| aamwd-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Advanced anti-malware trace options |
| access-profile-template |
name apply-groups apply-groups-except apply-macroconfig-payload-password |
Configure an access profile |
| address-assignment-type |
apply-groups apply-groups-except apply-macroneighbor-discovery-router-advertisement high-utilization abated-utilization high-utilization-v6 abated-utilization-v6 dynamic-pool pool location-pool domain-profile address-pools |
Address assignment configuration |
| address-book-type |
apply-groups apply-groups-except apply-macroaddress address-set |
Configure security address book for the zone |
| address-filter-type |
apply-groups apply-groups-except apply-macroaddress-book address-set |
IP address filter |
| address_set_type |
name apply-groups apply-groups-except apply-macrodescription address address-set |
|
| address_type |
name apply-groups apply-groups-except apply-macrodescription address-content |
|
| admin_group_include_exclude |
apply-groups apply-groups-except apply-macroinclude-any-choice include-all-choice exclude-choice |
|
| advisory_options_type |
apply-groups apply-groups-except apply-macroupstream-rate downstream-rate |
|
| advpn-suggester-partner |
apply-groups apply-groups-except apply-macrosuggester partner |
Configure ADVPN Suggester Partner |
| aggregation_type |
apply-groups apply-groups-except apply-macroautonomous-system protocol-port source-prefix destination-prefix source-destination-prefix |
|
| alg-object |
apply-groups apply-groups-except apply-macrotraceoptions alg-manager alg-support-lib dns ftp h323 mgcp msrpc sunrpc rsh rtsp sccp sip sql talk tftp pptp ike-esp-nat twamp |
|
| analyzer-egress-bridge-domain-type |
name apply-groups apply-groups-except apply-macro |
|
| analyzer-egress-interface-type |
name apply-groups apply-groups-except apply-macro |
|
| analyzer-egress-routing-instance-type |
name apply-groups apply-groups-except apply-macrovlan bridge-domain |
|
| analyzer-egress-vlan-type |
name apply-groups apply-groups-except apply-macro |
|
| analyzer-ingress-bridge-domain-type |
name apply-groups apply-groups-except apply-macro |
|
| analyzer-ingress-interface-type |
name apply-groups apply-groups-except apply-macro |
|
| analyzer-ingress-routing-instance-type |
name apply-groups apply-groups-except apply-macrovlan bridge-domain |
|
| analyzer-ingress-vlan-type |
name apply-groups apply-groups-except apply-macro |
|
| ancp_interfaces_type |
name apply-groups apply-groups-except apply-macroaccess-identifier neighbor overhead-accounting |
Physical interface |
| anti-spam-feature |
apply-groups apply-groups-except apply-macrosbl |
Anti-spam feature |
| anti-spam-traceoptions |
apply-groups apply-groups-except apply-macroflag |
Trace options for anti-spam feature |
| anti-virus-feature |
apply-groups apply-groups-except apply-macromime-whitelist url-whitelist type profile traceoptions sophos-engine |
Anti-virus feature |
| anti-virus-notification-options |
apply-groups apply-groups-except apply-macrovirus-detection fallback-block fallback-non-block |
Anti-virus notification options |
| anti-virus-pattern-update |
apply-groups apply-groups-except apply-macroemail-notify url proxy-profile routing-instance interval start-time no-autoupdate |
Anti-virus pattern update |
| anti-virus-traceoptions |
apply-groups apply-groups-except apply-macroflag |
Trace options for anti-virus feature |
| anti-virus-trickling |
timeout |
Anti-virus trickling |
| any_filter |
name apply-groups apply-groups-except apply-macrointerface-specific interface-shared term |
|
| any_pm_family_output_type |
apply-groups apply-groups-except apply-macrointerface-or-next-hop-index no-filter-check hosted-service |
|
| any_pm_intf_type |
name apply-groups apply-groups-except apply-macronext-hop |
|
| any_template |
name apply-groups apply-groups-except apply-macroattributes |
|
| apath-options |
apply-groups apply-groups-except apply-macroreceive send |
Number of paths to advertise |
| apbr_rule_type |
name apply-groups apply-groups-except apply-macrodisable-midstream-routing match then |
|
| appfw_rule_type |
name apply-groups apply-groups-except apply-macromatch then |
|
| application_map_object |
name apply-groups apply-groups-except apply-macroapplication |
|
| application_object |
name apply-groups apply-groups-except apply-macrodescription term application-protocol protocol source-port destination-port ether-type snmp-command icmp-type icmp6-type icmp-code icmp6-code ttl-threshold rpc-program-number uuid inactivity-timeout gate-timeout child-inactivity-timeout dns-choice |
|
| application_services_type |
apply-groups apply-groups-except apply-macrogtp-profile sctp-profile idp packet-capture idp-policy ssl-proxy web-proxy uac-policy utm-policy icap-redirect application-firewall application-traffic-control wx-redirection security-intelligence-policy advanced-anti-malware-policy security-intelligence |
Application Services |
| application_set_object |
name apply-groups apply-groups-except apply-macrodescription application application-set |
|
| apply-advanced |
apply-groups apply-groups-except apply-macro |
Apply advanced configuration logic |
| apply-macro-type |
name data |
Macro data for commit-script expansion |
| app_network_type |
name apply-groups apply-groups-except apply-macro |
|
| appqoe-node |
apply-groups apply-groups-except apply-macroip-address |
Set node info |
| appqoe-probe-params |
apply-groups apply-groups-except apply-macrodata-fill data-size per-packet-loss-timeout probe-interval probe-count burst-size sla-export-interval dscp-code-points forwarding-class loss-priority |
Active probe parameters |
| appqoe-probe-path |
apply-groups apply-groups-except apply-macrolocal remote |
Set probe path details |
| appqoe_sla_metric_profile |
apply-groups apply-groups-except apply-macrodelay-round-trip jitter jitter-type packet-loss match |
Metric Name |
| appqos_rule_type |
name apply-groups apply-groups-except apply-macromatch then |
|
| appqos-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag level |
Trace options for application classifier |
| arp-interface-type |
name apply-groups apply-groups-except apply-macroaging-timer |
Logical interface on which to configure ARP aging timer |
| as-path-calc-length-type |
name count-operator |
Calculated BGP AS_PATH length per BGP rules |
| as-path-unique-count-type |
name count-operator |
Number of unique BGP ASes excluding confederation ASes |
| atm-policer-type |
name apply-groups apply-groups-except apply-macrological-interface-policer atm-service peak-rate sustained-rate max-burst-size cdvt policing-action |
Atm policer |
| authentication-source-type |
name apply-groups apply-groups-except apply-macroauthentication-source-option |
Configure user-identification authentication-source |
| authentication-type |
apply-groups apply-groups-except apply-macropassword username-include |
DHCP authentication |
| auto_configure_authentication_type |
apply-groups apply-groups-except apply-macropacket-types password username-include |
Autoconf VLAN authentication |
| auto_configure_oob_packet_types |
name |
|
| auto_configure_packet_types |
name |
|
| auto_configure_vlan_type |
apply-groups apply-groups-except apply-macrostacked-vlan-ranges vlan-ranges agent-circuit-identifier line-identity remove-when-no-subscribers |
|
| av-fallback-settings |
apply-groups apply-groups-except apply-macrodefault content-size engine-not-ready timeout out-of-resources too-many-requests decompress-err |
Anti-virus fallback settings |
| aws-object |
apply-groups apply-groups-except apply-macrocloudwatch |
|
| bandwidth-type |
apply-groups apply-groups-except apply-macroper-traffic-class-bandwidth ct0 ct1 ct2 ct3 |
|
| banner-object |
apply-groups apply-groups-except apply-macrobanner |
|
| batch-query-type |
apply-groups apply-groups-except apply-macroitems-per-batch query-interval |
Batch query configuration |
| bgpaf-accepted-prefix-limit |
apply-groups apply-groups-except apply-macromaximum teardown drop-excess hide-excess |
|
| bgpaf-aigp-options |
apply-groups apply-groups-except apply-macrodisable |
|
| bgp-af-gr |
apply-groups apply-groups-except apply-macrolong-lived forwarding-state-bit |
|
| bgp-afi-default |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service |
|
| bgp-afi-flow |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service no-validate strip-nexthop allow-policy-add-nexthop |
|
| bgp-afi-flow-with-redirect-ip-action |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service no-validate strip-nexthop legacy-redirect-ip-action secondary-independent-resolution |
|
| bgp-afi-inet6-labeled |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service aggregate-label per-group-label traffic-statistics rib explicit-null protection topology |
|
| bgp-afi-inet6-transport |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service aggregate-label per-prefix-label per-group-label traffic-statistics lu-export protection |
|
| bgp-afi-inet-transport |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service aggregate-label per-prefix-label per-group-label traffic-statistics protection |
|
| bgp-afi-l2vpn |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service egress-protection |
|
| bgp-afi-l3vpn |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service aggregate-label egress-protection accept-local-nexthop |
|
| bgp-afi-labeled |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service aggregate-label per-prefix-label per-group-label traffic-statistics topology rib explicit-null protection egress-protection resolve-vpn entropy-label |
|
| bgp-afi-srte |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit damping loops graceful-restart no-install output-queue-priority route-refresh-priority withdraw-priority |
|
| bgp-afi-topo |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service protection topology |
|
| bgp-afi-vpn |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service aggregate-label |
|
| bgp-afi-vpn-protection |
apply-groups apply-groups-except apply-macroprefix-limit accepted-prefix-limit rib-group add-path aigp damping local-ipv4-address loops delay-route-advertisements nexthop-resolution defer-initial-multipath-build graceful-restart extended-nexthop extended-nexthop-color extended-nexthop-tunnel no-install route-age-bgp-view output-queue-priority route-refresh-priority withdraw-priority advertise-srv6-service accept-srv6-service aggregate-label egress-protection |
|
| bgpaf-loops |
apply-groups apply-groups-except apply-macroloops |
|
| bgpaf-prefix-limit |
apply-groups apply-groups-except apply-macromaximum teardown drop-excess hide-excess |
|
| bgpaf-traffic-statistics |
apply-groups apply-groups-except apply-macrolabeled-path file interval |
|
| bgp_filter_obj |
match-on policy |
Filter to apply to tracing |
| bgp-output-queue-priority-class |
class |
|
| block-allocation-object |
apply-groups apply-groups-except apply-macroblock-size maximum-blocks-per-host active-block-timeout interim-logging-interval last-block-recycle-timeout log |
Port block allocation |
| bridge_filter |
name apply-groups apply-groups-except apply-macroaccounting-profile interface-specific physical-interface-filter instance-shared term |
Define a BRIDGE firewall filter |
| bypass-subscription-type |
apply-groups apply-groups-except apply-macrosubscription |
|
| by-protocol-object-limit-tcp-type |
apply-groups apply-groups-except apply-macromaximum-sessions packet-rate session-rate whitelist syn-cookie |
Configure the limit-session for tcp protocol |
| by-protocol-object-limit-type |
apply-groups apply-groups-except apply-macromaximum-sessions packet-rate session-rate whitelist |
Configure the limit-session for each protocol |
| by-protocol-object-type |
apply-groups apply-groups-except apply-macrotcp udp icmp |
Configure limit-session on the basis of protocol |
| category-list-type |
name apply-groups apply-groups-except apply-macrovalue |
Configure category-list object |
| ccc_filter |
name apply-groups apply-groups-except apply-macroaccounting-profile interface-specific physical-interface-filter term |
Define a CCC firewall filter |
| certificate-object |
name apply-groups apply-groups-except apply-macrocertificate |
|
| cflowd_global_mpls_sampling_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 |
|
| cflowd_instance_bridge_sampling_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance version9 version-ipfix |
|
| cflowd_instance_inet6_sampling_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix |
|
| cflowd_instance_inet_sampling_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix version |
|
| cflowd_instance_mpls_sampling_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix |
|
| cflowd_instance_vpls_sampling_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance version9 version-ipfix |
|
| cflowd_monitoring_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance |
|
| cflowd_packet_accounting_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance version autonomous-system-type aggregation |
|
| cflowd_sampling_inet6_sampling_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 |
|
| cflowd_sampling_inet_lr_inst_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix |
|
| cflowd_sampling_inet_lr_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix |
|
| cflowd_sampling_inet_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix version |
|
| cflowd_sampling_mpls_lr_inst_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix |
|
| cflowd_sampling_mpls_lr_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix |
|
| cflowd_sampling_type |
name apply-groups apply-groups-except apply-macroport dscp forwarding-class routing-instance autonomous-system-type aggregation local-dump-choice source-address version9 version-ipfix version |
|
| cfm-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for connectivity fault management |
| chain-member-type |
name apply-groups apply-groups-except apply-macroattack-type |
Chain member |
| civic-address-elements |
apply-groups apply-groups-except apply-macrowhat country-code ca-type |
|
| classification-types |
apply-groups apply-groups-except apply-macromac-address circuit-id remote-id |
Different mechanisms to identify a single household |
| clients-object |
name apply-groups apply-groups-except apply-macroremote-protected-resources remote-exceptions ipsec-vpn user user-groups |
|
| clksync-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for syncE and PTP |
| command-list-type |
name apply-groups apply-groups-except apply-macrovalue |
Configure command-list object |
| community_count_type |
name count-operator |
Number of BGP communities |
| content-filtering-feature |
apply-groups apply-groups-except apply-macroprofile |
Content-filtering feature |
| content-filtering-traceoptions |
apply-groups apply-groups-except apply-macroflag |
Trace options for content-filtering feature |
| context_application_services_type |
apply-groups apply-groups-except apply-macrosecurity-metadata-streaming-policy |
|
| control_as_list_type |
list-type list-name apply-groups apply-groups-except apply-macro |
|
| control_mac_address_filter_list_type |
name apply-groups apply-groups-except apply-macro |
|
| control_prefix_list_filter_type |
list_name choice-ident choice-value apply-groups apply-groups-except apply-macrometric metric2 metric3 metric4 tag tag2 preference preference2 color color2 local-preference priority prefix-segment label-allocation add-path validation-state origin aigp-originate aigp-adjust community tunnel-attribute damping aggregate-bandwidth limit-bandwidth no-entropy-label-capability as-path-prepend as-path-expand next-hop install-nexthop trace external load-balance no-route-localize install-to-fib-choice analyze class destination-class source-class forwarding-class map-to-interface ssm-source p2mp-lsp-root cos-next-hop-map dynamic-tunnel-attributes tunnel-end-point-address selected-mldp-egress mhop-bfd-port no-backup default-action next accept_reject bgp-output-queue-priority multipath-resolve source-routing-path-template label-allocation-fallback-reject resolution-map ignore-service-label request-long-lived-ack send-withdrawal-on-route-change |
|
| control_prefix_list_type |
name apply-groups apply-groups-except apply-macro |
|
| control_route_filter_list_type |
name apply-groups apply-groups-except apply-macromodifier metric metric2 metric3 metric4 tag tag2 preference preference2 color color2 local-preference priority prefix-segment label-allocation add-path validation-state origin aigp-originate aigp-adjust community tunnel-attribute damping aggregate-bandwidth limit-bandwidth no-entropy-label-capability as-path-prepend as-path-expand next-hop install-nexthop trace external load-balance no-route-localize install-to-fib-choice analyze class destination-class source-class forwarding-class map-to-interface ssm-source p2mp-lsp-root cos-next-hop-map dynamic-tunnel-attributes tunnel-end-point-address selected-mldp-egress mhop-bfd-port no-backup default-action next accept_reject bgp-output-queue-priority multipath-resolve source-routing-path-template label-allocation-fallback-reject resolution-map ignore-service-label request-long-lived-ack send-withdrawal-on-route-change |
|
| control_route_filter_type |
address choice-ident choice-value apply-groups apply-groups-except apply-macrolabel get-route-range metric metric2 metric3 metric4 tag tag2 preference preference2 color color2 local-preference priority prefix-segment label-allocation add-path validation-state origin aigp-originate aigp-adjust community tunnel-attribute damping aggregate-bandwidth limit-bandwidth no-entropy-label-capability as-path-prepend as-path-expand next-hop install-nexthop trace external load-balance no-route-localize install-to-fib-choice analyze class destination-class source-class forwarding-class map-to-interface ssm-source p2mp-lsp-root cos-next-hop-map dynamic-tunnel-attributes tunnel-end-point-address selected-mldp-egress mhop-bfd-port no-backup default-action next accept_reject bgp-output-queue-priority multipath-resolve source-routing-path-template label-allocation-fallback-reject resolution-map ignore-service-label request-long-lived-ack send-withdrawal-on-route-change |
|
| control_rtf_prefix_list_type |
name apply-groups apply-groups-except apply-macro |
RTF prefix list |
| control_source_address_filter_list_type |
name apply-groups apply-groups-except apply-macro |
|
| control_source_address_filter_type |
address choice-ident choice-value apply-groups apply-groups-except apply-macrometric metric2 metric3 metric4 tag tag2 preference preference2 color color2 local-preference priority prefix-segment label-allocation add-path validation-state origin aigp-originate aigp-adjust community tunnel-attribute damping aggregate-bandwidth limit-bandwidth no-entropy-label-capability as-path-prepend as-path-expand next-hop install-nexthop trace external load-balance no-route-localize install-to-fib-choice analyze class destination-class source-class forwarding-class map-to-interface ssm-source p2mp-lsp-root cos-next-hop-map dynamic-tunnel-attributes tunnel-end-point-address selected-mldp-egress mhop-bfd-port no-backup default-action next accept_reject bgp-output-queue-priority multipath-resolve source-routing-path-template label-allocation-fallback-reject resolution-map ignore-service-label request-long-lived-ack send-withdrawal-on-route-change |
|
| co-ordinate-elements |
apply-groups apply-groups-except apply-macrolongitude lattitude |
Geographical co-ordinates |
| count_type |
apply-groups apply-groups-except apply-macro |
|
| custom-attack-group-type |
name apply-groups apply-groups-except apply-macroattack-group-description group-members |
Define custom attack group |
| custom-attack-type |
name apply-groups apply-groups-except apply-macroattack-description recommended-action severity time-binding detection-filter attack-type |
Define custom attack |
| custom-category-type |
name apply-groups apply-groups-except apply-macroaction custom-message |
Custom category type |
| custom-message-type |
name apply-groups apply-groups-except apply-macrotype contents |
Configure custom-message object |
| daily-object |
apply-groups apply-groups-except apply-macrodaily_type |
Daily schedule |
| dcd_shaping_config |
apply-groups apply-groups-except apply-macrouseless_shaping_choice queue-length |
Traffic-shaping profile |
| default-anti-spam-feature |
apply-groups apply-groups-except apply-macrotype address-whitelist address-blacklist traceoptions sbl |
Anti-spam feature |
| default-anti-virus-feature |
apply-groups apply-groups-except apply-macromime-whitelist url-whitelist type forwarding-mode scan-options trickling notification-options fallback-options traceoptions avira-engine sophos-engine |
Anti-virus feature |
| default-content-filtering-feature |
apply-groups apply-groups-except apply-macrotype traceoptions permit-command block-command block-extension block-mime block-content-type notification-options |
Content-filtering feature |
| default-juniper-enhanced-type |
apply-groups apply-groups-except apply-macrocache server reputation query-type base-filter category site-reputation-action default custom-message fallback-settings timeout no-safe-search |
Juniper Enhanced |
| default-juniper-local-type |
apply-groups apply-groups-except apply-macrodefault category custom-message no-safe-search fallback-settings timeout |
Juniper local |
| default-sbl-type |
apply-groups apply-groups-except apply-macrosbl-default-server-choice spam-action custom-tag-string |
SBL type |
| default-sophos-scan-options |
apply-groups apply-groups-except apply-macrouri-check-choice content-size-limit timeout |
Anti-virus scan options |
| default-webfilter-feature |
apply-groups apply-groups-except apply-macrourl-whitelist url-blacklist http-reassemble http-persist type traceoptions websense-redirect juniper-local juniper-enhanced |
Web-filtering feature settings |
| default-websense-type |
apply-groups apply-groups-except apply-macroserver category custom-message no-safe-search fallback-settings timeout sockets account |
Websense redirect |
| demux_options_table |
name |
|
| demux_options_type |
apply-groups apply-groups-except apply-macrounderlying-interface |
|
| destination-class-filters |
name apply-groups apply-groups-except apply-macrofamily |
|
| destination_nat_enable_type |
apply-groups apply-groups-except apply-macrodestination_nat |
Enable Destination NAT |
| dest-nat-rule-object |
name apply-groups apply-groups-except apply-macrodescription dest-nat-rule-match then |
|
| deterministic-object |
apply-groups apply-groups-except apply-macroblock-size det-nat-configuration-log-interval host include-boundary-addresses |
Deterministic nat allocation |
| dhcp-arp-nud-liveness-detection-type |
apply-groups apply-groups-except apply-macrotransmit-interval max-consecutive-retries |
Address Resolution detection options |
| dhcp-attribute-type |
apply-groups apply-groups-except apply-macrooption-match maximum-lease-time next-server server-identifier grace-period domain-name name-server wins-server router boot-file boot-server tftp-server sip-server netbios-node-type sip-server-domain-name sip-server-address dns-server propagate-settings propagate-ppp-settings option valid-lifetime preferred-lifetime t1-percentage t2-percentage exclude-prefix-len t1-renewal-time t2-rebinding-time |
|
| dhcp-bfd-liveness-detection-type |
apply-groups apply-groups-except apply-macroversion minimum-interval minimum-transmit-interval minimum-receive-interval multiplier adaptation-choice transmit-interval detection-time session-mode holddown-interval |
Bidirectional Forwarding Detection (BFD) options |
| dhcp-client-type |
apply-groups apply-groups-except apply-macroclient-identifier no-dns-install lease-time retransmission-attempt retransmission-interval metric server-address update-server vendor-id force-discover options requested-options |
Dynamic Host Configuration Protocol client configuration |
| dhcp-dual-stack-group |
name apply-groups apply-groups-except apply-macroauthentication service-profile access-profile dynamic-profile liveness-detection relay-agent-interface-id relay-agent-remote-id classification-key dual-stack-interface-client-limit protocol-master short-cycle-protection |
DHCP dual stack groups |
| dhcp-generic-v4-option |
apply-groups apply-groups-except apply-macrooption-number equals default-action starts-with option-60 option-77 option-order |
Generic DHCP options processing |
| dhcp-generic-v4-option-type |
apply-groups apply-groups-except apply-macroequals default-action starts-with |
|
| dhcp-generic-v6-option |
apply-groups apply-groups-except apply-macrooption-number equals default-action starts-with option-15 option-16 option-order |
Generic DHCPv6 options processing |
| dhcp-generic-v6-option-type |
apply-groups apply-groups-except apply-macroequals default-action starts-with |
|
| dhcp-group |
name apply-groups apply-groups-except apply-macroactive-server-group authentication liveness-detection dynamic-profile service-profile access-profile overrides short-cycle-protection server-match relay-option relay-option-60 relay-option-82 forward-only route-suppression description maximum-hop-count minimum-wait-time client-response-ttl source-ip-change interface remote-id-mismatch lease-time-validation |
DHCP groups |
| dhcp-liveness-detection-dualstack-type |
apply-groups apply-groups-except apply-macrofailure-action method |
DHCP client liveness detection processing |
| dhcp-liveness-detection-failure-action-type |
apply-groups apply-groups-except apply-macrofailure-action-type |
Liveness detection failure action options |
| dhcp-liveness-detection-type |
apply-groups apply-groups-except apply-macrofailure-action method |
DHCP client liveness detection processing |
| dhcp-local-server-dual-stack-group |
name apply-groups apply-groups-except apply-macroauthentication access-profile dynamic-profile service-profile on-demand-address-allocation classification-key dual-stack-interface-client-limit protocol-master liveness-detection reauthenticate short-cycle-protection |
DHCP dual stack groups |
| dhcp-local-server-group |
name apply-groups apply-groups-except apply-macroauthentication liveness-detection reconfigure overrides dynamic-profile service-profile access-profile short-cycle-protection route-suppression interface lease-time-validation remote-id-mismatch reauthenticate |
DHCP groups |
| dhcp-option82-type |
apply-groups apply-groups-except apply-macrodisable circuit-id remote-id vendor-id |
|
| dhcp-remote-id-mismatch-type |
apply-groups apply-groups-except apply-macrodisconnect |
DHCP client remote-id-mismatch processing |
| dhcp-route-suppression-type |
apply-groups apply-groups-except apply-macrodhcp-route-suppression-choice |
|
| dhcpv4-filter-option |
apply-groups apply-groups-except apply-macrodelay-time based-on |
Generic DHCPv4 filter processing |
| dhcpv4-gbl-active-sg-type |
active-server-group allow-server-change |
|
| dhcpv4-gp-active-sg-type |
active-server-group allow-server-change |
|
| dhcp-v4-option-default-action |
apply-groups apply-groups-except apply-macroserver-group-choice |
Default action |
| dhcpv4-profile |
name apply-groups apply-groups-except apply-macropool-name lease-time retransmission-attempt retransmission-interval dead-server-retry-interval dhcp-server-selection-algorithm dead-server-successive-retry-attempt bind-interface servers |
DHCPv4 proxy client configuration |
| dhcpv6-authentication-type |
apply-groups apply-groups-except apply-macropassword username-include |
DHCPv6 authentication |
| dhcpv6-duplicate-clients-type |
distinguish-with |
Allow duplicate clients |
| dhcpv6-dynamic-server-group |
name apply-groups apply-groups-except apply-macroneighbor-discovery-router-advertisement overrides interface |
DHCP dynamic server groups |
| dhcpv6-dynamic-server-type |
apply-groups apply-groups-except apply-macrooverrides group |
|
| dhcpv6-filter-option |
apply-groups apply-groups-except apply-macrodelay-time based-on |
Generic DHCPv6 filter processing |
| dhcpv6-gbl-active-sg-type |
apply-groups apply-groups-except apply-macroactive-server-group |
|
| dhcpv6-gp-active-sg-type |
apply-groups apply-groups-except apply-macroactive-server-group |
|
| dhcpv6-liveness-detection-type |
apply-groups apply-groups-except apply-macrofailure-action method |
DHCPv6 client liveness detection processing |
| dhcpv6-local-server-group |
name apply-groups apply-groups-except apply-macroauthentication liveness-detection reconfigure dynamic-profile service-profile access-profile short-cycle-protection overrides route-suppression interface lease-time-validation remote-id-mismatch reauthenticate |
DHCP groups |
| dhcpv6-local-server-type |
apply-groups apply-groups-except apply-macroauthentication liveness-detection reconfigure dynamic-profile forward-snooped-clients service-profile access-profile short-cycle-protection overrides route-suppression group lease-time-validation requested-ip-check no-snoop persistent-storage server-duid-type remote-id-mismatch reauthenticate allow-leasequery allow-bulk-leasequery allow-active-leasequery duplicate-clients dynamic-server |
|
| dhcp-v6-option-default-action |
apply-groups apply-groups-except apply-macroserver-group-choice |
Default action |
| dhcpv6-override-dynamic-server-type |
apply-groups apply-groups-except apply-macrointerface-client-limit rapid-commit process-inform delegated-pool ia-na-pool |
DHCP override processing |
| dhcpv6-override-local-server-type |
apply-groups apply-groups-except apply-macrointerface-client-limit rapid-commit client-negotiation-match process-inform delay-advertise delegated-pool multi-address-embedded-option-response always-process-option-request-option delete-binding-on-renegotiation top-level-status-code always-add-option-dns-server asymmetric-lease-time asymmetric-prefix-lease-time protocol-attributes dual-stack |
DHCP override processing |
| dhcpv6-override-relay-type |
apply-groups apply-groups-except apply-macroallow-snooped-clients-choice delay-authentication interface-client-limit dual-stack no-bind-on-request client-negotiation-match send-release-on-delete always-process-option-request-option relay-source delete-binding-on-renegotiation asymmetric-lease-time asymmetric-prefix-lease-time |
DHCPv6 relay override processing |
| dhcpv6-profile |
name apply-groups apply-groups-except apply-macropool-name lease-time retransmission-attempt retransmission-interval bind-interface |
DHCPv6 proxy client configuration |
| dhcpv6-reconfigure-type |
apply-groups apply-groups-except apply-macrostrict clear-on-abort attempts timeout token trigger support-option-pd-exclude |
DHCPv6 reconfigure processing |
| dhcpv6-relay-group |
name apply-groups apply-groups-except apply-macroactive-server-group dual-stack-group authentication liveness-detection dynamic-profile service-profile access-profile short-cycle-protection overrides relay-option vendor-specific-information forward-only relay-agent-interface-id relay-agent-remote-id route-suppression relay-agent-option-79 interface lease-time-validation remote-id-mismatch server-match |
DHCPv6 groups |
| dhcpv6-relay-type |
apply-groups apply-groups-except apply-macroauthentication persistent-storage liveness-detection dynamic-profile service-profile access-profile short-cycle-protection overrides relay-option exclude-relay-agent-identifier server-match relay-agent-option-79 vendor-specific-information forward-only forward-only-replies forward-snooped-clients route-suppression group relay-agent-interface-id relay-agent-remote-id server-group active-server-group server-response-time lease-time-validation no-snoop leasequery bulk-leasequery active-leasequery remote-id-mismatch duplicate-clients |
DHCPv6 relay configuration |
| dhcpv6-route-suppression-type |
access access-internal |
Suppress access-internal and/or access route addition |
| dnsf-traceoptions-object |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
URL filtering trace options |
| dns-name-type |
name apply-groups apply-groups-except apply-macroipv4-only ipv6-only |
DNS address name |
| ds-group |
name apply-groups apply-groups-except apply-macrooverrides interface |
DHCP security groups |
| ds-override-type |
apply-groups apply-groups-except apply-macrotrusted untrusted no-option82 no-option37 no-option18 no-option16 no-option79 no-dhcpv6-options |
Dynamic ARP Inspection override processing |
| dual-stack-authentication-type |
apply-groups apply-groups-except apply-macropassword username-include |
DHCP dual stack authentication |
| duid-type |
apply-groups apply-groups-except apply-macroduid_ll |
|
| dynamic-attack-group-type |
name apply-groups apply-groups-except apply-macroattack-group-description filters |
Define dynamic attack group |
| dynamic-dhcp-attribute-type |
apply-groups apply-groups-except apply-macromaximum-lease-time valid-lifetime preferred-lifetime dns-server t1-percentage t2-percentage |
|
| dynamic_ifbw_parms_type |
apply-groups apply-groups-except apply-macrocapacity margin delay bandwidth resource latency quality data-rate threshold credit |
|
| dynamic_ip_authentication_type |
apply-groups apply-groups-except apply-macropassword username-include |
Autoconf packet trigger subscriber authentication |
| dynamic_ipv4_type |
apply-groups apply-groups-except apply-macroaddress-ranges |
Packet triggered subscribers |
| dynamic_ipv6_type |
apply-groups apply-groups-except apply-macroprefix-ranges |
Packet triggered subscribers |
| dynamic-profile-type |
apply-groups apply-groups-except apply-macrodynamic-profile dynamic-profile-type-choice |
Dynamic profile to use |
| dynamic_tunnel_type |
name apply-groups apply-groups-except apply-macrosource-address tunnel-type destination-networks |
Dynamic tunnel definition |
| e2e-action-profile |
name apply-groups apply-groups-except apply-macropreserve-trace-order record-pic-history event module |
|
| e2e-event |
name apply-groups apply-groups-except apply-macrotrace count packet-summary packet-dump |
|
| e2e-module |
name apply-groups apply-groups-except apply-macroflag |
|
| end-to-end-debug-filter |
name apply-groups apply-groups-except apply-macroaction-profile protocol source-prefix destination-prefix source-port destination-port interface |
End to end debug packer filter settings |
| epd_threshold_config |
apply-groups apply-groups-except apply-macroepd-threshold-plp0 plp1 |
|
| erp-data-channel |
apply-groups apply-groups-except apply-macrovlan |
|
| erp-interface |
apply-groups apply-groups-except apply-macrocontrol-channel ring-protection-link-end interface-none |
|
| erp-trace-options |
apply-groups apply-groups-except apply-macroflag file |
Trace options for Ethernet Ring Protocol |
| es_filter |
name apply-groups apply-groups-except apply-macrointerface-specific physical-interface-filter instance-specific term |
|
| es_template |
name apply-groups apply-groups-except apply-macroattributes |
|
| ethernet-switching-type |
apply-groups apply-groups-except apply-macroport-mode interface-mode inter-switch-link reflective-relay vlan_choice_list vlan-auto-sense bridge-domain-type vlan-rewrite native-vlan-id isid_list core-facing filter policer storm-control recovery-timeout |
Ethernet switching family |
| export-af-obj |
apply-groups apply-groups-except apply-macroenable-disable unicast multicast flow |
|
| export_port_address_type |
apply-groups apply-groups-except apply-macroaddress gateway |
|
| export-subaf-obj |
apply-groups apply-groups-except apply-macroenable-disable rib-group |
|
| extension-list-type |
name apply-groups apply-groups-except apply-macrovalue |
Configure extension-list object |
| fate_sharing_links |
name to |
|
| fibre-channel-type |
apply-groups apply-groups-except apply-macroport-mode no-npiv fc-fabric native-fabric |
Fibre Channel switching family |
| fip-security-type |
apply-groups apply-groups-except apply-macrointerface fc-map examine-vn2vf examine-vn2vn |
|
| firewall_addr6_object |
name except |
|
| firewall_addr6_simple_object |
apply-groups apply-groups-except apply-macroaddress |
|
| firewall_addr_object |
name except |
|
| firewall_addr_simple_object |
apply-groups apply-groups-except apply-macroaddress |
|
| firewall_authentication_type |
apply-groups apply-groups-except apply-macroauth-type push-to-identity-management |
|
| firewall_flexible_match |
name apply-groups apply-groups-except apply-macromatch-start byte-offset bit-offset bit-length |
Define a flexible match |
| firewall_hierpolicer |
name sharing shared-bandwidth-policer filter-specific aggregate premium |
Define a hierarchical policer |
| firewall_load_balance_group |
name apply-groups apply-groups-except apply-macronext-hop-group |
Define group of destinations for load balancing |
| firewall_mac_addr_object |
name except |
|
| firewall_policer |
name apply-groups apply-groups-except apply-macrofilter-specific logical-interface-policer physical-interface-policer logical-bandwidth-policer shared-bandwidth-policer exceeding counter then aggregate |
Define a policer |
| firewall_prefix_list |
name except |
|
| flow-dep-traceoptions |
apply-groups apply-groups-except apply-macrofile flag |
|
| flow-filter-type |
name apply-groups apply-groups-except apply-macroprotocol source-prefix destination-prefix conn-tag logical-system source-port destination-port interface |
Flow filter settings |
| flow-interface-group |
group exclude |
|
| flow-prefix-with-offset |
prefix prefix-offset |
|
| flow-route-inet |
name apply-groups apply-groups-except apply-macrono-install match then |
|
| flow-route-inet6 |
name apply-groups apply-groups-except apply-macrono-install match then |
|
| flow-route-op |
apply-groups apply-groups-except apply-macrocommunity flow_op_action routing-instance sample mark next-term redirect_op_action |
|
| flow-route-qualifier-inet |
apply-groups apply-groups-except apply-macroprotocol port destination-port source-port tcp-flags packet-length dscp fragment destination source icmp-code icmp-type |
|
| flow-route-qualifier-inet6 |
apply-groups apply-groups-except apply-macroprotocol port destination-port source-port tcp-flags packet-length dscp fragment destination source icmp6-type icmp6-code flow-label |
|
| flow-rule-inet |
name apply-groups apply-groups-except apply-macrono-install match then |
|
| flow-rule-inet6 |
name apply-groups apply-groups-except apply-macrono-install match then |
|
| flow-rule-op |
apply-groups apply-groups-except apply-macroflow_op_action |
|
| flow-rule-qualifier-inet |
apply-groups apply-groups-except apply-macroprotocol port destination-port source-port destination source |
|
| flow-rule-qualifier-inet6 |
apply-groups apply-groups-except apply-macroprotocol port destination-port source-port destination source |
|
| flow-traceoptions-object |
apply-groups apply-groups-except apply-macrono-remote-trace file flag rate-limit packet-filter trace-level root-override |
Trace options for flow services |
| flow-validation |
apply-groups apply-groups-except apply-macrotraceoptions |
|
| forwarding-table-type |
apply-groups apply-groups-except apply-macroremnant-holdtime chain-composite-max-label-count krt-nexthop-ack-timeout srv6-chain-merge consistency-checking export dynamic-list-next-hop evpn-egress-link-protection egress-chaining evpn-aliasing-optimize ecmp-fast-reroute-choice indirect-next-hop-choice route-ack-converge-choice indirect-next-hop-change-acknowledgements-choice rib unicast-reverse-path ip-tunnel-rpf-check source-class destination-class transit-lsp-statistics-from-route chained-composite-next-hop fib-next-hop-split fib-agent channel |
Forwarding table management options |
| forward-only-to-rc-type |
apply-groups apply-groups-except apply-macrological-system routing-instance |
Forward DHCP packets without creating binding |
| fpc_type |
name apply-groups apply-groups-except apply-macropic |
|
| gtp-object |
apply-groups apply-groups-except apply-macroprofile traceoptions handover-default ip-group ie-set message-ie-profile-v1 grouped-ie-profile message-ie-profile-v2 message-list rate-limit apn-control apn-control-group |
|
| gvpn-ike-policy |
name apply-groups apply-groups-except apply-macromode description proposals pre-shared-key |
|
| gvpn-member |
apply-groups apply-groups-except apply-macroike ipsec |
|
| gvpn-member-ike |
apply-groups apply-groups-except apply-macrotraceoptions proposal policy gateway |
|
| gvpn-member-ike-proposal |
name apply-groups apply-groups-except apply-macrodescription authentication-method dh-group authentication-algorithm encryption-algorithm lifetime-seconds |
|
| gvpn-member-ipsec-vpn |
apply-groups apply-groups-except apply-macrovpn |
|
| gvpn-server |
apply-groups apply-groups-except apply-macrotraceoptions ike ipsec group |
|
| gvpn-server-cluster |
apply-groups apply-groups-except apply-macroserver-role ike-gateway retransmission-period |
Server-Cluster for group VPN |
| gvpn-server-group-ipsecsa |
name apply-groups apply-groups-except apply-macroproposal match-policy |
Configure a Group VPN group SA |
| gvpn-server-group-ipsecsa-match |
name apply-groups apply-groups-except apply-macrosource destination source-port destination-port protocol |
Configure a Group VPN group SA policy |
| gvpn-server-group-template |
name apply-groups apply-groups-except apply-macrodescription group-id member-threshold server-cluster ike-gateway activation-time-delay anti-replay-time-window server-member-communication ipsec-sa |
Configure a Group VPN group |
| gvpn-server-ike |
apply-groups apply-groups-except apply-macroproposal policy gateway |
|
| gvpn-server-ike-gateway |
name apply-groups apply-groups-except apply-macro |
Configure a set of IKE gateways |
| gvpn-server-ike-gateway-sc |
name apply-groups apply-groups-except apply-macro |
Configure a set of IKE gateways |
| gvpn-server-ike-proposal |
name apply-groups apply-groups-except apply-macrodescription authentication-method authentication-algorithm dh-group encryption-algorithm |
|
| gvpn-server-ipsec-proposal |
name apply-groups apply-groups-except apply-macrodescription authentication-algorithm encryption-algorithm lifetime-seconds |
|
| gvpn-server-ipsec-vpn |
apply-groups apply-groups-except apply-macroproposal |
|
| gvpn-server-member-communication |
apply-groups apply-groups-except apply-macrocommunication-type lifetime-seconds retransmission-period number-of-retransmission heartbeat encryption-algorithm sig-hash-algorithm certificate |
Group VPN Server to Member communication |
| gvpn-server-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag gateway-filter |
Group VPN server tracing options |
| hierarchical-policer-aggregate-bucket |
apply-groups apply-groups-except apply-macrohp-aggregate-exceeding then |
|
| hierarchical-policer-premium-bucket |
apply-groups apply-groups-except apply-macrohp-premium-exceeding then |
|
| host-inbound-protocols-object-type |
name apply-groups apply-groups-except apply-macroexcept |
Protocol type of incoming traffic to accept |
| host-object |
apply-groups apply-groups-except apply-macroipaddr port routing-instance log-tag |
|
| httpd_dvpn_traceoptions_type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for dynamic-vpn process |
| http-redirect-object |
apply-groups apply-groups-except apply-macroredirect-request redirect-response |
|
| icap-profile-object |
name apply-groups apply-groups-except apply-macroserver http fallback-option timeout |
|
| icap-redirect-fallback |
apply-groups apply-groups-except apply-macrotimeout connectivity default-action |
|
| icap-redirect-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
ICAP redirect traceoptions |
| icap-redir-server |
name apply-groups apply-groups-except apply-macroauthorization host port reqmod-uri respmod-uri routing-instance sockets tls-profile |
|
| identity-management-connection-type |
apply-groups apply-groups-except apply-macroconnect-method port primary secondary token-api query-api |
Identity management connection |
| identity-server-connection-type |
apply-groups apply-groups-except apply-macroaddress ca-certificate client-id client-secret source interface routing-instance |
Connection parameters per server |
| idpd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag level |
Trace options for idpd |
| idp-policy-type |
name rulebase-ips rulebase-exempt |
|
| ids-option-type |
name apply-groups apply-groups-except apply-macrodescription alarm-without-drop match-direction aggregation icmp ip tcp udp limit-session |
Configure screen object |
| ids-wlist-type |
name apply-groups apply-groups-except apply-macroaddress |
|
| ie-filter-object |
name apply-groups apply-groups-except apply-macroinstance |
|
| ike-policy |
name apply-groups apply-groups-except apply-macromode reauth-frequency description proposals certificate proposal-set pre-shared-key seeded-pre-shared-key |
|
| ike-proposal |
name apply-groups apply-groups-except apply-macrodescription authentication-method dh-group authentication-algorithm encryption-algorithm lifetime-seconds |
|
| ims-connection-type |
apply-groups apply-groups-except apply-macroconnect-method port primary secondary token-api query-api |
Identity management connection |
| ims-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Identity management tracing Options |
| inet6_dialer_filter |
name apply-groups apply-groups-except apply-macroaccounting-profile term |
Define an IPv6 dialer filter |
| inet6_filter |
name apply-groups apply-groups-except apply-macropromote accounting-profile interface-specific scale-optimized enhanced-mode interface-shared enhanced-mode-override physical-interface-filter fast-lookup-filter instance-shared instance-specific term |
Define an IPv6 firewall filter |
| inet6_fuf |
name apply-groups apply-groups-except apply-macrointerface-specific match-order term |
|
| inet6_next_hop_type |
name apply-groups apply-groups-except apply-macro |
Address of next hop through which to send sampled traffic |
| inet6_pm_family_output_type |
apply-groups apply-groups-except apply-macrointerface-or-next-hop-index policer forwarding-class no-filter-check ipv6-address routing-instance server-profile |
|
| inet6_pm_intf_type |
name apply-groups apply-groups-except apply-macronext-hop |
|
| inet6_pm_output-routing-instance-type |
name apply-groups apply-groups-except apply-macroipv6-address |
|
| inet6_service_filter |
name apply-groups apply-groups-except apply-macroterm |
|
| inet6_template |
name apply-groups apply-groups-except apply-macroattributes |
|
| inet_dialer_filter |
name apply-groups apply-groups-except apply-macroaccounting-profile term |
|
| inet_filter |
name apply-groups apply-groups-except apply-macropromote accounting-profile interface-specific scale-optimized physical-interface-filter enhanced-mode interface-shared enhanced-mode-override instance-shared instance-specific fast-lookup-filter term |
|
| inet_fuf |
name apply-groups apply-groups-except apply-macrointerface-specific match-order term |
|
| inet_next_hop_type |
name apply-groups apply-groups-except apply-macro |
Address of next hop through which to send sampled traffic |
| inet_pm_family_output_type |
apply-groups apply-groups-except apply-macrointerface-or-next-hop-index no-filter-check ip-address routing-instance server-profile policer forwarding-class |
|
| inet_pm_intf_type |
name apply-groups apply-groups-except apply-macronext-hop |
|
| inet_pm_output-routing-instance-type |
name apply-groups apply-groups-except apply-macroip-address |
|
| inet_pm_output_type |
apply-groups apply-groups-except apply-macroip-source-address ip-destination-address policer dscp forwarding-class |
|
| inet_service_filter |
name apply-groups apply-groups-except apply-macroterm |
|
| inet_simple_filter |
name apply-groups apply-groups-except apply-macrointerface-specific term |
|
| inet_template |
name apply-groups apply-groups-except apply-macroattributes |
|
| interface_host_inbound_traffic_t |
apply-groups apply-groups-except apply-macrosystem-services protocols |
|
| interface-policy |
name apply-groups apply-groups-except apply-macropolicy mark-interface |
Interface Name |
| interface_set_type |
name apply-groups apply-groups-except apply-macrointerface-list |
|
| interface-system-services-object-type |
name apply-groups apply-groups-except apply-macroexcept |
Type of incoming system-service traffic to accept |
| ip-mac-static |
name mac |
|
| ipsec_gvpn_addr_object |
apply-groups apply-groups-except apply-macroaddress |
|
| ipsec_gvpn_exclude_rule_object |
apply-groups apply-groups-except apply-macrorule |
|
| ipsec_gvpn_fail_open_rule_object |
apply-groups apply-groups-except apply-macrorule |
|
| ipsec-gvpn-member-template |
name apply-groups apply-groups-except apply-macroike-gateway group-vpn-external-interface group heartbeat-threshold match-direction tunnel-mtu recovery-probe df-bit fail-open exclude |
Configure a Group VPN |
| ipsec_gvpn_rule_address_object |
name apply-groups apply-groups-except apply-macrosource-address destination-address application |
|
| ipsec-internal-sa |
apply-groups apply-groups-except apply-macromanual |
|
| ipsec-policy |
name apply-groups apply-groups-except apply-macrodescription perfect-forward-secrecy proposals proposal-set |
|
| ipsec-proposal |
name apply-groups apply-groups-except apply-macroextended-sequence-number description protocol authentication-algorithm encryption-algorithm lifetime-seconds |
|
| ipsec-sa |
name apply-groups apply-groups-except apply-macrodescription mode sa_choice |
|
| ipsec-template-monitor |
apply-groups apply-groups-except apply-macrooptimized source-interface destination-ip verify-path |
Configure VPN monitoring |
| ipsec-template-proxy-id |
apply-groups apply-groups-except apply-macrolocal remote service |
Proxy identity settings |
| ipsec-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Data-plane IPSec tracing options |
| ipsec-vpn-monitor |
apply-groups apply-groups-except apply-macrointerval threshold |
Configure VPN monitoring |
| ipsec-vpn-template |
name apply-groups apply-groups-except apply-macroha-link-encryption bind-interface df-bit multi-sa copy-outer-dscp vpn-monitor negotiation traffic-selector establish-tunnels distribution-profile tunnel-mtu no-icmp-packet-too-big passive-mode-tunneling match-direction udp-encapsulate |
Configure an IPSec VPN |
| ipv6-mac-static |
name mac |
|
| jdhcp-access-security-type |
apply-groups apply-groups-except apply-macroslaac-snooping router-advertisement-guard |
Access security configuration |
| jdhcp-dual-stack-protocol-mstr-type |
addr-fam |
Select family as protocol master |
| jdhcp-duplicate-clients-in-subnet-type |
distinguish-with |
Allow duplicate clients in a subnet |
| jdhcp-interface-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Interface trace options for DHCP |
| jdhcp-local-server-type |
apply-groups apply-groups-except apply-macrotraceoptions interface-traceoptions dhcpv6 pool-match-order duplicate-clients-on-interface duplicate-clients-in-subnet forward-snooped-clients authentication liveness-detection reconfigure overrides dynamic-profile service-profile access-profile short-cycle-protection route-suppression group dual-stack-group lease-time-validation requested-ip-check no-snoop persistent-storage allow-leasequery remote-id-mismatch reauthenticate allow-bulk-leasequery allow-active-leasequery |
|
| jdhcp-proxy-client-type |
apply-groups apply-groups-except apply-macrodhcpv4-profiles dhcpv6-profiles traceoptions |
|
| jdhcp-relay-type |
apply-groups apply-groups-except apply-macrotraceoptions persistent-storage duplicate-clients-on-interface duplicate-clients-in-subnet interface-traceoptions dhcpv6 arp-inspection forward-snooped-clients authentication liveness-detection dynamic-profile service-profile access-profile short-cycle-protection overrides relay-option server-match relay-option-60 relay-option-82 forward-only description maximum-hop-count minimum-wait-time client-response-ttl source-ip-change forward-only-replies server-group active-server-group route-suppression group dual-stack-group no-snoop server-response-time lease-time-validation leasequery bulk-leasequery active-leasequery remote-id-mismatch |
Dynamic Host Configuration Protocol relay configuration |
| jdhcp-security-type |
apply-groups apply-groups-except apply-macrono-dhcp-snooping arp-inspection ip-source-guard no-dhcpv6-snooping neighbor-discovery-inspection ipv6-source-guard light-weight-dhcpv6-relay group option-82 dhcpv6-options |
DHCP access security configuration |
| jdhcp-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for DHCP |
| jdhcp-vendor-specific-type |
apply-groups apply-groups-except apply-macrohost-name location |
Add vendor-specific option processing |
| jflow_service_traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Traceoptions for jflow-service |
| jims-validator-type |
apply-groups apply-groups-except apply-macroaddress client-id client-secret port |
Web server from JIMS for Validate or group query request |
| jsf_application_traffic_control_rule_set_type |
apply-groups apply-groups-except apply-macrorule-set |
Define service application traffic rule-set reference |
| jsf_service_rule_set_type |
apply-groups apply-groups-except apply-macrorule-set |
Define service rule set reference |
| jsscd-access-profile-type |
apply-groups apply-groups-except apply-macroaccess-profile-name |
Access profile for static subscribers |
| jsscd-authentication-type |
apply-groups apply-groups-except apply-macropassword username-include |
Static Subscriber Client authentication |
| jsscd-dynamic-profile-type |
apply-groups apply-groups-except apply-macrodynamic-profile-name aggregate-clients |
Dynamic profile to use |
| jsscd-group-type |
name apply-groups apply-groups-except apply-macroservice-profile access-profile dynamic-profile authentication interface auto-login |
|
| jsscd-service-profile-type |
apply-groups apply-groups-except apply-macroservice-profile-name |
Service profile for static subscribers |
| jsscd-static-subscribers-type |
apply-groups apply-groups-except apply-macroaccess-profile dynamic-profile service-profile authentication group auto-login baseline-stats interface |
|
| juniper-bd-protocols-igmp-snooping |
apply-groups apply-groups-except apply-macrotraceoptions query-interval l2-querier query-response-interval query-last-member-interval robust-count learn-pim-router immediate-leave evpn-ssm-reports-only proxy interface pseudowire-remote-address vlan |
IGMP snooping options |
| juniper-bd-protocols-mld-snooping |
apply-groups apply-groups-except apply-macrotraceoptions query-interval l2-querier query-response-interval query-last-member-interval robust-count immediate-leave evpn-ssm-reports-only proxy interface pseudowire-remote-address vlan |
MLD snooping options |
| juniper-bridge-domains |
name apply-groups apply-groups-except apply-macrodescription domain-type vlan_choice isid-list vlan-id-scope-local service-id domain-id no-local-switching mcae-mac-synchronize mcae-mac-flush no-irb-layer-2-copy enable-mac-move-action interface routing-interface forwarding-options bridge-options protocols vxlan isolated-vlan community-vlans proxy-mac multicast-snooping-options |
Bridge domains |
| juniper-bridge-forwarding-options |
apply-groups apply-groups-except apply-macrofilter flood dhcp-relay dhcp-security |
|
| juniper-default-ri-protocols-igmp-snooping |
apply-groups apply-groups-except apply-macrovlan traceoptions query-interval query-response-interval query-last-member-interval robust-count immediate-leave evpn-ssm-reports-only proxy interface |
IGMP snooping options |
| juniper-default-ri-protocols-mld-snooping |
apply-groups apply-groups-except apply-macrovlan traceoptions query-interval query-response-interval query-last-member-interval robust-count immediate-leave evpn-ssm-reports-only proxy interface |
MLD snooping options |
| juniper-def-rtb-auto-import-as |
apply-groups apply-groups-except apply-macroimport-as |
|
| juniper-def-rtb-switch-options |
apply-groups apply-groups-except apply-macromac-table-size mac-ip-table-size interface-mac-limit interface-mac-ip-limit mac-notification mac-table-aging-time no-mac-learning no-normalization mac-statistics mib static-rvtep-mac service-id ovsdb-managed vtep-source-interface vtep-remote-interface interface remote-vtep-list interface-shutdown-action remote-vtep-v6-list route-distinguisher vrf-import vrf-export vrf-target redundant-trunk-group voip unknown-unicast-forwarding authentication-whitelist vstp-flooding-option arp-trap-option mstp-flooding-option stp-flooding-option |
Bridge option configuration |
| juniper-enhanced-category-type |
name apply-groups apply-groups-except apply-macroaction custom-message |
Juniper enhanced category type |
| juniper-enhanced-server |
apply-groups apply-groups-except apply-macrohost port proxy-profile routing-instance source-address |
Server handling categorization requests |
| juniper-enhanced-site-reputation-setting |
apply-groups apply-groups-except apply-macrovery-safe moderately-safe fairly-safe suspicious harmful |
Juniper enhanced site reputation settings |
| juniper-enhanced-type |
apply-groups apply-groups-except apply-macroprofile |
Juniper Enhanced |
| juniper-ethernet-switching-forwarding-options |
apply-groups apply-groups-except apply-macrofilter flood dhcp-relay dhcp-security fip-security |
|
| juniper-forwarding-options |
apply-groups apply-groups-except apply-macrostorm-control-profiles tunnels mirror-profile sampling-or-packet-capture monitoring accounting analyzer port-mirroring evpn-vxlan multicast-replication load-balance hash-key local-bias enhanced-hash-key next-hop sflow multicast packet-capture-telemetry rpf-loose-mode-discard l2circuit-control-passthrough explicit-null-cos helpers family next-hop-group dhcp-relay load-balance-label-capability-choice fast-reroute-priority ip-options-protocol-queue link-layer-broadcast-inet-check cut-through storm-control vrf-fallback mpls-tunnel-extend vxlan-disable-copy-tos-encap vxlan-disable-copy-tos-decap no-hierarchical-ecmp ipmc-miss-do-l2mc hyper-mode-choice ecmp-do-local-lookup access-security forwarding-sandbox vxlan-routing satellite |
|
| juniper-forwarding-sandbox-options |
name apply-groups apply-groups-except apply-macrosize port |
|
| juniper-forwarding-sandbox-port-options |
name apply-groups apply-groups-except apply-macrointerface |
|
| juniper-igmp-snooping-options |
apply-groups apply-groups-except apply-macrouse-p2mp-lsp snoop-pseudowires |
|
| juniper-local-type |
apply-groups apply-groups-except apply-macroprofile |
Juniper local |
| juniper-logical-system |
name apply-groups apply-groups-except apply-macrointerfaces protocols policy-options routing-instances routing-options forwarding-options system access access-profile firewall multicast-snooping-options services bridge-domains switch-options applications schedulers class-of-service security vlans |
Logical system configuration |
| juniper-mld-snooping-options |
apply-groups apply-groups-except apply-macrouse-p2mp-lsp snoop-pseudowires |
|
| juniper-monitoring-options |
name apply-groups apply-groups-except apply-macrofamily |
|
| juniper-multicast-snooping-options |
apply-groups apply-groups-except apply-macrooptions traceoptions forwarding-cache flood-groups host-outbound-traffic graceful-restart ignore-stp-topology-change multichassis-lag-replicate-state oism nexthop-hold-time |
|
| juniper-next-hop-group-options |
name apply-groups apply-groups-except apply-macrogroup-type interface next-hop-subgroup |
|
| juniper-next-hop-subgroup-options |
name apply-groups apply-groups-except apply-macrointerface |
|
| juniper-ospf-authentication |
apply-groups apply-groups-except apply-macroauthentication-type |
Authentication information |
| juniper-packet-accounting-options |
name apply-groups apply-groups-except apply-macrooutput |
|
| juniper-packet-capture-options |
apply-groups apply-groups-except apply-macroenable-disable file maximum-capture-size |
Packet capture options |
| juniper-policy-options |
apply-groups apply-groups-except apply-macrosatellite-policies prefix-list mac-list vsi-policy skip-then-actions route-filter-list source-address-filter-list policy-statement defaults tunnel-attribute community as-list as-list-group route-distinguisher as-path as-path-group damping condition rtf-prefix-list resolution-map application-maps redundancy-policy |
Define a redundancy policy |
| juniper-port-mirror-options |
apply-groups apply-groups-except apply-macrotraceoptions disable disable-all-instances mirror-once no-preserve-ingress-tag remote-port-mirroring input family instance |
|
| juniper-protocols |
apply-groups apply-groups-except apply-macrorouter-advertisement neighbor-discovery iccp ilmi lacp oam ancp bfd ptp centralized-timing clock-synchronization dot1x ospf ppp-service overlay vrrp pgm amt bgp bgpmcast connections dvmrp esis evpn express-segments igmp router-discovery isis isis-instance l2iw l2circuit l2vpn vpls ldp link-management mld mpls msdp mvpn ospf3 pim ripng rip rsvp sap source-packet-routing l2-learning dcbx lldp lldp-med igmp-snooping mld-snooping openflow pcep ppp pppoe r2cp sflow layer2-control rstp mstp vstp loop-detect protection-group mvrp ovsdb |
|
| juniper-protocols-amt |
apply-groups apply-groups-except apply-macrotraceoptions relay |
|
| juniper-protocols-amt-relay |
apply-groups apply-groups-except apply-macrofamily secret-key-timeout tunnel-limit unicast-stream-limit accounting tunnel-devices |
|
| juniper-protocols-ancp |
apply-groups apply-groups-except apply-macrotraceoptions qos-adjust pre-ietf-mode maximum-discovery-table-entries adjacency-timer maximum-helper-restart-time qos-adjust-adsl qos-adjust-adsl2 qos-adjust-adsl2-plus qos-adjust-vdsl qos-adjust-vdsl2 qos-adjust-sdsl qos-adjust-other gsmp-syn-wait gsmp-syn-timeout adjacency-loss-hold-time interfaces neighbor |
|
| juniper-protocols-bd |
apply-groups apply-groups-except apply-macromac-table-size mac-ip-table-size interface-mac-limit interface-mac-ip-limit mac-notification mac-table-aging-time no-mac-learning no-normalization mac-statistics mib static-rvtep-mac interface |
Bridging configuration |
| juniper-protocols-bgp |
apply-groups apply-groups-except apply-macropath-selection accept-prpd-connection advertise-from-main-vpn-tables stale-labels-holddown-period holddown-all-stale-labels egress-te-backup-paths sr-preference-override vpn-apply-export family egress-te advertise-prefix-sid accept-prefix-sid advertise-srgb tcp-connect-port egress-te-sid-stats egress-te-set-segment group traffic-statistics-labeled-path source-packet-routing enable-disable precision-timers-choice snmp-options route-age-bgp-view prioritize-route-queueing traceoptions description metric-out multihop route-server-client accept-remote-nexthop preference local-preference local-address local-interface forwarding-context hold-time minimum-hold-time passive advertise-inactive advertise-peer-as-choice advertise-external keep rfc6514-compliant-safi129 no-aggregator-id mtu-discovery enforce-first-as out-delay ttl log-updown damping import nlri bgp-error-tolerance authentication-key authentication-algorithm tcpao-handling-with-digest-mismatch authentication-key-chain export remove-private cluster no-client-reflect peer-as local-as ipsec-sa graceful-shutdown shutdown unconfigured-peer-graceful-restart graceful-restart include-mp-next-hop disable-4byte-as idle-after-switch-over outbound-route-filter message-batching multipath tcp-mss bgp-identifier tcp-aggressive-transmission bmp advertise-bgp-static add-path-display-ipv4-address bfd-liveness-detection output-queue-priority multipath-build-priority send-addpath-optimization defaults |
|
| juniper-protocols-bgpmcast |
apply-groups apply-groups-except apply-macrotraceoptions |
BGP Multicast configuration |
| juniper-protocols-bridge |
apply-groups apply-groups-except apply-macrotraceoptions global-mac-move global-mac-table-aging-time global-mac-ip-table-aging-time global-mode global-le-aging-time global-le-bridge-domain-aging-time mclag-arpreq-sync global-mac-pinning-discard-notification-interval global-ctx-limit global-mac-limit global-mac-ip-limit global-mac-statistics global-static-mac-move-drop-log decapsulate-accept-inner-vlan destination-udp-port source-udp-port disable-vxlan-multicast-transit global-no-mac-learning global-no-hw-mac-learning global-no-control-mac-aging mclag-arp-nd-sync no-mclag-ifa-sync crb-proxy-mac |
|
| juniper-protocols-dot1x |
apply-groups apply-groups-except apply-macrotraceoptions ssl-certificate-path authenticator |
|
| juniper-protocols-esis |
apply-groups apply-groups-except apply-macroenable-disable traceoptions preference graceful-restart interface |
|
| juniper-protocols-evi-options |
apply-groups apply-groups-except apply-macroisid |
|
| juniper-protocols-evpn-interconnect |
apply-groups apply-groups-except apply-macrovrf-import vrf-export vrf-target route-distinguisher esi interconnected-vni-list |
Interconnect configuration for the routing instance |
| juniper-protocols-isis |
apply-groups apply-groups-except apply-macrointerface source-packet-routing srm6 level interface-group spf-options traceoptions backup-spf-options context-identifier traffic-engineering label-switched-path enable-disable export import reference-bandwidth layer2-map-choice job-stats lsp-lifetime max-lsp-size max-hello-size max-snp-size spf-delay authentication-key authentication-type loose-authentication-check max-areas no-authentication-check no-ipv4-routing no-ipv6-routing clns-routing clns-updown-compatibility no-adjacency-holddown multicast-topology ignore-attached-bit rib-group strict-dual-isis topologies overload graceful-restart |
|
| juniper-protocols-l2control |
apply-groups apply-groups-except apply-macrotraceoptions nonstop-bridging options bpdu-block mac-rewrite |
|
| juniper-protocols-l2vpn |
apply-groups apply-groups-except apply-macrobum-hashing enable-mac-move-action mac-pinning mac-table-size mac-ip-table-size interface-mac-limit interface-mac-ip-limit mac-notification mac-table-aging-time no-mac-learning no-normalization mac-statistics mib static-rvtep-mac interface site neighbor mesh-group proxy-mac mclag service-type designated-forwarder-election-hold-time designated-forwarder-preference-least encapsulation default-gateway duplicate-mac-detection extended-attributes evi-options p2mp-bud-support remote-ip-host-routes pbb-evpn-core label-allocation evpn-etree assisted-replication vrf-target interconnect pmsi-tunnel-endpoint pmsi-tunnel-endpoint-inet6 normalization smet-etag-carry-vid irb-symmetric-routing ip-prefix-routes igmp-id multicast-mode oism flexible-cross-connect-type auto-service-id hot-standby-on group vni-options traceoptions encapsulation-type control-word no-control-word site-range label-block-size tunnel-services-choice community vpls-id mtu ignore-mtu-mismatch mac-flush ignore-encapsulation-mismatch pseudowire-status-tlv flow-label-transmit flow-label-receive flow-label-transmit-static flow-label-receive-static associate-profile connectivity-type import-labeled-routes oam multi-homing |
Layer 2 VPN, VPLS or EVPN configuration |
| juniper-protocols-ldp |
apply-groups apply-groups-except apply-macrotraceoptions traffic-statistics graceful-restart auto-targeted-session preference no-forwarding rib-group rib-group6 l2-smart-policy track-igp-metric strict-targeted-hellos longest-match color-import-policy import export egress-policy dod-request-policy next-hop mtu-discovery-choice deaggregate-choice explicit-null label-withdrawal-delay make-before-break transport-address keepalive-interval keepalive-timeout interface neighbor session session-group session-protection igp-synchronization log-updown policing entropy-label oam targeted-hello p2mp sr-mapping-client upstream-label-assignment family transport-preference dual-transport |
|
| juniper-protocols-lmp |
apply-groups apply-groups-except apply-macrote-link peer traceoptions |
|
| juniper-protocols-mpls |
apply-groups apply-groups-except apply-macrolsp-external-controller path-mtu diffserv-te auto-policing statistics p2mp-lsp log-updown optimize-adaptive-teardown traffic-engineering admin-groups advertisement-hold-time rsvp-error-hold-time optimize-aggressive smart-optimize-timer optimize-switchover-delay no-propagate-ttl sensor-based-stats explicit-null icmp-tunneling revert-timer optimize-hold-dead-delay cspf-backoff-time expand-loose-hop mib-mpls-show-p2mp bandwidth admin-group admin-group-extended priority setup-priority reservation-priority oam class-of-service no-decrement-ttl hop-limit no-cspf admin-down optimize-timer preference record-choice standby exclude-srlg ultimate-hop-popping sync-active-path-bandwidth cross-credibility-cspf label-switched-path deselect-on-bandwidth-failure track-igp-metric container-label-switched-path transit-lsp-association path constituent-list abstract-hop egress-protection label-range enable-disable label-history traceoptions ipv6-tunneling interface static-label-switched-path |
Multiprotocol Label Switching options |
| juniper-protocols-mpls-interface |
name apply-groups apply-groups-except apply-macroenable-disable srlg always-mark-connection-protection-tlv switch-away-lsps admin-group admin-group-extended static |
|
| juniper-protocols-msdp |
apply-groups apply-groups-except apply-macrodata-encapsulation rib-group active-source-limit enable-disable export import local-address traceoptions peer keep-alive hold-time sa-hold-time source group |
|
| juniper-protocols-mstp |
apply-groups apply-groups-except apply-macroenable-disable bpdu-destination-mac-address configuration-name revision-level max-hops max-age hello-time forward-delay system-identifier traceoptions bridge-priority backup-bridge-priority bpdu-block-on-edge vpls-flush-on-topology-change priority-hold-time system-id interface msti |
|
| juniper-protocols-mvpn |
apply-groups apply-groups-except apply-macrotraceoptions autodiscovery-only family sender-receiver-site-choice unicast-umh-election static-umh cmcast-joins-limit-inet cmcast-joins-limit-inet6 mvpn-mode route-target mvpn-join-load-balance install-discard sender-based-rpf hot-root-standby hierarchical-nexthop no-nexthop-sharing-for-selective-tunnel inter-region-template source-redundancy umh-selection-additional-input |
BGP-MVPN configuration |
| juniper-protocols-mvrp |
apply-groups apply-groups-except apply-macrotraceoptions join-timer leave-timer leaveall-timer no-dynamic-vlan no-attribute-length-in-pdu bpdu-destination-mac-address interface |
MVRP Configuration |
| juniper-protocols-openflow |
apply-groups apply-groups-except apply-macroswitch traceoptions |
|
| juniper-protocols-ospf |
apply-groups apply-groups-except apply-macrotopology backup-spf-options traffic-engineering source-packet-routing area enable-disable traceoptions spf-options prefix-export-limit rib-groups job-stats overload database-protection graceful-restart route-type-community domain-id domain_vpn_tag_or_disable preference external-preference labeled-preference export import reference-bandwidth lsa-refresh-interval spf-delay no-rfc-1583 forwarding-address-to-broadcast nssa-abr-option sham-link |
|
| juniper-protocols-ospf3 |
realm apply-groups apply-groups-except apply-macrotopology backup-spf-options traffic-engineering source-packet-routing area enable-disable traceoptions spf-options prefix-export-limit rib-groups job-stats overload database-protection graceful-restart route-type-community domain-id domain_vpn_tag_or_disable preference external-preference labeled-preference export import reference-bandwidth lsa-refresh-interval spf-delay no-rfc-1583 forwarding-address-to-broadcast nssa-abr-option sham-link |
|
| juniper-protocols-overlayd |
apply-groups apply-groups-except apply-macrotraceoptions |
|
| juniper-protocols-pgm |
apply-groups apply-groups-except apply-macrotraceoptions |
|
| juniper-protocols-pim |
apply-groups apply-groups-except apply-macrofamily enable-disable nonstop-routing traceoptions dense-groups vpn-tunnel-source vpn-group-address tunnel-devices rpf-selection mvpn rib-group import export mldp-inband-signalling rpf-vector assert-timeout assert-robust-count join-prune-timeout spt-threshold sglimit rp passive interface mdt graceful-restart join-load-balance standby-path-creation-delay idle-standby-path-switchover-delay dr-election-on-p2p no-wildcard-register-stop nexthop-hold-time mpls-internet-multicast join-make-before-break reset-tracking-bit propagation-delay override-interval default-vpn-source |
|
| juniper-protocols-pim-snooping |
apply-groups apply-groups-except apply-macrotraceoptions no-dr-flood vlan |
PIM snooping options |
| juniper-protocols-protection-group |
apply-groups apply-groups-except apply-macroethernet-aps traceoptions restore-interval guard-interval hold-interval ethernet-ring |
|
| juniper-protocols-protection-group-eaps |
apply-groups apply-groups-except apply-macroprofile |
|
| juniper-protocols-protection-group-eaps-profile |
name apply-groups apply-groups-except apply-macroprotocol revert-time hold-time local-request |
Ethernet APS profile |
| juniper-protocols-protection-group-ethernet-ring |
name apply-groups apply-groups-except apply-macronode-id ring-protection-link-owner level restore-interval guard-interval hold-interval non-revertive wait-to-block-interval major-ring-name propagate-tc compatibility-version ring-id non-vc-mode dot1p-priority east-interface west-interface control-vlan data-channel |
Ethernet Ring protection group configuration |
| juniper-protocols-rip |
apply-groups apply-groups-except apply-macrotraceoptions rib-group metric-in send receive check-zero-choice message-size import holddown route-timeout update-interval authentication authentication-key group graceful-restart |
|
| juniper-protocols-ripng |
apply-groups apply-groups-except apply-macrotraceoptions metric-in send receive import holddown route-timeout update-interval group graceful-restart |
|
| juniper-protocols-router-discovery |
apply-groups apply-groups-except apply-macroenable-disable traceoptions interface address |
|
| juniper-protocols-rsvp |
apply-groups apply-groups-except apply-macroenable-disable graceful-restart tunnel-services no-p2mp-sublsp no-node-id-subobject no-interface-hello pop-and-forward hello-acknowledgements no-hello-acknowledgements node-hello no-node-hello allow-bidirectional local-reversion no-local-reversion rfc6510-lsp-attributes fast-reroute load-balance traceoptions refresh-time keep-multiplier graceful-deletion-timeout setup-protection no-p2mp-re-merge cross-credibility-cspf preemption authentication-key no-authentication-check associated-bidirectional-lsp no-enhanced-frr-bypass expand-flood-reflector-hop interface peer-interface lsp-set |
RSVP options |
| juniper-protocols-stp |
apply-groups apply-groups-except apply-macroenable-disable bpdu-destination-mac-address bridge-priority backup-bridge-priority max-age hello-time forward-delay system-identifier traceoptions vpls-flush-on-topology-change priority-hold-time system-id interface extended-system-id force-version bpdu-block-on-edge |
|
| juniper-protocols-vgd |
apply-groups apply-groups-except apply-macrotraceoptions interfaces controller copy-ovsdatabase-to-backup-ram |
|
| juniper-protocols-vlan |
apply-groups apply-groups-except apply-macromac-table-size mac-ip-table-size interface-mac-limit interface-mac-ip-limit mac-move-limit mac-table-aging-time no-mac-learning no-normalization mac-statistics static-rvtep-mac interface traceoptions |
VLANs switch-options configuration |
| juniper-protocols-vni-options |
apply-groups apply-groups-except apply-macrovni |
|
| juniper-protocols-vstp |
apply-groups apply-groups-except apply-macroenable-disable force-version bpdu-block-on-edge vpls-flush-on-topology-change priority-hold-time system-id interface vlan vlan-group |
|
| juniper-ri-protocols-bfd |
apply-groups apply-groups-except apply-macrosbfd |
|
| juniper-ri-protocols-igmp-snooping |
apply-groups apply-groups-except apply-macrotraceoptions query-interval l2-querier query-response-interval query-last-member-interval robust-count learn-pim-router immediate-leave evpn-ssm-reports-only proxy interface pseudowire-remote-address qualified-vlan vlan |
IGMP snooping options |
| juniper-ri-protocols-mld-snooping |
apply-groups apply-groups-except apply-macrotraceoptions query-interval l2-querier query-response-interval query-last-member-interval robust-count immediate-leave evpn-ssm-reports-only proxy interface pseudowire-remote-address qualified-vlan vlan |
MLD snooping options |
| juniper-routing-instance |
name apply-groups apply-groups-except apply-macroinstance-type l2vpn-id routing-options egress-protection protocols description vlan-model vtep-source-interface vtep-remote-interface remote-vtep-list remote-vtep-v6-list instance-role vlan_choice system access access-profile routing-interface vxlan l3-interface no-local-switching no-normalization qualified-bum-pruning-mode no-irb-layer-2-copy connector-id-advertise forwarding-options bridge-domains switch-options pbb-options service-groups layer3-domain-identifier l2-domain-id-for-l3 forwarding-instance service-type interface route-distinguisher vrf-import vrf-export vrf-target no-vrf-advertise non-forwarding-vrf vrf-advertise-selective vrf-table-label vrf-propagate-ttl-or-no-vrf-propagate-ttl provider-tunnel multicast-snooping-options igmp-snooping-options mld-snooping-options vlans |
Routing instance |
| juniper-routing-instance-pbb-options |
apply-groups apply-groups-except apply-macropeer-instance vlan-id default-bvlan |
PBB options for the routing instance |
| juniper-routing-instance-service-groups |
name apply-groups apply-groups-except apply-macroservice-type pbb-service-options |
Service-groups configuration |
| juniper-routing-instance-switch-options |
apply-groups apply-groups-except apply-macromac-table-size mac-ip-table-size interface-mac-limit interface-mac-ip-limit mac-notification mac-table-aging-time no-mac-learning no-normalization mac-statistics mib static-rvtep-mac service-id ovsdb-managed interface traceoptions voip unknown-unicast-forwarding authentication-whitelist vstp-flooding-option arp-trap-option mstp-flooding-option stp-flooding-option |
Bridge options for the routing instance |
| juniper-routing-options |
apply-groups apply-groups-except apply-macrorpm-tracking logical-system-mux auto-bandwidth backup-selection flex-algorithm source-packet-routing route-distinguisher-id rib label options resolution interface-routes loopback-strict-disable traceoptions topologies router-id autonomous-system confederation ipv6-router-id graceful-restart flow no-soft-core med-igp-update-interval bmp bgp-orf-cisco-mode highwatermark-log-interval time-averaged-watermark-interval ppm no-bfd-triggered-local-repair enable-sensors maximum-ecmp static martians aggregate generate maximum-paths-type maximum-prefixes multipath policy-multipath protect access access-internal bgp-static rib-groups route-record localized-fib instance-import instance-export auto-export transport-class dynamic-tunnels interface host-fast-reroute warm-standby nonstop-routing nonstop-routing-options nsr-phantom-holdtime srlg admin-groups-extended-range admin-groups-extended lsp-telemetry l3vpn-composite-nexthop source-routing forwarding-table fate-sharing multicast programmable-rpd validation |
|
| juniper-sampling-options |
apply-groups apply-groups-except apply-macroenable-disable traceoptions sample-once pre-rewrite-tos input output family instance jflow-service route-record |
|
| junos_hash_key |
apply-groups apply-groups-except apply-macrofamily resilient-hash-seed |
Select data used in the hash key |
| keepalives_type |
apply-groups apply-groups-except apply-macrointerval up-count down-count |
|
| layer2_pm_family_output_type |
apply-groups apply-groups-except apply-macrointerface-or-next-hop-index no-filter-check |
|
| layer2_pm_output-routing-instance-type |
name apply-groups apply-groups-except apply-macrovlan bridge-domain |
|
| ldp_filter_obj |
match-on policy |
Filter to apply to tracing |
| ldp-sync-obj |
apply-groups apply-groups-except apply-macroenable-disable hold-time |
|
| lmp_control_channel_type |
name apply-groups apply-groups-except apply-macroremote-address |
|
| local_auth_type |
apply-groups apply-groups-except apply-macropassword username-include |
Local authentication |
| logical-systems-group |
logical-systems |
|
| logical-system-type |
name apply-groups apply-groups-except apply-macromax-sessions |
Logical system name |
| log-object |
apply-groups apply-groups-except apply-macroexclude limit cache host message-rate-limit disable utc-timestamp mode event-rate format escape time-format rate-cap max-database-record report source transport facility-override local-log-tag local-category root-streaming stream file apply traceoptions profile |
Configure security log |
| log_type |
apply-groups apply-groups-except apply-macrosession-init session-close session-update sfw profile |
|
| lr_interfaces_type |
name apply-groups apply-groups-except apply-macrounit |
Physical interface |
| lsp_nh_obj |
name apply-groups apply-groups-except apply-macropreference metric |
|
| lsp-set-match-type |
apply-groups apply-groups-except apply-macrolsp-name lsp-regex p2mp-name p2mp-regex router-type |
|
| mac_addr_list_items |
name apply-groups apply-groups-except apply-macro |
|
| mac_list |
name apply-groups apply-groups-except apply-macropolicer |
MAC address |
| macro-data-type |
name value |
|
| macsec-trace-options |
apply-groups apply-groups-except apply-macrofile flag |
Trace options for MACSec Protocol |
| map-e-domain |
name apply-groups apply-groups-except apply-macroconfidentiality br-address end-user-prefix rule role version |
Configure a MAP-E domain |
| map-e-rule |
name apply-groups apply-groups-except apply-macrorule-type ipv4-prefix ipv6-prefix ea-bits-length psid-offset psid-len mtu-v6 v4-reassembly v6-reassembly disable-auto-route |
Configure a MAP-E rule |
| martian_type |
address choice-ident choice-value allow |
Invalid routes |
| match_flags_value |
apply-groups apply-groups-except apply-macrovalue mask-in-hex |
Define a vxlan flag |
| match_interface_object |
name |
|
| match_interface_object_oam |
name |
|
| match_interface_set_object |
name |
|
| match_L2_flexible_mask |
apply-groups apply-groups-except apply-macromatch-start byte-offset bit-offset bit-length mask-in-hex prefix flexible-mask-name |
Define a flexible match |
| match_L2_flexible_range |
apply-groups apply-groups-except apply-macromatch-start byte-offset bit-offset bit-length range_choice flexible-range-name |
Define a flexible match |
| match_L3_flexible_mask |
apply-groups apply-groups-except apply-macromatch-start byte-offset bit-offset bit-length mask-in-hex prefix flexible-mask-name |
Define a flexible match |
| match_L3_flexible_range |
apply-groups apply-groups-except apply-macromatch-start byte-offset bit-offset bit-length range_choice flexible-range-name |
Define a flexible match |
| match_mpls_flexible_mask |
apply-groups apply-groups-except apply-macromatch-start byte-offset bit-offset bit-length mask-in-hex prefix flexible-mask-name |
Define a flexible match |
| match_mpls_flexible_range |
apply-groups apply-groups-except apply-macromatch-start byte-offset bit-offset bit-length range_choice flexible-range-name |
Define a flexible match |
| match_simple_dscp_value |
apply-groups apply-groups-except apply-macrovalue_keyword |
|
| match_simple_payload_protocol_value |
apply-groups apply-groups-except apply-macrovalue_keyword |
|
| match_simple_port_value |
apply-groups apply-groups-except apply-macrovalue_keyword |
|
| match_simple_protocol_value |
apply-groups apply-groups-except apply-macrovalue_keyword |
|
| match_source_end_user_profile_value |
apply-groups apply-groups-except apply-macrosource-end-user-profile-name |
|
| message-object |
apply-groups apply-groups-except apply-macrov0 v1 v2 |
|
| metric_expression_type |
apply-groups apply-groups-except apply-macrometric metric2 |
|
| mime-list-type |
name apply-groups apply-groups-except apply-macrovalue |
Configure mime-list object |
| mirror-filter-type |
name apply-groups apply-groups-except apply-macroprotocol source-prefix destination-prefix source-port destination-port interface-in interface-out output |
Secuirty mirror filter settings |
| mirror-profile-attributes |
name apply-groups apply-groups-except apply-macroptp-packet-timestamp collector observation-domain-id |
Mirror profile attributes |
| mka-trace-options |
apply-groups apply-groups-except apply-macrofile flag |
Trace options for MKA protocol |
| monitor_export_intf_type |
name apply-groups apply-groups-except apply-macroengine-id engine-type input-interface-index output-interface-index source-address |
|
| monitoring_input_type |
apply-groups apply-groups-except apply-macrointerface |
|
| monitoring_output_type |
apply-groups apply-groups-except apply-macroexport-format destination-address destination-port source-address flow-active-timeout flow-inactive-timeout flow-export-destination cflowd interface |
|
| mpls_dialer_filter |
name apply-groups apply-groups-except apply-macroaccounting-profile term |
Define an MPLS DIALER filter |
| mpls_filter |
name apply-groups apply-groups-except apply-macroaccounting-profile fast-lookup-filter interface-specific physical-interface-filter instance-shared term |
Define an MPLS firewall filter |
| mpls_pm_family_output_type |
apply-groups apply-groups-except apply-macroserver-profile |
|
| mpls_template |
name apply-groups apply-groups-except apply-macroattributes |
|
| mrp-trace-options |
apply-groups apply-groups-except apply-macrofile flag |
Trace options for MMRP Protocol |
| mstp-interface |
name apply-groups apply-groups-except apply-macropriority cost mode edge access-trunk bpdu-timeout-action no-root-port disable |
|
| multicast_interface_options_type |
name apply-groups apply-groups-except apply-macromaximum-bandwidth enable-disable reverse-oif-mapping subscriber-leave-timer no-qos-adjust |
Multicast interface options |
| multi-chassis-protection-group-ifl |
name apply-groups apply-groups-except apply-macrointerface icl-down-delay |
|
| named-address-book-type |
name apply-groups apply-groups-except apply-macrodescription address address-set attach |
Configure global address book |
| nat-object |
apply-groups apply-groups-except apply-macrosource destination static proxy-arp proxy-ndp natv6v4 allow-overlapping-pools traceoptions pool ipv6-multicast-interfaces allow-overlapping-nat-pools rule port-forwarding rule-set |
Configure Network Address Translation |
| nat_pgcp_hint_list_object |
name |
NAT hints |
| nat_pool_object |
name apply-groups apply-groups-except apply-macropgcp address interface address-overload address-range port address-allocation mapping-timeout flow-timeout ei-mapping-timeout app-mapping-timeout limit-ports-per-address snmp-trap-thresholds |
|
| nat_rule_object |
name apply-groups apply-groups-except apply-macromatch-direction term |
|
| nat-rule-session-count-alarm-object |
apply-groups apply-groups-except apply-macroraise-threshold clear-threshold |
|
| netconf-object |
apply-groups apply-groups-except apply-macrouser-name password connection-retry-interval response-timeout response-timeout-count bulk-interval bulk-limit reconfigure-bulk-limit port |
|
| network_type |
name apply-groups apply-groups-except apply-macrodyn-tunnel-attribute-policy preference colors |
|
| next_hop_group_intf_type |
name apply-groups apply-groups-except apply-macronext-hop |
|
| next_hop_subgroup_intf_type |
name apply-groups apply-groups-except apply-macronext-hop |
|
| next_hop_type |
name apply-groups apply-groups-except apply-macro |
Address of next hop through which to send sampled traffic |
| output-routing-instance-type |
name apply-groups apply-groups-except apply-macroipaddr_or_vlan |
|
| override-local-server-type |
apply-groups apply-groups-except apply-macrointerface-client-limit no-arp bootp-support client-discover-match delay-offer process-inform include-option-82 delete-binding-on-renegotiation allow-no-end-option asymmetric-lease-time protocol-attributes dual-stack |
DHCP override processing |
| override-type |
apply-groups apply-groups-except apply-macrono-unicast-replies allow-snooped-clients-choice allow-no-end-option always-write-giaddr always-write-option-82 user-defined-option-82 layer2-unicast-replies trust-option-82 delay-authentication disable-relay no-bind-on-request interface-client-limit no-arp bootp-support dual-stack client-discover-match proxy-mode asymmetric-lease-time replace-ip-source-with send-release-on-delete apply-secondary-as-giaddr relay-source delete-binding-on-renegotiation |
DHCP override processing |
| p2mp_ldp_lsp_nh_obj |
apply-groups apply-groups-except apply-macroroot-address |
|
| packet_accounting_output_type |
apply-groups apply-groups-except apply-macroaggregate-export-interval flow-inactive-timeout flow-active-timeout cflowd interface |
|
| packet-capture-egress-intf-type |
apply-groups apply-groups-except apply-macrointerface |
|
| packet_export_inline |
apply-groups apply-groups-except apply-macrosource-address flow-export-rate |
|
| packet_export_inline_instance |
apply-groups apply-groups-except apply-macrosource-address flow-export-rate |
|
| packet_export_intf_type |
name apply-groups apply-groups-except apply-macroengine-id engine-type source-address export-port |
|
| pccd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for PCCD |
| peer-group |
name apply-groups apply-groups-except apply-macrolocal-ip-addr session-establishment-hold-time redundancy-group-id-list backup-liveness-detection liveness-detection authentication-key |
|
| periodic_oam |
apply-groups apply-groups-except apply-macrompls-tp-mode bfd-port bfd-liveness-detection performance-monitoring lsp-ping-interval lsp-ping-multiplier traceoptions |
|
| persistent-nat-object |
apply-groups apply-groups-except apply-macropermit address-mapping inactivity-timeout max-session-number |
|
| pf_mapping |
name apply-groups apply-groups-except apply-macrodestined-port |
|
| pic_type |
name apply-groups apply-groups-except apply-macrothread-id |
|
| pim_bootstrap_options_type |
apply-groups apply-groups-except apply-macropriority import export |
|
| pim_filter_obj |
match-on policy |
Filter to apply to tracing |
| pim_rp_group_range_type |
name apply-groups apply-groups-except apply-macronexthop-hold-time |
|
| pm_family_input_type |
apply-groups apply-groups-except apply-macrorate run-length maximum-packet-length |
Input options for port mirroring |
| pm-rspan-bridge-domain |
name apply-groups apply-groups-except apply-macro |
RSPAN bridge-domain for pm |
| pm-rspan-vlan |
name apply-groups apply-groups-except apply-macrono-tag |
RSPAN vlan for pm |
| policy-object-type |
apply-groups apply-groups-except apply-macrotraceoptions policy global policy-set default-policy policy-rematch policy-stats pre-id-default-policy unified-policy dns-cache stateful-firewall-rule stateful-firewall-rule-set |
|
| policy_type |
name apply-groups apply-groups-except apply-macrodescription match then scheduler-name report-skip |
|
| port-extend-type |
name apply-groups apply-groups-except apply-macrofilter port-group-uplink mirror-ingress mirror-egress |
|
| port-range |
name maximum-port |
Port ranges |
| pppoe_options_type |
apply-groups apply-groups-except apply-macrounderlying-interface idle-timeout access-concentrator service-name auto-reconnect pppoe-mode ppp-max-payload |
|
| pppoe-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag filter |
Trace options for PPPoE process |
| pppoe_underlying_options_type |
apply-groups apply-groups-except apply-macroaccess-concentrator direct-connect duplicate-protection dynamic-profile max-sessions max-sessions-vsa-ignore service-name-table short-cycle-protection |
|
| ppp_options_type |
apply-groups apply-groups-except apply-macrodynamic-profile chap pap authentication compression lcp-restart-timer ncp-restart-timer no-termination-request loopback-clear-timer lcp-max-conf-req ncp-max-conf-req on-demand-ip-address aaa-options initiate-ncp mru mtu peer-ip-address-optional ipcp-suggest-dns-option ignore-magic-number-mismatch local-authentication lcp-connection-update |
|
| ppp-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for PPP process |
| prefix_action |
name apply-groups apply-groups-except apply-macropolicer count filter-specific subnet-prefix-length source_or_dest |
|
| prefix_list_items |
name apply-groups apply-groups-except apply-macro |
|
| profile-setting |
name apply-groups apply-groups-except apply-macroanti-virus content-filtering web-filtering anti-spam traffic-options |
UTM policy settings |
| programmable-rpd-type |
apply-groups apply-groups-except apply-macrotraceoptions purge-timeout client rib-service |
|
| proto-object |
name apply-groups apply-groups-except apply-macrotunable-name |
|
| qualified_nh_obj |
name apply-groups apply-groups-except apply-macropreference metric interface mac-address tag bfd-liveness-detection |
|
| r2cp-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for R2CP process |
| ragw-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
|
| range-address-type |
name apply-groups apply-groups-except apply-macroto |
Range address |
| rate-limit-object |
apply-groups apply-groups-except apply-macroalarm-threshold drop-threshold message |
|
| reconfigure-trigger-type |
apply-groups apply-groups-except apply-macroradius-disconnect |
DHCP reconfigure trigger |
| reconfigure-type |
apply-groups apply-groups-except apply-macroclear-on-abort attempts timeout token trigger support-option-pd-exclude |
DHCP reconfigure processing |
| relay-active-leasequery-v4-type |
apply-groups apply-groups-except apply-macrotopology-discover peer-address timeout idle-timeout |
Configure active leasequery |
| relay-active-leasequery-v6-type |
apply-groups apply-groups-except apply-macrotopology-discover timeout idle-timeout peer-address |
Configure active leasequery |
| relay-bulk-leasequery-v4-type |
apply-groups apply-groups-except apply-macroattempts timeout |
Configure bulk leasequery |
| relay-bulk-leasequery-v6-type |
apply-groups apply-groups-except apply-macroattempts timeout trigger |
Configure bulk leasequery |
| relay-leasequery-type |
apply-groups apply-groups-except apply-macroattempts timeout |
Configure leasequery |
| relay-option-60-match-group |
apply-groups apply-groups-except apply-macroascii hexadecimal |
|
| relay-option-60-match-top |
apply-groups apply-groups-except apply-macroascii hexadecimal |
|
| relay-option-60-type-group |
apply-groups apply-groups-except apply-macrovendor-option |
DHCP option-60 processing |
| relay-option-60-type-top |
apply-groups apply-groups-except apply-macrovendor-option |
DHCP option-60 processing |
| relay-option-82-type |
apply-groups apply-groups-except apply-macrocircuit-id remote-id server-id-override link-selection exclude-relay-agent-identifier vendor-specific |
DHCP option-82 processing |
| relay-v4-option-ascii-hex |
apply-groups apply-groups-except apply-macroascii hexadecimal |
|
| relay-v6-option-ascii-hex |
apply-groups apply-groups-except apply-macroascii hexadecimal |
|
| remote-access-client-config |
name apply-groups apply-groups-except apply-macroconnection-mode biometric-authentication windows-logon no-dead-peer-detection dead-peer-detection no-tcp-encap no-eap-tls certificate |
|
| remote-access-profile-config |
name apply-groups apply-groups-except apply-macrodescription ipsec-vpn access-profile client-config |
|
| remote-access-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
|
| rib_aggregate_type |
apply-groups apply-groups-except apply-macrodefaults route |
|
| rib_group_inet_type |
ribgroup-name |
Routing table group |
| rib_group_type |
apply-groups apply-groups-except apply-macroinet-old-style inet inet3 inet6 inet63 |
|
| rib-inet3 |
apply-groups apply-groups-except apply-macroinet.3 |
|
| rib_static_metric_type |
metric-value type |
|
| rip_filter_obj |
match-on policy |
Filter to apply to tracing |
| route_filter_list_items |
address choice-ident choice-value apply-groups apply-groups-except apply-macrolabel get-route-range metric metric2 metric3 metric4 tag tag2 preference preference2 color color2 local-preference priority prefix-segment label-allocation add-path validation-state origin aigp-originate aigp-adjust community tunnel-attribute damping aggregate-bandwidth limit-bandwidth no-entropy-label-capability as-path-prepend as-path-expand next-hop install-nexthop trace external load-balance no-route-localize install-to-fib-choice analyze class destination-class source-class forwarding-class map-to-interface ssm-source p2mp-lsp-root cos-next-hop-map dynamic-tunnel-attributes tunnel-end-point-address selected-mldp-egress mhop-bfd-port no-backup default-action next accept_reject bgp-output-queue-priority multipath-resolve source-routing-path-template label-allocation-fallback-reject resolution-map ignore-service-label request-long-lived-ack send-withdrawal-on-route-change |
|
| route_record_traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Traceoptions for sampling route record |
| rpd_rib_group_type |
name apply-groups apply-groups-except apply-macroexport-rib import-rib import-policy |
Routing table group |
| rpm-next-hop |
name apply-groups apply-groups-except apply-macrorpm-probe |
|
| rtf_prefix_list_items |
name apply-groups apply-groups-except apply-macro |
|
| sampling_family_inet6_output_type |
apply-groups apply-groups-except apply-macroaggregate-export-interval flow-inactive-timeout flow-active-timeout flow-server interface inline-jflow extension-service |
Configure output options for packet sampling |
| sampling_family_input_type |
apply-groups apply-groups-except apply-macrorate run-length max-packets-per-second maximum-packet-length |
Configure input options for packet sampling |
| sampling_global_mpls_output_type |
apply-groups apply-groups-except apply-macroaggregate-export-interval flow-inactive-timeout flow-active-timeout flow-server interface |
Configure output options for packet sampling |
| sampling_input_type |
apply-groups apply-groups-except apply-macrorate run-length max-packets-per-second maximum-packet-length family |
Configure input options for packet sampling |
| sampling_instance_bridge_output_type |
apply-groups apply-groups-except apply-macroflow-server inline-jflow |
Configure output options for packet sampling |
| sampling_instance_inet6_output_type |
apply-groups apply-groups-except apply-macroaggregate-export-interval flow-inactive-timeout flow-active-timeout flow-server interface inline-jflow extension-service |
Configure output options for packet sampling |
| sampling_instance_inet_global_output_type |
apply-groups apply-groups-except apply-macroaggregate-export-interval flow-inactive-timeout flow-active-timeout file port-mirroring flow-server interface inline-jflow extension-service |
Configure output options for packet sampling |
| sampling_instance_inet_output_type |
apply-groups apply-groups-except apply-macroaggregate-export-interval flow-inactive-timeout flow-active-timeout flow-server interface inline-jflow extension-service |
Configure output options for packet sampling |
| sampling_instance_input_type |
apply-groups apply-groups-except apply-macrorate run-length max-packets-per-second maximum-packet-length |
Configure input options for packet sampling |
| sampling_instance_mpls_output_type |
apply-groups apply-groups-except apply-macroaggregate-export-interval flow-inactive-timeout flow-active-timeout flow-server interface inline-jflow |
Configure output options for packet sampling |
| sampling_instance_vpls_output_type |
apply-groups apply-groups-except apply-macroflow-server inline-jflow |
Configure output options for packet sampling |
| sampling_output_type |
apply-groups apply-groups-except apply-macroaggregate-export-interval flow-inactive-timeout flow-active-timeout file port-mirroring flow-server interface inline-jflow extension-service |
Configure output options for packet sampling |
| sampling_traceoptions_type |
apply-groups apply-groups-except apply-macrono-remote-trace file |
Configure packet sampling traceoptions |
| satellite-pic-port-attr |
name apply-groups apply-groups-except apply-macrochannel-speed |
|
| satellite-pic-type |
name apply-groups apply-groups-except apply-macroport port-range |
|
| satellite-policy-options |
apply-groups apply-groups-except apply-macroextended-ports-template port-group-alias chassis-group-alias extended-ports-policy candidate-uplink-port-policy environment-monitoring-policy forwarding-policy |
|
| sbl-type |
apply-groups apply-groups-except apply-macroprofile |
SBL type |
| scheduler_object_type |
name apply-groups apply-groups-except apply-macrodescription start-date daily sunday monday tuesday wednesday thursday friday saturday |
|
| sctp-object |
apply-groups apply-groups-except apply-macroprofile multichunk-inspection nullpdu log traceoptions |
|
| secintel-category-disable |
name apply-groups apply-groups-except apply-macrodisable |
Security intelligence category |
| secintel-policy-setting |
name apply-groups apply-groups-except apply-macrodescription category-profiles |
Security intelligence policy setting |
| secintel-profile-rule |
name apply-groups apply-groups-except apply-macromatch then |
Security intelligence profile rule |
| secintel-profile-setting |
name apply-groups apply-groups-except apply-macrodescription category rule default-rule |
Security intelligence profile settings |
| secintel-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Security intelligence trace options |
| secure-wire-type |
name apply-groups apply-groups-except apply-macrointerface |
Secure-wire cross connection |
| security-association-manual |
apply-groups apply-groups-except apply-macrodirection |
|
| security-authentication-key-chains |
apply-groups apply-groups-except apply-macrokey-chain |
|
| security-dhcpv6-options-type |
apply-groups apply-groups-except apply-macrooption-37 option-18 option-16 option-79 |
Configure DHCPv6 options |
| security-distribution-profile |
name apply-groups apply-groups-except apply-macrodescription fpc |
|
| security-group-vpn |
apply-groups apply-groups-except apply-macromember server |
|
| security-ike |
apply-groups apply-groups-except apply-macrotraceoptions trap respond-bad-spi proposal policy gateway |
|
| security_intelligence_feeds |
apply-groups apply-groups-except apply-macroadd-source-ip-to-feed add-destination-ip-to-feed add-source-identity-to-feed add-destination-identity-to-feed |
Specify the feed post action |
| security-ipsec-policies |
apply-groups apply-groups-except apply-macrofrom-zone |
|
| security-ipsec-policy |
from-zone-name to-zone apply-groups apply-groups-except apply-macroipsec-group-vpn |
|
| security-ipsec-vpn |
apply-groups apply-groups-except apply-macrointernal traceoptions vpn-monitor-options proposal policy vpn security-association anti-replay-window-size |
|
| security-macsec |
apply-groups apply-groups-except apply-macrotraceoptions connectivity-association interfaces cluster-control-port cluster-data-port |
|
| security-option-82-type |
apply-groups apply-groups-except apply-macrocircuit-id remote-id vendor-id |
DHCP option-82 processing |
| security-pki |
apply-groups apply-groups-except apply-macroca-profile trusted-ca-group trap auto-re-enrollment traceoptions |
|
| security-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file rate-limit filter flag |
Trace options for key management process |
| security-zone-type |
name apply-groups apply-groups-except apply-macrodescription tcp-rst address-book screen host-inbound-traffic interfaces application-tracking source-identity-log advance-policy-based-routing-profile enable-reverse-reroute unidirectional-session-refreshing advanced-connection-tracking |
Security zone |
| server |
apply-groups apply-groups-except apply-macrohost port routing-instance source-address |
Server settings |
| server-active-leasequery-type |
apply-groups apply-groups-except apply-macrotimeout idle-timeout |
Allow active leasequery |
| server-bulk-leasequery-type |
apply-groups apply-groups-except apply-macromax-connections timeout max-empty-replies restricted-requestor |
Allow bulk leasequery |
| server-connection-type |
apply-groups apply-groups-except apply-macroaddress ca-certificate client-id client-secret |
Connection parameters per server |
| server-group-type |
apply-groups apply-groups-except apply-macroserver-group |
|
| server-leasequery-type |
apply-groups apply-groups-except apply-macrorestricted-requestor |
Allow leasequery |
| server-match-action-choice |
apply-groups apply-groups-except apply-macrov4-action-choice |
|
| server-match-v6-ascii-hex |
apply-groups apply-groups-except apply-macroascii hexadecimal |
|
| server-v6-option-ascii-hex |
apply-groups apply-groups-except apply-macroascii hexadecimal |
|
| service-device-object |
name apply-groups apply-groups-except apply-macroaddress access-domain provisioning-method dictionary |
|
| session_timeout_type |
apply-groups apply-groups-except apply-macrotcp udp ospf icmp icmp6 others |
|
| sfw_addr_object |
name except |
|
| sfw_match_object |
apply-groups apply-groups-except apply-macrosource-address destination-address destination-port source-address-range source-prefix-list destination-address-range destination-prefix-list applications application-sets application |
|
| slaacd-config-type |
apply-groups apply-groups-except apply-macrovlans interface link-local-expiry-interval traceoptions |
Slaacd configuration options |
| slaacd-interface |
name apply-groups apply-groups-except apply-macromark-interface max-allowed-contention auto-dad |
Interface name |
| sla_application_services_type |
apply-groups apply-groups-except apply-macroadvance-policy-based-routing-profile |
Application Services |
| sla_policy_type |
name apply-groups apply-groups-except apply-macrodescription match then scheduler-name |
|
| sm-ippool-pool |
name apply-groups apply-groups-except apply-macroservice-mode family ageing-window pool-prefetch-threshold pool-snmp-trap-threshold default-pool |
Address pool configuration |
| smpl-analyzer-egress-type |
apply-groups apply-groups-except apply-macrointerface routing-instance vlan bridge-domain |
|
| smpl-analyzer-ingress-type |
apply-groups apply-groups-except apply-macrointerface routing-instance vlan bridge-domain |
|
| smpl-analyzer-input-type |
apply-groups apply-groups-except apply-macrorate maximum-packet-length ingress egress |
|
| smpl-analyzer-output-type |
apply-groups apply-groups-except apply-macrointerface_or_vlan |
|
| smpl-analyzer-type |
name apply-groups apply-groups-except apply-macroinput output |
|
| softwire-option-type |
name apply-groups apply-groups-except apply-macrosoftwire-concentrator softwire-type ipv4-prefix v6rd-prefix mtu-v4 mtu-v6 auto-update-mtu copy-dscp flow-limit session-limit-per-prefix |
Configure softwire object |
| softwires-object |
apply-groups apply-groups-except apply-macrosoftwire-name softwire-types map-e traceoptions rule-set |
Configure softwire feature |
| sophos-scan-options |
apply-groups apply-groups-except apply-macrouri-check-choice content-size-limit timeout |
Anti-virus scan options |
| source_address_filter_list_items |
address choice-ident choice-value apply-groups apply-groups-except apply-macrometric metric2 metric3 metric4 tag tag2 preference preference2 color color2 local-preference priority prefix-segment label-allocation add-path validation-state origin aigp-originate aigp-adjust community tunnel-attribute damping aggregate-bandwidth limit-bandwidth no-entropy-label-capability as-path-prepend as-path-expand next-hop install-nexthop trace external load-balance no-route-localize install-to-fib-choice analyze class destination-class source-class forwarding-class map-to-interface ssm-source p2mp-lsp-root cos-next-hop-map dynamic-tunnel-attributes tunnel-end-point-address selected-mldp-egress mhop-bfd-port no-backup default-action next accept_reject bgp-output-queue-priority multipath-resolve source-routing-path-template label-allocation-fallback-reject resolution-map ignore-service-label request-long-lived-ack send-withdrawal-on-route-change |
|
| source-class-filters |
name apply-groups apply-groups-except apply-macrofamily |
|
| source-nat-pool-utilization-alarm-object |
apply-groups apply-groups-except apply-macroraise-threshold clear-threshold |
|
| springte_lsp_nh_obj |
apply-groups apply-groups-except apply-macronexthop lsp-source |
|
| spring-te-template-map |
name apply-groups apply-groups-except apply-macrocolors |
SPRING-TE template color map |
| src-nat-rule-object |
name apply-groups apply-groups-except apply-macrodescription src-nat-rule-match then |
|
| srd-ev-action-object |
apply-groups apply-groups-except apply-macromship-actions add-static-route delete-static-route |
Action to be taken on the occurence if defined events |
| srd-route-add-object |
name apply-groups apply-groups-except apply-macronext-hop-details routing-instance |
Route details |
| srd-route-delete-object |
name apply-groups apply-groups-except apply-macrorouting-instance |
Route details |
| ssg-destination-nat-object |
apply-groups apply-groups-except apply-macropool port-forwarding rule-set |
|
| ssg-interface-object |
name apply-groups apply-groups-except apply-macroaddress |
|
| ssg-proxy-arp-object |
apply-groups apply-groups-except apply-macrointerface |
|
| ssg-proxy-ndp-interface-object |
name apply-groups apply-groups-except apply-macroaddress |
|
| ssg-proxy-ndp-object |
apply-groups apply-groups-except apply-macrointerface |
|
| ssg-source-nat-object |
apply-groups apply-groups-except apply-macropersistent-nat pool address-persistent session-persistence-scan session-drop-hold-down pool-utilization-alarm port-randomization port-round-robin port-scaling-enlargement pool-distribution pool-default-port-range pool-default-twin-port-range interface rule-set |
|
| ssg-static-nat-object |
apply-groups apply-groups-except apply-macrorule-set |
|
| ssl-initiation-config |
apply-groups apply-groups-except apply-macroprofile |
|
| ssl-proxy-config |
apply-groups apply-groups-except apply-macroglobal-config profile |
|
| ssl-termination-config |
apply-groups apply-groups-except apply-macroprofile |
|
| ssl-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag packet-filter |
|
| static-nat-rule-mapped-port-object |
apply-groups apply-groups-except apply-macrolow to |
|
| static-nat-rule-object |
name apply-groups apply-groups-except apply-macrodescription static-nat-rule-match then |
|
| stp-interface |
name apply-groups apply-groups-except apply-macropriority cost mode edge access-trunk bpdu-timeout-action no-root-port disable |
|
| stp-trace-options |
apply-groups apply-groups-except apply-macrofile flag |
Trace options for Spanning Tree Protocol |
| subscription-type |
apply-groups apply-groups-except apply-macrolink-subscription ct0 ct1 ct2 ct3 priority |
|
| surf-control-integrated-category-type |
name apply-groups apply-groups-except apply-macroaction |
Surf control integrated category type |
| surf-control-integrated-type |
apply-groups apply-groups-except apply-macrocache server profile |
Surf control integrated |
| sw-rule-set-object |
name apply-groups apply-groups-except apply-macrorule match-direction |
|
| system-id-ip-map |
name apply-groups apply-groups-except apply-macroip-address |
|
| te-class-object |
traffic-class priority |
|
| tenant-system-type |
name apply-groups apply-groups-except apply-macromax-sessions |
Tenant name |
| term_object |
name alg protocol source-port destination-port icmp-type icmp-code icmp6-type icmp6-code rpc-program-number uuid inactivity-timeout |
|
| three-color-policer-action |
name apply-groups apply-groups-except apply-macrothen |
Action for three-color policer |
| three-color-policer-type |
name apply-groups apply-groups-except apply-macrofilter-specific logical-interface-policer physical-interface-policer shared-bandwidth-policer action rate-type-choice |
Three-color policer |
| time-format-object |
apply-groups apply-groups-except apply-macroyear millisecond |
|
| timingd-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for PTP stack and Servo |
| to_fabric_object |
apply-groups apply-groups-except apply-macroexcept |
Match traffic going to fabric |
| traffic-selector-term-object |
name apply-groups apply-groups-except apply-macrolocal-ip remote-ip protocol source-port destination-port |
Traffic Selector term details |
| tunable-object |
name apply-groups apply-groups-except apply-macrotunable-value |
|
| tunnel_end_point |
name apply-groups apply-groups-except apply-macrol3-protocol tunnel-protocol |
Define a tunnel end point |
| tunnel-inspection-profile-type |
name apply-groups apply-groups-except apply-macroinspection-type |
Configure tunnel-inspection profile |
| tunnel-inspection-vni-type |
name apply-groups apply-groups-except apply-macrovni-type |
VNI config |
| tunnel_type |
apply-groups apply-groups-except apply-macroipsec-vpn-choice pair-policy |
Tunnel packets |
| url-list-type |
name apply-groups apply-groups-except apply-macrovalue |
Configure url-list object |
| user-group-mapping-type |
apply-groups apply-groups-except apply-macroldap |
|
| usf-range-address-type |
name apply-groups apply-groups-except apply-macroto |
Range address |
| utm-apppxy-traceoptions |
apply-groups apply-groups-except apply-macroflag |
Traceoptions for utm application proxy process |
| utm-ipc-traceoptions |
apply-groups apply-groups-except apply-macroflag |
Traceoptions for utm IPC |
| utm-traceoptions |
apply-groups apply-groups-except apply-macroflag |
Trace options for utm process |
| v6-relay-option-cid-rid-action |
apply-groups apply-groups-except apply-macrostrict |
|
| v6-relay-option-interface-id-type |
apply-groups apply-groups-except apply-macroprefix use-interface-description use-vlan-id no-vlan-interface-name include-irb-and-l2 use-option-82 keep-incoming-interface-id |
Interface ID processing |
| v6-relay-option-remote-id-type |
apply-groups apply-groups-except apply-macroprefix use-interface-description use-vlan-id no-vlan-interface-name include-irb-and-l2 use-option-82 keep-incoming-remote-id |
Remote ID processing |
| v6-server-group-type |
apply-groups apply-groups-except apply-macroserver-group |
|
| vendor-object |
name apply-groups apply-groups-except apply-macroproduct-name |
|
| version9-template |
name apply-groups apply-groups-except apply-macroflow-active-timeout flow-inactive-timeout template-id option-template-id source-id nexthop-learning template-refresh-rate option-refresh-rate template-types tunnel-observation flow-key |
One or more version 9 templates for flow monitoring |
| vlan_map |
apply-groups apply-groups-except apply-macrooperation_choices tag-protocol-id inner-tag-protocol-id vlan-id inner-vlan-id |
IEEE 802.1q Virtual LAN (VLAN) Tag mapping |
| vlan-policy |
name apply-groups apply-groups-except apply-macropolicy |
Virtual LAN |
| vlan-slaacd |
name apply-groups apply-groups-except apply-macro |
Virtual LAN |
| vlan-types |
name apply-groups apply-groups-except apply-macrovlan-id vlan-id-list l3-interface description vlan-identifier-choice interface no-local-switching forwarding-options multicast-snooping-options switch-options domain-type no-irb-layer-2-copy service-id domain-id mcae-mac-synchronize proxy-mac mcae-mac-flush private-vlan isolated-vlan community-vlans vxlan |
Virtual LAN |
| vni-list-type |
name |
|
| vni-range-type |
name apply-groups apply-groups-except apply-macroto |
|
| vpls_filter |
name apply-groups apply-groups-except apply-macroaccounting-profile interface-specific physical-interface-filter instance-shared term |
Define an VPLS firewall filter |
| vrf-group-type |
name apply-groups apply-groups-except apply-macrovrf |
Configure vrf group object |
| vrrp-group |
name apply-groups apply-groups-except apply-macroaddress virtual-link-local-address priority preferred advertisement_type preempt_type accept_type authentication-type authentication-key track vrrp-inherit-from advertisements-threshold |
Virtual Router Redundancy Protocol group |
| vxlan-tunnel-type |
name apply-groups apply-groups-except apply-macropolicy-set vni |
Configure vxlan tunnel |
| webfilter-feature |
apply-groups apply-groups-except apply-macrosurf-control-integrated websense-redirect juniper-local juniper-enhanced |
Web-filtering feature settings |
| web-filtering-fallback-setting |
apply-groups apply-groups-except apply-macrodefault server-connectivity timeout too-many-requests |
Web-filtering fallback settings |
| web-filtering-traceoptions |
apply-groups apply-groups-except apply-macroflag |
Trace options for web-filtering feature |
| websense-type |
apply-groups apply-groups-except apply-macroprofile |
Websense redirect |
| wildcard-address-type |
name apply-groups apply-groups-except apply-macro |
Wildcard address and mask |
| write-option-82-type |
apply-groups apply-groups-except apply-macro |
|
| zone_host_inbound_traffic_t |
apply-groups apply-groups-except apply-macrosystem-services protocols |
|
| zone-interface-list-type |
name apply-groups apply-groups-except apply-macrohost-inbound-traffic |
Logical interfaces in this zone |
| zone-system-services-object-type |
name apply-groups apply-groups-except apply-macroexcept |
Type of incoming system-service traffic to accept |