module junos-qfx-rpc-ipsec {

    yang-version 1;

    namespace
      "http://yang.juniper.net/junos-qfx/rpc/ipsec";

    prefix ipsec;

    import junos-common-types {
      prefix jt;
      revision-date "2019-01-01";
    }

    organization "Juniper Networks, Inc.";

    contact "yang-support@juniper.net";

    description
      "Junos RPC YANG module for ipsec command(s)";

    revision "2019-01-01" {
      description "Junos: 21.3R1.9";
    }


    rpc get-certificates-information {
      status deprecated;
      description
        "Show IPSec digital certificate information";
      input {
        leaf level {
          type enumeration {
            enum "brief" {
              value 0;
              description
                "Display brief output";
            }
            enum "detail" {
              value 1;
              description
                "Display detailed output";
            }
          }
          default "brief";
        }

        leaf serial-number {
          type string {
            length "1 .. 255";
          }
          description
            "Serial number of certificate";
        }
      }

      output {
        choice output_c {
          leaf output {
            type string;
          }
          anyxml certificates-information;
          anyxml multi-routing-engine-results;
        }  // choice output_c
      }
    }  // rpc get-certificates-information

    rpc get-crl-information {
      description
        "Show IPSec digital certificate revocation lists";
      input {
        leaf level {
          type enumeration {
            enum "brief" {
              value 0;
              description
                "Display brief output";
            }
            enum "detail" {
              value 1;
              description
                "Display detailed output";
            }
          }
          default "brief";
        }

        leaf crl-name {
          type string {
            length "1 .. 255";
          }
          description "Name of CRL";
        }
      }

      output {
        choice output_c {
          leaf output {
            type string;
          }
          anyxml crl-information;
          anyxml multi-routing-engine-results;
        }  // choice output_c
      }
    }  // rpc get-crl-information

    rpc get-re-security-associations-information {
      description
        "Show IPSec security association information";
      input {
        leaf level {
          type enumeration {
            enum "brief" {
              value 0;
              description
                "Display brief output";
            }
            enum "detail" {
              value 1;
              description
                "Display detailed output";
            }
          }
          default "brief";
        }

        leaf sa-name {
          type string {
            length "1 .. 32";
          }
          description
            "Name of security association";
        }

        leaf hex {
          type empty;
          description
            "Display SPI in hexadecimal format";
        }
      }

      output {
        choice output_c {
          leaf output {
            type string;
          }
          anyxml security-associations-information;
          anyxml multi-routing-engine-results;
        }  // choice output_c
      }
    }  // rpc get-re-security-associations-information

    rpc get-ipsec-tunnel-redundancy-information {
      description
        "Show remote tunnel redundancy information";
      input {
        leaf security-association-name {
          type string;
          description
            "Name of security association";
        }
      }

      output {
        choice output_c {
          leaf output {
            type string;
          }
          anyxml ipsec-tunnel-redundancy-information;
          anyxml multi-routing-engine-results;
        }  // choice output_c
      }
    }  // rpc get-ipsec-tunnel-redundancy-information

    rpc get-ipsec-pic-redundancy-information {
      description
        "Show ES PIC redundancy information";
      input {
        leaf interface-name {
          type string;
          description "Name of ES interface";
        }
      }

      output {
        choice output_c {
          leaf output {
            type string;
          }
          anyxml ipsec-pic-redundancy-information;
          anyxml multi-routing-engine-results;
        }  // choice output_c
      }
    }  // rpc get-ipsec-pic-redundancy-information

    grouping command-forwarding {
      choice chassis-selector {
        leaf all-chassis {
          type empty;
          description "All chassis";
        }
        leaf all-lcc {
          type empty;
          description "All LCC chassis";
        }
        leaf scc {
          type empty;
          description "SCC";
        }
        leaf sfc {
          type union {
            type string {
              pattern "<.*>|$.*";
            }
            type uint32;
          }
          description "SFC";
        }
        leaf lcc {
          type union {
            type string {
              pattern "<.*>|$.*";
            }
            type uint32;
          }
          description "Specific LCC";
        }
        leaf node {
          type string;
          description "Specific node";
        }
        leaf bsys {
          type empty;
          description "Base system";
        }
        leaf gnf {
          type union {
            type string {
              pattern "<.*>|$.*";
            }
            type uint32 {
              range "1 .. 10";
            }
          }
          description
            "Specific guest network function";
        }
        leaf all-gnfs {
          type empty;
          description
            "All guest network functions";
        }
        leaf all-system {
          type empty;
          description
            "All system (BSYS and GNFs)";
        }
        leaf server {
          type union {
            type string {
              pattern "<.*>|$.*";
            }
            type uint32 {
              range "0 .. 1";
            }
          }
          description "Specific server slot";
        }
        leaf all-servers {
          type empty;
          description "All servers";
        }
        leaf vnf {
          type string;
          description
            "Specific virtual-network-function";
        }
        leaf all-vnfs {
          type empty;
          description
            "All virtual-network-functions";
        }
      }  // choice chassis-selector

      choice re-selector {
        leaf re0 {
          type empty;
          description "RE0";
        }
        leaf re1 {
          type empty;
          description "RE1";
        }
        leaf routing-engine {
          type enumeration {
            enum "local" {
              value 0;
              description
                "Local routing engine";
            }
            enum "other" {
              value 1;
              description
                "Other routing engine";
            }
            enum "master" {
              value 2;
              description
                "Master routing engine";
            }
            enum "backup" {
              value 3;
              description
                "Backup routing engine";
            }
            enum "both" {
              value 4;
              description
                "Both routing engines";
            }
          }
          description
            "Specific routing engine";
        }
      }  // choice re-selector

      choice lr-selector {
        leaf logical-system {
          type string;
          description
            "Name of logical system, or 'all'";
        }
      }  // choice lr-selector

      choice tenant-selector {
        leaf tenant {
          type string;
          description
            "Name of tenant, or 'all'";
        }
      }  // choice tenant-selector

      choice vc-selector {
        leaf local {
          type empty;
          description
            "Local virtual chassis member";
        }
        leaf all-members {
          type empty;
          description
            "All virtual chassis members";
        }
        leaf member {
          type union {
            type string {
              pattern "<.*>|$.*";
            }
            type uint32;
          }
          description
            "Specific virtual chassis member";
        }
      }  // choice vc-selector
    }  // grouping command-forwarding
  }  // module junos-qfx-rpc-ipsec