vyos@vrouter01b# run show configuration commands set interfaces ethernet eth0 address '10.10.200.41/24' set interfaces ethernet eth0 hw-id '00:50:56:a0:e6:21' set interfaces ethernet eth1 address '172.16.255.2/24' set interfaces ethernet eth2 address '172.16.253.1/24' set interfaces ethernet eth2 hw-id '00:50:56:a0:2c:32' set interfaces loopback lo address '200.200.200.200/32' set interfaces vti vti10 address '172.16.250.2/24' set policy route-map 1 rule 1 action 'permit' set policy route-map 1 rule 1 match interface 'vti10' set policy route-map 1 rule 1 match metric '2' set protocols bgp address-family ipv4-unicast network 10.110.11.0/24 set protocols bgp address-family ipv4-unicast network 10.110.12.0/24 set protocols bgp address-family ipv4-unicast redistribute connected set protocols bgp address-family ipv4-unicast redistribute ospf metric '1' set protocols bgp address-family ipv4-unicast redistribute ospf route-map '2' set protocols bgp local-as '65000' set protocols bgp neighbor 172.16.250.1 ebgp-multihop '2' set protocols bgp neighbor 172.16.250.1 remote-as '65000' set protocols bgp neighbor 172.16.250.1 update-source '172.16.250.2' set protocols bgp parameters router-id '172.16.253.1' set protocols ospf area 0 area-type normal set protocols ospf default-information originate always set protocols ospf default-information originate metric '10' set protocols ospf default-information originate metric-type '2' set protocols ospf default-information originate route-map '1' set protocols ospf interface eth2 area '0' set protocols ospf log-adjacency-changes set protocols ospf neighbor 172.16.253.2 set protocols ospf parameters router-id '172.16.253.1' set protocols ospf redistribute bgp set protocols ospf redistribute connected set protocols static route 0.0.0.0/0 next-hop 10.10.200.1 interface 'eth0' set protocols static route 172.16.254.0/24 next-hop 172.16.255.1 set service ssh set system config-management commit-revisions '100' set system console device ttyS0 speed '115200' set system host-name 'vrouter01b' set system login user vyos authentication encrypted-password '$6$UprurxKCPH6V6nW4$TWW65umCzpY6mNH1RozNdTgfQddklrpblDyrl/su6b1bSS6bV/.sCEmX59CCrVyCziEc/eHinSr7w9hRKwXDh1' set system login user vyos authentication plaintext-password '' set system ntp server time1.vyos.net set system ntp server time2.vyos.net set system ntp server time3.vyos.net set system syslog global facility all level 'info' set system syslog global facility protocols level 'debug' set vpn ipsec esp-group ESP_DEFAULT compression 'disable' set vpn ipsec esp-group ESP_DEFAULT lifetime '3600' set vpn ipsec esp-group ESP_DEFAULT mode 'tunnel' set vpn ipsec esp-group ESP_DEFAULT pfs 'dh-group19' set vpn ipsec esp-group ESP_DEFAULT proposal 10 encryption 'aes256gcm128' set vpn ipsec esp-group ESP_DEFAULT proposal 10 hash 'sha256' set vpn ipsec ike-group IKEv2_DEFAULT ikev2-reauth 'no' set vpn ipsec ike-group IKEv2_DEFAULT key-exchange 'ikev2' set vpn ipsec ike-group IKEv2_DEFAULT lifetime '10800' set vpn ipsec ike-group IKEv2_DEFAULT mobike 'disable' set vpn ipsec ike-group IKEv2_DEFAULT proposal 10 dh-group '19' set vpn ipsec ike-group IKEv2_DEFAULT proposal 10 encryption 'aes256gcm128' set vpn ipsec ike-group IKEv2_DEFAULT proposal 10 hash 'sha256' set vpn ipsec interface 'eth1' set vpn ipsec site-to-site peer 172.16.254.2 authentication id '172.16.255.2' set vpn ipsec site-to-site peer 172.16.254.2 authentication mode 'pre-shared-secret' set vpn ipsec site-to-site peer 172.16.254.2 authentication pre-shared-secret 'secretkey' set vpn ipsec site-to-site peer 172.16.254.2 authentication remote-id '172.16.254.2' set vpn ipsec site-to-site peer 172.16.254.2 connection-type 'respond' set vpn ipsec site-to-site peer 172.16.254.2 ike-group 'IKEv2_DEFAULT' set vpn ipsec site-to-site peer 172.16.254.2 ikev2-reauth 'inherit' set vpn ipsec site-to-site peer 172.16.254.2 local-address '172.16.255.2' set vpn ipsec site-to-site peer 172.16.254.2 vti bind 'vti10' set vpn ipsec site-to-site peer 172.16.254.2 vti esp-group 'ESP_DEFAULT'