| apply-advanced |
apply-groups apply-groups-except apply-macro |
Apply advanced configuration logic |
| apply-macro-type |
name data |
Macro data for commit-script expansion |
| arp-interface-type |
name apply-groups apply-groups-except apply-macroaging-timer |
Logical interface on which to configure ARP aging timer |
| authentication-object |
apply-groups apply-groups-except apply-macroplain-text-password-value encrypted-password no-public-keys ssh-rsa ssh-dsa ssh-ecdsa ssh-ed25519 |
Authentication method |
| authentication-type |
apply-groups apply-groups-except apply-macropassword username-include |
DHCP authentication |
| auto_configure_authentication_type |
apply-groups apply-groups-except apply-macropacket-types password username-include |
Autoconf VLAN authentication |
| auto_configure_oob_packet_types |
name |
|
| auto_configure_packet_types |
name |
|
| auto_configure_vlan_type |
apply-groups apply-groups-except apply-macrostacked-vlan-ranges vlan-ranges agent-circuit-identifier line-identity remove-when-no-subscribers |
|
| autoconf_traceoptions_type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for autoconfiguration |
| bbe-smgd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for enhanced session management daemon |
| bbe-smg-upd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for enhanced session management daemon |
| bbe-stats-type |
apply-groups apply-groups-except apply-macro |
Bbe statistics configuration |
| bdbrepd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for Database replication |
| bdbrepd-type |
apply-groups apply-groups-except apply-macrotraceoptions |
Database replication configuration |
| classification-types |
apply-groups apply-groups-except apply-macromac-address circuit-id remote-id |
Different mechanisms to identify a single household |
| commit_scripts_file_type |
name apply-groups apply-groups-except apply-macrooptional source cert-file routing-instance refresh refresh-from checksum |
|
| daemon-process |
name enable-disable failover command |
|
| datapath-traced-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for DATAPATH-TRACED |
| ddos-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for DDOS process |
| dhcp-arp-nud-liveness-detection-type |
apply-groups apply-groups-except apply-macrotransmit-interval max-consecutive-retries |
Address Resolution detection options |
| dhcp-bfd-liveness-detection-type |
apply-groups apply-groups-except apply-macroversion minimum-interval minimum-transmit-interval minimum-receive-interval multiplier adaptation-choice transmit-interval detection-time session-mode holddown-interval |
Bidirectional Forwarding Detection (BFD) options |
| dhcp-liveness-detection-dualstack-type |
apply-groups apply-groups-except apply-macrofailure-action method |
DHCP client liveness detection processing |
| dhcp-liveness-detection-failure-action-type |
apply-groups apply-groups-except apply-macrofailure-action-type |
Liveness detection failure action options |
| dhcp-liveness-detection-type |
apply-groups apply-groups-except apply-macrofailure-action method |
DHCP client liveness detection processing |
| dhcp-local-server-dual-stack-group |
name apply-groups apply-groups-except apply-macroauthentication access-profile dynamic-profile service-profile on-demand-address-allocation classification-key dual-stack-interface-client-limit protocol-master liveness-detection reauthenticate short-cycle-protection |
DHCP dual stack groups |
| dhcp-local-server-group |
name apply-groups apply-groups-except apply-macroauthentication liveness-detection reconfigure overrides dynamic-profile service-profile access-profile short-cycle-protection route-suppression interface lease-time-validation remote-id-mismatch reauthenticate |
DHCP groups |
| dhcp-remote-id-mismatch-type |
apply-groups apply-groups-except apply-macrodisconnect |
DHCP client remote-id-mismatch processing |
| dhcp-route-suppression-type |
apply-groups apply-groups-except apply-macrodhcp-route-suppression-choice |
|
| dhcp-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for DHCP server |
| dhcpv4-filter-option |
apply-groups apply-groups-except apply-macrodelay-time based-on |
Generic DHCPv4 filter processing |
| dhcpv4-profile |
name apply-groups apply-groups-except apply-macropool-name lease-time retransmission-attempt retransmission-interval dead-server-retry-interval dhcp-server-selection-algorithm dead-server-successive-retry-attempt bind-interface servers |
DHCPv4 proxy client configuration |
| dhcpv6-authentication-type |
apply-groups apply-groups-except apply-macropassword username-include |
DHCPv6 authentication |
| dhcpv6-duplicate-clients-type |
distinguish-with |
Allow duplicate clients |
| dhcpv6-dynamic-server-group |
name apply-groups apply-groups-except apply-macroneighbor-discovery-router-advertisement overrides interface |
DHCP dynamic server groups |
| dhcpv6-dynamic-server-type |
apply-groups apply-groups-except apply-macrooverrides group |
|
| dhcpv6-filter-option |
apply-groups apply-groups-except apply-macrodelay-time based-on |
Generic DHCPv6 filter processing |
| dhcpv6-liveness-detection-type |
apply-groups apply-groups-except apply-macrofailure-action method |
DHCPv6 client liveness detection processing |
| dhcpv6-local-server-group |
name apply-groups apply-groups-except apply-macroauthentication liveness-detection reconfigure dynamic-profile service-profile access-profile short-cycle-protection overrides route-suppression interface lease-time-validation remote-id-mismatch reauthenticate |
DHCP groups |
| dhcpv6-local-server-type |
apply-groups apply-groups-except apply-macroauthentication liveness-detection reconfigure dynamic-profile forward-snooped-clients service-profile access-profile short-cycle-protection overrides route-suppression group lease-time-validation requested-ip-check no-snoop persistent-storage server-duid-type remote-id-mismatch reauthenticate allow-leasequery allow-bulk-leasequery allow-active-leasequery duplicate-clients dynamic-server |
|
| dhcpv6-override-dynamic-server-type |
apply-groups apply-groups-except apply-macrointerface-client-limit rapid-commit process-inform delegated-pool ia-na-pool |
DHCP override processing |
| dhcpv6-override-local-server-type |
apply-groups apply-groups-except apply-macrointerface-client-limit rapid-commit client-negotiation-match process-inform delay-advertise delegated-pool multi-address-embedded-option-response always-process-option-request-option delete-binding-on-renegotiation top-level-status-code always-add-option-dns-server asymmetric-lease-time asymmetric-prefix-lease-time protocol-attributes dual-stack |
DHCP override processing |
| dhcpv6-profile |
name apply-groups apply-groups-except apply-macropool-name lease-time retransmission-attempt retransmission-interval bind-interface |
DHCPv6 proxy client configuration |
| dhcpv6-reconfigure-type |
apply-groups apply-groups-except apply-macrostrict clear-on-abort attempts timeout token trigger support-option-pd-exclude |
DHCPv6 reconfigure processing |
| dhcpv6-route-suppression-type |
access access-internal |
Suppress access-internal and/or access route addition |
| dual-stack-authentication-type |
apply-groups apply-groups-except apply-macropassword username-include |
DHCP dual stack authentication |
| duid-type |
apply-groups apply-groups-except apply-macroduid_ll |
|
| dynamic-profile-option-object |
apply-groups apply-groups-except apply-macroversioning |
|
| dynamic-profile-type |
apply-groups apply-groups-except apply-macrodynamic-profile dynamic-profile-type-choice |
Dynamic profile to use |
| fibtd-trace-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
|
| httpd_traceoptions_type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for Web management process |
| jdhcp-dual-stack-protocol-mstr-type |
addr-fam |
Select family as protocol master |
| jdhcp-duplicate-clients-in-subnet-type |
distinguish-with |
Allow duplicate clients in a subnet |
| jdhcp-interface-traceoptions-level-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Interface trace options for DHCP |
| jdhcp-interface-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Interface trace options for DHCP |
| jdhcp-local-server-type |
apply-groups apply-groups-except apply-macrotraceoptions interface-traceoptions dhcpv6 pool-match-order duplicate-clients-on-interface duplicate-clients-in-subnet forward-snooped-clients authentication liveness-detection reconfigure overrides dynamic-profile service-profile access-profile short-cycle-protection route-suppression group dual-stack-group lease-time-validation requested-ip-check no-snoop persistent-storage allow-leasequery remote-id-mismatch reauthenticate allow-bulk-leasequery allow-active-leasequery |
|
| jdhcp-proxy-client-type |
apply-groups apply-groups-except apply-macrodhcpv4-profiles dhcpv6-profiles traceoptions |
|
| jdhcp-traceoptions-level-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for DHCP |
| jdhcp-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for DHCP |
| jet_scripts_file_type |
name apply-groups apply-groups-except apply-macrochecksum arguments daemonize interpreter respawn-on-normal-exit username source cert-file routing-instance traceoptions refresh refresh-from |
|
| jkhmd-trace-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
|
| jsavald-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for process mac validation |
| jsscd-access-profile-type |
apply-groups apply-groups-except apply-macroaccess-profile-name |
Access profile for static subscribers |
| jsscd-authentication-type |
apply-groups apply-groups-except apply-macropassword username-include |
Static Subscriber Client authentication |
| jsscd-dynamic-profile-type |
apply-groups apply-groups-except apply-macrodynamic-profile-name aggregate-clients |
Dynamic profile to use |
| jsscd-group-type |
name apply-groups apply-groups-except apply-macroservice-profile access-profile dynamic-profile authentication interface auto-login |
|
| jsscd-service-profile-type |
apply-groups apply-groups-except apply-macroservice-profile-name |
Service profile for static subscribers |
| jsscd-static-subscribers-type |
apply-groups apply-groups-except apply-macroaccess-profile dynamic-profile service-profile authentication group auto-login baseline-stats interface |
|
| juniper-system |
apply-groups apply-groups-except apply-macrohost-name root-authentication commit configuration-database scripts login export-format autoinstallation services auto-snapshot unattended-boot jdos dgasp-int dgasp-usb domain-name domain-search no-hidden-commands statistics-timeout backup-router time-zone use-imported-time-zones regex-additive-logic switchover-on-routing-crash default-address-selection ndcpp-compliant nd-maxmcast-solicit nd-maxucast-retry nd-retransmit-timer nd-system-cache-limit arp-system-cache-limit arp-enhanced-scale no-arp-enhanced no-neighbor-learn no-multicast-echo extended-echo no-redirects no-redirects-ipv6 nd-override-preferred-src no-ping-record-route no-ping-time-stamp dump-device arp personality-file-list-of-directories saved-core-files saved-core-context-choice kernel-replication mirror-flash-on-disk icmp-rate-limit tcp-ack-rst-syn management-instance demux-options internet-options authentication-order location ports diag-port-authentication pic-console-authentication boot-loader-authentication name-server radius-server dynamic-profile-options tacplus-server password-options ldap-server radius-options tacplus-options accounting allow-v4mapped-packets allow-6pe-traceroute allow-l3vpn-traceroute-src-select allow-6vpe-traceroute-src-select donot-disable-ip6op-ondad schema tracing encrypt-configuration-files compress-configuration-files-choice max-configurations-on-flash max-configuration-rollbacks archival extensions license proxy kernel-options fips rng health-monitor packet-forwarding-options netlink-async-mode auto-configuration processes ddos-protection ntp monitor node-health-monitor fib-streaming access-line master-password memory password-recovery log-vital security-profile resiliency |
|
| kod-trace-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
|
| license-object |
apply-groups apply-groups-except apply-macrotraceoptions keys mode-selection |
License configuration for this router |
| location-type |
apply-groups apply-groups-except apply-macrocountry-code postal-code npa-nxx latitude longitude altitude lata vcoord hcoord building floor rack lcc |
|
| login-class-object |
name apply-groups apply-groups-except apply-macroallowed-days access-start access-end idle-timeout logical-system tenant login-alarms login-script login-tip no-scp-server no-sftp-server permissions allow-commands deny-commands allow-configuration deny-configuration allow-commands-regexps deny-commands-regexps allow-configuration-regexps deny-configuration-regexps configuration-breadcrumbs confirm-commands hidden-commands cli security-role satellite |
|
| login-user-object |
name apply-groups apply-groups-except apply-macrofull-name cli uid class authentication |
|
| macro-data-type |
name value |
|
| nameserver-object |
name routing-instance source-address |
|
| netconf-object |
apply-groups apply-groups-except apply-macrouser-name password connection-retry-interval response-timeout response-timeout-count bulk-interval bulk-limit reconfigure-bulk-limit port |
|
| op_scripts_file_type |
name apply-groups apply-groups-except apply-macrocommand dampen description source cert-file routing-instance allow-commands refresh refresh-from arguments checksum |
|
| override-local-server-type |
apply-groups apply-groups-except apply-macrointerface-client-limit no-arp bootp-support client-discover-match delay-offer process-inform include-option-82 delete-binding-on-renegotiation allow-no-end-option asymmetric-lease-time protocol-attributes dual-stack |
DHCP override processing |
| peers-type |
name apply-groups apply-groups-except apply-macrouser authentication routing-instance |
Commit peers-synchronize type |
| pmond-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for process health monitor |
| pppoe_underlying_options_type |
apply-groups apply-groups-except apply-macroaccess-concentrator direct-connect duplicate-protection dynamic-profile max-sessions max-sessions-vsa-ignore service-name-table short-cycle-protection |
|
| profile_type |
name apply-groups apply-groups-except apply-macroappfw-rule-set appfw-rule appfw-profile auth-entry policy policy-with-count scheduler address-book zone flow-session cpu flow-gate nat-source-pool nat-destination-pool nat-pat-address nat-nopat-address nat-pat-portnum nat-source-rule nat-destination-rule nat-static-rule nat-rule-referenced-prefix nat-cone-binding nat-port-ol-ipnumber nat-interface-port-ol dslite-softwire-initiator security-log-stream-number icap-redirect-profile advanced-anti-malware-policy security-metadata-streaming-policy secintel-policy user-auth-entry secure-wire vrf-group idp-policy vxlan tunnel-inspection root-logical-system logical-system tenant |
Set of attributes that define profile |
| proxy-object |
apply-groups apply-groups-except apply-macroserver port username password |
License download proxy server. |
| radius-server-object |
name apply-groups apply-groups-except apply-macrorouting-instance port preauthentication-port accounting-port dynamic-request-port secret preauthentication-secret timeout retry accounting-timeout accounting-retry max-outstanding-requests source-address |
|
| reconfigure-trigger-type |
apply-groups apply-groups-except apply-macroradius-disconnect |
DHCP reconfigure trigger |
| reconfigure-type |
apply-groups apply-groups-except apply-macroclear-on-abort attempts timeout token trigger support-option-pd-exclude |
DHCP reconfigure processing |
| res-cleanupd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for resource cleanup process |
| resource-monitor-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for Resource monitor |
| resource-monitor-type |
apply-groups apply-groups-except apply-macroresource-category traceoptions no-throttle no-load-throttle no-logging high-threshold high-cos-queue-threshold free-heap-memory-watermark free-nh-memory-watermark free-fw-memory-watermark subscribers-limit |
Resource monitor configuration |
| resources-type |
apply-groups apply-groups-except apply-macrocpu memory file |
|
| rsmon_fpc_type |
name apply-groups apply-groups-except apply-macropic limit |
|
| rsmon_pic_type |
name apply-groups apply-groups-except apply-macroport limit |
|
| rsmon_port_type |
name apply-groups apply-groups-except apply-macrolimit |
|
| sbc_traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
|
| scripts_type |
apply-groups apply-groups-except apply-macrocommit op translation load-scripts-from-flash language synchronize snmp |
|
| script_traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
|
| sdk-mgmtd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for App-engine management daemon |
| sdk-vmmd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
App-engine virtual machine management service trace options |
| server-active-leasequery-type |
apply-groups apply-groups-except apply-macrotimeout idle-timeout |
Allow active leasequery |
| server-bulk-leasequery-type |
apply-groups apply-groups-except apply-macromax-connections timeout max-empty-replies restricted-requestor |
Allow bulk leasequery |
| server-leasequery-type |
apply-groups apply-groups-except apply-macrorestricted-requestor |
Allow leasequery |
| server-v6-option-ascii-hex |
apply-groups apply-groups-except apply-macroascii hexadecimal |
|
| service-device-object |
name apply-groups apply-groups-except apply-macroaddress access-domain provisioning-method dictionary |
|
| smid-maintain-subscriber-type |
apply-groups apply-groups-except apply-macrointerface-delete |
Maintain subscriber options for subscriber management |
| smid-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for Subscriber management |
| smid-type |
apply-groups apply-groups-except apply-macrotraceoptions maintain-subscriber gres-route-flush-delay enforce-strict-scale-limit-license overrides enable mode redundancy interfaces location |
Subscriber management configuration |
| smihelperd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file flag |
Trace options for Subscriber management helper |
| smihelperd-type |
apply-groups apply-groups-except apply-macrotraceoptions |
Subscriber management helper configuration |
| snmp_scripts_file_type |
name apply-groups apply-groups-except apply-macrooid source cert-file routing-instance python-script-user refresh refresh-from checksum |
|
| ssd-traceoptions-type |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for SSD |
| system-group |
system |
|
| tacplus-server-object |
name apply-groups apply-groups-except apply-macroport secret timeout single-connection source-address |
|
| tty_port_object |
apply-groups apply-groups-except apply-macroauthentication-order log-out-on-disconnect port-type disable insecure speed type silent-with-modem |
RS-232 configuration |