configure {
    card 1 {
        card-type iom-1
        mda 1 {
            mda-type me12-100gb-qsfp28
        }
    }
    fwd-path-ext {
        fpe 1 {
            path {
                pxc 1
            }
            application {
                srv6 {
                    type origination
                }
            }
        }
        fpe 10 {
            path {
                pxc 10
            }
            application {
                srv6 {
                    type termination
                }
            }
        }
    }
    log {
        filter "1001" {
            named-entry "10" {
                description "Collect only events of major severity or higher"
                action forward
                match {
                    severity {
                        gte major
                    }
                }
            }
        }
        log-id "99" {
            description "Default System Log"
            source {
                main true
            }
            destination {
                memory {
                    max-entries 500
                }
            }
        }
        log-id "100" {
            description "Default Serious Errors Log"
            filter "1001"
            source {
                main true
            }
            destination {
                memory {
                    max-entries 500
                }
            }
        }
    }
    port pxc-1.a {
        admin-state enable
    }
    port pxc-1.b {
        admin-state enable
    }
    port pxc-10.a {
        admin-state enable
    }
    port pxc-10.b {
        admin-state enable
    }
    port 1/1/c1 {
        admin-state enable
        connector {
            breakout c1-100g
        }
    }
    port 1/1/c1/1 {
        admin-state enable
        ethernet {
            mode hybrid
            dot1x {
                tunneling true
            }
        }
    }
    port 1/1/c2 {
        admin-state enable
        connector {
            breakout c1-100g
        }
    }
    port 1/1/c2/1 {
        admin-state enable
    }
    port 1/1/c3 {
        admin-state enable
        connector {
            breakout c1-100g
        }
    }
    port 1/1/c3/1 {
        admin-state enable
    }
    port 1/1/c4 {
        admin-state enable
        connector {
            breakout c1-100g
        }
    }
    port 1/1/c4/1 {
        admin-state enable
    }
    port 1/1/c10 {
        admin-state enable
        connector {
            breakout c1-100g
        }
    }
    port 1/1/c10/1 {
        admin-state enable
        ethernet {
            mode hybrid
            dot1x {
                tunneling true
            }
        }
    }
    port-xc {
        pxc 1 {
            admin-state enable
            port-id 1/1/c1/1
        }
        pxc 10 {
            admin-state enable
            port-id 1/1/c10/1
        }
    }
    router "Base" {
        router-id 5.5.5.5
        interface "eth2" {
            admin-state enable
            port 1/1/c2/1
            ipv4 {
                primary {
                    address 172.16.0.22
                    prefix-length 30
                }
            }
            ipv6 {
                link-local-address {
                    address fe80::5:4
                }
                address 2001:db8:acad:5::2 {
                    prefix-length 64
                }
            }
        }
        interface "eth3" {
            admin-state enable
            port 1/1/c3/1
            ipv4 {
                primary {
                    address 172.16.0.29
                    prefix-length 30
                }
            }
            ipv6 {
                link-local-address {
                    address fe80::5:6
                }
                address 2001:db8:acad:7::1 {
                    prefix-length 64
                }
            }
        }
        interface "eth4" {
            admin-state enable
            port 1/1/c4/1
            ipv4 {
                primary {
                    address 172.16.0.18
                    prefix-length 30
                }
            }
            ipv6 {
                link-local-address {
                    address fe80::5:3
                }
                address 2001:db8:acad:4::2 {
                    prefix-length 64
                }
            }
        }
        interface "lo0" {
            admin-state enable
            loopback
            ipv4 {
                primary {
                    address 172.16.0.105
                    prefix-length 32
                }
            }
            ipv6 {
                address 2001:db8:acad:f::5 {
                    prefix-length 128
                }
            }
        }
        interface "system" {
            admin-state enable
            ipv4 {
                primary {
                    address 5.5.5.5
                    prefix-length 32
                }
            }
        }
        isis 0 {
            admin-state enable
            authentication-key "GeAfkbOgZwqxyz9rrMKGUPNzg9uqEdK8QQSnO1d7tQ== hash2"
            authentication-type message-digest
            advertise-passive-only true
            advertise-router-capability area
            ipv6-routing native
            level-capability 2
            router-id 5.5.5.5
            traffic-engineering true
            area-address [49.00]
            loopfree-alternate {
                remote-lfa {
                }
                ti-lfa {
                }
            }
            traffic-engineering-options {
                ipv6 true
                application-link-attributes {
                }
            }
            segment-routing-v6 {
                admin-state enable
                locator "r5_loc" {
                    level-capability 2
                    level 1 {
                    }
                    level 2 {
                        metric 10
                    }
                }
            }
            interface "eth2" {
                admin-state enable
                interface-type point-to-point
                ipv6-unicast true
                level-capability 2
            }
            interface "eth3" {
                admin-state enable
                interface-type point-to-point
                ipv6-unicast true
                level-capability 2
            }
            interface "eth4" {
                admin-state enable
                interface-type point-to-point
                ipv6-unicast true
                level-capability 2
            }
            interface "lo0" {
                admin-state enable
                ipv6-unicast true
                level-capability 2
            }
            interface "system" {
                admin-state enable
                passive true
                level-capability 2
            }
            level 2 {
                wide-metrics-only true
            }
        }
        segment-routing {
            segment-routing-v6 {
                origination-fpe [1]
                source-address 2001:db8:acad:f::5
                locator "r5_loc" {
                    admin-state enable
                    block-length 48
                    function-length 20
                    termination-fpe [10]
                    prefix {
                        ip-prefix 2001:db8:aaaa:105::/64
                    }
                }
                base-routing-instance {
                    locator "r5_loc" {
                        function {
                            end 1 {
                                srh-mode usp
                            }
                            end-x-auto-allocate usp protection protected { }
                        }
                    }
                }
            }
        }
    }
    system {
        name "r5"
        grpc {
            admin-state enable
            allow-unsecure-connection
            gnmi {
                auto-config-save true
            }
            rib-api {
                admin-state enable
            }
        }
        management-interface {
            netconf {
                admin-state enable
                auto-config-save true
            }
            snmp {
                packet-size 9216
                streaming {
                    admin-state enable
                }
            }
        }
        bluetooth {
            advertising-timeout 30
        }
        login-control {
            ssh {
                inbound-max-sessions 30
            }
        }
        security {
            aaa {
                local-profiles {
                    profile "administrative" {
                        default-action permit-all
                        entry 10 {
                            match "configure system security"
                            action permit
                        }
                        entry 20 {
                            match "show system security"
                            action permit
                        }
                        entry 30 {
                            match "tools perform security"
                            action permit
                        }
                        entry 40 {
                            match "tools dump security"
                            action permit
                        }
                        entry 50 {
                            match "admin system security"
                            action permit
                        }
                        entry 100 {
                            match "configure li"
                            action deny
                        }
                        entry 110 {
                            match "show li"
                            action deny
                        }
                        entry 111 {
                            match "clear li"
                            action deny
                        }
                        entry 112 {
                            match "tools dump li"
                            action deny
                        }
                        netconf {
                            base-op-authorization {
                                action true
                                cancel-commit true
                                close-session true
                                commit true
                                copy-config true
                                create-subscription true
                                delete-config true
                                discard-changes true
                                edit-config true
                                get true
                                get-config true
                                get-data true
                                get-schema true
                                kill-session true
                                lock true
                                validate true
                            }
                        }
                    }
                    profile "default" {
                        entry 10 {
                            match "exec"
                            action permit
                        }
                        entry 20 {
                            match "exit"
                            action permit
                        }
                        entry 30 {
                            match "help"
                            action permit
                        }
                        entry 40 {
                            match "logout"
                            action permit
                        }
                        entry 50 {
                            match "password"
                            action permit
                        }
                        entry 60 {
                            match "show config"
                            action deny
                        }
                        entry 65 {
                            match "show li"
                            action deny
                        }
                        entry 66 {
                            match "clear li"
                            action deny
                        }
                        entry 67 {
                            match "tools dump li"
                            action deny
                        }
                        entry 68 {
                            match "state li"
                            action deny
                        }
                        entry 70 {
                            match "show"
                            action permit
                        }
                        entry 75 {
                            match "state"
                            action permit
                        }
                        entry 80 {
                            match "enable-admin"
                            action permit
                        }
                        entry 90 {
                            match "enable"
                            action permit
                        }
                        entry 100 {
                            match "configure li"
                            action deny
                        }
                    }
                }
            }
            ssh {
                server-cipher-list-v2 {
                    cipher 190 {
                        name aes256-ctr
                    }
                    cipher 192 {
                        name aes192-ctr
                    }
                    cipher 194 {
                        name aes128-ctr
                    }
                    cipher 200 {
                        name aes128-cbc
                    }
                    cipher 205 {
                        name 3des-cbc
                    }
                    cipher 225 {
                        name aes192-cbc
                    }
                    cipher 230 {
                        name aes256-cbc
                    }
                }
                client-cipher-list-v2 {
                    cipher 190 {
                        name aes256-ctr
                    }
                    cipher 192 {
                        name aes192-ctr
                    }
                    cipher 194 {
                        name aes128-ctr
                    }
                    cipher 200 {
                        name aes128-cbc
                    }
                    cipher 205 {
                        name 3des-cbc
                    }
                    cipher 225 {
                        name aes192-cbc
                    }
                    cipher 230 {
                        name aes256-cbc
                    }
                }
                server-mac-list-v2 {
                    mac 200 {
                        name hmac-sha2-512
                    }
                    mac 210 {
                        name hmac-sha2-256
                    }
                    mac 215 {
                        name hmac-sha1
                    }
                    mac 220 {
                        name hmac-sha1-96
                    }
                    mac 225 {
                        name hmac-md5
                    }
                    mac 240 {
                        name hmac-md5-96
                    }
                }
                client-mac-list-v2 {
                    mac 200 {
                        name hmac-sha2-512
                    }
                    mac 210 {
                        name hmac-sha2-256
                    }
                    mac 215 {
                        name hmac-sha1
                    }
                    mac 220 {
                        name hmac-sha1-96
                    }
                    mac 225 {
                        name hmac-md5
                    }
                    mac 240 {
                        name hmac-md5-96
                    }
                }
            }
            user-params {
                local-user {
                    user "admin" {
                        password "$2y$10$TQrZlpBDra86.qoexZUzQeBXDY1FcdDhGWdD9lLxMuFyPVSm0OGy6"
                        access {
                            console true
                            ftp true
                            snmp true
                            netconf true
                            grpc true
                        }
                        console {
                            member ["administrative"]
                        }
                    }
                }
            }
        }
    }
}

persistent-indices {
    description "Persistent indices are maintained by the system and must not be modified."
    vrtr-if-id {
        router-name "Base" interface-name "eth2" vrtr-id 1 if-index 3
        router-name "Base" interface-name "eth3" vrtr-id 1 if-index 4
        router-name "Base" interface-name "eth4" vrtr-id 1 if-index 5
        router-name "Base" interface-name "lo0" vrtr-id 1 if-index 2
    }
    chassis-mac {
        client pxc index 0 pool 1 offset 3
        client pxc index 1 pool 1 offset 4
        client pxc index 18 pool 1 offset 5
        client pxc index 19 pool 1 offset 6
    }
}