leaf-02.conf

system {
    host-name leaf-02;
    time-zone America/Los_Angeles;
    root-authentication {
        encrypted-password "$1$ZUlES4dp$OUwWo1g7cLoV/aMWpHUnC/";
    }
    name-server {
        192.168.5.68;
        192.168.60.131;
    }
    services {
        netconf {
            ssh;
        }
        ssh;
    }
    login {
        message "This is the property of Example Corp. Do not login without express permission. ";
    }
    syslog  {
        user * {
            any emergency;
        }
        file messages {
            any notice;
        }
        file cli-commands {
            interactive-commands any;
            explicit-priority;
        }
        time-format millisecond;
    }
    ntp {
        server 172.17.28.5;
    }
}
interfaces {
    em0 {
        unit 0 {
            family inet {
              address 0.0.0.0/<subnet mask>;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 100.0.0.22/32
            }
        }
    }
}
snmp {
    location "Site 1";
    contact "John Doe";
    community public {
        authorization read-only;
    }
}
routing-options {
  static {
    route 172.0.0.0/8 {
      next-hop 10.94.194.254;
      retain;
      no-readvertise;
    }
  }
}
protocols {
    lldp {
        interface all;
    }
}
/* This block of configuration has been generated by the role overlay-evpn-access for Ansible */


interfaces {
    xe-0/0/12 {
        description "to access";
        flexible-vlan-tagging;
        unit 10 {
            vlan-id 10;
        }
        flexible-vlan-tagging;
        unit 11 {
            vlan-id 11;
        }
    }
    xe-0/0/13 {
        description "to access";
        flexible-vlan-tagging;
        unit 10 {
            vlan-id 10;
        }
        flexible-vlan-tagging;
        unit 11 {
            vlan-id 11;
        }
        flexible-vlan-tagging;
        unit 12 {
            vlan-id 12;
        }
        flexible-vlan-tagging;
        unit 13 {
            vlan-id 13;
        }
    }
}

vlans {
    bd9105 {
        interface xe-0/0/12.10
    }
}
vlans {
    bd9106 {
        interface xe-0/0/12.11
    }
}
vlans {
    bd9105 {
        interface xe-0/0/13.10
    }
}
vlans {
    bd9106 {
        interface xe-0/0/13.11
    }
}
vlans {
    bd9107 {
        interface xe-0/0/13.12
    }
}
vlans {
    bd9108 {
        interface xe-0/0/13.13
    }
}
/* This block of configuration has been generated by the role overlay-evpn-qfx-l2 for Ansible */

protocols {
    bgp {
        group overlay-evpn {
            type internal;
            family evpn {
                signaling;
            }
            local-address 100.0.0.22;
            local-as 65200;
            multipath;
            neighbor 100.0.0.11;
            neighbor 100.0.0.12;
            import OVERLAY-IN;
            bfd-liveness-detection {
                minimum-interval 350;
                multiplier 3;
                session-mode automatic;
            }
        }
    }
    evpn {
        encapsulation vxlan;
        extended-vni-list [  9105  9106  9107  9108  9109  9100  9101  9102  9103  9104  ];
        multicast-mode ingress-replication;
        vni-options {
            vni 9105 {
                vrf-target export target:1:9105;
            }
            vni 9106 {
                vrf-target export target:1:9106;
            }
            vni 9107 {
                vrf-target export target:1:9107;
            }
            vni 9108 {
                vrf-target export target:1:9108;
            }
            vni 9109 {
                vrf-target export target:1:9109;
            }
            vni 9100 {
                vrf-target export target:1:9100;
            }
            vni 9101 {
                vrf-target export target:1:9101;
            }
            vni 9102 {
                vrf-target export target:1:9102;
            }
            vni 9103 {
                vrf-target export target:1:9103;
            }
            vni 9104 {
                vrf-target export target:1:9104;
            }
        }
    }
}

switch-options {
    vtep-source-interface lo0.0;
    vrf-import LEAF-IN;
    vrf-target target:9999:9999;
    route-distinguisher 100.0.0.22:1;
}

policy-options {
     policy-statement LEAF-IN {
        term import_leaf_esi {
            from community comm-leaf_esi;
            then accept;
          }
        term import_vni9105 {
            from community com9105;
            then accept;
        }
        term import_vni9106 {
            from community com9106;
            then accept;
        }
        term import_vni9107 {
            from community com9107;
            then accept;
        }
        term import_vni9108 {
            from community com9108;
            then accept;
        }
        term import_vni9109 {
            from community com9109;
            then accept;
        }
        term import_vni9100 {
            from community com9100;
            then accept;
        }
        term import_vni9101 {
            from community com9101;
            then accept;
        }
        term import_vni9102 {
            from community com9102;
            then accept;
        }
        term import_vni9103 {
            from community com9103;
            then accept;
        }
        term import_vni9104 {
            from community com9104;
            then accept;
        }
        term default {
            then reject;
        }
    }
    policy-statement OVERLAY-IN {
      term reject-remote-gw {
          from {
              family evpn;
              next-hop [ 100.0.0.13 100.0.0.14  ];
              nlri-route-type [ 1 2 ];
          }
          then reject;
      }
      term accept-all {
          then accept;
      }
    }

    community com9105 members target:1:9105;
    community com9106 members target:1:9106;
    community com9107 members target:1:9107;
    community com9108 members target:1:9108;
    community com9109 members target:1:9109;
    community com9100 members target:1:9100;
    community com9101 members target:1:9101;
    community com9102 members target:1:9102;
    community com9103 members target:1:9103;
    community com9104 members target:1:9104;
    community comm-leaf_esi members target:9999:9999;
}


vlans {
    bd9105 {
        vxlan {
            vni 9105;
            ingress-node-replication;
        }
    }
    bd9106 {
        vxlan {
            vni 9106;
            ingress-node-replication;
        }
    }
    bd9107 {
        vxlan {
            vni 9107;
            ingress-node-replication;
        }
    }
    bd9108 {
        vxlan {
            vni 9108;
            ingress-node-replication;
        }
    }
    bd9109 {
        vxlan {
            vni 9109;
            ingress-node-replication;
        }
    }
    bd9100 {
        vxlan {
            vni 9100;
            ingress-node-replication;
        }
    }
    bd9101 {
        vxlan {
            vni 9101;
            ingress-node-replication;
        }
    }
    bd9102 {
        vxlan {
            vni 9102;
            ingress-node-replication;
        }
    }
    bd9103 {
        vxlan {
            vni 9103;
            ingress-node-replication;
        }
    }
    bd9104 {
        vxlan {
            vni 9104;
            ingress-node-replication;
        }
    }
}
/* This block of configuration has been generated by the role underlay-ebgp for Ansible */

interfaces {
    et-0/0/1 {
        description " * to spine-02";
        mtu 9192;
        unit 0 {
            family inet {
                mtu 9000;
                address 172.16.0.5/31;
            }
        }
    }
    xe-0/0/0 {
        description " * to spine-01";
        mtu 9192;
        unit 0 {
            family inet {
                mtu 9000;
                address 172.16.0.3/31;
            }
        }
    }
}

protocols {
    bgp {
        log-updown;
        graceful-restart;
        group underlay-ipfabric {
            import bgp-ipclos-in;
            export  bgp-ipclos-out;
            type external;
            mtu-discovery;
            local-as 65032;
            bfd-liveness-detection {
                minimum-interval 350;
                multiplier 3;
                session-mode automatic;
            }
            multipath multiple-as;
            neighbor 172.16.0.4 {
                peer-as 65022;
            }
            neighbor 172.16.0.2 {
                peer-as 65021;
            }
        }
    }
}

routing-options {
    router-id 100.0.0.22;
    forwarding-table {
        export pfe-ecmp;
    }
}

policy-options {
    policy-statement pfe-ecmp {
        then {
            load-balance per-packet;
        }
    }
    policy-statement bgp-ipclos-in {
        term loopbacks {
            from {
                route-filter 100.0.0.0/16 orlonger;
            }
            then accept;
        }
    }
    policy-statement bgp-ipclos-out {
        term loopback {
            from {
                protocol direct;
                route-filter 100.0.0.22/32 orlonger;
            }
            then {
                community add MYCOMMUNITY;
                next-hop self;
                accept;
            }
        }
        term as-path {
            from {
                as-path asPathLength2;
                community MYCOMMUNITY;
            }
            then reject;
        }
        term reject {
            then reject;
        }
    }
    as-path asPathLength2 ".{2,}";
    community MYCOMMUNITY members target:12345:111;
}