! r2: AS65002. Peers with r1 (AS65001) and ferrix (AS65000).
! Accepts nothing directly from ferrix so every student prefix reaches it
! only via r1, then re-advertises everything to ferrix. That closes the loop:
! ferrix sees its own prefixes come back with AS path 65002 65001 65000.
frr defaults traditional
hostname r2
log stdout
!
ip route 198.51.100.0/24 Null0
!
route-map PERMIT-ALL permit 10
!
route-map DENY-ALL deny 10
!
router bgp 65002
 bgp router-id 10.200.0.3
 no bgp ebgp-requires-policy
 no bgp network import-check
 neighbor 10.200.0.2 remote-as 65001
 neighbor 10.200.0.2 description r1
 neighbor 10.200.0.2 timers 10 30
 neighbor 10.200.0.1 remote-as 65000
 neighbor 10.200.0.1 description ferrix
 neighbor 10.200.0.1 timers 10 30
 !
 address-family ipv4 unicast
  network 198.51.100.0/24
  neighbor 10.200.0.2 route-map PERMIT-ALL in
  neighbor 10.200.0.2 route-map PERMIT-ALL out
  neighbor 10.200.0.1 route-map DENY-ALL in
  neighbor 10.200.0.1 route-map PERMIT-ALL out
 exit-address-family
!