diff --git a/Changelog.md b/Changelog.md
index 5a2192680e58f8ab82886f0a519d9aaa875c0d2e..27167afaf8b1f8059b8e898e6042d42112c1d4ca 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -2,6 +2,11 @@
All notable changes to this project will be documented in this file.
+## [0.112] - 2023-11-20
+- correctly handled timeout error for some RPC requests
+- handle inactive bundle configs populating cache
+- addressed potential issues with bundle formatting in cache for /poller/speeds endpoint
+
## [0.111] - 2023-11-6
- fixed retrieving netconf interface-information
- return speeds in /poller/speed exclusively via netconf interface-information
diff --git a/inventory_provider/juniper.py b/inventory_provider/juniper.py
index 89d0fe08b7233a2399f073220d6afb602e9f1272..47e1d1e302156d83371b0ca6b549289d0fc1d953 100644
--- a/inventory_provider/juniper.py
+++ b/inventory_provider/juniper.py
@@ -4,6 +4,7 @@ import re
import ipaddress
import ncclient
+import ncclient.operations
import ncclient.manager
from jnpr.junos import Device
from jnpr.junos import exception as EzErrors
@@ -138,7 +139,7 @@ def _nc_connection(host_params, ssh_params):
try:
yield conn # wait here until caller context ends
- except EzErrors.ConnectTimeoutError:
+ except (EzErrors.ConnectTimeoutError, ncclient.operations.errors.TimeoutExpiredError):
raise TimeoutError
finally:
conn.close_session()
@@ -232,10 +233,10 @@ def list_interfaces(netconf_config):
def _ifc_info(e):
# warning: this structure should match the default
# returned from routes.classifier.juniper_link_info
- name = e.find('name')
- assert name is not None, "expected interface 'name' child element"
+ _name = e.find('name')
+ assert _name is not None, "expected interface 'name' child element"
ifc = {
- 'name': name.text,
+ 'name': _name.text,
'description': '',
'bundle': [],
'speed': '' # set elsewhere but needs to be included to maintain default structure
@@ -244,12 +245,11 @@ def list_interfaces(netconf_config):
if description is not None:
ifc['description'] = description.text
- for b in i.iterfind(".//bundle"):
- ifc['bundle'].append(b.text)
-
+ ifc['bundle'] = e.xpath(
+ "./gigether-options[not(@inactive='inactive')]"
+ "/ieee-802.3ad[not(@inactive='inactive')]/bundle/text()")
ifc['ipv4'] = e.xpath('./family/inet/address/name/text()')
ifc['ipv6'] = e.xpath('./family/inet6/address/name/text()')
-
return ifc
def _inactive(interface_node):
diff --git a/inventory_provider/routes/poller.py b/inventory_provider/routes/poller.py
index 7704c53947fcc46b3e059b5b060c22690ba2207f..5a4c4ae12c503b2f6b7d8248faeef2511b3c2d60 100644
--- a/inventory_provider/routes/poller.py
+++ b/inventory_provider/routes/poller.py
@@ -84,6 +84,7 @@ routes = Blueprint('poller-support-routes', __name__)
Mb = 1 << 20
Gb = 1 << 30
+OC = Mb * 51.84
class INTERFACE_TYPES(Enum):
@@ -713,8 +714,6 @@ def _add_speeds(interfaces):
nc_ifc = netconf_interface_index.get(f"{ifc['router']}---{ifc['name']}", {})
if 'speed' in nc_ifc:
ifc['speed'] = nc_ifc['speed']
- else:
- ifc['speed'] = ''
yield ifc
@@ -726,6 +725,9 @@ def _add_bundle_parents(interfaces, hostname=None):
:param hostname: hostname or None for all
:return: generator with bundle-parents populated in each element
"""
+ def _get_base_name(name):
+ return name.split('.')[0]
+
bundles = _load_interface_bundles(
current_app.config['INVENTORY_PROVIDER_CONFIG'], hostname)
# create a quick look-up for interface details
@@ -734,8 +736,8 @@ def _add_bundle_parents(interfaces, hostname=None):
for ifc in interfaces:
router_bundle = bundles.get(ifc['router'], None)
if router_bundle:
- base_ifc = ifc['name'].split('.')[0]
- bundle_parents = [interface_index.get(f"{ifc['router']}---{bundle_ifc}")
+ base_ifc = _get_base_name(ifc['name'])
+ bundle_parents = [interface_index.get(f"{ifc['router']}---{_get_base_name(bundle_ifc)}")
for bundle_ifc in router_bundle.get(base_ifc, [])]
ifc['bundle-parents'] = bundle_parents
yield ifc
@@ -878,25 +880,32 @@ def interface_speed(ifc):
return -1
def _get_speed(ifc):
+
rate_conversions = {
"mbps": Mb,
"gbps": Gb
+
}
if "speed" in ifc:
speed = ifc["speed"]
- match = re.match(r"(\d+)(.+)", speed)
- if match:
- value = int(match.group(1))
- rate = match.group(2).strip().lower()
+ rate_match = re.match(r"(\d+)(.+)", speed)
+ if rate_match:
+ value = int(rate_match.group(1))
+ rate = rate_match.group(2).strip().lower()
if rate in rate_conversions:
- return value * rate_conversions[rate]
+ return int(value * rate_conversions[rate])
else:
logger.warning(f'unrecognised rate: {rate}, using _name_to_speed fallback')
return _name_to_speed(ifc['name'])
else:
- logger.warning(f'unrecognised speed: {speed}, using _name_to_speed fallback')
- return _name_to_speed(ifc['name'])
+ oc_match = re.match(r"OC(\d+)", speed)
+ if oc_match:
+ value = int(oc_match.group(1))
+ return int(value * OC)
+ else:
+ logger.warning(f'unrecognised speed: {speed}, using _name_to_speed fallback')
+ return _name_to_speed(ifc['name'])
else:
logger.warning('no speed data for interface, using _name_to_speed fallback')
return _name_to_speed(ifc['name'])
@@ -905,9 +914,9 @@ def interface_speed(ifc):
if not ifc['name'].startswith('ae'):
logger.warning(
f'ifc has bundle-parents, but name is {ifc["name"]}')
- return sum(_get_speed(parent_ifc) for parent_ifc in ifc['bundle-parents'])
+ return int(sum(_get_speed(parent_ifc) for parent_ifc in ifc['bundle-parents']))
- return _get_speed(ifc)
+ return int(_get_speed(ifc))
def _load_interfaces_and_speeds(hostname=None):
diff --git a/setup.py b/setup.py
index 388463d40e29dbc70028de91c8293be3ea030a75..a302f778422ee653b04e8fd3763a6db594a7cf0d 100644
--- a/setup.py
+++ b/setup.py
@@ -2,7 +2,7 @@ from setuptools import setup, find_packages
setup(
name='inventory-provider',
- version="0.111",
+ version="0.112",
author='GEANT',
author_email='swd@geant.org',
description='Dashboard inventory provider',
diff --git a/test/data/DBOARD3-833.xml b/test/data/DBOARD3-833.xml
new file mode 100644
index 0000000000000000000000000000000000000000..b1520e291046d657df4c297676c39eb44c4cae0f
--- /dev/null
+++ b/test/data/DBOARD3-833.xml
@@ -0,0 +1,230 @@
+<configuration changed-seconds="1700209407" changed-localtime="2023-11-17 08:23:27 UTC"><version>20.4R3-S4.8</version><groups><name>re0</name><system><host-name>mx2.zag.hr.re0</host-name></system><interfaces><interface><name>fxp0</name><description>PHY INFRASTRUCTURE MANAGEMENT | re0</description><speed>100m</speed><link-mode>full-duplex</link-mode><unit><name>0</name><family><inet><address><name>172.16.40.102/24</name></address><address><name>172.16.254.3/24</name></address></inet></family></unit></interface></interfaces></groups><groups><name>re1</name><system><host-name>mx2.zag.hr.re1</host-name></system><interfaces><interface><name>fxp0</name><description>PHY INFRASTRUCTURE MANAGEMENT | re1</description><speed>100m</speed><link-mode>full-duplex</link-mode><unit><name>0</name><family><inet><address><name>172.16.40.103/24</name></address><address><name>172.16.254.4/24</name></address></inet></family></unit></interface></interfaces></groups><groups><name>urpf-template</name><firewall><family><inet><filter><name><*></name><interface-specific/><term><name>permit-multicast</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>urpf-multicast</count><accept/></then></term><term><name>discard-bogons</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>urpf-fail-bogons</count><discard>
+ </discard></then></term><term><name>discard</name><then><count>urpf-fail</count><discard>
+ </discard></then></term></filter></inet><inet6><filter><name><*></name><interface-specific/><term><name>permit-multicast</name><from><destination-address><name>ff00::/8</name></destination-address></from><then><count>urpfv6-multicast</count><accept/></then></term><term><name>discard-bogons</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>urpfv6-fail-bogons</count><discard/></then></term><term><name>discard</name><then><count>urpfv6-fail</count><discard/></then></term></filter></inet6></family></firewall></groups><groups><name>load-balance-adaptive</name><interfaces><interface><name><ae*></name><aggregated-ether-options><load-balance><adaptive>
+ </adaptive></load-balance></aggregated-ether-options></interface></interfaces></groups><system><apply-groups>re0</apply-groups><apply-groups>re1</apply-groups><root-authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></root-authentication><commit><fast-synchronize/><synchronize/></commit><login><idle-timeout>15</idle-timeout><class><name>DANTE-Class</name><idle-timeout>15</idle-timeout><permissions>admin</permissions><permissions>firewall</permissions><permissions>firewall-control</permissions><permissions>interface</permissions><permissions>network</permissions><permissions>routing</permissions><permissions>snmp</permissions><permissions>system</permissions><permissions>trace</permissions><permissions>trace-control</permissions><permissions>view</permissions></class><class><name>FoD</name><permissions>configure</permissions><permissions>rollback</permissions><permissions>routing-control</permissions></class><class><name>NOC-Class</name><idle-timeout>60</idle-timeout><login-alarms/><permissions>all</permissions></class><class><name>config_backup</name><permissions>maintenance</permissions><permissions>secret</permissions><permissions>view</permissions><permissions>view-configuration</permissions></class><class><name>dante</name><idle-timeout>20</idle-timeout><permissions>admin</permissions><permissions>firewall</permissions><permissions>firewall-control</permissions><permissions>interface</permissions><permissions>network</permissions><permissions>routing</permissions><permissions>snmp</permissions><permissions>system</permissions><permissions>trace</permissions><permissions>trace-control</permissions><permissions>view</permissions></class><class><name>geantnms</name><idle-timeout>15</idle-timeout><permissions>all</permissions></class><class><name>isisView</name><idle-timeout>5</idle-timeout><permissions>routing</permissions><allow-commands>(exit|show isis)</allow-commands><deny-commands>show route.*</deny-commands></class><class><name>level1</name><idle-timeout>5</idle-timeout><permissions>admin</permissions><permissions>clear</permissions><permissions>firewall</permissions><permissions>firewall-control</permissions><permissions>interface</permissions><permissions>network</permissions><permissions>routing</permissions><permissions>snmp</permissions><permissions>system</permissions><permissions>trace</permissions><permissions>trace-control</permissions><permissions>view</permissions></class><class><name>mdvpn-si</name><idle-timeout>5</idle-timeout><permissions>interface</permissions><permissions>network</permissions><permissions>routing</permissions><permissions>snmp</permissions><permissions>system</permissions><permissions>trace</permissions><permissions>view</permissions><allow-commands>show .*</allow-commands><deny-commands>(ssh .*|telnet .*)</deny-commands></class><class><name>nemo</name><idle-timeout>5</idle-timeout><allow-commands>(show firewall filter.*|show route table.*|show route extensive.*|clear firewall filter.*)</allow-commands></class><class><name>nessus</name><permissions>access</permissions><permissions>admin</permissions><permissions>firewall</permissions><permissions>interface</permissions><permissions>routing</permissions><permissions>security</permissions><permissions>snmp</permissions><permissions>system</permissions><permissions>view</permissions><permissions>view-configuration</permissions></class><class><name>nomios</name><idle-timeout>60</idle-timeout><permissions>shell</permissions><permissions>view</permissions><permissions>view-configuration</permissions><allow-commands>show .*|quit|ping .*|monitor .*|traceroute .*|file archive .*</allow-commands></class><class><name>nren</name><idle-timeout>5</idle-timeout><permissions>firewall</permissions><permissions>interface</permissions><permissions>network</permissions><permissions>routing</permissions><permissions>snmp</permissions><permissions>system</permissions><permissions>trace</permissions><permissions>view</permissions><allow-commands>(show .*)|(monitor interface.*)</allow-commands><deny-commands>(file.*)|(load.*)|(op.*)|(request.*)|(save.*)|(start.*)|(test.*)|(set cli.*)|(set date.*)|(clear.*)|(help.*)|(telnet.*)|(ssh.*)|(scp.*)|(monitor.*)|(mtrace.*)|(set.*)</deny-commands></class><class><name>nrn</name><idle-timeout>5</idle-timeout><permissions>interface</permissions><permissions>network</permissions><permissions>routing</permissions><permissions>snmp</permissions><permissions>system</permissions><permissions>trace</permissions><permissions>view</permissions><allow-commands>show .*</allow-commands><deny-commands>(ssh .*|telnet .*)</deny-commands></class><class><name>opennsa</name><idle-timeout>5</idle-timeout><permissions>configure</permissions><permissions>interface</permissions><permissions>routing</permissions><permissions>view</permissions><permissions>view-configuration</permissions><allow-commands>show configuration interface.*|show configuration protocols connections.*|show connections.*</allow-commands><deny-commands>(file.*)|(request.*)|(save.*)|(start.*)|(test.*)|(set cli.*)|(set date.*)|(clear.*)|(help.*)|(telnet.*)|(ssh.*)|(traceroute.*)|(mtrace.*)|(monitor.*)|(ping.*)|(set.*)</deny-commands><allow-configuration-regexps>interfaces .*</allow-configuration-regexps><allow-configuration-regexps>protocols l2circuit.*</allow-configuration-regexps><allow-configuration-regexps>protocols connections .*</allow-configuration-regexps><allow-configuration-regexps>protocols connections interface-switch .*</allow-configuration-regexps><deny-configuration-regexps>vmhost .*</deny-configuration-regexps><deny-configuration-regexps>session-limit-group .*</deny-configuration-regexps><deny-configuration-regexps>multi-chassis .*</deny-configuration-regexps><deny-configuration-regexps>jsrc-partition .*</deny-configuration-regexps><deny-configuration-regexps>jsrc .*</deny-configuration-regexps><deny-configuration-regexps>groups .*</deny-configuration-regexps><deny-configuration-regexps>dynamic-profiles .*</deny-configuration-regexps><deny-configuration-regexps>diameter .*</deny-configuration-regexps><deny-configuration-regexps>apply-groups .*</deny-configuration-regexps><deny-configuration-regexps>access-profile .*</deny-configuration-regexps><deny-configuration-regexps>interfaces traceoptions .*</deny-configuration-regexps><deny-configuration-regexps>interfaces interface-set .*</deny-configuration-regexps><deny-configuration-regexps>interfaces interface-range .*</deny-configuration-regexps><deny-configuration-regexps>interfaces apply-groups .*</deny-configuration-regexps><deny-configuration-regexps>interfaces apply-groups-except .*</deny-configuration-regexps><deny-configuration-regexps>interfaces lt-.*</deny-configuration-regexps><deny-configuration-regexps>interfaces ms-.*</deny-configuration-regexps><deny-configuration-regexps>interfaces si-.*</deny-configuration-regexps><deny-configuration-regexps>interfaces gr-.*</deny-configuration-regexps><deny-configuration-regexps>interfaces lo.*</deny-configuration-regexps><deny-configuration-regexps>interfaces dsc.*</deny-configuration-regexps><deny-configuration-regexps>interfaces irb.*</deny-configuration-regexps></class><class><name>readonly-permissions</name><idle-timeout>15</idle-timeout><permissions>view</permissions><permissions>view-configuration</permissions><allow-commands>show .*|quit|ping .*|monitor .*|traceroute .*|file archive .*</allow-commands></class><class><name>restricted-mon</name><idle-timeout>5</idle-timeout><permissions>access</permissions><permissions>admin</permissions><permissions>firewall</permissions><permissions>interface</permissions><permissions>routing</permissions><permissions>snmp</permissions><permissions>system</permissions><permissions>trace</permissions><permissions>view</permissions></class><class><name>srv_lnetd</name><idle-timeout>5</idle-timeout><permissions>network</permissions><permissions>routing</permissions><allow-commands>(exit|show isis.*|show bgp.*|show interfaces.*|show chassis.*|set cli.*|ping.*)</allow-commands><deny-commands>(show.*|ssh.*|telnet.*|traceroute.*|clear.*|file.*|load.*|op.*|request.*|save.*|scp.*|set.*|start.*|test.*|mtrace.*)</deny-commands></class><user><name>DANTE</name><uid>2000</uid><class>DANTE-Class</class></user><user><name>Monit0r</name><full-name>Monitor</full-name><uid>2001</uid><class>dante</class><authentication><undocumented><ssh-dsa><name>/* SECRET-DATA */</name></ssh-dsa></undocumented></authentication></user><user><name>NOC</name><uid>2002</uid><class>NOC-Class</class></user><user><name>ansible</name><uid>2003</uid><class>NOC-Class</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>ccssupport</name><uid>2004</uid><class>readonly-permissions</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>cnis</name><uid>2005</uid><class>isisView</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>cnis-dev</name><uid>2006</uid><class>nrn</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>cnis-prod</name><uid>2007</uid><class>nrn</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>erikr</name><uid>2008</uid><class>read-only</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>fod</name><uid>2009</uid><class>FoD</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>geant-ne-na</name><uid>2010</uid><class>super-user</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>goc</name><full-name>GEANT OC - Local Backup Account</full-name><uid>32023</uid><class>super-user</class><authentication><ssh-ed25519><name>/* SECRET-DATA */</name></ssh-ed25519></authentication></user><user><name>junosrestore</name><full-name>Emergency Router Restore Login</full-name><uid>2011</uid><class>super-user</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>mdvpn-si</name><uid>2012</uid><class>mdvpn-si</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>ncc</name><full-name>NOC Team Backup Account</full-name><uid>2013</uid><class>super-user</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>nemo</name><uid>2035</uid><class>nemo</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa><ssh-ed25519><name>/* SECRET-DATA */</name></ssh-ed25519><ssh-ed25519><name>/* SECRET-DATA */</name></ssh-ed25519><ssh-ed25519><name>/* SECRET-DATA */</name></ssh-ed25519></authentication></user><user><name>nessus.geant</name><uid>2014</uid><class>nessus</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>nomios_support</name><full-name>Nomios Remote Support Account</full-name><uid>2036</uid><class>nomios</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>nren</name><uid>2015</uid><class>nren</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>opennsa</name><uid>2016</uid><class>opennsa</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>opnet</name><full-name>OPNET NEOP Planning system @ 62.40.105.114</full-name><uid>2017</uid><class>dante</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>opsdbv2</name><uid>2018</uid><class>readonly-permissions</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>oxidized</name><uid>2019</uid><class>config_backup</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>python</name><uid>2020</uid><class>NOC-Class</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>reporting</name><uid>2021</uid><class>readonly-permissions</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>restena</name><full-name>NREN RESTENA</full-name><uid>2022</uid><class>nrn</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>restricted-mon</name><uid>2023</uid><class>restricted-mon</class><authentication><undocumented><ssh-dsa><name>/* SECRET-DATA */</name></ssh-dsa></undocumented></authentication></user><user><name>ruby</name><full-name>NOC Ruby script account</full-name><uid>2024</uid><class>level1</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>space</name><full-name>NCC - Junos Space application login</full-name><uid>2025</uid><class>geantnms</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>space15.2R2.4-paris</name><uid>2026</uid><class>super-user</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>space17.1R1.7-london</name><uid>2027</uid><class>super-user</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>srv-space-ssh</name><uid>2050</uid><class>super-user</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>srv_ims</name><full-name>VC4 IMS Mediation servers</full-name><uid>2028</uid><class>restricted-mon</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><user><name>srv_lg_all</name><full-name>LookingGlassUser</full-name><uid>2029</uid><class>dante</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>srv_lnetd</name><full-name>LnetD tool user @ uat-ne-lnetd.geant.net VM</full-name><uid>2030</uid><class>srv_lnetd</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>srv_ne_scripts</name><uid>2031</uid><class>NOC-Class</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>srv_oc_scripts</name><uid>2032</uid><class>NOC-Class</class><authentication><ssh-rsa><name>/* SECRET-DATA */</name></ssh-rsa></authentication></user><user><name>srv_opnet</name><full-name>Riverbed Opnet NetIM VM LON2 62.40.99.51</full-name><uid>2033</uid><class>restricted-mon</class><authentication><encrypted-password>/* SECRET-DATA */</encrypted-password></authentication></user><password><minimum-length>10</minimum-length><minimum-numerics>1</minimum-numerics><minimum-upper-cases>1</minimum-upper-cases><minimum-lower-cases>1</minimum-lower-cases><minimum-punctuations>1</minimum-punctuations></password><message>----------------------------------------------------------------\n\n This is mx2.zag.hr geant.net, a GEANT Router in Zagreb, Croatia \n Warning: Unauthorized access to this equipment is strictly forbidden and will lead to prosecution \n\n-------------------------------------------------------------\n</message></login><services><ssh><root-login>deny</root-login><no-tcp-forwarding/><protocol-version>v2</protocol-version><max-sessions-per-connection>32</max-sessions-per-connection><sftp-server/><connection-limit>125</connection-limit><rate-limit>150</rate-limit></ssh><netconf><ssh>
+ </ssh></netconf></services><domain-name>geant.net</domain-name><domain-search>geant2.net</domain-search><domain-search>geant.net</domain-search><backup-router><address>172.16.40.254</address><destination>172.16.5.252/30</destination></backup-router><time-zone>UTC</time-zone><switchover-on-routing-crash/><authentication-order>radius</authentication-order><authentication-order>password</authentication-order><location><country-code>HR</country-code></location><name-server><name>83.97.93.200</name></name-server><radius-server><name>83.97.94.130</name><timeout>2</timeout><source-address>62.40.96.8</source-address></radius-server><radius-server><name>83.97.94.129</name><timeout>2</timeout><source-address>62.40.96.8</source-address></radius-server><static-host-mapping><name>ts1.zag.hr</name><inet>172.16.40.254</inet></static-host-mapping><static-host-mapping><name>lo0</name><inet>62.40.96.8</inet></static-host-mapping><syslog><user><name>*</name><contents><name>any</name><emergency/></contents></user><host><name>83.97.94.11</name><contents><name>any</name><any/></contents><match>!(kernel:rts_commi.*|RPD_MSDP_SRC_ACTIVE.*|rtslib_dfwsm_get_async_cb:*|USF.*|.*ppe_img_ucode_redistribute.*|.*nd6-change.*|UI_CHILD.*|PFED_NOTIF_GLOBAL_STAT_UNKNOWN|PFED_NOTIF_STAT_UNKNOWN|kernel: MTU for *)</match></host><file><name>messages</name><contents><name>any</name><notice/></contents><contents><name>authorization</name><info/></contents><match>!(RPD_MSDP_SRC_ACTIVE.*|in6_services_jfm_rnhoutput_internal.*|.*ppe_img_ucode_redistribute.*|RMOPD_TWAMP_SOCKOPT_FAILURE)</match><archive><size>10m</size><files>10</files></archive></file><file><name>interactive-commands</name><contents><name>interactive-commands</name><any/></contents><archive><size>10m</size><files>10</files></archive></file><file><name>authorization</name><contents><name>authorization</name><any/></contents></file><file><name>firewall-log</name><contents><name>firewall</name><critical/></contents></file><file><name>daemon</name><contents><name>daemon</name><error/></contents></file><file><name>conf-history</name><contents><name>conflict-log</name><any/></contents><contents><name>change-log</name><any/></contents><archive><size>10m</size><files>10</files></archive></file><file><name>net-alarms</name><contents><name>daemon</name><warning/></contents></file><file><name>low-messages</name><contents><undocumented><name>cron</name></undocumented><notice/></contents><contents><name>kernel</name><notice/></contents><contents><name>user</name><notice/></contents><contents><name>pfe</name><notice/></contents><match>!(.*ppe_img_ucode_redistribute.*)</match></file><file><name>high-messages</name><contents><undocumented><name>cron</name></undocumented><error/></contents><contents><name>kernel</name><error/></contents><contents><name>user</name><error/></contents><contents><name>pfe</name><error/></contents><match>(!PCF8584) | (!CHASSISD_VOLTAGE_SENSOR_INIT)</match></file><file><name>commands-log</name><contents><name>interactive-commands</name><info/></contents></file><file><name>dnoc-events</name><contents><name>daemon</name><info/></contents><match>.*SNMP_TRAP_LINK_.*|.*RPD_BGP_NEIGHBOR_STATE_CHANGED.*|.*SNMPD_TRAP_COLD_START.*</match><archive><size>10m</size><files>10</files></archive></file><file><name>default-log-messages</name><contents><name>any</name><info/></contents><match>(requested 'commit' operation)|(requested 'commit synchronize' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|CFMD_CCM_DEFECT| LFMD_3AH | RPD_MPLS_PATH_BFD|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)|(AIS_DATA_AVAILABLE)</match><structured-data>
+ </structured-data></file><file><name>pfed</name><contents><name>pfe</name><any/></contents><match>!(.*ppe_img_ucode_redistribute.*)</match><archive><size>20m</size><files>10</files></archive></file><file><name>messages_firewall_any</name><contents><name>firewall</name><any/></contents><archive><size>10m</size><files>5</files></archive></file><time-format><year/><millisecond/></time-format><source-address>62.40.96.8</source-address></syslog><ntp><authentication-key><name>10</name><type>md5</type><value>/* SECRET-DATA */</value></authentication-key><server><name>62.40.123.21</name><key>/* SECRET-DATA */</key></server><server><name>62.40.123.23</name><key>/* SECRET-DATA */</key></server><server><name>62.40.123.103</name><key>/* SECRET-DATA */</key></server><server><name>216.239.35.0</name></server><server><name>216.239.35.4</name></server><server><name>193.62.22.66</name></server><server><name>192.87.106.2</name></server><server><name>193.204.114.233</name></server><server><name>195.113.144.201</name></server><server><name>192.53.103.108</name></server><trusted-key>10</trusted-key><source-address><name>62.40.96.8</name></source-address></ntp></system><chassis><undocumented><dump-on-panic/></undocumented><redundancy><routing-engine><name>0</name><master/></routing-engine><routing-engine><name>1</name><backup/></routing-engine><failover><on-loss-of-keepalives/><on-disk-failure/></failover><graceful-switchover>
+ </graceful-switchover></redundancy><routing-engine><disk><smart-check/></disk></routing-engine><aggregated-devices><ethernet><device-count>32</device-count></ethernet></aggregated-devices><fabric><redundancy-mode><increased-bandwidth/></redundancy-mode></fabric><fpc><name>0</name><pic><name>0</name><tunnel-services><bandwidth>10g</bandwidth></tunnel-services><inline-services><bandwidth>1g</bandwidth></inline-services></pic><sampling-instance><name>ipfx</name></sampling-instance><inline-services><flex-flow-sizing/></inline-services></fpc><fpc><name>1</name><pic><name>2</name><adaptive-services><service-package><extension-provider><syslog><name>daemon</name><critical/></syslog></extension-provider></service-package></adaptive-services></pic><sampling-instance><name>ipfx</name></sampling-instance><inline-services><flex-flow-sizing/></inline-services></fpc><fpc><name>2</name><sampling-instance><name>ipfx</name></sampling-instance><inline-services><flex-flow-sizing/></inline-services></fpc><fpc><name>3</name><pic><name>0</name><pic-mode>100G</pic-mode></pic><pic><name>1</name><pic-mode>100G</pic-mode></pic><sampling-instance><name>ipfx</name></sampling-instance><inline-services><flex-flow-sizing/></inline-services></fpc><fpc><name>4</name><pic><name>0</name><pic-mode>100G</pic-mode></pic><pic><name>1</name><pic-mode>100G</pic-mode></pic><sampling-instance><name>ipfx</name></sampling-instance><inline-services><flex-flow-sizing/></inline-services></fpc><fpc><name>5</name><pic><name>0</name><pic-mode>100G</pic-mode></pic><pic><name>1</name><pic-mode>100G</pic-mode></pic><sampling-instance><name>ipfx</name></sampling-instance><inline-services><flex-flow-sizing/></inline-services></fpc><network-services>enhanced-ip</network-services></chassis><services><flow-monitoring><version-ipfix><template><name>ipv4</name><flow-active-timeout>60</flow-active-timeout><flow-inactive-timeout>60</flow-inactive-timeout><nexthop-learning><enable/></nexthop-learning><template-refresh-rate><seconds>300</seconds></template-refresh-rate><option-refresh-rate><seconds>300</seconds></option-refresh-rate><ipv4-template>
+ </ipv4-template></template><template><name>ipv6</name><flow-active-timeout>60</flow-active-timeout><flow-inactive-timeout>60</flow-inactive-timeout><nexthop-learning><enable/></nexthop-learning><template-refresh-rate><seconds>300</seconds></template-refresh-rate><option-refresh-rate><seconds>300</seconds></option-refresh-rate><ipv6-template>
+ </ipv6-template></template></version-ipfix></flow-monitoring><rpm><probe><name>iGEANT_mx2.lis.pt_62.40.96.17</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.17</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.bud.hu_62.40.97.1</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.1</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.lon.uk_62.40.97.5</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.5</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.vie.at_62.40.97.7</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.7</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.poz.pl_62.40.97.10</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.10</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.ams.nl_62.40.97.11</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.11</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.fra.de_62.40.97.12</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.12</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.par.fr_62.40.97.13</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.13</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.gen.ch_62.40.97.14</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.14</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.mad.es_62.40.97.16</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.97.16</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx2.ath.gr_62.40.96.11</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.11</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.buc.ro_62.40.96.19</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.19</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.sof.bg_62.40.96.21</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.21</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.ham.de_62.40.96.26</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.26</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.lon2.uk_62.40.96.15</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.15</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.dub.ie_62.40.96.3</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.3</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.dub2.ie_62.40.96.25</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.25</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_mx1.ath2.gr_62.40.96.39</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.39</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.kau.lt_62.40.96.52</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.52</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.kau.lt_62.40.96.53</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.53</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.rig.lv_62.40.96.58</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.58</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.rig.lv_62.40.96.59</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.59</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.ams.nl_62.40.96.62</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.62</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.por.pt_62.40.96.36</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.36</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.bil.es_62.40.96.42</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.42</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.kie.ua_62.40.96.1</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.1</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.kie.ua_62.40.96.68</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.68</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.chi.md_62.40.96.2</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.2</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.chi.md_62.40.96.4</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.4</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.bra.sk_62.40.96.54</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.54</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.mar.fr_62.40.96.5</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.5</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.mil2.it_62.40.96.6</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.6</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.pra.cz_62.40.96.47</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.47</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.fra.de_62.40.96.22</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.22</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.bru.be_62.40.96.33</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.33</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.bru.be_62.40.96.48</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.48</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.ham.de_62.40.96.50</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.50</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.tar.ee_62.40.96.20</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.20</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.tar.ee_62.40.96.49</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.49</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.sof.bg_62.40.96.56</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.56</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.bra.sk_62.40.96.55</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.55</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.lju01.si_62.40.96.70</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.70</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.cor.ie_62.40.96.57</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.57</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.buc.ro_62.40.96.7</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.7</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt2.cor.ie_62.40.96.69</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.69</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>iGEANT_rt1.ams.nl_62.40.96.71</name><test><name>icmp-test</name><probe-type>icmp-ping-timestamp</probe-type><target><address>62.40.96.71</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>300</test-interval><history-size>512</history-size><hardware-timestamp/></test></probe><probe><name>eGEANT_AS211080_62.40.124.67</name><test><name>icmp-test</name><probe-type>icmp-ping</probe-type><target><address>62.40.124.67</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>3600</test-interval><history-size>512</history-size></test></probe><probe><name>eGEANT_AS13092_62.40.125.63</name><test><name>icmp-test</name><probe-type>icmp-ping</probe-type><target><address>62.40.125.63</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>3600</test-interval><history-size>512</history-size></test></probe><probe><name>eGEANT_AS1955_62.40.124.18</name><test><name>icmp-test</name><probe-type>icmp-ping</probe-type><target><address>62.40.124.18</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>3600</test-interval><history-size>512</history-size></test></probe><probe><name>eGEANT_AS2108_62.40.124.10</name><test><name>icmp-test</name><probe-type>icmp-ping</probe-type><target><address>62.40.124.10</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>3600</test-interval><history-size>512</history-size></test></probe><probe><name>eGEANT_AS2107_62.40.124.6</name><test><name>icmp-test</name><probe-type>icmp-ping</probe-type><target><address>62.40.124.6</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>3600</test-interval><history-size>512</history-size></test></probe><probe><name>eGEANT_AS44224_62.40.125.254</name><test><name>icmp-test</name><probe-type>icmp-ping</probe-type><target><address>62.40.125.254</address></target><probe-count>10</probe-count><probe-interval>6</probe-interval><test-interval>3600</test-interval><history-size>512</history-size></test></probe><probe-limit>500</probe-limit><twamp><server><authentication-mode><none/></authentication-mode><max-connection-duration>1</max-connection-duration><maximum-sessions>100</maximum-sessions><maximum-sessions-per-connection>50</maximum-sessions-per-connection><maximum-connections>50</maximum-connections><maximum-connections-per-client>10</maximum-connections-per-client><port>862</port><client-list><name>WP6_LOLA</name><address><name>194.81.18.224/27</name></address><address><name>193.219.48.249/32</name></address><address><name>193.219.48.250/32</name></address></client-list><client-list><name>GEANT_PERFSONAR</name><address><name>62.40.106.157/32</name></address><address><name>62.40.104.197/32</name></address><address><name>62.40.106.129/32</name></address><address><name>62.40.106.137/32</name></address><address><name>62.40.106.145/32</name></address><address><name>62.40.106.149/32</name></address><address><name>62.40.106.153/32</name></address><address><name>62.40.106.165/32</name></address><address><name>62.40.106.169/32</name></address><address><name>62.40.106.193/32</name></address><address><name>62.40.106.197/32</name></address><address><name>62.40.106.255/32</name></address><address><name>62.40.106.81/32</name></address><address><name>62.40.114.45/32</name></address><address><name>62.40.114.51/32</name></address><address><name>62.40.114.57/32</name></address><address><name>62.40.114.63/32</name></address><address><name>62.40.114.69/32</name></address><address><name>62.40.114.75/32</name></address><address><name>62.40.114.81/32</name></address><address><name>62.40.114.85/32</name></address><address><name>62.40.114.99/32</name></address><address><name>62.40.126.155/32</name></address><address><name>62.40.126.179/32</name></address><address><name>62.40.126.187/32</name></address><address><name>62.40.126.191/32</name></address><address><name>62.40.126.27/32</name></address><address><name>62.40.123.61/32</name></address><address><name>62.40.123.62/32</name></address><address><name>62.40.107.221/32</name></address></client-list><client-list><name>GEANT_CORE</name><address><name>62.40.97.138/31</name></address><address><name>62.40.97.214/31</name></address><address><name>62.40.97.222/31</name></address></client-list></server></twamp></rpm></services><interfaces><apply-groups>re0</apply-groups><apply-groups>re1</apply-groups><apply-groups>load-balance-adaptive</apply-groups><interface><name>lt-0/0/0</name><description>TUN INFRASTRUCTURE ACCESS SRF0000001 </description><unit><name>16</name><description>SRV_GLOBAL INFRASTRUCTURE ACCESS IAS #BGPPeering-zag-hr-RE-IAS| BGP Peering - RE Side</description><encapsulation>ethernet</encapsulation><peer-unit>61</peer-unit><family><inet><filter><input><filter-name>bone-in</filter-name></input><output><filter-name>bone-out</filter-name></output></filter><address><name>83.97.89.196/31</name></address></inet><inet6><filter><input><filter-name>bone6-in</filter-name></input><output><filter-name>bone6-out</filter-name></output></filter><address><name>2001:798:1::189/126</name></address></inet6></family></unit><unit><name>61</name><description>SRV_IAS INFRASTRUCTURE ACCESS GLOBAL #ZAG-IAS-RE-Peering | BGP Peering - IAS Side</description><encapsulation>ethernet</encapsulation><peer-unit>16</peer-unit><family><inet><address><name>83.97.89.197/31</name></address></inet><inet6><address><name>2001:798:1::18a/126</name></address></inet6></family></unit></interface><interface><name>si-0/0/0</name><unit><name>0</name><family><inet>
+ </inet></family></unit><unit><name>10</name><rpm><twamp-server/></rpm><family><inet><address><name>62.40.97.196/32</name></address></inet></family></unit><unit><name>20</name><rpm><twamp-client/></rpm><family><inet><address><name>62.40.97.197/32</name></address></inet></family></unit></interface><interface><name>xe-0/0/0</name><description>PHY SPARE</description><disable/><framing><lan-phy/></framing></interface><interface><name>xe-0/0/1</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-0/1/0</name><description>PHY SPARE</description></interface><interface><name>xe-0/1/1</name><description>PSY SPARE</description><disable/><gigether-options><ieee-802.3ad><bundle>ae11</bundle></ieee-802.3ad></gigether-options></interface><interface><name>ge-0/2/0</name><description>PHY INFRASTRUCTURE ACCESS LAN SRF0000001 | to ge1.hr.geant.net - a Cisco 3524 in Rack 10</description></interface><interface><name>ge-0/2/1</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/2/2</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/2/3</name><description>PHY INFRASTRUCTURE ACCESS INFINERA SRF0000001 | ZAG01-DTNX10-1 XCM 1</description><unit><name>0</name><family><bridge><interface-mode>access</interface-mode><vlan-id>999</vlan-id></bridge></family></unit></interface><interface><name>ge-0/2/4</name><description>PHY SPARE</description><disable/><unit><name>0</name><family><inet><filter><input-list>PROTECTED_EXTERNAL_HEAD_IN</input-list><input-list>PROTECTED_EXTERNAL_TAIL_IN</input-list><output-list>PROTECTED_EXTERNAL_HEAD_OUT</output-list><output-list>PROTECTED_EXTERNAL_TAIL_OUT</output-list><output-list>PROTECTED_EXTERNAL_MIDDLE_IN</output-list><output-list>PROTECTED_EXTERNAL_MIDDLE_OUT</output-list></filter><address><name>62.40.108.45/30</name></address></inet><inet6><filter><input-list>PROTECTED_EXTERNAL_V6_HEAD_IN</input-list><input-list>PROTECTED_EXTERNAL_V6_TAIL_IN</input-list><output-list>PROTECTED_EXTERNAL_V6_HEAD_OUT</output-list><output-list>PROTECTED_EXTERNAL_V6_TAIL_OUT</output-list><output-list>PROTECTED_EXTERNAL_V6_MIDDLE_IN</output-list><output-list>PROTECTED_EXTERNAL_V6_MIDDLE_OUT</output-list></filter><address><name>2001:798:fc01:2d::9/126</name></address></inet6></family></unit></interface><interface><name>ge-0/2/5</name><description>PHY SPARE</description><disable/><unit><name>0</name><family><inet><filter><input-list>PROTECTED_EXTERNAL_HEAD_IN</input-list><input-list>VL000_MIDDLE_IN</input-list><input-list>PROTECTED_EXTERNAL_TAIL_IN</input-list><output-list>PROTECTED_EXTERNAL_HEAD_OUT</output-list><output-list>PROTECTED_EXTERNAL_TAIL_OUT</output-list></filter><address><name>62.40.108.49/30</name></address></inet><inet6><filter><input-list>PROTECTED_EXTERNAL_V6_HEAD_IN</input-list><input-list>PROTECTED_EXTERNAL_V6_TAIL_IN</input-list><output-list>PROTECTED_EXTERNAL_V6_HEAD_OUT</output-list><output-list>PROTECTED_EXTERNAL_V6_TAIL_OUT</output-list></filter><address><name>2001:798:fc01:2d::d/126</name></address></inet6></family></unit></interface><interface><name>ge-0/2/6</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/2/7</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/2/8</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/2/9</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/3/0</name><description>PHY INFRASTRUCTURE ACCESS INFINERA SRF0000001 | ZAG01-DTNX10-1 XCM 2</description><unit><name>0</name><family><bridge><interface-mode>access</interface-mode><vlan-id>999</vlan-id></bridge></family></unit></interface><interface><name>ge-0/3/1</name><description>PHY SPARE NON-OPERATIONAL</description><disable/></interface><interface><name>ge-0/3/2</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/3/3</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/3/4</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/3/5</name><description>PHY PRIVATE OPTIMA-TELEKOM SRF9928535 $GA-01493 | ASN34594 | For Eduzone</description><mtu>1514</mtu><unit><name>0</name><description>SRV_IAS PRIVATE OPTIMA-TELEKOM #HR-EduZone $GS-00936 | For Eduzone</description><family><inet><mtu>1500</mtu><filter><input><filter-name>OPTIMA-TELEKOM-in</filter-name></input><output><filter-name>OPTIMA-TELEKOM-out</filter-name></output></filter><address><name>62.40.124.120/31</name></address></inet><inet6><mtu>1500</mtu><filter><input><filter-name>OPTIMA-TELEKOM6-in</filter-name></input><output><filter-name>OPTIMA-TELEKOM6-out</filter-name></output></filter><address><name>2001:798:99:1::1d/126</name></address></inet6></family></unit></interface><interface><name>ge-0/3/6</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/3/7</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/3/8</name><description>PHY SPARE</description><disable/></interface><interface><name>ge-0/3/9</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-1/0/0</name><description>PSY SPARE</description><disable/><gigether-options><ieee-802.3ad><bundle>ae11</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-1/0/1</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-1/1/0</name><description>PSY SPARE</description><disable/><gigether-options><ieee-802.3ad><bundle>ae11</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-1/1/1</name><description>PHY SPARE</description><disable/><framing><lan-phy/></framing></interface><interface><name>ms-1/2/0</name><unit><name>0</name><family><inet>
+ </inet></family></unit><unit><name>1</name><family><inet6>
+ </inet6></family></unit><unit><name>2</name><family><mpls>
+ </mpls></family></unit></interface><interface><name>xe-2/0/0</name><description>PHY CUSTOMER MARNET P_AE17 SRF9917499 |Neotel ID: CIETH1N00048|</description><gigether-options><ieee-802.3ad><bundle>ae17</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-2/0/1</name><description>PHY SPARE | Patched t0 ZAG01-GRV6 subport-1/3/3.2</description></interface><interface><name>xe-2/0/2</name><description>PHY SPARE | Patched t0 ZAG01-GRV6 subport-1/3/3.3</description><gigether-options><ieee-802.3ad><bundle>ae11</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-2/0/3</name><description>PHY SPARE | Patched t0 ZAG01-GRV6 subport-1/3/3.4</description><gigether-options><ieee-802.3ad><bundle>ae11</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-2/0/4</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/0/5</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/0/6</name><description>PHY RESERVED | University of Mostar (SUM) </description><disable/></interface><interface><name>xe-2/0/7</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/1/0</name><description>PHY PRIVATE SETCOR SRF21033 P_AE12 | </description><gigether-options><ieee-802.3ad><bundle>ae12</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-2/1/1</name><description>PHY CUSTOMER KREN P_AE13 SRF21110 | #KREN-AP1-LL1 | </description><gigether-options><ieee-802.3ad><bundle>ae13</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-2/1/2</name><description>PHY INFRASTRUCTURE ACCESS LAN P_AE1 SRF0000001 | mx2-sw1 (ex3400)</description><undocumented><enable/></undocumented><gigether-options><ieee-802.3ad><bundle>ae1</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-2/1/3</name><description>PHY INFRASTRUCTURE ACCESS LAN P_AE1 SRF0000001 | mx2-sw1 (ex3400)</description><undocumented><enable/></undocumented><gigether-options><ieee-802.3ad><bundle>ae1</bundle></ieee-802.3ad></gigether-options></interface><interface><name>xe-2/1/4</name><description>PHY UPSTREAM LUMEN $GA-02099 |Lumen ID 444246144</description><mtu>9192</mtu><encapsulation>ethernet-ccc</encapsulation><unit><name>0</name><description>SRV_L2CIRCUIT CUSTOMER ARNES LUMEN #zag-zag-ARNES-LUMEN-22026 $GS-02098 |</description><input-vlan-map><push/><vlan-id>340</vlan-id></input-vlan-map><output-vlan-map><pop/></output-vlan-map><family><ccc>
+ </ccc></family></unit></interface><interface><name>xe-2/1/5</name><description>PHY RESERVED | MREN | Optic installed</description><mtu>9192</mtu><unit><name>0</name><family><inet><address><name>172.16.60.1/24</name></address></inet></family></unit></interface><interface><name>xe-2/1/6</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/1/7</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/2/0</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/2/1</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/2/2</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/2/3</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/2/4</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/2/5</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/2/6</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/2/7</name><description>PHY SPARE</description><disable/></interface><interface><name>xe-2/3/0</name><description>PHY SPARE</description></interface><interface><name>xe-2/3/1</name><description>PHY SPARE</description></interface><interface><name>xe-2/3/2</name><description>PHY SPARE</description></interface><interface><name>xe-2/3/3</name><description>PHY SPARE</description></interface><interface><name>xe-2/3/4</name><description>PHY SPARE</description></interface><interface><name>xe-2/3/5</name><description>PHY SPARE</description></interface><interface><name>xe-2/3/6</name><description>PHY SPARE</description></interface><interface><name>xe-2/3/7</name><description>PHY SPARE</description></interface><interface><name>et-3/0/2</name><description>PHY INFRASTRUCTURE | GN4-3N BUD-ZAG 200Gb 1_2 ZAG01-GRV3 1/1/3</description><gigether-options><ieee-802.3ad><bundle>ae5</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-3/0/5</name><description>PHY INFRASTRUCTURE | GN4-3N BUD-ZAG 200Gb 2_2 ZAG01-GRV3 1/1/4</description><gigether-options><ieee-802.3ad><bundle>ae5</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-3/1/2</name><description>PHY CUSTOMER AMRES P_AE16 SRF22095 |To Node:ZAG01-GRV6 1/1/3</description><gigether-options><ieee-802.3ad><bundle>ae16</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-3/1/5</name><description>PHY CUSTOMER CARNET P_AE12 SRF9926991 | CARNet AP1 #1 part of ae12</description><gigether-options><ieee-802.3ad><bundle>ae14</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-4/0/2</name><description>PHY INFRASTRUCTURE BACKBONE P_ae6 | LJU01-ZAG</description><gigether-options inactive="inactive"><loopback/><ieee-802.3ad inactive="inactive"><bundle>ae6</bundle></ieee-802.3ad></gigether-options><unit><name>0</name><family><inet><address><name>192.168.100.10/24</name><arp><name>192.168.100.20</name><mac>ac:4b:c8:42:bd:30</mac></arp></address></inet></family></unit></interface><interface><name>et-4/0/5</name><description>PHY INFRASTRUCTURE BACKBONE P_ae6 | LJU01-ZAG</description><gigether-options><ieee-802.3ad><bundle>ae6</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-4/1/2</name><description>PHY CUSTOMER KIFU AP2 P_AE18 | (ZAG01-GRV4) 1/1/3 </description><gigether-options><ieee-802.3ad><bundle>ae18</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-4/1/5</name><description>PHY SPARE | QSFP-100GBASE-SR4 installed</description></interface><interface><name>et-5/0/2</name><description>PHY CUSTOMER ARNES P_AE10 | ARNES AP2-100G LL1 (ZAG01-GRV1) 1/1/3</description><gigether-options><ieee-802.3ad><bundle>ae10</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-5/0/5</name><description>PHY CUSTOMER ARNES P_AE10 | ARNES AP2-100G LL2 (ZAG01-GRV1) 1/1/4</description><gigether-options><ieee-802.3ad><bundle>ae10</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-5/1/2</name><description>PHY INFRASTRUCTURE BACKBONE P_ae0 | SOF-ZAG</description><gigether-options><ieee-802.3ad><bundle>ae0</bundle></ieee-802.3ad></gigether-options></interface><interface><name>et-5/1/5</name><description>PHY INFRASTRUCTURE BACKBONE P_ae0 | SOF-ZAG</description><gigether-options><ieee-802.3ad><bundle>ae0</bundle></ieee-802.3ad></gigether-options></interface><interface><name>ae0</name><description>LAG INFRASTRUCTURE BACKBONE $GA-02369 | SOF-ZAG</description><mtu>9192</mtu><aggregated-ether-options><bfd-liveness-detection><minimum-interval>3000</minimum-interval><neighbor>62.40.96.56</neighbor><local-address>62.40.96.8</local-address></bfd-liveness-detection><minimum-links>1</minimum-links><lacp><active/><periodic>fast</periodic></lacp></aggregated-ether-options><unit><name>0</name><description>SRV_GLOBAL INFRASTRUCTURE BACKBONE #SOF-ZAG-IPTRUNK $GS-02367| SOF-ZAG</description><family><inet><accounting><source-class-usage><input/></source-class-usage></accounting><mtu>9000</mtu><filter><input><filter-name>bone-in</filter-name></input><output><filter-name>bone-out</filter-name></output></filter><address><name>62.40.98.9/31</name></address></inet><iso>
+ </iso><inet6><mtu>9000</mtu><filter><input><filter-name>bone6-in</filter-name></input><output><filter-name>bone6-out</filter-name></output></filter><address><name>2001:798:cc:1::11a/126</name></address></inet6><mpls><maximum-labels>5</maximum-labels></mpls></family></unit></interface><interface><name>ae1</name><description>LAG INFRASTRUCTURE ACCESS LAN SRF0000001 |mx2-sw1(ex3400)</description><flexible-vlan-tagging/><mtu>9192</mtu><encapsulation>flexible-ethernet-services</encapsulation><aggregated-ether-options><minimum-links>1</minimum-links><lacp><active/><periodic>fast</periodic></lacp></aggregated-ether-options><unit><name>103</name><description>SRV_GLOBAL INFRASTRUCTURE Access #DCN_MANAGEMENT_ZAG | </description><vlan-id>103</vlan-id><family><inet><filter inactive="inactive"><input><filter-name>CORIANT_MGMT_IN</filter-name></input><output><filter-name>CORIANT_MGMT_OUT</filter-name></output></filter><address><name>172.18.31.1/24</name></address></inet></family></unit><unit><name>998</name><description>SRV_GLOBAL INFRASTRUCTURE ACCESS #ex3400-management-zag-hr| SW1-EX3400 MANAGEMENT</description><vlan-id>998</vlan-id><family><inet><address><name>62.40.117.248/31</name></address></inet></family></unit></interface><interface><name>ae5</name><description>LAG INFRASTRUCTURE BACKBONE $GA-01909 | BUD-ZAG-GN43N | </description><mtu>9192</mtu><aggregated-ether-options><bfd-liveness-detection><minimum-interval>3000</minimum-interval><neighbor>62.40.97.1</neighbor><local-address>62.40.96.8</local-address></bfd-liveness-detection><minimum-links>2</minimum-links><lacp><active/><periodic>fast</periodic></lacp></aggregated-ether-options><unit><name>0</name><description>SRV_GLOBAL INFRASTRUCTURE BACKBONE #BUD-ZAG-IPTRUNK-GN43N $GS-00027 | BUD-ZAG |</description><family><inet><accounting><source-class-usage><input/></source-class-usage></accounting><mtu>9000</mtu><filter><input><filter-name>bone-in</filter-name></input><output><filter-name>bone-out</filter-name></output></filter><address><name>62.40.98.189/31</name></address></inet><iso>
+ </iso><inet6><mtu>9000</mtu><filter><input><filter-name>bone6-in</filter-name></input><output><filter-name>bone6-out</filter-name></output></filter><address><name>2001:798:cc:1::e6/126</name></address></inet6><mpls><maximum-labels>5</maximum-labels></mpls></family></unit></interface><interface><name>ae6</name><description>LAG INFRASTRUCTURE BACKBONE $GA-02374 | LJU01-ZAG</description><mtu>9192</mtu><aggregated-ether-options><bfd-liveness-detection><minimum-interval>3000</minimum-interval><neighbor>62.40.96.70</neighbor><local-address>62.40.96.8</local-address></bfd-liveness-detection><minimum-links>1</minimum-links><lacp><active/><periodic>fast</periodic></lacp></aggregated-ether-options><unit><name>0</name><description>SRV_GLOBAL INFRASTRUCTURE BACKBONE #LJU01-ZAG-IPTRUNK $GS-02372| LJU01-ZAG</description><family><inet><accounting><source-class-usage><input/></source-class-usage></accounting><mtu>9000</mtu><filter><input><filter-name>bone-in</filter-name></input><output><filter-name>bone-out</filter-name></output></filter><address><name>62.40.98.49/31</name></address></inet><iso>
+ </iso><inet6><mtu>9000</mtu><filter><input><filter-name>bone6-in</filter-name></input><output><filter-name>bone6-out</filter-name></output></filter><address><name>2001:798:cc:1::16/126</name></address></inet6><mpls><maximum-labels>5</maximum-labels></mpls></family></unit></interface><interface><name>ae10</name><description>LAG CUSTOMER ARNES $GA-01866 | ARNES-AP2-LAG</description><vlan-tagging/><mtu>9192</mtu><encapsulation>flexible-ethernet-services</encapsulation><aggregated-ether-options><link-speed>100g</link-speed><lacp><active/><periodic>fast</periodic></lacp></aggregated-ether-options><unit><name>100</name><description>SRV_GLOBAL CUSTOMER ARNES #ARNES-AP2 $GS-00427 | ASN2107 | ARNES AP2</description><vlan-id>100</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>9000</mtu><filter><input><filter-name>ARNES-in</filter-name></input><output><filter-name>ARNES-out</filter-name></output></filter><address><name>62.40.124.5/30</name></address></inet><iso>
+ </iso><inet6><mtu>9000</mtu><filter><input><filter-name>ARNES6-in</filter-name></input><output><filter-name>ARNES6-out</filter-name></output></filter><address><name>2001:0798:0010:10aa::5/126</name></address></inet6></family></unit><unit><name>111</name><description>SRV_L3VPN CUSTOMER ARNES #ARNES-AP2-LHCONE $GS-00808 | ASN2107</description><vlan-id>111</vlan-id><family><inet><mtu>9000</mtu><filter><input><filter-name>LHCONE-in</filter-name></input></filter><address><name>62.40.126.237/30</name></address></inet><inet6><mtu>9000</mtu><filter><input><filter-name>LHCONE6-in</filter-name></input><output><filter-name>LHCONE6-out</filter-name></output></filter><address><name>2001:798:111:1::9/126</name></address></inet6></family></unit><unit><name>333</name><description>SRV_IAS CUSTOMER ARNES #ARNES-AP2-IAS IASPS $GS-00553 | ASN2107</description><vlan-id>333</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>1500</mtu><filter><input><filter-name>nren_IAS_ARNES_IN</filter-name></input><output><filter-name>nren_IAS_ARNES_OUT</filter-name></output></filter><address><name>83.97.88.13/30</name></address></inet><inet6><mtu>1500</mtu><filter><input><filter-name>nren_IAS_ARNES_V6_IN</filter-name></input><output><filter-name>nren_IAS_ARNES_V6_OUT</filter-name></output></filter><address><name>2001:798:1::11/126</name></address></inet6></family></unit><unit><name>340</name><description>SRV_L2CIRCUIT CUSTOMER ARNES LUMEN #zag-zag-ARNES-LUMEN-22026 $GS-02098 | </description><encapsulation>vlan-ccc</encapsulation><vlan-id>340</vlan-id></unit></interface><interface><name>ae12</name><description>LAG PRIVATE SETCOR SRF21033 $GA-02000 |</description><mtu>1514</mtu><unit><name>0</name><description>SRV_IAS PRIVATE SETCOR #SETCOR-HR-61211 $GS-00942 | ASN 61211</description><family><inet><mtu>1500</mtu><filter><input><filter-name>SETCOR-in</filter-name></input><output><filter-name>SETCOR-out</filter-name></output></filter><address><name>185.203.16.35/29</name></address></inet></family></unit></interface><interface><name>ae13</name><description>LAG CUSTOMER KREN SRF21110 $GA-02154 | #KREN-AP1-LAG | </description><flexible-vlan-tagging/><mtu>9192</mtu><encapsulation>flexible-ethernet-services</encapsulation><aggregated-ether-options><minimum-links>1</minimum-links></aggregated-ether-options><unit><name>100</name><description>SRV_GLOBAL CUSTOMER KREN SRF21110 $GS-02153 #KREN-AP1 | ASN211080 | </description><vlan-id>100</vlan-id><family><inet><mtu>9000</mtu><filter><input><filter-name>KREN-in</filter-name></input><output><filter-name>KREN-out</filter-name></output></filter><address><name>62.40.124.66/31</name></address></inet><iso>
+ </iso><mpls>
+ </mpls></family></unit></interface><interface><name>ae14</name><description>LAG CUSTOMER CARNET SRF9927637 $GA-01865 | CARNet AP</description><flexible-vlan-tagging/><mtu>9192</mtu><encapsulation>flexible-ethernet-services</encapsulation><aggregated-ether-options><minimum-links>1</minimum-links><link-speed>100g</link-speed><lacp><active/><periodic>fast</periodic></lacp></aggregated-ether-options><unit><name>100</name><description>SRV_GLOBAL CUSTOMER CARNET #CARNET-AP1 $GS-00440 | ASN2108 |</description><vlan-id>100</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>9000</mtu><filter><input><filter-name>CARne-in</filter-name></input><output><filter-name>CARne-out</filter-name></output></filter><address><name>62.40.124.9/30</name></address></inet><inet6><filter><input><filter-name>CARne6-in</filter-name></input><output><filter-name>CARne6-out</filter-name></output></filter><address><name>2001:0798:0010:10aa::9/126</name></address></inet6></family></unit><unit><name>333</name><description>SRV_IAS CUSTOMER CARNET #CARNET-AP1-IAS IASPS $GS-00559 | ASN2108</description><vlan-id>333</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>1500</mtu><filter><input><filter-name>nren_IAS_CARNET_IN</filter-name></input><output><filter-name>nren_IAS_CARNET_OUT</filter-name></output></filter><address><name>83.97.88.25/30</name></address></inet><inet6><mtu>1500</mtu><filter><input><filter-name>nren_IAS_CARNET_V6_IN</filter-name></input><output><filter-name>nren_IAS_CARNET_V6_OUT</filter-name></output></filter><address><name>2001:798:1::1d/126</name></address></inet6></family></unit></interface><interface><name>ae16</name><description>LAG CUSTOMER AMRES SRF22095 $GA-01902 |</description><vlan-tagging/><mtu>9192</mtu><encapsulation>flexible-ethernet-services</encapsulation><aggregated-ether-options><minimum-links>1</minimum-links><lacp><active/></lacp></aggregated-ether-options><unit><name>1</name><description>SRV_GLOBAL CUSTOMER AMRES #AMRES-AP1 $GS-00425 | ASN13092 |</description><vlan-id>1</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>9000</mtu><filter><input><filter-name>AMRES-in</filter-name></input><output><filter-name>AMRES-out</filter-name></output></filter><address><name>62.40.125.62/31</name></address></inet><iso>
+ </iso><inet6><mtu>9000</mtu><filter><input><filter-name>AMRES6-in</filter-name></input><output><filter-name>AMRES6-out</filter-name></output></filter><address><name>2001:798:99:1::11d/126</name></address></inet6><mpls>
+ </mpls></family></unit><unit><name>10</name><description>SRV_MDVPN CUSTOMER AMRES #AMRES-AP1-BGP-LU-COC $GS-00997 | MDVPN CoC - AMRES</description><vlan-id>10</vlan-id><family><inet><address><name>62.40.102.18/31</name></address></inet><mpls>
+ </mpls></family></unit><unit><name>333</name><description>SRV_IAS CUSTOMER AMRES #AMRES-AP1-IAS IASGWS $GS-00522 | ASN13092 |</description><vlan-id>333</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>1500</mtu><filter><input><filter-name>nren_IAS_AMRES_IN</filter-name></input><output><filter-name>nren_IAS_AMRES_OUT</filter-name></output></filter><address><name>83.97.89.28/31</name></address></inet><inet6><mtu>1500</mtu><filter><input><filter-name>nren_IAS_AMRES_V6_IN</filter-name></input><output><filter-name>nren_IAS_AMRES_V6_OUT</filter-name></output></filter><address><name>2001:798:1::1b5/126</name></address></inet6></family></unit></interface><interface><name>ae17</name><description>LAG CUSTOMER MARNET AP2 SRF9917449 $GA-01862 |</description><flexible-vlan-tagging/><mtu>9192</mtu><encapsulation>flexible-ethernet-services</encapsulation><aggregated-ether-options><minimum-links>1</minimum-links></aggregated-ether-options><unit><name>100</name><description>SRV_GLOBAL CUSTOMER MARNET #MARNET-AP2 $GS-00490 | ASN44224 | backup</description><vlan-id>100</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>1500</mtu><filter><input><filter-name>MARnet-in</filter-name></input><output><filter-name>MARnet-out</filter-name></output></filter><address><name>62.40.125.253/30</name><primary/></address><address><name>10.151.151.1/29</name></address></inet><iso>
+ </iso><inet6><mtu>1500</mtu><filter><input><filter-name>MARnet6-in</filter-name></input><output><filter-name>MARnet6-out</filter-name></output></filter><address><name>2001:0798:2c:10aa::15/126</name></address></inet6><mpls>
+ </mpls></family></unit><unit><name>333</name><description>SRV_IAS CUSTOMER MARNET #MARNET-AP2-IAS IASGWS $GS-00537 | ASN44224</description><vlan-id>333</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>1500</mtu><filter><input><filter-name>nren_IAS_MARNET_IN</filter-name></input><output><filter-name>nren_IAS_MARNET_OUT</filter-name></output></filter><address><name>83.97.88.105/30</name></address></inet><inet6><mtu>1500</mtu><filter><input><filter-name>nren_IAS_MARNET_V6_IN</filter-name></input><output><filter-name>nren_IAS_MARNET_V6_OUT</filter-name></output></filter><address><name>2001:798:1::81/126</name></address></inet6></family></unit></interface><interface><name>ae18</name><description>LAG CUSTOMER KIFU $GA-01861 | KIFU-AP2-LAG</description><flexible-vlan-tagging/><mtu>9192</mtu><aggregated-ether-options><minimum-links>1</minimum-links><link-speed>100g</link-speed><lacp><active/><periodic>fast</periodic></lacp></aggregated-ether-options><unit><name>100</name><description>SRV_GLOBAL CUSTOMER KIFU #KIFU-AP2 $GS-00482 | ASN1955 |</description><vlan-id>100</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>9000</mtu><filter><input><filter-name>KIFU-in</filter-name></input><output><filter-name>KIFU-out</filter-name></output></filter><address><name>62.40.124.17/30</name></address></inet><iso>
+ </iso><inet6><mtu>9000</mtu><filter><input><filter-name>KIFU6-in</filter-name></input><output><filter-name>KIFU6-out</filter-name></output></filter><address><name>2001:0798:0010:10aa::15/126</name></address></inet6><mpls>
+ </mpls></family></unit><unit><name>111</name><description>SRV_L3VPN CUSTOMER KIFU #KIFU-AP2-LHCONE $GS-02283 | ASN1955 |</description><vlan-id>111</vlan-id><family><inet><mtu>9000</mtu><filter><input><filter-name>LHCONE-in</filter-name></input></filter><address><name>62.40.126.48/31</name></address></inet><inet6><mtu>9000</mtu><filter><input><filter-name>LHCONE6-in</filter-name></input><output><filter-name>LHCONE6-out</filter-name></output></filter><address><name>2001:798:111:1::49/126</name></address></inet6></family></unit><unit><name>333</name><description>SRV_IAS CUSTOMER KIFU #KIFU-AP2-IAS IASPS $GS-00576 | ASN1955 |</description><vlan-id>333</vlan-id><family><inet><accounting><source-class-usage><output/></source-class-usage><destination-class-usage/></accounting><mtu>1500</mtu><filter><input><filter-name>nren_IAS_KIFU_IN</filter-name></input><output><filter-name>nren_IAS_KIFU_OUT</filter-name></output></filter><address><name>83.97.88.85/30</name></address></inet><inet6><mtu>1500</mtu><filter><input><filter-name>nren_IAS_KIFU_V6_IN</filter-name></input><output><filter-name>nren_IAS_KIFU_V6_OUT</filter-name></output></filter><address><name>2001:798:1::69/126</name></address></inet6></family></unit></interface><interface><name>dsc</name><unit><name>0</name><description>PHY INFRASTRUCTURE DISCARD | required for Multicast monitoring</description><family><inet><address><name>192.0.2.118/32</name></address></inet></family></unit></interface><interface><name>irb</name><unit><name>999</name><description>SRV_GLOBAL INFRASTRUCTURE ACCESS INFINERA #infinera-zag-hr-mgmt-vrf-vlan999</description><family><inet><address><name>10.0.6.100/24</name></address></inet></family></unit></interface><interface><name>lo0</name><unit><name>0</name><family><inet><filter><input><filter-name>ROUTER_access</filter-name></input></filter><address><name>62.40.96.8/32</name></address></inet><iso><address><name>49.51e5.0001.0620.4009.6008.00</name></address></iso><inet6><filter><input><filter-name>ROUTER_access_V6</filter-name></input></filter><address><name>2001:798:2d:20ff::2/128</name></address></inet6></family></unit></interface></interfaces><snmp><location>Zagreb,Croatia,[45.79255553706465,15.969556540904621]</location><contact>GEANT OC, +44 (0) 1223 733033</contact><view><name>TIMEMAP_VIEW</name><oid><name>jnxTwampMib</name><include/></oid></view><community><name>As4n0gN!</name><authorization>read-only</authorization><clients><name>212.51.192.2/32</name></clients><clients><name>212.51.192.18/32</name></clients><clients><name>212.51.192.185/32</name></clients></community><community><name>G4@NTWP6T7</name><authorization>read-only</authorization><clients><name>194.81.18.224/27</name></clients><clients><name>83.97.94.160/32</name></clients><clients><name>83.97.94.180/32</name></clients><clients><name>193.219.48.249/32</name></clients><clients><name>193.219.48.250/32</name></clients></community><community><name>0pBiFbD</name><authorization>read-only</authorization><clients><name>62.40.100.194/32</name></clients><clients><name>62.40.100.202/32</name></clients><clients><name>62.40.106.182/32</name></clients><clients><name>62.40.106.200/29</name></clients><clients><name>62.40.111.254/32</name></clients><clients><name>62.40.113.88/29</name></clients><clients><name>62.40.114.0/28</name></clients><clients><name>62.40.114.114/32</name></clients><clients><name>62.40.114.16/28</name></clients><clients><name>62.40.100.190/32</name></clients><clients><name>62.40.100.166/32</name></clients><clients><name>62.40.100.198/32</name></clients><clients><name>62.40.118.224/28</name></clients><clients><name>62.40.118.50/32</name></clients><clients><name>62.40.120.18/32</name></clients><clients><name>62.40.120.90/32</name></clients><clients><name>62.40.122.138/32</name></clients><clients><name>62.40.99.32/29</name></clients><clients><name>62.40.99.40/30</name></clients><clients><name>62.40.99.44/31</name></clients><clients><name>62.40.99.51/32</name></clients><clients><name>62.40.99.52/32</name></clients><clients><name>62.40.99.53/32</name></clients><clients><name>83.97.91.0/24</name></clients><clients><name>83.97.92.0/24</name></clients><clients><name>83.97.92.114/32</name></clients><clients><name>83.97.92.159/32</name></clients><clients><name>83.97.92.183/32</name></clients><clients><name>83.97.92.94/32</name></clients><clients><name>83.97.93.122/32</name></clients><clients><name>83.97.93.137/32</name></clients><clients><name>83.97.93.152/32</name></clients><clients><name>83.97.93.153/32</name></clients><clients><name>83.97.93.154/32</name></clients><clients><name>83.97.93.195/32</name></clients><clients><name>83.97.93.196/32</name></clients><clients><name>83.97.93.22/32</name></clients><clients><name>83.97.93.23/32</name></clients><clients><name>83.97.93.238/32</name></clients><clients><name>83.97.93.239/32</name></clients><clients><name>83.97.93.37/32</name></clients><clients><name>83.97.93.39/32</name></clients><clients><name>83.97.93.45/32</name></clients><clients><name>83.97.93.59/32</name></clients><clients><name>83.97.94.12/32</name></clients><clients><name>83.97.94.13/32</name></clients><clients><name>83.97.94.14/32</name></clients><clients><name>83.97.94.151/32</name></clients><clients><name>83.97.94.52/32</name></clients><clients><name>83.97.94.97/32</name></clients><clients><name>83.97.94.98/32</name></clients><clients><name>193.177.128.0/22</name></clients><clients><name>83.97.94.245/32</name></clients><clients><name>83.97.94.246/32</name></clients><clients><name>83.97.95.9/32</name></clients><clients><name>83.97.95.10/32</name></clients><clients><name>83.97.95.11/32</name></clients><clients><name>83.97.95.12/32</name></clients><clients><name>83.97.95.84/32</name></clients><clients><name>83.97.92.228/32</name></clients><clients><name>83.97.93.53/32</name></clients><clients><name>83.97.94.185/32</name></clients><clients><name>83.97.93.151/32</name></clients><clients><name>83.97.94.51/32</name></clients><clients><name>83.97.94.188/32</name></clients><clients><name>62.40.114.3/32</name></clients><clients><name>62.40.114.19/32</name></clients><clients><name>62.40.114.18/32</name></clients><clients><name>83.97.93.52/32</name></clients><clients><name>83.97.93.155/32</name></clients><clients><name>83.97.93.84/32</name></clients><clients><name>83.97.92.61/32</name></clients><clients><name>83.97.92.79/32</name></clients><clients><name>83.97.92.219/32</name></clients><clients><name>83.97.93.204/32</name></clients><clients><name>83.97.93.244/32</name></clients><clients><name>83.97.93.248/32</name></clients><clients><name>83.97.93.249/32</name></clients><clients><name>83.97.93.251/32</name></clients><clients><name>83.97.94.1/32</name></clients><clients><name>83.97.94.2/32</name></clients><clients><name>83.97.94.9/32</name></clients><clients><name>83.97.94.15/32</name></clients></community><community><name>MdM53r6Sk</name><authorization>read-only</authorization><clients><name>62.40.123.162/32</name></clients></community><community><name>S3cur1tyS3rv1cE</name><authorization>read-only</authorization><clients><name>62.40.106.106/32</name></clients></community><community><name>c6N2rt5s</name><authorization>read-only</authorization><clients><name>62.40.122.226/32</name></clients></community><community><name>librenms-community</name><authorization>read-only</authorization><clients><name>83.97.95.37/32</name></clients></community><community><name>3VfrNKak</name><view>TIMEMAP_VIEW</view><clients><name>193.219.48.249/32</name></clients><clients><name>193.219.48.250/32</name></clients><clients><name>83.97.94.180/32</name></clients><clients><name>83.97.95.193/32</name></clients><clients><name>83.97.95.194/32</name></clients><clients><name>83.97.95.195/32</name></clients></community><trap-options><source-address><address>62.40.96.8</address></source-address><undocumented><throttle-threshold>10000</throttle-threshold></undocumented><undocumented><queue-size>25000</queue-size></undocumented></trap-options><trap-group><name>space</name><version>v2</version><targets><name>62.40.120.19</name></targets><targets><name>62.40.99.3</name></targets></trap-group><trap-group><name>geantnms</name><version>v2</version><categories><chassis/><link/><routing/></categories><targets><name>62.40.114.18</name></targets><targets><name>62.40.114.19</name></targets><targets><name>62.40.114.2</name></targets><targets><name>62.40.114.3</name></targets><targets><name>83.97.92.228</name></targets><targets><name>83.97.93.151</name></targets><targets><name>83.97.93.53</name></targets><targets><name>83.97.94.51</name></targets><targets><name>83.97.94.185</name></targets><targets><name>83.97.94.188</name></targets></trap-group></snmp><forwarding-options><sampling><instance><name>ipfx</name><input><rate>300</rate></input><family><inet><output><flow-server><name>62.40.100.166</name><port>7711</port><version-ipfix><template><template-name>ipv4</template-name></template></version-ipfix></flow-server><flow-server><name>62.40.106.182</name><port>7712</port><version-ipfix><template><template-name>ipv4</template-name></template></version-ipfix></flow-server><flow-server><name>193.177.129.27</name><port>20013</port><version-ipfix><template><template-name>ipv4</template-name></template></version-ipfix></flow-server><inline-jflow><source-address>62.40.96.8</source-address><flow-export-rate>30</flow-export-rate></inline-jflow></output></inet><inet6><output><flow-server><name>62.40.100.166</name><port>7711</port><version-ipfix><template><template-name>ipv6</template-name></template></version-ipfix></flow-server><flow-server><name>62.40.106.182</name><port>7712</port><version-ipfix><template><template-name>ipv6</template-name></template></version-ipfix></flow-server><flow-server><name>193.177.129.27</name><port>20013</port><version-ipfix><template><template-name>ipv6</template-name></template></version-ipfix></flow-server><inline-jflow><source-address>62.40.96.8</source-address><flow-export-rate>30</flow-export-rate></inline-jflow></output></inet6></family></instance></sampling><enhanced-hash-key><family><mpls><ether-pseudowire><zero-control-word/></ether-pseudowire></mpls></family></enhanced-hash-key><no-hyper-mode/></forwarding-options><policy-options><prefix-list><name>geant-address-space</name><prefix-list-item><name>62.40.96.0/19</name></prefix-list-item></prefix-list><prefix-list><name>geant-address-space-short</name><prefix-list-item><name>62.40.96.0/24</name></prefix-list-item><prefix-list-item><name>62.40.98.0/23</name></prefix-list-item><prefix-list-item><name>62.40.99.0/29</name></prefix-list-item><prefix-list-item><name>62.40.100.0/24</name></prefix-list-item><prefix-list-item><name>62.40.102.0/24</name></prefix-list-item><prefix-list-item><name>62.40.104.40/29</name></prefix-list-item><prefix-list-item><name>62.40.104.120/29</name></prefix-list-item><prefix-list-item><name>62.40.106.202/32</name></prefix-list-item><prefix-list-item><name>62.40.109.16/29</name></prefix-list-item><prefix-list-item><name>62.40.111.27/32</name></prefix-list-item><prefix-list-item><name>62.40.114.0/23</name></prefix-list-item><prefix-list-item><name>62.40.116.0/23</name></prefix-list-item><prefix-list-item><name>62.40.118.0/24</name></prefix-list-item><prefix-list-item><name>64.40.109.16/29</name></prefix-list-item><prefix-list-item><name>64.40.112.0/22</name></prefix-list-item><prefix-list-item><name>64.40.116.0/23</name></prefix-list-item></prefix-list><prefix-list><name>geant-address-space-V6</name><prefix-list-item><name>2001:798::/32</name></prefix-list-item></prefix-list><prefix-list><name>external-project-interfaces</name><prefix-list-item><name>62.40.100.160/32</name></prefix-list-item><prefix-list-item><name>62.40.100.162/32</name></prefix-list-item><prefix-list-item><name>62.40.100.169/32</name></prefix-list-item><prefix-list-item><name>62.40.100.209/32</name></prefix-list-item><prefix-list-item><name>62.40.104.20/32</name></prefix-list-item><prefix-list-item><name>62.40.104.224/32</name></prefix-list-item><prefix-list-item><name>62.40.104.226/32</name></prefix-list-item><prefix-list-item><name>62.40.106.17/32</name></prefix-list-item><prefix-list-item><name>62.40.106.25/32</name></prefix-list-item><prefix-list-item><name>62.40.106.33/32</name></prefix-list-item><prefix-list-item><name>62.40.106.41/32</name></prefix-list-item><prefix-list-item><name>62.40.106.57/32</name></prefix-list-item><prefix-list-item><name>62.40.106.60/32</name></prefix-list-item><prefix-list-item><name>62.40.106.62/32</name></prefix-list-item><prefix-list-item><name>62.40.106.65/32</name></prefix-list-item><prefix-list-item><name>62.40.106.113/32</name></prefix-list-item><prefix-list-item><name>62.40.106.121/32</name></prefix-list-item><prefix-list-item><name>62.40.106.174/32</name></prefix-list-item><prefix-list-item><name>62.40.106.178/32</name></prefix-list-item><prefix-list-item><name>62.40.107.213/32</name></prefix-list-item><prefix-list-item><name>62.40.108.1/32</name></prefix-list-item><prefix-list-item><name>62.40.108.5/32</name></prefix-list-item><prefix-list-item><name>62.40.108.9/32</name></prefix-list-item><prefix-list-item><name>62.40.108.33/32</name></prefix-list-item><prefix-list-item><name>62.40.108.57/32</name></prefix-list-item><prefix-list-item><name>62.40.108.65/32</name></prefix-list-item><prefix-list-item><name>62.40.108.73/32</name></prefix-list-item><prefix-list-item><name>62.40.108.81/32</name></prefix-list-item><prefix-list-item><name>62.40.108.89/32</name></prefix-list-item><prefix-list-item><name>62.40.108.97/32</name></prefix-list-item><prefix-list-item><name>62.40.109.65/32</name></prefix-list-item><prefix-list-item><name>62.40.110.1/32</name></prefix-list-item><prefix-list-item><name>62.40.113.56/32</name></prefix-list-item><prefix-list-item><name>62.40.113.129/32</name></prefix-list-item><prefix-list-item><name>62.40.114.1/32</name></prefix-list-item><prefix-list-item><name>62.40.114.102/32</name></prefix-list-item><prefix-list-item><name>62.40.114.177/32</name></prefix-list-item><prefix-list-item><name>62.40.114.185/32</name></prefix-list-item><prefix-list-item><name>62.40.114.193/32</name></prefix-list-item><prefix-list-item><name>62.40.114.209/32</name></prefix-list-item><prefix-list-item><name>62.40.114.225/32</name></prefix-list-item><prefix-list-item><name>62.40.114.233/32</name></prefix-list-item><prefix-list-item><name>62.40.114.241/32</name></prefix-list-item><prefix-list-item><name>62.40.120.25/32</name></prefix-list-item><prefix-list-item><name>62.40.120.33/32</name></prefix-list-item><prefix-list-item><name>62.40.120.41/32</name></prefix-list-item><prefix-list-item><name>62.40.120.65/32</name></prefix-list-item><prefix-list-item><name>62.40.120.97/32</name></prefix-list-item><prefix-list-item><name>62.40.121.1/32</name></prefix-list-item><prefix-list-item><name>62.40.121.5/32</name></prefix-list-item><prefix-list-item><name>62.40.121.9/32</name></prefix-list-item><prefix-list-item><name>62.40.121.13/32</name></prefix-list-item><prefix-list-item><name>62.40.121.17/32</name></prefix-list-item><prefix-list-item><name>62.40.121.21/32</name></prefix-list-item><prefix-list-item><name>62.40.121.25/32</name></prefix-list-item><prefix-list-item><name>62.40.121.29/32</name></prefix-list-item><prefix-list-item><name>62.40.121.33/32</name></prefix-list-item><prefix-list-item><name>62.40.121.37/32</name></prefix-list-item><prefix-list-item><name>62.40.121.41/32</name></prefix-list-item><prefix-list-item><name>62.40.121.45/32</name></prefix-list-item><prefix-list-item><name>62.40.121.49/32</name></prefix-list-item><prefix-list-item><name>62.40.121.53/32</name></prefix-list-item><prefix-list-item><name>62.40.121.57/32</name></prefix-list-item><prefix-list-item><name>62.40.121.61/32</name></prefix-list-item><prefix-list-item><name>62.40.121.65/32</name></prefix-list-item><prefix-list-item><name>62.40.121.69/32</name></prefix-list-item><prefix-list-item><name>62.40.121.73/32</name></prefix-list-item><prefix-list-item><name>62.40.121.77/32</name></prefix-list-item><prefix-list-item><name>62.40.121.81/32</name></prefix-list-item><prefix-list-item><name>62.40.121.101/32</name></prefix-list-item><prefix-list-item><name>62.40.121.105/32</name></prefix-list-item><prefix-list-item><name>62.40.121.241/32</name></prefix-list-item><prefix-list-item><name>62.40.122.1/32</name></prefix-list-item><prefix-list-item><name>62.40.122.9/32</name></prefix-list-item><prefix-list-item><name>62.40.122.17/32</name></prefix-list-item><prefix-list-item><name>62.40.122.25/32</name></prefix-list-item><prefix-list-item><name>62.40.122.33/32</name></prefix-list-item><prefix-list-item><name>62.40.122.49/32</name></prefix-list-item><prefix-list-item><name>62.40.122.57/32</name></prefix-list-item><prefix-list-item><name>62.40.122.65/32</name></prefix-list-item><prefix-list-item><name>62.40.122.73/32</name></prefix-list-item><prefix-list-item><name>62.40.122.81/32</name></prefix-list-item><prefix-list-item><name>62.40.122.89/32</name></prefix-list-item><prefix-list-item><name>62.40.122.97/32</name></prefix-list-item><prefix-list-item><name>62.40.122.105/32</name></prefix-list-item><prefix-list-item><name>62.40.122.113/32</name></prefix-list-item><prefix-list-item><name>62.40.122.121/32</name></prefix-list-item><prefix-list-item><name>62.40.122.129/32</name></prefix-list-item><prefix-list-item><name>62.40.122.145/32</name></prefix-list-item><prefix-list-item><name>62.40.122.153/32</name></prefix-list-item><prefix-list-item><name>62.40.122.169/32</name></prefix-list-item><prefix-list-item><name>62.40.122.185/32</name></prefix-list-item><prefix-list-item><name>62.40.122.193/32</name></prefix-list-item><prefix-list-item><name>62.40.123.1/32</name></prefix-list-item><prefix-list-item><name>62.40.123.9/32</name></prefix-list-item><prefix-list-item><name>62.40.123.18/32</name></prefix-list-item><prefix-list-item><name>62.40.123.141/32</name></prefix-list-item><prefix-list-item><name>62.40.123.148/32</name></prefix-list-item><prefix-list-item><name>62.40.123.150/32</name></prefix-list-item><prefix-list-item><name>62.40.123.209/32</name></prefix-list-item><prefix-list-item><name>62.40.123.217/32</name></prefix-list-item><prefix-list-item><name>62.40.123.225/32</name></prefix-list-item><prefix-list-item><name>62.40.123.233/32</name></prefix-list-item><prefix-list-item><name>62.40.123.241/32</name></prefix-list-item><prefix-list-item><name>62.40.123.249/32</name></prefix-list-item><prefix-list-item><name>62.40.126.9/32</name></prefix-list-item></prefix-list><prefix-list><name>external-project6</name><prefix-list-item><name>2001:798:1:1::/64</name></prefix-list-item><prefix-list-item><name>2001:798:1:2::/64</name></prefix-list-item><prefix-list-item><name>2001:798:2::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:2:1::2/128</name></prefix-list-item><prefix-list-item><name>2001:0798:0002:284d::/64</name></prefix-list-item><prefix-list-item><name>2001:798:2:284d::/128</name></prefix-list-item><prefix-list-item><name>2001:798:2:284d::60/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::/64</name></prefix-list-item><prefix-list-item><name>2001:798:3::103/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::104/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::10a/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::10b/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::117/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::118/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::128/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::147/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::151/128</name></prefix-list-item><prefix-list-item><name>2001:798:4:1::/64</name></prefix-list-item><prefix-list-item><name>2001:798:4:2::/64</name></prefix-list-item><prefix-list-item><name>2001:798:4:3::/64</name></prefix-list-item><prefix-list-item><name>2001:798:4:3::d/128</name></prefix-list-item><prefix-list-item><name>2001:798:4:5::/64</name></prefix-list-item><prefix-list-item><name>2001:798:4:6::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:4:6::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:4:6::3/128</name></prefix-list-item><prefix-list-item><name>2001:798:4:6::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:4:8::/64</name></prefix-list-item><prefix-list-item><name>2001:798:11::/64</name></prefix-list-item><prefix-list-item><name>2001:798:14:96::/64</name></prefix-list-item><prefix-list-item><name>2001:798:14:aa::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:14:aa::3/128</name></prefix-list-item><prefix-list-item><name>2001:0798:14:c8::/64</name></prefix-list-item><prefix-list-item><name>2001:0798:18:96::/64</name></prefix-list-item><prefix-list-item><name>2001:0798:18:99::/64</name></prefix-list-item><comment>/* HADES */</comment><prefix-list-item><name>2001:798:22:16::0/64</name></prefix-list-item><prefix-list-item><name>2001:798:28:50::11/128</name></prefix-list-item><prefix-list-item><name>2001:798:28:59::7/128</name></prefix-list-item><prefix-list-item><name>2001:798:28:99::3/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:1::e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:1::16/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::16/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::1a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::1b/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::1c/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::22/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::26/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::2a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::2e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::32/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::33/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::36/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::38/126</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::3a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::3e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::42/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::46/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::4a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::4e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::52/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::56/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::5a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::5e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::62/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::66/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::6a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::6e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::72/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::76/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::7a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::7e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::82/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::86/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::8a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::8e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::92/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::96/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::9a/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::9e/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::a2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::a6/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::aa/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::ae/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::b2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::ba/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::be/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::c2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::ce/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::d2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::d6/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::da/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:5::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:c::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:c::3/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:d::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:1a::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:1b::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:1e::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:1e::3/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:1e::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:23::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:25::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:25::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2a::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2a::3/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2a::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2b::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2b::3/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2b::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2e::3/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2e::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2f::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:33::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:34::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:34::3/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:34::4/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:35::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:36::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:37::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:38::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:39::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:3a::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:41::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:42::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:43::/64</name></prefix-list-item><prefix-list-item><name>2001:798:bb:49::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:4d::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:dd:3::0/64</name></prefix-list-item><prefix-list-item><name>2001:798:dd:6::4/126</name></prefix-list-item><prefix-list-item><name>2001:798:dd:7::/64</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::32/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::42/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::46/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::82/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::86/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::b2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::b6/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::ba/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::be/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::c2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::c6/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::ca/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::ce/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:b::d2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:f::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:10::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:21::/64</name></prefix-list-item><prefix-list-item><name>2001:798:ee:22::/64</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::52/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::56/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::5a/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::5e/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::62/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::66/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::6a/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::6e/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::72/128</name></prefix-list-item><prefix-list-item><name>2001:798:111:1::76/128</name></prefix-list-item><prefix-list-item><name>2001:798:2001::/48</name></prefix-list-item><prefix-list-item><name>2001:798:2002::/48</name></prefix-list-item><prefix-list-item><name>2001:798:2012:47::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:f27a:10::/64</name></prefix-list-item><prefix-list-item><name>2001:798:f27a:14::/64</name></prefix-list-item><prefix-list-item><name>2001:798:f27a:22::/64</name></prefix-list-item><prefix-list-item><name>2001:798:f27a:28::/64</name></prefix-list-item><prefix-list-item><name>2001:798:f27a:2d::/64</name></prefix-list-item><prefix-list-item><name>2001:798:f99a:22::/64</name></prefix-list-item><prefix-list-item><name>2001:798:f9a1:10::/64</name></prefix-list-item><comment>/* LHCONE */</comment><prefix-list-item><name>2001:798:f9a2:10::/64</name></prefix-list-item><prefix-list-item><name>2001:798:f9a3:28::0/125</name></prefix-list-item><prefix-list-item><name>2001:798:fa78:14::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa78:22::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa78:28::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa78:2d01::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa78:2d02::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa79:10::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa79:14::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa79:22::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa79:28::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa79:2d01::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fa79:2d02::/64</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:10::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:10::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:12::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:12::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:13::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:13::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:14::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:14::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:14::a/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:16::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:16::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:17::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:17::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:18::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:18::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:19::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:19::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:1b::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:1b::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:1e::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:1e::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:1f::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:1f::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:21::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:21::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:22::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:22::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:23::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:23::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:28::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:28::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:2b::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:2b::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:2c::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:fc00:2c::6/128</name></prefix-list-item><prefix-list-item><name>2001:798:ff10:a5::/64</name></prefix-list-item><comment>/* SHAREPOINT */</comment><prefix-list-item><name>2001:0798:ff10:00a5::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ff17:11::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ff23:28::2/128</name></prefix-list-item><comment>/* TT#2016083134000549 pS LS testing instance access on port 8090 */</comment><prefix-list-item><name>2001:798:ff32:2e::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ff98:22::/64</name></prefix-list-item><prefix-list-item><name>2001:798:ff9b:18::/64</name></prefix-list-item><prefix-list-item><name>2001:798:ff9b:22::/64</name></prefix-list-item><prefix-list-item><name>2001:798:ff9d:14::/64</name></prefix-list-item><prefix-list-item><name>2001:798:ff9e:10::2/128</name></prefix-list-item><comment>/* Site Archives */</comment><prefix-list-item><name>2001:798:ff9e:14::/64</name></prefix-list-item><prefix-list-item><name>2001:798:ff9e:28::/64</name></prefix-list-item><comment>/* HADES */</comment><prefix-list-item><name>2001:798:ffa4:14::0/64</name></prefix-list-item><prefix-list-item><name>2001:799:cb2::/48</name></prefix-list-item></prefix-list><prefix-list><name>external-project-interfaces6</name><prefix-list-item><name>::/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::b9/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::bd/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::c1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:2::cd/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:5::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:d::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:33::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:35::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:36::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:37::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:38::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:39::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:3a::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:41::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:42::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:49::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:dd:3::1/128</name></prefix-list-item><prefix-list-item><name>2001:798:dd:7::1/128</name></prefix-list-item></prefix-list><prefix-list><name>geantnoc-address-space6</name></prefix-list><prefix-list><name>bogons-list6</name><prefix-list-item><name>::/8</name></prefix-list-item><prefix-list-item><name>100::/8</name></prefix-list-item><prefix-list-item><name>200::/7</name></prefix-list-item><prefix-list-item><name>400::/7</name></prefix-list-item><prefix-list-item><name>600::/7</name></prefix-list-item><prefix-list-item><name>800::/5</name></prefix-list-item><prefix-list-item><name>1000::/4</name></prefix-list-item><prefix-list-item><name>2000::/16</name></prefix-list-item><prefix-list-item><name>3fff::/16</name></prefix-list-item><prefix-list-item><name>4000::/3</name></prefix-list-item><prefix-list-item><name>6000::/3</name></prefix-list-item><prefix-list-item><name>8000::/3</name></prefix-list-item><prefix-list-item><name>a000::/3</name></prefix-list-item><prefix-list-item><name>c000::/3</name></prefix-list-item><prefix-list-item><name>e000::/4</name></prefix-list-item><prefix-list-item><name>f000::/5</name></prefix-list-item><prefix-list-item><name>f800::/6</name></prefix-list-item><prefix-list-item><name>fc00::/7</name></prefix-list-item><prefix-list-item><name>fe00::/9</name></prefix-list-item><prefix-list-item><name>fec0::/10</name></prefix-list-item></prefix-list><prefix-list><name>pref-list-router-access</name><prefix-list-item><name>62.40.106.232/29</name></prefix-list-item><prefix-list-item><name>62.40.120.72/29</name></prefix-list-item><prefix-list-item><name>62.40.121.102/32</name></prefix-list-item><prefix-list-item><name>128.139.197.70/32</name></prefix-list-item><prefix-list-item><name>128.139.227.249/32</name></prefix-list-item><prefix-list-item><name>130.104.230.45/32</name></prefix-list-item><prefix-list-item><name>139.165.223.48/32</name></prefix-list-item><prefix-list-item><name>193.136.7.100/32</name></prefix-list-item></prefix-list><prefix-list><name>external-project</name><prefix-list-item><name>62.40.96.18/32</name></prefix-list-item><prefix-list-item><name>62.40.96.41/32</name></prefix-list-item><prefix-list-item><name>62.40.96.44/32</name></prefix-list-item><prefix-list-item><name>62.40.99.0/29</name></prefix-list-item><prefix-list-item><name>62.40.99.8/31</name></prefix-list-item><prefix-list-item><name>62.40.99.42/32</name></prefix-list-item><prefix-list-item><name>62.40.99.45/32</name></prefix-list-item><prefix-list-item><name>62.40.99.50/32</name></prefix-list-item><prefix-list-item><name>62.40.99.51/32</name></prefix-list-item><prefix-list-item><name>62.40.99.129/32</name></prefix-list-item><prefix-list-item><name>62.40.99.136/29</name></prefix-list-item><prefix-list-item><name>62.40.99.138/32</name></prefix-list-item><prefix-list-item><name>62.40.99.139/32</name></prefix-list-item><prefix-list-item><name>62.40.99.144/29</name></prefix-list-item><prefix-list-item><name>62.40.99.160/27</name></prefix-list-item><prefix-list-item><name>62.40.99.192/26</name></prefix-list-item><prefix-list-item><name>62.40.99.215/32</name></prefix-list-item><prefix-list-item><name>62.40.100.128/25</name></prefix-list-item><prefix-list-item><name>62.40.100.161/32</name></prefix-list-item><prefix-list-item><name>62.40.100.163/32</name></prefix-list-item><prefix-list-item><name>62.40.100.168/29</name></prefix-list-item><prefix-list-item><name>62.40.100.208/29</name></prefix-list-item><prefix-list-item><name>62.40.101.0/24</name></prefix-list-item><prefix-list-item><name>62.40.104.0/29</name></prefix-list-item><prefix-list-item><name>62.40.104.8/29</name></prefix-list-item><prefix-list-item><name>62.40.104.21/32</name></prefix-list-item><prefix-list-item><name>62.40.104.23/32</name></prefix-list-item><comment>/* tools.geant.net */</comment><prefix-list-item><name>62.40.104.32/29</name></prefix-list-item><prefix-list-item><name>62.40.104.56/29</name></prefix-list-item><prefix-list-item><name>62.40.104.72/29</name></prefix-list-item><prefix-list-item><name>62.40.104.76/30</name></prefix-list-item><prefix-list-item><name>62.40.104.80/29</name></prefix-list-item><prefix-list-item><name>62.40.104.88/29</name></prefix-list-item><comment>/* OC Server */</comment><prefix-list-item><name>62.40.104.98/32</name></prefix-list-item><prefix-list-item><name>62.40.104.104/29</name></prefix-list-item><prefix-list-item><name>62.40.104.112/29</name></prefix-list-item><comment>/* cbt.geant.net */</comment><prefix-list-item><name>62.40.104.132/31</name></prefix-list-item><comment>/* mail.geant.net */</comment><prefix-list-item><name>62.40.104.134/31</name></prefix-list-item><prefix-list-item><name>62.40.104.136/29</name></prefix-list-item><prefix-list-item><name>62.40.104.168/29</name></prefix-list-item><prefix-list-item><name>62.40.104.176/30</name></prefix-list-item><prefix-list-item><name>62.40.104.180/30</name></prefix-list-item><prefix-list-item><name>62.40.104.184/29</name></prefix-list-item><prefix-list-item><name>62.40.104.192/29</name></prefix-list-item><prefix-list-item><name>62.40.104.197/32</name></prefix-list-item><prefix-list-item><name>62.40.104.199/32</name></prefix-list-item><prefix-list-item><name>62.40.104.202/31</name></prefix-list-item><prefix-list-item><name>62.40.104.205/32</name></prefix-list-item><prefix-list-item><name>62.40.104.207/32</name></prefix-list-item><prefix-list-item><name>62.40.104.210/32</name></prefix-list-item><prefix-list-item><name>62.40.104.211/32</name></prefix-list-item><prefix-list-item><name>62.40.104.212/32</name></prefix-list-item><comment>/* LHCONE */</comment><prefix-list-item><name>62.40.104.224/27</name></prefix-list-item><prefix-list-item><name>62.40.104.225/32</name></prefix-list-item><prefix-list-item><name>62.40.104.227/32</name></prefix-list-item><prefix-list-item><name>62.40.104.234/32</name></prefix-list-item><prefix-list-item><name>62.40.104.250/32</name></prefix-list-item><prefix-list-item><name>62.40.105.0/24</name></prefix-list-item><prefix-list-item><name>62.40.106.0/24</name></prefix-list-item><prefix-list-item><name>62.40.106.3/32</name></prefix-list-item><prefix-list-item><name>62.40.106.9/32</name></prefix-list-item><prefix-list-item><name>62.40.106.16/29</name></prefix-list-item><prefix-list-item><name>62.40.106.18/32</name></prefix-list-item><prefix-list-item><name>62.40.106.24/29</name></prefix-list-item><prefix-list-item><name>62.40.106.32/29</name></prefix-list-item><prefix-list-item><name>62.40.106.34/32</name></prefix-list-item><prefix-list-item><name>62.40.106.35/32</name></prefix-list-item><prefix-list-item><name>62.40.106.42/32</name></prefix-list-item><prefix-list-item><name>62.40.106.48/29</name></prefix-list-item><prefix-list-item><name>62.40.106.56/29</name></prefix-list-item><prefix-list-item><name>62.40.106.61/32</name></prefix-list-item><prefix-list-item><name>62.40.106.63/32</name></prefix-list-item><prefix-list-item><name>62.40.106.67/32</name></prefix-list-item><prefix-list-item><name>62.40.106.68/32</name></prefix-list-item><prefix-list-item><name>62.40.106.80/29</name></prefix-list-item><prefix-list-item><name>62.40.106.81/32</name></prefix-list-item><prefix-list-item><name>62.40.106.83/32</name></prefix-list-item><prefix-list-item><name>62.40.106.90/32</name></prefix-list-item><comment>/* Netflow Auditor */</comment><prefix-list-item><name>62.40.106.104/29</name></prefix-list-item><prefix-list-item><name>62.40.106.112/29</name></prefix-list-item><prefix-list-item><name>62.40.106.120/29</name></prefix-list-item><prefix-list-item><name>62.40.106.129/32</name></prefix-list-item><prefix-list-item><name>62.40.106.131/32</name></prefix-list-item><prefix-list-item><name>62.40.106.133/32</name></prefix-list-item><prefix-list-item><name>62.40.106.135/32</name></prefix-list-item><prefix-list-item><name>62.40.106.137/32</name></prefix-list-item><prefix-list-item><name>62.40.106.139/32</name></prefix-list-item><prefix-list-item><name>62.40.106.141/32</name></prefix-list-item><prefix-list-item><name>62.40.106.145/32</name></prefix-list-item><prefix-list-item><name>62.40.106.147/32</name></prefix-list-item><prefix-list-item><name>62.40.106.149/32</name></prefix-list-item><prefix-list-item><name>62.40.106.150/32</name></prefix-list-item><prefix-list-item><name>62.40.106.151/32</name></prefix-list-item><prefix-list-item><name>62.40.106.153/32</name></prefix-list-item><prefix-list-item><name>62.40.106.155/32</name></prefix-list-item><prefix-list-item><name>62.40.106.157/32</name></prefix-list-item><prefix-list-item><name>62.40.106.159/32</name></prefix-list-item><prefix-list-item><name>62.40.106.161/32</name></prefix-list-item><prefix-list-item><name>62.40.106.163/32</name></prefix-list-item><prefix-list-item><name>62.40.106.165/32</name></prefix-list-item><prefix-list-item><name>62.40.106.167/32</name></prefix-list-item><prefix-list-item><name>62.40.106.169/32</name></prefix-list-item><prefix-list-item><name>62.40.106.171/32</name></prefix-list-item><prefix-list-item><name>62.40.106.173/32</name></prefix-list-item><prefix-list-item><name>62.40.106.175/32</name></prefix-list-item><prefix-list-item><name>62.40.106.177/32</name></prefix-list-item><prefix-list-item><name>62.40.106.179/32</name></prefix-list-item><prefix-list-item><name>62.40.106.181/32</name></prefix-list-item><prefix-list-item><name>62.40.106.183/32</name></prefix-list-item><prefix-list-item><name>62.40.106.185/32</name></prefix-list-item><prefix-list-item><name>62.40.106.189/32</name></prefix-list-item><prefix-list-item><name>62.40.106.191/32</name></prefix-list-item><prefix-list-item><name>62.40.106.193/32</name></prefix-list-item><prefix-list-item><name>62.40.106.194/32</name></prefix-list-item><prefix-list-item><name>62.40.106.195/32</name></prefix-list-item><prefix-list-item><name>62.40.106.197/32</name></prefix-list-item><prefix-list-item><name>62.40.106.199/32</name></prefix-list-item><prefix-list-item><name>62.40.106.201/32</name></prefix-list-item><prefix-list-item><name>62.40.106.202/32</name></prefix-list-item><prefix-list-item><name>62.40.106.240/29</name></prefix-list-item><prefix-list-item><name>62.40.106.249/32</name></prefix-list-item><prefix-list-item><name>62.40.106.251/32</name></prefix-list-item><prefix-list-item><name>62.40.106.253/32</name></prefix-list-item><prefix-list-item><name>62.40.106.255/32</name></prefix-list-item><prefix-list-item><name>62.40.107.182/32</name></prefix-list-item><prefix-list-item><name>62.40.107.194/32</name></prefix-list-item><prefix-list-item><name>62.40.107.198/32</name></prefix-list-item><prefix-list-item><name>62.40.107.206/32</name></prefix-list-item><prefix-list-item><name>62.40.107.214/32</name></prefix-list-item><prefix-list-item><name>62.40.107.221/32</name></prefix-list-item><prefix-list-item><name>62.40.107.222/32</name></prefix-list-item><prefix-list-item><name>62.40.107.223/32</name></prefix-list-item><prefix-list-item><name>62.40.107.230/32</name></prefix-list-item><prefix-list-item><name>62.40.107.238/32</name></prefix-list-item><prefix-list-item><name>62.40.107.246/32</name></prefix-list-item><prefix-list-item><name>62.40.107.248/29</name></prefix-list-item><prefix-list-item><name>62.40.108.50/32</name></prefix-list-item><prefix-list-item><name>62.40.108.58/32</name></prefix-list-item><prefix-list-item><name>62.40.108.98/32</name></prefix-list-item><prefix-list-item><name>62.40.108.102/32</name></prefix-list-item><prefix-list-item><name>62.40.108.140/32</name></prefix-list-item><prefix-list-item><name>62.40.108.192/26</name></prefix-list-item><prefix-list-item><name>62.40.109.0/24</name></prefix-list-item><prefix-list-item><name>62.40.109.0/28</name></prefix-list-item><prefix-list-item><name>62.40.109.25/32</name></prefix-list-item><prefix-list-item><name>62.40.109.26/32</name></prefix-list-item><prefix-list-item><name>62.40.110.0/27</name></prefix-list-item><prefix-list-item><name>62.40.110.32/27</name></prefix-list-item><prefix-list-item><name>62.40.110.64/27</name></prefix-list-item><prefix-list-item><name>62.40.110.96/27</name></prefix-list-item><prefix-list-item><name>62.40.110.128/27</name></prefix-list-item><prefix-list-item><name>62.40.111.0/24</name></prefix-list-item><prefix-list-item><name>62.40.111.253/32</name></prefix-list-item><prefix-list-item><name>62.40.112.0/24</name></prefix-list-item><prefix-list-item><name>62.40.113.29/32</name></prefix-list-item><prefix-list-item><name>62.40.113.56/29</name></prefix-list-item><prefix-list-item><name>62.40.113.58/32</name></prefix-list-item><prefix-list-item><name>62.40.113.59/32</name></prefix-list-item><prefix-list-item><name>62.40.113.60/32</name></prefix-list-item><prefix-list-item><name>62.40.113.88/29</name></prefix-list-item><prefix-list-item><name>62.40.113.104/29</name></prefix-list-item><prefix-list-item><name>62.40.113.115/32</name></prefix-list-item><prefix-list-item><name>62.40.113.128/25</name></prefix-list-item><prefix-list-item><name>62.40.113.157/32</name></prefix-list-item><prefix-list-item><name>62.40.113.166/32</name></prefix-list-item><prefix-list-item><name>62.40.113.167/32</name></prefix-list-item><prefix-list-item><name>62.40.113.168/32</name></prefix-list-item><prefix-list-item><name>62.40.113.182/32</name></prefix-list-item><prefix-list-item><name>62.40.114.0/28</name></prefix-list-item><prefix-list-item><name>62.40.114.2/32</name></prefix-list-item><prefix-list-item><name>62.40.114.3/32</name></prefix-list-item><prefix-list-item><name>62.40.114.16/28</name></prefix-list-item><prefix-list-item><name>62.40.114.18/32</name></prefix-list-item><prefix-list-item><name>62.40.114.19/32</name></prefix-list-item><prefix-list-item><name>62.40.114.33/32</name></prefix-list-item><prefix-list-item><name>62.40.114.35/32</name></prefix-list-item><prefix-list-item><name>62.40.114.37/32</name></prefix-list-item><prefix-list-item><name>62.40.114.39/32</name></prefix-list-item><prefix-list-item><name>62.40.114.41/32</name></prefix-list-item><prefix-list-item><name>62.40.114.43/32</name></prefix-list-item><prefix-list-item><name>62.40.114.45/32</name></prefix-list-item><prefix-list-item><name>62.40.114.47/32</name></prefix-list-item><prefix-list-item><name>62.40.114.49/32</name></prefix-list-item><prefix-list-item><name>62.40.114.51/32</name></prefix-list-item><prefix-list-item><name>62.40.114.53/32</name></prefix-list-item><prefix-list-item><name>62.40.114.55/32</name></prefix-list-item><prefix-list-item><name>62.40.114.57/32</name></prefix-list-item><prefix-list-item><name>62.40.114.59/32</name></prefix-list-item><prefix-list-item><name>62.40.114.61/32</name></prefix-list-item><prefix-list-item><name>62.40.114.63/32</name></prefix-list-item><prefix-list-item><name>62.40.114.65/32</name></prefix-list-item><prefix-list-item><name>62.40.114.67/32</name></prefix-list-item><prefix-list-item><name>62.40.114.69/32</name></prefix-list-item><prefix-list-item><name>62.40.114.71/32</name></prefix-list-item><prefix-list-item><name>62.40.114.73/32</name></prefix-list-item><prefix-list-item><name>62.40.114.75/32</name></prefix-list-item><prefix-list-item><name>62.40.114.77/32</name></prefix-list-item><prefix-list-item><name>62.40.114.79/32</name></prefix-list-item><prefix-list-item><name>62.40.114.81/32</name></prefix-list-item><prefix-list-item><name>62.40.114.83/32</name></prefix-list-item><prefix-list-item><name>62.40.114.85/32</name></prefix-list-item><prefix-list-item><name>62.40.114.87/32</name></prefix-list-item><prefix-list-item><name>62.40.114.97/32</name></prefix-list-item><prefix-list-item><name>62.40.114.99/32</name></prefix-list-item><prefix-list-item><name>62.40.114.101/32</name></prefix-list-item><prefix-list-item><name>62.40.114.103/32</name></prefix-list-item><prefix-list-item><name>62.40.114.107/32</name></prefix-list-item><prefix-list-item><name>62.40.114.108/32</name></prefix-list-item><prefix-list-item><name>62.40.114.114/32</name></prefix-list-item><prefix-list-item><name>62.40.114.130/32</name></prefix-list-item><prefix-list-item><name>62.40.114.138/32</name></prefix-list-item><comment>/* requested Massimiliano Adamo */</comment><prefix-list-item><name>62.40.114.146/32</name></prefix-list-item><prefix-list-item><name>62.40.114.162/32</name></prefix-list-item><prefix-list-item><name>62.40.114.163/32</name></prefix-list-item><prefix-list-item><name>62.40.114.164/32</name></prefix-list-item><prefix-list-item><name>62.40.114.170/32</name></prefix-list-item><prefix-list-item><name>62.40.114.176/29</name></prefix-list-item><prefix-list-item><name>62.40.114.184/29</name></prefix-list-item><prefix-list-item><name>62.40.114.192/28</name></prefix-list-item><prefix-list-item><name>62.40.114.208/28</name></prefix-list-item><prefix-list-item><name>62.40.114.224/29</name></prefix-list-item><prefix-list-item><name>62.40.114.232/29</name></prefix-list-item><prefix-list-item><name>62.40.114.240/29</name></prefix-list-item><prefix-list-item><name>62.40.114.250/32</name></prefix-list-item><prefix-list-item><name>62.40.115.46/32</name></prefix-list-item><prefix-list-item><name>62.40.115.107/32</name></prefix-list-item><prefix-list-item><name>62.40.115.111/32</name></prefix-list-item><prefix-list-item><name>62.40.115.156/32</name></prefix-list-item><prefix-list-item><name>62.40.116.1/32</name></prefix-list-item><prefix-list-item><name>62.40.116.2/32</name></prefix-list-item><prefix-list-item><name>62.40.116.3/32</name></prefix-list-item><prefix-list-item><name>62.40.116.5/32</name></prefix-list-item><prefix-list-item><name>62.40.116.7/32</name></prefix-list-item><prefix-list-item><name>62.40.116.11/32</name></prefix-list-item><prefix-list-item><name>62.40.116.13/32</name></prefix-list-item><prefix-list-item><name>62.40.116.15/32</name></prefix-list-item><prefix-list-item><name>62.40.116.18/32</name></prefix-list-item><prefix-list-item><name>62.40.116.29/32</name></prefix-list-item><prefix-list-item><name>62.40.116.31/32</name></prefix-list-item><prefix-list-item><name>62.40.116.73/32</name></prefix-list-item><prefix-list-item><name>62.40.116.74/32</name></prefix-list-item><prefix-list-item><name>62.40.116.114/32</name></prefix-list-item><prefix-list-item><name>62.40.116.122/32</name></prefix-list-item><prefix-list-item><name>62.40.116.202/32</name></prefix-list-item><prefix-list-item><name>62.40.116.221/32</name></prefix-list-item><prefix-list-item><name>62.40.116.223/32</name></prefix-list-item><prefix-list-item><name>62.40.117.2/32</name></prefix-list-item><prefix-list-item><name>62.40.117.35/32</name></prefix-list-item><prefix-list-item><name>62.40.117.82/32</name></prefix-list-item><prefix-list-item><name>62.40.117.126/32</name></prefix-list-item><prefix-list-item><name>62.40.117.153/32</name></prefix-list-item><prefix-list-item><name>62.40.117.251/32</name></prefix-list-item><prefix-list-item><name>62.40.117.253/32</name></prefix-list-item><prefix-list-item><name>62.40.120.0/22</name></prefix-list-item><prefix-list-item><name>62.40.120.26/32</name></prefix-list-item><prefix-list-item><name>62.40.120.48/29</name></prefix-list-item><comment>/* TT#2016083134000549 pS LS testing instance access on port 8090 */</comment><prefix-list-item><name>62.40.120.50/32</name></prefix-list-item><prefix-list-item><name>62.40.120.66/32</name></prefix-list-item><prefix-list-item><name>62.40.120.67/32</name></prefix-list-item><prefix-list-item><name>62.40.121.240/29</name></prefix-list-item><prefix-list-item><name>62.40.122.92/32</name></prefix-list-item><prefix-list-item><name>62.40.122.110/32</name></prefix-list-item><prefix-list-item><name>62.40.122.201/32</name></prefix-list-item><prefix-list-item><name>62.40.123.26/32</name></prefix-list-item><prefix-list-item><name>62.40.123.92/32</name></prefix-list-item><prefix-list-item><name>62.40.123.97/32</name></prefix-list-item><prefix-list-item><name>62.40.123.101/32</name></prefix-list-item><prefix-list-item><name>62.40.123.114/32</name></prefix-list-item><prefix-list-item><name>62.40.123.139/32</name></prefix-list-item><prefix-list-item><name>62.40.123.142/32</name></prefix-list-item><prefix-list-item><name>62.40.123.149/32</name></prefix-list-item><prefix-list-item><name>62.40.123.151/32</name></prefix-list-item><prefix-list-item><name>62.40.123.210/32</name></prefix-list-item><prefix-list-item><name>62.40.123.218/32</name></prefix-list-item><prefix-list-item><name>62.40.123.226/32</name></prefix-list-item><prefix-list-item><name>62.40.123.234/32</name></prefix-list-item><prefix-list-item><name>62.40.123.235/32</name></prefix-list-item><prefix-list-item><name>62.40.123.242/32</name></prefix-list-item><prefix-list-item><name>62.40.123.250/32</name></prefix-list-item><prefix-list-item><name>62.40.125.97/32</name></prefix-list-item><prefix-list-item><name>62.40.125.254/32</name></prefix-list-item><prefix-list-item><name>62.40.126.0/24</name></prefix-list-item><prefix-list-item><name>62.40.126.155/32</name></prefix-list-item><prefix-list-item><name>62.40.126.163/32</name></prefix-list-item><prefix-list-item><name>62.40.126.171/32</name></prefix-list-item><prefix-list-item><name>62.40.126.179/32</name></prefix-list-item><prefix-list-item><name>62.40.126.187/32</name></prefix-list-item><prefix-list-item><name>62.40.126.189/32</name></prefix-list-item><prefix-list-item><name>62.40.126.191/32</name></prefix-list-item><prefix-list-item><name>62.40.126.193/32</name></prefix-list-item><prefix-list-item><name>62.40.126.195/32</name></prefix-list-item><prefix-list-item><name>62.40.126.197/32</name></prefix-list-item><prefix-list-item><name>62.40.127.0/24</name></prefix-list-item><prefix-list-item><name>62.40.127.32/31</name></prefix-list-item><prefix-list-item><name>83.97.88.190/32</name></prefix-list-item><prefix-list-item><name>83.97.89.64/26</name></prefix-list-item><prefix-list-item><name>83.97.89.128/26</name></prefix-list-item><prefix-list-item><name>83.97.92.0/22</name></prefix-list-item><prefix-list-item><name>83.97.92.216/32</name></prefix-list-item><prefix-list-item><name>83.97.92.217/32</name></prefix-list-item><prefix-list-item><name>83.97.92.220/32</name></prefix-list-item><prefix-list-item><name>83.97.92.245/32</name></prefix-list-item><prefix-list-item><name>83.97.93.51/32</name></prefix-list-item><prefix-list-item><name>83.97.93.61/32</name></prefix-list-item></prefix-list><prefix-list><name>bogons-list</name><prefix-list-item><name>0.0.0.0/8</name></prefix-list-item><prefix-list-item><name>10.0.0.0/8</name></prefix-list-item><prefix-list-item><name>100.64.0.0/10</name></prefix-list-item><prefix-list-item><name>127.0.0.0/8</name></prefix-list-item><prefix-list-item><name>169.254.0.0/16</name></prefix-list-item><prefix-list-item><name>172.16.0.0/12</name></prefix-list-item><prefix-list-item><name>192.0.0.0/24</name></prefix-list-item><prefix-list-item><name>192.0.2.0/24</name></prefix-list-item><prefix-list-item><name>192.168.0.0/16</name></prefix-list-item><prefix-list-item><name>198.18.0.0/15</name></prefix-list-item><prefix-list-item><name>198.51.100.0/24</name></prefix-list-item><prefix-list-item><name>203.0.113.0/24</name></prefix-list-item><prefix-list-item><name>224.0.0.0/3</name></prefix-list-item></prefix-list><prefix-list><name>space-local</name><prefix-list-item><name>127.0.0.1/32</name></prefix-list-item></prefix-list><prefix-list><name>INTERNAL-address-space</name><prefix-list-item><name>62.40.108.0/24</name></prefix-list-item><prefix-list-item><name>62.40.115.0/24</name></prefix-list-item><prefix-list-item><name>62.40.116.0/24</name></prefix-list-item><prefix-list-item><name>62.40.117.0/24</name></prefix-list-item><prefix-list-item><name>62.40.118.0/24</name></prefix-list-item></prefix-list><prefix-list><name>EXTERNAL-address-space</name><prefix-list-item><name>62.40.110.0/24</name></prefix-list-item><prefix-list-item><name>62.40.126.0/24</name></prefix-list-item></prefix-list><prefix-list><name>geant-routers</name><prefix-list-item><name>62.40.96.0/23</name></prefix-list-item></prefix-list><prefix-list><name>OPENFLOW-MNG-NF</name></prefix-list><prefix-list><name>GEANT-DNS</name><prefix-list-item><name>62.40.104.250/32</name></prefix-list-item><prefix-list-item><name>62.40.106.9/32</name></prefix-list-item><prefix-list-item><name>62.40.113.29/32</name></prefix-list-item><prefix-list-item><name>62.40.116.114/32</name></prefix-list-item><prefix-list-item><name>62.40.116.122/32</name></prefix-list-item><prefix-list-item><name>62.40.122.146/32</name></prefix-list-item><prefix-list-item><name>83.97.93.200/32</name></prefix-list-item></prefix-list><prefix-list><name>nmteam-dev-servers</name><prefix-list-item><name>62.40.106.202/32</name></prefix-list-item><prefix-list-item><name>62.40.111.253/32</name></prefix-list-item><prefix-list-item><name>62.40.111.254/32</name></prefix-list-item><prefix-list-item><name>83.97.94.182/32</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-DC</name><prefix-list-item><name>62.40.120.134/32</name></prefix-list-item><prefix-list-item><name>62.40.120.136/32</name></prefix-list-item><prefix-list-item><name>62.40.121.121/32</name></prefix-list-item><prefix-list-item><name>83.97.93.15/32</name></prefix-list-item><prefix-list-item><name>83.97.94.116/32</name></prefix-list-item><prefix-list-item><name>83.97.94.129/32</name></prefix-list-item><prefix-list-item><name>83.97.94.130/32</name></prefix-list-item><prefix-list-item><name>195.169.24.66/32</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-Infrastructure</name><prefix-list-item><name>62.40.97.11/32</name></prefix-list-item><prefix-list-item><name>62.40.97.12/32</name></prefix-list-item><prefix-list-item><name>62.40.97.14/32</name></prefix-list-item><prefix-list-item><name>62.40.99.218/32</name></prefix-list-item><prefix-list-item><name>62.40.100.178/32</name></prefix-list-item><prefix-list-item><name>62.40.104.48/29</name></prefix-list-item><prefix-list-item><name>62.40.104.134/31</name></prefix-list-item><prefix-list-item><name>62.40.104.152/29</name></prefix-list-item><prefix-list-item><name>62.40.104.250/32</name></prefix-list-item><prefix-list-item><name>62.40.106.9/32</name></prefix-list-item><prefix-list-item><name>62.40.106.16/28</name></prefix-list-item><prefix-list-item><name>62.40.106.48/29</name></prefix-list-item><prefix-list-item><name>62.40.106.210/32</name></prefix-list-item><prefix-list-item><name>62.40.106.211/32</name></prefix-list-item><prefix-list-item><name>62.40.106.212/32</name></prefix-list-item><prefix-list-item><name>62.40.106.228/32</name></prefix-list-item><prefix-list-item><name>62.40.106.253/32</name></prefix-list-item><prefix-list-item><name>62.40.107.35/32</name></prefix-list-item><prefix-list-item><name>62.40.107.166/32</name></prefix-list-item><prefix-list-item><name>62.40.107.182/32</name></prefix-list-item><prefix-list-item><name>62.40.107.186/32</name></prefix-list-item><prefix-list-item><name>62.40.107.198/32</name></prefix-list-item><prefix-list-item><name>62.40.107.202/32</name></prefix-list-item><prefix-list-item><name>62.40.107.210/32</name></prefix-list-item><prefix-list-item><name>62.40.107.218/32</name></prefix-list-item><prefix-list-item><name>62.40.107.226/32</name></prefix-list-item><prefix-list-item><name>62.40.107.238/32</name></prefix-list-item><prefix-list-item><name>62.40.107.242/32</name></prefix-list-item><prefix-list-item><name>62.40.108.10/32</name></prefix-list-item><prefix-list-item><name>62.40.108.14/32</name></prefix-list-item><prefix-list-item><name>62.40.108.22/32</name></prefix-list-item><prefix-list-item><name>62.40.108.34/32</name></prefix-list-item><prefix-list-item><name>62.40.108.38/32</name></prefix-list-item><prefix-list-item><name>62.40.108.46/32</name></prefix-list-item><prefix-list-item><name>62.40.108.58/32</name></prefix-list-item><prefix-list-item><name>62.40.108.77/32</name></prefix-list-item><prefix-list-item><name>62.40.108.128/27</name></prefix-list-item><prefix-list-item><name>62.40.108.129/32</name></prefix-list-item><prefix-list-item><name>62.40.108.130/32</name></prefix-list-item><prefix-list-item><name>62.40.108.131/32</name></prefix-list-item><prefix-list-item><name>62.40.108.132/32</name></prefix-list-item><prefix-list-item><name>62.40.108.133/32</name></prefix-list-item><prefix-list-item><name>62.40.108.134/32</name></prefix-list-item><prefix-list-item><name>62.40.108.135/32</name></prefix-list-item><prefix-list-item><name>62.40.108.136/32</name></prefix-list-item><prefix-list-item><name>62.40.108.137/32</name></prefix-list-item><prefix-list-item><name>62.40.108.138/32</name></prefix-list-item><prefix-list-item><name>62.40.108.139/32</name></prefix-list-item><prefix-list-item><name>62.40.108.140/32</name></prefix-list-item><prefix-list-item><name>62.40.108.141/32</name></prefix-list-item><prefix-list-item><name>62.40.108.142/32</name></prefix-list-item><prefix-list-item><name>62.40.108.143/32</name></prefix-list-item><prefix-list-item><name>62.40.108.144/32</name></prefix-list-item><prefix-list-item><name>62.40.108.145/32</name></prefix-list-item><prefix-list-item><name>62.40.108.146/32</name></prefix-list-item><prefix-list-item><name>62.40.108.147/32</name></prefix-list-item><prefix-list-item><name>62.40.113.29/32</name></prefix-list-item><prefix-list-item><name>62.40.114.53/32</name></prefix-list-item><prefix-list-item><name>62.40.114.130/32</name></prefix-list-item><prefix-list-item><name>62.40.114.138/32</name></prefix-list-item><prefix-list-item><name>62.40.114.146/32</name></prefix-list-item><prefix-list-item><name>62.40.115.50/32</name></prefix-list-item><prefix-list-item><name>62.40.116.76/32</name></prefix-list-item><prefix-list-item><name>62.40.116.114/32</name></prefix-list-item><prefix-list-item><name>62.40.116.122/32</name></prefix-list-item><prefix-list-item><name>62.40.116.202/32</name></prefix-list-item><prefix-list-item><name>62.40.118.214/32</name></prefix-list-item><prefix-list-item><name>62.40.118.218/32</name></prefix-list-item><prefix-list-item><name>62.40.118.222/32</name></prefix-list-item><prefix-list-item><name>62.40.120.32/29</name></prefix-list-item><prefix-list-item><name>62.40.120.40/29</name></prefix-list-item><prefix-list-item><name>62.40.121.150/32</name></prefix-list-item><prefix-list-item><name>62.40.121.154/32</name></prefix-list-item><prefix-list-item><name>62.40.121.155/32</name></prefix-list-item><prefix-list-item><name>62.40.121.156/32</name></prefix-list-item><prefix-list-item><name>62.40.121.157/32</name></prefix-list-item><prefix-list-item><name>62.40.121.158/32</name></prefix-list-item><prefix-list-item><name>62.40.121.163/32</name></prefix-list-item><prefix-list-item><name>62.40.121.165/32</name></prefix-list-item><prefix-list-item><name>62.40.121.179/32</name></prefix-list-item><prefix-list-item><name>62.40.121.181/32</name></prefix-list-item><prefix-list-item><name>62.40.121.184/32</name></prefix-list-item><prefix-list-item><name>62.40.121.195/32</name></prefix-list-item><prefix-list-item><name>62.40.121.211/32</name></prefix-list-item><prefix-list-item><name>62.40.121.227/32</name></prefix-list-item><prefix-list-item><name>62.40.122.146/32</name></prefix-list-item><prefix-list-item><name>62.40.122.147/32</name></prefix-list-item><prefix-list-item><name>62.40.122.186/32</name></prefix-list-item><prefix-list-item><name>62.40.123.21/32</name></prefix-list-item><prefix-list-item><name>62.40.123.23/32</name></prefix-list-item><prefix-list-item><name>62.40.123.103/32</name></prefix-list-item><prefix-list-item><name>62.40.123.146/32</name></prefix-list-item><prefix-list-item><name>62.40.123.150/32</name></prefix-list-item><prefix-list-item><name>62.40.123.180/32</name></prefix-list-item><prefix-list-item><name>83.97.92.41/32</name></prefix-list-item><prefix-list-item><name>83.97.92.63/32</name></prefix-list-item><prefix-list-item><name>83.97.92.87/32</name></prefix-list-item><prefix-list-item><name>83.97.93.49/32</name></prefix-list-item><prefix-list-item><name>83.97.93.85/32</name></prefix-list-item><prefix-list-item><name>83.97.93.138/32</name></prefix-list-item><prefix-list-item><name>83.97.94.50/32</name></prefix-list-item><prefix-list-item><name>193.63.90.187/32</name></prefix-list-item><prefix-list-item><name>193.63.211.5/32</name></prefix-list-item><prefix-list-item><name>193.63.211.16/32</name></prefix-list-item><prefix-list-item><name>193.63.211.25/32</name></prefix-list-item><prefix-list-item><name>193.63.211.68/32</name></prefix-list-item><prefix-list-item><name>193.63.211.80/32</name></prefix-list-item><prefix-list-item><name>193.63.211.101/32</name></prefix-list-item><prefix-list-item><name>193.63.211.104/32</name></prefix-list-item><prefix-list-item><name>193.63.211.107/32</name></prefix-list-item><prefix-list-item><name>193.63.211.119/32</name></prefix-list-item><prefix-list-item><name>195.169.24.0/28</name></prefix-list-item><prefix-list-item><name>195.169.24.16/30</name></prefix-list-item><prefix-list-item><name>195.169.24.20/31</name></prefix-list-item><prefix-list-item><name>195.169.24.56/29</name></prefix-list-item><prefix-list-item><name>195.169.24.66/32</name></prefix-list-item><prefix-list-item><name>195.169.24.81/32</name></prefix-list-item><prefix-list-item><name>2001:798:3::145/128</name></prefix-list-item></prefix-list><prefix-list><name>route-from-</name></prefix-list><prefix-list><name>route-f</name></prefix-list><prefix-list><name>r</name></prefix-list><prefix-list><name>vuln-scanner</name><prefix-list-item><name>83.97.93.49/32</name></prefix-list-item><prefix-list-item><name>2001:798:3::145/128</name></prefix-list-item></prefix-list><prefix-list><name>geant-anycast</name><prefix-list-item><name>192.33.14.0/24</name></prefix-list-item><prefix-list-item><name>192.58.128.0/24</name></prefix-list-item><prefix-list-item><name>194.0.1.0/24</name></prefix-list-item><prefix-list-item><name>194.0.2.0/24</name></prefix-list-item></prefix-list><prefix-list><name>geant-anycast-v6</name><prefix-list-item><name>2001:678:4::/48</name></prefix-list-item><prefix-list-item><name>2001:678:5::/48</name></prefix-list-item></prefix-list><prefix-list><name>dos-attack-destination</name><prefix-list-item><name>0.0.0.0/32</name></prefix-list-item></prefix-list><prefix-list><name>dos-attack-destination6</name><prefix-list-item><name>::/128</name></prefix-list-item></prefix-list><prefix-list><name>dos-attack-destination-count</name><prefix-list-item><name>0.0.0.0/32</name></prefix-list-item></prefix-list><prefix-list><name>dos-attack-destination-count6</name><prefix-list-item><name>::/128</name></prefix-list-item></prefix-list><prefix-list><name>dos-attack-source</name><prefix-list-item><name>0.0.0.0/32</name></prefix-list-item></prefix-list><prefix-list><name>dos-attack-source6</name><prefix-list-item><name>::/128</name></prefix-list-item></prefix-list><prefix-list><name>dos-attack-source-count</name><prefix-list-item><name>0.0.0.0/32</name></prefix-list-item></prefix-list><prefix-list><name>dos-attack-source-count6</name><prefix-list-item><name>::/128</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-DNS-V6</name><prefix-list-item><name>2001:798:2:284d::30/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::1ba/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:4d::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:f::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:10::2/128</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-Infrastructure-v6</name><prefix-list-item><name>2001:798:3::11f/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::182/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::207/128</name></prefix-list-item><prefix-list-item><name>2001:798:15:a0::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:28:59::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:28:59::7/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:33::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:bb:4d::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:f::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:ee:10::2/128</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-DC-v6</name><prefix-list-item><name>2001:610:9d8:5::2/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::123/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::24a/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::257/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::258/128</name></prefix-list-item><prefix-list-item><name>2001:798:3:0:9dde:e417:7eb0:c47a/128</name></prefix-list-item><prefix-list-item><name>2001:798:3:0:ac78:a1b4:c117:cade/128</name></prefix-list-item></prefix-list><prefix-list><name>geant-ias-address-space</name><prefix-list-item><name>83.97.88.0/21</name></prefix-list-item></prefix-list><prefix-list><name>geant-ias-address-space-V6</name><prefix-list-item><name>2001:798:1::/48</name></prefix-list-item></prefix-list><prefix-list><name>INTERNAL-address-spaceV6</name><prefix-list-item><name>2001:798:ee::/48</name></prefix-list-item></prefix-list><prefix-list><name>EXTERNAL-address-spaceV6</name><prefix-list-item><name>2001:798:dd::/48</name></prefix-list-item><prefix-list-item><name>2001:798:f200::/39</name></prefix-list-item><prefix-list-item><name>2001:798:f400::/38</name></prefix-list-item><prefix-list-item><name>2001:798:f800::/40</name></prefix-list-item></prefix-list><prefix-list><name>RE_BGP_inet</name><apply-path>protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>RE_BGP_inet6</name><apply-path>protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>IAS_BGP_inet</name><apply-path>routing-instances IAS protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>IAS_BGP_inet6</name><apply-path>routing-instances IAS protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>IAS_DUMMY_BGP_inet</name><apply-path>routing-instances IAS_DUMMY protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>IAS_DUMMY_BGP_inet6</name><apply-path>routing-instances IAS_DUMMY protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>lhcone-l3vpn_BGP_inet</name><apply-path>routing-instances lhcone-l3vpn protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>lhcone-l3vpn_BGP_inet6</name><apply-path>routing-instances lhcone-l3vpn protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>taas-control_BGP_inet</name><apply-path>routing-instances taas-control protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>taas-control_BGP_inet6</name><apply-path>routing-instances taas-control protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>mgmt-l3vpn_BGP_inet</name><apply-path>routing-instances mgmt-l3vpn protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>mgmt-l3vpn_BGP_inet6</name><apply-path>routing-instances mgmt-l3vpn protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>mdvpn_BGP_inet</name><apply-path>routing-instances mdvpn protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>mdvpn_BGP_inet6</name><apply-path>routing-instances mdvpn protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>mdvpn-nren-gn_BGP_inet</name><apply-path>routing-instances mdvpn-nren-gn protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>mdvpn-nren-gn_BGP_inet6</name><apply-path>routing-instances mdvpn-nren-gn protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>confine-l3vpn_BGP_inet</name><apply-path>routing-instances confine-l3vpn protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>confine-l3vpn_BGP_inet6</name><apply-path>routing-instances confine-l3vpn protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>VPN-PROXY_BGP_inet</name><apply-path>logical-systems VPN-PROXY protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>VPN-PROXY_BGP_inet6</name><apply-path>logical-systems VPN-PROXY protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>VRR_BGP_inet</name><apply-path>logical-systems VRR protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>VRR_BGP_inet6</name><apply-path>logical-systems VRR protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>GEANT-DNS-EXT</name><prefix-list-item><name>62.40.104.250/32</name></prefix-list-item><prefix-list-item><name>62.40.116.114/32</name></prefix-list-item><prefix-list-item><name>62.40.116.122/32</name></prefix-list-item><prefix-list-item><name>83.97.93.200/32</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-MSDP</name><apply-path>protocols msdp group <*> peer <*></apply-path></prefix-list><prefix-list><name>GEANT-SNMP</name><apply-path>snmp community <*> clients <*></apply-path></prefix-list><prefix-list><name>GEANT-LDP</name><apply-path>protocols l2circuit neighbor <*></apply-path></prefix-list><prefix-list><name>fod</name><prefix-list-item><name>83.97.92.182/32</name></prefix-list-item><prefix-list-item><name>83.97.92.183/32</name></prefix-list-item><prefix-list-item><name>83.97.95.43/32</name></prefix-list-item><prefix-list-item><name>83.97.95.176/32</name></prefix-list-item></prefix-list><prefix-list><name>ddos-scrubbing</name><prefix-list-item><name>62.40.100.178/32</name></prefix-list-item><prefix-list-item><name>83.97.92.41/32</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-lg</name><prefix-list-item><name>83.97.92.82/32</name></prefix-list-item><prefix-list-item><name>83.97.92.141/32</name></prefix-list-item><prefix-list-item><name>83.97.93.39/32</name></prefix-list-item><prefix-list-item><name>83.97.93.62/32</name></prefix-list-item><prefix-list-item><name>83.97.93.63/32</name></prefix-list-item><prefix-list-item><name>83.97.94.134/32</name></prefix-list-item><prefix-list-item><name>83.97.94.135/32</name></prefix-list-item><prefix-list-item><name>83.97.94.136/32</name></prefix-list-item><prefix-list-item><name>83.97.94.137/32</name></prefix-list-item><prefix-list-item><name>83.97.94.138/32</name></prefix-list-item><prefix-list-item><name>83.97.94.139/32</name></prefix-list-item><prefix-list-item><name>2001:798:3::25c/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::25d/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::25e/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::25f/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::260/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::261/128</name></prefix-list-item></prefix-list><prefix-list><name>dashboard-servers</name><prefix-list-item><name>62.40.104.48/29</name></prefix-list-item><prefix-list-item><name>62.40.104.152/29</name></prefix-list-item><prefix-list-item><name>62.40.114.0/28</name></prefix-list-item><prefix-list-item><name>62.40.114.16/28</name></prefix-list-item></prefix-list><prefix-list><name>dashboard-servers-v6</name><prefix-list-item><name>2001:798:f99c:18::/64</name></prefix-list-item><prefix-list-item><name>2001:798:f99c:22::/64</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-Superpop-v4</name><prefix-list-item><name>83.97.92.0/22</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-Superpop-v6</name><prefix-list-item><name>2001:798:3::/64</name></prefix-list-item></prefix-list><prefix-list><name>geant-address-space-v6</name><prefix-list-item><name>2001:798::/32</name></prefix-list-item></prefix-list><prefix-list><name>opennsa-servers</name><prefix-list-item><name>62.40.109.68/32</name></prefix-list-item><prefix-list-item><name>83.97.93.92/32</name></prefix-list-item><prefix-list-item><name>83.97.95.58/32</name></prefix-list-item><prefix-list-item><name>83.97.95.59/32</name></prefix-list-item><prefix-list-item><name>83.97.95.60/32</name></prefix-list-item><prefix-list-item><name>83.97.95.62/32</name></prefix-list-item></prefix-list><prefix-list><name>opennsa-servers-v6</name><prefix-list-item><name>2001:798:3::15f/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::2d4/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::2d5/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::2d6/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::33a/128</name></prefix-list-item></prefix-list><prefix-list><name>GEANT-rancid</name><prefix-list-item><name>83.97.92.216/32</name></prefix-list-item><prefix-list-item><name>83.97.92.217/32</name></prefix-list-item><prefix-list-item><name>83.97.92.220/32</name></prefix-list-item></prefix-list><prefix-list><name>corporate-address-space6</name><prefix-list-item><name>2001:610:9d8::/62</name></prefix-list-item><prefix-list-item><name>2001:610:9d8:4::/62</name></prefix-list-item><prefix-list-item><name>2001:610:9d8:14::/64</name></prefix-list-item><prefix-list-item><name>2001:798:4::/48</name></prefix-list-item><prefix-list-item><name>2001:799:cb2::/56</name></prefix-list-item><prefix-list-item><name>2001:799:cb2:100::/64</name></prefix-list-item><prefix-list-item><name>2001:799:cb2:101::/64</name></prefix-list-item><prefix-list-item><name>2001:799:cb2:102::/64</name></prefix-list-item><prefix-list-item><name>2001:799:cb2:103::/64</name></prefix-list-item><prefix-list-item><name>2001:799:cb2:104::/64</name></prefix-list-item><prefix-list-item><name>2001:799:cb2:108::/64</name></prefix-list-item><prefix-list-item><name>2001:799:cb2:110::/64</name></prefix-list-item></prefix-list><prefix-list><name>corporate-address-space</name><prefix-list-item><name>62.40.99.129/32</name></prefix-list-item><prefix-list-item><name>62.40.99.148/32</name></prefix-list-item><prefix-list-item><name>62.40.99.160/27</name></prefix-list-item><prefix-list-item><name>62.40.99.194/32</name></prefix-list-item><prefix-list-item><name>62.40.99.201/32</name></prefix-list-item><prefix-list-item><name>62.40.101.0/24</name></prefix-list-item><prefix-list-item><name>62.40.111.0/24</name></prefix-list-item><prefix-list-item><name>62.40.112.0/24</name></prefix-list-item><prefix-list-item><name>62.40.122.248/29</name></prefix-list-item><prefix-list-item><name>195.169.24.0/24</name></prefix-list-item></prefix-list><prefix-list><name>geant-ims</name><prefix-list-item><name>83.97.94.123/32</name></prefix-list-item><prefix-list-item><name>83.97.94.124/32</name></prefix-list-item><prefix-list-item><name>83.97.94.125/32</name></prefix-list-item><prefix-list-item><name>83.97.95.109/32</name></prefix-list-item></prefix-list><prefix-list><name>TWAMP_CLIENTS</name><apply-path>services rpm twamp server client-list <*> address <*.*></apply-path></prefix-list><prefix-list><name>MDVPN-SI-TOOLS-V4</name><prefix-list-item><name>83.97.93.234/32</name></prefix-list-item><prefix-list-item><name>83.97.95.48/32</name></prefix-list-item></prefix-list><prefix-list><name>MDVPN-SI-TOOLS-V6</name><prefix-list-item><name>2001:798:3::1cb/128</name></prefix-list-item><prefix-list-item><name>2001:798:4:3::2cb/128</name></prefix-list-item></prefix-list><prefix-list><name>FXP_SUBNET</name><apply-path>interfaces fxp0 unit 0 family inet address <*.*></apply-path></prefix-list><prefix-list><name>librenms-servers</name><prefix-list-item><name>83.97.95.37/32</name></prefix-list-item></prefix-list><prefix-list><name>ansible-servers</name><prefix-list-item><name>83.97.95.177/32</name></prefix-list-item></prefix-list><prefix-list><name>ne-lnetd-servers</name><prefix-list-item><name>83.97.95.183/32</name></prefix-list-item></prefix-list><prefix-list><name>NE_SERVERS_V6</name><prefix-list-item><name>2001:798:3::288/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::317/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::318/128</name></prefix-list-item><prefix-list-item><name>2001:799:cb2:111::254/128</name></prefix-list-item></prefix-list><prefix-list><name>OC_SERVERS_V4</name><prefix-list-item><name>83.97.92.61/32</name></prefix-list-item><prefix-list-item><name>83.97.92.87/32</name></prefix-list-item><prefix-list-item><name>83.97.92.92/32</name></prefix-list-item><prefix-list-item><name>83.97.92.99/32</name></prefix-list-item><prefix-list-item><name>83.97.93.23/32</name></prefix-list-item><prefix-list-item><name>83.97.93.37/32</name></prefix-list-item></prefix-list><prefix-list><name>OC_SERVERS_V6</name><prefix-list-item><name>2001:798:3::55/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::6f/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::7b/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::83/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::8a/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::12b/128</name></prefix-list-item><prefix-list-item><name>2001:798:3::139/128</name></prefix-list-item></prefix-list><prefix-list><name>JUMP_SERVERS_V4</name><prefix-list-item><name>83.97.94.114/32</name></prefix-list-item></prefix-list><prefix-list><name>JUMP_SERVERS_V6</name><prefix-list-item><name>2001:798:3::246/128</name></prefix-list-item></prefix-list><prefix-list><name>NE_SERVERS_V4</name><prefix-list-item><name>62.40.111.115/32</name></prefix-list-item><prefix-list-item><name>62.40.111.254/32</name></prefix-list-item><prefix-list-item><name>83.97.94.0/32</name></prefix-list-item><prefix-list-item><name>83.97.94.182/32</name></prefix-list-item><prefix-list-item><name>83.97.95.37/32</name></prefix-list-item><prefix-list-item><name>83.97.95.177/32</name></prefix-list-item></prefix-list><prefix-list><name>VPN-PROXY_RI_BGP_inet</name><apply-path>logical-systems VPN-PROXY routing-instances <*> protocols bgp group <*> neighbor <*.*></apply-path></prefix-list><prefix-list><name>VPN-PROXY_RI_BGP_inet6</name><apply-path>logical-systems VPN-PROXY routing-instances <*> protocols bgp group <*> neighbor <*:*></apply-path></prefix-list><prefix-list><name>COMMUNITY_NTP</name><prefix-list-item><name>192.53.103.108/32</name></prefix-list-item><prefix-list-item><name>192.87.106.2/32</name></prefix-list-item><prefix-list-item><name>193.62.22.66/32</name></prefix-list-item><prefix-list-item><name>193.204.114.233/32</name></prefix-list-item><prefix-list-item><name>195.113.144.201/32</name></prefix-list-item></prefix-list><prefix-list><name>PUBLIC_NTP</name><prefix-list-item><name>216.239.35.0/32</name></prefix-list-item><prefix-list-item><name>216.239.35.4/32</name></prefix-list-item></prefix-list><prefix-list><name>GEANT_NTP</name><prefix-list-item><name>62.40.123.21/32</name></prefix-list-item><prefix-list-item><name>62.40.123.23/32</name></prefix-list-item><prefix-list-item><name>62.40.123.103/32</name></prefix-list-item></prefix-list><prefix-list><name>CORIANT_MGMT_G30_LOOPBACKS</name><prefix-list-item><name>172.18.253.0/24</name></prefix-list-item></prefix-list><prefix-list><name>CORIANT_MGMT_LOCAL_LANS</name><prefix-list-item><name>172.18.31.0/24</name></prefix-list-item></prefix-list><prefix-list><name>CORIANT_MGMT_TNMS</name><prefix-list-item><name>172.18.0.0/23</name></prefix-list-item></prefix-list><prefix-list><name>CORIANT_MGMT_NETS</name><prefix-list-item><name>172.18.254.0/30</name></prefix-list-item><prefix-list-item><name>172.18.254.4/30</name></prefix-list-item><prefix-list-item><name>172.18.254.8/30</name></prefix-list-item></prefix-list><prefix-list><name>external-project62001:798:33:b::6e/128</name></prefix-list><prefix-list><name>external-project62001:798:ee:b::6a/128</name></prefix-list><prefix-list><name>route-from-KREN</name><prefix-list-item><name>185.182.158.0/24</name></prefix-list-item></prefix-list><prefix-list><name>route-from-AMRES</name><prefix-list-item><name>78.28.128.0/18</name></prefix-list-item><prefix-list-item><name>91.187.128.0/19</name></prefix-list-item><prefix-list-item><name>91.187.128.0/20</name></prefix-list-item><prefix-list-item><name>91.187.144.0/20</name></prefix-list-item><prefix-list-item><name>147.91.0.0/16</name></prefix-list-item><prefix-list-item><name>147.91.0.0/17</name></prefix-list-item><prefix-list-item><name>147.91.0.0/21</name></prefix-list-item><prefix-list-item><name>147.91.8.0/21</name></prefix-list-item><prefix-list-item><name>147.91.128.0/17</name></prefix-list-item><prefix-list-item><name>147.91.172.0/22</name></prefix-list-item><prefix-list-item><name>147.91.176.0/22</name></prefix-list-item><prefix-list-item><name>160.99.0.0/16</name></prefix-list-item><prefix-list-item><name>160.99.0.0/17</name></prefix-list-item><prefix-list-item><name>160.99.128.0/17</name></prefix-list-item><prefix-list-item><name>185.181.68.0/22</name></prefix-list-item></prefix-list><prefix-list><name>route-from-AMRES-v6</name><prefix-list-item><name>2001:67c:3ac::/48</name></prefix-list-item><prefix-list-item><name>2001:4170::/32</name></prefix-list-item></prefix-list><prefix-list><name>default-route-v6</name><prefix-list-item><name>::/0</name></prefix-list-item></prefix-list><prefix-list><name>default-route-v4</name><prefix-list-item><name>0.0.0.0/0</name></prefix-list-item></prefix-list><prefix-list><name>route-from-KIFU-v6</name><prefix-list-item><name>2001:678:4::/47</name></prefix-list-item><prefix-list-item><name>2001:678:4::/48</name></prefix-list-item><prefix-list-item><name>2001:678:5::/48</name></prefix-list-item><prefix-list-item><name>2001:67c:3ac::/48</name></prefix-list-item><prefix-list-item><name>2001:738::/32</name></prefix-list-item><prefix-list-item><name>2001:738:4::/48</name></prefix-list-item><prefix-list-item><name>2001:4170::/32</name></prefix-list-item><prefix-list-item><name>2620:7d:e000::/48</name></prefix-list-item><prefix-list-item><name>2a00:e6a0::/32</name></prefix-list-item><prefix-list-item><name>2a00:e6a0:3::/48</name></prefix-list-item><prefix-list-item><name>2a0f:7ec0:100::/48</name></prefix-list-item></prefix-list><prefix-list><name>route-from-KIFU</name><prefix-list-item><name>5.28.0.0/21</name></prefix-list-item><prefix-list-item><name>44.31.98.0/24</name></prefix-list-item><prefix-list-item><name>74.116.176.0/22</name></prefix-list-item><prefix-list-item><name>74.116.176.0/24</name></prefix-list-item><prefix-list-item><name>74.116.178.0/24</name></prefix-list-item><prefix-list-item><name>74.116.179.0/24</name></prefix-list-item><prefix-list-item><name>78.28.128.0/18</name></prefix-list-item><prefix-list-item><name>81.160.128.0/17</name></prefix-list-item><prefix-list-item><name>84.206.0.0/16</name></prefix-list-item><prefix-list-item><name>91.187.128.0/19</name></prefix-list-item><prefix-list-item><name>91.187.128.0/20</name></prefix-list-item><prefix-list-item><name>91.187.144.0/20</name></prefix-list-item><prefix-list-item><name>91.208.95.0/24</name></prefix-list-item><prefix-list-item><name>146.110.0.0/16</name></prefix-list-item><prefix-list-item><name>147.91.0.0/16</name></prefix-list-item><prefix-list-item><name>147.91.0.0/17</name></prefix-list-item><prefix-list-item><name>147.91.0.0/21</name></prefix-list-item><prefix-list-item><name>147.91.8.0/21</name></prefix-list-item><prefix-list-item><name>147.91.128.0/17</name></prefix-list-item><prefix-list-item><name>147.91.172.0/22</name></prefix-list-item><prefix-list-item><name>147.91.176.0/22</name></prefix-list-item><prefix-list-item><name>148.6.0.0/16</name></prefix-list-item><prefix-list-item><name>152.66.0.0/16</name></prefix-list-item><prefix-list-item><name>152.66.127.0/24</name></prefix-list-item><prefix-list-item><name>157.181.0.0/16</name></prefix-list-item><prefix-list-item><name>160.99.0.0/16</name></prefix-list-item><prefix-list-item><name>160.99.0.0/17</name></prefix-list-item><prefix-list-item><name>160.99.128.0/17</name></prefix-list-item><prefix-list-item><name>160.114.0.0/16</name></prefix-list-item><prefix-list-item><name>171.19.0.0/16</name></prefix-list-item><prefix-list-item><name>185.181.68.0/22</name></prefix-list-item><prefix-list-item><name>192.146.134.0/23</name></prefix-list-item><prefix-list-item><name>192.153.18.0/24</name></prefix-list-item><prefix-list-item><name>192.160.172.0/24</name></prefix-list-item><prefix-list-item><name>192.188.242.0/23</name></prefix-list-item><prefix-list-item><name>192.188.244.0/22</name></prefix-list-item><prefix-list-item><name>192.190.173.0/24</name></prefix-list-item><prefix-list-item><name>193.6.0.0/16</name></prefix-list-item><prefix-list-item><name>193.6.238.0/24</name></prefix-list-item><prefix-list-item><name>193.224.0.0/15</name></prefix-list-item><prefix-list-item><name>193.239.148.0/24</name></prefix-list-item><prefix-list-item><name>193.239.149.0/24</name></prefix-list-item><prefix-list-item><name>194.0.1.0/24</name></prefix-list-item><prefix-list-item><name>194.0.2.0/24</name></prefix-list-item><prefix-list-item><name>194.180.184.0/22</name></prefix-list-item><prefix-list-item><name>194.180.187.0/24</name></prefix-list-item><prefix-list-item><name>195.111.0.0/16</name></prefix-list-item><prefix-list-item><name>195.199.0.0/16</name></prefix-list-item><prefix-list-item><name>198.32.64.0/24</name></prefix-list-item></prefix-list><prefix-list><name>route-from-CARnet</name><prefix-list-item><name>31.147.0.0/16</name></prefix-list-item><prefix-list-item><name>46.31.136.0/21</name></prefix-list-item><prefix-list-item><name>46.31.136.0/22</name></prefix-list-item><prefix-list-item><name>46.31.136.0/24</name></prefix-list-item><prefix-list-item><name>46.31.137.0/24</name></prefix-list-item><prefix-list-item><name>46.31.138.0/24</name></prefix-list-item><prefix-list-item><name>46.31.139.0/24</name></prefix-list-item><prefix-list-item><name>46.31.140.0/22</name></prefix-list-item><prefix-list-item><name>46.31.140.0/24</name></prefix-list-item><prefix-list-item><name>46.31.141.0/24</name></prefix-list-item><prefix-list-item><name>46.31.142.0/24</name></prefix-list-item><prefix-list-item><name>46.31.143.0/24</name></prefix-list-item><prefix-list-item><name>82.132.0.0/17</name></prefix-list-item><prefix-list-item><name>91.142.139.0/24</name></prefix-list-item><prefix-list-item><name>161.53.0.0/16</name></prefix-list-item><prefix-list-item><name>192.84.91.0/24</name></prefix-list-item><prefix-list-item><name>192.84.92.0/24</name></prefix-list-item><prefix-list-item><name>192.84.105.0/24</name></prefix-list-item><prefix-list-item><name>192.84.106.0/24</name></prefix-list-item><prefix-list-item><name>193.198.0.0/16</name></prefix-list-item></prefix-list><prefix-list><name>route-from-CARNET-v6</name><prefix-list-item><name>2001:b68::/32</name></prefix-list-item></prefix-list><prefix-list><name>NOMIOS_SUPPORT_SSH</name><prefix-list-item><name>83.97.93.238/32</name></prefix-list-item></prefix-list><prefix-list><name>route-from-ARNES</name><prefix-list-item><name>74.116.176.0/22</name></prefix-list-item><prefix-list-item><name>74.116.176.0/24</name></prefix-list-item><prefix-list-item><name>74.116.178.0/24</name></prefix-list-item><prefix-list-item><name>74.116.179.0/24</name></prefix-list-item><prefix-list-item><name>84.39.208.0/20</name></prefix-list-item><prefix-list-item><name>88.200.0.0/17</name></prefix-list-item><prefix-list-item><name>91.199.15.0/24</name></prefix-list-item><prefix-list-item><name>91.199.17.0/24</name></prefix-list-item><prefix-list-item><name>91.208.95.0/24</name></prefix-list-item><prefix-list-item><name>91.220.191.0/24</name></prefix-list-item><prefix-list-item><name>91.220.194.0/24</name></prefix-list-item><prefix-list-item><name>92.244.64.0/19</name></prefix-list-item><prefix-list-item><name>95.87.128.0/18</name></prefix-list-item><prefix-list-item><name>109.127.192.0/18</name></prefix-list-item><prefix-list-item><name>141.255.192.0/18</name></prefix-list-item><prefix-list-item><name>149.62.64.0/18</name></prefix-list-item><prefix-list-item><name>153.5.0.0/16</name></prefix-list-item><prefix-list-item><name>163.159.0.0/17</name></prefix-list-item><prefix-list-item><name>163.159.0.0/18</name></prefix-list-item><prefix-list-item><name>163.159.64.0/18</name></prefix-list-item><prefix-list-item><name>163.159.128.0/17</name></prefix-list-item><prefix-list-item><name>164.8.0.0/16</name></prefix-list-item><prefix-list-item><name>164.8.0.0/17</name></prefix-list-item><prefix-list-item><name>164.8.128.0/17</name></prefix-list-item><prefix-list-item><name>164.8.128.0/20</name></prefix-list-item><prefix-list-item><name>178.172.0.0/17</name></prefix-list-item><prefix-list-item><name>185.13.52.0/22</name></prefix-list-item><prefix-list-item><name>185.36.4.0/24</name></prefix-list-item><prefix-list-item><name>185.36.5.0/24</name></prefix-list-item><prefix-list-item><name>185.36.6.0/24</name></prefix-list-item><prefix-list-item><name>185.36.7.0/24</name></prefix-list-item><prefix-list-item><name>185.100.1.0/24</name></prefix-list-item><prefix-list-item><name>185.182.160.0/22</name></prefix-list-item><prefix-list-item><name>185.182.160.0/24</name></prefix-list-item><prefix-list-item><name>185.182.161.0/24</name></prefix-list-item><prefix-list-item><name>185.182.162.0/24</name></prefix-list-item><prefix-list-item><name>185.182.163.0/24</name></prefix-list-item><prefix-list-item><name>185.206.184.0/22</name></prefix-list-item><prefix-list-item><name>185.206.184.0/23</name></prefix-list-item><prefix-list-item><name>185.206.186.0/23</name></prefix-list-item><prefix-list-item><name>185.221.56.0/22</name></prefix-list-item><prefix-list-item><name>192.33.14.0/24</name></prefix-list-item><prefix-list-item><name>192.33.14.30/32</name></prefix-list-item><prefix-list-item><name>192.58.128.0/24</name></prefix-list-item><prefix-list-item><name>192.58.128.30/32</name></prefix-list-item><prefix-list-item><name>193.2.0.0/16</name></prefix-list-item><prefix-list-item><name>193.138.1.0/24</name></prefix-list-item><prefix-list-item><name>193.138.2.0/24</name></prefix-list-item><prefix-list-item><name>194.0.1.0/24</name></prefix-list-item><prefix-list-item><name>194.0.2.0/24</name></prefix-list-item><prefix-list-item><name>194.0.7.0/24</name></prefix-list-item><prefix-list-item><name>194.180.184.0/22</name></prefix-list-item><prefix-list-item><name>194.180.187.0/24</name></prefix-list-item><prefix-list-item><name>194.249.0.0/16</name></prefix-list-item><prefix-list-item><name>195.47.197.0/24</name></prefix-list-item><prefix-list-item><name>195.234.53.0/24</name></prefix-list-item><prefix-list-item><name>198.32.64.0/24</name></prefix-list-item><prefix-list-item><name>199.7.63.0/24</name></prefix-list-item><prefix-list-item><name>209.131.157.0/24</name></prefix-list-item><prefix-list-item><name>212.101.128.0/18</name></prefix-list-item><prefix-list-item><name>212.235.128.0/17</name></prefix-list-item><prefix-list-item><name>216.87.146.0/24</name></prefix-list-item><prefix-list-item><name>216.87.147.0/24</name></prefix-list-item></prefix-list><prefix-list><name>route-from-ARNES-v6</name><prefix-list-item><name>2001:503:c27::/48</name></prefix-list-item><prefix-list-item><name>2001:503:c27::2:30/128</name></prefix-list-item><prefix-list-item><name>2001:503:231d::/48</name></prefix-list-item><prefix-list-item><name>2001:503:231d::2:30/128</name></prefix-list-item><prefix-list-item><name>2001:678:4::/47</name></prefix-list-item><prefix-list-item><name>2001:678:4::/48</name></prefix-list-item><prefix-list-item><name>2001:678:5::/48</name></prefix-list-item><prefix-list-item><name>2001:678:a::/48</name></prefix-list-item><prefix-list-item><name>2001:67c:40::/48</name></prefix-list-item><prefix-list-item><name>2001:67c:9c::/48</name></prefix-list-item><prefix-list-item><name>2001:67c:69c::/48</name></prefix-list-item><prefix-list-item><name>2001:7f8:46::/48</name></prefix-list-item><prefix-list-item><name>2001:1470::/29</name></prefix-list-item><prefix-list-item><name>2001:1470::/32</name></prefix-list-item><prefix-list-item><name>2402:79c0:1127::/48</name></prefix-list-item><prefix-list-item><name>2402:79c0:1145::/48</name></prefix-list-item><prefix-list-item><name>2402:79c0:1149::/48</name></prefix-list-item><prefix-list-item><name>2402:79c0:1154::/48</name></prefix-list-item><prefix-list-item><name>2402:79c0:1155::/48</name></prefix-list-item><prefix-list-item><name>2402:79c0:1156::/48</name></prefix-list-item><prefix-list-item><name>2402:79c0:1157::/48</name></prefix-list-item><prefix-list-item><name>2620:74:2d::/48</name></prefix-list-item><prefix-list-item><name>2620:7d:e000::/48</name></prefix-list-item><prefix-list-item><name>2a00:1368::/32</name></prefix-list-item><prefix-list-item><name>2a00:1600::/32</name></prefix-list-item><prefix-list-item><name>2a00:d440::/29</name></prefix-list-item><prefix-list-item><name>2a0b:15c0::/29</name></prefix-list-item><prefix-list-item><name>2a0b:15c0::/30</name></prefix-list-item><prefix-list-item><name>2a0b:15c4::/30</name></prefix-list-item><prefix-list-item><name>2a0f:eb80::/32</name></prefix-list-item><prefix-list-item><name>2a0f:eb80::/44</name></prefix-list-item><prefix-list-item><name>2a0f:eb80::/48</name></prefix-list-item><prefix-list-item><name>2a0f:eb80:1::/48</name></prefix-list-item><prefix-list-item><name>2a0f:eb80:a::/48</name></prefix-list-item><prefix-list-item><name>2a0f:eb80:f::/48</name></prefix-list-item></prefix-list><prefix-list><name>nemo-servers</name><prefix-list-item><name>83.97.93.45/32</name></prefix-list-item><prefix-list-item><name>83.97.93.46/32</name></prefix-list-item></prefix-list><prefix-list><name>route-from-MARnet</name><prefix-list-item><name>185.153.48.0/24</name></prefix-list-item><prefix-list-item><name>185.153.49.0/24</name></prefix-list-item><prefix-list-item><name>185.153.50.0/24</name></prefix-list-item><prefix-list-item><name>185.153.51.0/24</name></prefix-list-item><prefix-list-item><name>185.162.192.0/22</name></prefix-list-item><prefix-list-item><name>194.149.128.0/19</name></prefix-list-item><prefix-list-item><name>194.149.132.0/24</name></prefix-list-item><prefix-list-item><name>194.149.135.0/24</name></prefix-list-item><prefix-list-item><name>194.149.136.0/24</name></prefix-list-item><prefix-list-item><name>194.149.137.0/24</name></prefix-list-item><prefix-list-item><name>194.149.138.0/24</name></prefix-list-item><prefix-list-item><name>194.149.141.0/24</name></prefix-list-item></prefix-list><prefix-list><name>route-from-MARNET-v6</name><prefix-list-item><name>2a02:e48::/32</name></prefix-list-item></prefix-list><policy-statement><name>ASM-Allow</name><term><name>Bogon-Groups</name><from><route-filter><address>224.0.1.2/32</address><exact/></route-filter><route-filter><address>224.0.1.1/32</address><exact/></route-filter><route-filter><address>224.0.1.3/32</address><exact/></route-filter><route-filter><address>224.0.1.8/32</address><exact/></route-filter><route-filter><address>224.0.1.22/32</address><exact/></route-filter><route-filter><address>224.0.1.24/32</address><exact/></route-filter><route-filter><address>224.0.1.25/32</address><exact/></route-filter><route-filter><address>224.0.1.35/32</address><exact/></route-filter><route-filter><address>224.0.1.39/32</address><exact/></route-filter><route-filter><address>224.0.1.40/32</address><exact/></route-filter><route-filter><address>224.0.1.60/32</address><exact/></route-filter><route-filter><address>224.0.1.76/32</address><exact/></route-filter><route-filter><address>224.0.2.1/32</address><exact/></route-filter><route-filter><address>224.0.2.2/32</address><exact/></route-filter><route-filter><address>224.1.0.1/32</address><exact/></route-filter><route-filter><address>224.1.0.38/32</address><exact/></route-filter><route-filter><address>224.77.0.0/16</address><orlonger/></route-filter><route-filter><address>224.128.0.0/24</address><orlonger/></route-filter><route-filter><address>232.0.0.0/8</address><orlonger/></route-filter><route-filter><address>233.0.0.0/24</address><orlonger/></route-filter><route-filter><address>233.128.0.0/24</address><orlonger/></route-filter><route-filter><address>239.0.0.0/8</address><orlonger/></route-filter><route-filter><address>224.0.0.0/24</address><orlonger/></route-filter></from><then><trace/><reject/></then></term><term><name>ASM-Whitelist</name><from><route-filter><address>224.0.0.0/4</address><orlonger/></route-filter></from><then><accept/></then></term><term><name>Deny-Everything-Else</name><then><reject/></then></term></policy-statement><policy-statement><name>Bogon-Sources</name><term><name>RFC-1918-Addresses</name><from><source-address-filter><address>10.0.0.0/8</address><orlonger/></source-address-filter><source-address-filter><address>127.0.0.0/8</address><orlonger/></source-address-filter><source-address-filter><address>172.16.0.0/12</address><orlonger/></source-address-filter><source-address-filter><address>192.168.0.0/16</address><orlonger/></source-address-filter></from><then><reject/></then></term><term><name>accept-everything-else</name><then><next>policy</next></then></term></policy-statement><policy-statement><name>CORIANT_MGMT_OSPF_EXPORT</name><from><route-filter><address>172.18.0.0/16</address><exact/></route-filter></from><then><accept/></then></policy-statement><policy-statement><name>NEXT_HOP_SELF</name><term><name>EXTERNAL</name><from><route-type>external</route-type></from><then><next-hop><self/></next-hop></then></term></policy-statement><policy-statement><name>RE__ISIS__RE__EXPORT_TWAMP_AGGREGATE_INTERFACE</name><term><name>TWAMP</name><from><protocol>aggregate</protocol><route-filter><address>62.40.97.196/31</address><exact/></route-filter></from><then><accept/></then></term></policy-statement><policy-statement><name>accept-all-flowspec</name><then><accept/></then></policy-statement><policy-statement><name>dest-class-usage</name><term><name>DWS</name><from><community>geant-dws</community></from><then><destination-class>dws-in</destination-class></then></term><term><name>google-in</name><from><community>geant-google</community></from><then><destination-class>google-in</destination-class></then></term><term><name>ixpeers-in</name><from><community>geant-ixpeers</community></from><then><destination-class>ixpeers-in</destination-class></then></term></policy-statement><policy-statement><name>mdvpn-export</name><term><name>1</name><from><protocol>bgp</protocol><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter></from><then><community><add/><community-name>mdvpn-comm</community-name></community><accept/></then></term><term><name>2</name><then><reject/></then></term></policy-statement><policy-statement><name>mdvpn-import</name><term><name>1</name><from><protocol>bgp</protocol><community>mdvpn-comm</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter></from><then><accept/></then></term><term><name>2</name><then><reject/></then></term></policy-statement><policy-statement><name>nhs-ibgp</name><term><name>next-hop-self</name><then><next-hop><self/></next-hop></then></term></policy-statement><policy-statement><name>no-bsr</name><then><reject/></then></policy-statement><policy-statement><name>pim-export</name><from><interface>xe-1/0/0.36</interface><interface>ae13.0</interface><interface>ae16.1</interface><interface>ae10.100</interface><interface>ae18.100</interface></from><then><reject/></then></policy-statement><policy-statement><name>pim-import</name><from><interface>xe-1/0/0.36</interface><interface>ae13.0</interface><interface>ae16.1</interface><interface>ae10.100</interface><interface>ae18.100</interface></from><then><reject/></then></policy-statement><policy-statement><name>ps-AS-SELF-REJECT</name><term><name>1</name><from><as-path>AS-SELF</as-path></from><then><reject/></then></term></policy-statement><policy-statement><name>ps-BOGONS</name><term><name>bogons</name><from><route-filter><address>0.0.0.0/0</address><exact/></route-filter><route-filter><address>0.0.0.0/8</address><orlonger/></route-filter><route-filter><address>10.0.0.0/8</address><orlonger/></route-filter><route-filter><address>127.0.0.0/8</address><orlonger/></route-filter><route-filter><address>169.254.0.0/16</address><orlonger/></route-filter><route-filter><address>172.16.0.0/12</address><orlonger/></route-filter><route-filter><address>192.0.0.0/24</address><orlonger/></route-filter><route-filter><address>192.0.2.0/24</address><orlonger/></route-filter><route-filter><address>192.168.0.0/16</address><orlonger/></route-filter><route-filter><address>198.18.0.0/15</address><orlonger/></route-filter><route-filter><address>198.51.100.0/24</address><orlonger/></route-filter><route-filter><address>203.0.113.0/24</address><orlonger/></route-filter><route-filter><address>224.0.0.0/3</address><orlonger/></route-filter><route-filter><address>100.64.0.0/10</address><orlonger/></route-filter></from><then><reject/></then></term><term><name>as-path-length-limit</name><from><protocol>bgp</protocol><as-path>MAX-AS_PATH</as-path></from><then><reject/></then></term><term><name>community-limit</name><from><protocol>bgp</protocol><community-count><name>50</name><orhigher/></community-count><community-count><name>100</name><orhigher/></community-count></from><then><reject/></then></term><term><name>REJECT_IX_PREFIXES</name><from><route-filter><address>80.249.208.0/21</address><orlonger/></route-filter><route-filter><address>193.203.0.0/24</address><orlonger/></route-filter><route-filter><address>195.66.224.0/22</address><orlonger/></route-filter><route-filter><address>217.29.66.0/23</address><orlonger/></route-filter><route-filter><address>192.65.185.0/24</address><orlonger/></route-filter><route-filter><address>91.210.16.0/24</address><orlonger/></route-filter><route-filter><address>185.1.47.0/24</address><orlonger/></route-filter><route-filter><address>80.81.192.0/21</address><orlonger/></route-filter><route-filter><address>185.1.68.0/24</address><orlonger/></route-filter><route-filter><address>193.188.137.0/24</address><orlonger/></route-filter></from><then><reject/></then></term></policy-statement><policy-statement><name>ps-BOGONS-V6</name><term><name>martians</name><from><family>inet6</family><route-filter><address>::/0</address><exact/></route-filter><route-filter><address>::/96</address><exact/></route-filter><route-filter><address>::1/128</address><exact/></route-filter><route-filter><address>fec0::/10</address><orlonger/></route-filter><route-filter><address>fe80::/10</address><orlonger/></route-filter><route-filter><address>ff00::/8</address><orlonger/></route-filter><route-filter><address>3ffe::/16</address><orlonger/></route-filter><route-filter><address>2001:0db8::/32</address><orlonger/></route-filter><route-filter><address>fc00::/7</address><orlonger/></route-filter></from><then><reject/></then></term><term><name>as-path-length-limit</name><from><family>inet6</family><protocol>bgp</protocol><as-path>MAX-AS_PATH</as-path></from><then><reject/></then></term><term><name>community-limit</name><from><family>inet6</family><protocol>bgp</protocol><community-count><name>50</name><orhigher/></community-count><community-count><name>100</name><orhigher/></community-count></from><then><reject/></then></term><term><name>REJECT_IX_PREFIXES</name><from><route-filter><address>2001:7f8:30::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8:1::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8:4::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8:b:100::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8:1c:24a::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8:14::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8:36::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8:a0::/64</address><orlonger/></route-filter><route-filter><address>2001:7f8:35::/64</address><orlonger/></route-filter></from><then><reject/></then></term></policy-statement><policy-statement><name>ps-BOGONS-export</name><term><name>bogons</name><from><route-filter><address>0.0.0.0/8</address><orlonger/></route-filter><route-filter><address>10.0.0.0/8</address><orlonger/></route-filter><route-filter><address>127.0.0.0/8</address><orlonger/></route-filter><route-filter><address>169.254.0.0/16</address><orlonger/></route-filter><route-filter><address>172.16.0.0/12</address><orlonger/></route-filter><route-filter><address>192.0.0.0/24</address><orlonger/></route-filter><route-filter><address>192.0.2.0/24</address><orlonger/></route-filter><route-filter><address>192.168.0.0/16</address><orlonger/></route-filter><route-filter><address>198.18.0.0/15</address><orlonger/></route-filter><route-filter><address>198.51.100.0/24</address><orlonger/></route-filter><route-filter><address>203.0.113.0/24</address><orlonger/></route-filter><route-filter><address>224.0.0.0/3</address><orlonger/></route-filter></from><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-AMRES-V6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-AMRES-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><community><add/><community-name>geant-IAS-dws-nren</community-name></community><accept/></then></term><term><name>from-AMRES-V6-nren-general</name><from><prefix-list><name>route-from-AMRES-v6</name></prefix-list></from><then><local-preference><local-preference>175</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><community><add/><community-name>geant-IAS-dws-nren</community-name></community><accept/></then></term><term><name>from-AMRES-v6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-AMRES-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-AMRES</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-AMRES-nren</name><from><prefix-list><name>route-from-AMRES</name></prefix-list></from><then><local-preference><local-preference>175</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-AMRES-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-ARNES-V6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-ARNES-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-ARNES-V6-nren</name><from><prefix-list><name>route-from-ARNES-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-ARNES-V6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-ARNES-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-ARNES</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-ARNES-nren</name><from><prefix-list><name>route-from-ARNES</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-ARNES-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-CARnet1-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-CARnet</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>from-CARnet1-nren</name><from><prefix-list><name>route-from-CARnet</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-CARnet1-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-CARnet1-v6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-CARNET-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>ps-IAS-from-CARnet1-v6-nren</name><from><prefix-list><name>route-from-CARNET-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-CARnet1-v6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-KIFU2-V6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-KIFU-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-KIFU-V6-nren-general</name><from><prefix-list><name>route-from-KIFU-v6</name></prefix-list></from><then><local-preference><local-preference>125</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-KIFU-V6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-KIFU2-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-KIFU</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-KIFU2-nren</name><from><prefix-list><name>route-from-KIFU</name></prefix-list></from><then><local-preference><local-preference>125</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-KIFU2-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-MARNet-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-MARnet</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><accept/></then></term><term><name>from-MARNet-nren</name><from><prefix-list><name>route-from-MARnet</name></prefix-list></from><then><local-preference><local-preference>125</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-MARNet-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-MARnet-v6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-MARNET-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-IAS-dws-nren</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>ps-IAS-from-MARnet1-v6-nren</name><from><prefix-list><name>route-from-MARNET-v6</name></prefix-list></from><then><local-preference><local-preference>125</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><community><add/><community-name>geant-IAS-dws-nren</community-name></community><community><add/><community-name>geant-nren-zag</community-name></community><accept/></then></term><term><name>from-MARnet-v6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-from-OPTIMA-TELEKOM</name><term><name>remove-RTBH</name><from><community>geant-RTBH</community></from><then><community><delete/><community-name>geant-RTBH</community-name></community></then></term><term><name>BLEACH_PRIVATE_COMMUNITIES</name><then><community><delete/><community-name>TE_PRIVATE_COMMUNITIES</community-name></community></then></term><term><name>from-OPTIMA-TELEKOM</name><then><local-preference><local-preference>95</local-preference></local-preference><community><add/><community-name>geant-peers</community-name></community><community><add/><community-name>geant-IAS-private-peer-ZAG</community-name></community><accept/></then></term></policy-statement><policy-statement><name>ps-IAS-from-SETCOR</name><term><name>remove-RTBH</name><from><community>geant-RTBH</community></from><then><community><delete/><community-name>geant-RTBH</community-name></community></then></term><term><name>BLEACH_PRIVATE_COMMUNITIES</name><then><community><delete/><community-name>TE_PRIVATE_COMMUNITIES</community-name></community></then></term><term><name>from-SETCOR</name><then><local-preference><local-preference>95</local-preference></local-preference><community><add/><community-name>geant-setcor</community-name></community><community><add/><community-name>geant-peers</community-name></community><community><add/><community-name>geant-IAS-private-peer-ZAG</community-name></community><accept/></then></term></policy-statement><policy-statement><name>ps-IAS-to-AMRES-V6-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-amres-block</community></from><then><reject/></then></term><term><name>to-AMRES-V6-nren-general</name><from><family>inet6</family><community>geant-peers</community><community>geant-ixpeers</community><community>geant-google</community><community>geant-dws</community><community>IAS_AGGREGATE_ROUTES</community></from><then><metric><metric>0</metric></metric><accept/></then></term><term><name>to-AMRES-V6-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-AMRES-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-amres-block</community></from><then><reject/></then></term><term><name>to-AMRES-nren-general</name><from><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-dws</community><community>IAS_AGGREGATE_ROUTES</community></from><then><accept/></then></term><term><name>to-AMRES-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-ARNES-V6-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-arnes-block</community></from><then><reject/></then></term><term><name>to-ARNES-V6-nren-general</name><from><family>inet6</family><community>geant-google</community><community>geant-ixpeers</community><community>geant-peers</community><community>IAS_AGGREGATE_ROUTES</community></from><then><accept/></then></term><term><name>to-ARNES-V6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-ARNES-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-arnes-block</community></from><then><reject/></then></term><term><name>to-ARNES-nren-general</name><from><community>geant-google</community><community>geant-ixpeers</community><community>geant-peers</community><community>IAS_AGGREGATE_ROUTES</community></from><then><metric><metric>0</metric></metric><accept/></then></term><term><name>to-ARNES-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-CARnet</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-carnet-block</community></from><then><reject/></then></term><term><name>to-CARnet-general</name><from><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>IAS_AGGREGATE_ROUTES</community></from><then><metric><metric>0</metric></metric><accept/></then></term><term><name>to-CARnet-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-CARnet-v6</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-carnet-block</community></from><then><reject/></then></term><term><name>to-CARnet-v6-general</name><from><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>IAS_AGGREGATE_ROUTES</community></from><then><metric><metric>0</metric></metric><accept/></then></term><term><name>to-CARnet-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-KIFU2-V6-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-KIFU-V6-nren-general</name><from><family>inet6</family><community>geant-peers</community><community>geant-ixpeers</community><community>geant-google</community><community>IAS_AGGREGATE_ROUTES</community></from><then><metric><metric>20</metric></metric><accept/></then></term><term><name>to-KIFU-V6-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-KIFU2-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-KIFU2-nren-general</name><from><community>geant-peers</community><community>geant-ixpeers</community><community>geant-google</community><community>IAS_AGGREGATE_ROUTES</community></from><then><metric><metric>20</metric></metric><accept/></then></term><term><name>to-KIFU2-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-MARNet-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-marnet-block</community></from><then><reject/></then></term><term><name>to-MARNet-nren-general</name><from><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-dws</community><community>IAS_AGGREGATE_ROUTES</community></from><then><metric><metric>20</metric></metric><accept/></then></term><term><name>to-MARNet-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-MARnet-V6-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-marnet-block</community></from><then><reject/></then></term><term><name>to-MARnet-V6-nren-general</name><from><family>inet6</family><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-dws</community><community>IAS_AGGREGATE_ROUTES</community></from><then><metric><metric>20</metric></metric><accept/></then></term><term><name>to-MARnet1-V6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-OPTIMA-TELEKOM</name><term><name>to-private-peers-block</name><from><community>TE_BLOCK_PEERS</community><community>TE_BLOCK_PEERS_2</community><community>TE_BLOCK_PEERS_3</community><community>TE_BLOCK_AS34594</community><community>TE_BLOCK_AS34594_2</community></from><then><reject/></then></term><term><name>PREPEND_THIS_PEER_x1</name><from><community>TE_PREPEND_AS34594_x1_2byte</community><community>TE_PREPEND_AS34594_x1_4byte</community></from><then><as-path-prepend>21320</as-path-prepend><next>term</next></then></term><term><name>PREPEND_THIS_PEER_x2</name><from><community>TE_PREPEND_AS34594_x2_2byte</community><community>TE_PREPEND_AS34594_x2_4byte</community></from><then><as-path-prepend>21320 21320</as-path-prepend><next>term</next></then></term><term><name>PREPEND_THIS_PEER_x3</name><from><community>TE_PREPEND_AS34594_x3_2byte</community><community>TE_PREPEND_AS34594_x3_4byte</community></from><then><as-path-prepend>21320 21320 21320</as-path-prepend><next>term</next></then></term><term><name>PREPEND_THIS_PEER_x6</name><from><community>TE_PREPEND_AS34594_x6_2byte</community><community>TE_PREPEND_AS34594_x6_4byte</community></from><then><as-path-prepend>21320 21320 21320 21320 21320 21320</as-path-prepend><next>term</next></then></term><term><name>to-private-peers-prepend-1</name><from><community>geant-private-peers-prepend-1</community></from><then><as-path-prepend>21320</as-path-prepend><next>term</next></then></term><term><name>to-private-peers-prepend-3</name><from><community>geant-private-peers-prepend</community><community>peers-prepend-3</community></from><then><as-path-prepend>21320 21320 21320</as-path-prepend><next>term</next></then></term><term><name>AS20965_ROUTES</name><from><community>AS20965_ROUTES</community></from><then><metric><igp>
+ </igp></metric><community><delete/><community-name>TE_PRIVATE_COMMUNITIES</community-name></community><as-path-expand><aspath>20965</aspath></as-path-expand><accept/></then></term><term><name>to-OPTIMA-TELEKOM</name><from><community>TE_ANNOUNCE_ALL_PRIVATE_PEERS</community><community>TE_ANNOUNCE_ALL_PRIVATE_PEERS_2</community><community>TE_ANNOUNCE_AS34594</community><community>TE_ANNOUNCE_AS34594_2</community><community>TE_ANNOUNCE_AS34594_3</community></from><then><metric><igp>
+ </igp></metric><community><delete/><community-name>TE_PRIVATE_COMMUNITIES</community-name></community><accept/></then></term><term><name>default-reject</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-IAS-to-SETCOR</name><term><name>to-private-peers-block</name><from><community>TE_BLOCK_PEERS</community><community>TE_BLOCK_PEERS_2</community><community>TE_BLOCK_PEERS_3</community><community>TE_BLOCK_AS61211</community></from><then><reject/></then></term><term><name>PREPEND_THIS_PEER_x1</name><from><community>TE_PREPEND_AS61211_x1_2byte</community><community>TE_PREPEND_AS61211_x1_4byte</community></from><then><as-path-prepend>21320</as-path-prepend><next>term</next></then></term><term><name>PREPEND_THIS_PEER_x2</name><from><community>TE_PREPEND_AS61211_x2_2byte</community><community>TE_PREPEND_AS61211_x2_4byte</community></from><then><as-path-prepend>21320 21320</as-path-prepend><next>term</next></then></term><term><name>PREPEND_THIS_PEER_x3</name><from><community>TE_PREPEND_AS61211_x3_2byte</community><community>TE_PREPEND_AS61211_x3_4byte</community></from><then><as-path-prepend>21320 21320 21320</as-path-prepend><next>term</next></then></term><term><name>PREPEND_THIS_PEER_x6</name><from><community>TE_PREPEND_AS61211_x6_2byte</community><community>TE_PREPEND_AS61211_x6_4byte</community></from><then><as-path-prepend>21320 21320 21320 21320 21320 21320</as-path-prepend><next>term</next></then></term><term><name>to-private-peers-prepend-1</name><from><community>geant-private-peers-prepend-1</community></from><then><as-path-prepend>21320</as-path-prepend><next>term</next></then></term><term><name>to-private-peers-prepend-3</name><from><community>geant-private-peers-prepend</community><community>peers-prepend-3</community></from><then><as-path-prepend>21320 21320 21320</as-path-prepend><next>term</next></then></term><term><name>AS20965_ROUTES</name><from><community>AS20965_ROUTES</community></from><then><metric><igp>
+ </igp></metric><community><delete/><community-name>TE_PRIVATE_COMMUNITIES</community-name></community><as-path-expand><aspath>20965</aspath></as-path-expand><accept/></then></term><term><name>to-SETCOR</name><from><community>TE_ANNOUNCE_ALL_PRIVATE_PEERS</community><community>TE_ANNOUNCE_ALL_PRIVATE_PEERS_2</community><community>TE_ANNOUNCE_AS61211</community><community>TE_ANNOUNCE_AS61211_2</community><community>TE_ANNOUNCE_AS61211_3</community></from><then><metric><igp>
+ </igp></metric><community><delete/><community-name>TE_PRIVATE_COMMUNITIES</community-name></community><accept/></then></term><term><name>default-reject</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-PRIVATE-AS-BLOCK</name><from><as-path>AS-PRIVATE</as-path></from><then><reject/></then></policy-statement><policy-statement><name>ps-RPKI-IAS-NREN</name><term><name>RTBH-bypass</name><from><protocol>bgp</protocol><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter></from><then><validation-state>valid</validation-state><community><add/><community-name>origin-validation-state-valid</community-name></community><next>policy</next></then></term><term><name>RTBH-bypass-V6</name><from><protocol>bgp</protocol><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter></from><then><validation-state>valid</validation-state><community><add/><community-name>origin-validation-state-valid</community-name></community><next>policy</next></then></term><term><name>unknown</name><from><protocol>bgp</protocol><validation-database>unknown</validation-database></from><then><validation-state>unknown</validation-state><community><add/><community-name>origin-validation-state-unknown</community-name></community><next>policy</next></then></term><term><name>valid</name><from><protocol>bgp</protocol><validation-database>valid</validation-database></from><then><validation-state>valid</validation-state><community><add/><community-name>origin-validation-state-valid</community-name></community><next>policy</next></then></term><term><name>invalid</name><from><protocol>bgp</protocol><validation-database>invalid</validation-database></from><then><validation-state>invalid</validation-state><community><add/><community-name>origin-validation-state-invalid</community-name></community><reject/></then></term></policy-statement><policy-statement><name>ps-RPKI-IAS-PEER</name><term><name>unknown</name><from><protocol>bgp</protocol><validation-database>unknown</validation-database></from><then><validation-state>unknown</validation-state><community><add/><community-name>origin-validation-state-unknown</community-name></community><next>policy</next></then></term><term><name>valid</name><from><protocol>bgp</protocol><validation-database>valid</validation-database></from><then><validation-state>valid</validation-state><community><add/><community-name>origin-validation-state-valid</community-name></community><next>policy</next></then></term><term><name>invalid</name><from><protocol>bgp</protocol><validation-database>invalid</validation-database></from><then><validation-state>invalid</validation-state><community><add/><community-name>origin-validation-state-invalid</community-name></community><reject/></then></term></policy-statement><policy-statement><name>ps-RPKI-RE-NREN</name><term><name>RTBH-bypass</name><from><protocol>bgp</protocol><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter></from><then><validation-state>valid</validation-state><community><add/><community-name>origin-validation-state-valid</community-name></community><next>policy</next></then></term><term><name>RTBH-bypass-V6</name><from><protocol>bgp</protocol><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter></from><then><validation-state>valid</validation-state><community><add/><community-name>origin-validation-state-valid</community-name></community><next>policy</next></then></term><term><name>unknown</name><from><protocol>bgp</protocol><validation-database>unknown</validation-database></from><then><validation-state>unknown</validation-state><community><add/><community-name>origin-validation-state-unknown</community-name></community><next>policy</next></then></term><term><name>valid</name><from><protocol>bgp</protocol><validation-database>valid</validation-database></from><then><validation-state>valid</validation-state><community><add/><community-name>origin-validation-state-valid</community-name></community><next>policy</next></then></term><term><name>invalid</name><from><protocol>bgp</protocol><validation-database>invalid</validation-database></from><then><validation-state>invalid</validation-state><community><add/><community-name>origin-validation-state-invalid</community-name></community><reject/></then></term></policy-statement><policy-statement><name>ps-RPKI-iBGP</name><term><name>unknown</name><from><community>origin-validation-state-unknown</community></from><then><validation-state>unknown</validation-state></then></term><term><name>valid</name><from><community>origin-validation-state-valid</community></from><then><validation-state>valid</validation-state></then></term><term><name>invalid</name><from><community>origin-validation-state-invalid</community></from><then><validation-state>invalid</validation-state></then></term></policy-statement><policy-statement><name>ps-advertise-default</name><term><name>static</name><from><prefix-list><name>default-route-v4</name></prefix-list></from><then><metric><metric>20</metric></metric><accept/></then></term></policy-statement><policy-statement><name>ps-advertise-default-v6</name><term><name>static6</name><from><protocol>static</protocol><protocol>bgp</protocol><prefix-list><name>default-route-v6</name></prefix-list></from><then><metric><metric>20</metric></metric><accept/></then></term></policy-statement><policy-statement><name>ps-deny-all</name><term><name>deny-all</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-direct-route-label</name><term><name>1</name><from><protocol>direct</protocol></from><then><label-allocation>per-table</label-allocation><accept/></then></term><term><name>2</name><then><label-allocation>per-nexthop</label-allocation><accept/></then></term></policy-statement><policy-statement><name>ps-from-AMRES-V6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-AMRES-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><accept/></then></term><term><name>from-AMRES-V6-nren-general</name><from><prefix-list><name>route-from-AMRES-v6</name></prefix-list></from><then><local-preference><local-preference>175</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-AMRES-v6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-AMRES-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-AMRES</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><accept/></then></term><term><name>from-AMRES-nren</name><from><prefix-list><name>route-from-AMRES</name></prefix-list></from><then><local-preference><local-preference>175</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-AMRES-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-ARNES-V6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-ARNES-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><accept/></then></term><term><name>from-ARNES-V6-nren</name><from><prefix-list><name>route-from-ARNES-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-ARNES-V6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-ARNES-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-ARNES</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><accept/></then></term><term><name>from-ARNES-nren</name><from><prefix-list><name>route-from-ARNES</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-ARNES-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-CARnet1-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-CARnet</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>from-CARnet1-nren</name><from><prefix-list><name>route-from-CARnet</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-CARnet1-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-CARnet1-v6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-CARNET-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>ps-from-CARnet1-v6-nren</name><from><prefix-list><name>route-from-CARNET-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-CARnet1-v6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-KIFU2-V6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-KIFU-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast-v6</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><accept/></then></term><term><name>from-KIFU-V6-nren-general</name><from><prefix-list><name>route-from-KIFU-v6</name></prefix-list></from><then><local-preference><local-preference>125</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-KIFU-V6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-KIFU2-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-KIFU</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><accept/></then></term><term><name>from-KIFU2-nren</name><from><prefix-list><name>route-from-KIFU</name></prefix-list></from><then><local-preference><local-preference>125</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-KIFU2-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-KREN</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-KREN</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list><prefix-list><name>route-from-KREN</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-KREN-nren</name><from><prefix-list><name>route-from-KREN</name></prefix-list></from><then><local-preference><local-preference>150</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-KREN-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-MARNet-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-MARnet</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast</name></prefix-list></from><then><local-preference><local-preference>120</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><accept/></then></term><term><name>from-MARNet-nren</name><from><prefix-list><name>route-from-MARnet</name></prefix-list></from><then><local-preference><local-preference>120</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-MARNet-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-MARnet-v6-nren</name><term><name>RTBH</name><from><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter><prefix-list-filter><list_name>route-from-MARNET-v6</list_name><orlonger/></prefix-list-filter></from><then><local-preference><local-preference>200</local-preference></local-preference><community><add/><community-name>TE_BLOCK_ALL_PUBLIC_PEERS</community-name></community><community><add/><community-name>TE_BLOCK_PEERS_2</community-name></community><community><add/><community-name>geant-IAS-dws-block</community-name></community><community><add/><community-name>geant-dummy</community-name></community><next-hop><address>100::</address></next-hop><accept/></then></term><term><name>anycast-prefixes</name><from><community>geant-anycast</community><prefix-list><name>geant-anycast-v6</name></prefix-list></from><then><local-preference><local-preference>120</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><accept/></then></term><term><name>ps-from-MARnet1-v6-nren</name><from><prefix-list><name>route-from-MARNET-v6</name></prefix-list></from><then><local-preference><local-preference>120</local-preference></local-preference><community><add/><community-name>geant-nrn</community-name></community><community><add/><community-name>geant-dws-nren</community-name></community><community><add/><community-name>geant-adv2-public-peer</community-name></community><community><add/><community-name>geant-adv2-private-peer</community-name></community><accept/></then></term><term><name>from-MARnet-v6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-coriant-vrf</name><term><name>DENY_AGGREGATE</name><from><route-filter><address>172.18.0.0/16</address><exact/></route-filter></from><then><reject/></then></term><term><name>LOCAL_OSPF_TO_BGP</name><from><protocol>ospf</protocol><metric>1</metric><route-filter><address>172.18.253.0/24</address><orlonger/></route-filter></from><then><community><set/><community-name>coriant-mgmt</community-name></community><accept/></then></term><term><name>REMOTE_OSPF_TO_BGP</name><from><protocol>ospf</protocol><metric>21</metric><route-filter><address>172.18.253.0/24</address><orlonger/></route-filter></from><then><local-preference><local-preference>50</local-preference></local-preference><community><set/><community-name>coriant-mgmt</community-name></community><accept/></then></term><term><name>BLOCK_FAR_OSPF</name><from><protocol>ospf</protocol></from><then><reject/></then></term><term><name>DEFAULT_EXPORT</name><then><community><set/><community-name>coriant-mgmt</community-name></community><accept/></then></term><term><name>DEFAULT</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-ias-vrf</name><term><name>ias-routes</name><from><protocol>bgp</protocol></from><then><community><add/><community-name>ias-routes</community-name></community><accept/></then></term><term><name>ias-interface-routes</name><from><protocol>direct</protocol></from><then><community><add/><community-name>ias-routes</community-name></community><accept/></then></term><term><name>default</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-lhcone-nren</name><then><community><add/><community-name>geant-nrn</community-name></community><accept/></then></policy-statement><policy-statement><name>ps-from-lhcone-peer</name><then><community><add/><community-name>geant-peer-RE</community-name></community><accept/></then></policy-statement><policy-statement><name>ps-from-lhcone-vrf</name><term><name>lhcone-routes</name><from><protocol>bgp</protocol></from><then><community><add/><community-name>lhcone-vpn</community-name></community><accept/></then></term><term><name>lhcone-geant-ptp</name><from><route-filter><address>62.40.126.0/24</address><orlonger/></route-filter></from><then><community><add/><community-name>lhcone-vpn</community-name></community><accept/></then></term><term><name>lhcone-geant-ptp6</name><from><route-filter><address>2001:798:111:1::/64</address><orlonger/></route-filter></from><then><community><add/><community-name>lhcone-vpn</community-name></community><accept/></then></term><term><name>default</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-from-mgmt-vrf</name><term><name>mgmt-routes</name><from><protocol>direct</protocol><protocol>static</protocol></from><then><community><add/><community-name>mgmt-vpn</community-name></community><accept/></then></term><term><name>default</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-into-ias-vrf</name><term><name>ias-routes</name><from><protocol>bgp</protocol><community>ias-routes</community></from><then><accept/></then></term><term><name>default</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-into-lhcone-vrf</name><term><name>lhcone-routes</name><from><protocol>bgp</protocol><community>lhcone-vpn</community></from><then><accept/></then></term><term><name>default</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-into-mgmt-vrf</name><term><name>mgmt-routes</name><from><protocol>bgp</protocol><community>mgmt-vpn</community></from><then><accept/></then></term><term><name>default</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-AMRES-V6-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-amres-block</community></from><then><reject/></then></term><term><name>to-AMRES-V6-nren-general</name><from><family>inet6</family><community>geant-nrn</community><community>geant-m6bone</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-google</community><community>geant-dws</community><community>geant-peer-RE</community></from><then><metric><metric>0</metric></metric><accept/></then></term><term><name>to-AMRES-V6-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-AMRES-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-amres-block</community></from><then><reject/></then></term><term><name>to-AMRES-nren-general</name><from><community>geant-nrn</community><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-dws</community><community>geant-peer-RE</community></from><then><accept/></then></term><term><name>to-AMRES-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-ARNES-LHCONE-TE</name><term><name>BLOCK</name><from><community>LHCONE-BLOCK-ARNES-2107</community></from><then><reject/></then></term><term><name>PREPEND_x1</name><from><community>LHCONE-PREPEND-ARNES-2107-x1</community></from><then><as-path-prepend>20965</as-path-prepend></then></term><term><name>PREPEND_x2</name><from><community>LHCONE-PREPEND-ARNES-2107-x2</community></from><then><as-path-prepend>20965 20965</as-path-prepend></then></term><term><name>PREPEND_x3</name><from><community>LHCONE-PREPEND-ARNES-2107-x3</community></from><then><as-path-prepend>20965 20965 20965</as-path-prepend></then></term></policy-statement><policy-statement><name>ps-to-ARNES-V6-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-arnes-block</community></from><then><reject/></then></term><term><name>to-ARNES-V6-nren-general</name><from><family>inet6</family><community>geant-nrn</community><community>geant-google</community><community>geant-ixpeers</community><community>geant-peers</community><community>geant-dws</community><community>geant-peer-RE</community></from><then><accept/></then></term><term><name>to-ARNES-V6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-ARNES-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-arnes-block</community></from><then><reject/></then></term><term><name>to-ARNES-nren-general</name><from><community>geant-nrn</community><community>geant-google</community><community>geant-ixpeers</community><community>geant-peers</community><community>geant-peer-RE</community></from><then><metric><metric>0</metric></metric><accept/></then></term><term><name>to-ARNES-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-CARnet</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-carnet-block</community></from><then><reject/></then></term><term><name>to-CARnet-general</name><from><community>geant-nrn</community><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-peer-RE</community></from><then><metric><metric>0</metric></metric><accept/></then></term><term><name>to-CARnet-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-CARnet-v6</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-carnet-block</community></from><then><reject/></then></term><term><name>to-CARnet-v6-general</name><from><community>geant-nrn</community><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-peer-RE</community></from><then><metric><metric>0</metric></metric><accept/></then></term><term><name>to-CARnet-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-KIFU-LHCONE-TE</name><term><name>BLOCK</name><from><community>LHCONE-BLOCK-KIFU-1955</community></from><then><reject/></then></term><term><name>PREPEND_x1</name><from><community>LHCONE-PREPEND-KIFU-1955-x1</community></from><then><as-path-prepend>20965</as-path-prepend></then></term><term><name>PREPEND_x2</name><from><community>LHCONE-PREPEND-KIFU-1955-x2</community></from><then><as-path-prepend>20965 20965</as-path-prepend></then></term><term><name>PREPEND_x3</name><from><community>LHCONE-PREPEND-KIFU-1955-x3</community></from><then><as-path-prepend>20965 20965 20965</as-path-prepend></then></term></policy-statement><policy-statement><name>ps-to-KIFU2-V6-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-KIFU-V6-nren-general</name><from><family>inet6</family><community>geant-nrn</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-google</community><community>geant-peer-RE</community></from><then><metric><metric>20</metric></metric><accept/></then></term><term><name>to-KIFU-V6-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-KIFU2-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-KIFU2-nren-general</name><from><community>geant-nrn</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-google</community><community>geant-peer-RE</community></from><then><metric><metric>20</metric></metric><accept/></then></term></policy-statement><policy-statement><name>ps-to-KREN</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-kren-block</community></from><then><reject/></then></term><term><name>to-KREN-general</name><from><community>geant-nrn</community><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-peer-RE</community></from><then><metric><metric>20</metric></metric><accept/></then></term><term><name>to-KREN-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-MARNet-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-marnet-block</community></from><then><reject/></then></term><term><name>to-MARNet-nren-general</name><from><community>geant-nrn</community><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-dws</community><community>geant-peer-RE</community></from><then><metric><metric>20</metric></metric><accept/></then></term><term><name>to-MARNet-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-MARnet-V6-nren</name><term><name>exception-block</name><from><community>geant-dummy</community></from><then><reject/></then></term><term><name>to-nren-block</name><from><community>geant-marnet-block</community></from><then><reject/></then></term><term><name>to-MARnet-V6-nren-general</name><from><family>inet6</family><community>geant-nrn</community><community>geant-google</community><community>geant-peers</community><community>geant-ixpeers</community><community>geant-dws</community><community>geant-peer-RE</community></from><then><metric><metric>20</metric></metric><accept/></then></term><term><name>to-MARnet-V6-nren-drop</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-coriant-vrf</name><term><name>DEFAULT_IMPORT</name><from><community>coriant-mgmt</community></from><then><accept/></then></term><term><name>DEFAULT</name><then><reject/></then></term></policy-statement><policy-statement><name>ps-to-lhcone-nren</name><term><name>ptp-routes</name><from><route-filter><address>62.40.126.0/24</address><exact/></route-filter></from><then><accept/></then></term><term><name>ptp-routes-specific-deny</name><from><route-filter><address>62.40.103.0/25</address><orlonger/></route-filter><route-filter><address>62.40.126.0/24</address><orlonger/></route-filter></from><then><reject/></then></term><then><accept/></then></policy-statement><policy-statement><name>ps-to-lhcone-nren-v6</name><term><name>ptp-routes</name><from><route-filter><address>2001:798:111:1::/64</address><exact/></route-filter></from><then><accept/></then></term><term><name>ptp-routes-specific-deny</name><from><route-filter><address>2001:798:111:1::/64</address><orlonger/></route-filter></from><then><reject/></then></term><then><accept/></then></policy-statement><policy-statement><name>ps-to-lhcone-peer</name><term><name>ptp-routes</name><from><route-filter><address>62.40.126.0/24</address><exact/></route-filter></from><then><metric><igp>
+ </igp></metric><accept/></then></term><term><name>ptp-routes-specific-deny</name><from><route-filter><address>62.40.103.0/25</address><orlonger/></route-filter><route-filter><address>62.40.126.0/24</address><orlonger/></route-filter></from><then><reject/></then></term><term><name>allow-nren-routes</name><from><community>geant-nrn</community></from><then><metric><igp>
+ </igp></metric><accept/></then></term><then><default-action>reject</default-action></then></policy-statement><policy-statement><name>rtbh-ibgp</name><term><name>1</name><from><protocol>bgp</protocol><community>geant-RTBH</community><route-filter><address>0.0.0.0/0</address><prefix-length-range>/32-/32</prefix-length-range></route-filter></from><then><next-hop><address>192.0.2.101</address></next-hop><accept/></then></term><term><name>2</name><from><protocol>bgp</protocol><community>geant-RTBH</community><route-filter><address>::/0</address><prefix-length-range>/128-/128</prefix-length-range></route-filter></from><then><next-hop><address>0100::</address></next-hop><accept/></then></term></policy-statement><policy-statement><name>rtbh-policy</name><term><name>11</name><from><community>geant-RTBH</community></from><then><accept/></then></term><term><name>22</name><then><reject/></then></term></policy-statement><policy-statement><name>source-class-usage</name><term><name>DWS</name><from><community>geant-dws</community></from><then><source-class>dws-out</source-class></then></term><term><name>google-out</name><from><community>geant-google</community></from><then><source-class>google-out</source-class></then></term><term><name>ixpeers-out</name><from><community>geant-ixpeers</community></from><then><source-class>ixpeers-out</source-class></then></term></policy-statement><community><name>AS20965_ROUTES</name><members>21320:20965</members></community><community><name>IAS_AGGREGATE_ROUTES</name><members>21320:64912</members></community><community><name>LHCONE-BLOCK-ARNES-2107</name><members>65010:2107</members></community><community><name>LHCONE-BLOCK-KIFU-1955</name><members>65010:1955</members></community><community><name>LHCONE-PREPEND-ARNES-2107-x1</name><members>65001:2107</members></community><community><name>LHCONE-PREPEND-ARNES-2107-x2</name><members>65002:2107</members></community><community><name>LHCONE-PREPEND-ARNES-2107-x3</name><members>65003:2107</members></community><community><name>LHCONE-PREPEND-KIFU-1955-x1</name><members>65001:1955</members></community><community><name>LHCONE-PREPEND-KIFU-1955-x2</name><members>65002:1955</members></community><community><name>LHCONE-PREPEND-KIFU-1955-x3</name><members>65003:1955</members></community><community><name>TE_ANNOUNCE_ALL_PRIVATE_PEERS</name><members>20965:65533</members></community><community><name>TE_ANNOUNCE_ALL_PRIVATE_PEERS_2</name><members>64700:65533</members></community><community><name>TE_ANNOUNCE_AS34594</name><members>64700:34594</members></community><community><name>TE_ANNOUNCE_AS34594_2</name><members>64712:34594</members></community><community><name>TE_ANNOUNCE_AS34594_3</name><members>64742:34594</members></community><community><name>TE_ANNOUNCE_AS61211</name><members>64700:61211</members></community><community><name>TE_ANNOUNCE_AS61211_2</name><members>64712:61211</members></community><community><name>TE_ANNOUNCE_AS61211_3</name><members>64742:61211</members></community><community><name>TE_BLOCK_ALL_PUBLIC_PEERS</name><members>64512:65532</members></community><community><name>TE_BLOCK_AS34594</name><members>64512:34594</members></community><community><name>TE_BLOCK_AS34594_2</name><members>20965:64553</members></community><community><name>TE_BLOCK_AS61211</name><members>64512:61211</members></community><community><name>TE_BLOCK_PEERS</name><members>20965:0013</members></community><community><name>TE_BLOCK_PEERS_2</name><members>64512:65533</members></community><community><name>TE_BLOCK_PEERS_3</name><members>20965:0011</members></community><community><name>TE_PREPEND_AS34594_x1_2byte</name><members>64801:34594</members><members>64812:34594</members></community><community><name>TE_PREPEND_AS34594_x1_4byte</name><members>origin:34594L:64801</members><members>origin:34594L:64812</members></community><community><name>TE_PREPEND_AS34594_x2_2byte</name><members>64802:34594</members><members>64812:34594</members></community><community><name>TE_PREPEND_AS34594_x2_4byte</name><members>origin:34594L:64802</members><members>origin:34594L:64812</members></community><community><name>TE_PREPEND_AS34594_x3_2byte</name><members>64803:34594</members><members>64812:34594</members></community><community><name>TE_PREPEND_AS34594_x3_4byte</name><members>origin:34594L:64803</members><members>origin:34594L:64812</members></community><community><name>TE_PREPEND_AS34594_x6_2byte</name><members>64806:34594</members><members>64812:34594</members></community><community><name>TE_PREPEND_AS34594_x6_4byte</name><members>origin:34594L:64806</members><members>origin:34594L:64812</members></community><community><name>TE_PREPEND_AS61211_x1_2byte</name><members>64801:61211</members><members>64812:61211</members></community><community><name>TE_PREPEND_AS61211_x1_4byte</name><members>origin:61211L:64801</members><members>origin:61211L:64812</members></community><community><name>TE_PREPEND_AS61211_x2_2byte</name><members>64802:61211</members><members>64812:61211</members></community><community><name>TE_PREPEND_AS61211_x2_4byte</name><members>origin:61211L:64802</members><members>origin:61211L:64812</members></community><community><name>TE_PREPEND_AS61211_x3_2byte</name><members>64803:61211</members><members>64812:61211</members></community><community><name>TE_PREPEND_AS61211_x3_4byte</name><members>origin:61211L:64803</members><members>origin:61211L:64812</members></community><community><name>TE_PREPEND_AS61211_x6_2byte</name><members>64806:61211</members><members>64812:61211</members></community><community><name>TE_PREPEND_AS61211_x6_4byte</name><members>origin:61211L:64806</members><members>origin:61211L:64812</members></community><community><name>TE_PRIVATE_COMMUNITIES</name><members>^(6451[2-9]|645[2-9][0-9]|64[6-9][0-9][0-9]|65[0-4][0-9][0-9]|655[0-2][0-9]|6553[0-5]).*$</members></community><community><name>coriant-mgmt</name><members>target:20965:991</members></community><community><name>geant-IAS-dws-block</name><members>64512:65534</members></community><community><name>geant-IAS-dws-nren</name><members>64700:65534</members></community><community><name>geant-IAS-private-peer-ZAG</name><members>21320:64742</members></community><community><name>geant-RTBH</name><members>20965:0008</members></community><community><name>geant-adv2-private-peer</name><members>20965:65533</members></community><community><name>geant-adv2-public-peer</name><members>20965:65532</members></community><community><name>geant-amres-block</name><members>64512:13092</members></community><community><name>geant-anycast</name><members>20965:0002</members></community><community><name>geant-arnes-block</name><members>64512:210</members></community><community><name>geant-carnet-block</name><members>64512:2108</members></community><community><name>geant-dummy</name><members>20965:65000</members></community><community><name>geant-dws</name><members>20965:7777</members></community><community><name>geant-dws-nren</name><members>20965:65534</members></community><community><name>geant-google</name><members>20965:15169</members></community><community><name>geant-ixpeers</name><members>20965:0003</members></community><community><name>geant-kren-block</name><members>origin:64512:211080L</members></community><community><name>geant-m6bone</name><members>20965:1717</members></community><community><name>geant-marnet-block</name><members>64512:44224</members></community><community><name>geant-nren-zag</name><members>20965:64941</members></community><community><name>geant-nrn</name><members>20965:0155</members></community><community><name>geant-peer-RE</name><members>20965:65530</members></community><community><name>geant-peers</name><members>20965:0004</members></community><community><name>geant-private-peers-prepend</name><members>20965:65531</members></community><community><name>geant-private-peers-prepend-1</name><members>20965:1111</members></community><community><name>geant-setcor</name><members>20965:61211</members></community><community><name>ias-routes</name><members>target:20965:333</members></community><community><name>lhcone-vpn</name><members>target:20965:111</members></community><community><name>mdvpn-comm</name><members>target:20965:65100</members></community><community><name>mgmt-vpn</name><members>target:20965:999</members></community><community><name>origin-validation-state-invalid</name><members>0x4300:0.0.0.0:2</members></community><community><name>origin-validation-state-unknown</name><members>0x4300:0.0.0.0:1</members></community><community><name>origin-validation-state-valid</name><members>0x4300:0.0.0.0:0</members></community><community><name>peers-prepend-3</name><members>20965:0313</members></community><undocumented><as-path-match><memory-limit>32m</memory-limit></as-path-match></undocumented><undocumented><community-match><memory-limit>32m</memory-limit></community-match></undocumented><as-path><name>AS-ARNES</name><path>20965* 2107 .*</path></as-path><as-path><name>AS-CARNET</name><path>20965* 2108 .*</path></as-path><as-path><name>AS-EENET</name><path>20965* 3221 .*</path></as-path><as-path><name>AS-FCCN</name><path>20965* 1930 .*</path></as-path><as-path><name>AS-GRNET</name><path>20965* 5408 .*</path></as-path><as-path><name>AS-<NREN></name><path>20965* 2847 .*</path></as-path><as-path><name>AS-IUCC</name><path>20965* 378 .*</path></as-path><as-path><name>AS-PLNET</name><path>20965* 8501 .*</path></as-path><as-path><name>AS-RESTENA</name><path>20965* 2602 .*</path></as-path><as-path><name>AS-ROEDUNET</name><path>20965* 2614 .*</path></as-path><as-path><name>AS-CYNET</name><path>20965* 3268 .*</path></as-path><as-path><name>AS-URAN</name><path>20965* 12687 .*</path></as-path><as-path><name>AS-REDIRIS</name><path>20965* 766 .*</path></as-path><as-path><name>AS-PALNET</name><path>20965* 35385 .*</path></as-path><as-path><name>AS-GRENA</name><path>20965* 20545 .*</path></as-path><as-path><name>AS-NASRA</name><path>20965* 47623 .*</path></as-path><as-path><name>AS-AzRENA</name><path>20965* 29630 .*</path></as-path><as-path><name>AS-PRIVATE</name><path>.* (0|64512-65535|4200000000-4294967295) .*</path></as-path><as-path><name>MAX-AS_PATH</name><path>.{41,}</path></as-path><as-path><name>AS-SELF</name><path>.*(20965|21320).*</path></as-path><as-path><name>AS-commercial-reject</name><path>.* (1|42|174|286|701|1239|1273|1299|2119|2551|2828|2856|2914|3257|3561|3856|4436|6453|6939|9002|12989|15412|19080|19151|12200|14294|16509|16839|18541|19793|22556|33011|26769|46786|22822|20940|8075|16265|19281|29748|16276|37958|38670|10310|30094|35415|20473|62715) .*</path></as-path></policy-options><class-of-service><classifiers><dscp><name>GEANT-BASIC</name><import>default</import><forwarding-class><name>best-effort</name><loss-priority><name>low</name><code-points>af11</code-points><code-points>af12</code-points><code-points>af13</code-points></loss-priority></forwarding-class></dscp><dscp-ipv6><name>GEANT-BASIC</name><import>default</import><forwarding-class><name>best-effort</name><loss-priority><name>low</name><code-points>af11</code-points><code-points>af12</code-points><code-points>af13</code-points></loss-priority></forwarding-class></dscp-ipv6><exp><name>GEANT-BASIC</name><import>default</import><forwarding-class><name>best-effort</name><loss-priority><name>low</name><code-points>100</code-points><code-points>101</code-points></loss-priority></forwarding-class><forwarding-class><name>gold</name><loss-priority><name>high</name><code-points>011</code-points></loss-priority></forwarding-class></exp></classifiers><drop-profiles><name>BEST-EFFORT</name><interpolate><fill-level>75</fill-level><fill-level>80</fill-level><fill-level>85</fill-level><fill-level>90</fill-level><fill-level>95</fill-level><fill-level>100</fill-level><drop-probability>0</drop-probability><drop-probability>25</drop-probability><drop-probability>75</drop-probability><drop-probability>90</drop-probability><drop-probability>95</drop-probability><drop-probability>100</drop-probability></interpolate></drop-profiles><forwarding-classes><class><name>gold</name><queue-num>4</queue-num><priority>high</priority></class></forwarding-classes><interfaces><interface><name>et-*</name><scheduler-map>GEANT-BASIC</scheduler-map><unit><name>*</name><classifiers><dscp><name>GEANT-BASIC</name></dscp><dscp-ipv6><name>GEANT-BASIC</name></dscp-ipv6><exp><classifier-name>GEANT-BASIC</classifier-name></exp></classifiers><rewrite-rules><exp><name>GEANT-BASIC</name><protocol>mpls-any</protocol></exp></rewrite-rules></unit></interface><interface><name>ge-*</name><scheduler-map>GEANT-BASIC</scheduler-map><unit><name>*</name><classifiers><dscp><name>GEANT-BASIC</name></dscp><dscp-ipv6><name>GEANT-BASIC</name></dscp-ipv6><exp><classifier-name>GEANT-BASIC</classifier-name></exp></classifiers><rewrite-rules><exp><name>GEANT-BASIC</name><protocol>mpls-any</protocol></exp></rewrite-rules></unit></interface><interface><name>gr-*</name><scheduler-map>GEANT-BASIC</scheduler-map><unit><name>*</name><classifiers><dscp><name>GEANT-BASIC</name></dscp><dscp-ipv6><name>GEANT-BASIC</name></dscp-ipv6><exp><classifier-name>GEANT-BASIC</classifier-name></exp></classifiers><rewrite-rules><exp><name>GEANT-BASIC</name><protocol>mpls-any</protocol></exp></rewrite-rules></unit></interface><interface><name>lt-*</name><unit><name>*</name><classifiers><dscp><name>GEANT-BASIC</name></dscp><dscp-ipv6><name>GEANT-BASIC</name></dscp-ipv6></classifiers></unit></interface><interface><name>so-*</name><scheduler-map>GEANT-BASIC</scheduler-map><unit><name>*</name><classifiers><dscp><name>GEANT-BASIC</name></dscp><dscp-ipv6><name>GEANT-BASIC</name></dscp-ipv6><exp><classifier-name>GEANT-BASIC</classifier-name></exp></classifiers><rewrite-rules><exp><name>GEANT-BASIC</name><protocol>mpls-any</protocol></exp></rewrite-rules></unit></interface><interface><name>xe-*</name><scheduler-map>GEANT-BASIC</scheduler-map><unit><name>*</name><classifiers><dscp><name>GEANT-BASIC</name></dscp><dscp-ipv6><name>GEANT-BASIC</name></dscp-ipv6><exp><classifier-name>GEANT-BASIC</classifier-name></exp></classifiers><rewrite-rules><exp><name>GEANT-BASIC</name><protocol>mpls-any</protocol></exp></rewrite-rules></unit></interface><interface><name>ae*</name><scheduler-map>GEANT-BASIC</scheduler-map><unit><name>*</name><classifiers><dscp><name>GEANT-BASIC</name></dscp><dscp-ipv6><name>GEANT-BASIC</name></dscp-ipv6><exp><classifier-name>GEANT-BASIC</classifier-name></exp></classifiers><rewrite-rules><exp><name>GEANT-BASIC</name><protocol>mpls-any</protocol></exp></rewrite-rules></unit></interface><interface><name>irb</name><unit><name>*</name><classifiers><dscp><name>GEANT-BASIC</name></dscp><dscp-ipv6><name>GEANT-BASIC</name></dscp-ipv6><exp><classifier-name>GEANT-BASIC</classifier-name></exp></classifiers><rewrite-rules><exp><name>GEANT-BASIC</name><protocol>mpls-any</protocol></exp></rewrite-rules></unit></interface></interfaces><rewrite-rules><exp><name>GEANT-BASIC</name><import>default</import><forwarding-class><name>expedited-forwarding</name><loss-priority><name>low</name><code-point>010</code-point></loss-priority><loss-priority><name>high</name><code-point>010</code-point></loss-priority></forwarding-class></exp></rewrite-rules><scheduler-maps><name>GEANT-BASIC</name><forwarding-class><name>expedited-forwarding</name><scheduler>EXPEDITED-FORWARDING</scheduler></forwarding-class><forwarding-class><name>network-control</name><scheduler>NETWORK-CONTROL</scheduler></forwarding-class><forwarding-class><name>best-effort</name><scheduler>BEST-EFFORT</scheduler></forwarding-class><forwarding-class><name>assured-forwarding</name><scheduler>BEST-EFFORT</scheduler></forwarding-class><forwarding-class><name>gold</name><scheduler>GOLD</scheduler></forwarding-class></scheduler-maps><schedulers><name>EXPEDITED-FORWARDING</name><transmit-rate><percent>15</percent></transmit-rate><buffer-size><temporal>15k</temporal></buffer-size><priority>high</priority></schedulers><schedulers><name>BEST-EFFORT</name><transmit-rate><remainder>
+ </remainder></transmit-rate><buffer-size><remainder>
+ </remainder></buffer-size><priority>low</priority><drop-profile-map><loss-priority>any</loss-priority><protocol>any</protocol><drop-profile>BEST-EFFORT</drop-profile></drop-profile-map></schedulers><schedulers><name>NETWORK-CONTROL</name><transmit-rate><percent>5</percent></transmit-rate><buffer-size><percent>5</percent></buffer-size><priority>high</priority></schedulers><schedulers><name>GOLD</name><transmit-rate><percent>40</percent></transmit-rate><buffer-size><temporal>5k</temporal></buffer-size><priority>strict-high</priority></schedulers></class-of-service><firewall><family><inet><filter><name>AMRES-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>62.40.125.63/32</name></source-address><source-address><name>147.91.0.117/32</name></source-address><destination-address><name>62.40.125.62/32</name></destination-address><destination-address><name>62.40.96.24/32</name></destination-address><destination-address><name>62.40.96.23/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>BGP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>BFD-protect</name><from><source-address><name>62.40.125.63/32</name></source-address><destination-address><name>62.40.125.62/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><discard>
+ </discard></then></term><term><name>MSDP-protect</name><from><source-address><name>147.91.0.129/32</name></source-address><destination-address><name>62.40.125.62/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-accept</count><accept/></then></term><term><name>MSDP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>PIM-protect</name><from><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><count>pim-attack</count><syslog/><discard>
+ </discard></then></term><term><name>TUNNEL-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>gre</protocol><protocol>ipip</protocol></from><then><accept/></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>SNMP-allow</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>161</port></from><then><accept/></then></term><term><name>DNS-server-accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>External-project-interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>DWS-in</name><from><dscp>32</dscp></from><then><count>dws-in</count><accept/></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>AMRES-out</name><interface-specific/><term><name>temp_DDOS_count</name><from><destination-address><name>91.187.132.18/32</name></destination-address><protocol>udp</protocol></from><then><count>DDOS_Counter</count><next>term</next></then></term><term><name>AMRES-DWS-out</name><from><dscp>32</dscp></from><then><policer>pol-AMRES-DWS-out</policer><count>DWS-out</count><next>term</next></then></term><term><name>AMRES-DWS-same-out</name><from><interface-group>1</interface-group></from><then><policer>pol-AMRES-DWS-out</policer><count>DWS-out</count><next>term</next></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>ARNES-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>bfd</name><from><source-address><name>62.40.124.6/32</name></source-address><destination-address><name>62.40.124.5/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>4784</port></from><then><accept/></then></term><term><name>BOGON-filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>62.40.124.6/32</name></source-address><destination-address><name>62.40.124.5/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>BGP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>MSDP-protect</name><from><source-address><name>62.40.124.6/32</name></source-address><source-address><name>88.200.0.168/32</name></source-address><destination-address><name>62.40.124.5/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-accept</count><accept/></then></term><term><name>MSDP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>PIM-protect</name><from><source-address><name>62.40.124.6/32</name></source-address><destination-address><name>62.40.124.5/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><count>pim-attack</count><syslog/><discard>
+ </discard></then></term><term><name>TUNNEL-accept</name><from><prefix-list><name>geant-address-space</name></prefix-list><protocol>gre</protocol><protocol>ipip</protocol></from><then><accept/></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>SNMP-allow</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>161</port></from><then><accept/></then></term><term><name>DNS-server-accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>External-project-interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>External-Equipment</name><from><destination-address><name>62.40.126.0/24</name></destination-address></from><then><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>DWS-in</name><from><dscp>32</dscp></from><then><count>dws-in</count><accept/></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>ARNES-out</name><interface-specific/><term><name>BFD</name><from><source-address><name>62.40.124.5/32</name></source-address><destination-address><name>62.40.124.6/32</name></destination-address><protocol>udp</protocol><port>3784</port></from><then><accept/></then></term><term><name>DWS-out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><next>term</next></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>CARne-in</name><interface-specific/><term><name>eduroam-temp1</name><from><source-address><name>161.53.2.204/32</name></source-address><destination-address><name>93.187.162.70/32</name></destination-address><first-fragment/><protocol>udp</protocol></from><then><count>to-ASNET-first-frag-eduroam</count><accept/></then></term><term><name>eduoram-temp2</name><from><source-address><name>161.53.2.204/32</name></source-address><destination-address><name>93.187.162.70/32</name></destination-address><is-fragment/><protocol>udp</protocol></from><then><count>to-ASNET-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp3</name><from><source-address><name>161.53.2.204/32</name></source-address><destination-address><name>93.187.162.70/32</name></destination-address><protocol>udp</protocol></from><then><count>to-ASNET-un-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp4</name><from><source-address><name>161.53.2.204/32</name></source-address><destination-address><name>93.187.162.70/32</name></destination-address></from><then><count>to-ASNET-all-eduroam</count><accept/></then></term><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>62.40.124.10/32</name></source-address><source-address><name>193.198.180.173/32</name></source-address><destination-address><name>62.40.124.9/32</name></destination-address><destination-address><name>62.40.96.23/32</name></destination-address><destination-address><name>62.40.96.24/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>BGP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>BFD-protect</name><from><source-address><name>62.40.124.10/32</name></source-address><destination-address><name>62.40.124.9/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><discard>
+ </discard></then></term><term><name>MSDP-protect</name><from><source-address><name>62.40.124.10/32</name></source-address><destination-address><name>62.40.124.9/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-accept</count><accept/></then></term><term><name>MSDP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>PIM-protect</name><from><source-address><name>62.40.124.10/32</name></source-address><destination-address><name>62.40.124.9/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><count>pim-attack</count><syslog/><discard>
+ </discard></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>IRCserver40</name><from><source-address><name>161.53.178.240/32</name></source-address><protocol>tcp</protocol><port>6660-6669</port><port>9999</port><port>113</port><port>8888</port></from><then><policer>pol-IRC-40</policer><accept/></then></term><term><name>IRCserver5</name><from><source-address><name>161.53.178.240/32</name></source-address><protocol>tcp</protocol><port>80</port></from><then><policer>pol-IRC-5</policer><accept/></then></term><term><name>IRCserverICMP</name><from><source-address><name>161.53.178.240/32</name></source-address><protocol>icmp</protocol></from><then><policer>pol-IRC-1</policer><accept/></then></term><term><name>IRCserverAccept</name><from><source-address><name>161.53.178.240/32</name></source-address><port>4400</port></from><then><accept/></then></term><term><name>IRCserverdrop</name><from><source-address><name>161.53.178.240/32</name></source-address></from><then><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>SNMP-allow</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>161</port></from><then><accept/></then></term><term><name>DNS-server-accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>External-project-interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>External-Equipment</name><from><destination-address><name>62.40.126.0/24</name></destination-address></from><then><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>DWS-in</name><from><dscp>32</dscp></from><then><count>dws-in</count><accept/></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>CARne-out</name><interface-specific/><term><name>eduroam-temp1</name><from><source-address><name>93.187.162.70/32</name></source-address><destination-address><name>161.53.2.204/32</name></destination-address><first-fragment/><protocol>udp</protocol></from><then><count>from-ASNET-first-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp2</name><from><source-address><name>93.187.162.70/32</name></source-address><destination-address><name>161.53.2.204/32</name></destination-address><is-fragment/><protocol>udp</protocol></from><then><count>from-ASNET-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp3</name><from><source-address><name>93.187.162.70/32</name></source-address><destination-address><name>161.53.2.204/32</name></destination-address><protocol>udp</protocol></from><then><count>from-ASNET-un-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp4</name><from><source-address><name>93.187.162.70/32</name></source-address><destination-address><name>161.53.2.204/32</name></destination-address></from><then><count>from-ASNET-all-eduroam</count><accept/></then></term><term><name>IRCserver40</name><from><destination-address><name>161.53.178.240/32</name></destination-address><protocol>tcp</protocol><port>6660-6669</port><port>9999</port><port>113</port><port>8888</port></from><then><policer>pol-IRC-40</policer><accept/></then></term><term><name>IRCserver5</name><from><destination-address><name>161.53.178.240/32</name></destination-address><protocol>tcp</protocol><port>80</port></from><then><policer>pol-IRC-5</policer><accept/></then></term><term><name>IRCserverICMP</name><from><destination-address><name>161.53.178.240/32</name></destination-address><protocol>icmp</protocol></from><then><policer>pol-IRC-1</policer><accept/></then></term><term><name>IRCserverAccept</name><from><destination-address><name>161.53.178.240/32</name></destination-address><port>4400</port></from><then><accept/></then></term><term><name>IRCserverdrop</name><from><destination-address><name>161.53.178.240/32</name></destination-address></from><then><discard>
+ </discard></then></term><term><name>DWS-out</name><from><dscp>32</dscp></from><then><policer>pol-CARne-DWS-out</policer><count>DWS-out</count><next>term</next></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>CARne2-in</name><interface-specific/><term><name>eduroam-temp1</name><from><source-address><name>161.53.2.204/32</name></source-address><destination-address><name>93.187.162.70/32</name></destination-address><first-fragment/><protocol>udp</protocol></from><then><count>to-ASNET-first-frag-eduroam</count><accept/></then></term><term><name>eduoram-temp2</name><from><source-address><name>161.53.2.204/32</name></source-address><destination-address><name>93.187.162.70/32</name></destination-address><is-fragment/><protocol>udp</protocol></from><then><count>to-ASNET-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp3</name><from><source-address><name>161.53.2.204/32</name></source-address><destination-address><name>93.187.162.70/32</name></destination-address><protocol>udp</protocol></from><then><count>to-ASNET-un-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp4</name><from><source-address><name>161.53.2.204/32</name></source-address><destination-address><name>93.187.162.70/32</name></destination-address></from><then><count>to-ASNET-all-eduroam</count><accept/></then></term><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>62.40.124.118/32</name></source-address><source-address><name>62.40.125.150/32</name></source-address><source-address><name>193.198.180.173/32</name></source-address><destination-address><name>62.40.124.117/32</name></destination-address><destination-address><name>62.40.125.149/32</name></destination-address><destination-address><name>62.40.96.23/32</name></destination-address><destination-address><name>62.40.96.24/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>BGP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>BFD-protect</name><from><source-address><name>62.40.125.150/32</name></source-address><destination-address><name>62.40.125.149/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><discard>
+ </discard></then></term><term><name>MSDP-protect</name><from><source-address><name>193.198.224.4/32</name></source-address><source-address><name>62.40.125.150/32</name></source-address><destination-address><name>62.40.125.149/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-accept</count><accept/></then></term><term><name>MSDP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>PIM-protect</name><from><source-address><name>62.40.125.150/32</name></source-address><destination-address><name>62.40.125.149/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><count>pim-attack</count><syslog/><discard>
+ </discard></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>IRCserver40</name><from><source-address><name>161.53.178.240/32</name></source-address><protocol>tcp</protocol><port>6660-6669</port><port>9999</port><port>113</port><port>8888</port></from><then><policer>pol-IRC-40</policer><accept/></then></term><term><name>IRCserver5</name><from><source-address><name>161.53.178.240/32</name></source-address><protocol>tcp</protocol><port>80</port></from><then><policer>pol-IRC-5</policer><accept/></then></term><term><name>IRCserverICMP</name><from><source-address><name>161.53.178.240/32</name></source-address><protocol>icmp</protocol></from><then><policer>pol-IRC-1</policer><accept/></then></term><term><name>IRCserverAccept</name><from><source-address><name>161.53.178.240/32</name></source-address><port>4400</port></from><then><accept/></then></term><term><name>IRCserverdrop</name><from><source-address><name>161.53.178.240/32</name></source-address></from><then><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>SNMP-allow</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>161</port></from><then><accept/></then></term><term><name>DNS-server-accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>External-project-interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>External-Equipment</name><from><destination-address><name>62.40.126.0/24</name></destination-address></from><then><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>DWS-in</name><from><dscp>32</dscp></from><then><count>dws-in</count><accept/></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>CARne2-out</name><interface-specific/><term><name>eduroam-temp1</name><from><source-address><name>93.187.162.70/32</name></source-address><destination-address><name>161.53.2.204/32</name></destination-address><first-fragment/><protocol>udp</protocol></from><then><count>from-ASNET-first-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp2</name><from><source-address><name>93.187.162.70/32</name></source-address><destination-address><name>161.53.2.204/32</name></destination-address><is-fragment/><protocol>udp</protocol></from><then><count>from-ASNET-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp3</name><from><source-address><name>93.187.162.70/32</name></source-address><destination-address><name>161.53.2.204/32</name></destination-address><protocol>udp</protocol></from><then><count>from-ASNET-un-frag-eduroam</count><accept/></then></term><term><name>eduroam-temp4</name><from><source-address><name>93.187.162.70/32</name></source-address><destination-address><name>161.53.2.204/32</name></destination-address></from><then><count>from-ASNET-all-eduroam</count><accept/></then></term><term><name>IRCserver40</name><from><destination-address><name>161.53.178.240/32</name></destination-address><protocol>tcp</protocol><port>6660-6669</port><port>9999</port><port>113</port><port>8888</port></from><then><policer>pol-IRC-40</policer><accept/></then></term><term><name>IRCserver5</name><from><destination-address><name>161.53.178.240/32</name></destination-address><protocol>tcp</protocol><port>80</port></from><then><policer>pol-IRC-5</policer><accept/></then></term><term><name>IRCserverICMP</name><from><destination-address><name>161.53.178.240/32</name></destination-address><protocol>icmp</protocol></from><then><policer>pol-IRC-1</policer><accept/></then></term><term><name>IRCserverAccept</name><from><destination-address><name>161.53.178.240/32</name></destination-address><port>4400</port></from><then><accept/></then></term><term><name>IRCserverdrop</name><from><destination-address><name>161.53.178.240/32</name></destination-address></from><then><discard>
+ </discard></then></term><term><name>rl-DWS-out</name><from><dscp>32</dscp></from><then><policer>pol-CARne-DWS-out</policer><count>DWS-out</count><next>term</next></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>CORIANT_MGMT_IN</name><term><name>OSPF</name><from><protocol>ospf</protocol></from><then><accept/></then></term><term><name>G30_LOOPBACKS</name><from><source-prefix-list><name>CORIANT_MGMT_G30_LOOPBACKS</name></source-prefix-list></from><then><accept/></then></term><term><name>LOCAL_LAN</name><from><source-prefix-list><name>CORIANT_MGMT_LOCAL_LANS</name></source-prefix-list></from><then><accept/></then></term><term><name>DEFAULT</name><then><reject>
+ </reject></then></term></filter><filter><name>CORIANT_MGMT_OUT</name><term><name>OSPF</name><from><protocol>ospf</protocol></from><then><accept/></then></term><term><name>ICMP</name><from><protocol>icmp</protocol></from><then><accept/></then></term><term><name>TNMS</name><from><source-prefix-list><name>CORIANT_MGMT_TNMS</name></source-prefix-list></from><then><accept/></then></term><term><name>MGMT_NETS</name><from><source-prefix-list><name>CORIANT_MGMT_NETS</name></source-prefix-list></from><then><accept/></then></term><term><name>DEFAULT</name><then><reject>
+ </reject></then></term></filter><filter><name>KIFU-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>62.40.124.102/32</name></source-address><source-address><name>62.40.124.18/32</name></source-address><source-address><name>195.111.97.167/32</name></source-address><source-address><name>195.111.97.179/32</name></source-address><destination-address><name>62.40.124.101/32</name></destination-address><destination-address><name>62.40.124.17/32</name></destination-address><destination-address><name>62.40.96.23/32</name></destination-address><destination-address><name>62.40.96.24/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>BGP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>BFD-protect</name><from><source-address><name>62.40.124.18/32</name></source-address><destination-address><name>62.40.124.17/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><discard>
+ </discard></then></term><term><name>MSDP-protect</name><from><source-address><name>195.111.97.7/32</name></source-address><destination-address><name>62.40.124.17/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-accept</count><accept/></then></term><term><name>MSDP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-attack</count><syslog/><discard>
+ </discard></then></term><term inactive="inactive"><name>PIM-protect</name><from><source-address><name>195.111.97.7/32</name></source-address><source-address><name>62.40.124.102/32</name></source-address><destination-address><name>62.40.124.101/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><count>pim-attack</count><syslog/><discard>
+ </discard></then></term><term><name>TUNNEL-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>gre</protocol><protocol>ipip</protocol></from><then><accept/></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>SNMP-allow</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>161</port></from><then><accept/></then></term><term><name>DNS-server-accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>External-project-interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>DWS-in</name><from><dscp>32</dscp></from><then><count>dws-in</count><accept/></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>KIFU-out</name><interface-specific/><term><name>rl-DWS-AMREJ-out</name><from><destination-address><name>147.91.0.0/17</name></destination-address><destination-address><name>160.99.0.0/16</name></destination-address><dscp>32</dscp></from><then><count>DWS-AMREJ-out</count><accept/></then></term><term><name>rl-DWS-out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><next>term</next></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>KREN-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>pol-KREN-traffic</name><then><policer>pol-KREN-rate-limiting</policer><next>term</next></then></term><term><name>BOGON-filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>62.40.124.67/32</name></source-address><destination-address><name>62.40.124.66/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>BGP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>MSDP-protect</name><from><source-address><name>62.40.124.67/32</name></source-address><destination-address><name>62.40.124.66/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-accept</count><accept/></then></term><term><name>MSDP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>PIM-protect</name><from><source-address><name>62.40.124.67/32</name></source-address><destination-address><name>62.40.124.66/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><count>pim-attack</count><syslog/><discard>
+ </discard></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>SNMP-allow</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>161</port></from><then><accept/></then></term><term><name>DNS-server-accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>External-project-interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>External-Equipment</name><from><destination-address><name>62.40.126.0/24</name></destination-address></from><then><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>DWS-in</name><from><dscp>32</dscp></from><then><count>dws-in</count><accept/></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>KREN-out</name><interface-specific/><term><name>pol-KREN-traffic</name><then><policer>pol-KREN-rate-limiting</policer><next>term</next></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>LHCONE-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>MARnet-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter</name><from><source-address><name>10.150.150.0/29</name><except/></source-address><source-address><name>10.151.151.0/29</name><except/></source-address><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>194.149.130.109/32</name></source-address><source-address><name>62.40.125.254/32</name></source-address><destination-address><name>194.149.130.110/32</name></destination-address><destination-address><name>62.40.125.253/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>BGP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-attack</count><syslog/><discard>
+ </discard></then></term><term inactive="inactive"><name>MSDP-protect</name><from><source-address><name>194.149.130.109/32</name></source-address><source-address><name>62.40.125.254/32</name></source-address><destination-address><name>194.149.130.110/32</name></destination-address><destination-address><name>62.40.125.253/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-accept</count><accept/></then></term><term><name>MSDP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>PIM-protect</name><from><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><count>pim-attack</count><syslog/><discard>
+ </discard></then></term><term><name>TUNNEL-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>gre</protocol><protocol>ipip</protocol></from><then><accept/></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>SNMP-allow</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>161</port></from><then><accept/></then></term><term><name>DNS-server-accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-address><name>10.150.150.0/29</name></destination-address><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>External-project-interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>DWS-in</name><from><dscp>32</dscp></from><then><count>dws-in</count><accept/></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>MARnet-out</name><interface-specific/><term><name>rl-DWS-out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><next>term</next></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>OPTIMA-TELEKOM-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>MARK_DSCP_41</name><then><next>term</next><dscp>41</dscp></then></term><term><name>BOGON-filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>External-project-interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>62.40.124.121/32</name></source-address><destination-address><name>62.40.124.120/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>BGP-filter</name><from><destination-address><name>62.40.124.120/32</name></destination-address><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>TUNNEL-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>gre</protocol><protocol>ipip</protocol><protocol>ipv6</protocol></from><then><accept/></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>DNS-server-accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>MS-MAIL-LOG</name><from><destination-address><name>62.40.123.146/32</name></destination-address><destination-address><name>62.40.104.134/31</name></destination-address><protocol>tcp</protocol><port>smtp</port></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>DWS-in</name><from><dscp>32</dscp></from><then><count>dws-in</count><accept/></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>OPTIMA-TELEKOM-out</name><term><name>DWS-out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><accept/></then></term><term><name>DWS-same-out</name><from><interface-group>1</interface-group></from><then><count>DWS-out</count><accept/></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_HEAD_IN</name><term><name>PROTECTED_EXTERNAL_TO_INTERNAL</name><from><destination-prefix-list><name>INTERNAL-address-space</name></destination-prefix-list></from><then><next>term</next></then></term><term><name>Established_accept</name><from><protocol>tcp</protocol><tcp-established/></from><then><accept/></then></term><term><name>GEANT_DC_INFRASTRUCTURE_accept</name><from><destination-prefix-list><name>GEANT-DC</name></destination-prefix-list><destination-prefix-list><name>GEANT-Infrastructure</name></destination-prefix-list></from><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_HEAD_OUT</name><term><name>PROTECTED_EXTERNAL_TO_INTERNAL</name><from><source-prefix-list><name>EXTERNAL-address-space</name></source-prefix-list></from><then><next>term</next></then></term><term><name>Established_accept</name><from><protocol>tcp</protocol><tcp-established/></from><then><accept/></then></term><term><name>GOC_GEANT_accept</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><accept/></then></term><term><name>GEANT_DC_INFRASTRUCTURE_accept</name><from><source-prefix-list><name>GEANT-DC</name></source-prefix-list><source-prefix-list><name>GEANT-Infrastructure</name></source-prefix-list></from><then><accept/></then></term><term><name>SuperPoP_DC_accept</name><from><source-address><name>83.97.92.0/22</name></source-address><destination-prefix-list><name>GEANT-DC</name></destination-prefix-list><protocol>tcp</protocol><port>88</port><port>389</port><port>445</port><port>464</port><port>3268</port></from><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_MIDDLE_IN</name><term><name>VLAN_Access_Allow_TCP</name><from><protocol>tcp</protocol><port>80</port><port>443</port></from><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_MIDDLE_OUT</name><term><name>VLAN-Access_Allow_TCP</name><from><destination-port>80</destination-port><destination-port>443</destination-port></from><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_TAIL_IN</name><term><name>GEANT_SSH_accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>ssh</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>default</name><then><discard>
+ </discard></then></term></filter><filter><name>PROTECTED_EXTERNAL_TAIL_OUT</name><term><name>GEANT_SSH_accept</name><from><source-prefix-list><name>geant-address-space</name></source-prefix-list><protocol>tcp</protocol><port>ssh</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>default</name><then><discard>
+ </discard></then></term></filter><filter><name>ROUTER_access</name><term><name>TCP_established_accept</name><from><protocol>tcp</protocol><tcp-established/></from><then><accept/></then></term><term><name>SSH_accept</name><from><source-prefix-list><name>geant-address-space-short</name></source-prefix-list><source-prefix-list><name>corporate-address-space</name></source-prefix-list><source-prefix-list><name>pref-list-router-access</name></source-prefix-list><source-prefix-list><name>space-local</name></source-prefix-list><source-prefix-list><name>nmteam-dev-servers</name></source-prefix-list><source-prefix-list><name>vuln-scanner</name></source-prefix-list><source-prefix-list><name>fod</name></source-prefix-list><source-prefix-list><name>GEANT-lg</name></source-prefix-list><source-prefix-list><name>dashboard-servers</name></source-prefix-list><source-prefix-list><name>opennsa-servers</name></source-prefix-list><source-prefix-list><name>GEANT-rancid</name></source-prefix-list><source-prefix-list><name>geant-ims</name></source-prefix-list><source-prefix-list><name>MDVPN-SI-TOOLS-V4</name></source-prefix-list><source-prefix-list><name>FXP_SUBNET</name></source-prefix-list><source-prefix-list><name>librenms-servers</name></source-prefix-list><source-prefix-list><name>ansible-servers</name></source-prefix-list><source-prefix-list><name>ne-lnetd-servers</name></source-prefix-list><source-prefix-list><name>OC_SERVERS_V4</name></source-prefix-list><source-prefix-list><name>JUMP_SERVERS_V4</name></source-prefix-list><source-prefix-list><name>NE_SERVERS_V4</name></source-prefix-list><source-prefix-list><name>NOMIOS_SUPPORT_SSH</name></source-prefix-list><source-prefix-list><name>nemo-servers</name></source-prefix-list><protocol>tcp</protocol><destination-port>ssh</destination-port></from><then><accept/></then></term><term><name>BGP_accept</name><from><source-prefix-list><name>RE_BGP_inet</name></source-prefix-list><source-prefix-list><name>IAS_DUMMY_BGP_inet</name></source-prefix-list><source-prefix-list><name>IAS_BGP_inet</name></source-prefix-list><source-prefix-list><name>lhcone-l3vpn_BGP_inet</name></source-prefix-list><source-prefix-list><name>taas-control_BGP_inet</name></source-prefix-list><source-prefix-list><name>mgmt-l3vpn_BGP_inet</name></source-prefix-list><source-prefix-list><name>mdvpn_BGP_inet</name></source-prefix-list><source-prefix-list><name>mdvpn-nren-gn_BGP_inet</name></source-prefix-list><source-prefix-list><name>confine-l3vpn_BGP_inet</name></source-prefix-list><source-prefix-list><name>VPN-PROXY_BGP_inet</name></source-prefix-list><source-prefix-list><name>VRR_BGP_inet</name></source-prefix-list><source-prefix-list><name>VPN-PROXY_RI_BGP_inet</name></source-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><accept/></then></term><term><name>FTP_accept</name><from><source-prefix-list><name>geant-address-space-short</name></source-prefix-list><source-prefix-list><name>corporate-address-space</name></source-prefix-list><protocol>tcp</protocol><destination-port>ftp</destination-port><destination-port>ftp-data</destination-port></from><then><accept/></then></term><term><name>RADIUS_accept</name><from><source-prefix-list><name>GEANT-DC</name></source-prefix-list><source-prefix-list><name>GEANT-Infrastructure</name></source-prefix-list><protocol>udp</protocol><port>1812</port><port>1813</port></from><then><accept/></then></term><term><name>NTP_accept</name><from><source-prefix-list><name>GEANT_NTP</name></source-prefix-list><source-prefix-list><name>COMMUNITY_NTP</name></source-prefix-list><source-prefix-list><name>PUBLIC_NTP</name></source-prefix-list><source-prefix-list><name>geant-routers</name></source-prefix-list><protocol>udp</protocol><port>ntp</port></from><then><accept/></then></term><term><name>Netconf_accept</name><from><source-prefix-list><name>GEANT-Superpop-v4</name></source-prefix-list><source-prefix-list><name>corporate-address-space</name></source-prefix-list><source-prefix-list><name>geant-address-space</name></source-prefix-list><source-prefix-list><name>ansible-servers</name></source-prefix-list><source-prefix-list><name>ne-lnetd-servers</name></source-prefix-list><protocol>tcp</protocol><port>830</port></from><then><accept/></then></term><term><name>SNMP_accept</name><from><source-prefix-list><name>GEANT-SNMP</name></source-prefix-list><destination-port>161</destination-port></from><then><policer>lo0-flood</policer><accept/></then></term><term><name>DNS_accept</name><from><source-prefix-list><name>GEANT-DNS</name></source-prefix-list><source-prefix-list><name>GEANT-DNS-EXT</name></source-prefix-list><port>domain</port></from><then><accept/></then></term><term><name>LDP_accept</name><from><source-prefix-list><name>geant-address-space</name></source-prefix-list><source-prefix-list><name>GEANT-LDP</name></source-prefix-list><destination-port>646</destination-port></from><then><accept/></then></term><term><name>MPLS_LSP_echo_accept</name><from><source-prefix-list><name>geant-routers</name></source-prefix-list><protocol>udp</protocol><port>3503</port></from><then><accept/></then></term><term><name>RSVP_accept</name><from><source-prefix-list><name>geant-address-space</name></source-prefix-list><protocol>rsvp</protocol></from><then><accept/></then></term><term><name>PIM_access</name><from><protocol>pim</protocol></from><then><accept/></then></term><term><name>BFD_accept</name><from><source-prefix-list><name>geant-address-space</name></source-prefix-list><source-prefix-list><name>RE_BGP_inet</name></source-prefix-list><source-prefix-list><name>IAS_BGP_inet</name></source-prefix-list><source-prefix-list><name>lhcone-l3vpn_BGP_inet</name></source-prefix-list><source-prefix-list><name>mdvpn_BGP_inet</name></source-prefix-list><port>3784</port><port>4784</port><port>3785</port></from><then><accept/></then></term><term><name>uBFD_accept</name><from><source-prefix-list><name>geant-routers</name></source-prefix-list><protocol>udp</protocol><port>6784</port></from><then><accept/></then></term><term><name>IGMP_accept</name><from><protocol>igmp</protocol></from><then><accept/></then></term><term><name>MSDP_accept</name><from><source-prefix-list><name>GEANT-MSDP</name></source-prefix-list><port>msdp</port></from><then><accept/></then></term><term><name>TRACEROUTE_accept</name><from><source-prefix-list><name>geant-address-space</name></source-prefix-list><protocol>udp</protocol><destination-port>33434-33534</destination-port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><protocol>icmp</protocol><icmp-type>echo-reply</icmp-type><icmp-type>echo-request</icmp-type><icmp-type>unreachable</icmp-type><icmp-type>time-exceeded</icmp-type><icmp-type>timestamp</icmp-type><icmp-type>timestamp-reply</icmp-type></from><then><policer>lo0-flood</policer><accept/></then></term><term><name>ALLOW_DCN_OSPF</name><from><source-address><name>172.18.0.0/16</name></source-address><protocol>ospf</protocol></from><then><accept/></then></term><term><name>TWAMP</name><from><source-prefix-list><name>TWAMP_CLIENTS</name></source-prefix-list><port>862</port><port>10000-65535</port></from><then><accept/></then></term><term><name>default</name><then><discard>
+ </discard></then></term></filter><filter><name>SETCOR-in</name><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>MARK_DSCP_41</name><then><next>term</next><dscp>41</dscp></then></term><term><name>BOGON-filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogon-source</count><discard>
+ </discard></then></term><term><name>dos-source-counting</name><from><source-prefix-list><name>dos-attack-source-count</name></source-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-destination-counting</name><from><destination-prefix-list><name>dos-attack-destination-count</name></destination-prefix-list></from><then><count>dos-attack-traffic-count</count><next>term</next></then></term><term><name>dos-source-filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-source-filtering</count><discard>
+ </discard></then></term><term><name>dos-destination-filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic</count><discard>
+ </discard></then></term><term><name>transit-network-control-traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP-protect</name><from><source-address><name>185.203.16.33/32</name></source-address><source-address><name>185.203.16.34/32</name></source-address><destination-address><name>185.203.16.35/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><count>bgp-accept</count><accept/></then></term><term><name>MSDP-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><count>msdp-attack</count><syslog/><discard>
+ </discard></then></term><term><name>SPOOF-filter</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>WEB-server-accept</name><from><destination-address><name>62.40.120.123/32</name></destination-address><destination-address><name>62.40.123.11/32</name></destination-address><destination-address><name>62.40.122.147/32</name></destination-address><protocol>tcp</protocol><port>http</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>UDP-traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>External-Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>LBE-in</name><from><dscp>8</dscp></from><then><count>lbe-in</count><accept/></then></term><term><name>mcast-in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>SETCOR-out</name><term><name>DWS-out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><accept/></then></term><term><name>LBE-out</name><from><dscp>8</dscp></from><then><count>LBE-out</count><accept/></then></term><term><name>mcast-out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>VL000_MIDDLE_IN</name><term><name>VLAN_Access_accept</name><from><protocol>tcp</protocol><port>80</port><port>443</port></from><then><accept/></then></term></filter><filter><name>XEN_MNG-Users_OpenFlow_OUT</name><term inactive="inactive"><name>PROTECTED_EXTERNAL_TO_INTERNAL</name><from><source-prefix-list><name>EXTERNAL-address-space</name></source-prefix-list></from><then><policer>pol-rate-limiting</policer><next>term</next></then></term><term><name>Allow_Inbound_Established</name><from><tcp-established/></from><then><accept/></then></term><term><name>NOC-DANTE-access</name><from><source-prefix-list><name>corporate-address-space</name></source-prefix-list></from><then><accept/></then></term><term><name>GEANT-DC-INFRASTRUCTURE-Access</name><from><source-prefix-list><name>GEANT-DC</name></source-prefix-list><source-prefix-list><name>GEANT-Infrastructure</name></source-prefix-list></from><then><accept/></then></term><term><name>VLAN-Access_Allow</name><then><accept/></then></term><term><name>GEANT-SRV-SSH_Access</name><from><source-prefix-list><name>geant-address-space</name></source-prefix-list><protocol>tcp</protocol><port>ssh</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term></filter><filter><name>bone-in</name><term><name>default</name><then><accept/></then></term></filter><filter><name>bone-out</name><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_AMRES_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>AMRES_blocking_service</name><from><destination-prefix-list><name>AMRES-blocking-list</name></destination-prefix-list></from><then><count>AMRES-blocking-service</count><discard>
+ </discard></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic-src</count><discard>
+ </discard></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic-dst</count><discard>
+ </discard></then></term><term><name>Transit_network_control_traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP_protect</name><from><source-address><name>83.97.89.29/32</name></source-address><destination-address><name>83.97.89.28/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>BFD-protect</name><from><source-address><name>83.97.89.29/32</name></source-address><destination-address><name>83.97.89.28/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><discard>
+ </discard></then></term><term><name>MSDP_protect</name><from><source-address><name>83.97.89.29/32</name></source-address><destination-address><name>83.97.89.28/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><accept/></then></term><term><name>MSDP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>PIM_protect</name><from><source-address><name>83.97.89.29/32</name></source-address><destination-address><name>83.97.89.28/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><syslog/><discard>
+ </discard></then></term><term><name>SPOOF_filter</name><from><source-address><name>83.97.89.29/32</name><except/></source-address><source-prefix-list><name>corporate-address-space</name></source-prefix-list><source-prefix-list><name>geant-address-space</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>External_project_interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>RSVP_allow</name><from><protocol>rsvp</protocol></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>MCAST_in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_AMRES_OUT</name><interface-specific/><term><name>DWS_out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><accept/></then></term><term><name>DWS_same_out</name><from><interface-group>1</interface-group></from><then><count>DWS-out</count><accept/></then></term><term><name>MCAST_out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_ARNES_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>ARNES_blocking_service</name><from><destination-prefix-list><name>ARNES-blocking-list</name></destination-prefix-list></from><then><count>ARNES-blocking-service</count><discard>
+ </discard></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic-src</count><discard>
+ </discard></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic-dst</count><discard>
+ </discard></then></term><term><name>Transit_network_control_traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP_protect</name><from><source-address><name>83.97.88.14/32</name></source-address><destination-address><name>83.97.88.13/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>BFD-protect</name><from><source-address><name>83.97.88.14/32</name></source-address><destination-address><name>83.97.88.13/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><discard>
+ </discard></then></term><term><name>MSDP_protect</name><from><source-address><name>83.97.88.14/32</name></source-address><destination-address><name>83.97.88.13/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><accept/></then></term><term><name>MSDP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>PIM_protect</name><from><source-address><name>83.97.88.14/32</name></source-address><destination-address><name>83.97.88.13/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><syslog/><discard>
+ </discard></then></term><term><name>SPOOF_filter</name><from><source-address><name>83.97.88.14/32</name><except/></source-address><source-prefix-list><name>corporate-address-space</name></source-prefix-list><source-prefix-list><name>geant-address-space</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>External_project_interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>RSVP_allow</name><from><protocol>rsvp</protocol></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>MCAST_in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_ARNES_OUT</name><interface-specific/><term><name>DWS_out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><accept/></then></term><term><name>DWS_same_out</name><from><interface-group>1</interface-group></from><then><count>DWS-out</count><accept/></then></term><term><name>MCAST_out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_CARNET_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>CARNET_blocking_service</name><from><destination-prefix-list><name>CARNET-blocking-list</name></destination-prefix-list></from><then><count>CARNET-blocking-service</count><discard>
+ </discard></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic-src</count><discard>
+ </discard></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic-dst</count><discard>
+ </discard></then></term><term><name>Transit_network_control_traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP_protect</name><from><source-address><name>83.97.88.26/32</name></source-address><destination-address><name>83.97.88.25/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>BFD-protect</name><from><source-address><name>83.97.88.26/32</name></source-address><destination-address><name>83.97.88.25/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><discard>
+ </discard></then></term><term><name>MSDP_protect</name><from><source-address><name>83.97.88.26/32</name></source-address><destination-address><name>83.97.88.25/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><accept/></then></term><term><name>MSDP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>PIM_protect</name><from><source-address><name>83.97.88.26/32</name></source-address><destination-address><name>83.97.88.25/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><syslog/><discard>
+ </discard></then></term><term><name>SPOOF_filter</name><from><source-address><name>83.97.88.26/32</name><except/></source-address><source-prefix-list><name>corporate-address-space</name></source-prefix-list><source-prefix-list><name>geant-address-space</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>External_project_interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>RSVP_allow</name><from><protocol>rsvp</protocol></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>MCAST_in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_CARNET_OUT</name><interface-specific/><term><name>DWS_out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><accept/></then></term><term><name>DWS_same_out</name><from><interface-group>1</interface-group></from><then><count>DWS-out</count><accept/></then></term><term><name>MCAST_out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_KIFU_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>KIFU_blocking_service</name><from><destination-prefix-list><name>KIFU-blocking-list</name></destination-prefix-list></from><then><count>KIFU-blocking-service</count><discard>
+ </discard></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic-src</count><discard>
+ </discard></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic-dst</count><discard>
+ </discard></then></term><term><name>Transit_network_control_traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP_protect</name><from><source-address><name>83.97.88.86/32</name></source-address><source-address><name>195.111.97.179/32</name></source-address><destination-address><name>83.97.88.85/32</name></destination-address><destination-address><name>83.97.88.81/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>BFD-protect</name><from><source-address><name>83.97.88.86/32</name></source-address><destination-address><name>83.97.88.85/32</name></destination-address><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><protocol>udp</protocol><port>3784</port><port>3785</port></from><then><discard>
+ </discard></then></term><term><name>MSDP_protect</name><from><source-address><name>83.97.88.86/32</name></source-address><destination-address><name>83.97.88.85/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><accept/></then></term><term><name>MSDP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>PIM_protect</name><from><source-address><name>83.97.88.86/32</name></source-address><destination-address><name>83.97.88.85/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><syslog/><discard>
+ </discard></then></term><term><name>SPOOF_filter</name><from><source-address><name>83.97.88.86/32</name><except/></source-address><source-prefix-list><name>corporate-address-space</name></source-prefix-list><source-prefix-list><name>geant-address-space</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>External_project_interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>RSVP_allow</name><from><protocol>rsvp</protocol></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>MCAST_in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_KIFU_OUT</name><interface-specific/><term><name>DWS_out</name><from><dscp>32</dscp></from><then><count>DWS-out</count><accept/></then></term><term><name>DWS_same_out</name><from><interface-group>1</interface-group></from><then><count>DWS-out</count><accept/></then></term><term><name>MCAST_out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_MARNET_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>MARNET_blocking_service</name><from><destination-prefix-list><name>MARNET-blocking-list</name></destination-prefix-list></from><then><count>MARNET-blocking-service</count><discard>
+ </discard></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list</name></source-prefix-list></from><then><count>bogons-source</count><discard>
+ </discard></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source</name></source-prefix-list></from><then><count>dos-attack-traffic-src</count><discard>
+ </discard></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination</name></destination-prefix-list></from><then><count>dos-attack-traffic-dst</count><discard>
+ </discard></then></term><term><name>Transit_network_control_traffic</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><dscp>48</dscp><dscp>56</dscp></from><then><loss-priority>low</loss-priority><forwarding-class>network-control</forwarding-class><next>term</next></then></term><term><name>BGP_protect</name><from><source-address><name>83.97.88.102/32</name></source-address><source-address><name>83.97.88.106/32</name></source-address><destination-address><name>83.97.88.101/32</name></destination-address><destination-address><name>83.97.88.105/32</name></destination-address><protocol>tcp</protocol><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>bgp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>MSDP_protect</name><from><source-address><name>83.97.88.102/32</name></source-address><source-address><name>83.97.88.106/32</name></source-address><destination-address><name>83.97.88.101/32</name></destination-address><destination-address><name>83.97.88.105/32</name></destination-address><protocol>tcp</protocol><port>msdp</port></from><then><accept/></then></term><term><name>MSDP_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>tcp</protocol><port>msdp</port></from><then><syslog/><discard>
+ </discard></then></term><term><name>PIM_protect</name><from><source-address><name>83.97.88.102/32</name></source-address><source-address><name>83.97.88.106/32</name></source-address><destination-address><name>83.97.88.101/32</name></destination-address><destination-address><name>83.97.88.105/32</name></destination-address><protocol>pim</protocol><protocol>igmp</protocol></from><then><accept/></then></term><term><name>PIM_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>pim</protocol><protocol>igmp</protocol></from><then><syslog/><discard>
+ </discard></then></term><term><name>SPOOF_filter</name><from><source-address><name>83.97.88.102/32</name><except/></source-address><source-address><name>83.97.88.106/32</name><except/></source-address><source-prefix-list><name>corporate-address-space</name></source-prefix-list><source-prefix-list><name>geant-address-space</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space</name></source-prefix-list></from><then><count>spoofed-attack-traffic</count><discard>
+ </discard></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS</name></destination-prefix-list><protocol>udp</protocol><protocol>tcp</protocol><port>domain</port></from><then><accept/></then></term><term><name>External_project_interfaces</name><from><destination-prefix-list><name>external-project-interfaces</name></destination-prefix-list></from><then><discard>
+ </discard></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project</name></destination-prefix-list></from><then><accept/></then></term><term><name>RSVP_allow</name><from><protocol>rsvp</protocol></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>icmp</protocol></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list><protocol>udp</protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space</name></destination-prefix-list></from><then><count>core-attack</count><discard>
+ </discard></then></term><term><name>MCAST_in</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-in</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_MARNET_OUT</name><interface-specific/><term><name>DDOS-UDP_80-443</name><from><destination-address><name>194.149.128.0/19</name></destination-address><destination-address><name>185.153.48.0/22</name></destination-address><protocol>udp</protocol><destination-port>80</destination-port><destination-port>443</destination-port></from><then><count>MARNET_DDOS_UDP_80-443-count</count><discard>
+ </discard></then></term><term><name>DDOS_UDP_123</name><from><destination-address><name>194.149.128.0/19</name></destination-address><destination-address><name>185.153.48.0/22</name></destination-address><source-port>123</source-port><source-port>11211</source-port></from><then><count>MARNET-DDOS-UDP-123</count><discard>
+ </discard></then></term><term><name>DWS_out</name><from><dscp>32</dscp></from><then><policer>pol-MARNet-DWS-out</policer><count>DWS-out</count><accept/></then></term><term><name>DWS_same_out</name><from><interface-group>1</interface-group></from><then><count>DWS-out</count><accept/></then></term><term><name>MCAST_out</name><from><destination-address><name>224.0.0.0/4</name></destination-address></from><then><count>mcast-out</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter></inet><inet6><filter><name>AMRES6-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter6</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>dos-source-counting6</name><from><source-prefix-list><name>dos-attack-source-count6</name></source-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-destination-counting6</name><from><destination-prefix-list><name>dos-attack-destination-count6</name></destination-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-source-filtering6</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>dos-destination-filtering6</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>SPOOF-filter6</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geantnoc-address-space6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>NOC6-accept</name><from><destination-prefix-list><name>geantnoc-address-space6</name></destination-prefix-list></from><then><accept/></then></term><term><name>TTM-allow-tcp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>9142</port><port>10259</port></from><then><accept/></then></term><term><name>TTM-allow-udp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>udp</payload-protocol></from><then><accept/></then></term><term><name>BGP6-protect</name><from><source-address><name>2001:798:99:1::11e/128</name></source-address><destination-address><name>2001:798:99:1::11d/128</name></destination-address><port>bgp</port></from><then><count>bgpv6-accept</count><accept/></then></term><term><name>BGP6-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><count>bgpv6-attack</count><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:798:99:1::11e/128</name></source-address><destination-address><name>2001:798:99:1::11d/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>NREN-router-accept</name><from><port>ssh</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>WEB6-accept</name><from><destination-address><name>2001:798:2:284d::60/128</name></destination-address><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>http</port></from><then><accept/></then></term><term><name>DNSv6-server-accept</name><from><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>UDP-traceroute6</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External-Projects-interfaces6</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><count>extv6-attack</count><discard/></then></term><term><name>External-Projects6</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term><term><name>external-project-interfaces6</name><then><accept/></then></term></filter><filter><name>AMRES6-out</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>ARNES6-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter6</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>dos-source-counting6</name><from><source-prefix-list><name>dos-attack-source-count6</name></source-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-destination-counting6</name><from><destination-prefix-list><name>dos-attack-destination-count6</name></destination-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-source-filtering6</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>dos-destination-filtering6</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>SPOOF-filter6</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geantnoc-address-space6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>NOC6-accept</name><from><destination-prefix-list><name>geantnoc-address-space6</name></destination-prefix-list></from><then><accept/></then></term><term><name>TTM-allow-tcp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>9142</port><port>10259</port></from><then><accept/></then></term><term><name>TTM-allow-udp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>udp</payload-protocol></from><then><accept/></then></term><term><name>bfd</name><from><source-address><name>2001:0798:0010:10aa::6/128</name></source-address><destination-address><name>2001:0798:0010:10aa::5/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>4784</port></from><then><accept/></then></term><term><name>BGP6-protect</name><from><source-address><name>2001:798:10:10aa::6/126</name></source-address><destination-address><name>2001:798:10:10aa::5/126</name></destination-address><port>bgp</port></from><then><count>bgpv6-accept</count><accept/></then></term><term><name>BGP6-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><count>bgpv6-attack</count><syslog/><discard/></then></term><term><name>NREN-router-accept</name><from><destination-address><name>2001:798:10:10ff::1/128</name></destination-address><port>ssh</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>WEB6-accept</name><from><destination-address><name>2001:798:2:284d::60/128</name></destination-address><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>http</port></from><then><accept/></then></term><term><name>DNSv6-server-accept</name><from><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>UDP-traceroute6</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External-Projects-interfaces6</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><count>extv6-attack</count><discard/></then></term><term><name>External-Projects6</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>ARNES6-out</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>CARne26-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter6</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>dos-source-counting6</name><from><source-prefix-list><name>dos-attack-source-count6</name></source-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-destination-counting6</name><from><destination-prefix-list><name>dos-attack-destination-count6</name></destination-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-source-filtering6</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>dos-destination-filtering6</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>SPOOF-filter6</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geantnoc-address-space6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>NOC6-accept</name><from><destination-prefix-list><name>geantnoc-address-space6</name></destination-prefix-list></from><then><accept/></then></term><term><name>TTM-allow-tcp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>9142</port><port>10259</port></from><then><accept/></then></term><term><name>TTM-allow-udp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>udp</payload-protocol></from><then><accept/></then></term><term><name>BGP6-protect</name><from><source-address><name>2001:798:1b:10aa::12/128</name></source-address><source-address><name>2001:798:1b:10aa::2a/128</name></source-address><destination-address><name>2001:798:1b:10aa::11/128</name></destination-address><destination-address><name>2001:798:1b:10aa::29/128</name></destination-address><port>bgp</port></from><then><count>bgpv6-accept</count><accept/></then></term><term><name>BGP6-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><count>bgpv6-attack</count><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:0798:001b:10aa::2a/128</name></source-address><destination-address><name>2001:0798:001b:10aa::29/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>NREN-router-accept</name><from><port>ssh</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>WEB6-accept</name><from><destination-address><name>2001:798:2:284d::60/128</name></destination-address><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>http</port></from><then><accept/></then></term><term><name>DNSv6-server-accept</name><from><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>UDP-traceroute6</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External-Projects-interfaces6</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><count>extv6-attack</count><discard/></then></term><term><name>External-Projects6</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>CARne26-out</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>CARne6-in</name><interface-specific/><term><name>BOGON-filter6</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>dos-source-counting6</name><from><source-prefix-list><name>dos-attack-source-count6</name></source-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-destination-counting6</name><from><destination-prefix-list><name>dos-attack-destination-count6</name></destination-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-source-filtering6</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>dos-destination-filtering6</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>SPOOF-filter6</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geantnoc-address-space6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>NOC6-accept</name><from><destination-prefix-list><name>geantnoc-address-space6</name></destination-prefix-list></from><then><accept/></then></term><term><name>TTM-allow-tcp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>9142</port><port>10259</port></from><then><accept/></then></term><term><name>TTM-allow-udp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>udp</payload-protocol></from><then><accept/></then></term><term><name>BGP6-protect</name><from><source-address><name>2001:798:10:10aa::a/126</name></source-address><destination-address><name>2001:798:10:10aa::9/126</name></destination-address><port>bgp</port></from><then><count>bgpv6-accept</count><accept/></then></term><term><name>BGP6-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><count>bgpv6-attack</count><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:0798:0010:10aa::a/128</name></source-address><destination-address><name>2001:0798:0010:10aa::9/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>NREN-router-accept</name><from><destination-address><name>2001:798:10:10ff::1/128</name></destination-address><port>ssh</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>WEB6-accept</name><from><destination-address><name>2001:798:2:284d::60/128</name></destination-address><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>http</port></from><then><accept/></then></term><term><name>DNSv6-server-accept</name><from><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>UDP-traceroute6</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External-Projects-interfaces6</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><count>extv6-attack</count><discard/></then></term><term><name>External-Projects6</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>CARne6-out</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>KIFU6-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter6</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>dos-source-counting6</name><from><source-prefix-list><name>dos-attack-source-count6</name></source-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-destination-counting6</name><from><destination-prefix-list><name>dos-attack-destination-count6</name></destination-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-source-filtering6</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>dos-destination-filtering6</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>SPOOF-filter6</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geantnoc-address-space6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>NOC6-accept</name><from><destination-prefix-list><name>geantnoc-address-space6</name></destination-prefix-list></from><then><accept/></then></term><term><name>TTM-allow-tcp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>9142</port><port>10259</port></from><then><accept/></then></term><term><name>TTM-allow-udp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>udp</payload-protocol></from><then><accept/></then></term><term><name>BGP6-protect</name><from><source-address><name>2001:798:2018:10aa::a/128</name></source-address><source-address><name>2001:798:10:10aa::16/128</name></source-address><destination-address><name>2001:798:2018:10aa::9/128</name></destination-address><destination-address><name>2001:798:10:10aa::15/128</name></destination-address><destination-address><name>2001:798:1b:10aa::5/128</name></destination-address><port>bgp</port></from><then><count>bgpv6-accept</count><accept/></then></term><term><name>BGP6-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><count>bgpv6-attack</count><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:0798:0010:10aa::16/128</name></source-address><destination-address><name>2001:0798:0010:10aa::15/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>NREN-router-accept</name><from><destination-address><name>2001:798:10:10ff::1/128</name></destination-address><port>ssh</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>WEB6-accept</name><from><destination-address><name>2001:798:2:284d::60/128</name></destination-address><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>http</port></from><then><accept/></then></term><term><name>DNSv6-server-accept</name><from><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>UDP-traceroute6</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External-Projects-interfaces6</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><count>extv6-attack</count><discard/></then></term><term><name>External-Projects6</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term><term><name>external-project-interfaces6</name><then><accept/></then></term></filter><filter><name>KIFU6-out</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>LHCONE6-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>count-ipv6</name><then><count>ipv6-counter</count><next>term</next></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>LHCONE6-out</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>MARnet6-in</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>BOGON-filter6</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>dos-source-counting6</name><from><source-prefix-list><name>dos-attack-source-count6</name></source-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-destination-counting6</name><from><destination-prefix-list><name>dos-attack-destination-count6</name></destination-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-source-filtering6</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>dos-destination-filtering6</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>SPOOF-filter6</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geantnoc-address-space6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>NOC6-accept</name><from><destination-prefix-list><name>geantnoc-address-space6</name></destination-prefix-list></from><then><accept/></then></term><term><name>TTM-allow-tcp</name><from><destination-address><name>2001:798:2012:47::2/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>9142</port><port>10259</port></from><then><accept/></then></term><term><name>BGP6-protect</name><from><source-address><name>2001:798:2c:10aa::2/126</name></source-address><source-address><name>2001:798:2c:10aa::16/126</name></source-address><destination-address><name>2001:798:2c:10aa::1/126</name></destination-address><destination-address><name>2001:798:2c:10aa::15/126</name></destination-address><port>bgp</port></from><then><count>bgpv6-accept</count><accept/></then></term><term><name>BGP6-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><count>bgpv6-attack</count><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:0798:2c:10aa::16/128</name></source-address><destination-address><name>2001:0798:2c:10aa::15/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>NREN-router-accept</name><from><destination-address><name>2001:798:2c:10ff::2/128</name></destination-address><port>ssh</port></from><then><accept/></then></term><term><name>WEB6-accept</name><from><destination-address><name>2001:798:2:284d::60/128</name></destination-address><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>http</port></from><then><accept/></then></term><term><name>DNSv6-server-accept</name><from><destination-address><name>2001:798:2:284d::30/128</name></destination-address><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>workstations-SSHv6-accept</name><from><source-address><name>2001:0798:5e00::/48</name></source-address><source-address><name>2001:0798:5e01::/48</name></source-address><destination-address><name>2001:798:2028:006e::10/64</name></destination-address><payload-protocol>tcp</payload-protocol><port>ssh</port></from><then><accept/></then></term><term><name>TTM-allow-udp</name><from><destination-address><name>2001:798:2012:0047::2/128</name></destination-address><payload-protocol>udp</payload-protocol></from><then><accept/></then></term><term><name>ICMP-accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>UDP-traceroute6</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External-Projects-interfaces6</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><count>extv6-attack</count><discard/></then></term><term><name>External-Projects6</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>MARnet6-out</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>OPTIMA-TELEKOM6-in</name><term><name>sample</name><then><sample/><next>term</next></then></term><term><name>MARK_DSCP_41</name><then><traffic-class>41</traffic-class><next>term</next></then></term><term><name>BOGON-filter6</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>PIM-V6-log</name><from><next-header>pim</next-header></from><then><accept/></then></term><term><name>dos-source-counting6</name><from><source-prefix-list><name>dos-attack-source-count6</name></source-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-destination-counting6</name><from><destination-prefix-list><name>dos-attack-destination-count6</name></destination-prefix-list></from><then><count>dos-attack-traffic-count6</count><next>term</next></then></term><term><name>dos-source-filtering6</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>dos-destination-filtering6</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6</count><discard/></then></term><term><name>SPOOF-filter6</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geantnoc-address-space6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>NOC6-accept</name><from><destination-prefix-list><name>geantnoc-address-space6</name></destination-prefix-list></from><then><accept/></then></term><term><name>BGP6-protect</name><from><source-address><name>2001:798:99:1::1e/128</name></source-address><destination-address><name>2001:798:99:1::1d/128</name></destination-address><port>bgp</port></from><then><count>bgpv6-accept</count><accept/></then></term><term><name>BGP6-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><count>bgpv6-attack</count><syslog/><discard/></then></term><term><name>WEB6-accept</name><from><destination-address><name>2001:798:2:284d::60/128</name></destination-address><destination-address><name>2001:798:2:284d::30/128</name></destination-address><destination-address><name>2001:798:ff10:a5::2/128</name></destination-address><payload-protocol>tcp</payload-protocol><port>http</port><port>443</port></from><then><accept/></then></term><term><name>DNSv6-server-accept</name><from><destination-address><name>2001:798:2:284d::30/128</name></destination-address><destination-address><name>2001:798:ff23:28::2/128</name></destination-address><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP-accept</name><from><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>UDP-traceroute6</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term inactive="inactive"><name>External-Projects-interfaces6</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><count>extv6-attack</count><discard/></then></term><term><name>External-Projects6</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE-filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>OPTIMA-TELEKOM6-out</name><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_V6_HEAD_IN</name><term><name>PROTECTED_EXTERNAL_TO_INTERNAL</name><from><destination-prefix-list><name>INTERNAL-address-spaceV6</name></destination-prefix-list></from><then><policer>pol-rate-limiting</policer><next>term</next></then></term><term><name>Established_accept</name><from><next-header>tcp</next-header><tcp-established/></from><then><accept/></then></term><term><name>GEANT_DC_INFRASTRUCTURE_accept</name><from><destination-prefix-list><name>GEANT-DC-v6</name></destination-prefix-list><destination-prefix-list><name>GEANT-Infrastructure-v6</name></destination-prefix-list></from><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_V6_HEAD_OUT</name><term><name>PROTECTED_EXTERNAL_TO_INTERNAL</name><from><source-prefix-list><name>EXTERNAL-address-spaceV6</name></source-prefix-list></from><then><policer>pol-rate-limiting</policer><next>term</next></then></term><term><name>Established_accept</name><from><next-header>tcp</next-header><tcp-established/></from><then><accept/></then></term><term><name>GOC_GEANT_accept</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list></from><then><accept/></then></term><term><name>GEANT_DC_INFRASTRUCTURE_accept</name><from><source-prefix-list><name>GEANT-DC-v6</name></source-prefix-list><source-prefix-list><name>GEANT-Infrastructure-v6</name></source-prefix-list></from><then><accept/></then></term><term><name>SuperPoP_DC_accept</name><from><source-address><name>2001:798:3::0/64</name></source-address><destination-prefix-list><name>GEANT-DC-v6</name></destination-prefix-list><payload-protocol>tcp</payload-protocol><port>88</port><port>389</port><port>445</port><port>464</port><port>3268</port></from><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_V6_MIDDLE_IN</name><term><name>VLAN-Access_Allow_TCP</name><from><destination-port>80</destination-port><destination-port>443</destination-port></from><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_V6_MIDDLE_OUT</name><term><name>VLAN-Access_Allow_TCP</name><from><destination-port>80</destination-port><destination-port>443</destination-port></from><then><accept/></then></term></filter><filter><name>PROTECTED_EXTERNAL_V6_TAIL_IN</name><term><name>GEANT_SSH_accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><next-header>tcp</next-header><port>ssh</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><next-header>icmpv6</next-header></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>default</name><then><discard/></then></term></filter><filter><name>PROTECTED_EXTERNAL_V6_TAIL_OUT</name><term><name>GEANT_SRV_SSH_accept</name><from><source-prefix-list><name>geant-address-space-V6</name></source-prefix-list><next-header>tcp</next-header><port>ssh</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><next-header>icmpv6</next-header></from><then><policer>ICMP-flood</policer><accept/></then></term><term><name>default</name><then><discard/></then></term></filter><filter><name>ROUTER_access_V6</name><term><name>SSH_accept</name><from><source-prefix-list><name>dashboard-servers-v6</name></source-prefix-list><source-prefix-list><name>opennsa-servers-v6</name></source-prefix-list><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>MDVPN-SI-TOOLS-V6</name></source-prefix-list><source-prefix-list><name>NE_SERVERS_V6</name></source-prefix-list><source-prefix-list><name>OC_SERVERS_V6</name></source-prefix-list><source-prefix-list><name>JUMP_SERVERS_V6</name></source-prefix-list><next-header>tcp</next-header><port>ssh</port></from><then><accept/></then></term><term><name>Netconf_accept</name><from><source-prefix-list><name>GEANT-Superpop-v6</name></source-prefix-list><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geant-address-space-v6</name></source-prefix-list><payload-protocol>tcp</payload-protocol><destination-port>830</destination-port></from><then><accept/></then></term><term><name>FTP_accept</name><from><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><destination-port>ftp</destination-port><destination-port>ftp-data</destination-port></from><then><accept/></then></term><term><name>BGP_accept</name><from><source-prefix-list><name>RE_BGP_inet6</name></source-prefix-list><source-prefix-list><name>IAS_DUMMY_BGP_inet6</name></source-prefix-list><source-prefix-list><name>IAS_BGP_inet6</name></source-prefix-list><source-prefix-list><name>lhcone-l3vpn_BGP_inet6</name></source-prefix-list><source-prefix-list><name>taas-control_BGP_inet6</name></source-prefix-list><source-prefix-list><name>mgmt-l3vpn_BGP_inet6</name></source-prefix-list><source-prefix-list><name>mdvpn_BGP_inet6</name></source-prefix-list><source-prefix-list><name>mdvpn-nren-gn_BGP_inet6</name></source-prefix-list><source-prefix-list><name>confine-l3vpn_BGP_inet6</name></source-prefix-list><source-prefix-list><name>VPN-PROXY_BGP_inet6</name></source-prefix-list><source-prefix-list><name>VRR_BGP_inet6</name></source-prefix-list><source-prefix-list><name>VPN-PROXY_RI_BGP_inet6</name></source-prefix-list><next-header>tcp</next-header><port>bgp</port></from><then><accept/></then></term><term><name>BFD_accept</name><from><source-prefix-list><name>geant-address-space-v6</name></source-prefix-list><source-prefix-list><name>RE_BGP_inet6</name></source-prefix-list><source-prefix-list><name>IAS_BGP_inet6</name></source-prefix-list><source-prefix-list><name>lhcone-l3vpn_BGP_inet6</name></source-prefix-list><source-prefix-list><name>mdvpn_BGP_inet6</name></source-prefix-list><port>3784</port><port>3785</port><port>4784</port></from><then><accept/></then></term><term><name>TRACEROUTE</name><from><destination-prefix-list><name>geant-address-space-v6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33466</destination-port></from><then><policer>lo0-flood</policer><accept/></then></term><term><name>ICMP_GEANT</name><from><source-prefix-list><name>geant-address-space-V6</name></source-prefix-list><payload-protocol>icmpv6</payload-protocol></from><then><policer>lo0-flood</policer><accept/></then></term><term><name>IPV6_ND_LOCAL</name><from><payload-protocol>icmpv6</payload-protocol><hop-limit>255</hop-limit></from><then><accept/></then></term><term><name>IPV6_ND</name><from><destination-address><name>fe80::/10</name></destination-address><destination-address><name>ff02::/123</name></destination-address><destination-address><name>ff02:0:0:0:0:1:ff00::/104</name></destination-address></from><then><accept/></then></term><term><name>ICMP</name><from><payload-protocol>icmpv6</payload-protocol><icmp-type>echo-reply</icmp-type><icmp-type>echo-request</icmp-type><icmp-type>destination-unreachable</icmp-type><icmp-type>time-exceeded</icmp-type><icmp-type>packet-too-big</icmp-type><icmp-type>parameter-problem</icmp-type></from><then><policer>lo0-flood</policer><accept/></then></term><term><name>default</name><then><discard/></then></term></filter><filter><name>bone6-in</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>bone6-out</name><interface-specific/><term><name>count-ipv6</name><then><count>ipv6-counter</count><accept/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_AMRES_V6_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>AMRES_blocking_service</name><from><destination-prefix-list><name>AMRES6-blocking-list</name></destination-prefix-list></from><then><count>AMRES-blocking-service6</count><discard/></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6-src</count><discard/></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6-dst</count><discard/></then></term><term><name>BGP_protect</name><from><source-address><name>2001:798:1::1b6/128</name></source-address><destination-address><name>2001:798:1::1b5/128</name></destination-address><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:798:1::1b6/128</name></source-address><destination-address><name>2001:798:1::1b5/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>SPOOF_filter</name><from><source-address><name>2001:798:1::1b6/128</name><except/></source-address><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geant-address-space-V6</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space-V6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External_Projects_interfaces</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><discard/></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_AMRES_V6_OUT</name><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_ARNES_V6_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>ARNES_blocking_service</name><from><destination-prefix-list><name>ARNES6-blocking-list</name></destination-prefix-list></from><then><count>ARNES-blocking-service6</count><discard/></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6-src</count><discard/></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6-dst</count><discard/></then></term><term><name>BGP_protect</name><from><source-address><name>2001:798:1::12/128</name></source-address><destination-address><name>2001:798:1::11/128</name></destination-address><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:798:1::12/128</name></source-address><destination-address><name>2001:798:1::11/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>SPOOF_filter</name><from><source-address><name>2001:798:1::12/128</name><except/></source-address><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geant-address-space-V6</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space-V6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External_Projects_interfaces</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><discard/></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_ARNES_V6_OUT</name><interface-specific/><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_CARNET_V6_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>CARNET_blocking_service</name><from><destination-prefix-list><name>CARNET6-blocking-list</name></destination-prefix-list></from><then><count>CARNET-blocking-service6</count><discard/></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6-src</count><discard/></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6-dst</count><discard/></then></term><term><name>BGP_protect</name><from><source-address><name>2001:798:1::1e/128</name></source-address><destination-address><name>2001:798:1::1d/128</name></destination-address><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:798:1::1e/128</name></source-address><destination-address><name>2001:798:1::1d/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>SPOOF_filter</name><from><source-address><name>2001:798:1::1e/128</name><except/></source-address><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geant-address-space-V6</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space-V6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External_Projects_interfaces</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><discard/></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_CARNET_V6_OUT</name><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_KIFU_V6_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>KIFU_blocking_service</name><from><destination-prefix-list><name>KIFU6-blocking-list</name></destination-prefix-list></from><then><count>KIFU-blocking-service6</count><discard/></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6-src</count><discard/></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6-dst</count><discard/></then></term><term><name>BGP_protect</name><from><source-address><name>2001:798:1::6a/128</name></source-address><destination-address><name>2001:798:1::69/128</name></destination-address><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:798:1::6a/128</name></source-address><destination-address><name>2001:798:1::69/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>SPOOF_filter</name><from><source-address><name>2001:798:1::6a/128</name><except/></source-address><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geant-address-space-V6</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space-V6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External_Projects_interfaces</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><discard/></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_KIFU_V6_OUT</name><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_MARNET_V6_IN</name><interface-specific/><term><name>sample</name><then><sample/><next>term</next></then></term><term inactive="inactive"><name>MARNET_blocking_service</name><from><destination-prefix-list><name>MARNET6-blocking-list</name></destination-prefix-list></from><then><count>MARNET-blocking-service6</count><discard/></then></term><term><name>BOGON_filter</name><from><source-prefix-list><name>bogons-list6</name></source-prefix-list></from><then><count>bogons-source6</count><discard/></then></term><term><name>DOS_source_filtering</name><from><source-prefix-list><name>dos-attack-source6</name></source-prefix-list></from><then><count>dos-attack-traffic6-src</count><discard/></then></term><term><name>DOS_destination_filtering</name><from><destination-prefix-list><name>dos-attack-destination6</name></destination-prefix-list></from><then><count>dos-attack-traffic6-dst</count><discard/></then></term><term><name>BGP_protect</name><from><source-address><name>2001:798:1::82/128</name></source-address><destination-address><name>2001:798:1::81/128</name></destination-address><port>bgp</port></from><then><accept/></then></term><term><name>BGP_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><port>bgp</port></from><then><syslog/><discard/></then></term><term><name>BFD-protect</name><from><source-address><name>2001:798:1::82/128</name></source-address><destination-address><name>2001:798:1::81/128</name></destination-address><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><accept/></then></term><term><name>BFD-filter</name><from><destination-prefix-list><name>geant-address-space</name></destination-prefix-list><payload-protocol>udp</payload-protocol><port>3784</port><port>3785</port></from><then><discard/></then></term><term><name>SPOOF_filter</name><from><source-address><name>2001:798:1::82/128</name><except/></source-address><source-prefix-list><name>corporate-address-space6</name></source-prefix-list><source-prefix-list><name>geant-address-space-V6</name></source-prefix-list><source-prefix-list><name>geant-ias-address-space-V6</name></source-prefix-list></from><then><count>spoofed-attack-traffic6</count><discard/></then></term><term><name>DNS_server_accept</name><from><destination-prefix-list><name>GEANT-DNS-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><payload-protocol>tcp</payload-protocol><port>domain</port></from><then><accept/></then></term><term><name>ICMP_accept</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>icmp6</payload-protocol></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>UDP_traceroute</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list><payload-protocol>udp</payload-protocol><destination-port>33434-33690</destination-port></from><then><policer>ICMPv6-flood</policer><accept/></then></term><term><name>External_Projects_interfaces</name><from><destination-prefix-list><name>external-project-interfaces6</name></destination-prefix-list></from><then><discard/></then></term><term><name>External_Projects</name><from><destination-prefix-list><name>external-project6</name></destination-prefix-list></from><then><accept/></then></term><term><name>CORE_filter</name><from><destination-prefix-list><name>geant-address-space-V6</name></destination-prefix-list><destination-prefix-list><name>geant-ias-address-space-V6</name></destination-prefix-list></from><then><count>corev6-attack</count><discard/></then></term><term><name>default</name><then><accept/></then></term></filter><filter><name>nren_IAS_MARNET_V6_OUT</name><term><name>default</name><then><accept/></then></term></filter></inet6></family><policer><name>ICMP-flood</name><if-exceeding><bandwidth-limit>10m</bandwidth-limit><burst-size-limit>1m</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>ICMPv6-flood</name><if-exceeding><bandwidth-limit>10m</bandwidth-limit><burst-size-limit>1m</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>lo0-flood</name><if-exceeding><bandwidth-limit>12m</bandwidth-limit><burst-size-limit>900k</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-AMRES-DWS-out</name><if-exceeding><bandwidth-limit>1500000000</bandwidth-limit><burst-size-limit>6250000</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-CARne-DWS-out</name><filter-specific/><if-exceeding><bandwidth-limit>5g</bandwidth-limit><burst-size-limit>3125000</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-DWS-in</name><if-exceeding><bandwidth-limit>5m</bandwidth-limit><burst-size-limit>625k</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-IRC-1</name><if-exceeding><bandwidth-limit>1m</bandwidth-limit><burst-size-limit>6250000</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-IRC-40</name><if-exceeding><bandwidth-limit>40m</bandwidth-limit><burst-size-limit>6250000</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-IRC-5</name><if-exceeding><bandwidth-limit>5m</bandwidth-limit><burst-size-limit>6250000</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-KREN-rate-limiting</name><if-exceeding><bandwidth-limit>1g</bandwidth-limit><burst-size-limit>625k</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-MARNet-DWS-out</name><if-exceeding><bandwidth-limit>150m</bandwidth-limit><burst-size-limit>187500</burst-size-limit></if-exceeding><then><discard/></then></policer><policer><name>pol-rate-limiting</name><if-exceeding><bandwidth-limit>10m</bandwidth-limit><burst-size-limit>125k</burst-size-limit></if-exceeding><then><discard/></then></policer></firewall><routing-instances><instance><name>IAS</name><routing-options><rib><name>IAS.inet6.0</name><static><route><name>0100::/64</name><discard/><no-readvertise/></route><route><name>2001:798:1::/48</name><discard/><community>21320:64912</community></route></static></rib><rib><name>IAS.inet6flow.0</name><maximum-prefixes><limit>100</limit><threshold>90</threshold></maximum-prefixes></rib><rib><name>IAS.inetflow.0</name><maximum-prefixes><limit>100</limit><threshold>90</threshold></maximum-prefixes></rib><static><route><name>83.97.88.0/21</name><discard/><community>21320:64912</community><community>64700:65532</community><community>64700:65533</community><community>64700:65534</community></route><route><name>192.0.2.101/32</name><discard/><no-readvertise/></route></static><label><allocation>ps-direct-route-label</allocation></label></routing-options><protocols><bgp><group><name>IAS-NRENS</name><family><inet><unicast>
+ </unicast></inet></family><neighbor><name>83.97.89.29</name><description>-- Peering with AMRES --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-AMRES-nren</import><family><inet><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet></family><export>ps-advertise-default</export><export>ps-BOGONS</export><export>ps-IAS-to-AMRES-nren</export><peer-as>13092</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>83.97.88.86</name><description>-- Peering with KIFU --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-KIFU2-nren</import><family><inet><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet></family><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS</export><export>ps-IAS-to-KIFU2-nren</export><peer-as>1955</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>83.97.88.26</name><description>-- Peering with CARNET --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-CARnet1-nren</import><family><inet><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet></family><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-advertise-default</export><export>ps-BOGONS</export><export>ps-IAS-to-CARnet</export><peer-as>2108</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>83.97.88.14</name><description>-- Peering with ARNES --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-ARNES-nren</import><family><inet><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet></family><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS</export><export>ps-IAS-to-ARNES-nren</export><peer-as>2107</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>83.97.88.106</name><description>-- IAS Peering with MARNET --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-MARNet-nren</import><family><inet><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet></family><export>ps-BOGONS</export><export>ps-IAS-to-MARNet-nren</export><peer-as>44224</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>100</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor></group><group><name>IAS-NRENS-ipv6</name><family><inet6><unicast>
+ </unicast></inet6></family><neighbor><name>2001:798:1::1b6</name><description>-- IPv6 Peering with AMRES --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS-V6</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-AMRES-V6-nren</import><family><inet6><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet6></family><export>ps-advertise-default-v6</export><export>ps-BOGONS-V6</export><export>ps-IAS-to-AMRES-V6-nren</export><peer-as>13092</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>2001:798:1::6a</name><description>-- IPv6 Peering with KIFU --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS-V6</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-KIFU2-V6-nren</import><family><inet6><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet6></family><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS-V6</export><export>ps-IAS-to-KIFU2-V6-nren</export><peer-as>1955</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>2001:798:1::1e</name><description>-- IPv6 Peering with CARNET --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS-V6</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-CARnet1-v6-nren</import><family><inet6><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet6></family><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-advertise-default-v6</export><export>ps-BOGONS-V6</export><export>ps-IAS-to-CARnet-v6</export><peer-as>2108</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>2001:798:1::12</name><description>-- IPv6 Peering with ARNES --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS-V6</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-ARNES-V6-nren</import><family><inet6><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet6></family><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS-V6</export><export>ps-IAS-to-ARNES-V6-nren</export><peer-as>2107</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>2001:798:1::82</name><description>-- IPv6 IAS Peering with MARNET --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-AS-SELF-REJECT</import><import>ps-BOGONS-V6</import><import>ps-RPKI-IAS-NREN</import><import>ps-IAS-from-MARnet-v6-nren</import><family><inet6><unicast><prefix-limit><maximum>125000</maximum></prefix-limit></unicast></inet6></family><export>ps-BOGONS-V6</export><export>ps-IAS-to-MARnet-V6-nren</export><peer-as>44224</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor></group><group><name>GEANT-Peers</name><type>external</type><description>Private IPv4 Peering Group</description><out-delay>10</out-delay><family><inet><unicast><prefix-limit><maximum>150000</maximum><teardown><limit-threshold>90</limit-threshold><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></unicast></inet></family><neighbor><name>62.40.124.121</name><description>Private Peering with Optima Telekom</description><import>ps-BOGONS</import><import>ps-RPKI-IAS-PEER</import><import>ps-IAS-from-OPTIMA-TELEKOM</import><family><inet><unicast><prefix-limit><maximum>10</maximum><teardown><limit-threshold>80</limit-threshold><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></unicast><any><prefix-limit><maximum>10</maximum><teardown><limit-threshold>90</limit-threshold><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></any></inet></family><export>ps-BOGONS</export><export>ps-IAS-to-OPTIMA-TELEKOM</export><peer-as>34594</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as></neighbor><neighbor><name>185.203.16.33</name><description>Private Peering with SETCOR AS61211 - Primary</description><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-RPKI-IAS-PEER</import><import>ps-IAS-from-SETCOR</import><family><inet><unicast><prefix-limit><maximum>22500</maximum><teardown><limit-threshold>83</limit-threshold></teardown></prefix-limit></unicast></inet></family><export>ps-BOGONS</export><export>ps-IAS-to-SETCOR</export><peer-as>61211</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as></neighbor><neighbor><name>185.203.16.34</name><description>Private Peering with SETCOR AS61211 - Secondary</description><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-RPKI-IAS-PEER</import><import>ps-IAS-from-SETCOR</import><family><inet><unicast><prefix-limit><maximum>22500</maximum><teardown><limit-threshold>83</limit-threshold></teardown></prefix-limit></unicast></inet></family><export>ps-BOGONS</export><export>ps-IAS-to-SETCOR</export><peer-as>61211</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as></neighbor></group><group><name>GEANT-Peers-V6</name><type>external</type><description>Private IPv6 Peering Group</description><family><inet6><unicast><prefix-limit><maximum>150000</maximum><teardown><limit-threshold>90</limit-threshold><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></unicast></inet6></family><neighbor><name>2001:798:99:1::1e</name><description>Private Peering with Optima Telekom</description><import>ps-BOGONS-V6</import><import>ps-RPKI-IAS-PEER</import><import>ps-IAS-from-OPTIMA-TELEKOM</import><family><inet6><unicast><prefix-limit><maximum>10</maximum><teardown><limit-threshold>80</limit-threshold><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></unicast><multicast><prefix-limit><maximum>10</maximum><teardown><limit-threshold>80</limit-threshold><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></multicast><any><prefix-limit><maximum>10</maximum><teardown><limit-threshold>90</limit-threshold><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></any></inet6></family><export>ps-BOGONS-V6</export><export>ps-IAS-to-OPTIMA-TELEKOM</export><peer-as>34594</peer-as><local-as><as-number>21320</as-number><private/><no-prepend-global-as/></local-as></neighbor></group><log-updown/><bgp-error-tolerance>
+ </bgp-error-tolerance></bgp></protocols><description>GEANT IAS Internet VRF</description><instance-type>vrf</instance-type><interface><name>lt-0/0/0.61</name></interface><interface><name>ge-0/3/5.0</name></interface><interface><name>ae10.333</name></interface><interface><name>ae11.333</name></interface><interface><name>ae12.0</name></interface><interface><name>ae14.333</name></interface><interface><name>ae16.333</name></interface><interface><name>ae17.333</name></interface><interface><name>ae18.333</name></interface><route-distinguisher><rd-type>20965:333</rd-type></route-distinguisher><vrf-import>ps-into-ias-vrf</vrf-import><vrf-export>ps-from-ias-vrf</vrf-export><vrf-target><community>target:20965:333</community></vrf-target><vrf-table-label><source-class-usage/></vrf-table-label></instance><instance><name>coriant-mgmt</name><routing-options><static><route><name>172.18.0.0/16</name><discard/></route></static></routing-options><protocols><ospf><area><name>0.0.0.0</name><interface><name>ae1.103</name><priority>150</priority></interface></area><export>CORIANT_MGMT_OSPF_EXPORT</export></ospf></protocols><description>L3VPN for Coriant Groove Management</description><instance-type>vrf</instance-type><interface><name>ae1.103</name></interface><route-distinguisher><rd-type>20965:991</rd-type></route-distinguisher><vrf-import>ps-to-coriant-vrf</vrf-import><vrf-export>ps-from-coriant-vrf</vrf-export><vrf-target><community>target:20965:991</community></vrf-target><vrf-table-label>
+ </vrf-table-label></instance><instance><name>lhcone-l3vpn</name><routing-options><rib><name>lhcone-l3vpn.inet.0</name><martians><address>128.0.0.0/16</address><orlonger/><allow/></martians><martians><address>191.255.0.0/16</address><orlonger/><allow/></martians><martians><address>223.255.255.0/24</address><orlonger/><allow/></martians></rib><rib><name>lhcone-l3vpn.inet6.0</name><aggregate><route><name>2001:798:111:1::/64</name><community>20965:0155</community></route></aggregate></rib><static><route><name>62.40.126.0/24</name><discard/><community>20965:0155</community></route></static><autonomous-system><as-number>20965</as-number></autonomous-system></routing-options><protocols><bgp><group><name>lhcone-nrens</name><import>ps-BOGONS</import><import>ps-PRIVATE-AS-BLOCK</import><import>ps-from-lhcone-nren</import><export>ps-BOGONS</export><export>ps-PRIVATE-AS-BLOCK</export><export>ps-to-lhcone-nren</export><neighbor><name>62.40.126.49</name><description>KIFU AP2 peering LHCONE</description><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-PRIVATE-AS-BLOCK</import><import>ps-from-lhcone-nren</import><family><inet><any><prefix-limit><maximum>100</maximum><teardown><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></any></inet></family><export>ps-BOGONS</export><export>ps-PRIVATE-AS-BLOCK</export><export>ps-to-KIFU-LHCONE-TE</export><export>ps-to-lhcone-nren</export><peer-as>1955</peer-as></neighbor><neighbor><name>62.40.126.238</name><description>ARNES LHCONE IP VPN</description><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-PRIVATE-AS-BLOCK</import><import>ps-from-lhcone-nren</import><family><inet><any><prefix-limit><maximum>100</maximum><teardown><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></any></inet></family><export>ps-BOGONS</export><export>ps-PRIVATE-AS-BLOCK</export><export>ps-to-ARNES-LHCONE-TE</export><export>ps-to-lhcone-nren</export><peer-as>2107</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor></group><group><name>lhcone-peers</name><import>ps-BOGONS</import><import>ps-PRIVATE-AS-BLOCK</import><import>ps-from-lhcone-peer</import><export>ps-BOGONS</export><export>ps-PRIVATE-AS-BLOCK</export><export>ps-to-lhcone-peer</export></group><group><name>lhcone6-nrens</name><import>ps-BOGONS-V6</import><import>ps-PRIVATE-AS-BLOCK</import><import>ps-from-lhcone-nren</import><export>ps-BOGONS-V6</export><export>ps-PRIVATE-AS-BLOCK</export><export>ps-to-lhcone-nren-v6</export><neighbor><name>2001:798:111:1::4a</name><description>KIFU AP2 peering LHCONE V6</description><out-delay>10</out-delay><import>ps-BOGONS-V6</import><import>ps-PRIVATE-AS-BLOCK</import><import>ps-from-lhcone-nren</import><family><inet6><any><prefix-limit><maximum>100</maximum><teardown><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></any></inet6></family><export>ps-BOGONS-V6</export><export>ps-PRIVATE-AS-BLOCK</export><export>ps-to-KIFU-LHCONE-TE</export><export>ps-to-lhcone-nren-v6</export><peer-as>1955</peer-as></neighbor><neighbor><name>2001:798:111:1::a</name><description>ARNES LHCONE IPv6 VPN</description><out-delay>10</out-delay><import>ps-BOGONS-V6</import><import>ps-PRIVATE-AS-BLOCK</import><import>ps-from-lhcone-nren</import><family><inet6><any><prefix-limit><maximum>100</maximum><teardown><idle-timeout><timeout>30</timeout></idle-timeout></teardown></prefix-limit></any></inet6></family><export>ps-BOGONS-V6</export><export>ps-PRIVATE-AS-BLOCK</export><export>ps-to-ARNES-LHCONE-TE</export><export>ps-to-lhcone-nren-v6</export><peer-as>2107</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor></group><log-updown/></bgp></protocols><description>L3 BGP/MPLS VPN for LHCONE</description><instance-type>vrf</instance-type><interface><name>ae10.111</name></interface><interface><name>ae18.111</name></interface><route-distinguisher><rd-type>62.40.96.8:111</rd-type></route-distinguisher><vrf-import>ps-into-lhcone-vrf</vrf-import><vrf-export>ps-from-lhcone-vrf</vrf-export><vrf-target><community>target:20965:111</community></vrf-target></instance><instance><name>mdvpn</name><routing-options><static><route><name>62.40.102.0/25</name><discard/></route></static><autonomous-system><as-number>20965</as-number></autonomous-system></routing-options><protocols><bgp><group><name>BGPLU</name><type>external</type><neighbor><name>62.40.102.19</name><description>MD VPN CoC - AMRES</description><out-delay>10</out-delay><family><inet><labeled-unicast><prefix-limit><maximum>1000</maximum><teardown><limit-threshold>90</limit-threshold><idle-timeout><timeout>15</timeout></idle-timeout></teardown></prefix-limit></labeled-unicast></inet></family><authentication-key>/* SECRET-DATA */</authentication-key><peer-as>13092</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor></group><log-updown/></bgp></protocols><instance-type>vrf</instance-type><interface><name>ae11.37</name></interface><interface><name>ae16.10</name></interface><route-distinguisher><rd-type>62.40.96.8:65100</rd-type></route-distinguisher><vrf-import>mdvpn-import</vrf-import><vrf-export>mdvpn-export</vrf-export><vrf-table-label>
+ </vrf-table-label></instance><instance><name>mgmt-l3vpn</name><routing-options><rib><name>mgmt-l3vpn.inet.0</name><martians><address>128.0.0.0/16</address><orlonger/><allow/></martians><martians><address>191.255.0.0/16</address><orlonger/><allow/></martians><martians><address>223.255.255.0/24</address><orlonger/><allow/></martians></rib><static><route><name>10.0.6.1/32</name><next-hop>10.0.6.1</next-hop></route></static><autonomous-system><as-number>20965</as-number></autonomous-system></routing-options><description>L3 BGP/MPLS VPN for management</description><instance-type>vrf</instance-type><interface><name>irb.999</name></interface><route-distinguisher><rd-type>62.40.96.8:999</rd-type></route-distinguisher><vrf-import>ps-into-mgmt-vrf</vrf-import><vrf-export>ps-from-mgmt-vrf</vrf-export><vrf-target><community>target:20965:999</community></vrf-target><vrf-table-label>
+ </vrf-table-label></instance></routing-instances><routing-options><rib><name>inet.2</name><static inactive="inactive"><route><name>62.40.96.0/19</name><reject/></route></static></rib><rib><name>inet6.0</name><static><route><name>0100::/64</name><discard/><no-readvertise/></route><route><name>::/0</name><next-hop>2001:798:1::18a</next-hop></route></static></rib><rib><name>inet6.2</name><static><route><name>2001:798::/32</name><reject/></route><route><name>::/0</name><discard/></route></static></rib><rib><name>inetflow.0</name><maximum-prefixes><limit>100</limit><threshold>90</threshold></maximum-prefixes></rib><rib><name>inet6flow.0</name><maximum-prefixes><limit>100</limit><threshold>90</threshold></maximum-prefixes></rib><static><route><name>172.16.5.252/30</name><next-hop>172.16.40.254</next-hop><retain/><no-readvertise/></route><route><name>0.0.0.0/0</name><next-hop>83.97.89.197</next-hop></route><route><name>192.0.2.101/32</name><discard/><no-readvertise/></route></static><interface-routes><rib-group><inet>unicast-multicast</inet><inet6>unicast-multicastv6</inet6></rib-group></interface-routes><router-id>62.40.96.8</router-id><autonomous-system><as-number>20965</as-number></autonomous-system><aggregate><route><name>62.40.97.196/31</name><passive/></route></aggregate><rib-groups><name>multicast</name><export-rib>inet.2</export-rib><import-rib>inet.2</import-rib></rib-groups><rib-groups><name>unicast-multicast</name><export-rib>inet.0</export-rib><import-rib>inet.0</import-rib><import-rib>inet.2</import-rib></rib-groups><rib-groups><name>multicastv6</name><import-rib>inet6.2</import-rib></rib-groups><rib-groups><name>unicast-multicastv6</name><export-rib>inet6.0</export-rib><import-rib>inet6.0</import-rib><import-rib>inet6.2</import-rib></rib-groups><nonstop-routing/><forwarding-table><export>dest-class-usage</export><export>source-class-usage</export><chained-composite-next-hop><ingress><l2vpn/><l2ckt/><l3vpn>
+ </l3vpn></ingress></chained-composite-next-hop></forwarding-table><multicast><forwarding-cache><threshold><suppress>20000</suppress><reuse>18000</reuse></threshold></forwarding-cache></multicast><validation><notification-rib>IAS.inet.0</notification-rib><notification-rib>IAS.inet6.0</notification-rib><notification-rib>inet.0</notification-rib><notification-rib>inet6.0</notification-rib><group><name>PROD-RPKI-VALIDATORS</name><session><name>83.97.94.48</name><port>3323</port><local-address>62.40.96.8</local-address></session><session><name>83.97.94.49</name><port>3323</port><local-address>62.40.96.8</local-address></session></group></validation></routing-options><protocols><neighbor-discovery><onlink-subnet-only/></neighbor-discovery><bgp><path-selection><external-router-id/></path-selection><group><name>iGEANT</name><type>internal</type><local-address>62.40.96.8</local-address><import>rtbh-ibgp</import><import>ps-RPKI-iBGP</import><family><inet><unicast>
+ </unicast><flow><no-validate>accept-all-flowspec</no-validate><secondary-independent-resolution/></flow><any>
+ </any></inet><inet-vpn><unicast>
+ </unicast><flow>
+ </flow></inet-vpn><inet6-vpn><unicast>
+ </unicast></inet6-vpn><l2vpn><signaling>
+ </signaling></l2vpn></family><authentication-key>/* SECRET-DATA */</authentication-key><export>NEXT_HOP_SELF</export><neighbor><name>62.40.96.17</name><description>mx2.lis.pt.geant.net</description></neighbor><neighbor><name>62.40.97.1</name><description>mx1.bud.hu.geant.net</description></neighbor><neighbor><name>62.40.97.5</name><description>mx1.lon.uk.geant.net</description></neighbor><neighbor><name>62.40.97.7</name><description>mx1.vie.at.geant.net</description></neighbor><neighbor><name>62.40.97.10</name><description>mx1.poz.pl.geant.net</description></neighbor><neighbor><name>62.40.97.11</name><description>mx1.ams.nl.geant.net</description></neighbor><neighbor><name>62.40.97.12</name><description>mx1.fra.de.geant.net</description></neighbor><neighbor><name>62.40.97.13</name><description>mx1.par.fr.geant.net</description></neighbor><neighbor><name>62.40.97.14</name><description>mx1.gen.ch.geant.net</description></neighbor><neighbor><name>62.40.97.16</name><description>mx1.mad.es.geant.net</description></neighbor><neighbor><name>62.40.96.11</name><description>mx2.ath.gr.geant.net</description></neighbor><neighbor><name>62.40.96.19</name><description>mx1.buc.ro.geant.net</description></neighbor><neighbor><name>62.40.96.21</name><description>mx1.sof.bg.geant.net</description></neighbor><neighbor><name>62.40.96.26</name><description>mx1.ham.de.geant.net</description></neighbor><neighbor><name>62.40.96.15</name><description>mx1.lon2.uk.geant.net</description></neighbor><neighbor><name>62.40.96.3</name><description>mx1.dub.ie.geant.net</description></neighbor><neighbor><name>62.40.96.25</name><description>mx1.dub2.ie.geant.net</description></neighbor><neighbor><name>62.40.96.39</name><description>mx1.ath2.gr.geant.net</description></neighbor><neighbor><name>62.40.96.52</name><description>rt1.kau.lt.geant.net</description></neighbor><neighbor><name>62.40.96.53</name><description>rt2.kau.lt.geant.net</description></neighbor><neighbor><name>62.40.96.58</name><description>rt1.rig.lv.geant.net</description></neighbor><neighbor><name>62.40.96.59</name><description>rt2.rig.lv.geant.net</description></neighbor><neighbor><name>62.40.96.62</name><description>rt2.ams.nl.geant.net</description></neighbor><neighbor><name>62.40.96.36</name><description>rt1.por.pt.geant.net</description></neighbor><neighbor><name>62.40.96.42</name><description>rt1.bil.es.geant.net</description></neighbor><neighbor><name>62.40.96.1</name><description>rt1.kie.ua.geant.net</description></neighbor><neighbor><name>62.40.96.68</name><description>rt2.kie.ua.geant.net</description></neighbor><neighbor><name>62.40.96.2</name><description>rt1.chi.md.geant.net</description></neighbor><neighbor><name>62.40.96.4</name><description>rt2.chi.md.geant.net</description></neighbor><neighbor><name>62.40.96.54</name><description>rt1.bra.sk.geant.net</description></neighbor><neighbor><name>62.40.96.5</name><description>rt1.mar.fr.geant.net</description></neighbor><neighbor><name>62.40.96.6</name><description>rt1.mil2.it.geant.net</description></neighbor><neighbor><name>62.40.96.47</name><description>rt1.pra.cz.geant.net</description></neighbor><neighbor><name>62.40.96.22</name><description>rt1.fra.de.geant.net</description></neighbor><neighbor><name>62.40.96.33</name><description>rt1.bru.be.geant.net</description></neighbor><neighbor><name>62.40.96.48</name><description>rt2.bru.be.geant.net</description></neighbor><neighbor><name>62.40.96.50</name><description>rt1.ham.de.geant.net</description></neighbor><neighbor><name>62.40.96.20</name><description>rt1.tar.ee.geant.net</description></neighbor><neighbor><name>62.40.96.49</name><description>rt2.tar.ee.geant.net</description></neighbor><neighbor><name>62.40.96.56</name><description>rt1.sof.bg.geant.net</description></neighbor><neighbor><name>62.40.96.55</name><description>rt2.bra.sk.geant.net</description></neighbor><neighbor><name>62.40.96.70</name><description>rt1.lju01.si.geant.net</description></neighbor><neighbor><name>62.40.96.57</name><description>rt1.cor.ie.geant.net</description></neighbor><neighbor><name>62.40.96.7</name><description>rt1.buc.ro.geant.net</description></neighbor><neighbor><name>62.40.96.69</name><description>rt2.cor.ie.geant.net</description></neighbor><neighbor><name>62.40.96.71</name><description>rt1.ams.nl.geant.net</description></neighbor></group><group><name>eGEANT</name><type>external</type><description>-- EBGP Peering --</description><family><inet><unicast>
+ </unicast><multicast>
+ </multicast><any>
+ </any></inet></family><neighbor><name>62.40.124.67</name><description>-- Peering with KREN --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-RPKI-RE-NREN</import><import>ps-from-KREN</import><export>ps-BOGONS</export><export>ps-to-KREN</export><peer-as>211080</peer-as></neighbor><neighbor><name>62.40.125.63</name><description>-- Peering with AMRES --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-RPKI-RE-NREN</import><import>ps-from-AMRES-nren</import><export>ps-BOGONS</export><export>ps-to-AMRES-nren</export><peer-as>13092</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>62.40.124.18</name><description>-- Peering with KIFU backup--</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-RPKI-RE-NREN</import><import>ps-from-KIFU2-nren</import><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS</export><export>ps-to-KIFU2-nren</export><remove-private>
+ </remove-private><peer-as>1955</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>62.40.124.10</name><description>-- Peering with CARnet --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-RPKI-RE-NREN</import><import>ps-from-CARnet1-nren</import><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS-export</export><export>ps-to-CARnet</export><peer-as>2108</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>62.40.124.6</name><description>-- Peering with ARNES --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-RPKI-RE-NREN</import><import>ps-from-ARNES-nren</import><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS</export><export>ps-to-ARNES-nren</export><peer-as>2107</peer-as><bfd-liveness-detection><minimum-interval>100</minimum-interval><multiplier>10</multiplier></bfd-liveness-detection></neighbor><neighbor><name>62.40.125.254</name><description>-- Peering with MARNet AP2</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS</import><import>ps-RPKI-RE-NREN</import><import>ps-from-MARNet-nren</import><export>ps-BOGONS</export><export>ps-to-MARNet-nren</export><peer-as>44224</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor></group><group><name>iGEANT6</name><type>internal</type><local-address>2001:798:2d:20ff::2</local-address><import>rtbh-ibgp</import><import>ps-RPKI-iBGP</import><family><inet6><unicast>
+ </unicast><flow><no-validate>accept-all-flowspec</no-validate></flow><any>
+ </any></inet6><inet6-vpn><flow>
+ </flow></inet6-vpn></family><export>NEXT_HOP_SELF</export><neighbor><name>2001:798:19:20ff::1</name><description>mx2.ath.gr.geant.net</description></neighbor><neighbor><name>2001:798:2f:20ff::2</name><description>mx2.lis.pt.geant.net</description></neighbor><neighbor><name>2001:798:10:20ff::1</name><description>mx1.vie.at.geant.net</description></neighbor><neighbor><name>2001:798:14:20ff::1</name><description>mx1.fra.de.geant.net</description></neighbor><neighbor><name>2001:798:12:20ff::1</name><description>mx1.gen.ch.geant.net</description></neighbor><neighbor><name>2001:798:17:20ff::1</name><description>mx1.mad.es.geant.net</description></neighbor><neighbor><name>2001:798:23:20ff::1</name><description>mx1.poz.pl.geant.net</description></neighbor><neighbor><name>2001:798:1b:20ff::1</name><description>mx1.bud.hu.geant.net</description></neighbor><neighbor><name>2001:798:18:20ff::3</name><description>mx1.par.fr.geant.net</description></neighbor><neighbor><name>2001:798:22:20ff::3</name><description>mx1.ams.nl.geant.net</description></neighbor><neighbor><name>2001:798:28:20ff::1</name><description>mx1.lon.uk.geant.net</description></neighbor><neighbor><name>2001:798:2b:10ff::3</name><description>mx1.buc.ro.geant.net</description></neighbor><neighbor><name>2001:798:2c:10ff::2</name><description>mx1.sof.bg.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::3</name><description>mx1.ham.de.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::5</name><description>mx1.lon2.uk.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::1</name><description>mx1.dub.ie.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::2</name><description>mx1.dub2.ie.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::a</name><description>mx1.ath2.gr.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::18</name><description>rt1.kau.lt.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::19</name><description>rt2.kau.lt.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::1e</name><description>rt1.rig.lv.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::1f</name><description>rt2.rig.lv.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::c</name><description>rt2.ams.nl.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::22</name><description>rt1.por.pt.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::d</name><description>rt1.bil.es.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::23</name><description>rt1.kie.ua.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::24</name><description>rt2.kie.ua.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::25</name><description>rt1.chi.md.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::26</name><description>rt2.chi.md.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::1a</name><description>rt1.bra.sk.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::27</name><description>rt1.mar.fr.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::e</name><description>rt1.mil2.it.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::15</name><description>rt1.pra.cz.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::28</name><description>rt1.fra.de.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::29</name><description>rt1.bru.be.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::2a</name><description>rt2.bru.be.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::2b</name><description>rt1.ham.de.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::1c</name><description>rt1.tar.ee.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::1d</name><description>rt2.tar.ee.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::2c</name><description>rt1.sof.bg.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::1b</name><description>rt2.bra.sk.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::2f</name><description>rt1.lju01.si.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::2d</name><description>rt1.cor.ie.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::17</name><description>rt1.buc.ro.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::2e</name><description>rt2.cor.ie.geant.net</description></neighbor><neighbor><name>2001:798:aa:1::30</name><description>rt1.ams.nl.geant.net</description></neighbor></group><group><name>eGEANT6</name><type>external</type><family><inet6><unicast>
+ </unicast><multicast>
+ </multicast><any>
+ </any></inet6></family><neighbor><name>2001:798:99:1::11e</name><description>-- IPv6 Peering with AMRES --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS-V6</import><import>ps-RPKI-RE-NREN</import><import>ps-from-AMRES-V6-nren</import><export>ps-BOGONS-V6</export><export>ps-to-AMRES-V6-nren</export><peer-as>13092</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>2001:0798:0010:10aa::16</name><description>-- IPv6 Peering with KIFU Backup --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS-V6</import><import>ps-RPKI-RE-NREN</import><import>ps-from-KIFU2-V6-nren</import><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS-V6</export><export>ps-to-KIFU2-V6-nren</export><peer-as>1955</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>2001:0798:0010:10aa::a</name><description>-- IPv6 Peering with CARnet --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS-V6</import><import>ps-RPKI-RE-NREN</import><import>ps-from-CARnet1-v6-nren</import><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS-V6</export><export>ps-to-CARnet-v6</export><peer-as>2108</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor><neighbor><name>2001:0798:0010:10aa::6</name><description>-- IPv6 Peering with ARNES --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS-V6</import><import>ps-RPKI-RE-NREN</import><import>ps-from-ARNES-V6-nren</import><authentication-key>/* SECRET-DATA */</authentication-key><export>ps-BOGONS-V6</export><export>ps-to-ARNES-V6-nren</export><peer-as>2107</peer-as><bfd-liveness-detection><minimum-interval>100</minimum-interval><multiplier>10</multiplier></bfd-liveness-detection></neighbor><neighbor><name>2001:0798:2c:10aa::16</name><description>-- IPv6 Peering with MARNet AP2 --</description><accept-remote-nexthop/><out-delay>10</out-delay><import>ps-BOGONS-V6</import><import>ps-RPKI-RE-NREN</import><import>ps-from-MARnet-v6-nren</import><export>ps-BOGONS-V6</export><export>ps-to-MARnet-V6-nren</export><peer-as>44224</peer-as><bfd-liveness-detection><minimum-interval>3000</minimum-interval><multiplier>3</multiplier></bfd-liveness-detection></neighbor></group><group><name>TOOLS</name><type>internal</type><description>PEERING WITH TOOLS</description><local-address>62.40.96.8</local-address><neighbor><name>83.97.93.247</name><description>EARL Netflow/ISIS/BGP feed VM</description><hold-time>180</hold-time><passive/><import>ps-deny-all</import><family><inet><unicast>
+ </unicast><multicast>
+ </multicast></inet><inet-vpn><unicast>
+ </unicast></inet-vpn></family><local-as><as-number>20965</as-number></local-as></neighbor><neighbor><name>193.177.129.61</name><description>Kentik EU</description><hold-time>720</hold-time><import>ps-deny-all</import><family><inet><unicast>
+ </unicast></inet><inet-vpn><unicast>
+ </unicast></inet-vpn></family><authentication-key>/* SECRET-DATA */</authentication-key><cluster>62.40.96.8</cluster><local-as><as-number>20965</as-number></local-as></neighbor></group><group><name>DUMMY_EBGP</name><type>external</type><description>Dummy group for stability; see XTAC TT#2016122634000229</description><local-address>62.40.96.8</local-address><family><inet><unicast>
+ </unicast><multicast>
+ </multicast><flow>
+ </flow></inet><inet-vpn><unicast>
+ </unicast><flow>
+ </flow></inet-vpn><inet6><unicast>
+ </unicast><multicast>
+ </multicast></inet6><inet6-vpn><unicast>
+ </unicast></inet6-vpn><l2vpn><signaling>
+ </signaling></l2vpn></family><authentication-key>/* SECRET-DATA */</authentication-key><cluster>62.40.96.8</cluster><peer-as>56902</peer-as><local-as><as-number>20965</as-number></local-as><neighbor><name>192.168.254.254</name><passive/><import>ps-deny-all</import><export>nhs-ibgp</export></neighbor></group><group><name>DUMMY_EBGP6</name><type>external</type><description>Dummy group for stability; see XTAC TT#2016122634000229</description><family><inet6><unicast>
+ </unicast><multicast>
+ </multicast></inet6></family><authentication-key>/* SECRET-DATA */</authentication-key><cluster>62.40.96.8</cluster><peer-as>56902</peer-as><local-as><as-number>20965</as-number></local-as><neighbor><name>100::1</name><passive/><import>ps-deny-all</import><export>nhs-ibgp</export></neighbor></group><group><name>TOOLSv6</name><type>internal</type><description>PEERING WITH TOOLS</description><local-address>2001:798:2d:20ff::2</local-address><neighbor><name>2001:798:3::1de</name><description>EARL Netflow/ISIS/BGP feed VM</description><hold-time>180</hold-time><import>ps-deny-all</import><family><inet6><unicast>
+ </unicast><multicast>
+ </multicast></inet6></family><local-as><as-number>20965</as-number></local-as></neighbor><neighbor><name>2a0c:dec0:f100:1::179</name><description>Kentik EU</description><hold-time>720</hold-time><import>ps-deny-all</import><family><inet6><unicast>
+ </unicast></inet6><inet6-vpn><unicast>
+ </unicast></inet6-vpn></family><authentication-key>/* SECRET-DATA */</authentication-key><cluster>62.40.96.8</cluster><local-as><as-number>20965</as-number></local-as></neighbor></group><precision-timers/><log-updown/><undocumented><drop-path-attributes>128</drop-path-attributes></undocumented><bgp-error-tolerance>
+ </bgp-error-tolerance></bgp><igmp><interface><name>all</name><disable/></interface><interface><name>dsc.0</name><version>3</version><static><group><name>232.223.222.1</name><source><name>212.201.139.66</name></source><source><name>193.17.9.3</name></source></group></static></interface></igmp><isis><interface><name>ae0.0</name><level><name>2</name><post-convergence-lfa><node-protection>
+ </node-protection></post-convergence-lfa><metric>500</metric></level><point-to-point/></interface><interface><name>ae5.0</name><level><name>2</name><post-convergence-lfa><node-protection>
+ </node-protection></post-convergence-lfa><metric>100</metric></level><point-to-point/></interface><interface><name>ae6.0</name><level><name>2</name><post-convergence-lfa><node-protection>
+ </node-protection></post-convergence-lfa><metric>9000</metric></level><point-to-point/></interface><interface><name>all</name><passive>
+ </passive></interface><interface><name>fxp0.0</name><disable/></interface><source-packet-routing><srgb><start-label>10000</start-label><index-range>10000</index-range></srgb><node-segment><ipv4-index>4608</ipv4-index><ipv6-index>6608</ipv6-index></node-segment></source-packet-routing><level><name>1</name><disable/></level><level><name>2</name><wide-metrics-only/></level><backup-spf-options><use-post-convergence-lfa>
+ </use-post-convergence-lfa><use-source-packet-routing>
+ </use-source-packet-routing></backup-spf-options><export>RE__ISIS__RE__EXPORT_TWAMP_AGGREGATE_INTERFACE</export><rib-group><inet>unicast-multicast</inet><inet6>unicast-multicastv6</inet6></rib-group><overload><timeout>300</timeout></overload></isis><l2circuit><local-switching><interface><name>xe-2/1/4.0</name><end-interface><interface>ae10.340</interface></end-interface><ignore-mtu-mismatch/></interface></local-switching></l2circuit><ldp><preference>16</preference><track-igp-metric/><deaggregate/><interface><name>ae0.0</name></interface><interface><name>lo0.0</name></interface></ldp><mld><interface><name>all</name><disable/></interface></mld><mpls><explicit-null/><icmp-tunneling/><ipv6-tunneling/><interface><name>all</name></interface></mpls><pim><rib-group><inet>multicast</inet><inet6>multicastv6</inet6></rib-group><rp><bootstrap><family><inet><priority>0</priority><import>no-bsr</import><export>no-bsr</export></inet><inet6><priority>0</priority><import>no-bsr</import><export>no-bsr</export></inet6></family></bootstrap><embedded-rp><group-ranges><name>ff7e::/16</name></group-ranges></embedded-rp></rp><interface><name>all</name><mode>sparse</mode></interface><interface><name>fxp0.0</name><disable/></interface><interface><name>ae17.0</name><disable/></interface></pim><rsvp><interface><name>all</name></interface></rsvp><lldp><port-id-subtype>interface-name</port-id-subtype><interface><name>all</name><disable/></interface><interface><name>fxp0</name></interface><interface><name>et-5/1/5</name></interface><interface><name>et-5/1/2</name></interface><interface><name>et-3/0/2</name></interface><interface><name>et-3/0/5</name></interface><interface><name>et-4/0/5</name></interface><interface><name>xe-2/0/0</name></interface><interface><name>xe-2/1/1</name></interface><interface><name>et-3/1/2</name></interface><interface><name>et-3/1/5</name></interface><interface><name>et-4/1/2</name></interface><interface><name>et-5/0/2</name></interface><interface><name>et-5/0/5</name></interface><interface><name>ge-0/2/0</name></interface><interface><name>ge-0/2/3</name></interface><interface><name>ge-0/3/0</name></interface><interface><name>xe-2/1/2</name></interface><interface><name>xe-2/1/3</name></interface><interface><name>et-4/0/2</name></interface></lldp></protocols><bridge-domains><domain><name>mgmt-bridge</name><domain-type>bridge</domain-type><vlan-id>999</vlan-id><routing-interface>irb.999</routing-interface></domain></bridge-domains></configuration>
\ No newline at end of file
diff --git a/test/test_juniper_data_global.py b/test/test_juniper_data_global.py
index 12a1a3762c20a860c517a8ac58b8267caf6da0ae..f5f3a6a5ea2ddff530a6feddc9172dc56f1ca924 100644
--- a/test/test_juniper_data_global.py
+++ b/test/test_juniper_data_global.py
@@ -1,7 +1,9 @@
import ast
import netifaces
import ipaddress
+import os
+from lxml import etree
import pytest
from inventory_provider import juniper
@@ -89,3 +91,32 @@ def test_asn_to_int_functionality():
with pytest.raises(ValueError):
asn_to_int('66512.2')
asn_to_int('Test')
+
+
+def test_DBOARD3_833():
+ """Test that the bundle inactive attribute is handled correctly.
+
+ The test data contains an interface: et-4/0/2 with the bundle
+ configuration (for ae6) marked as 'inactive'. et-4/0/2 also
+ has a logical interface configured.
+
+ This test confirms that neither et-4/0/2 nor et-4/0/2.0 are
+ part of a bundle.
+ """
+
+ test_filename = os.path.join(
+ os.path.dirname(__file__),
+ 'data',
+ 'DBOARD3-833.xml')
+ with open(test_filename, 'r') as f:
+ netconf_config = etree.XML(f.read())
+
+ interfaces = {
+ i['name']: i for i in juniper.list_interfaces(netconf_config)}
+
+ assert not interfaces['et-4/0/2']['bundle']
+ assert not interfaces['et-4/0/2.0']['bundle']
+
+ # additional sanity check: parent bundle should be empty or exactly one
+ for ifc in interfaces.values():
+ assert len(ifc['bundle']) in (0, 1)