version 7.6R1.9;
system {
    host-name ukwj4300-ukw;
    time-zone Europe/London;
    root-authentication {
        encrypted-password "$1$X9ZJodaG$GZyz4EHzPxXpFvY57LZ1N/"; ## SECRET-DATA
    }
    name-server {
        148.88.147.106;
    }
    login {
        user admin {
            uid 2000;
            class super-user;
            authentication {
                encrypted-password "$1$vnx0LIjr$tzQ75ia9CguzAc4A2IRhj/"; ## SECRET-DATA
            }
        }
        user ukwuser {
            uid 2004;
            class super-user;
            authentication {
                encrypted-password "$1$4q/ZVjme$Mp6ljd9ljomYb97WPyDX5."; ## SECRET-DATA
            }
        }
    }
    services {
        ftp;
        ssh {
            root-login deny;
            rate-limit 5;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
        file cli-commands {
            interactive-commands any;
        }
    }
}
interfaces {
    fe-0/0/0 {
        unit 0 {
            family inet {
                address 148.88.147.254/30;
            }
        }
    }
    gr-0/0/0 {
        unit 0 {
            tunnel {
                source 148.88.147.254;
                destination 148.88.147.220;
            }
            family inet6 {
                address 2001:630:81:4a0::7:2/112;
            }
        }
    }
    fe-1/0/0 {
        unit 0 {
            family inet {
                address 148.88.147.97/29;
            }
            family inet6 {
                address 2001:630:81:472::1/64;
            }
        }
    }
    fe-1/0/1 {
        unit 0 {
            family inet {
                address 148.88.147.105/29;
            }
            family inet6 {
                address 2001:630:81:474::1/64;
            }
        }
    }
}
routing-options {
    interface-routes {
        rib-group inet6 mc-pseudo-rib;
    }
    rib inet6.0 {
        aggregate {
            route 2001:630:81:470::/60;
        }
    }
    static {
        route 0.0.0.0/0 next-hop 148.88.147.253;
    }
    rib-groups {
        mcast-rpf6-rg {
            import-rib [ inet6.2 inet6.0 ];
        }
        mc-pseudo-rib {
            export-rib inet6.0;
            import-rib [ inet6.0 inet6.2 ];
        }
    }
    autonomous-system 65007;
}
protocols {
    mld {
        interface fe-1/0/0.0 {
            version 1;
        }
        interface fe-1/0/1.0 {
            version 1;
        }
    }
    router-advertisement {
        interface fe-1/0/1.0 {
            prefix 2001:630:81:474::/64;
        }
        interface fe-1/0/0.0 {
            prefix 2001:630:81:472::/64;
        }
    }
    bgp {
        group session-to-AS64641 {
            type external;
            description "BGP Tunnel to the M7I";
            family inet6 {
                any;
            }
            export [ ipv6-bgp v6-aggregation redistribute-connected ];
            peer-as 64641;
            neighbor 2001:630:81:4a0::7:1;
        }
    }
    pim {
        rib-group inet6 mcast-rpf6-rg;
        rp {
            embedded-rp;
            static {
                address 2001:660:3007:300:1:: {
                    group-ranges {
                        ff0e::/16;
                        ff1e::/16;
                    }
                }
            }
        }
        interface all;
    }
}
policy-options {
    policy-statement ipv6-bgp {
        term our-prefix {
            from {
                family inet6;
                route-filter 2001:630:81:0470::/60 exact;
            }
            then accept;
        }
        term reject-others {
            from family inet6;
            then reject;
        }
    }
    policy-statement redistribute-connected {
        from {
            protocol direct;
            family inet6;
        }
        then accept;
    }
    policy-statement v6-aggregation {
        term one {
            from protocol aggregate;
            then accept;
        }
        term twp {
            from {
                route-filter 2001:630:81:470::/60 longer;
            }
        }
        term two {
            then reject;
        }
    }
}