lothlorien-config.j2

system {
    root-authentication {
        encrypted-password "{{ encrypted_root_pw }}"; ## SECRET-DATA
    }
    login {
        user meshrr {
            class super-user;
            uid 100;
            authentication {
                ssh-ed25519 "ssh-ed25519 TBD"; ## SECRET-DATA
            }
        }
    }
    services {
        netconf {
            ssh;
        }
    }
    license {
        keys {
            key "{{ LICENSE_KEY }}";
        }
    }
    processes {
        routing {
            bgp {
                rib-sharding;
                update-threading;
            }
        }
    }
}
groups {
    MESHRR {
        protocols {
            bgp {
                group MESHRR-MESH {
                    type internal
                }
                group MESHRR-CLIENTS {
                    type internal;
                    cluster {{ POD_IP }};
                    allow [ {% for prefix in bgpgroups_subtractive['MESHRR-CLIENTS'].prefixes %}{{ prefix }} {% endfor %}];
                }
                group MESHRR-UPSTREAM {
                    type internal;
                    export UPSTREAM-OUT;
                }
            }
        }
    }
}
policy-options {
    policy-statement UPSTREAM-OUT {
        term DROP-INREGION-ONLY {
            from community INREGION-ONLY;
            then reject;
        }
        term INREGION-PREFERRED {
            from community INREGION-PREFERRED;
            then {
                local-preference 20;
            }
        }
        then accept;
    }
    community INREGION-ONLY members 65000:101;
    community INREGION-PREFERRED members 65000:102;
}
routing-options {
    autonomous-system {{ asn }};
    router-id {{ POD_IP }};
}
protocols {
    bgp {
        apply-groups MESHRR;
        family inet {
            unicast {
                nexthop-resolution {
                    no-resolution;
                }
                no-install;
            }
        }
    }
}