auto-host-with-vip.cfg.json

{
  "auto_config_agent:auto-config-agent": {

  },
  "srl_nokia-acl:acl": {
    "cpm-filter": {
      "ipv4-filter": {
        "statistics-per-entry": true,
        "entry": [
          {
            "sequence-id": 10,
            "description": "Accept incoming ICMP unreachable messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "icmp",
              "icmp": {
                "type": "dest-unreachable",
                "code": [
                  0,
                  1,
                  2,
                  3,
                  4,
                  13
                ]
              }
            }
          },
          {
            "sequence-id": 20,
            "description": "Accept incoming ICMP time-exceeded messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "icmp",
              "icmp": {
                "type": "time-exceeded"
              }
            }
          },
          {
            "sequence-id": 30,
            "description": "Accept incoming ICMP parameter problem messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "icmp",
              "icmp": {
                "type": "param-problem"
              }
            }
          },
          {
            "sequence-id": 40,
            "description": "Accept incoming ICMP echo messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "icmp",
              "icmp": {
                "type": "echo"
              }
            }
          },
          {
            "sequence-id": 50,
            "description": "Accept incoming ICMP echo-reply messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "icmp",
              "icmp": {
                "type": "echo-reply"
              }
            }
          },
          {
            "sequence-id": 60,
            "description": "Accept incoming SSH when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 22
              }
            }
          },
          {
            "sequence-id": 70,
            "description": "Accept incoming SSH when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 22
              }
            }
          },
          {
            "sequence-id": 80,
            "description": "Accept incoming Telnet when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 23
              }
            }
          },
          {
            "sequence-id": 90,
            "description": "Accept incoming Telnet when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 23
              }
            }
          },
          {
            "sequence-id": 100,
            "description": "Accept incoming TACACS+ when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 49
              }
            }
          },
          {
            "sequence-id": 110,
            "description": "Accept incoming TACACS+ when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 49
              }
            }
          },
          {
            "sequence-id": 120,
            "description": "Accept incoming DNS response messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "source-port": {
                "operator": "eq",
                "value": 53
              }
            }
          },
          {
            "sequence-id": 130,
            "description": "Accept incoming DHCP messages targeted for BOOTP/DHCP client",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 68
              }
            }
          },
          {
            "sequence-id": 140,
            "description": "Accept incoming TFTP read-request and write-request messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 69
              }
            }
          },
          {
            "sequence-id": 150,
            "description": "Accept incoming HTTP(JSON-RPC) when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 80
              }
            }
          },
          {
            "sequence-id": 160,
            "description": "Accept incoming HTTP(JSON-RPC) when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 80
              }
            }
          },
          {
            "sequence-id": 170,
            "description": "Accept incoming NTP messages from servers",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "source-port": {
                "operator": "eq",
                "value": 123
              }
            }
          },
          {
            "sequence-id": 180,
            "description": "Accept incoming SNMP GET/GETNEXT messages from servers",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 161
              }
            }
          },
          {
            "sequence-id": 190,
            "description": "Accept incoming BGP when the other router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 179
              }
            }
          },
          {
            "sequence-id": 200,
            "description": "Accept incoming BGP when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 179
              }
            }
          },
          {
            "sequence-id": 210,
            "description": "Accept incoming HTTPS(JSON-RPC) when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 443
              }
            }
          },
          {
            "sequence-id": 220,
            "description": "Accept incoming HTTPS(JSON-RPC) when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 443
              }
            }
          },
          {
            "sequence-id": 230,
            "description": "Accept incoming single-hop BFD session messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 3784
              }
            }
          },
          {
            "sequence-id": 240,
            "description": "Accept incoming multi-hop BFD session messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 4784
              }
            }
          },
          {
            "sequence-id": 250,
            "description": "Accept incoming uBFD session messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 6784
              }
            }
          },
          {
            "sequence-id": 260,
            "description": "Accept incoming gNMI messages when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 57400
              }
            }
          },
          {
            "sequence-id": 270,
            "description": "Accept incoming UDP traceroute messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "destination-port": {
                "range": {
                  "start": 33434,
                  "end": 33464
                }
              }
            }
          },
          {
            "sequence-id": 280,
            "description": "Accept incoming ICMP timestamp messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "icmp",
              "icmp": {
                "type": "timestamp"
              }
            }
          },
          {
            "sequence-id": 290,
            "description": "Accept incoming OSPF messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": 89
            }
          },
          {
            "sequence-id": 300,
            "description": "Accept incoming DHCP relay messages targeted for BOOTP/DHCP server",
            "action": {
              "accept": {

              }
            },
            "match": {
              "protocol": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 67
              }
            }
          },
          {
            "sequence-id": 310,
            "description": "Accept ICMP fragment packets",
            "action": {
              "accept": {

              }
            },
            "match": {
              "fragment": true,
              "protocol": "icmp"
            }
          },
          {
            "sequence-id": 320,
            "description": "Drop all else",
            "action": {
              "drop": {
                "log": true
              }
            }
          }
        ]
      },
      "ipv6-filter": {
        "statistics-per-entry": true,
        "entry": [
          {
            "sequence-id": 10,
            "description": "Accept incoming ICMPv6 unreachable messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "dest-unreachable",
                "code": [
                  0,
                  1,
                  2,
                  3,
                  4,
                  5,
                  6
                ]
              }
            }
          },
          {
            "sequence-id": 20,
            "description": "Accept incoming ICMPv6 packet-too-big messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "packet-too-big"
              }
            }
          },
          {
            "sequence-id": 30,
            "description": "Accept incoming ICMPv6 time-exceeded messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "time-exceeded"
              }
            }
          },
          {
            "sequence-id": 40,
            "description": "Accept incoming ICMPv6 parameter problem messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "param-problem"
              }
            }
          },
          {
            "sequence-id": 50,
            "description": "Accept incoming ICMPv6 echo-request messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "echo-request"
              }
            }
          },
          {
            "sequence-id": 60,
            "description": "Accept incoming ICMPv6 echo-reply messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "echo-reply"
              }
            }
          },
          {
            "sequence-id": 70,
            "description": "Accept incoming ICMPv6 router-advertisement messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "router-advertise"
              }
            }
          },
          {
            "sequence-id": 80,
            "description": "Accept incoming ICMPv6 neighbor-solicitation messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "neighbor-solicit"
              }
            }
          },
          {
            "sequence-id": 90,
            "description": "Accept incoming ICMPv6 neighbor-advertisement messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "icmp6",
              "icmp6": {
                "type": "neighbor-advertise"
              }
            }
          },
          {
            "sequence-id": 100,
            "description": "Accept incoming SSH when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 22
              }
            }
          },
          {
            "sequence-id": 110,
            "description": "Accept incoming SSH when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 22
              }
            }
          },
          {
            "sequence-id": 120,
            "description": "Accept incoming Telnet when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 23
              }
            }
          },
          {
            "sequence-id": 130,
            "description": "Accept incoming Telnet when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 23
              }
            }
          },
          {
            "sequence-id": 140,
            "description": "Accept incoming TACACS+ when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 49
              }
            }
          },
          {
            "sequence-id": 150,
            "description": "Accept incoming TACACS+ when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 49
              }
            }
          },
          {
            "sequence-id": 160,
            "description": "Accept incoming DNS response messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "source-port": {
                "operator": "eq",
                "value": 53
              }
            }
          },
          {
            "sequence-id": 170,
            "description": "Accept incoming TFTP read-request and write-request messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 69
              }
            }
          },
          {
            "sequence-id": 180,
            "description": "Accept incoming HTTP(JSON-RPC) when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 80
              }
            }
          },
          {
            "sequence-id": 190,
            "description": "Accept incoming HTTP(JSON-RPC) when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 80
              }
            }
          },
          {
            "sequence-id": 200,
            "description": "Accept incoming NTP messages from servers",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "source-port": {
                "operator": "eq",
                "value": 123
              }
            }
          },
          {
            "sequence-id": 210,
            "description": "Accept incoming SNMP GET/GETNEXT messages from servers",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 161
              }
            }
          },
          {
            "sequence-id": 220,
            "description": "Accept incoming BGP when the other router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 179
              }
            }
          },
          {
            "sequence-id": 230,
            "description": "Accept incoming BGP when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 179
              }
            }
          },
          {
            "sequence-id": 240,
            "description": "Accept incoming HTTPS(JSON-RPC) when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 443
              }
            }
          },
          {
            "sequence-id": 250,
            "description": "Accept incoming HTTPS(JSON-RPC) when this router initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "source-port": {
                "operator": "eq",
                "value": 443
              }
            }
          },
          {
            "sequence-id": 260,
            "description": "Accept incoming DHCPv6 client messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 546
              }
            }
          },
          {
            "sequence-id": 270,
            "description": "Accept incoming single-hop BFD session messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 3784
              }
            }
          },
          {
            "sequence-id": 280,
            "description": "Accept incoming multi-hop BFD session messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 4784
              }
            }
          },
          {
            "sequence-id": 290,
            "description": "Accept incoming uBFD session messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 6784
              }
            }
          },
          {
            "sequence-id": 300,
            "description": "Accept incoming gNMI messages when the other host initiates the TCP connection",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "tcp",
              "destination-port": {
                "operator": "eq",
                "value": 57400
              }
            }
          },
          {
            "sequence-id": 310,
            "description": "Accept incoming UDP traceroute messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "destination-port": {
                "range": {
                  "start": 33434,
                  "end": 33464
                }
              }
            }
          },
          {
            "sequence-id": 320,
            "description": "Accept incoming IPV6 hop-in-hop messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": 0
            }
          },
          {
            "sequence-id": 330,
            "description": "Accept incoming IPV6 fragment header messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": 44
            }
          },
          {
            "sequence-id": 340,
            "description": "Accept incoming OSPF messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": 89
            }
          },
          {
            "sequence-id": 350,
            "description": "Accept incoming DHCPv6 relay messages",
            "action": {
              "accept": {

              }
            },
            "match": {
              "next-header": "udp",
              "destination-port": {
                "operator": "eq",
                "value": 547
              }
            }
          },
          {
            "sequence-id": 360,
            "description": "Drop all else",
            "action": {
              "drop": {
                "log": true
              }
            }
          }
        ]
      }
    }
  },
  "srl_nokia-interfaces:interface": [
    {
      "name": "ethernet-1/1",
      "admin-state": "enable",
      "subinterface": [
        {
          "index": 0,
          "admin-state": "enable"
        }
      ]
    },
    {
      "name": "ethernet-1/2",
      "admin-state": "enable",
      "subinterface": [
        {
          "index": 0,
          "admin-state": "enable"
        }
      ]
    },
    {
      "name": "ethernet-1/3",
      "admin-state": "enable",
      "subinterface": [
        {
          "index": 0,
          "admin-state": "enable"
        }
      ]
    },
    {
      "name": "ethernet-1/4",
      "admin-state": "enable",
      "subinterface": [
        {
          "index": 0,
          "admin-state": "enable"
        }
      ]
    },
    {
      "name": "lo0",
      "admin-state": "enable",
      "subinterface": [
        {
          "index": 0,
          "admin-state": "enable"
        },
	{
      "index": 1,
      "admin-state": "enable",
      "ipv4": {
        "address": [
          {
            "ip-prefix": "10.10.10.10/32"
          }
        ]
      },
      "ipv6": {
        "address": [
          {
            "ip-prefix": "2001::10:10:10:10/128"
          }
        ]
      }
    }

      ]
    },
    {
      "name": "mgmt0",
      "admin-state": "enable",
      "subinterface": [
        {
          "index": 0,
          "admin-state": "enable",
          "ipv4": {
            "srl_nokia-interfaces-ip-dhcp:dhcp-client": {

            }
          },
          "ipv6": {
            "srl_nokia-interfaces-ip-dhcp:dhcp-client": {

            }
          }
        }
      ]
    }
  ],
  "srl_nokia-system:system": {
    "srl_nokia-aaa:aaa": {
      "authentication": {
        "authentication-method": [
          "local"
        ]
      },
      "server-group": [
        {
          "name": "local",
          "type": "local"
        }
      ]
    },
    "srl_nokia-gnmi-server:gnmi-server": {
      "admin-state": "enable",
      "timeout": 7200,
      "rate-limit": 60,
      "session-limit": 20,
      "network-instance": [
        {
          "name": "mgmt",
          "admin-state": "enable",
          "use-authentication": true,
          "port": 57400,
          "tls-profile": "tls-profile-1"
        }
      ]
    },
    "srl_nokia-tls:tls": {
      "server-profile": [
        {
          "name": "tls-profile-1",
          "key": "$aes$b2iiZUu8o3sg=$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",
          "certificate": "-----BEGIN CERTIFICATE-----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\nHuA0tNdMu6pK70nZ9bU9uDqnzcnkW06vpjqttSnOWj0yaQ==\n-----END CERTIFICATE-----\n",
          "authenticate-client": false
        }
      ]
    },
    "srl_nokia-ssh:ssh-server": {
      "network-instance": [
        {
          "name": "mgmt",
          "admin-state": "enable"
        }
      ]
    },
    "srl_nokia-lldp:lldp": {
      "admin-state": "enable"
    },
    "srl_nokia-logging:logging": {
      "network-instance": "mgmt",
      "buffer": [
        {
          "buffer-name": "messages",
          "rotate": 3,
          "size": "10000000",
          "facility": [
            {
              "facility-name": "local6",
              "priority": {
                "match-above": "informational"
              }
            }
          ]
        },
        {
          "buffer-name": "system",
          "facility": [
            {
              "facility-name": "auth",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "cron",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "daemon",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "ftp",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "kern",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "lpr",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "mail",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "news",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "syslog",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "user",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "uucp",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "local0",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "local1",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "local2",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "local3",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "local4",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "local5",
              "priority": {
                "match-above": "warning"
              }
            },
            {
              "facility-name": "local7",
              "priority": {
                "match-above": "warning"
              }
            }
          ]
        }
      ],
      "file": [
        {
          "file-name": "messages",
          "rotate": 3,
          "size": "10000000",
          "facility": [
            {
              "facility-name": "local6",
              "priority": {
                "match-above": "warning"
              }
            }
          ]
        }
      ]
    },
    "srl_nokia-system-network-instance:network-instance": {
      "protocols": {
        "srl_nokia-system-network-instance-bgp-vpn:bgp-vpn": {

        }
      }
    }
  },
  "srl_nokia-network-instance:network-instance": [
    {
      "name": "default",
      "admin-state": "enable",
      "interface": [
        {
          "name": "lo0.0"
        },
        {
          "name": "lo0.1"
        }
      ]
    },
    {
      "name": "mgmt",
      "type": "srl_nokia-network-instance:ip-vrf",
      "admin-state": "enable",
      "description": "Management network instance",
      "interface": [
        {
          "name": "mgmt0.0"
        }
      ],
      "protocols": {
        "srl_nokia-linux:linux": {
          "import-routes": true,
          "export-routes": true,
          "export-neighbors": true
        }
      }
    }
  ],
  "srl_nokia-routing-policy:routing-policy": {
    "prefix-set": [
      {
        "name": "loopbacks",
        "prefix": [
          {
            "ip-prefix": "0.0.0.0/0",
            "mask-length-range": "32..32"
          },
          {
            "ip-prefix": "::/0",
            "mask-length-range": "128..128"
          }
        ]
      },
      {
        "name": "p2plinks",
        "prefix": [
          {
            "ip-prefix": "0.0.0.0/0",
            "mask-length-range": "31..31"
          },
          {
            "ip-prefix": "::/0",
            "mask-length-range": "127..127"
          }
        ]
      }
    ],
    "community-set": [
      {
        "name": "no-export",
        "member": [
          "no-export"
        ]
      }
    ],
    "policy": [
      {
        "name": "accept-all",
        "default-action": {
          "policy-result": "accept"
        }
      },
      {
        "name": "export-hosts",
        "default-action": {
          "policy-result": "accept"
        },
        "statement": [
          {
            "sequence-id": 10,
            "match": {
              "bgp": {
                "as-path-length": {
                  "value": 1,
                  "operator": "ge"
                }
              }
            },
            "action": {
              "policy-result": "reject"
            }
          },
          {
            "sequence-id": 20,
            "match": {
              "prefix-set": "p2plinks"
            },
            "action": {
              "policy-result": "reject"
            }
          },
          {
            "sequence-id": 30,
            "match": {
              "prefix-set": "loopbacks"
            },
            "action": {
              "policy-result": "accept",
              "bgp": {
                  "communities": {
                    "add": "no-export"
                  }
              }
            }
          }
        ]
      }
    ]
  }
}