.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
 input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.113/30;
}
}
unit 264 {
reassemble-packets;
description "Tunnel to rtr.gpr-pangkalpinang";
tunnel {
source 10.49.62.18;
destination 10.32.41.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.117/30;
}
}
unit 265 {
reassemble-packets;
description "Tunnel to rtr.branch-lampung";
tunnel {
source 10.49.62.18;
destination 10.32.43.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.121/30;
}
}
unit 266 {
reassemble-packets;
description "Tunnel to rtr.gpr-palembang";
tunnel {
source 10.49.62.18;
destination 10.32.45.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.2.125/30;
}
}
unit 352 {
reassemble-packets;
 description "Tunnel to Reg Office BSD";
tunnel {
source 10.49.62.18;
destination 10.59.11.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.5/30;
}
}
unit 353 {
reassemble-packets;
description "Tunnel to rtr.reg-office-bogor";
tunnel {
source 10.49.62.18;
destination 10.59.17.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.9/30;
}
}
unit 354 {
reassemble-packets;
description "Tunnel to TTC Buaran";
tunnel {
source 10.49.62.18;
destination 10.59.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.13/30;
}
}
unit 355 {
reassemble-packets;
description "Tunnel to TTC BSD";
tunnel {
source 10.49.62.18;
destination 10.59.23.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
 filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.17/30;
}
}
unit 356 {
reassemble-packets;
description "Tunnel to rtr.gpr-alia (Branch JakPuSel+Grapari)";
tunnel {
source 10.49.62.18;
destination 10.59.27.253;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.21/30;
}
}
unit 357 {
reassemble-packets;
description "Tunnel to rtr.gpr-Central-Park[GRA023]";
tunnel {
source 10.49.62.18;
destination 10.59.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.25/30;
}
}
unit 358 {
reassemble-packets;
description "Tunnel to rtr.gpr-Cibubur[GRA091]";
tunnel {
source 10.49.62.18;
destination 10.59.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.29/30;
}
}
unit 359 {
 reassemble-packets;
description "Tunnel to rtr.gpr-Cilegon[GRA022]";
tunnel {
source 10.49.62.18;
destination 10.59.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.33/30;
}
}
unit 360 {
reassemble-packets;
description "Tunnel to rtr.gpr-Gandaria[GRA088]";
tunnel {
source 10.49.62.18;
destination 10.59.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.37/30;
}
}
unit 361 {
reassemble-packets;
description "Tunnel to Grapari Karawang";
tunnel {
source 10.49.62.18;
destination 10.59.37.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.41/30;
}
}
unit 362 {
reassemble-packets;
description "Tunnel to Branch Serang";
tunnel {
source 10.49.62.18;
destination 10.59.39.254;
allow-fragmentation;
}
family inet {
 tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.45/30;
}
}
unit 363 {
reassemble-packets;
description "Tunnel to Grapari Serang";
tunnel {
source 10.49.62.18;
destination 10.59.41.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.49/30;
}
}
unit 364 {
reassemble-packets;
description "Tunnel to rtr.gpr-Sukabumi[GRA073]";
tunnel {
source 10.49.62.18;
destination 10.59.43.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.53/30;
}
}
unit 365 {
reassemble-packets;
description "Tunnel to Grapari Cilandak (Card Management)";
tunnel {
source 10.49.62.18;
destination 10.59.45.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.57/30;
}
}
unit 367 {
reassemble-packets;
description "Tunnel to rtr.branch-bekasi";
tunnel {
source 10.49.62.18;
destination 10.59.47.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.65/30;
}
}
unit 368 {
reassemble-packets;
description "Tunnel to rtr.branch-matraman";
tunnel {
source 10.49.62.18;
destination 10.59.49.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.69/30;
}
}
unit 369 {
reassemble-packets;
description "Tunnel to rtr.branch-jakbar";
tunnel {
source 10.49.62.18;
destination 10.59.51.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.73/30;
}
}
unit 370 {
reassemble-packets;
description "Tunnel to rtr.gpr-t3";
tunnel {
source 10.49.62.18;
destination 10.59.25.254;
allow-fragmentation;
}
 family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.77/30;
}
}
unit 371 {
reassemble-packets;
description "Tunnel to LS TSO";
tunnel {
source 10.49.62.18;
destination 10.251.127.141;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
address 172.70.3.82/30;
}
}
unit 372 {
reassemble-packets;
description "Tunnel to RTR TLT";
tunnel {
source 10.49.62.18;
destination 10.59.5.253;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.85/30;
}
}
unit 373 {
reassemble-packets;
description "Tunnel to RTR TLT";
tunnel {
source 10.49.62.18;
destination 10.59.5.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.89/30;
}
}
unit 374 {
reassemble-packets;
description "Tunnel to LS rtr.gate-agg.tso-02";
 tunnel {
source 10.49.62.18;
destination 10.251.127.145;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
address 172.70.3.94/30;
}
}
unit 451 {
reassemble-packets;
description "Tunnel to TTC Dago";
tunnel {
source 10.49.62.18;
destination 10.72.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.1/30;
}
}
unit 452 {
reassemble-packets;
description "Tunnel to Regional Office Bandung SCS ";
tunnel {
source 10.49.62.18;
destination 10.72.5.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.5/30;
}
}
unit 453 {
reassemble-packets;
description "Tunnel to TTC Soekarno Hatta [BDG500] ";
tunnel {
source 10.49.62.18;
destination 10.72.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.9/30;
 }
}
unit 454 {
reassemble-packets;
description "Tunnel to Grapari Dago (Bandung 2) [GRA076] ";
tunnel {
source 10.49.62.18;
destination 10.72.27.253;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.13/30;
}
}
unit 455 {
reassemble-packets;
description "Tunnel to Grapari Bandung (Branch) ";
tunnel {
source 10.49.62.18;
destination 10.72.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.17/30;
}
}
unit 456 {
reassemble-packets;
description "Tunnel to Grapari Cianjur [GRA028] ";
tunnel {
source 10.49.62.18;
destination 10.72.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.21/30;
}
}
unit 457 {
reassemble-packets;
description "Tunnel to Grapari Cirebon (Branch) ";
tunnel {
source 10.49.62.18;
destination 10.72.33.254;
 allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.25/30;
}
}
unit 458 {
reassemble-packets;
description "Tunnel to Grapari Soreang (Branch) ";
tunnel {
source 10.49.62.18;
destination 10.72.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.29/30;
}
}
unit 459 {
reassemble-packets;
description "Tunnel to Grapari Tasikmalaya [GRA030] ";
tunnel {
source 10.49.62.18;
destination 10.72.37.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.4.33/30;
}
}
unit 460 {
reassemble-packets;
description "Tunnel to Grapari Karawang NEW";
tunnel {
source 10.49.62.18;
destination 10.72.39.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
 address 172.70.4.37/30;
}
}
unit 552 {
reassemble-packets;
description "Tunnel to Regional Office Semarang";
tunnel {
source 10.49.62.18;
destination 10.72.69.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.1/30;
}
}
unit 553 {
reassemble-packets;
description "Tunnel to TTC Solo Baru [SLO075]";
tunnel {
source 10.49.62.18;
destination 10.72.85.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.9/30;
}
}
unit 554 {
reassemble-packets;
description "Tunnel to TTC Nusukan [SLO012]";
tunnel {
source 10.49.62.18;
destination 10.72.87.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.13/30;
}
}
unit 555 {
reassemble-packets;
description "Tunnel to Grapari Kudus [GRA081]";
tunnel {
source 10.49.62.18;
 destination 10.72.91.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.17/30;
}
}
unit 556 {
reassemble-packets;
description "Tunnel to Grapari Pekalongan(New Branch)[GRA099]";
tunnel {
source 10.49.62.18;
destination 10.72.93.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.21/30;
}
}
unit 557 {
reassemble-packets;
description "Tunnel to Grapari Purwokerto [GRA035]";
tunnel {
source 10.49.62.18;
destination 10.72.95.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.25/30;
}
}
unit 558 {
reassemble-packets;
description "Tunnel to Grapari Citraland [GRA032]";
tunnel {
source 10.49.62.18;
destination 10.72.97.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
 }
address 172.70.5.29/30;
}
}
unit 560 {
reassemble-packets;
description "Tunnel to Grapari Solo [GRA034]";
tunnel {
source 10.49.62.18;
destination 10.72.99.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.37/30;
}
}
unit 561 {
reassemble-packets;
description "Tunnel to Grapari Tegal [GRA066]";
tunnel {
source 10.49.62.18;
destination 10.72.101.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.41/30;
}
}
unit 562 {
reassemble-packets;
description "Tunnel to Grapari Yogyakarta [GRA033]";
tunnel {
source 10.49.62.18;
destination 10.72.103.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.45/30;
}
}
unit 563 {
reassemble-packets;
description "Tunnel to GraPARI Solo New";
tunnel {
 source 10.49.62.18;
destination 10.72.107.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.49/30;
}
}
unit 651 {
reassemble-packets;
description "Tunnel to TTC Gayungan_SBY351";
tunnel {
source 10.49.62.18;
destination 10.87.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.1/30;
}
}
unit 652 {
reassemble-packets;
description "Tunnel to Office Area 3 (BRI)";
tunnel {
source 10.49.62.18;
destination 10.87.5.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.5/30;
}
}
unit 653 {
reassemble-packets;
description "Tunnel to Regional Office Pemuda (Surabaya)
[GRA085]";
tunnel {
source 10.49.62.18;
destination 10.87.11.253;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
 input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.9/30;
}
}
unit 654 {
reassemble-packets;
description "Tunnel to GraPARI Banyuwangi [GRA083]";
tunnel {
source 10.49.62.18;
destination 10.87.27.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.13/30;
}
}
unit 655 {
reassemble-packets;
description "Tunnel to GraPARI Bukit Darmo [GRA036]";
tunnel {
source 10.49.62.18;
destination 10.87.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.17/30;
}
}
unit 656 {
reassemble-packets;
description "Tunnel to GraPARI Gresik [GRA042]";
tunnel {
source 10.49.62.18;
destination 10.87.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.21/30;
}
}
unit 657 {
reassemble-packets;
 description "Tunnel to GraPARI & TTC HR Muhammad [GRA038]";
tunnel {
source 10.49.62.18;
destination 10.87.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.25/30;
}
}
unit 658 {
reassemble-packets;
description "Tunnel to GraPARI Jember [GRA040]";
tunnel {
source 10.49.62.18;
destination 10.87.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.29/30;
}
}
unit 659 {
reassemble-packets;
description "Tunnel to GraPARI Kediri [GRA065]";
tunnel {
source 10.49.62.18;
destination 10.87.37.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.33/30;
}
}
unit 660 {
reassemble-packets;
description "Tunnel to GraPARI Madiun [GRA041]";
tunnel {
source 10.49.62.18;
destination 10.87.39.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
 filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.37/30;
}
}
unit 661 {
reassemble-packets;
description "Tunnel to GraPARI Malang [GRA039]";
tunnel {
source 10.49.62.18;
destination 10.87.41.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.41/30;
}
}
unit 662 {
reassemble-packets;
description "Tunnel to GraPARI Probolinggo [GRA043]";
tunnel {
source 10.49.62.18;
destination 10.87.43.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.45/30;
}
}
unit 663 {
reassemble-packets;
description "Tunnel to GraPARI Sidoarjo [GRA098]";
tunnel {
source 10.49.62.18;
destination 10.87.45.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.49/30;
}
}
unit 664 {
 reassemble-packets;
description "Tunnel to GraPARI WTC [GRA037]";
tunnel {
source 10.49.62.18;
destination 10.87.47.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.53/30;
}
}
unit 665 {
reassemble-packets;
description "Tunnel to Branch Lamongan";
tunnel {
source 10.49.62.18;
destination 10.87.49.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.57/30;
}
}
unit 666 {
reassemble-packets;
description "Tunnel to TSO Manyar temp";
tunnel {
source 10.49.62.18;
destination 10.87.17.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.6.61/30;
}
}
unit 751 {
reassemble-packets;
description "Tunnel to TTC Renon";
tunnel {
source 10.49.62.18;
destination 10.98.19.254;
allow-fragmentation;
}
family inet {
 tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.7.1/30;
}
}
unit 752 {
reassemble-packets;
description "Tunnel to Regional Office Denpasar";
tunnel {
source 10.49.62.18;
destination 10.98.5.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.7.5/30;
}
}
unit 753 {
reassemble-packets;
description "Tunnel to TTC Office Kupang";
tunnel {
source 10.49.62.18;
destination 10.98.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.7.9/30;
}
}
unit 754 {
reassemble-packets;
description "Tunnel to rtr.gpr-denpasar[GRA044]";
tunnel {
source 10.49.62.18;
destination 10.98.27.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.7.13/30;
}
}
unit 755 {
reassemble-packets;
description "Tunnel to rtr.gpr-kupang[GRA046]";
tunnel {
source 10.49.62.18;
destination 10.98.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.7.17/30;
}
}
unit 756 {
reassemble-packets;
description "Tunnel to rtr.gpr-Mataram[GRA047]";
tunnel {
source 10.49.62.18;
destination 10.98.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.7.21/30;
}
}
unit 757 {
reassemble-packets;
description "Tunnel to rtr.gpr-Mall-Bali-Galeria";
tunnel {
source 10.49.62.18;
destination 10.98.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.7.25/30;
}
}
unit 759 {
reassemble-packets;
description "Tunnel to TTC Singaraja";
tunnel {
source 10.49.62.18;
destination 10.98.23.254;
allow-fragmentation;
}
 family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.7.33/30;
}
}
unit 851 {
reassemble-packets;
description "Tunnel to it-agg-balikpapan(Backup-R8)";
tunnel {
source 10.49.62.18;
destination 10.111.63.1;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.1/30;
}
}
unit 852 {
reassemble-packets;
description "Tunnel to rtr.tlt-balikpapan(RO)";
tunnel {
source 10.49.62.18;
destination 10.111.5.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.5/30;
}
}
unit 853 {
reassemble-packets;
description "Tunnel to rtr-ttc-balikpapan";
tunnel {
source 10.49.62.18;
destination 10.111.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.9/30;
}
}
unit 854 {
reassemble-packets;
description "Tunnel to rtr.ttc-office-banjarbaru";
tunnel {
source 10.49.62.18;
destination 10.111.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.13/30;
}
}
unit 855 {
reassemble-packets;
description "Tunnel to rtr.ttc-office-pontianak";
tunnel {
source 10.49.62.18;
destination 10.111.23.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.17/30;
}
}
unit 856 {
reassemble-packets;
description "Tunnel to Grapari Balikpapan";
tunnel {
source 10.49.62.18;
destination 10.111.27.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.21/30;
}
}
unit 857 {
reassemble-packets;
description "Tunnel to rtr.gpr-samarinda";
tunnel {
source 10.49.62.18;
destination 10.111.29.254;
allow-fragmentation;
 }
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.25/30;
}
}
unit 858 {
reassemble-packets;
description "Tunnel to rtr.gpr-bontang";
tunnel {
source 10.49.62.18;
destination 10.111.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.29/30;
}
}
unit 859 {
reassemble-packets;
description "Tunnel to rtr.gpr-banjarmasin";
tunnel {
source 10.49.62.18;
destination 10.111.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.33/30;
}
}
unit 860 {
reassemble-packets;
description "Tunnel to rtr.gpr-palangkaraya";
tunnel {
source 10.49.62.18;
destination 10.111.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.37/30;
 }
}
unit 861 {
reassemble-packets;
description "Tunnel to rtr.gpr-pontianak";
tunnel {
source 10.49.62.18;
destination 10.111.37.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.41/30;
}
}
unit 862 {
reassemble-packets;
description "Tunnel to rtr.gpr-tarakan";
tunnel {
source 10.49.62.18;
destination 10.111.39.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.8.45/30;
}
}
unit 951 {
reassemble-packets;
description "Tunnel to it-agg-pengayoman(Backup-R9)";
tunnel {
source 10.49.62.18;
destination 10.124.63.1;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.1/30;
}
}
unit 952 {
reassemble-packets;
description "Tunnel to rtr.reg-mks";
tunnel {
source 10.49.62.18;
destination 10.124.5.254;
 allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.5/30;
}
}
unit 953 {
reassemble-packets;
description "Tunnel to rtr-ttc-pengayoman";
tunnel {
source 10.49.62.18;
destination 10.124.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.9/30;
}
}
unit 954 {
reassemble-packets;
description "Tunnel to rtr.ttc-paniki";
tunnel {
source 10.49.62.18;
destination 10.124.23.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.17/30;
}
}
unit 955 {
reassemble-packets;
description "Tunnel to rtr.ttc-sudiang";
tunnel {
source 10.49.62.18;
destination 10.124.25.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
 address 172.70.9.21/30;
}
}
unit 956 {
reassemble-packets;
description "Tunnel to rtr.gpr-gorontalo";
tunnel {
source 10.49.62.18;
destination 10.124.27.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.25/30;
}
}
unit 957 {
reassemble-packets;
description "Tunnel to rtr.gpr-kendari";
tunnel {
source 10.49.62.18;
destination 10.124.29.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.29/30;
}
}
unit 958 {
reassemble-packets;
description "Tunnel to rtr.gpr-makassar";
tunnel {
source 10.49.62.18;
destination 10.124.31.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.33/30;
}
}
unit 959 {
reassemble-packets;
description "Tunnel to rtr.gpr-manado";
tunnel {
source 10.49.62.18;
 destination 10.124.33.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.37/30;
}
}
unit 960 {
reassemble-packets;
description "Tunnel to ttc.gpr-palu";
tunnel {
source 10.49.62.18;
destination 10.124.35.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.41/30;
}
}
unit 961 {
reassemble-packets;
description "Tunnel to rtr.gpr-parepare";
tunnel {
source 10.49.62.18;
destination 10.124.37.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.45/30;
}
}
unit 962 {
reassemble-packets;
description "Tunnel to rtr.gpr-digitalmantos";
tunnel {
source 10.49.62.18;
destination 10.124.39.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
 }
address 172.70.9.49/30;
}
}
unit 1051 {
reassemble-packets;
description "Tunnel to it-agg-marpoyan(Backup-R10)";
tunnel {
source 10.49.62.18;
destination 10.23.127.1;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.1/30;
}
}
unit 1052 {
reassemble-packets;
description "Tunnel to rtr.ro-pekanbaru";
tunnel {
source 10.49.62.18;
destination 10.23.69.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.5/30;
}
}
unit 1053 {
reassemble-packets;
description "Tunnel to rtr-ttc-marpoyan";
tunnel {
source 10.49.62.18;
destination 10.23.83.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.9/30;
}
}
unit 1054 {
reassemble-packets;
description "Tunnel to rtr.ttc-kenanga";
tunnel {
 source 10.49.62.18;
destination 10.23.85.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.13/30;
}
}
unit 1055 {
reassemble-packets;
description "Tunnel to rtr.ttc-batam";
tunnel {
source 10.49.62.18;
destination 10.23.87.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.17/30;
}
}
unit 1056 {
reassemble-packets;
description "Tunnel to rtr.ttc-belanti";
tunnel {
source 10.49.62.18;
destination 10.23.89.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.21/30;
}
}
unit 1057 {
reassemble-packets;
description "Tunnel to rtr.gpr-pekanbaruGMP";
tunnel {
source 10.49.62.18;
destination 10.23.91.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
 output Block_SMB_to_BC;
}
address 172.70.10.25/30;
}
}
unit 1058 {
reassemble-packets;
description "Tunnel to rtr.gpr-pekanbaruMALLSKA";
tunnel {
source 10.49.62.18;
destination 10.23.93.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.29/30;
}
}
unit 1059 {
reassemble-packets;
description "Tunnel to rtr.gpr-dumai";
tunnel {
source 10.49.62.18;
destination 10.23.97.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.33/30;
}
}
unit 1060 {
reassemble-packets;
description "Tunnel to rtr.gpr-tanjungbalai";
tunnel {
source 10.49.62.18;
destination 10.23.99.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.37/30;
}
}
unit 1061 {
reassemble-packets;
description "Tunnel to rtr.gpr-tanjungpinang";
 tunnel {
source 10.49.62.18;
destination 10.23.101.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.41/30;
}
}
unit 1062 {
reassemble-packets;
description "Tunnel to rtr.gpr-batamcenter";
tunnel {
source 10.49.62.18;
destination 10.23.103.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.45/30;
}
}
unit 1063 {
reassemble-packets;
description "Tunnel to rtr.gpr-batampenuin";
tunnel {
source 10.49.62.18;
destination 10.23.105.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.49/30;
}
}
unit 1064 {
reassemble-packets;
description "Tunnel to rtr.gpr-padang";
tunnel {
source 10.49.62.18;
destination 10.23.107.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
 input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.53/30;
}
}
unit 1065 {
reassemble-packets;
description "Tunnel to rtr.gpr-tembilahan";
tunnel {
source 10.49.62.18;
destination 10.23.95.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.57/30;
}
}
unit 1066 {
reassemble-packets;
description "Tunnel to rtr.tso-batam";
tunnel {
source 10.49.62.18;
destination 10.23.75.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.10.61/30;
}
}
unit 1151 {
reassemble-packets;
description "Tunnel to rtr.ttc-ahz-huawei";
tunnel {
source 10.49.62.18;
destination 10.23.63.1;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.1/30;
}
}
unit 1152 {
reassemble-packets;
 description "Tunnel to it-agg-jayapura(Backup R-11)";
tunnel {
source 10.49.62.18;
destination 10.124.127.1;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.1/30;
}
}
unit 1153 {
reassemble-packets;
description "Tunnel to rtr-ttc-jayapura";
tunnel {
source 10.49.62.18;
destination 10.124.83.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.9/30;
}
}
unit 1154 {
reassemble-packets;
description "Tunnel to rtr.ttc-sorong";
tunnel {
source 10.49.62.18;
destination 10.124.85.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.13/30;
}
}
unit 1155 {
reassemble-packets;
description "Tunnel to rtr.ttc-timika";
tunnel {
source 10.49.62.18;
destination 10.124.87.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
 filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.17/30;
}
}
unit 1156 {
reassemble-packets;
description "Tunnel to rtr.ttc-ambon";
tunnel {
source 10.49.62.18;
destination 10.124.89.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.21/30;
}
}
unit 1157 {
reassemble-packets;
description "Tunnel to rtr.gpr-ambon";
tunnel {
source 10.49.62.18;
destination 10.124.91.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.25/30;
}
}
unit 1158 {
reassemble-packets;
description "Tunnel to rtr.gpr-sorong";
tunnel {
source 10.49.62.18;
destination 10.124.93.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.29/30;
}
}
unit 1159 {
 reassemble-packets;
description "Tunnel to rtr.gpr-manokwari";
tunnel {
source 10.49.62.18;
destination 10.124.95.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.33/30;
}
}
unit 1160 {
reassemble-packets;
description "Tunnel to rtr.gpr-timika";
tunnel {
source 10.49.62.18;
destination 10.124.97.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.37/30;
}
}
unit 1161 {
reassemble-packets;
description "Tunnel to rtr.gpr-jayapura";
tunnel {
source 10.49.62.18;
destination 10.124.99.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.41/30;
}
}
unit 1252 {
reassemble-packets;
description "Tunnel to rtr.ro-jayapura";
tunnel {
source 10.49.62.18;
destination 10.124.69.254;
allow-fragmentation;
}
family inet {
 tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.11.5/30;
}
}
unit 1253 {
reassemble-packets;
description "Tunnel to rtr.ttc-ahz-new";
tunnel {
source 10.49.62.18;
destination 10.23.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.9/30;
}
}
unit 1350 {
reassemble-packets;
description "Tunnel to TTC-TBS";
tunnel {
source 10.49.62.18;
destination 10.59.19.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.3.1/30;
}
}
unit 1352 {
reassemble-packets;
description "Tunnel to rtr.ro-medan";
tunnel {
source 10.49.62.18;
destination 10.23.5.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.5/30;
}
}
unit 1354 {
reassemble-packets;
description "Tunnel to rtr.ttc-siantar";
tunnel {
source 10.49.62.18;
destination 10.23.21.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.13/30;
}
}
unit 1355 {
reassemble-packets;
description "Tunnel to rtr.ttc-aceh";
tunnel {
source 10.49.62.18;
destination 10.23.23.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.1.17/30;
}
}
unit 1551 {
reassemble-packets;
description "Tunnel to rtr.gpr-gombel";
tunnel {
source 10.49.62.18;
destination 10.72.83.254;
allow-fragmentation;
}
family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.5.5/30;
}
}
unit 1951 {
reassemble-packets;
description "Tunnel to rtr.ttc-telling";
tunnel {
source 10.49.62.18;
destination 10.124.21.254;
allow-fragmentation;
}
 family inet {
tcp-mss 1436;
filter {
input Block_SMB_to_BC;
output Block_SMB_to_BC;
}
address 172.70.9.13/30;
}
}
}
lt-0/3/1 {
inactive: unit 2 {
description "LS DZONE to Master";
encapsulation ethernet;
peer-unit 1;
family inet {
address 172.31.252.130/29;
}
}
}
ge-2/1/0 {
unit 0 {
description "LAN BC-DZONE-BRIDGE-TBS - proxy port 1:1";
family inet {
address 172.31.252.130/29;
}
}
}
ge-2/1/1 {
unit 0 {
description "LAN BC-DZONE-BRIDGE-TBS - proxy 2 port 1:1";
}
}
ae0 {
unit 100 {
description "CSS Link to Regional Network";
vlan-id 100;
family inet {
address 10.49.62.18/30;
}
}
}
}
protocols {
lldp-med;
}
routing-options {
nonstop-routing;
static {
route 0.0.0.0/0 next-hop 172.31.252.129;
route 172.21.107.0/24 next-hop 172.31.243.30;
route 172.22.107.0/24 next-hop 172.31.243.30;
route 172.21.81.0/24 next-hop 172.31.242.206;
route 172.22.81.0/24 next-hop 172.31.242.206;
route 172.21.82.0/24 next-hop 172.31.242.198;
route 172.22.82.0/24 next-hop 172.31.242.198;
route 172.22.87.0/24 next-hop 172.31.242.182;
route 172.22.88.0/24 next-hop 172.31.242.210;
route 172.21.85.0/24 next-hop 172.31.242.186;
route 172.21.86.0/24 next-hop 172.31.242.190;
route 172.21.84.0/24 next-hop 172.31.242.194;
route 172.21.83.0/24 next-hop 172.31.242.202;
route 172.21.77.0/24 next-hop 172.31.242.114;
route 172.22.79.0/24 next-hop 172.31.242.118;
route 172.21.68.0/24 next-hop 172.31.242.122;
route 172.21.64.0/24 next-hop 172.31.242.126;
route 172.21.78.0/24 next-hop 172.31.242.134;
route 172.21.79.0/24 next-hop 172.31.242.154;
route 172.21.72.0/24 next-hop 172.31.242.138;
route 172.21.66.0/24 next-hop 172.31.242.146;
route 172.21.69.0/24 next-hop 172.31.242.150;
route 172.21.63.0/24 next-hop 172.31.242.158;
route 172.21.71.0/24 next-hop 172.31.242.162;
route 172.21.76.0/24 next-hop 172.31.242.166;
route 172.21.70.0/24 next-hop 172.31.242.142;
route 172.22.78.0/24 next-hop 172.31.242.170;
route 172.21.13.0/24 next-hop 172.31.242.2;
route 172.22.13.0/24 next-hop 172.31.242.2;
route 172.21.4.0/24 next-hop 172.31.242.6;
route 172.22.4.0/24 next-hop 172.31.242.6;
route 172.21.1.0/24 next-hop 172.31.242.10;
route 172.22.1.0/24 next-hop 172.31.242.10;
route 172.21.12.0/24 next-hop 172.31.242.14;
route 172.21.2.0/24 next-hop 172.31.242.18;
route 172.22.2.0/24 next-hop 172.31.242.18;
route 172.22.12.0/24 next-hop 172.31.242.22;
route 172.21.5.0/24 next-hop 172.31.242.26;
route 172.22.5.0/24 next-hop 172.31.242.26;
route 172.21.7.0/24 next-hop 172.31.242.30;
route 172.22.7.0/24 next-hop 172.31.242.30;
route 172.21.6.0/24 next-hop 172.31.242.34;
route 172.22.6.0/24 next-hop 172.31.242.34;
route 172.21.198.0/24 next-hop 172.31.242.38;
route 172.22.198.0/24 next-hop 172.31.242.38;
route 172.21.8.0/24 next-hop 172.31.242.42;
route 172.22.8.0/24 next-hop 172.31.242.42;
route 172.21.9.0/24 next-hop 172.31.242.46;
route 172.22.9.0/24 next-hop 172.31.242.46;
route 172.21.11.0/24 next-hop 172.31.242.50;
route 172.22.11.0/24 next-hop 172.31.242.50;
route 172.21.10.0/24 next-hop 172.31.242.54;
route 172.22.10.0/24 next-hop 172.31.242.54;
route 172.21.41.0/24 next-hop 172.31.242.58;
route 172.22.41.0/24 next-hop 172.31.242.58;
route 172.22.52.0/24 next-hop 172.31.242.62;
route 172.21.42.0/24 next-hop 172.31.242.66;
route 172.22.42.0/24 next-hop 172.31.242.66;
route 172.21.43.0/24 next-hop 172.31.242.70;
route 172.22.43.0/24 next-hop 172.31.242.70;
route 172.22.50.0/24 next-hop 172.31.242.74;
route 172.22.51.0/24 next-hop 172.31.242.78;
route 172.22.54.0/24 next-hop 172.31.242.82;
route 172.21.48.0/24 next-hop 172.31.242.86;
route 172.21.45.0/24 next-hop 172.31.242.90;
route 172.22.45.0/24 next-hop 172.31.242.90;
route 172.21.46.0/24 next-hop 172.31.242.94;
route 172.22.46.0/24 next-hop 172.31.242.94;
route 172.21.49.0/24 next-hop 172.31.242.98;
route 172.22.49.0/24 next-hop 172.31.242.98;
route 172.21.47.0/24 next-hop 172.31.242.106;
route 172.22.47.0/24 next-hop 172.31.242.106;
route 172.21.44.0/24 next-hop 172.31.242.110;
route 172.21.53.0/24 next-hop 172.31.242.110;
route 172.21.22.0/24 next-hop 172.31.243.2;
route 172.22.22.0/24 next-hop 172.31.243.2;
route 172.21.27.0/24 next-hop 172.31.242.246;
route 172.22.27.0/24 next-hop 172.31.242.246;
route 172.21.26.0/24 next-hop 172.31.242.242;
route 172.22.26.0/24 next-hop 172.31.242.242;
route 172.21.29.0/24 next-hop 172.31.242.250;
route 172.22.21.0/24 next-hop 172.31.242.250;
route 172.21.21.0/24 next-hop 172.31.243.6;
route 172.21.28.0/24 next-hop 172.31.242.218;
route 172.22.28.0/24 next-hop 172.31.242.218;
route 172.21.23.0/24 next-hop 172.31.242.254;
route 172.22.23.0/24 next-hop 172.31.242.254;
route 172.21.24.0/24 next-hop 172.31.242.230;
route 172.22.24.0/24 next-hop 172.31.242.230;
route 172.21.3.0/24 next-hop 172.31.244.2;
route 172.22.3.0/24 next-hop 172.31.244.2;
route 172.21.25.0/24 next-hop 172.31.242.226;
route 172.22.25.0/24 next-hop 172.31.242.226;
route 172.22.30.0/24 next-hop 172.31.242.238;
route 172.21.32.0/24 next-hop 172.31.243.10;
route 172.22.29.0/24 next-hop 172.31.242.234;
route 172.22.31.0/24 next-hop 172.31.242.222;
route 172.21.101.0/24 next-hop 172.31.243.14;
route 172.21.105.0/24 next-hop 172.31.243.18;
route 172.21.108.0/24 next-hop 172.31.243.22;
route 172.22.110.0/24 next-hop 172.31.243.26;
route 172.21.103.0/24 next-hop 172.31.243.34;
route 172.21.106.0/24 next-hop 172.31.243.38;
route 172.22.104.0/24 next-hop 172.31.243.42;
route 172.21.109.0/24 next-hop 172.31.243.46;
route 172.22.111.0/24 next-hop 172.31.243.50;
route 172.21.104.0/24 next-hop 172.31.243.42;
route 172.21.166.0/24 next-hop 172.31.243.146;
route 172.21.133.0/24 next-hop 172.31.243.58;
route 172.22.133.0/24 next-hop 172.31.243.58;
route 172.21.131.0/24 next-hop 172.31.243.62;
route 172.21.123.0/24 next-hop 172.31.243.66;
route 172.21.124.0/24 next-hop 172.31.243.70;
route 172.21.134.0/24 next-hop 172.31.243.74;
route 172.22.134.0/24 next-hop 172.31.243.74;
route 172.21.129.0/24 next-hop 172.31.243.78;
route 172.22.129.0/24 next-hop 172.31.243.78;
route 172.21.127.0/24 next-hop 172.31.243.82;
route 172.21.130.0/24 next-hop 172.31.243.86;
route 172.21.132.0/24 next-hop 172.31.243.90;
route 172.21.122.0/24 next-hop 172.31.243.94;
route 172.21.128.0/24 next-hop 172.31.243.98;
route 172.21.125.0/24 next-hop 172.31.243.102;
route 172.21.126.0/24 next-hop 172.31.243.106;
route 172.21.121.0/24 next-hop 172.31.243.110;
route 172.22.169.0/24 next-hop 172.31.243.150;
route 172.21.165.0/24 next-hop 172.31.243.154;
route 172.22.165.0/24 next-hop 172.31.243.154;
route 172.21.163.0/24 next-hop 172.31.243.158;
route 172.21.164.0/24 next-hop 172.31.243.162;
route 172.21.162.0/24 next-hop 172.31.243.166;
route 172.21.161.0/24 next-hop 172.31.243.170;
route 172.22.161.0/24 next-hop 172.31.243.170;
route 172.22.171.0/24 next-hop 172.31.243.174;
route 172.21.168.0/24 next-hop 172.31.243.178;
route 172.21.167.0/24 next-hop 172.31.243.182;
route 172.22.145.0/24 next-hop 172.31.243.130;
route 172.22.148.0/23 next-hop 172.31.243.130;
route 172.21.145.0/24 next-hop 172.31.243.134;
route 172.22.146.0/24 next-hop 172.31.243.134;
route 172.21.143.0/24 next-hop 172.31.243.126;
route 172.22.143.0/24 next-hop 172.31.243.126;
route 172.21.142.0/24 next-hop 172.31.243.122;
route 172.22.142.0/24 next-hop 172.31.243.122;
route 172.21.144.0/24 next-hop 172.31.243.118;
route 172.21.146.0/24 next-hop 172.31.243.118;
route 172.22.144.0/24 next-hop 172.31.243.118;
route 172.22.147.0/24 next-hop 172.31.243.114;
route 172.21.189.0/24 next-hop 172.31.243.230;
route 172.22.189.0/24 next-hop 172.31.243.230;
route 172.21.190.0/24 next-hop 172.31.243.234;
route 172.22.195.0/24 next-hop 172.31.243.238;
route 172.21.192.0/24 next-hop 172.31.243.242;
route 172.22.194.0/24 next-hop 172.31.243.246;
route 172.21.191.0/24 next-hop 172.31.243.250;
route 172.22.191.0/24 next-hop 172.31.243.250;
route 172.21.197.0/24 next-hop 172.31.243.254;
route 172.22.197.0/24 next-hop 172.31.243.254;
route 172.21.188.0/24 next-hop 172.31.243.226;
route 172.21.112.0/24 next-hop 172.31.245.14;
route 172.22.112.0/24 next-hop 172.31.245.14;
route 172.21.30.0/24 next-hop 172.31.244.6;
route 172.21.51.0/24 next-hop 172.31.244.10;
route 172.21.102.0/24 next-hop 172.31.244.14;
route 172.22.102.0/24 next-hop 172.31.244.14;
route 172.22.60.0/23 next-hop 172.31.244.18;
route 172.16.100.0/23 next-hop 172.70.5.6;
route 172.16.60.0/23 next-hop 172.70.3.2;
route 172.16.120.0/23 next-hop 172.70.6.2;
route 172.16.84.0/24 next-hop 172.70.4.2;
route 172.16.80.0/23 next-hop 172.70.4.2;
route 172.16.140.0/23 next-hop 172.70.7.2;
route 172.16.145.0/24 next-hop 172.70.7.2;
route 172.16.146.0/24 next-hop 172.70.7.14;
route 172.16.147.0/24 next-hop 172.70.7.18;
route 172.16.148.0/24 next-hop 172.70.7.22;
route 172.16.149.0/24 next-hop 172.70.7.26;
route 172.16.69.0/24 next-hop 172.70.3.22;
route 172.16.64.0/23 next-hop 172.70.3.10;
route 172.16.70.0/24 next-hop 172.70.3.26;
route 172.16.71.0/24 next-hop 172.70.3.30;
route 172.16.72.0/24 next-hop 172.70.3.34;
route 172.16.73.0/24 next-hop 172.70.3.38;
route 172.16.77.0/24 next-hop 172.70.3.54;
route 172.16.68.0/24 next-hop 172.70.3.2;
route 172.16.66.0/24 next-hop 172.70.3.14;
route 172.16.67.0/24 next-hop 172.70.3.18;
route 172.16.74.0/24 next-hop 172.70.3.42;
route 172.16.76.0/24 next-hop 172.70.3.50;
route 172.16.142.0/23 next-hop 172.70.7.6;
route 172.16.144.0/24 next-hop 172.70.7.10;
route 172.16.110.0/24 next-hop 172.70.5.30;
route 172.16.104.0/24 next-hop 172.70.5.6;
route 172.16.102.0/23 next-hop 172.70.5.2;
route 172.16.105.0/24 next-hop 172.70.5.10;
route 172.16.107.0/24 next-hop 172.70.5.18;
route 172.16.108.0/24 next-hop 172.70.5.22;
route 172.16.109.0/24 next-hop 172.70.5.26;
route 172.16.112.0/24 next-hop 172.70.5.38;
route 172.16.113.0/24 next-hop 172.70.5.42;
route 172.16.114.0/24 next-hop 172.70.5.46;
route 172.16.106.0/24 next-hop 172.70.5.14;
route 10.0.0.0/8 next-hop 10.49.62.17;
route 172.16.62.0/23 next-hop 172.70.3.6;
route 172.16.75.0/24 next-hop 172.70.3.46;
route 172.16.78.0/24 next-hop 172.70.3.58;
route 172.16.122.0/23 next-hop 172.70.6.6;
route 172.16.127.0/24 next-hop 172.70.6.14;
route 172.16.128.0/24 next-hop 172.70.6.18;
route 172.16.129.0/24 next-hop 172.70.6.22;
route 172.16.130.0/24 next-hop 172.70.6.26;
route 172.16.131.0/24 next-hop 172.70.6.30;
route 172.16.132.0/24 next-hop 172.70.6.34;
route 172.16.133.0/24 next-hop 172.70.6.38;
route 172.16.134.0/24 next-hop 172.70.6.42;
route 172.16.135.0/24 next-hop 172.70.6.46;
route 172.16.136.0/24 next-hop 172.70.6.50;
route 172.16.137.0/24 next-hop 172.70.6.54;
route 172.16.138.0/24 next-hop 172.70.6.58;
route 172.16.126.0/24 next-hop 172.70.6.2;
route 172.16.124.0/23 next-hop 172.70.6.10;
route 172.16.82.0/23 next-hop 172.70.4.6;
route 172.16.85.0/24 next-hop 172.70.4.10;
route 172.16.86.0/24 next-hop 172.70.4.14;
route 172.16.87.0/24 next-hop 172.70.4.18;
route 172.16.88.0/24 next-hop 172.70.4.22;
route 172.16.89.0/24 next-hop 172.70.4.26;
route 172.16.90.0/24 next-hop 172.70.4.30;
route 172.16.91.0/24 next-hop 172.70.4.34;
route 172.16.240.0/24 next-hop 172.70.3.66;
route 172.16.241.0/24 next-hop 172.70.3.70;
route 172.16.242.0/24 next-hop 172.70.3.74;
route 172.16.20.0/23 next-hop 172.70.1.2;
route 172.16.28.0/24 next-hop 172.70.1.26;
route 172.16.24.0/24 next-hop 172.70.1.10;
route 172.16.160.0/23 next-hop 172.70.8.2;
route 172.16.164.0/24 next-hop 172.70.8.10;
route 172.16.180.0/23 next-hop 172.70.9.2;
route 172.16.184.0/24 next-hop 172.70.9.10;
route 172.16.200.0/23 next-hop 172.70.10.2;
route 172.16.204.0/24 next-hop 172.70.10.10;
route 172.16.220.0/23 next-hop 172.70.11.2;
route 172.16.224.0/24 next-hop 172.70.11.10;
route 172.16.207.0/24 next-hop 172.70.10.22;
route 172.16.210.0/24 next-hop 172.70.10.34;
route 172.16.47.0/24 next-hop 172.70.2.82;
route 172.16.49.0/24 next-hop 172.70.2.90;
route 172.16.51.0/24 next-hop 172.70.2.98;
route 172.16.205.0/24 next-hop 172.70.10.14;
route 172.16.50.0/24 next-hop 172.70.2.94;
route 172.16.167.0/24 next-hop 172.70.8.22;
route 172.16.185.0/24 next-hop 172.70.9.14;
route 172.16.42.0/23 next-hop 172.70.2.70;
route 172.16.48.0/24 next-hop 172.70.2.86;
route 172.16.52.0/24 next-hop 172.70.2.102;
route 172.16.53.0/24 next-hop 172.70.2.106;
route 172.16.54.0/24 next-hop 172.70.2.110;
route 172.16.55.0/24 next-hop 172.70.2.114;
route 172.16.56.0/24 next-hop 172.70.2.118;
route 172.16.57.0/24 next-hop 172.70.2.122;
route 172.16.215.0/24 next-hop 172.70.10.54;
route 172.16.214.0/24 next-hop 172.70.10.50;
route 172.16.216.0/24 next-hop 172.70.10.58;
route 172.16.206.0/24 next-hop 172.70.10.18;
route 172.16.208.0/24 next-hop 172.70.10.26;
route 172.16.209.0/24 next-hop 172.70.10.30;
route 172.16.211.0/24 next-hop 172.70.10.38;
route 172.16.212.0/24 next-hop 172.70.10.42;
route 172.16.213.0/24 next-hop 172.70.10.46;
route 172.16.162.0/23 next-hop 172.70.8.6;
route 172.16.165.0/24 next-hop 172.70.8.14;
route 172.16.166.0/24 next-hop 172.70.8.18;
route 172.16.168.0/24 next-hop 172.70.8.26;
route 172.16.169.0/24 next-hop 172.70.8.30;
route 172.16.170.0/24 next-hop 172.70.8.34;
route 172.16.171.0/24 next-hop 172.70.8.38;
route 172.16.172.0/24 next-hop 172.70.8.42;
route 172.16.173.0/24 next-hop 172.70.8.46;
route 172.16.182.0/23 next-hop 172.70.9.6;
route 172.16.186.0/24 next-hop 172.70.9.18;
route 172.16.187.0/24 next-hop 172.70.9.22;
route 172.16.188.0/24 next-hop 172.70.9.26;
route 172.16.189.0/24 next-hop 172.70.9.30;
route 172.16.190.0/24 next-hop 172.70.9.34;
route 172.16.191.0/24 next-hop 172.70.9.38;
route 172.16.192.0/24 next-hop 172.70.9.42;
route 172.16.193.0/24 next-hop 172.70.9.46;
route 172.16.194.0/24 next-hop 172.70.9.50;
route 172.16.46.0/24 next-hop 172.70.2.78;
route 172.16.40.0/23 next-hop 172.70.2.66;
route 172.16.222.0/23 next-hop 172.70.11.6;
route 172.16.225.0/24 next-hop 172.70.11.14;
route 172.16.226.0/24 next-hop 172.70.11.18;
route 172.16.227.0/24 next-hop 172.70.11.22;
route 172.16.228.0/24 next-hop 172.70.11.26;
route 172.16.229.0/24 next-hop 172.70.11.30;
route 172.16.230.0/24 next-hop 172.70.11.34;
route 172.16.231.0/24 next-hop 172.70.11.38;
route 172.16.232.0/24 next-hop 172.70.11.42;
route 172.16.22.0/23 next-hop 172.70.1.6;
route 172.16.25.0/24 next-hop 172.70.1.14;
route 172.16.26.0/24 next-hop 172.70.1.18;
route 172.16.27.0/24 next-hop 172.70.1.78;
route 172.16.29.0/24 next-hop 172.70.1.30;
route 172.16.30.0/24 next-hop 172.70.1.34;
 route 172.16.31.0/24 next-hop 172.70.1.38;
route 172.16.32.0/24 next-hop 172.70.1.42;
route 172.16.33.0/24 next-hop 172.70.1.46;
route 172.16.34.0/24 next-hop 172.70.1.50;
route 172.16.35.0/24 next-hop 172.70.1.54;
route 172.16.36.0/24 next-hop 172.70.1.58;
route 172.16.37.0/24 next-hop 172.70.1.62;
route 172.16.38.0/24 next-hop 172.70.1.66;
route 172.16.39.0/24 next-hop 172.70.1.70;
route 172.16.243.0/24 next-hop 172.70.1.74;
route 172.16.202.0/23 next-hop 172.70.10.6;
route 172.21.181.0/24 next-hop 172.31.243.190;
route 172.16.58.0/24 next-hop 172.70.2.126;
route 10.251.127.140/30 next-hop 10.251.127.142;
route 172.16.154.0/23 next-hop 172.70.6.62;
route 172.16.244.0/24 next-hop 172.70.3.78;
route 172.16.218.0/23 next-hop 172.70.10.62;
route 172.16.246.0/23 {
qualified-next-hop 172.70.3.86 {
preference 1;
}
qualified-next-hop 172.70.3.90 {
preference 2;
}
}
route 172.16.0.0/21 {
qualified-next-hop 172.70.3.81 {
bfd-liveness-detection {
minimum-interval 60;
}
}
qualified-next-hop 172.70.3.93 {
preference 10;
bfd-liveness-detection {
minimum-interval 60;
}
}
}
route 172.21.200.0/24 {
qualified-next-hop 172.70.3.81 {
bfd-liveness-detection {
minimum-interval 60;
}
}
qualified-next-hop 172.70.3.93 {
preference 10;
bfd-liveness-detection {
minimum-interval 60;
}
}
}
route 172.16.151.0/24 next-hop 172.70.7.34;
route 172.16.115.0/24 next-hop 172.70.5.50;
route 172.16.92.0/24 next-hop 172.70.4.38;
}
}
}
}
chassis {
 redundancy {
failover {
on-loss-of-keepalives;
on-disk-failure;
}
graceful-switchover;
}
aggregated-devices {
ethernet {
device-count 20;
}
}
fpc 0 {
pic 3 {
tunnel-services {
bandwidth 10g;
}
}
}
fpc 1 {
pic 0 {
adaptive-services {
service-package layer-3;
}
}
pic 1 {
adaptive-services {
service-package layer-3;
}
}
pic 2 {
adaptive-services {
service-package layer-3;
}
}
pic 3 {
adaptive-services {
service-package layer-3;
}
}
}
alarm {
management-ethernet {
link-down ignore;
}
}
network-services enhanced-ip;
}
services {
service-set AMS0-DZONE-TBS-NAT-IPv4 {
nat-rules AMS0-DZONE-TBS-RULE-IPv4;
next-hop-service {
inside-service-interface ams0.3;
outside-service-interface ams0.4;
}
}
service-set AMS0-IZONE-TBS-NAT-IPv4 {
nat-rules AMS0-IZONE-TBS-RULE-IPv4;
next-hop-service {
 inside-service-interface ams0.1;
outside-service-interface ams0.2;
}
}
service-set AMS0-RIM-TBS-NAT-IPv4 {
nat-rules AMS0-RIM-TBS-RULE-IPv4;
next-hop-service {
inside-service-interface ms-1/3/0.1;
outside-service-interface ms-1/3/0.2;
}
}
nat {
pool AMS0-IZONE-TBS-PUBLIC-IPv4 {
address 202.3.212.128/28;
port {
automatic {
random-allocation;
}
}
address-allocation round-robin;
mapping-timeout 300;
snmp-trap-thresholds {
address-port low 50 high 75;
}
}
pool AMS0-DZONE-TBS-PUBLIC-IPv4 {
address 202.3.212.192/28;
port {
automatic {
random-allocation;
}
}
address-allocation round-robin;
mapping-timeout 300;
snmp-trap-thresholds {
address-port low 50 high 75;
}
}
pool AMS0-RIM-TBS-PUBLIC-IPv4 {
address 202.3.212.101/32;
port {
automatic {
random-allocation;
}
}
address-allocation round-robin;
mapping-timeout 300;
snmp-trap-thresholds {
address-port low 50 high 75;
}
}
rule AMS0-IZONE-TBS-RULE-IPv4 {
match-direction input;
term IPv4-TRANSLATE-ALG {
from {
source-prefix-list {
TBS-IZONE-PRIVATE-IPv4;
TBS-APPS-PRIVATE-IPV4;
}
 application-sets ALG-NAT-INITIAL;
}
then {
translated {
source-pool AMS0-IZONE-TBS-PUBLIC-IPv4;
translation-type {
napt-44;
}
address-pooling paired;
}
}
}
term IPv4-TRANSLATE {
from {
source-prefix-list {
TBS-IZONE-PRIVATE-IPv4;
TBS-APPS-PRIVATE-IPV4;
}
}
then {
translated {
source-pool AMS0-IZONE-TBS-PUBLIC-IPv4;
translation-type {
napt-44;
}
mapping-type endpoint-independent;
filtering-type {
endpoint-independent;
}
address-pooling paired;
}
}
}
}
rule AMS0-RIM-TBS-RULE-IPv4 {
match-direction input;
term IPv4-TRANSLATE-ALG {
from {
source-prefix-list {
TBS-RIM-PRIVATE-IPv4;
}
application-sets ALG-NAT-INITIAL;
}
then {
translated {
source-pool AMS0-RIM-TBS-PUBLIC-IPv4;
translation-type {
napt-44;
}
address-pooling paired;
}
}
}
term IPv4-TRANSLATE {
from {
source-prefix-list {
TBS-RIM-PRIVATE-IPv4;
}
}
 then {
translated {
source-pool AMS0-RIM-TBS-PUBLIC-IPv4;
translation-type {
napt-44;
}
mapping-type endpoint-independent;
filtering-type {
endpoint-independent;
}
address-pooling paired;
}
}
}
}
rule AMS0-DZONE-TBS-RULE-IPv4 {
match-direction input;
term IPv4-TRANSLATE-ALG {
from {
source-prefix-list {
TBS-DZONE-PRIVATE-IPv4;
}
application-sets ALG-NAT-INITIAL;
}
then {
translated {
source-pool AMS0-DZONE-TBS-PUBLIC-IPv4;
translation-type {
napt-44;
}
address-pooling paired;
}
}
}
term IPv4-TRANSLATE {
from {
source-prefix-list {
TBS-DZONE-PRIVATE-IPv4;
}
}
then {
translated {
source-pool AMS0-DZONE-TBS-PUBLIC-IPv4;
translation-type {
napt-44;
}
mapping-type endpoint-independent;
filtering-type {
endpoint-independent;
}
address-pooling paired;
}
}
}
}
}
}
interfaces {
xe-0/0/0 {
 description "link-etbs.gtbs.inet.1 xe-5/0/1";
unit 0 {
family inet {
address 114.124.128.2/30;
}
}
}
xe-0/0/1 {
unit 0 {
description "WAN BC-IZONE-RIM-TBS - proxy port 3:1";
family inet {
filter {
input FILTER-RIM;
}
address 172.31.254.129/29;
}
}
}
xe-0/1/0 {
description "link-etbs.gtbs.inet.2 xe-5/0/1";
unit 0 {
family inet {
address 114.124.128.6/30;
}
}
}
xe-0/1/1 {
description "WAN BC-IZONE-RIM-TBS - proxy 2 port 3:1";
vlan-tagging;
encapsulation flexible-ethernet-services;
unit 136 {
description "WAN BC-IZONE-RIM-TBS - proxy 2 port 3:1";
encapsulation vlan-bridge;
vlan-id 136;
family bridge;
}
}
xe-0/1/2 {
description "connect to arbor1";
unit 0 {
family inet {
address 192.168.0.1/30;
}
}
}
xe-0/1/3 {
description "reserver huawei";
}
xe-0/2/0 {
description "AToM Link via SR-TBS.1 Te0/7/0/2";
vlan-tagging;
mtu 9182;
inactive: unit 244 {
description atom-etbs.ebuaran.inet;
vlan-id 244;
family inet {
address 202.3.211.246/30;
}
}
 inactive: unit 512 {
vlan-id 512;
family inet {
address 202.3.211.213/30;
}
}
inactive: unit 528 {
description atom-etbs.egbr.inet;
vlan-id 528;
family inet {
address 202.3.211.229/30;
}
}
unit 3102 {
description atom-eTBS-eTSO.inet;
vlan-id 3102;
family inet {
address 202.3.211.233/30;
}
}
}
xe-0/2/2 {
description "connect to arbor2";
unit 0 {
family inet {
address 192.168.0.5/30;
}
}
}
xe-0/2/3 {
description "rtr.gate-agg.tbs to rtr.gate-ext1.tbs xe-1/3/3";
unit 0 {
family inet {
address 202.3.211.217/30;
}
}
}
xe-0/3/0 {
description "AToM Link via SR-TBS.2 Te0/7/0/3";
vlan-tagging;
mtu 9182;
unit 3202 {
description atom-eTBS.2-eTSO.inet;
vlan-id 3202;
family inet {
address 202.3.211.193/30;
}
}
}
lt-0/3/1 {
inactive: unit 1 {
description "Master to LS DZONE";
encapsulation ethernet;
peer-unit 2;
family inet {
address 172.31.252.129/29;
}
}
}
xe-0/3/3 {
description "rtr.gate-agg.tbs to rtr.gate-ext2.tbs xe-1/3/3";
unit 0 {
family inet {
address 202.3.211.225/30;
}
}
}
ms-1/3/0 {
services-options {
inactivity-tcp-timeout 300;
inactivity-non-tcp-timeout 300;
}
unit 1 {
description "AMS0 RIM-TBS IPv4 Inside Service Interface";
family inet;
service-domain inside;
}
unit 2 {
description "AMS0 RIM-TBS IPv4 Outside Service Interface";
family inet;
service-domain outside;
}
}
ge-2/0/0 {
unit 0 {
description "WAN BC-DZONE-BRIDGE-TBS - proxy port 1:0";
family inet {
address 172.31.252.129/29;
}
}
}
ge-2/0/1 {
unit 0 {
description "WAN BC-DZONE-BRIDGE-TBS - proxy 2 port 1:0";
}
}
ge-2/1/2 {
description "WAN BC-PROXY-REVENUE - port 1:1";
vlan-tagging;
encapsulation flexible-ethernet-services;
unit 136 {
description "WAN BC-IZONE-RIM-TBS - proxy 2 port 3:1";
encapsulation vlan-bridge;
vlan-id 136;
family bridge;
}
}
et-2/2/0 {
description "CSS-1 Huawei Link ae0 #1";
gigether-options {
802.3ad ae0;
}
}
et-2/2/1 {
description "CSS-2 Huawei Link ae0 #2";
gigether-options {
802.3ad ae0;
}
}
ae0 {
vlan-tagging;
mtu 9192;
aggregated-ether-options {
lacp {
active;
}
}
unit 209 {
description Datacomm_Public;
vlan-id 209;
family inet {
filter {
output ARUBA;
}
address 202.3.209.30/27;
}
}
unit 211 {
description LAN-INET;
vlan-id 211;
family inet {
address 202.3.211.5/27;
}
}
unit 214 {
description AGG-FW_perimeter;
vlan-id 214;
family inet {
address 202.3.211.49/28;
}
}
}
ams0 {
load-balancing-options {
member-interface mams-1/0/0;
member-interface mams-1/1/0;
member-interface mams-1/2/0;
member-failure-options {
drop-member-traffic {
rejoin-timeout 300;
enable-rejoin;
}
}
}
services-options {
inactivity-tcp-timeout 300;
inactivity-non-tcp-timeout 300;
}
unit 1 {
description "AMS0 IZONE-TBS IPv4 Inside Service Interface";
family inet;
service-domain inside;
load-balancing-options {
hash-keys {
ingress-key source-ip;
}
}
 }
unit 2 {
description "AMS0 IZONE-TBS IPv4 Outside Service Interface";
family inet;
service-domain outside;
load-balancing-options {
hash-keys {
egress-key destination-ip; ## Warning: 'egress-key' is
deprecated
}
}
}
unit 3 {
description "AMS0 DZONE-TBS IPv4 Inside Service Interface";
family inet;
service-domain inside;
load-balancing-options {
hash-keys {
ingress-key source-ip;
}
}
}
unit 4 {
description "AMS0 DZONE-TBS IPv4 Outside Service Interface";
family inet;
service-domain outside;
load-balancing-options {
hash-keys {
egress-key destination-ip; ## Warning: 'egress-key' is
deprecated
}
}
}
}
irb {
unit 136 {
description Proxy-Bridge;
family inet {
address 172.31.254.137/29;
}
}
}
lo0 {
unit 0 {
family inet {
filter {
input FILTER-OAM;
}
address 202.3.211.171/32;
}
}
}
}
snmp {
location "JKT TBS TTC TB-Simatupang - 8th floor - REGIONAL 3";
contact "admin@dc.telkomsel.co.id";
community "mD3v_DcMM#1T" {
authorization read-write;
clients {
 10.250.200.50/32;
}
}
community "m177_DcMM#1T" {
authorization read-only;
}
community ITaddm {
authorization read-only;
clients {
10.251.94.66/32;
}
}
trap-options {
source-address lo0;
}
trap-group space {
targets {
10.251.94.111;
}
}
}
forwarding-options {
enhanced-hash-key {
services-loadbalancing {
family inet {
layer-3-services {
source-address;
}
}
}
}
}
routing-options {
nonstop-routing;
static {
route 202.3.212.128/28 {
discard;
preference 200;
}
route 202.3.212.192/28 {
discard;
preference 200;
}
route 172.22.193.0/24 next-hop 172.31.243.186;
route 172.21.183.0/24 next-hop 172.31.243.194;
route 172.21.193.0/24 next-hop 172.31.243.198;
route 172.21.186.0/24 next-hop 172.31.243.202;
route 172.21.187.0/24 next-hop 172.31.243.206;
route 172.21.185.0/24 next-hop 172.31.243.210;
route 172.21.184.0/24 next-hop 172.31.243.214;
route 172.21.199.0/24 next-hop 172.31.243.218;
route 172.22.199.0/24 next-hop 172.31.243.218;
route 172.22.196.0/24 next-hop 172.31.243.222;
route 172.21.188.0/24 next-hop 172.31.243.226;
route 43.255.199.16/28 next-hop 202.3.211.60;
route 202.3.208.0/24 next-hop 202.3.211.60;
route 202.3.210.0/24 next-hop 202.3.211.61;
route 202.3.209.32/27 next-hop 202.3.211.60;
route 202.3.209.64/27 next-hop 202.3.211.61;
 }
aggregate {
route 202.3.212.128/28;
route 202.3.212.192/28;
}
rib-groups {
RIM-TO-IZONE {
import-rib [ NAT-RIM-TBS.inet.0 NAT-IZONE-RIM-TBS.inet.0 ];
}
IZONE-TO-RIM {
import-rib [ NAT-IZONE-RIM-TBS.inet.0 NAT-RIM-TBS.inet.0 ];
}
}
router-id 202.3.211.171;
autonomous-system 23693;
forwarding-table {
export PLB;
}
}
protocols {
bgp {
log-updown;
graceful-restart;
group IBGP-IPv4 {
type internal;
local-address 202.3.211.171;
export NAT-POOL-TO-BGP;
neighbor 114.127.255.6 {
description "IBGP peer to MX1-TBS";
}
neighbor 114.127.255.7 {
description "IBGP peer to MX2-TBS";
}
}
group gate-agg.tbs {
type external;
neighbor 202.3.211.218 {
local-address 202.3.211.217;
peer-as 64693;
local-as 23693;
}
}
group ibgp_agg-gate.tso {
type internal;
cluster 202.3.211.171;
neighbor 202.3.211.200 {
local-address 202.3.211.171;
export export-full-route;
}
neighbor 202.3.211.201 {
local-address 202.3.211.171;
export export-full-route;
}
}
}
ospf {
inactive: export NAT-POOL-TO-OSPF;
reference-bandwidth 1000g;
area 0.0.0.0 {
 interface xe-0/0/0.0;
interface xe-0/1/0.0;
inactive: interface xe-0/2/0.0;
inactive: interface xe-0/3/0.0;
interface lo0.0;
interface xe-0/2/3.0;
interface xe-0/3/3.0;
interface xe-0/2/0.3102 {
interface-type p2p;
}
interface xe-0/3/0.3202 {
interface-type p2p;
}
}
}
lldp {
interface et-2/2/0;
interface et-2/2/1;
}
}
policy-options {
prefix-list ALLOW-OAM-IPv4 {
202.3.211.121/32;
202.3.211.132/32;
202.3.211.170/32;
202.3.211.172/32;
}
prefix-list TBS-RIM-PRIVATE-IPv4 {
10.1.87.0/24;
10.2.114.16/32;
10.2.114.17/32;
10.2.114.21/32;
10.2.114.22/32;
10.2.114.32/32;
10.2.114.33/32;
10.2.114.170/32;
10.2.117.212/32;
10.2.117.215/32;
10.2.117.216/32;
10.2.224.8/32;
10.2.224.9/32;
10.2.224.10/32;
10.2.224.31/32;
10.2.224.32/32;
10.2.224.37/32;
10.2.224.49/32;
10.2.224.71/32;
10.2.224.105/32;
10.2.224.138/32;
10.2.224.201/32;
10.2.224.202/32;
10.2.224.207/32;
10.2.224.208/32;
10.2.227.214/32;
10.2.248.66/32;
10.2.248.67/32;
10.2.248.70/32;
10.2.248.71/32;
10.2.248.72/32;
 10.2.248.73/32;
10.2.248.193/32;
10.2.248.194/32;
10.37.65.10/32;
10.37.65.11/32;
10.37.65.12/32;
10.37.65.13/32;
10.37.65.14/32;
10.37.65.15/32;
10.37.65.16/32;
10.37.65.17/32;
10.49.32.0/24;
10.250.195.58/32;
10.250.195.59/32;
10.250.195.60/32;
10.251.60.0/24;
}
prefix-list TBS-IZONE-PRIVATE-IPv4 {
10.1.24.0/21;
10.3.99.250/32;
10.5.99.250/32;
10.9.99.142/32;
10.33.99.142/32;
10.35.102.142/32;
10.35.102.250/32;
10.47.217.84/32;
10.65.183.250/32;
10.67.99.142/32;
10.73.99.142/32;
10.97.99.142/32;
10.251.36.250/32;
10.251.92.250/32;
10.251.127.82/32;
10.251.127.94/32;
10.251.127.98/32;
172.31.254.128/29;
172.31.254.136/29;
}
prefix-list TBS-DZONE-PRIVATE-IPv4 {
172.16.0.0/16;
172.21.0.0/16;
172.22.0.0/16;
172.31.252.128/29;
}
prefix-list TBS-RIM-PUBLIC-IPv4 {
202.3.212.101/32;
}
prefix-list TBS-DZONE-PUBLIC-IPv4 {
202.3.212.192/28;
}
prefix-list TBS-IZONE-PUBLIC-IPv4 {
202.3.212.128/28;
}
prefix-list TBS-APPS-PRIVATE-IPV4 {
10.1.16.0/22;
10.1.24.58/32;
10.1.89.30/32;
10.1.89.31/32;
10.1.89.32/32;
10.1.89.33/32;
10.1.89.34/32;
10.1.89.35/32;
10.1.89.36/32;
10.1.89.37/32;
10.1.89.38/32;
10.1.89.39/32;
10.1.89.40/32;
10.1.89.41/32;
10.1.89.85/32;
10.1.89.86/32;
10.1.89.91/32;
10.1.89.92/32;
10.1.89.114/32;
10.1.89.115/32;
10.1.89.118/32;
10.1.176.9/32;
10.1.176.11/32;
10.1.176.13/32;
10.1.176.30/32;
10.1.176.31/32;
10.1.176.32/32;
10.1.176.33/32;
10.1.176.34/32;
10.1.176.35/32;
10.1.176.36/32;
10.1.176.37/32;
10.1.176.38/32;
10.1.176.40/32;
10.1.176.41/32;
10.1.176.43/32;
10.1.176.44/32;
10.1.176.46/32;
10.1.176.47/32;
10.1.176.48/32;
10.1.176.49/32;
10.1.176.50/32;
10.1.176.90/32;
10.1.176.91/32;
10.1.176.92/32;
10.1.176.93/32;
10.1.176.94/32;
10.1.176.95/32;
10.1.176.106/32;
10.1.176.108/32;
10.1.176.111/32;
10.1.176.112/32;
10.1.176.114/32;
10.1.176.115/32;
10.1.176.117/32;
10.1.176.118/32;
10.1.176.176/32;
10.1.176.192/32;
10.1.176.193/32;
10.1.176.194/32;
10.1.176.195/32;
10.1.176.196/32;
10.1.176.197/32;
10.1.176.198/32;
10.1.176.199/32;
10.1.176.231/32;
10.2.114.211/32;
10.2.116.12/32;
10.2.116.16/32;
10.2.116.18/32;
10.2.116.19/32;
10.2.116.25/32;
10.2.116.45/32;
10.2.116.68/32;
10.2.116.69/32;
10.2.116.70/32;
10.2.116.71/32;
10.2.116.72/32;
10.2.116.76/32;
10.2.116.85/32;
10.2.116.86/32;
10.2.116.89/32;
10.2.116.90/32;
10.2.116.91/32;
10.2.116.106/32;
10.2.116.171/32;
10.2.116.215/32;
10.2.116.242/32;
10.2.117.102/32;
10.2.117.103/32;
10.2.117.105/32;
10.2.117.151/32;
10.2.117.157/32;
10.2.117.158/32;
10.2.117.159/32;
10.2.117.184/32;
10.2.117.186/32;
10.2.117.187/32;
10.2.117.188/32;
10.2.117.189/32;
10.2.117.197/32;
10.2.117.198/32;
10.2.117.199/32;
10.2.117.206/32;
10.2.117.207/32;
10.2.117.208/32;
10.2.117.209/32;
10.2.117.218/32;
10.2.117.230/32;
10.2.121.161/32;
10.2.126.201/32;
10.2.133.187/32;
10.2.134.200/32;
10.2.137.18/32;
10.2.137.19/32;
10.2.137.111/32;
10.2.137.134/32;
10.2.137.222/32;
10.2.148.205/32;
10.2.151.45/32;
10.2.151.236/32;
10.2.160.178/32;
10.2.184.6/32;
10.2.184.7/32;
10.2.184.8/32;
10.2.184.9/32;
10.2.184.10/32;
10.2.184.11/32;
10.2.184.12/32;
10.2.184.13/32;
10.2.184.14/32;
10.2.184.16/32;
10.2.184.17/32;
10.2.184.19/32;
10.2.184.20/32;
10.2.184.22/32;
10.2.184.23/32;
10.2.184.24/32;
10.2.184.25/32;
10.2.184.26/32;
10.2.184.27/32;
10.2.184.28/32;
10.2.184.29/32;
10.2.184.30/32;
10.2.184.32/32;
10.2.184.34/32;
10.2.184.38/32;
10.2.184.40/32;
10.2.184.81/32;
10.2.184.82/32;
10.2.184.83/32;
10.2.184.88/32;
10.2.184.89/32;
10.2.184.91/32;
10.2.184.92/32;
10.2.184.93/32;
10.2.184.94/32;
10.2.184.95/32;
10.2.184.104/32;
10.2.184.105/32;
10.2.184.107/32;
10.2.184.108/32;
10.2.217.201/32;
10.2.224.17/32;
10.2.224.81/32;
10.2.224.82/32;
10.2.224.83/32;
10.2.224.84/32;
10.2.224.85/32;
10.2.224.87/32;
10.2.224.105/32;
10.2.226.115/32;
10.2.226.116/32;
10.2.226.117/32;
10.2.226.120/32;
10.2.230.8/32;
10.2.230.9/32;
10.2.230.84/32;
10.2.232.31/32;
10.2.232.32/32;
10.2.232.38/32;
10.2.232.93/32;
10.2.248.38/32;
10.2.248.46/32;
10.2.248.98/32;
10.2.248.113/32;
10.2.248.144/32;
10.2.248.150/32;
10.2.248.158/32;
10.2.248.188/32;
10.2.248.190/32;
10.2.248.191/32;
10.2.248.251/32;
10.35.160.21/32;
10.35.160.23/32;
10.35.160.32/32;
10.35.160.35/32;
10.35.160.44/32;
10.35.160.47/32;
10.35.192.76/32;
10.35.192.78/32;
10.35.192.107/32;
10.35.192.110/32;
10.35.192.119/32;
10.35.192.122/32;
10.37.67.3/32;
10.47.205.237/32;
10.52.130.9/32;
10.53.69.21/32;
10.53.69.37/32;
10.53.69.38/32;
10.53.69.39/32;
10.53.69.40/32;
10.53.69.41/32;
10.53.69.42/32;
10.53.69.43/32;
10.53.69.44/32;
10.53.69.45/32;
10.53.69.46/32;
10.53.69.47/32;
10.53.69.48/32;
10.53.69.65/32;
10.53.69.66/32;
10.53.69.67/32;
10.53.69.68/32;
10.53.69.69/32;
10.53.69.70/32;
10.53.69.71/32;
10.53.69.72/32;
10.53.69.73/32;
10.53.69.74/32;
10.53.69.75/32;
10.53.69.76/32;
10.53.69.77/32;
10.53.69.78/32;
10.53.69.79/32;
10.53.69.80/32;
10.53.98.141/32;
10.53.100.43/32;
10.54.0.1/32;
10.54.0.2/32;
10.54.0.3/32;
10.54.0.4/32;
10.65.154.50/32;
10.65.154.52/32;
10.65.154.57/32;
10.65.154.60/32;
10.65.154.63/32;
10.65.154.66/32;
10.67.161.21/32;
10.97.160.16/32;
10.97.160.19/32;
10.97.160.21/32;
10.97.160.30/32;
10.97.160.36/32;
10.97.160.39/32;
10.250.191.84/32;
10.250.191.85/32;
10.250.191.86/32;
10.250.191.87/32;
10.250.191.88/32;
10.250.191.98/32;
10.250.192.35/32;
10.250.192.121/32;
10.250.193.39/32;
10.250.193.63/32;
10.250.193.112/32;
10.250.193.117/32;
10.250.193.118/32;
10.250.193.119/32;
10.250.193.146/32;
10.250.193.156/32;
10.250.193.157/32;
10.250.193.168/32;
10.250.193.169/32;
10.250.193.170/32;
10.250.193.171/32;
10.250.193.172/32;
10.250.193.173/32;
10.250.193.174/32;
10.250.193.175/32;
10.250.193.176/32;
10.250.193.177/32;
10.250.193.178/32;
10.250.193.179/32;
10.250.193.180/32;
10.250.193.181/32;
10.250.193.182/32;
10.250.193.183/32;
10.250.193.184/32;
10.250.193.185/32;
10.250.193.186/32;
10.250.193.187/32;
10.250.193.188/32;
10.250.193.190/32;
10.250.193.194/32;
10.250.193.200/32;
10.250.193.201/32;
10.250.193.251/32;
10.250.194.101/32;
 10.250.194.102/32;
10.250.194.103/32;
10.250.195.5/32;
10.250.195.6/32;
10.250.195.24/32;
10.250.195.49/32;
10.250.195.55/32;
10.250.195.83/32;
10.250.195.84/32;
10.250.195.101/32;
10.250.195.115/32;
10.250.195.128/32;
10.250.195.141/32;
10.250.195.159/32;
10.250.195.202/32;
10.250.196.79/32;
10.250.196.80/32;
10.250.200.50/32;
10.251.36.164/32;
10.251.38.53/32;
10.251.38.84/32;
10.251.38.107/32;
10.251.38.108/32;
10.251.38.124/32;
10.251.38.127/32;
10.251.38.128/32;
10.251.38.129/32;
10.251.38.130/32;
10.251.38.131/32;
10.251.38.132/32;
10.251.38.133/32;
10.251.38.134/32;
10.251.38.137/32;
10.251.38.210/32;
10.251.38.231/32;
10.251.46.177/32;
10.251.94.13/32;
10.251.94.21/32;
10.251.94.25/32;
10.251.145.25/32;
10.251.182.15/32;
10.251.182.25/32;
10.251.182.26/32;
10.251.186.15/32;
10.251.186.19/32;
10.251.186.27/32;
10.251.222.50/32;
10.251.222.52/32;
10.251.230.107/32;
10.251.242.46/32;
10.252.242.47/32;
}
prefix-list Datacomm_Public-IPv4 {
202.3.209.0/27;
}
prefix-list FW-BUSINESS {
43.255.199.16/28;
202.3.208.0/24;
202.3.209.32/27;
 202.3.209.64/27;
202.3.210.0/24;
}
prefix-list P2P_AGG-FW {
202.3.211.48/28;
}
policy-statement NAT-POOL-TO-BGP {
term TBS-DZONE {
from {
protocol [ aggregate static ];
prefix-list TBS-DZONE-PUBLIC-IPv4;
}
then accept;
}
term TBS-RIM {
from {
protocol [ aggregate static ];
prefix-list TBS-RIM-PUBLIC-IPv4;
}
then accept;
}
term TBS-IZONE {
from {
protocol [ aggregate static ];
prefix-list TBS-IZONE-PUBLIC-IPv4;
}
then accept;
}
term Datacomm-Public {
from {
protocol direct;
prefix-list Datacomm_Public-IPv4;
}
then accept;
}
term NAT-FW-BUSINESS {
from {
protocol static;
prefix-list FW-BUSINESS;
}
then accept;
}
term P2P_AGG-FW {
from {
protocol direct;
prefix-list P2P_AGG-FW;
}
then accept;
}
term REJECT {
then reject;
}
}
policy-statement NAT-POOL-TO-OSPF {
term TBS-RIM {
from {
protocol [ aggregate static ];
prefix-list TBS-RIM-PUBLIC-IPv4;
}
 then accept;
}
term TBS-IZONE {
from {
protocol [ aggregate static ];
prefix-list TBS-IZONE-PUBLIC-IPv4;
}
then accept;
}
term TBS-DZONE {
from {
protocol [ aggregate static ];
prefix-list TBS-DZONE-PUBLIC-IPv4;
}
then accept;
}
}
policy-statement PLB {
then {
load-balance per-packet;
}
}
policy-statement bogons {
term 1 {
from {
route-filter 0.0.0.0/8 orlonger reject;
route-filter 127.0.0.0/8 orlonger reject;
route-filter 10.0.0.0/8 orlonger reject;
route-filter 172.16.0.0/12 orlonger reject;
route-filter 192.168.0.0/16 orlonger reject;
route-filter 224.0.0.0/4 orlonger reject;
route-filter 240.0.0.0/4 orlonger reject;
route-filter 169.254.0.0/16 orlonger reject;
route-filter 0.0.0.0/0 prefix-length-range /25-/32 reject;
}
}
term default {
then accept;
}
}
policy-statement export-full-route {
term 1 {
from protocol bgp;
then accept;
}
term default {
then reject;
}
}
}
firewall {
family inet {
filter FILTER-OAM {
term 1 {
filter FILTER-SSH;
}
term 2 {
filter FILTER-SNMP;
}
 term 3 {
filter FILTER-TELNET;
}
term 4 {
filter FILTER-FTP;
}
term 5 {
then accept;
}
}
filter FILTER-SSH {
term ALLOW {
from {
source-prefix-list {
ALLOW-OAM-IPv4;
}
protocol tcp;
destination-port ssh;
}
then {
count ACCEPT-SSH;
accept;
}
}
term REJECT {
from {
protocol tcp;
destination-port ssh;
}
then {
count DISCARD-SSH;
discard;
}
}
}
filter FILTER-SNMP {
term ALLOW {
from {
source-address {
10.251.36.136/32;
202.3.211.132/32;
10.251.94.66/32;
}
source-prefix-list {
ALLOW-OAM-IPv4;
}
protocol udp;
destination-port snmp;
}
then {
count ACCEPT-SNMP;
accept;
}
}
term REJECT {
from {
protocol udp;
destination-port snmp;
}
 then {
count DISCARD-SNMP;
discard;
}
}
}
filter FILTER-TELNET {
term ALLOW {
from {
source-prefix-list {
ALLOW-OAM-IPv4;
}
protocol tcp;
destination-port telnet;
}
then {
count ACCEPT-TELNET;
accept;
}
}
term REJECT {
from {
protocol tcp;
destination-port telnet;
}
then {
count DISCARD-TELNET;
discard;
}
}
}
filter FILTER-RIM {
term RIM {
from {
source-prefix-list {
TBS-RIM-PRIVATE-IPv4;
}
}
then {
routing-instance NAT-RIM-TBS;
}
}
term default {
then accept;
}
}
filter Block_SMB_to_BC {
interface-specific;
term 1 {
from {
port [ 445 139 ];
}
then {
count Block_SMB_to_BC;
log;
discard;
}
}
term default {
 then accept;
}
}
filter FILTER-FTP {
term ALLOW {
from {
source-address {
202.3.211.121/32;
}
protocol tcp;
destination-port ftp;
}
then {
count ACCEPT-FTP;
accept;
}
}
term REJECT {
from {
protocol tcp;
destination-port ftp;
}
then {
count DISCARD-FTP;
discard;
}
}
}
filter ARUBA {
term 1 {
from {
destination-address {
202.3.209.2/32;
202.3.209.3/32;
202.3.209.1/32;
}
protocol udp;
destination-port [ 4500 69 ];
}
then {
count UDP-ARUBA;
accept;
}
}
term 2 {
from {
protocol icmp;
}
then {
count ICMP-ARUBA;
accept;
}
}
term 3 {
from {
destination-address {
202.3.209.1/32;
202.3.209.2/32;
202.3.209.21/32;
 }
}
then {
count DISCARD-ARUBA;
reject;
}
}
term 4 {
from {
source-address {
202.3.208.0/20;
}
destination-address {
202.3.209.4/32;
202.3.209.5/32;
202.3.209.6/32;
}
protocol tcp;
destination-port 443;
}
then {
count HTTPS-ARUBA;
accept;
}
}
term 5 {
from {
destination-address {
202.3.209.3/32;
}
protocol tcp;
destination-port [ 443 4343 17 21 22 80 1723 8080 8081 8082
8088 ];
}
then {
count HTTPS-BLOCK;
reject;
}
}
term 6 {
from {
destination-address {
202.3.209.4/32;
202.3.209.5/32;
202.3.209.6/32;
}
}
then {
count DISCARD-ARUBA2;
reject;
}
}
term 7 {
then accept;
}
}
}
}
routing-instances {
 NAT-DZONE-TBS {
instance-type virtual-router;
interface lt-0/3/1.1; ## 'lt-0/3/1.1' is not defined
interface ge-2/0/0.0;
interface ams0.3;
routing-options {
static {
route 0.0.0.0/0 next-hop ams0.3;
route 172.21.0.0/16 next-hop 172.31.252.130;
route 172.22.0.0/16 next-hop 172.31.252.130;
route 172.16.0.0/16 next-hop 172.31.252.130;
}
}
}
NAT-IZONE-RIM-TBS {
instance-type virtual-router;
interface xe-0/0/1.0;
interface ams0.1;
interface irb.136;
routing-options {
interface-routes {
rib-group inet RIM-TO-IZONE;
}
static {
route 0.0.0.0/0 next-hop ams0.1;
route 10.0.0.0/8 next-hop 172.31.254.130;
}
}
}
NAT-RIM-TBS {
instance-type virtual-router;
interface ms-1/3/0.1;
routing-options {
interface-routes {
rib-group inet IZONE-TO-RIM;
}
static {
route 0.0.0.0/0 next-hop ms-1/3/0.1;
route 10.0.0.0/8 next-hop 172.31.254.130;
}
}
}
}
bridge-domains {
vlan136 {
description Proxy-Bridge;
domain-type bridge;
vlan-id 136;
interface xe-0/1/1.136;
interface ge-2/1/2.136;
routing-interface irb.136;
}
}
applications {
application-set ALG-NAT-INITIAL {
application junos-icmp-all;
application junos-traceroute;
application junos-tftp;
application junos-rsh;
 application junos-dce-rpc-portmap;
application junos-dcerpc-endpoint-mapper-service;
application junos-dcerpc-msexchange-directory-nsp;
application junos-dcerpc-msexchange-directory-rfr;
application junos-dcerpc-msexchange-information-store;
application junos-ftp;
application junos-sip;
application junos-h323;
application junos-rtsp;
application junos-http;
application junos-https;
application junos-ntp;
application junos-pptp;
application junos-ssh;
application junos-pop3;
application junos-smtp;
application junos-imap;
application junos-dns-udp;
}
}

{master}