3.2. Command Reference

• 3.2.1. cmd
  • cmd banner
    • Input Parameters
  • cmd reboot
    • Input Parameters
    • Output Data
  • cmd poweroff
    • Input Parameters
    • Output Data
  • cmd ping
    • Input Parameters
  • cmd traceroute
    • Input Parameters
  • cmd show-traffic
    • Input Parameters
  • cmd identify-port
    • Input Parameters
  • cmd system-image
    • Input Parameters
  • cmd license
    • Input Parameters
  • cmd troubleshooting-report
    • Input Parameters
  • cmd dns proxy clear-cache
    • Input Parameters
• 3.2.2. show
  • show interface
    • Input Parameters
  • show ipv4-routes
    • Input Parameters
  • show ipv6-routes
    • Input Parameters
  • show mpls table
    • Input Parameters
  • show bgp
    • Input Parameters
  • show ospf
    • Input Parameters
  • show rip
    • Input Parameters
  • show ospf6
    • Input Parameters
  • show ripng
    • Input Parameters
  • show mpls ldp
    • Input Parameters
  • show bfd
    • Input Parameters
  • show path-monitoring
    • Input Parameters
  • show log
    • Input Parameters
  • show ntp
    • Input Parameters
  • show dhcp-server
    • Input Parameters
  • show conntracks
    • Input Parameters
  • show ike
    • Input Parameters
• 3.2.3. flush
  • flush bgp
    • Input Parameters
  • flush ospf
    • Input Parameters
  • flush ospf6
    • Input Parameters
  • flush ike ike-sa
    • Input Parameters
  • flush ike child-sa
    • Input Parameters
• 3.2.4. system
  • hostname
  • cp-mask
  • timezone
  • date (state only)
  • troubleshooting-report (state only)
  • neighbor (deprecated)
    • ipv4-max-entries (deprecated)
    • ipv6-max-entries (deprecated)
  • conntrack (deprecated)
    • max-entries (deprecated)
    • tcp-timeout-close (deprecated)
    • tcp-timeout-close-wait (deprecated)
    • tcp-timeout-established (deprecated)
    • tcp-timeout-fin-wait (deprecated)
    • tcp-timeout-last-ack (deprecated)
    • tcp-timeout-max-retrans (deprecated)
    • tcp-timeout-syn-recv (deprecated)
    • tcp-timeout-syn-sent (deprecated)
    • tcp-timeout-time-wait (deprecated)
    • tcp-timeout-unacknowledged (deprecated)
    • udp-timeout (deprecated)
    • udp-timeout-stream (deprecated)
  • network-stack
    • icmp
      • ignore-icmp-echo-broadcast
      • rate-limit-icmp
      • rate-mask-icmp
    • ipv4
      • forwarding
      • send-redirects
      • accept-redirects
      • accept-source-route
      • log-invalid-addresses
    • ipv6
      • forwarding
      • accept-router-advert
      • accept-redirects
      • accept-source-route
      • use-temporary-addresses
    • neighbor
      • ipv4-max-entries
      • ipv6-max-entries
    • conntrack
      • max-entries
      • tcp-timeout-close
      • tcp-timeout-close-wait
      • tcp-timeout-established
      • tcp-timeout-fin-wait
      • tcp-timeout-last-ack
      • tcp-timeout-max-retrans
      • tcp-timeout-syn-recv
      • tcp-timeout-syn-sent
      • tcp-timeout-time-wait
      • tcp-timeout-unacknowledged
      • udp-timeout
      • udp-timeout-stream
  • installed-image (state only)
    • name (state only)
    • current (state only)
    • default (state only)
    • next (state only)
• 3.2.5. cloud-init
  • enabled
  • datasource (state only)
• 3.2.6. auth
  • user
    • role (mandatory)
    • password
    • authorized-key
• 3.2.7. aaa
  • tacacs
    • address (mandatory)
    • port
    • secret (mandatory)
    • timeout
• 3.2.8. vrf
• 3.2.9. ssh-server
  • enabled
  • address
  • port
• 3.2.10. dns
  • search
  • server
  • proxy
    • enabled
    • listen-to
    • forward
      • server
      • local
• 3.2.11. lldp
  • enabled
  • hello-timer
  • system-name
  • system-description
  • management-address
  • chassis-id (state only)
  • chassis-id-type (state only)
  • interface
    • enabled
    • counters (state only)
      • frame-in (state only)
      • frame-out (state only)
      • frame-discard (state only)
      • tlv-discard (state only)
    • neighbor (state only)
      • port-id (state only)
      • port-id-type (state only)
      • port-description (state only)
      • management-address (state only)
      • system-name (state only)
      • system-description (state only)
      • chassis-id (state only)
      • chassis-id-type (state only)
      • capability (state only)
        • enabled (state only)
  • counters (state only)
    • frame-in (state only)
    • frame-out (state only)
    • frame-discard (state only)
    • tlv-discard (state only)
    • tlv-accepted (state only)
    • entries-aged-out (state only)
• 3.2.12. kpi
  • enabled (deprecated)
  • service (deprecated)
  • interface
• 3.2.13. telegraf
  • enabled
  • interval
  • influxdb-output
    • database (mandatory)
    • username
    • password
    • insecure-skip-verify
• 3.2.14. tracker
  • bfd
    • type
    • source
    • address (mandatory)
    • interface
    • vrf (mandatory)
    • echo-mode
    • detection-multiplier
    • desired-transmission-interval
    • required-receive-interval
    • desired-echo-transmission-interval
    • discriminator (state only)
    • state (state only)
    • diagnostic (state only)
    • last-down-time (state only)
    • last-up-time (state only)
    • session-down-count (state only)
    • session-up-count (state only)
    • control-packet-input-count (state only)
    • control-packet-output-count (state only)
    • echo-packet-input-count (state only)
    • echo-packet-output-count (state only)
    • zebra-notification-count (state only)
    • remote (state only)
      • discriminator (state only)
      • diagnostic (state only)
      • multiplier (state only)
    • negociated (state only)
      • transmission-interval (state only)
      • receive-interval (state only)
      • echo-transmission-interval (state only)
  • icmp
    • address
    • vrf (mandatory)
    • source
    • interface
    • dhcp-interface
    • gateway
    • period
    • threshold
    • total
    • packet-size
    • packet-tos
    • timeout
    • state (state only)
    • diagnostic (state only)
• 3.2.15. nat
  • source-rule
    • description
    • protocol
      • not
      • VALUE (mandatory)
    • destination
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
    • source
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
    • outbound-interface
      • not
      • <string> (mandatory)
    • translate-to
      • map
      • output-address
      • address
        • VALUE (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
      • address-range
        • START (mandatory)
        • END (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
    • counters (state only)
      • packets (state only)
      • bytes (state only)
  • destination-rule
    • description
    • protocol
      • not
      • VALUE (mandatory)
    • destination
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
    • source
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
    • inbound-interface
      • not
      • <string> (mandatory)
    • translate-to
      • map
      • address
        • VALUE (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
      • address-range
        • START (mandatory)
        • END (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
    • counters (state only)
      • packets (state only)
      • bytes (state only)
• 3.2.16. ntp
  • enabled
  • ntp-source-address
  • auth-key
    • key-value
  • server
    • version
    • association-type
    • iburst
    • prefer
    • auth-key-id
    • stratum (state only)
    • root-delay (state only)
    • root-dispersion (state only)
    • offset (state only)
    • poll-interval (state only)
    • synchronized (state only)
    • state (state only)
• 3.2.17. firewall
  • ipv4 filter
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv4 mangle
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • postrouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv4 raw
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • notrack
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • notrack
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv4 address group
    • address
  • ipv4 network group
    • network
  • ipv6 filter
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv6 mangle
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • postrouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv6 raw
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • notrack
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • notrack
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv6 address group
    • address
  • ipv6 network group
    • network
• 3.2.18. network-port (state only)
  • pci-bus-addr (state only)
  • vendor (state only)
  • model (state only)
  • device-port (state only)
  • mac-address (state only)
• 3.2.19. interface
  • bridge
    • mtu
    • promiscuous
    • description
    • enabled
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ethernet
      • mac-address
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • link-interface
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • gre
    • mtu
    • promiscuous
    • description
    • enabled
    • local (mandatory)
    • remote (mandatory)
    • ttl
    • tos
    • link-interface
    • link-vrf
    • checksum
    • sequence-number
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
    • key
      • input
      • output
      • both
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • ipip
    • mtu
    • promiscuous
    • description
    • enabled
    • local (mandatory)
    • remote (mandatory)
    • ttl
    • tos
    • link-interface
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • lag
    • mtu
    • promiscuous
    • description
    • enabled
    • mode (mandatory)
    • xmit-hash-policy
    • lacp-rate
    • mii-link-monitoring
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ethernet
      • mac-address
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • link-interface
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • loopback
    • mtu
    • promiscuous
    • description
    • enabled
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • ethernet
      • mac-address
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • physical
    • port (mandatory)
    • mtu
    • promiscuous
    • description
    • enabled
    • rx-cp-protection
    • tx-cp-protection
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • ethernet
      • mac-address
      • auto-negotiate
      • duplex-mode
      • port-speed
      • flow-control-rx
      • flow-control-tx
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • scheduler (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • core (state only)
          • pq (state only)
            • nb-queue (state only)
            • queue (state only)
              • size (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • xmit-packets (state only)
                • drop-queue-full (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • queue (state only)
              • size (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • xmit-packets (state only)
                • drop-queue-full (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • svti
    • mtu
    • promiscuous
    • description
    • enabled
    • svti-id (mandatory)
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • link-interface (state only)
    • ethernet
      • mac-address
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • system-loopback (state only)
    • mtu (state only)
    • promiscuous (state only)
    • description (state only)
    • enabled (state only)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-lease-time (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • request (state only)
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
        • status (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • router (state only)
        • state (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • veth
    • mtu
    • promiscuous
    • description
    • enabled
    • link-interface (mandatory)
    • link-vrf (mandatory)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • ethernet
      • mac-address
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • vlan
    • mtu
    • promiscuous
    • description
    • enabled
    • vlan-id (mandatory)
    • link-interface (mandatory)
    • protocol
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ethernet
      • mac-address
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • vxlan
    • mtu
    • promiscuous
    • description
    • enabled
    • vni (mandatory)
    • group
    • local
    • ttl
    • tos
    • link-interface
    • link-vrf
    • learning
    • gbp
    • dst
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ethernet
      • mac-address
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • src-range
      • <uint16>
      • <uint16>
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • xvrf
    • mtu
    • promiscuous
    • description
    • enabled
    • link-interface (mandatory)
    • link-vrf (mandatory)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
• 3.2.20. qos
  • class-mask (config only)
  • policer (config only)
    • description (config only)
    • bandwidth (config only) (mandatory)
    • burst (config only)
    • excess-bandwidth (config only)
    • excess-burst (config only)
  • shared-policer
    • description (config only)
    • policer (config only)
    • bandwidth (state only)
    • burst (state only)
    • excess-bandwidth (state only)
    • excess-burst (state only)
    • stats (state only)
      • pass-packets (state only)
      • pass-bytes (state only)
      • pass-excess-packets (state only)
      • pass-excess-bytes (state only)
      • drop-packets (state only)
      • drop-bytes (state only)
  • shaper (config only)
    • description (config only)
    • bandwidth (config only) (mandatory)
    • burst (config only)
    • layer1-overhead (config only)
    • queue-size (config only)
  • scheduler (config only)
    • description (config only)
    • core (config only)
    • pq (config only)
      • nb-queue (config only) (mandatory)
      • queue (config only)
        • size (config only)
        • policer (config only)
        • shaper (config only)
        • class (config only)
    • pb-dwrr (config only)
      • nb-queue (config only) (mandatory)
      • queue (config only)
        • size (config only)
        • policer (config only)
        • shaper (config only)
        • quantum (config only)
        • priority (config only)
        • class (config only)
  • class (config only)
    • description (config only)
    • mark (config only) (mandatory)
• 3.2.21. vrrp
  • global
    • enabled
    • router-id
    • traps-enabled
    • group
      • instance
      • notify-ha-group
      • state (state only)
  • interface
    • mtu
    • promiscuous
    • description
    • enabled
    • version
    • link-interface (mandatory)
    • garp-delay
    • use-vmac
    • vmac-xmit-base
    • vrid (mandatory)
    • priority
    • init-state
    • preempt
    • preempt-delay
    • advertisement-interval
    • track-interface
    • track
    • track-fast-path
    • notify-ha-group
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • state (state only)
    • authentication
      • auth-type
      • auth-pass
    • track-ip (deprecated)
      • vrf (deprecated)
      • period (deprecated)
      • threshold (deprecated)
      • total (deprecated)
    • unicast-peer
    • virtual-address
    • virtual-route
      • interface
      • gw
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
    • ipv4 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-lease-time (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • request (state only)
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
        • status (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • router (state only)
        • state (state only)
    • ethernet (state only)
      • mac-address (state only)
• 3.2.22. ike
  • enabled
  • pool
    • address (mandatory)
    • dns
    • nbns
    • dhcp
  • certificate
    • certificate (mandatory)
    • private-key (mandatory)
  • certificate-authority
    • certificate (mandatory)
    • crl
    • crl-uri
  • pre-shared-key
    • id
    • secret (mandatory)
  • logging
    • syslog (deprecated)
      • daemon (deprecated)
        • default (deprecated)
        • asn1 (deprecated)
        • config (deprecated)
        • child (deprecated)
        • daemon (deprecated)
        • encoding (deprecated)
        • ipsec (deprecated)
        • ike (deprecated)
        • job (deprecated)
        • kernel (deprecated)
        • library (deprecated)
        • manager (deprecated)
        • network (deprecated)
      • private-authorization (deprecated)
        • default (deprecated)
        • asn1 (deprecated)
        • config (deprecated)
        • child (deprecated)
        • daemon (deprecated)
        • encoding (deprecated)
        • ipsec (deprecated)
        • ike (deprecated)
        • job (deprecated)
        • kernel (deprecated)
        • library (deprecated)
        • manager (deprecated)
        • network (deprecated)
    • daemon
      • default
      • asn1
      • config
      • child
      • daemon
      • encoding
      • ipsec
      • ike
      • job
      • kernel
      • library
      • manager
      • network
    • authpriv
      • default
      • asn1
      • config
      • child
      • daemon
      • encoding
      • ipsec
      • ike
      • job
      • kernel
      • library
      • manager
      • network
  • global-options
    • threads
    • acquire-timeout
    • sa-table-size
    • sa-table-segments
    • install-routes
    • routing-table
    • routing-table-prio
    • retransmit-tries
    • retransmit-timeout
    • retransmit-base
    • delete-rekeyed
    • delete-rekeyed-delay
    • make-before-break
    • interface-use
    • interface-ignore
    • snmp
    • mobike-prefer-best-path
    • dos-protection
      • cookie-threshold
      • block-threshold
      • init-limit-half-open
    • sp-hash-ipv4
      • local
      • remote
    • sp-hash-ipv6
      • local
      • remote
  • ha
    • enabled
    • listen-ha-group (mandatory)
    • node-id (mandatory)
    • interface (mandatory)
    • local-address (mandatory)
    • remote-address (mandatory)
    • ike-sync (deprecated)
      • max-rate (deprecated)
      • max-burst (deprecated)
    • seqnum-sync
      • oseq-shift
      • sync-period-time
      • sync-period-packets
    • pool
      • address (mandatory)
  • ike-policy-template (config only)
    • local-auth-method (config only)
    • remote-auth-method (config only)
    • keying-tries (config only)
    • unique-sa (config only)
    • reauth-time (config only)
    • rekey-time (config only)
    • dpd-delay (config only)
    • aggressive (config only)
    • udp-encap (config only)
    • mobike (config only)
    • ike-proposal (config only)
      • enc-alg (config only)
      • auth-alg (config only)
      • aead-alg (config only)
      • prf-alg (config only)
      • dh-group (config only)
  • ipsec-policy-template (config only)
    • start-action (config only)
    • close-action (config only)
    • dpd-action (config only)
    • replay-window (config only)
    • rekey-time (config only)
    • life-time (config only)
    • rand-time (config only)
    • rekey-bytes (config only)
    • life-bytes (config only)
    • rand-bytes (config only)
    • rekey-packets (config only)
    • life-packets (config only)
    • rand-packets (config only)
    • encap-copy-dscp (config only)
    • decap-copy-dscp (config only)
    • encap-copy-df (config only)
    • esp-proposal (config only)
      • enc-alg (config only)
      • auth-alg (config only)
      • aead-alg (config only)
      • dh-group (config only)
      • esn (config only)
    • ah-proposal (config only)
      • auth-alg (config only)
      • dh-group (config only)
      • esn (config only)
  • vpn
    • description
    • version
    • local-address
    • remote-address
    • local-id
    • remote-id
    • certificate
    • remote-ca-certificate
    • vip-request
    • vip-pool
    • ike-policy
      • template (config only) (mandatory)
      • local-auth-method
      • remote-auth-method
      • keying-tries
      • unique-sa
      • reauth-time
      • rekey-time
      • dpd-delay
      • aggressive
      • udp-encap
      • mobike
      • ike-proposal
        • enc-alg
        • auth-alg
        • aead-alg
        • prf-alg
        • dh-group
    • ipsec-policy
      • template (config only) (mandatory)
      • start-action
      • close-action
      • dpd-action
      • replay-window
      • rekey-time
      • life-time
      • rand-time
      • rekey-bytes
      • life-bytes
      • rand-bytes
      • rekey-packets
      • life-packets
      • rand-packets
      • encap-copy-dscp
      • decap-copy-dscp
      • encap-copy-df
      • esp-proposal
        • enc-alg
        • auth-alg
        • aead-alg
        • dh-group
        • esn
      • ah-proposal
        • auth-alg
        • dh-group
        • esn
    • security-policy
      • svti-id-in
      • svti-id-out
      • action
      • mode
      • priority
      • local-ts
        • subnet
        • protocol
        • port
      • remote-ts
        • subnet
        • protocol
        • port
  • ike-sas (state only)
    • total (state only)
    • half-open (state only)
  • task-processing (state only)
    • worker-threads (state only)
      • total (state only)
      • idle (state only)
      • critical (state only)
      • high (state only)
      • medium (state only)
      • low (state only)
    • task-queues (state only)
      • critical (state only)
      • high (state only)
      • medium (state only)
      • low (state only)
      • scheduled (state only)
  • counters (state only)
    • ike-rekey-init (state only)
    • ike-rekey-resp (state only)
    • child-rekey (state only)
    • invalid (state only)
    • invalid-spi (state only)
    • ike-init-in-req (state only)
    • ike-init-in-resp (state only)
    • ike-init-out-req (state only)
    • ike-init-out-resp (state only)
    • ike-auth-in-req (state only)
    • ike-auth-in-resp (state only)
    • ike-auth-out-req (state only)
    • ike-auth-out-resp (state only)
    • create-child-in-req (state only)
    • create-child-in-resp (state only)
    • create-child-out-req (state only)
    • create-child-out-resp (state only)
    • info-in-req (state only)
    • info-in-resp (state only)
    • info-out-req (state only)
    • info-out-resp (state only)
  • vpn-counters (state only)
    • ike-rekey-init (state only)
    • ike-rekey-resp (state only)
    • child-rekey (state only)
    • invalid (state only)
    • invalid-spi (state only)
    • ike-init-in-req (state only)
    • ike-init-in-resp (state only)
    • ike-init-out-req (state only)
    • ike-init-out-resp (state only)
    • ike-auth-in-req (state only)
    • ike-auth-in-resp (state only)
    • ike-auth-out-req (state only)
    • ike-auth-out-resp (state only)
    • create-child-in-req (state only)
    • create-child-in-resp (state only)
    • create-child-out-req (state only)
    • create-child-out-resp (state only)
    • info-in-req (state only)
    • info-in-resp (state only)
    • info-out-req (state only)
    • info-out-resp (state only)
  • ike-sa (state only)
    • name (state only)
    • version (state only)
    • state (state only)
    • local-address (state only)
    • remote-address (state only)
    • local-port (state only)
    • remote-port (state only)
    • initiator-spi (state only)
    • responder-spi (state only)
    • enc-alg (state only)
    • auth-alg (state only)
    • aead-alg (state only)
    • prf-alg (state only)
    • dh-group (state only)
    • established-time (state only)
    • rekey-time (state only)
    • reauth-time (state only)
    • udp-encap (state only)
    • mobike (state only)
    • local-vip (state only)
    • remote-vip (state only)
    • child-sa (state only)
      • name (state only)
      • state (state only)
      • reqid (state only)
      • protocol (state only)
      • udp-encap (state only)
      • mobike (state only)
      • spi-in (state only)
      • spi-out (state only)
      • svti-id-in (state only)
      • svti-id-out (state only)
      • enc-alg (state only)
      • auth-alg (state only)
      • aead-alg (state only)
      • dh-group (state only)
      • esn (state only)
      • bytes-in (state only)
      • packets-in (state only)
      • bytes-out (state only)
      • packets-out (state only)
      • installed-time (state only)
      • rekey-time (state only)
      • life-time (state only)
      • local-ts (state only)
        • subnet (state only)
        • protocol (state only)
        • port (state only)
      • remote-ts (state only)
        • subnet (state only)
        • protocol (state only)
        • port (state only)
  • pool-lease (state only)
    • address (state only)
    • size (state only)
    • online (state only)
    • offline (state only)
• 3.2.23. sflow
  • enabled
  • agent-interface
  • polling
  • sflow-port
  • if-error
  • if-unknown
  • sflow-collector
    • port
  • sflow-interface
  • sflow-sampling
    • rate
• 3.2.24. snmp
  • enabled
  • listen
    • protocols
    • port
  • static-info
    • location
    • contact
    • name
    • services
    • description
    • object-id
  • view
    • subtree
      • included
  • community
    • authorization (mandatory)
    • source
    • view
  • access-control
    • user
      • auth-password (mandatory)
      • auth-method
      • priv-password
      • priv-protocol
    • group
      • user
      • security-level (mandatory)
      • view
      • authorization
  • traps
    • destination
      • port
      • protocol
      • notification-type (mandatory)
      • community (mandatory)
    • authfail-check
      • enabled
    • link-status-check
      • frequency
      • enabled
    • process-check
      • frequency
      • enabled
    • disk-space-check
      • threshold (mandatory)
      • frequency
      • enabled
    • load-check
      • threshold (mandatory)
      • enabled
• 3.2.25. routing
  • global
    • ipv4-access-list
      • remark
      • seq
        • permit
          • exact-match
        • deny
          • exact-match
      • deny (deprecated)
        • exact-match (deprecated)
      • permit (deprecated)
        • exact-match (deprecated)
    • ipv6-access-list
      • remark
      • seq
        • permit
          • exact-match
        • deny
          • exact-match
      • deny (deprecated)
        • exact-match (deprecated)
      • permit (deprecated)
        • exact-match (deprecated)
    • logging
      • enabled
      • level
      • mpls
        • ldp
          • enabled
          • discovery-hello
          • errors
          • events
          • labels
          • zebra
          • message
            • direction
            • detail
      • bgp
        • enabled
        • allow-martians
        • as-4bytes
        • as-4bytes-segment
        • bestpath
        • flowspec
        • keepalives
        • neighbor-events
        • update-groups
        • zebra
        • pbr
          • detail
        • updates
          • enabled
          • in
          • out
          • prefix
        • vpn
          • label
          • leak-vrf
          • route-map-event
      • rip
        • enabled
        • events
        • packet
        • zebra
      • ripng
        • enabled
        • events
        • packet
        • zebra
      • ospf
        • enabled
        • events
        • ism
        • lsa
        • nsm
        • nssa
        • zebra
        • message
          • direction
          • detail
      • ospf6
        • enabled
        • abr
        • asbr
        • events
        • flooding
        • interface
        • neighbor
        • route
        • spf
        • zebra
        • border-routers
          • summary
          • area-id
          • router-id
        • lsa
          • level
        • message
          • direction
    • ipv4-prefix-list
      • seq
        • address
        • policy (mandatory)
        • ge
        • le
    • ipv6-prefix-list
      • seq
        • address
        • policy (mandatory)
        • ge
        • le
    • route-map
      • seq
        • policy (mandatory)
        • description
        • call
        • on-match
        • match
          • as-path
          • interface
          • local-preference
          • mac-address
          • metric
          • origin
          • peer
          • probability
          • source-instance
          • source-protocol
          • tag
          • extcommunity
          • evpn
            • default-route
            • route-type
            • vni
          • ip
            • address
              • access-list
              • prefix-list
              • prefix-len
            • next-hop
              • access-list
              • prefix-list
              • prefix-len
            • route-source
              • access-list
              • prefix-list
          • ipv6
            • address
              • access-list
              • prefix-list
              • prefix-len
            • next-hop
              • address
          • community
            • id (mandatory)
            • exact-match
        • set
          • atomic-aggregate
          • label-index
          • local-preference
          • metric
          • metric-type
          • origin
          • originator-id
          • src
          • tag
          • weight
          • comm-list-delete
          • aggregator
            • as (mandatory)
            • address (mandatory)
          • as-path
            • exclude
            • prepend
              • as-number (deprecated)
              • last-as
              • asn
                • <uint32> (mandatory)
          • ip
            • next-hop
          • ipv4
            • vpn
              • next-hop
          • ipv6
            • next-hop
              • global
              • local
              • peer-address
              • prefer-global
            • vpn
              • next-hop
          • community
            • attribute
          • extcommunity
            • rt
            • soo
    • bgp
      • route-map-delay
      • ipv4-community-list (deprecated)
        • deny (deprecated)
        • permit (deprecated)
      • community-list
        • policy
          • POLICY (mandatory)
          • COMMUNITY
      • ipv4-extcommunity-list (deprecated)
        • deny (deprecated)
          • rt (deprecated)
          • soo (deprecated)
        • permit (deprecated)
          • rt (deprecated)
          • soo (deprecated)
      • extcommunity-list
        • policy
          • POLICY (mandatory)
          • rt
          • soo
      • ipv4-as-path-access-list (deprecated)
        • deny (deprecated)
        • permit (deprecated)
      • as-path-access-list
        • policy
          • POLICY (mandatory)
          • <string>
  • static
    • ipv4-route
      • next-hop
        • dhcp-port
        • distance
        • label
        • nexthop-vrf
        • table
        • tag
        • track
    • ipv6-route
      • next-hop
        • distance
        • label
        • nexthop-vrf
        • table
        • tag
        • track
  • interface
    • ip ospf
      • area
      • authentication
      • authentication-key
      • cost
      • hello-interval
      • mtu-ignore
      • priority
      • retransmit-interval
      • transmit-delay
      • network
      • message-digest-key
        • md5 (mandatory)
      • dead-interval
        • seconds
        • minimal
          • hello-multiplier (mandatory)
      • address
        • area
        • authentication
        • authentication-key
        • cost
        • hello-interval
        • mtu-ignore
        • priority
        • retransmit-interval
        • transmit-delay
        • message-digest-key
          • md5 (mandatory)
        • dead-interval
          • seconds
          • minimal
            • hello-multiplier (mandatory)
    • ipv6 ospf6
      • cost
      • dead-interval
      • hello-interval
      • ifmtu
      • instance-id
      • mtu-ignore
      • network
      • passive
      • priority
      • retransmit-interval
      • transmit-delay
      • advertise
        • prefix-list (mandatory)
    • ip rip
      • v2-broadcast
      • split-horizon
      • version
        • receive
        • send
      • authentication
        • mode
        • md5-auth-length
        • password
        • key-chain
    • ipv6 ripng
      • split-horizon
  • bgp
    • enabled
    • as (mandatory)
    • always-compare-med
    • cluster-id
    • coalesce-time
    • deterministic-med
    • ebgp-connected-route-check
    • fast-external-failover
    • graceful-shutdown
    • log-neighbor-changes
    • network-import-check
    • route-reflector-allow-outbound-policy
    • router-id
    • neighbor-total-count (state only)
    • bestpath
      • compare-routerid
      • med
      • as-path
        • confederation
        • ignore
        • multipath-relax
    • client-to-client
      • reflection
    • confederation
      • identifier
      • peers
    • dampening
      • half-life
      • reuse
      • suppress
      • max-suppress-time
    • graceful-restart
      • preserve-fw-state
      • restart-time
      • stalepath-time
    • listen
      • limit
      • neighbor-range
        • neighbor-group (mandatory)
    • max-med
      • administrative
      • on-startup
        • period (mandatory)
        • max-med
    • packet-rw-quantum
      • read
      • write
    • update-delay
      • delay
      • established-wait
    • address-family
      • ipv4-unicast
        • table-map
        • enabled
        • dampening
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • network
          • route-map
          • backdoor
          • label-index
          • route (state only)
            • validity (state only)
            • route-type (state only)
            • prefix (state only)
            • prefix-length (state only)
            • med (state only)
            • origin (state only)
            • packet-length (state only)
            • nexthop (state only)
              • used (state only)
        • redistribute
          • id
          • metric
          • route-map
        • route-target
          • redirect-import
        • l3vpn
          • export
            • vpn
            • label
            • route-target
            • route-distinguisher
            • nexthop
            • route-map
          • import
            • vpn
            • route-target
            • route-map
        • maximum-path
          • ebgp
          • ibgp
          • equal-cluster-length
        • aggregate-address
          • as-set
          • summary-only
        • administrative-distance
          • distance (mandatory)
          • access-list
        • bgp-distance
          • external-routes
          • internal-routes
          • local-routes
      • ipv4-multicast
        • table-map
        • enabled
        • dampening
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • network
          • route-map
          • backdoor
          • label-index
          • route (state only)
            • validity (state only)
            • route-type (state only)
            • prefix (state only)
            • prefix-length (state only)
            • med (state only)
            • origin (state only)
            • packet-length (state only)
            • nexthop (state only)
              • used (state only)
        • aggregate-address
          • as-set
          • summary-only
        • administrative-distance
          • distance (mandatory)
          • access-list
        • bgp-distance
          • external-routes
          • internal-routes
          • local-routes
      • ipv4-flowspec
        • enabled
        • local-install
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • route (state only)
          • to (state only)
          • from (state only)
          • peer-id (state only)
          • validity (state only)
          • route-type (state only)
          • prefix (state only)
          • prefix-length (state only)
          • med (state only)
          • origin (state only)
          • packet-length (state only)
          • nexthop (state only)
            • used (state only)
      • ipv4-vpn
        • enabled
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • route-distinguisher
          • label
          • route-map
          • route (state only)
            • validity (state only)
            • route-type (state only)
            • prefix (state only)
            • prefix-length (state only)
            • med (state only)
            • origin (state only)
            • packet-length (state only)
            • nexthop (state only)
              • used (state only)
      • ipv6-unicast
        • table-map
        • enabled
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • network
          • route-map
          • label-index
          • route (state only)
            • validity (state only)
            • route-type (state only)
            • prefix (state only)
            • prefix-length (state only)
            • med (state only)
            • origin (state only)
            • packet-length (state only)
            • nexthop (state only)
              • used (state only)
        • aggregate-address
          • summary-only
        • redistribute
          • metric
          • route-map
        • administrative-distance
          • distance (mandatory)
          • access-list
        • route-target
          • redirect-import
        • l3vpn
          • export
            • vpn
            • label
            • route-target
            • route-distinguisher
            • nexthop
            • route-map
          • import
            • vpn
            • route-target
            • route-map
        • maximum-path
          • ebgp
          • ibgp
          • equal-cluster-length
        • bgp-distance
          • external-routes
          • internal-routes
          • local-routes
      • ipv6-multicast
        • enabled
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • network
          • route-map
          • label-index
          • route (state only)
            • validity (state only)
            • route-type (state only)
            • prefix (state only)
            • prefix-length (state only)
            • med (state only)
            • origin (state only)
            • packet-length (state only)
            • nexthop (state only)
              • used (state only)
        • administrative-distance
          • distance (mandatory)
          • access-list
        • bgp-distance
          • external-routes
          • internal-routes
          • local-routes
      • ipv6-labeled-unicast
        • enabled
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • maximum-path
          • ebgp
          • ibgp
          • equal-cluster-length
      • ipv6-vpn
        • enabled
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • route-distinguisher
          • label
          • route-map
          • route (state only)
            • validity (state only)
            • route-type (state only)
            • prefix (state only)
            • prefix-length (state only)
            • med (state only)
            • origin (state only)
            • packet-length (state only)
            • nexthop (state only)
              • used (state only)
      • ipv6-flowspec (state only)
        • rib-count (state only)
        • neighbor-count (state only)
        • dynamic-neighbor-count (state only)
        • route (state only)
          • to (state only)
          • from (state only)
          • peer-id (state only)
          • validity (state only)
          • route-type (state only)
          • prefix (state only)
          • prefix-length (state only)
          • med (state only)
          • origin (state only)
          • packet-length (state only)
          • nexthop (state only)
            • used (state only)
    • neighbor-group
      • remote-as
      • capability
      • capability-negotiate
      • ebgp-multihop
      • enforce-first-as
      • enforce-multihop
      • neighbor-description
      • override-capability
      • passive
      • password
      • solo
      • strict-capability-match
      • track
      • check-control-plane-failure
      • ttl-security-hops
      • update-source
      • remote-neighbor-group (state only)
      • remote-router-id (state only)
      • state (state only)
      • min-time-btwn-advertisement (state only)
      • last-reset (state only)
      • bgp-connection (state only)
      • connect-retry-timer (state only)
      • estimated-rount-trip-time (state only)
      • local-as
        • as-number (mandatory)
        • no-prepend
        • replace-as
      • shutdown
        • message
      • timers
        • advertisement-interval
        • connect-retry
        • keepalive-interval
        • hold-time
      • address-family
        • ipv4-unicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-multicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-labeled-unicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-flowspec
          • enabled
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv4-vpn
          • enabled
          • unsuppress-map
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
          • prefix-list
          • route-map
        • ipv6-unicast
          • enabled
          • nexthop-local-unchanged
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-multicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-labeled-unicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-flowspec
          • enabled
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-vpn
          • enabled
          • unsuppress-map
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
          • prefix-list
          • route-map
      • connections (state only)
        • established (state only)
        • dropped (state only)
      • local-host (state only)
        • name (state only)
        • port (state only)
      • remote-host (state only)
        • name (state only)
        • port (state only)
      • nexthop (state only)
        • address (state only)
        • global-address (state only)
        • local-address (state only)
      • thread (state only)
        • read-enabled (state only)
        • write-enabled (state only)
      • message-statistics (state only)
        • packet-wait-process (state only)
        • packet-wait-written (state only)
        • open-sent (state only)
        • opens-received (state only)
        • notifications-sent (state only)
        • notifications-received (state only)
        • updates-sent (state only)
        • updates-received (state only)
        • keepalives-sent (state only)
        • keepalives-received (state only)
        • route-refresh-sent (state only)
        • route-refresh-received (state only)
        • capability-sent (state only)
        • capability-received (state only)
        • total-sent (state only)
        • total-received (state only)
    • neighbor
      • neighbor-group
      • interface
      • port
      • remote-as
      • capability
      • capability-negotiate
      • ebgp-multihop
      • enforce-first-as
      • enforce-multihop
      • neighbor-description
      • override-capability
      • passive
      • password
      • solo
      • strict-capability-match
      • track
      • check-control-plane-failure
      • ttl-security-hops
      • update-source
      • remote-neighbor-group (state only)
      • remote-router-id (state only)
      • state (state only)
      • min-time-btwn-advertisement (state only)
      • last-reset (state only)
      • bgp-connection (state only)
      • connect-retry-timer (state only)
      • estimated-rount-trip-time (state only)
      • local-as
        • as-number (mandatory)
        • no-prepend
        • replace-as
      • shutdown
        • message
      • timers
        • advertisement-interval
        • connect-retry
        • keepalive-interval
        • hold-time
      • address-family
        • ipv4-unicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-multicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-labeled-unicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-flowspec
          • enabled
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv4-vpn
          • enabled
          • unsuppress-map
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
          • prefix-list
          • route-map
        • ipv6-unicast
          • enabled
          • nexthop-local-unchanged
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-multicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-labeled-unicast
          • enabled
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-flowspec
          • enabled
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-vpn
          • enabled
          • unsuppress-map
          • as-override
          • send-community
          • weight
          • allowas-in
          • attribute-unchanged
          • route-server-client
          • soft-reconfiguration-inbound
          • route-reflector-client
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • as-outbound-update
            • action
            • as-type
          • filter-list
          • prefix-list
          • route-map
      • connections (state only)
        • established (state only)
        • dropped (state only)
      • local-host (state only)
        • name (state only)
        • port (state only)
      • remote-host (state only)
        • name (state only)
        • port (state only)
      • nexthop (state only)
        • address (state only)
        • global-address (state only)
        • local-address (state only)
      • thread (state only)
        • read-enabled (state only)
        • write-enabled (state only)
      • message-statistics (state only)
        • packet-wait-process (state only)
        • packet-wait-written (state only)
        • open-sent (state only)
        • opens-received (state only)
        • notifications-sent (state only)
        • notifications-received (state only)
        • updates-sent (state only)
        • updates-received (state only)
        • keepalives-sent (state only)
        • keepalives-received (state only)
        • route-refresh-sent (state only)
        • route-refresh-received (state only)
        • capability-sent (state only)
        • capability-received (state only)
        • total-sent (state only)
        • total-received (state only)
  • ldp
    • enabled
    • router-id
    • discovery
      • hello
        • holdtime
        • interval
    • dual-stack
      • cisco-interop
      • transport-preference
    • neighbor
      • password
      • ttl-security
        • hops
        • disable
    • address-family
      • ipv4
        • session-holdtime
        • discovery
          • transport-address (mandatory)
          • hello
            • holdtime
            • interval
        • interface
        • label
          • local
            • advertise
              • for
              • to
              • explicit-null
                • for
            • allocate
              • for
              • host-routes
          • remote
            • accept
              • for
              • from
      • ipv6
        • session-holdtime
        • discovery
          • transport-address (mandatory)
          • hello
            • holdtime
            • interval
        • interface
        • label
          • local
            • advertise
              • for
              • to
              • explicit-null
                • for
            • allocate
              • for
              • host-routes
          • remote
            • accept
              • for
              • from
  • ospf
    • enabled
    • router-id
    • abr-type
    • write-multiplier
    • auto-cost
    • opaque-lsa
    • compatible-rfc1583
    • default-metric
    • log-adjacency-changes
    • refresh-timer
    • area
      • default-cost
      • export-list
      • import-list
      • nssa
        • summary
        • translate
      • stub
        • summary
      • virtual-link
      • authentication
        • message-digest
      • filter-list
        • input
        • output
      • range
        • action
        • cost
    • default-information
      • always
      • metric
      • metric-type
      • route-map
    • distance
      • all
      • external
      • inter-area
      • intra-area
    • max-metric
      • administrative
      • on-shutdown
      • on-startup
    • neighbor
      • poll-interval
      • priority
    • network
      • area (mandatory)
    • passive-interface
      • address
    • timers
      • lsa
        • min-arrival
      • throttle
        • lsa
        • spf
          • delay (mandatory)
          • init-hold-time (mandatory)
          • max-hold-time (mandatory)
    • distribute-list
      • access-list (mandatory)
    • redistribute
      • metric
      • metric-type
      • route-map
  • rip
    • neighbor
    • static-route
    • enabled
    • allow-ecmp
    • default-information-originate
    • default-metric
    • network
    • interface
    • passive-interface
    • administrative-distance
      • default
      • source
        • distance (mandatory)
        • access-list
    • redistribute
      • metric
      • route-map
    • route-map
      • route-map-name (mandatory)
    • timers
      • flush-interval
      • holddown-interval
      • update-interval
    • version
      • receive
      • send
    • distribute-list
      • access-list
      • prefix-list
    • offset-list
      • metric (mandatory)
      • access-list (mandatory)
    • state (state only)
      • route (state only)
        • protocol (state only)
        • route-type (state only)
        • nexthop (state only)
        • interface (state only)
        • metric (state only)
      • neighbor (state only)
        • last-update (state only)
        • bad-packets-received (state only)
        • bad-routes-received (state only)
  • ospf6
    • enabled
    • router-id
    • auto-cost
    • log-adjacency-changes
    • area
      • export-list
      • import-list
      • stub
        • summary
      • filter-list
        • input
        • output
      • range
        • advertise
        • cost
    • distance
      • all
      • external
      • inter-area
      • intra-area
    • interface
      • area (mandatory)
    • redistribute
      • route-map
    • timers
      • lsa
        • min-arrival
      • throttle
        • lsa
        • spf
          • delay (mandatory)
          • init-hold-time (mandatory)
          • max-hold-time (mandatory)
  • ripng
    • aggregate
    • static-route
    • enabled
    • allow-ecmp
    • default-information-originate
    • default-metric
    • network
    • interface
    • passive-interface
    • redistribute
      • metric
      • route-map
    • timers
      • flush-interval
      • holddown-interval
      • update-interval
    • distribute-list
      • access-list
      • prefix-list
    • offset-list
      • metric (mandatory)
      • access-list (mandatory)
    • state (state only)
      • route (state only)
        • protocol (state only)
        • route-type (state only)
        • nexthop (state only)
        • metric (state only)
      • neighbor (state only)
        • last-update (state only)
        • bad-packets-received (state only)
        • bad-routes-received (state only)
  • policy-based-routing
    • ipv4-rule
      • not
      • match
        • inbound-interface
        • mark
        • source
        • destination
        • outbound-interface (state only)
        • tos (state only)
        • other (state only)
          • value (state only)
      • action
        • lookup (mandatory)
        • goto (state only)
        • other (state only)
    • ipv6-rule
      • not
      • match
        • inbound-interface
        • mark
        • source
        • destination
        • outbound-interface (state only)
        • tos (state only)
        • other (state only)
          • value (state only)
      • action
        • lookup (mandatory)
        • goto (state only)
        • other (state only)
  • rib (state only)
    • ipv4-count (state only)
      • kernel (state only)
        • routes (state only)
        • installed-routes (state only)
      • connected (state only)
        • routes (state only)
        • installed-routes (state only)
      • static (state only)
        • routes (state only)
        • installed-routes (state only)
      • ospf (state only)
        • routes (state only)
        • installed-routes (state only)
      • ebgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • ibgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • total (state only)
        • routes (state only)
        • installed-routes (state only)
    • ipv6-count (state only)
      • kernel (state only)
        • routes (state only)
        • installed-routes (state only)
      • connected (state only)
        • routes (state only)
        • installed-routes (state only)
      • static (state only)
        • routes (state only)
        • installed-routes (state only)
      • ospf (state only)
        • routes (state only)
        • installed-routes (state only)
      • ebgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • ibgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • total (state only)
        • routes (state only)
        • installed-routes (state only)
    • ipv4-route (state only)
      • next-hop (state only)
        • protocol (state only)
        • distance (state only)
        • metric (state only)
        • interface (state only)
        • selected (state only)
        • fib (state only)
        • directly-connected (state only)
        • duplicate (state only)
        • active (state only)
        • on-link (state only)
        • recursive (state only)
        • uptime (state only)
    • ipv6-route (state only)
      • next-hop (state only)
        • protocol (state only)
        • distance (state only)
        • metric (state only)
        • interface (state only)
        • selected (state only)
        • fib (state only)
        • directly-connected (state only)
        • duplicate (state only)
        • active (state only)
        • on-link (state only)
        • recursive (state only)
        • uptime (state only)
• 3.2.26. DHCP
  • server
    • enabled
    • default-lease-time
    • max-lease-time
    • dhcp-options
      • dhcp-server-identifier
      • domain-name
      • domain-name-server
      • ntp-server
      • interface-mtu
      • netbios-name-server
      • netbios-node-type
      • netbios-scope
      • time-offset
    • subnet
      • interface
      • default-gateway
      • default-lease-time
      • max-lease-time
      • state (state only)
      • range
      • host
        • MAC-ADDRESS (mandatory)
        • IP-ADDRESS (mandatory)
      • dhcp-options
        • dhcp-server-identifier
        • domain-name
        • domain-name-server
        • ntp-server
        • interface-mtu
        • netbios-name-server
        • netbios-node-type
        • netbios-scope
        • time-offset
    • dhcp-server-leases (state only)
      • starts (state only)
      • ends (state only)
      • hw-mac-address (state only)
      • uid (state only)
      • client-hostname (state only)
      • binding-state (state only)
      • next-binding-state (state only)
      • option-agent-circuit-id (state only)
      • option-agent-remote-id (state only)
      • vendor-class-identifier (state only)
  • relay
    • enabled
    • handle-option
    • drop-unmatched
    • hop-count
    • max-size
    • dhcp-server
      • enabled
      • interface
      • handle-option
      • drop-unmatched
      • hop-count
      • max-size
• 3.2.27. fast-path
  • enabled
  • port
  • core-mask
    • fast-path
    • exception
    • linux-to-fp
    • qos
    • port
  • cp-protection
    • budget
  • crypto
    • driver
    • offload-core-mask
    • nb-session
    • nb-buffer
  • advanced
    • nb-mbuf
    • mainloop-sleep-delay
    • offload
    • vlan-strip
    • intercore-ring-size
    • software-txq
    • nb-rxd
    • nb-txd
  • limits
    • fp-max-if
    • fp-max-vrf
    • ip4-max-addr
    • ip4-max-route
    • ip4-max-neigh
    • ip6-max-addr
    • ip6-max-route
    • ip6-max-neigh
    • pbr-max-rule
    • filter4-max-rule
    • filter6-max-rule
    • filter4-max-ct
    • filter6-max-ct
    • filter-max-ipset
    • filter-max-ipset-entry
    • filter-bridge-max-rule
    • vxlan-max-port
    • vxlan-max-if
    • vxlan-max-fdb
    • reass4-max-queue
    • reass6-max-queue
    • ipsec-max-sp
    • ipsec-max-sa
    • ip-max-8-table
    • filter-max-cache
    • filter6-max-cache
    • vlan-max-if
    • macvlan-max-if
    • gre-max-if
    • svti-max-if
  • linux-sync
    • fpm-socket-size
    • nl-socket-size
    • disable
  • cpu-usage (state only)
    • busy (state only)
• 3.2.28. logging
  • Global Settings
    • disk-usage (state only)
    • rate-limit
      • interval
      • burst
  • Per-VRF Settings
    • syslog
      • enabled
      • remote-server
        • protocol
        • port
        • log-filter
          • level
            • EQUAL
            • greater-or-equal
            • not
              • LEVEL
      • tls
        • enabled
        • ca-certificate (mandatory)
        • certificate
        • private-key
        • server-authentication
          • anonymous
          • certificate
          • name
            • <string>
          • fingerprint
            • <string>