{"run_id":"20261023T084613Z-da55b3","gallery":true,"request":"Arista EOS fabric, 2 spines and 4 leaves, eBGP numbered. Block SSH to the leaves from outside 10.0.0.0/8 and advertise loopbacks","verifier":"batfish-local","state":"DONE","finished":true,"outcome":"passed","score":1.0,"repair_rounds":0,"cost_usd":0.0041142,"fabric":{"platform":"arista_eos","spines":2,"leaves":4},"docs":[],"explanation":"The verification is a Level 2 static analysis performed by Batfish. It examined 81 configuration items and all passed, giving a score of 1.0. No failures or unrecognized lines were reported, and the verifier completed execution in 4609 ms. Because every check succeeded, nothing could be left unverified.","unverifiable":[],"level":"L2","checks":[{"id":"parse_clean:spine1","kind":"parse_clean","passed":true},{"id":"no_undefined_refs:spine1","kind":"no_undefined_refs","passed":true},{"id":"parse_clean:spine2","kind":"parse_clean","passed":true},{"id":"no_undefined_refs:spine2","kind":"no_undefined_refs","passed":true},{"id":"parse_clean:leaf1","kind":"parse_clean","passed":true},{"id":"no_undefined_refs:leaf1","kind":"no_undefined_refs","passed":true},{"id":"parse_clean:leaf2","kind":"parse_clean","passed":true},{"id":"no_undefined_refs:leaf2","kind":"no_undefined_refs","passed":true},{"id":"parse_clean:leaf3","kind":"parse_clean","passed":true},{"id":"no_undefined_refs:leaf3","kind":"no_undefined_refs","passed":true},{"id":"parse_clean:leaf4","kind":"parse_clean","passed":true},{"id":"no_undefined_refs:leaf4","kind":"no_undefined_refs","passed":true},{"id":"bgp_compatible:leaf1--spine1","kind":"bgp_compatible","passed":true},{"id":"bgp_established:leaf1--spine1","kind":"bgp_established","passed":true},{"id":"bgp_compatible:leaf1--spine2","kind":"bgp_compatible","passed":true},{"id":"bgp_established:leaf1--spine2","kind":"bgp_established","passed":true},{"id":"bgp_compatible:leaf2--spine1","kind":"bgp_compatible","passed":true},{"id":"bgp_established:leaf2--spine1","kind":"bgp_established","passed":true},{"id":"bgp_compatible:leaf2--spine2","kind":"bgp_compatible","passed":true},{"id":"bgp_established:leaf2--spine2","kind":"bgp_established","passed":true},{"id":"bgp_compatible:leaf3--spine1","kind":"bgp_compatible","passed":true},{"id":"bgp_established:leaf3--spine1","kind":"bgp_established","passed":true},{"id":"bgp_compatible:leaf3--spine2","kind":"bgp_compatible","passed":true},{"id":"bgp_established:leaf3--spine2","kind":"bgp_established","passed":true},{"id":"bgp_compatible:leaf4--spine1","kind":"bgp_compatible","passed":true},{"id":"bgp_established:leaf4--spine1","kind":"bgp_established","passed":true},{"id":"bgp_compatible:leaf4--spine2","kind":"bgp_compatible","passed":true},{"id":"bgp_established:leaf4--spine2","kind":"bgp_established","passed":true},{"id":"l3_edges:leaf1[Ethernet1]--spine1[Ethernet1]","kind":"l3_edges","passed":true},{"id":"l3_edges:leaf1[Ethernet2]--spine2[Ethernet1]","kind":"l3_edges","passed":true},{"id":"l3_edges:leaf2[Ethernet1]--spine1[Ethernet2]","kind":"l3_edges","passed":true},{"id":"l3_edges:leaf2[Ethernet2]--spine2[Ethernet2]","kind":"l3_edges","passed":true},{"id":"l3_edges:leaf3[Ethernet1]--spine1[Ethernet3]","kind":"l3_edges","passed":true},{"id":"l3_edges:leaf3[Ethernet2]--spine2[Ethernet3]","kind":"l3_edges","passed":true},{"id":"l3_edges:leaf4[Ethernet1]--spine1[Ethernet4]","kind":"l3_edges","passed":true},{"id":"l3_edges:leaf4[Ethernet2]--spine2[Ethernet4]","kind":"l3_edges","passed":true},{"id":"route_present:spine1:10.0.1.1/32","kind":"route_present","passed":true},{"id":"route_present:spine1:10.0.1.2/32","kind":"route_present","passed":true},{"id":"route_present:spine1:10.0.1.3/32","kind":"route_present","passed":true},{"id":"route_present:spine1:10.0.1.4/32","kind":"route_present","passed":true},{"id":"route_present:spine2:10.0.1.1/32","kind":"route_present","passed":true},{"id":"route_present:spine2:10.0.1.2/32","kind":"route_present","passed":true},{"id":"route_present:spine2:10.0.1.3/32","kind":"route_present","passed":true},{"id":"route_present:spine2:10.0.1.4/32","kind":"route_present","passed":true},{"id":"route_present:leaf1:10.0.0.1/32","kind":"route_present","passed":true},{"id":"route_present:leaf1:10.0.0.2/32","kind":"route_present","passed":true},{"id":"route_present:leaf1:10.0.1.2/32","kind":"route_present","passed":true},{"id":"route_present:leaf1:10.0.1.3/32","kind":"route_present","passed":true},{"id":"route_present:leaf1:10.0.1.4/32","kind":"route_present","passed":true},{"id":"route_present:leaf2:10.0.0.1/32","kind":"route_present","passed":true},{"id":"route_present:leaf2:10.0.0.2/32","kind":"route_present","passed":true},{"id":"route_present:leaf2:10.0.1.1/32","kind":"route_present","passed":true},{"id":"route_present:leaf2:10.0.1.3/32","kind":"route_present","passed":true},{"id":"route_present:leaf2:10.0.1.4/32","kind":"route_present","passed":true},{"id":"route_present:leaf3:10.0.0.1/32","kind":"route_present","passed":true},{"id":"route_present:leaf3:10.0.0.2/32","kind":"route_present","passed":true},{"id":"route_present:leaf3:10.0.1.1/32","kind":"route_present","passed":true},{"id":"route_present:leaf3:10.0.1.2/32","kind":"route_present","passed":true},{"id":"route_present:leaf3:10.0.1.4/32","kind":"route_present","passed":true},{"id":"route_present:leaf4:10.0.0.1/32","kind":"route_present","passed":true},{"id":"route_present:leaf4:10.0.0.2/32","kind":"route_present","passed":true},{"id":"route_present:leaf4:10.0.1.1/32","kind":"route_present","passed":true},{"id":"route_present:leaf4:10.0.1.2/32","kind":"route_present","passed":true},{"id":"route_present:leaf4:10.0.1.3/32","kind":"route_present","passed":true},{"id":"reachability:leaf1->leaf2","kind":"reachability","passed":true},{"id":"reachability:leaf1->leaf3","kind":"reachability","passed":true},{"id":"reachability:leaf1->leaf4","kind":"reachability","passed":true},{"id":"reachability:leaf2->leaf1","kind":"reachability","passed":true},{"id":"reachability:leaf2->leaf3","kind":"reachability","passed":true},{"id":"reachability:leaf2->leaf4","kind":"reachability","passed":true},{"id":"reachability:leaf3->leaf1","kind":"reachability","passed":true},{"id":"reachability:leaf3->leaf2","kind":"reachability","passed":true},{"id":"reachability:leaf3->leaf4","kind":"reachability","passed":true},{"id":"reachability:leaf4->leaf1","kind":"reachability","passed":true},{"id":"reachability:leaf4->leaf2","kind":"reachability","passed":true},{"id":"reachability:leaf4->leaf3","kind":"reachability","passed":true},{"id":"filter_denies:leaf1:tcp/22","kind":"filter_denies","passed":true},{"id":"filter_denies:leaf2:tcp/22","kind":"filter_denies","passed":true},{"id":"filter_denies:leaf3:tcp/22","kind":"filter_denies","passed":true},{"id":"filter_denies:leaf4:tcp/22","kind":"filter_denies","passed":true},{"id":"no_forwarding_loops","kind":"no_forwarding_loops","passed":true}],"configs":{"leaf1":"hostname leaf1\nservice routing protocols model multi-agent\nip routing\ninterface Loopback0\n ip address 10.0.1.1/32\ninterface Ethernet1\n no switchport\n ip address 10.1.0.1/31\n ip access-group SSH_BLOCK in\ninterface Ethernet2\n no switchport\n ip address 10.1.0.3/31\n ip access-group SSH_BLOCK in\nip access-list SSH_BLOCK\n 10 permit tcp 10.0.0.0/8 any eq 22\n 20 deny tcp any any eq 22\n 30 permit ip any any\nrouter bgp 65101\n router-id 10.0.1.1\n neighbor 10.1.0.0 remote-as 65000\n neighbor 10.1.0.2 remote-as 65000\n network 10.0.1.1/32\n","leaf2":"hostname leaf2\nservice routing protocols model multi-agent\nip routing\ninterface Loopback0\n ip address 10.0.1.2/32\ninterface Ethernet1\n no switchport\n ip address 10.1.0.17/31\n ip access-group SSH_BLOCK in\ninterface Ethernet2\n no switchport\n ip address 10.1.0.19/31\n ip access-group SSH_BLOCK in\nip access-list SSH_BLOCK\n 10 permit tcp 10.0.0.0/8 any eq 22\n 20 deny tcp any any eq 22\n 30 permit ip any any\nrouter bgp 65102\n router-id 10.0.1.2\n neighbor 10.1.0.16 remote-as 65000\n neighbor 10.1.0.18 remote-as 65000\n network 10.0.1.2/32\n","leaf3":"hostname leaf3\nservice routing protocols model multi-agent\nip routing\ninterface Loopback0\n ip address 10.0.1.3/32\ninterface Ethernet1\n no switchport\n ip address 10.1.0.33/31\n ip access-group SSH_BLOCK in\ninterface Ethernet2\n no switchport\n ip address 10.1.0.35/31\n ip access-group SSH_BLOCK in\nip access-list SSH_BLOCK\n 10 permit tcp 10.0.0.0/8 any eq 22\n 20 deny tcp any any eq 22\n 30 permit ip any any\nrouter bgp 65103\n router-id 10.0.1.3\n neighbor 10.1.0.32 remote-as 65000\n neighbor 10.1.0.34 remote-as 65000\n network 10.0.1.3/32\n","leaf4":"hostname leaf4\nservice routing protocols model multi-agent\nip routing\ninterface Loopback0\n ip address 10.0.1.4/32\ninterface Ethernet1\n no switchport\n ip address 10.1.0.49/31\n ip access-group SSH_BLOCK in\ninterface Ethernet2\n no switchport\n ip address 10.1.0.51/31\n ip access-group SSH_BLOCK in\nip access-list SSH_BLOCK\n 10 permit tcp 10.0.0.0/8 any eq 22\n 20 deny tcp any any eq 22\n 30 permit ip any any\nrouter bgp 65104\n router-id 10.0.1.4\n neighbor 10.1.0.48 remote-as 65000\n neighbor 10.1.0.50 remote-as 65000\n network 10.0.1.4/32\n","spine1":"hostname spine1\nservice routing protocols model multi-agent\nip routing\ninterface Loopback0\n ip address 10.0.0.1/32\ninterface Ethernet1\n no switchport\n ip address 10.1.0.0/31\ninterface Ethernet2\n no switchport\n ip address 10.1.0.16/31\ninterface Ethernet3\n no switchport\n ip address 10.1.0.32/31\ninterface Ethernet4\n no switchport\n ip address 10.1.0.48/31\nrouter bgp 65000\n router-id 10.0.0.1\n neighbor 10.1.0.1 remote-as 65101\n neighbor 10.1.0.17 remote-as 65102\n neighbor 10.1.0.33 remote-as 65103\n neighbor 10.1.0.49 remote-as 65104\n network 10.0.0.1/32\n","spine2":"hostname spine2\nservice routing protocols model multi-agent\nip routing\ninterface Loopback0\n ip address 10.0.0.2/32\ninterface Ethernet1\n no switchport\n ip address 10.1.0.2/31\ninterface Ethernet2\n no switchport\n ip address 10.1.0.18/31\ninterface Ethernet3\n no switchport\n ip address 10.1.0.34/31\ninterface Ethernet4\n no switchport\n ip address 10.1.0.50/31\nrouter bgp 65000\n router-id 10.0.0.2\n neighbor 10.1.0.3 remote-as 65101\n neighbor 10.1.0.19 remote-as 65102\n neighbor 10.1.0.35 remote-as 65103\n neighbor 10.1.0.51 remote-as 65104\n network 10.0.0.2/32\n"}}