| apply-advanced |
apply-groups apply-groups-except apply-macro |
Apply advanced configuration logic |
| apply-macro-type |
name data |
Macro data for commit-script expansion |
| bgp-logical-system |
name apply-groups apply-groups-except apply-macrorouting-instances |
Logical systems configuration for rpm |
| bgp-routing-instances |
name apply-groups apply-groups-except apply-macro |
Routing-instance configuration for rpm |
| drop-policy6-term |
name apply-groups apply-groups-except apply-macrofrom |
One or more drop terms |
| drop-policy-term |
name apply-groups apply-groups-except apply-macrofrom |
One or more drop terms |
| family |
inet |
|
| ike-proposal |
name apply-groups apply-groups-except apply-macrodescription authentication-method dh-group authentication-algorithm encryption-algorithm lifetime-seconds |
|
| interface_type |
name apply-groups apply-groups-except apply-macroqueue-statistics-choice traffic-statistics-choice resource-profile |
Physical interface |
| ipsec-policy |
name apply-groups apply-groups-except apply-macrodescription perfect-forward-secrecy proposals proposal-set |
|
| ipsec-proposal |
name apply-groups apply-groups-except apply-macrodescription protocol authentication-algorithm encryption-algorithm lifetime-seconds |
|
| ipsec-services-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for key management process |
| ipsec_vpn_addr_object |
name |
|
| ipsec_vpn_match_object |
apply-groups apply-groups-except apply-macrosource-address destination-address ipsec-inside-interface |
|
| ipsec_vpn_rule_object |
name apply-groups apply-groups-except apply-macroterm match-direction |
|
| juniper-services-captive-portal |
apply-groups apply-groups-except apply-macroauthentication-profile-name traceoptions interface secure-authentication custom-options |
|
| li_policy_addr6_simple_object |
apply-groups apply-groups-except apply-macroaddress |
|
| li_policy_addr_simple_object |
apply-groups apply-groups-except apply-macroaddress |
|
| log-object |
apply-groups apply-groups-except apply-macroexclude limit cache |
Configure auditable security logs |
| macro-data-type |
name value |
|
| match_li_simple_dscp_value |
apply-groups apply-groups-except apply-macrovalue_keyword |
|
| match_li_simple_port_value |
apply-groups apply-groups-except apply-macrovalue_keyword |
|
| match_li_simple_protocol_value |
apply-groups apply-groups-except apply-macrovalue_keyword |
|
| monitor-threshold |
normal threshold |
|
| nat-object |
apply-groups apply-groups-except apply-macroipv6-multicast-interfaces port-forwarding |
Configure Network Address Translation |
| nat_pool_list_object |
name |
One or more nat pools |
| nat_pool_list_object_usf |
name |
One or more nat pools |
| output-plugin |
name apply-groups apply-groups-except apply-macroparameters |
|
| parameter-pair |
name apply-groups apply-groups-except apply-macrovalue |
|
| pcp-object |
apply-groups apply-groups-except apply-macrotraceoptions server rule rule-set |
Configure Port Control Protocol |
| pcp-rule-object |
name apply-groups apply-groups-except apply-macromatch-direction term match then |
|
| pcp-server-object |
name apply-groups apply-groups-except apply-macroipv4-address ipv6-address softwire-concentrator softwire-concentrator-name mapping-lifetime-minimum mapping-lifetime-maximum short-lifetime-error long-lifetime-error max-mappings-per-client pcp-options nat-options nat-option |
|
| pf_mapping |
name apply-groups apply-groups-except apply-macrodestined-port |
|
| rmopd-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag |
Trace options for remote-monitoring |
| service_device_pool_object |
name apply-groups apply-groups-except apply-macrointerface |
|
| service_interface_pool_object |
name apply-groups apply-groups-except apply-macrointerface |
|
| service_set_ipsec_vpn_options_object |
apply-groups apply-groups-except apply-macrotrusted-ca local-gateway ike-access-profile passive-mode-tunneling clear-dont-fragment-bit copy-dont-fragment-bit set-dont-fragment-bit tunnel-mtu no-anti-replay anti-replay-window-size udp-encapsulate no-nat-traversal nat-keepalive no-certificate-chain-in-ike |
|
| services-group |
services |
|
| services-ike |
apply-groups apply-groups-except apply-macroproposal policy |
|
| services-ipsec |
apply-groups apply-groups-except apply-macroproposal policy |
|
| sfw_addr_object |
name except |
|
| sfw_match_object |
apply-groups apply-groups-except apply-macrosource-address destination-address destination-port source-address-range source-prefix-list destination-address-range destination-prefix-list applications application-sets application |
|
| sfw_rule_object |
name apply-groups apply-groups-except apply-macromatch-direction term |
|
| ssl-initiation-config |
apply-groups apply-groups-except apply-macroprofile |
|
| ssl-proxy-config |
apply-groups apply-groups-except apply-macroglobal-config profile |
|
| ssl-termination-config |
apply-groups apply-groups-except apply-macroprofile |
|
| ssl-traceoptions |
apply-groups apply-groups-except apply-macrono-remote-trace file level flag packet-filter |
|
| svc-ike-policy |
name apply-groups apply-groups-except apply-macrodescription mode version proposals local-id certificate-policy-oids local-certificate peer-certificate-type remote-id pre-shared-key respond-bad-spi |
|
| tunnel_interface_type |
name apply-groups apply-groups-except apply-macro |
One or more tunnel interfaces on which to configure flow-tap service |
| twamp-authentication-key-chain |
name apply-groups apply-groups-except apply-macrokey-id |
|
| version9-template |
name apply-groups apply-groups-except apply-macroflow-active-timeout flow-inactive-timeout template-id option-template-id source-id nexthop-learning template-refresh-rate option-refresh-rate template-types tunnel-observation flow-key |
One or more version 9 templates for flow monitoring |
| version-ipfix-template |
name apply-groups apply-groups-except apply-macroflow-active-timeout flow-inactive-timeout template-id option-template-id observation-domain-id nexthop-learning template-refresh-rate option-refresh-rate template-types tunnel-observation flow-key |
One or more version-ipfix templates for flow monitoring |