3.2. Command Reference

• 3.2.1. cmd
  • cmd banner
    • Input Parameters
  • cmd reboot
    • Input Parameters
  • cmd poweroff
    • Input Parameters
  • cmd ping
    • Input Parameters
  • cmd traceroute
    • Input Parameters
  • cmd traffic-capture
    • Input Parameters
  • cmd traffic-capture new
    • Input Parameters
  • cmd traffic-capture list
  • cmd traffic-capture read
    • Input Parameters
  • cmd traffic-capture export
    • Input Parameters
  • cmd traffic-capture flush
  • cmd traffic-capture delete
    • Input Parameters
  • cmd identify-port
    • Input Parameters
  • cmd certificate cmp enroll
    • Input Parameters
  • cmd certificate cmp update
    • Input Parameters
  • cmd certificate cmp scheduled-update
    • Input Parameters
  • cmd system-image
    • Input Parameters
  • cmd backup
    • Input Parameters
  • cmd set-next-boot-params
    • Input Parameters
  • cmd license certificate
    • Input Parameters
  • cmd license file
    • Input Parameters
  • cmd license refresh
  • cmd troubleshooting-report
    • Input Parameters
  • cmd dns proxy clear-cache
    • Input Parameters
  • cmd dns resolve
    • Input Parameters
    • Output Data
  • cmd dhcp-client renew-lease
    • Input Parameters
  • cmd bgp rpki ssh-key create
    • Input Parameters
  • cmd bgp rpki ssh-key list
    • Input Parameters
  • cmd bgp rpki ssh-key delete
    • Input Parameters
  • cmd bgp rpki ssh-host add
    • Input Parameters
  • cmd bgp rpki ssh-host delete
    • Input Parameters
  • cmd certificate import
    • Input Parameters
  • cmd certificate export
    • Input Parameters
  • cmd certificate add
    • Input Parameters
  • cmd certificate delete
    • Input Parameters
  • cmd certificate-request delete
    • Input Parameters
  • cmd certificate-request generate
    • Input Parameters
  • cmd certificate-request export
    • Input Parameters
  • cmd compress-alarm
    • Input Parameters
    • Output Data
  • cmd twamp ping
    • Input Parameters
  • cmd aaa query
    • Input Parameters
    • Output Data
• 3.2.2. show
  • show vrfs
    • Output Data
  • show audit-trails
    • Input Parameters
    • Output Data
  • show summary
  • show commands
    • Output Data
  • show interface
    • Input Parameters
  • show interface throughput
    • Input Parameters
  • show ipv4-routes
    • Input Parameters
    • Output Data
  • show ipv4-routes summary
    • Input Parameters
    • Output Data
  • show ipv6-routes
    • Input Parameters
    • Output Data
  • show ipv6-routes summary
    • Input Parameters
    • Output Data
  • show mpls fec table
    • Input Parameters
  • show mpls table
    • Input Parameters
  • show disk
    • Output Data
  • show numa statistics
    • Output Data
  • show processes
    • Output Data
  • show soft-interrupts
    • Output Data
  • show hardware
    • Input Parameters
    • Output Data
  • show power
    • Output Data
  • show bgp
    • Input Parameters
  • show bgp segment-routing ipv6
    • Input Parameters
  • show bgp bmp
    • Input Parameters
    • Output Data
  • show bgp rpki cache-connection
    • Input Parameters
  • show bgp rpki cache-server
    • Input Parameters
  • show bgp rpki prefix-table
    • Input Parameters
  • show isis
    • Input Parameters
  • show evpn
    • Input Parameters
  • show ospf
    • Input Parameters
  • show rip
    • Input Parameters
  • show ospf6
    • Input Parameters
  • show ripng
    • Input Parameters
  • show mpls ldp
    • Input Parameters
  • show bfd
    • Input Parameters
  • show path-monitoring
    • Input Parameters
  • show nhrp
    • Input Parameters
  • show nhrp6
    • Input Parameters
  • show pim
    • Input Parameters
  • show pbr
    • Input Parameters
    • Output Data
  • show segment-routing te-policies
    • Input Parameters
  • show segment-routing te-database
    • Input Parameters
  • show segment-routing ipv6
    • Input Parameters
    • Output Data
  • show segment-routing pcep session
    • Input Parameters
    • Output Data
  • show segment-routing pcep session statistics
    • Input Parameters
    • Output Data
  • show license
  • show boot-params
    • Output Data
  • show log
    • Input Parameters
  • show logins
    • Input Parameters
    • Output Data
  • show user permissions
    • Input Parameters
    • Output Data
  • show ntp
    • Input Parameters
    • Output Data
  • show ntp clients
    • Input Parameters
    • Output Data
  • show dhcp-relay
    • Input Parameters
    • Output Data
  • show dhcp-server
    • Input Parameters
    • Output Data
  • show neighbors
    • Input Parameters
    • Output Data
  • show conntracks
    • Input Parameters
  • show product
    • Input Parameters
  • show fast-path cpu-usage
  • show fast-path table-usage
  • show fast-path arp parameters
    • Output Data
  • show fast-path ndp parameters
    • Output Data
  • show fast-path conntrack
    • Input Parameters
  • show fast-path conntrack statistics
    • Output Data
  • show fast-path hash-seed
    • Output Data
  • show fast-path statistics
    • Input Parameters
    • Output Data
  • show fast-path ports
    • Output Data
  • show ike
    • Input Parameters
  • show cg-nat pool-usage
    • Input Parameters
  • show cg-nat translation-usage
    • Input Parameters
  • show cg-nat user
    • Input Parameters
  • show cg-nat blocks
    • Input Parameters
  • show cg-nat conntracks
    • Input Parameters
  • show cg-nat conntrack-statistics
    • Input Parameters
  • show cg-nat translation-statistics
    • Input Parameters
  • show cg-nat block-statistics
    • Input Parameters
  • show cg-nat hash-table-statistics
  • show cg-nat mempool-usage
  • show cg-nat statistics
    • Output Data
  • show ha-neighbor
    • Input Parameters
  • show ha-conntrack
    • Input Parameters
  • show vxlan fdb
    • Input Parameters
    • Output Data
  • show bridge fdb
    • Input Parameters
    • Output Data
  • show dns-server
    • Input Parameters
    • Output Data
  • show certificate list
  • show certificate
    • Input Parameters
  • show certificate key
    • Input Parameters
  • show certificate-request list
  • show certificate-request key
    • Input Parameters
  • show certificate-request
    • Input Parameters
  • show certificate cmp scheduled-update
    • Input Parameters
  • show alarm list
    • Output Data
  • show alarm inventory
    • Output Data
  • show alarm summary
    • Output Data
  • show ipfix statistics
    • Input Parameters
    • Output Data
  • show commit
    • Output Data
  • show ipoe-server session
    • Input Parameters
    • Output Data
  • show ppp-server statistics
    • Input Parameters
    • Output Data
  • show gtp tunnels
    • Input Parameters
    • Output Data
  • show pfcp smf
    • Input Parameters
    • Output Data
  • show pfcp statistics
    • Input Parameters
    • Output Data
  • show lldp neighbors
    • Input Parameters
    • Output Data
• 3.2.3. flush
  • flush bgp
    • Input Parameters
  • flush isis
    • Input Parameters
  • flush ospf
    • Input Parameters
  • flush ospf6
    • Input Parameters
  • flush nhrp
    • Input Parameters
  • flush nhrp6
    • Input Parameters
  • flush pim
    • Input Parameters
  • flush ike ike-sa
    • Input Parameters
  • flush ike child-sa
    • Input Parameters
  • flush cg-nat statistics
  • flush cg-nat user
    • Input Parameters
  • flush cg-nat user-statistics
    • Input Parameters
  • flush fast-path statistics
  • flush fast-path conntrack
    • Input Parameters
  • flush vxlan fdb
    • Input Parameters
  • flush bridge fdb
    • Input Parameters
  • flush alarm
    • Input Parameters
    • Output Data
  • flush qos statistics
    • Input Parameters
  • flush conntracks
    • Input Parameters
  • flush certificate cmp scheduled-update
    • Input Parameters
  • flush dhcp-server lease
    • Input Parameters
  • flush neighbors
    • Input Parameters
  • flush login
    • Input Parameters
  • flush ppp-server session
    • Input Parameters
  • flush ipoe-server session
    • Input Parameters
• 3.2.4. system
  • hostname
  • cp-mask
  • timezone
  • date (state only)
  • troubleshooting-report (state only) (pushed)
  • traffic-capture (state only) (pushed)
  • network-stack
    • bridge
      • call-ipv4-filtering
      • call-ipv6-filtering
    • icmp
      • ignore-icmp-echo-broadcast
      • rate-limit-icmp
      • rate-mask-icmp
    • ipv4
      • forwarding
      • send-redirects
      • accept-redirects
      • accept-source-route
      • arp-announce
      • arp-filter
      • arp-ignore
      • arp-proxy
      • log-invalid-addresses
    • ipv6
      • forwarding
      • max-cached-routes
      • autoconfiguration
      • accept-duplicate-address-detection
      • accept-router-advert
      • accept-redirects
      • accept-segment-routing
      • accept-source-route
      • router-solicitations
      • use-temporary-addresses
    • neighbor
      • ipv4-max-entries
      • ipv6-max-entries
      • ipv4-base-reachable-time
      • ipv6-base-reachable-time
    • conntrack
      • max-entries
      • tcp-timeout-close
      • tcp-timeout-close-wait
      • tcp-timeout-established
      • tcp-timeout-fin-wait
      • tcp-timeout-last-ack
      • tcp-timeout-max-retrans
      • tcp-timeout-syn-recv
      • tcp-timeout-syn-sent
      • tcp-timeout-time-wait
      • tcp-timeout-unacknowledged
      • udp-timeout
      • udp-timeout-stream
    • fast-path
      • alg
        • port
        • session-timeout
      • conntrack
        • behavior
          • enabled (mandatory)
        • timeouts
          • icmp
            • <uint32> (mandatory)
          • udp
            • <uint32> (mandatory)
          • gre-pptp
            • <uint32> (mandatory)
          • tcp
            • <uint32> (mandatory)
        • nat64
          • option
            • true|false (mandatory)
          • mtu
            • <uint16> (mandatory)
  • audit-trail
    • enabled (pushed)
    • max-file-count
    • max-file-size
  • uptime (state only)
    • value (state only)
    • string (state only)
  • installed-image (state only)
    • version (state only)
    • current (state only)
    • default (state only)
    • next (state only)
    • confirm-pending (state only) (pushed)
  • aws
    • account-id (state only)
    • architecture (state only)
    • availability-zone (state only)
    • image-id (state only)
    • instance-id (state only)
    • instance-type (state only)
    • private-ip (state only)
    • region (state only)
    • ha-notification
      • group
        • assign-private-ip
        • change-route
          • interface (mandatory)
          • vrf (mandatory)
• 3.2.5. pki
  • ca-profile
    • cmp
      • vrf
      • url (mandatory)
      • server-certificate
      • issuer
      • private-key-algorithm
      • source
      • install-ca-certificates
      • automatic-update
        • remaining-time
        • retry-delay
    • revocation
      • crl
        • url
  • revocation
    • crl
      • vrf
      • source
  • certificate (state only)
    • subject (state only) (pushed)
    • issuer (state only) (pushed)
    • validity-not-before (state only) (pushed)
    • validity-not-after (state only) (pushed)
    • has-private-key (state only) (pushed)
  • certificate-request (state only)
    • subject (state only) (pushed)
• 3.2.6. cloud-init
  • enabled
  • datasource (state only)
• 3.2.7. license
  • enabled (pushed)
  • snmp
  • valid (state only) (pushed)
  • state (state only)
  • activation-type (state only)
  • license-type (state only)
  • short-license-type (state only)
  • subscription-end-date (state only)
  • support-type (state only)
  • support-end-date (state only) (pushed)
  • remaining-days (state only) (pushed)
  • remaining-days-string (state only) (pushed)
  • online
    • serial (mandatory) (hidden)
    • vrf
    • proxy-host
    • proxy-port
    • proxy-user
    • proxy-password (hidden)
    • export-analytics
    • use-ipv6-dns
    • source-ip
    • connected (state only) (pushed)
    • last-healthcheck-date (state only) (pushed)
    • lease-end-date (state only) (pushed)
    • current-activations (state only)
    • allowed-activations (state only)
    • license-tokens (state only)
    • computer-id (state only)
  • offline-certificate
    • serial (mandatory) (hidden)
    • computer-id (state only)
    • license-certificate (state only) (pushed)
  • offline
    • serial (mandatory) (hidden)
    • license-file (state only) (pushed)
  • throughput (deprecated) (state only)
    • allowed (deprecated) (state only) (pushed)
    • used (deprecated) (state only) (pushed)
  • cgnat-conntracks (deprecated) (state only)
    • allowed (deprecated) (state only) (pushed)
    • used (deprecated) (state only) (pushed)
  • ipsec-tunnels (deprecated) (state only)
    • allowed (deprecated) (state only) (pushed)
    • used (deprecated) (state only) (pushed)
  • licensed-feature (state only)
    • enabled (state only) (pushed)
    • counter (state only)
      • description (state only) (pushed)
      • allowed (state only) (pushed)
      • used (state only) (pushed)
• 3.2.8. auth
  • root-user-enabled
  • session-count (state only) (pushed)
  • role
    • priority
    • deny
      • config
      • state
      • rpc
        • vrf
          • l3vrf
      • notification
    • permit
      • config
        • access-permission
      • state
      • rpc
        • vrf
          • l3vrf
      • notification
  • user
    • role (mandatory)
    • password
    • ssh-enabled
    • authorized-key
  • session (state only)
    • user (state only) (pushed)
    • source (state only) (pushed)
    • started (state only) (pushed)
• 3.2.9. aaa
  • remote-authentication-order
  • local-authentication
  • user-role-privilege
    • viewer
    • admin
    • role
  • tacacs
    • address (mandatory)
    • port
    • source
    • secret (mandatory) (hidden)
    • timeout
    • vrf
  • radius
    • address (mandatory)
    • port
    • secret (mandatory) (hidden)
    • timeout
    • source
    • vrf
• 3.2.10. alarm
  • enabled
  • max-alarm-status-changes
  • notify-status-changes
  • notify-severity-level
  • alarm-inventory
    • alarm-type
      • resource (mandatory)
      • description (mandatory)
      • will-clear (state only)
      • severity-level (state only)
      • severity-level-trigger
        • text (mandatory)
        • above
        • below
        • equal
        • different
        • between
          • start
          • end
  • alarm-list (state only)
    • number-of-alarms (state only)
    • last-changed (state only)
    • alarm (state only)
      • alt-resource (state only)
      • time-created (state only)
      • is-cleared (state only)
      • last-raised (state only)
      • last-changed (state only)
      • perceived-severity (state only)
      • alarm-text (state only)
• 3.2.11. trigger
  • enabled
  • event
    • enabled
    • log
    • user
    • commands (mandatory)
    • on-alarm
      • alarm
      • severity-level
    • on-resource
      • resource (mandatory)
      • above
      • below
      • equal
      • different
      • between
        • start
        • end
    • on-cron
      • cron
• 3.2.12. vrf
  • l3vrf
    • table-id (mandatory)
• 3.2.13. ssh-server
  • enabled (pushed)
  • address
  • port
  • permit-root-login
• 3.2.14. netconf-server
  • enabled (pushed)
  • idle-timeout
  • address
    • port
    • description
• 3.2.15. dns
  • search
  • server
  • proxy
    • enabled
    • listen-to
    • forward
      • server
      • local
    • dns64
      • client (mandatory)
      • exclude
      • mapped
        • not
        • PREFIX
• 3.2.16. dns-server
  • enabled (pushed)
  • use-system-servers
  • bind
  • tls
    • certificate-name (mandatory)
    • dns-over-https
  • forward-tls
    • use-system-certificates
    • certificates
  • record
    • IP (mandatory)
  • logging
    • enabled
  • server
    • tls-authenticate-name
    • source
• 3.2.17. ipv6-autoconf
  • enabled (pushed)
  • interface
    • max-advertisement-interval
    • min-advertisement-interval
    • managed
    • other-config
    • link-mtu
    • reachable-time
    • retransmit-timer
    • default-lifetime
    • dhcp-prefix
      • suffix
      • on-link
      • valid-lifetime
      • preferred-lifetime
      • autonomous
      • base6-interface
      • base6to4-interface
      • address (state only)
    • prefix
      • on-link
      • valid-lifetime
      • preferred-lifetime
      • autonomous
      • base6-interface
      • base6to4-interface
      • send-interface-address (deprecated)
• 3.2.18. lldp
  • enabled (pushed)
  • hello-timer
  • system-name
  • system-description
  • management-address
  • chassis-id (state only)
  • chassis-id-type (state only)
  • interface
    • enabled
    • counters (state only)
      • frame-in (state only)
      • frame-out (state only)
      • frame-discard (state only)
      • tlv-discard (state only)
    • neighbor (state only)
      • port-id (state only)
      • port-id-type (state only)
      • port-description (state only)
      • management-address (state only)
      • system-name (state only)
      • system-description (state only)
      • chassis-id (state only)
      • chassis-id-type (state only)
      • capability (state only)
        • enabled (state only)
  • counters (state only)
    • frame-in (state only)
    • frame-out (state only)
    • frame-discard (state only)
    • tlv-discard (state only)
    • tlv-accepted (state only)
    • entries-aged-out (state only)
• 3.2.19. kpi
  • interface (deprecated)
• 3.2.20. telegraf
  • enabled (pushed)
  • interval
  • metrics
    • enabled
    • template
    • monitored-interface
    • metric
      • enabled
      • period
  • amazon-cloudwatch-output
    • write-statistics
    • high-resolution-metrics
    • authentication
      • ec2-authorized
      • explicit-credentials
        • access-key (mandatory)
        • secret-key (mandatory) (hidden)
        • security-token (hidden)
      • sts-credentials
        • arn-role (mandatory)
        • session-name
        • web-identity-token
  • elasticsearch-output
    • index-name
    • tls-ca-certificate
    • tls-certificate
    • insecure-skip-verify
    • metric-pass-filter
    • metric-drop-filter
  • graphite-output
    • prefix
    • metric-pass-filter
    • metric-drop-filter
  • influxdb-output
    • database (mandatory)
    • username
    • password (hidden)
    • insecure-skip-verify
    • metric-pass-filter
    • metric-drop-filter
  • influxdbv2-output
    • token (mandatory) (hidden)
    • organization (mandatory)
    • bucket (mandatory)
    • insecure-skip-verify
    • metric-pass-filter
    • metric-drop-filter
  • kafka-output
    • topic
    • data-format
    • tls-ca-certificate
    • tls-certificate
    • insecure-skip-verify
    • metric-pass-filter
    • metric-drop-filter
  • prometheus-client-output
    • metric-version
    • basic-username
    • basic-password (hidden)
    • expiration-interval
    • path
    • string-as-label
    • tls-certificate-name
    • tls-allowed-ca-certificate
    • export-timestamp
    • ip-range
    • metric-pass-filter
    • metric-drop-filter
• 3.2.21. tracker
  • logging
    • enabled
    • icmp
      • debug-echo
  • bfd
    • type
    • source (pushed)
    • address (mandatory) (pushed)
    • interface (pushed)
    • vrf (mandatory) (pushed)
    • l3vrf (pushed)
    • echo-mode
    • detection-multiplier
    • desired-transmission-interval
    • required-receive-interval
    • desired-echo-transmission-interval
    • discriminator (state only)
    • state (state only) (pushed)
    • diagnostic (state only) (pushed)
    • last-down-time (state only)
    • last-up-time (state only)
    • session-down-count (state only)
    • session-up-count (state only)
    • control-packet-input-count (state only)
    • control-packet-output-count (state only)
    • echo-packet-input-count (state only)
    • echo-packet-output-count (state only)
    • zebra-notification-count (state only)
    • remote (state only)
      • discriminator (state only)
      • diagnostic (state only) (pushed)
      • multiplier (state only)
    • negociated (state only)
      • transmission-interval (state only)
      • receive-interval (state only)
      • echo-transmission-interval (state only)
  • icmp
    • address (pushed)
    • vrf (mandatory) (pushed)
    • source (pushed)
    • interface
    • dhcp-interface
    • gateway
    • period
    • threshold
    • total
    • packet-size
    • packet-tos
    • timeout (pushed)
    • state (state only) (pushed)
    • diagnostic (state only) (pushed)
  • icmp-rtt
    • address (pushed)
    • vrf (mandatory) (pushed)
    • source (pushed)
    • interface
    • gateway
    • period
    • count
    • timestamp (state only) (pushed)
    • min-rtt (state only) (pushed)
    • max-rtt (state only) (pushed)
    • average-rtt (state only) (pushed)
    • loss-ratio (state only) (pushed)
• 3.2.22. nat
  • source-rule
    • description
    • protocol
      • not
      • VALUE (mandatory)
    • destination
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
      • port-range
        • not
        • VALUE (mandatory)
      • group
        • not
        • <string> (mandatory)
    • source
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
      • port-range
        • not
        • VALUE (mandatory)
      • group
        • not
        • <string> (mandatory)
    • mark
      • not
      • <0x0-0xffffffff> (mandatory)
      • mask
    • outbound-interface
      • not
      • <string> (mandatory)
    • translate-to
      • map
      • output-address
      • address
        • VALUE (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
      • address-range
        • START (mandatory)
        • END (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
    • counters (state only)
      • packets (state only)
      • bytes (state only)
  • destination-rule
    • description
    • protocol
      • not
      • VALUE (mandatory)
    • destination
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
      • port-range
        • not
        • VALUE (mandatory)
      • group
        • not
        • <string> (mandatory)
    • source
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
      • port-range
        • not
        • VALUE (mandatory)
      • group
        • not
        • <string> (mandatory)
    • mark
      • not
      • <0x0-0xffffffff> (mandatory)
      • mask
    • inbound-interface
      • not
      • <string> (mandatory)
    • translate-to
      • map
      • address
        • VALUE (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
      • address-range
        • START (mandatory)
        • END (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
    • counters (state only)
      • packets (state only)
      • bytes (state only)
• 3.2.23. cg-nat
  • enabled
  • alg
  • pool
    • address (mandatory)
    • block-allocation-mode
    • block-size
    • allocation-mode
      • dynamic-block
        • block-size (mandatory)
      • deterministic-block
        • block-size
      • dynamic-port
        • port-algo
        • port-overloading
          • unique-destination
          • protocol
          • factor
    • port-range
      • START
      • END
  • rule
    • deterministic-snat44
      • match
        • outbound-interface (mandatory)
        • source
          • ipv4-address (mandatory)
        • ds-lite
          • softwire-address (mandatory)
      • translate-to
        • pool-name (mandatory)
        • port-algo
        • max-conntracks-per-user
        • endpoint-mapping
        • endpoint-filtering
        • hairpinning
        • address-pooling
        • port-overloading
          • unique-destination
          • protocol
          • factor
    • deterministic-snat64
      • match
        • outbound-interface (mandatory)
        • source
          • ipv6-address (mandatory)
      • translate-to
        • pool-name (mandatory)
        • port-algo
        • max-conntracks-per-user
        • endpoint-mapping
        • endpoint-filtering
        • hairpinning
        • address-pooling
        • destination-prefix
        • port-overloading
          • unique-destination
          • protocol
          • factor
    • dynamic-snat44
      • match
        • outbound-interface (mandatory)
        • source
          • ipv4-address (mandatory)
        • ds-lite
          • softwire-address
      • translate-to
        • pool-name (mandatory)
        • max-blocks-per-user
        • active-block-timeout
        • user-timeout
        • port-algo
        • max-conntracks-per-user
        • endpoint-mapping
        • endpoint-filtering
        • hairpinning
        • address-pooling
        • port-overloading
          • unique-destination
          • protocol
          • factor
    • dynamic-port-snat44
      • match
        • outbound-interface (mandatory)
        • source
          • ipv4-address (mandatory)
        • ds-lite
          • softwire-address
      • translate-to
        • pool-name (mandatory)
        • user-timeout
        • max-conntracks-per-user
        • endpoint-mapping
        • endpoint-filtering
        • hairpinning
        • address-pooling
    • dynamic-snat64
      • match
        • outbound-interface (mandatory)
        • source
          • ipv6-address (mandatory)
      • translate-to
        • pool-name (mandatory)
        • max-blocks-per-user
        • active-block-timeout
        • user-timeout
        • port-algo
        • max-conntracks-per-user
        • endpoint-mapping
        • endpoint-filtering
        • hairpinning
        • address-pooling
        • destination-prefix
        • port-overloading
          • unique-destination
          • protocol
          • factor
    • dynamic-port-snat64
      • match
        • outbound-interface (mandatory)
        • source
          • ipv6-address (mandatory)
      • translate-to
        • pool-name (mandatory)
        • user-timeout
        • max-conntracks-per-user
        • endpoint-mapping
        • endpoint-filtering
        • hairpinning
        • address-pooling
        • destination-prefix
    • static-dnat44
      • match
        • inbound-interface (mandatory)
        • destination
          • ipv4-address (deprecated)
          • ipv4-range
      • translate-to
        • ipv4-address (deprecated)
        • ipv4-range
    • static-dnat46
      • match
        • inbound-interface (mandatory)
        • destination
          • ipv4-address (deprecated)
          • ipv4-range
      • translate-to
        • ipv6-address (deprecated)
        • ipv6-range
        • source-prefix
    • static-snat44
      • match
        • outbound-interface (mandatory)
        • source
          • ipv4-address (deprecated)
          • ipv4-range
      • translate-to
        • ipv4-address (deprecated)
        • ipv4-range
    • static-snat64
      • match
        • outbound-interface (mandatory)
        • source
          • ipv6-address (deprecated)
          • ipv6-range
      • translate-to
        • ipv4-address (deprecated)
        • ipv4-range
        • destination-prefix
  • conntrack
    • behavior
      • enabled (mandatory)
    • timeouts
      • icmp
        • <uint32> (mandatory)
      • udp
        • <uint32> (mandatory)
      • gre-pptp
        • <uint32> (mandatory)
      • tcp
        • <uint32> (mandatory)
    • nat64
      • option
        • true|false (mandatory)
      • mtu
        • <uint16> (mandatory)
  • logging
    • enabled
    • local
    • event
    • framing-method
    • rsyslog-server
      • port
      • vrf
      • source
      • connection-status (state only)
      • statistics (state only)
        • transmit (state only)
        • transmit-error (state only)
        • build-error (state only)
• 3.2.24. fast-path firewall
  • fast-path
    • enabled
    • conntrack-rule-set
      • origin
        • action
          • set-mark
          • set-mss
          • set-dscp
          • save-dscp
          • restore-dscp
      • reply
        • action
          • set-mark
          • set-mss
          • set-dscp
          • save-dscp
          • restore-dscp
    • rule
      • accept
        • action
          • set-mark
          • set-dscp
          • set-mss
      • drop
        • action
      • reject
        • action
      • track
        • apply
        • action
      • match
        • family
          • ipv4
            • source-address
              • not
              • VALUE (mandatory)
            • destination-address
              • not
              • VALUE (mandatory)
            • protocol
              • not
                • VALUE (mandatory)
              • any
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • tcp
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • udp
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • icmp
                • icmp-type
                  • not
                  • VALUE (mandatory)
              • number
                • <uint8> (mandatory)
            • source-application
              • VALUE (mandatory)
            • destination-application
              • VALUE (mandatory)
            • dscp
              • not
              • <uint32> (mandatory)
          • ipv6
            • source-address
              • not
              • VALUE (mandatory)
            • destination-address
              • not
              • VALUE (mandatory)
            • protocol
              • not
                • VALUE (mandatory)
              • any
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • tcp
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • udp
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • icmpv6
                • icmp-type
                  • not
                  • VALUE (mandatory)
              • number
                • <uint8> (mandatory)
            • source-application
              • VALUE (mandatory)
            • destination-application
              • VALUE (mandatory)
            • dscp
              • not
              • <uint32> (mandatory)
          • any
            • protocol
              • not
                • VALUE (mandatory)
              • any
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • tcp
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • udp
                • source-port
                  • not
                  • VALUE (mandatory)
                • destination-port
                  • not
                  • VALUE (mandatory)
              • number
                • <uint8> (mandatory)
            • source-application
              • VALUE (mandatory)
            • destination-application
              • VALUE (mandatory)
            • dscp
              • not
              • <uint32> (mandatory)
        • mark
          • not
          • VALUE (mandatory)
      • statistics (state only)
        • match (state only)
          • packets (state only)
          • bytes (state only)
        • conntrack (state only)
          • origin (state only)
            • packets (state only)
            • bytes (state only)
          • reply (state only)
            • packets (state only)
            • bytes (state only)
    • interface
      • ingress
        • rule
          • rule-name
          • statistics (state only)
            • match (state only)
              • packets (state only)
              • bytes (state only)
            • conntrack (state only)
              • origin (state only)
                • packets (state only)
                • bytes (state only)
              • reply (state only)
                • packets (state only)
                • bytes (state only)
      • egress
        • rule
          • rule-name
          • statistics (state only)
            • match (state only)
              • packets (state only)
              • bytes (state only)
            • conntrack (state only)
              • origin (state only)
                • packets (state only)
                • bytes (state only)
              • reply (state only)
                • packets (state only)
                • bytes (state only)
    • default
      • rule
        • rule-name (mandatory)
        • statistics (state only)
          • match (state only)
            • packets (state only)
            • bytes (state only)
          • conntrack (state only)
            • origin (state only)
              • packets (state only)
              • bytes (state only)
            • reply (state only)
              • packets (state only)
              • bytes (state only)
• 3.2.25. ddos-protection
  • enabled
  • tcp
    • syn
      • global
      • source
      • destination
      • unit
    • syn-ack
      • global
      • source
      • destination
      • unit
    • ack
      • global
      • source
      • destination
      • unit
    • rst
      • global
      • source
      • destination
      • unit
  • udp
    • dns
      • global
      • source
      • destination
      • unit
    • quic
      • global
      • source
      • destination
      • unit
    • raw
      • global
      • source
      • destination
      • unit
  • icmp
    • echo
      • global
      • source
      • destination
      • unit
  • trusted
    • ipv4
    • ipv6
• 3.2.26. ntp
  • enabled (pushed)
  • ntp-source-address
  • auth-key
    • key-value (hidden)
  • server-subnet
    • allow
    • deny
  • time-sources
    • makestep
      • threshold
      • limit
    • server
      • version
      • association-type
      • iburst
      • prefer
      • auth-key-id
      • stratum (state only)
      • root-delay (state only)
      • root-dispersion (state only)
      • offset (state only)
      • poll-interval (state only)
      • synchronized (state only)
      • state (state only)
  • server (state only)
    • version (state only)
    • association-type (state only)
    • iburst (state only)
    • prefer (state only)
    • stratum (state only)
    • root-delay (state only)
    • root-dispersion (state only)
    • offset (state only)
    • poll-interval (state only)
    • synchronized (state only)
    • state (state only)
    • auth-key-id (state only)
• 3.2.27. firewall
  • ipv4 filter
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv4 mangle
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • postrouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • rpfilter
          • invert
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv4 raw
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • notrack
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • notrack
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • rpfilter
          • invert
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv6 filter
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv6 mangle
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • postrouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • rpfilter
          • invert
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • ipv6 raw
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • notrack
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • notrack
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set (mandatory)
          • examined
        • conntrack
          • status
            • not
            • VALUE (mandatory)
          • state
            • not
            • VALUE (mandatory)
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined (mandatory)
            • set
          • abort
            • examined (mandatory)
            • set
          • shutdown-complete
            • examined (mandatory)
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • rpfilter
          • invert
        • counters (state only)
          • packets (state only)
          • bytes (state only)
• 3.2.28. network-port (state only)
  • bus-addr (state only) (pushed)
  • device-tree-alias (state only) (pushed)
  • device-tree-compatible (state only) (pushed)
  • vendor (state only) (pushed)
  • model (state only) (pushed)
  • device-port (state only) (pushed)
  • mac-address (state only) (pushed)
  • interface (state only) (pushed)
• 3.2.29. interface
  • bridge
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ageing-time
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ddos-protection
      • enabled
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • prefix-delegation
        • request
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • stp
      • enabled
      • priority
      • forward-delay
      • max-age
      • hello-time
    • link-interface
      • learning
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • gre
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ttl
    • tos
    • link-interface
    • link-vrf
    • local (mandatory)
    • remote
    • checksum
    • sequence-number
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • key
      • input (hidden)
      • output (hidden)
      • both (hidden)
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • gretap
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ttl
    • tos
    • link-interface
    • link-vrf
    • local (mandatory)
    • remote
    • checksum
    • sequence-number
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • ethernet
      • mac-address (pushed)
    • key
      • input (hidden)
      • output (hidden)
      • both (hidden)
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • gtp
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • qos-hub
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • ipip
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • local (mandatory)
    • remote (mandatory)
    • ttl
    • tos
    • link-interface
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • lag
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • mode (mandatory)
    • xmit-hash-policy
    • minimum-links
    • lacp-rate
    • mii-link-monitoring
    • arp-interval
    • arp-ip-target
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ddos-protection
      • enabled
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • prefix-delegation
        • request
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • link-interface
      • state (state only)
      • link (state only)
      • failure-count (state only)
    • primary
      • interface (mandatory)
      • reselect-policy
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • loopback
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • prefix-delegation
        • request
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • ethernet
      • mac-address (pushed)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • physical
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • port (mandatory)
    • rx-cp-protection
    • rx-cp-protection-offload
    • tx-cp-protection
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ddos-protection
      • enabled
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • prefix-delegation
        • request
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • ethernet
      • mac-address (pushed)
      • auto-negotiate
      • duplex-mode
      • port-speed
      • flow-control-rx
      • flow-control-tx
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • dscp-mapping (config only)
          • name (config only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • pimreg (state only)
    • mtu (state only)
    • promiscuous (state only)
    • enabled (state only) (pushed)
    • description (state only)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ipv4 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-lease-time (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • request (state only)
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
        • status (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • router (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • prefix-delegation (state only)
        • request (state only)
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
    • network-stack (state only)
      • ipv4 (state only)
        • send-redirects (state only)
        • accept-redirects (state only)
        • accept-source-route (state only)
        • arp-announce (state only)
        • arp-filter (state only)
        • arp-ignore (state only)
        • arp-proxy (state only)
        • log-invalid-addresses (state only)
      • ipv6 (state only)
        • autoconfiguration (state only)
        • accept-duplicate-address-detection (state only)
        • accept-router-advert (state only)
        • accept-redirects (state only)
        • accept-segment-routing (state only)
        • accept-source-route (state only)
        • router-solicitations (state only)
        • use-temporary-addresses (state only)
  • pppoe
    • enabled
    • link-interface (mandatory)
    • service-name
    • ac-name
    • remote-mac-address
    • mtu
    • mru
    • request
    • link-status (state only)
    • session (state only)
    • rpf (state only)
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • auth
      • reply
      • user (mandatory)
      • secret (mandatory) (hidden)
    • ipcp
      • enabled
      • local-address
      • remote-address
    • ipv6cp
      • enabled
      • local-ifid
      • remote-ifid
    • lcp
      • echo-interval
      • echo-failure
    • logging
      • enabled
  • svti
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • svti-id (mandatory)
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • link-interface (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • prefix-delegation
        • request
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • svti-template (config only)
    • mtu (config only)
    • install-routes-to (config only)
  • system-loopback (state only)
    • mtu (state only)
    • promiscuous (state only)
    • enabled (state only) (pushed)
    • description (state only)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ipv4 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-lease-time (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • request (state only)
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
        • status (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • router (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • prefix-delegation (state only)
        • request (state only)
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • veth
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • link-interface (mandatory)
    • link-vrf (mandatory)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ddos-protection
      • enabled
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • prefix-delegation
        • request
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • ethernet
      • mac-address (pushed)
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • vlan
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • vlan-id (mandatory)
    • link-interface (mandatory)
    • protocol
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ddos-protection
      • enabled
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • prefix-delegation
        • request
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • egress-priority-mapping
      • to
    • ingress-priority-mapping
      • to
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • vxlan
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • vni (mandatory)
    • group
    • remote
    • local
    • ttl
    • tos
    • link-interface
    • link-vrf
    • learning
    • gbp
    • dst
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
      • fdb
        • link-interface
        • port
        • vni
        • state (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • prefix-delegation
        • request
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
      • fdb
        • link-interface
        • port
        • vni
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • src-range
      • <uint16>
      • <uint16>
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • xvrf
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • link-interface (mandatory)
    • link-vrf (mandatory)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • ceiling-priority (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (deprecated) (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • enqueue-bytes (state only)
                • xmit-packets (state only)
                • xmit-bytes (state only)
                • drop-queue-full (state only)
                • drop-queue-full-bytes (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • enqueue-bytes (state only)
              • xmit-packets (state only)
              • xmit-bytes (state only)
              • drop-queue-full (state only)
              • drop-queue-full-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
• 3.2.30. qos
  • class-mask (config only)
  • policer (config only)
    • description (config only)
    • bandwidth (config only) (mandatory)
    • burst (config only)
    • excess-bandwidth (config only)
    • excess-burst (config only)
  • shared-policer
    • description (config only)
    • policer (config only)
    • bandwidth (state only)
    • burst (state only)
    • excess-bandwidth (state only)
    • excess-burst (state only)
    • stats (state only)
      • pass-packets (state only)
      • pass-bytes (state only)
      • pass-excess-packets (state only)
      • pass-excess-bytes (state only)
      • drop-packets (state only)
      • drop-bytes (state only)
  • shaper (config only)
    • description (config only)
    • bandwidth (config only) (mandatory)
    • burst (config only)
    • layer1-overhead (config only)
    • queue-size (config only)
  • scheduler (config only)
    • description (config only)
    • pq (config only)
      • nb-queue (config only) (mandatory)
      • default-queue (config only)
      • queue (config only)
        • size (config only)
        • policer (config only)
        • shaper (config only)
        • child-scheduler (config only)
        • priority (config only)
        • class (config only)
    • pb-dwrr (config only)
      • nb-queue (config only) (mandatory)
      • default-queue (config only)
      • queue (config only)
        • size (config only)
        • policer (config only)
        • shaper (config only)
        • child-scheduler (config only)
        • quantum (config only)
        • priority (config only)
        • class (config only)
    • htb (config only)
      • description (config only)
      • divisor (config only)
      • default-queue (config only)
      • queue (config only)
        • description (config only)
        • bandwidth (config only) (mandatory)
        • burst (config only)
        • ceiling (config only)
        • ceiling-burst (config only)
        • ceiling-priority (config only)
        • layer1-overhead (config only)
        • quantum (config only)
        • size (config only)
        • priority (deprecated) (config only)
        • policer (config only)
        • child-queue (config only)
        • child-scheduler (config only)
        • class (config only)
    • sfq (config only)
      • description (config only)
      • flows (config only)
      • quantum (config only)
      • limit (config only)
  • class (config only)
    • description (config only)
    • mark (config only)
    • cp (config only)
  • selector (config only)
    • description (config only)
    • match8bits (config only)
      • value (config only) (mandatory)
      • mask (config only)
      • offset (config only) (mandatory)
    • match16bits (config only)
      • value (config only) (mandatory)
      • mask (config only)
      • offset (config only) (mandatory)
    • match32bits (config only)
      • value (config only) (mandatory)
      • mask (config only)
      • offset (config only) (mandatory)
    • ipv4 (config only)
      • match-all (config only)
      • source (config only)
      • destination (config only)
      • protocol (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • tos (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • dscp (config only)
        • value (config only) (mandatory)
    • ipv6 (config only)
      • match-all (config only)
      • source (config only)
      • destination (config only)
      • protocol (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • tos (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • dscp (config only)
        • value (config only) (mandatory)
    • tcp (config only)
      • match-all (config only)
      • source-port (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • destination-port (config only)
        • value (config only) (mandatory)
        • mask (config only)
    • udp (config only)
      • match-all (config only)
      • source-port (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • destination-port (config only)
        • value (config only) (mandatory)
        • mask (config only)
    • icmp (config only)
      • match-all (config only)
      • type (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • code (config only)
        • value (config only) (mandatory)
        • mask (config only)
    • icmpv6 (config only)
      • match-all (config only)
      • type (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • code (config only)
        • value (config only) (mandatory)
        • mask (config only)
  • policy (config only)
    • description (config only)
    • priority (config only) (mandatory)
    • selector (config only) (mandatory)
    • action (config only)
      • set-mark (config only)
      • restore-connmark (config only)
      • redirect (config only)
      • pass (config only)
      • set-priority (config only)
  • ingress (config only)
    • dscp-mapping (config only)
      • priority (config only)
        • dscp (config only)
• 3.2.31. vrrp
  • global
    • enabled (pushed)
    • router-id
    • traps-enabled
    • vrrp-startup-delay
    • drop-traffic-on-backup
    • group
      • instance
      • notify-ha-group
      • state (state only)
      • track-group
        • priority-penalty
  • interface
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • version
    • link-interface (mandatory)
    • garp-delay
    • use-vmac
    • vmac-xmit-base
    • vrid (mandatory)
    • priority
    • init-state
    • preempt
    • preempt-delay
    • advertisement-interval
    • track-link-interface
    • track-interface
    • track
    • track-fast-path
    • notify-ha-group
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only) (pushed)
    • last-change (state only)
    • state (state only)
    • ddos-protection (deprecated)
      • enabled (deprecated)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-segment-routing
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • authentication
      • auth-type
      • auth-pass (hidden)
    • unicast-peer
    • virtual-address
      • interface
      • no-track
    • virtual-route
      • interface
      • gw
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
    • ipv4 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-lease-time (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • request (state only)
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
        • status (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • router (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • prefix-delegation (state only)
        • request (state only)
        • current-lease (state only)
          • ia-address (state only)
          • renew (state only)
          • rebind (state only)
          • start (state only)
          • preferred-lifetime (state only)
          • max-lifetime (state only)
    • ethernet (state only)
      • mac-address (state only) (pushed)
• 3.2.32. ike
  • enabled (pushed)
  • pool
    • address (mandatory)
    • dns
    • nbns
    • dhcp
    • subnet
    • netmask
  • certificate
    • certificate (mandatory) (hidden)
    • private-key (mandatory) (hidden)
  • certificate-authority
    • certificate (mandatory)
    • crl
    • crl-uri
  • pre-shared-key
    • id
    • secret (mandatory) (hidden)
  • eap-key
    • id
    • secret (mandatory) (hidden)
  • eap-radius
    • nas-identifier
    • auth-port
    • sockets
    • retransmit-tries
    • retransmit-timeout
    • retransmit-base
    • source
    • server
      • address (mandatory)
      • vrf
      • secret (mandatory) (hidden)
      • nas-identifier
      • auth-port
      • sockets
      • retransmit-tries
      • retransmit-timeout
      • retransmit-base
      • source
  • psk-radius
    • password (mandatory) (hidden)
    • nas-identifier
    • auth-port
    • sockets
    • retransmit-tries
    • retransmit-timeout
    • retransmit-base
    • source
    • server
      • address (mandatory)
      • vrf
      • secret (mandatory) (hidden)
      • nas-identifier
      • auth-port
      • sockets
      • retransmit-tries
      • retransmit-timeout
      • retransmit-base
      • source
  • logging
    • daemon
      • default
      • asn1
      • config
      • child
      • daemon
      • encoding
      • ipsec
      • ike
      • job
      • kernel
      • library
      • manager
      • network
    • authpriv
      • default
      • asn1
      • config
      • child
      • daemon
      • encoding
      • ipsec
      • ike
      • job
      • kernel
      • library
      • manager
      • network
  • global-options
    • threads
    • acquire-timeout
    • half-open-timeout
    • sa-table-size
    • sa-table-segments
    • install-routes
    • routing-table
    • routing-table-prio
    • retransmit-tries
    • retransmit-timeout
    • retransmit-base
    • delete-rekeyed
    • delete-rekeyed-delay
    • make-before-break
    • interface-use
    • interface-ignore
    • snmp
    • mobike-prefer-best-path
    • install-vip
    • install-vip-on
    • retry-initiate-interval
    • dn-matching
    • dos-protection
      • cookie-threshold
      • block-threshold
      • init-limit-half-open
      • init-limit-job-load
      • ike-sa-limit
    • sp-hash-ipv4
      • local
      • remote
    • sp-hash-ipv6
      • local
      • remote
  • ha
    • enabled
    • listen-ha-group (mandatory)
    • node-id (deprecated)
    • interface (deprecated)
    • local-address (mandatory)
    • remote-address (mandatory)
    • dscp
    • seqnum-sync
      • oseq-shift
      • sync-period-time
      • sync-period-packets
    • pool
      • address (mandatory)
      • dns
      • nbns
      • dhcp
      • subnet
      • netmask
    • pool-lease (state only)
      • address (state only)
      • size (state only)
      • online (state only)
      • offline (state only)
  • ike-policy-template (config only)
    • local-auth-method (config only)
    • remote-auth-method (config only)
    • keying-tries (config only)
    • unique-sa (config only)
    • reauth-time (config only)
    • rekey-time (config only)
    • dpd-delay (config only)
    • aggressive (config only)
    • udp-encap (config only)
    • mobike (config only)
    • revocation (config only)
    • ike-proposal (config only)
      • enc-alg (config only)
      • auth-alg (config only)
      • aead-alg (config only)
      • prf-alg (config only)
      • dh-group (config only) (mandatory)
  • ipsec-policy-template (config only)
    • start-action (config only)
    • close-action (config only)
    • dpd-action (config only)
    • replay-window (config only)
    • rekey-time (config only)
    • inactivity (config only)
    • life-time (config only)
    • rand-time (config only)
    • rekey-bytes (config only)
    • life-bytes (config only)
    • rand-bytes (config only)
    • rekey-packets (config only)
    • life-packets (config only)
    • rand-packets (config only)
    • encap-copy-dscp (config only)
    • decap-copy-dscp (config only)
    • encap-copy-df (config only)
    • esp-proposal (config only)
      • enc-alg (config only)
      • auth-alg (config only)
      • aead-alg (config only)
      • dh-group (config only)
      • esn (config only)
    • ah-proposal (config only)
      • auth-alg (config only) (mandatory)
      • dh-group (config only)
      • esn (config only)
  • vpn
    • enabled
    • description
    • version
    • local-address
    • remote-address
    • local-id
    • remote-id
    • local-eap-id
    • remote-eap-id
    • certificate
    • remote-ca-certificate
    • vip-request
    • vip-pool
    • dynamic-svti (config only)
      • svti-template (config only) (mandatory)
      • vrf (config only)
    • dynamic-gre (config only)
      • template (config only) (mandatory)
      • vrf (config only)
    • ike-policy
      • template (config only) (mandatory)
      • local-auth-method
      • remote-auth-method
      • keying-tries
      • unique-sa
      • reauth-time
      • rekey-time
      • dpd-delay
      • aggressive
      • udp-encap
      • mobike
      • revocation
      • ike-proposal
        • enc-alg
        • auth-alg
        • aead-alg
        • prf-alg
        • dh-group (mandatory)
    • ipsec-policy
      • template (config only) (mandatory)
      • start-action
      • close-action
      • dpd-action
      • replay-window
      • rekey-time
      • inactivity
      • life-time
      • rand-time
      • rekey-bytes
      • life-bytes
      • rand-bytes
      • rekey-packets
      • life-packets
      • rand-packets
      • encap-copy-dscp
      • decap-copy-dscp
      • encap-copy-df
      • esp-proposal
        • enc-alg
        • auth-alg
        • aead-alg
        • dh-group
        • esn
      • ah-proposal
        • auth-alg (mandatory)
        • dh-group
        • esn
    • security-policy
      • svti-id-in
      • svti-id-out
      • action
      • mode
      • priority
      • local-ts
        • subnet
        • protocol
        • port
      • remote-ts
        • subnet
        • protocol
        • port
      • traffic-selectors
        • local-ts
          • subnet
          • protocol
          • port
        • remote-ts
          • subnet
          • protocol
          • port
      • inject-routes
        • next-hop (mandatory)
        • next-hop-backup
        • vrf
        • l3vrf
        • table
  • ike-sas (state only)
    • total (state only)
    • half-open (state only)
  • task-processing (state only)
    • worker-threads (state only)
      • total (state only)
      • idle (state only)
      • critical (state only)
      • high (state only)
      • medium (state only)
      • low (state only)
    • task-queues (state only)
      • critical (state only)
      • high (state only)
      • medium (state only)
      • low (state only)
      • scheduled (state only)
  • counters (state only)
    • ike-rekey-init (state only)
    • ike-rekey-resp (state only)
    • child-rekey (state only)
    • invalid (state only)
    • invalid-spi (state only)
    • ike-init-in-req (state only)
    • ike-init-in-resp (state only)
    • ike-init-out-req (state only)
    • ike-init-out-resp (state only)
    • ike-auth-in-req (state only)
    • ike-auth-in-resp (state only)
    • ike-auth-out-req (state only)
    • ike-auth-out-resp (state only)
    • create-child-in-req (state only)
    • create-child-in-resp (state only)
    • create-child-out-req (state only)
    • create-child-out-resp (state only)
    • info-in-req (state only)
    • info-in-resp (state only)
    • info-out-req (state only)
    • info-out-resp (state only)
  • vpn-counters (state only)
    • ike-rekey-init (state only)
    • ike-rekey-resp (state only)
    • child-rekey (state only)
    • invalid (state only)
    • invalid-spi (state only)
    • ike-init-in-req (state only)
    • ike-init-in-resp (state only)
    • ike-init-out-req (state only)
    • ike-init-out-resp (state only)
    • ike-auth-in-req (state only)
    • ike-auth-in-resp (state only)
    • ike-auth-out-req (state only)
    • ike-auth-out-resp (state only)
    • create-child-in-req (state only)
    • create-child-in-resp (state only)
    • create-child-out-req (state only)
    • create-child-out-resp (state only)
    • info-in-req (state only)
    • info-in-resp (state only)
    • info-out-req (state only)
    • info-out-resp (state only)
  • ike-sa (state only)
    • name (state only)
    • version (state only)
    • state (state only)
    • local-address (state only)
    • remote-address (state only)
    • local-port (state only)
    • remote-port (state only)
    • local-id (state only)
    • remote-id (state only)
    • remote-eap-id (state only)
    • initiator-spi (state only)
    • responder-spi (state only)
    • enc-alg (state only)
    • auth-alg (state only)
    • aead-alg (state only)
    • prf-alg (state only)
    • dh-group (state only)
    • established-time (state only)
    • rekey-time (state only)
    • reauth-time (state only)
    • udp-encap (state only)
    • mobike (state only)
    • local-vip (state only)
    • remote-vip (state only)
    • child-sa (state only)
      • name (state only)
      • state (state only)
      • reqid (state only)
      • protocol (state only)
      • udp-encap (state only)
      • mobike (state only)
      • spi-in (state only)
      • spi-out (state only)
      • svti-id-in (state only)
      • svti-id-out (state only)
      • enc-alg (state only)
      • auth-alg (state only)
      • aead-alg (state only)
      • dh-group (state only)
      • esn (state only)
      • bytes-in (state only)
      • packets-in (state only)
      • bytes-out (state only)
      • packets-out (state only)
      • installed-time (state only)
      • rekey-time (state only)
      • life-time (state only)
      • mode (state only)
      • local-ts (state only)
        • subnet (state only)
        • protocol (state only)
        • port (state only)
        • unsupported (state only)
      • remote-ts (state only)
        • subnet (state only)
        • protocol (state only)
        • port (state only)
        • unsupported (state only)
      • traffic-selectors (state only)
        • local-ts (state only)
          • subnet (state only)
          • protocol (state only)
          • port (state only)
          • unsupported (state only)
        • remote-ts (state only)
          • subnet (state only)
          • protocol (state only)
          • port (state only)
          • unsupported (state only)
  • pool-lease (state only)
    • address (state only)
    • size (state only)
    • online (state only)
    • offline (state only)
• 3.2.33. sflow
  • enabled (pushed)
  • agent-interface
  • polling
  • sflow-port
  • if-error
  • if-unknown
  • sflow-collector
    • port
    • source-ip
  • sflow-interface
  • sflow-sampling
    • rate
• 3.2.34. ipfix
  • enabled (pushed)
  • ipfix-collector
    • address (mandatory)
    • port
    • protocol
    • scan-interval-seconds
    • frag-flow-lifetime-seconds
    • active-flow-lifetime-interval-seconds
    • idle-flow-lifetime-interval-seconds
    • mpls-route-hash-order
    • interface-cache-hash-order
    • sampling-packet-interval
    • sampling-packet-space
    • source-ip
    • source-port
    • export-expired-flow-only
  • ipfix-probe
    • enabled
    • link-vrf
    • collector (mandatory)
    • observation-domain-id
    • template-refresh-timeout
    • connected (state only)
    • collecting (state only)
• 3.2.35. snmp
  • enabled (pushed)
  • interface-ignore
  • engine-id
    • text
    • ipv4
    • ipv6
    • interface
  • listen
    • protocols
    • port
    • source
  • static-info
    • location
    • contact
    • name
    • services
    • description
    • object-id
  • view
    • subtree
      • included
  • community
    • authorization (mandatory)
    • source
    • view
  • monitored-vrf
    • interface-ignore
    • identifier
      • authorization (mandatory)
      • source
      • view
    • traps
      • destination
        • community
  • access-control
    • user
      • auth-password (mandatory) (hidden)
      • auth-method
      • priv-password (hidden)
      • priv-protocol
      • engine-id
    • group
      • user (mandatory)
      • security-level (mandatory)
      • view
      • authorization
  • traps
    • destination
      • source
      • port
      • protocol
      • notification-type (mandatory)
      • community
      • user
    • authfail-check
      • enabled
    • link-status-check
      • frequency
      • enabled
    • process-check
      • frequency
      • enabled
    • disk-space-check
      • threshold (mandatory)
      • frequency
      • enabled
    • load-check
      • threshold (mandatory)
      • enabled
• 3.2.36. routing
  • Root commands
    • ipv4-access-list
      • remark
      • seq
        • permit
          • exact-match
        • deny
          • exact-match
    • ipv6-access-list
      • remark
      • seq
        • permit
          • exact-match
        • deny
          • exact-match
    • logging
      • enabled
      • level
      • mpls
        • ldp
          • enabled
          • discovery-hello
          • errors
          • events
          • labels
          • zebra
          • message
            • direction
            • detail
      • base
        • enabled
        • events
          • enabled
        • kernel
          • enabled
          • msgdump-recv
          • msgdump-send
        • nexthop-tracking
          • enabled
          • details
        • rib
          • enabled
          • details
        • tracker
          • enabled
      • route-map
        • enabled
      • bgp
        • enabled
        • allow-martians
        • as-4bytes
        • as-4bytes-segment
        • bestpath
        • nexthop-tracking
        • flowspec
        • keepalives
        • neighbor-events
        • update-groups
        • zebra
        • rpki
        • pbr
          • detail
        • updates
          • enabled
          • in
          • out
          • prefix
        • vpn
          • label
          • leak-vrf
          • route-map-event
      • rip
        • enabled
        • events
        • packet
        • zebra
      • ripng
        • enabled
        • events
        • packet
        • zebra
      • ospf
        • enabled
        • events
        • ism
        • lsa
        • nsm
        • nssa
        • zebra
        • message
          • direction
          • detail
      • ospf6
        • enabled
        • abr
        • asbr
        • events
        • flooding
        • interface
        • neighbor
        • route
        • spf
        • zebra
        • border-routers
          • summary
          • area-id
          • router-id
        • lsa
          • level
        • message
          • direction
      • isis
        • enabled
        • adj-packets
        • bfd
        • events
        • flooding
        • ldp-sync
        • lfa
        • lsp-gen
        • lsp-sched
        • packet-dump
        • route-events
        • snp-packets
        • spf-events
        • sr-events
        • tx-queue
        • update-packets
    • traffic-engineering
      • affinity-map
        • bit-position (mandatory)
    • ipv4-prefix-list
      • seq
        • address
        • policy (mandatory)
        • ge
        • le
    • ipv6-prefix-list
      • seq
        • address
        • policy (mandatory)
        • ge
        • le
    • route-map
      • seq
        • policy (mandatory)
        • description
        • call
        • on-match
        • match
          • as-path
          • interface
          • local-preference
          • mac-address
          • metric
          • origin
          • peer
          • probability
          • source-instance
          • source-protocol
          • tag
          • extcommunity
          • rpki
          • evpn
            • default-route
            • route-type
            • vni
            • route-distinguisher
          • ip
            • address
              • access-list
              • prefix-list
              • prefix-len
            • next-hop
              • access-list
              • prefix-list
              • prefix-len
            • route-source
              • access-list
              • prefix-list
          • ipv6
            • address
              • access-list
              • prefix-list
              • prefix-len
            • next-hop
              • address
          • community
            • id (mandatory)
            • exact-match
          • large-community
            • id (mandatory)
            • exact-match
        • set
          • table
          • atomic-aggregate
          • label-index
          • local-preference
          • metric
          • metric-type
          • origin
          • originator-id
          • src
          • tag
          • weight
          • comm-list-delete
          • extcomm-list-delete
          • large-comm-list-delete
          • aggregator
            • as (mandatory)
            • address (mandatory)
          • as-path
            • exclude (deprecated)
            • ignore
              • all
              • asn
              • access-list
            • prepend
              • last-as
              • asn
                • VALUE (mandatory)
            • replace
              • asn
                • by
              • access-list
                • by
              • any
                • by
          • ip
            • next-hop
          • ipv4
            • vpn
              • next-hop
          • ipv6
            • next-hop
              • global
              • local
              • peer-address
              • prefer-global
            • vpn
              • next-hop
          • l3vpn
            • next-hop
              • encapsulation
          • community
            • none
            • attribute (state only)
            • replace-by
              • ATTRIBUTE
            • add
              • ATTRIBUTE
          • large-community
            • none
            • attribute (state only)
            • replace-by
              • ATTRIBUTE
            • add
              • ATTRIBUTE
          • extcommunity
            • rt
            • soo
            • color
            • bandwidth
              • VALUE (mandatory)
    • bgp
      • route-map-delay
      • rpki-ssh-key (state only)
      • community-list
        • policy
          • POLICY (mandatory)
          • COMMUNITY (mandatory)
      • community-list-expanded
        • policy
          • POLICY (mandatory)
          • COMMUNITY (mandatory)
      • extcommunity-list
        • policy
          • POLICY (mandatory)
          • rt
          • soo
      • extcommunity-list-expanded
        • policy
          • POLICY (mandatory)
          • <string> (mandatory)
      • large-community-list
        • policy
          • POLICY (mandatory)
          • LARGE-COMMUNITY (mandatory)
      • large-community-list-expanded
        • policy
          • POLICY (mandatory)
          • <string> (mandatory)
      • as-path-access-list
        • policy
          • POLICY (mandatory)
          • <string> (mandatory)
      • snmp
        • trap
      • queue-limit
        • input
        • output
  • global
    • ipv4
      • router-id
      • nexthop-tracking
        • resolve-via-default
      • protocol
    • ipv6
      • nexthop-tracking
        • resolve-via-default
      • protocol
  • static
    • ipv4-route
      • next-hop
        • dhcp-port
        • distance
        • label
        • mpls-label
        • nexthop-l3vrf
        • tag
        • track
    • ipv6-route
      • next-hop
        • distance
        • label
        • mpls-label
        • nexthop-l3vrf
        • tag
        • track
    • table
      • ipv4-route
        • next-hop
          • dhcp-port
          • distance
          • label
          • mpls-label
          • nexthop-l3vrf
          • tag
          • track
      • ipv6-route
        • next-hop
          • distance
          • label
          • mpls-label
          • nexthop-l3vrf
          • tag
          • track
    • l3vrf (state only)
      • ipv4-route (state only)
        • next-hop (state only)
          • dhcp-port (state only)
          • distance (state only)
          • label (state only)
          • mpls-label (state only)
          • nexthop-l3vrf (state only)
          • tag (state only)
          • track (state only)
      • ipv6-route (state only)
        • next-hop (state only)
          • distance (state only)
          • label (state only)
          • mpls-label (state only)
          • nexthop-l3vrf (state only)
          • tag (state only)
          • track (state only)
  • interface
    • isis
      • area-tag (mandatory)
      • ipv4-routing
      • ipv6-routing
      • circuit-type
      • csnp-interval
      • psnp-interval
      • priority
      • disable-three-way-handshake
      • network-point-to-point
      • passive
      • password
        • password (mandatory) (hidden)
        • password-type (mandatory)
      • hello
        • padding
        • interval
          • level-1
          • level-2
        • multiplier
          • level-1
          • level-2
      • fast-reroute
        • lfa
          • enabled
          • exclude-interface
        • ti-lfa
          • enabled
          • node-protection
          • link-fallback
      • metric
        • level-1
        • level-2
      • multi-topology
        • ipv4-unicast
        • ipv4-multicast
        • ipv4-management
        • ipv6-unicast
        • ipv6-multicast
        • ipv6-management
        • ipv6-dstsrc
    • ip nhrp
      • enabled
      • registration-no-unique
      • shortcut
      • redirect
      • shortcut-keep-sa
      • network-id
      • holdtime
      • ip-nhrp-mtu
      • nhrp-map
        • nbma
      • nhrp-nhs
        • nbma (mandatory)
    • ipv6 nhrp
      • enabled
      • registration-no-unique
      • shortcut
      • redirect
      • shortcut-keep-sa
      • network-id
      • holdtime
      • nhrp-map
        • nbma (mandatory)
      • nhrp-nhs
        • nbma (mandatory)
    • ip ospf
      • area
      • authentication
      • authentication-key (hidden)
      • cost
      • hello-interval
      • mtu-ignore
      • priority
      • retransmit-interval
      • transmit-delay
      • network
      • message-digest-key
        • md5 (mandatory) (hidden)
      • dead-interval
        • seconds
        • minimal
          • hello-multiplier (mandatory)
      • address
        • area
        • authentication
        • authentication-key (hidden)
        • cost
        • hello-interval
        • mtu-ignore
        • priority
        • retransmit-interval
        • transmit-delay
        • message-digest-key
          • md5 (mandatory) (hidden)
        • dead-interval
          • seconds
          • minimal
            • hello-multiplier (mandatory)
    • ipv6 ospf6
      • cost
      • dead-interval
      • hello-interval
      • ifmtu
      • instance-id
      • mtu-ignore
      • network
      • passive
      • priority
      • retransmit-interval
      • transmit-delay
      • advertise
        • prefix-list (mandatory)
    • ip rip
      • v2-broadcast
      • split-horizon
      • version
        • receive
        • send
      • authentication
        • mode
        • md5-auth-length
        • password (hidden)
        • key-chain
    • ipv6 ripng
      • split-horizon
    • ip pim
      • enabled
      • version
      • query-interval
      • query-max-response-time
      • last-member-query-count
      • last-member-query-interval
      • static-group
    • ip pim
      • enabled
      • hello-interval
      • hello-holdtime
      • bsm
      • unicast-bsm
      • dr-priority
      • use-source
    • traffic-engineering
      • metric
      • affinity-map
      • delay
        • average
        • minimum
        • maximum
  • evpn (state only)
    • vni (state only)
      • type (state only)
      • vxlan (state only)
      • num-mac (state only)
      • num-arp-nd (state only)
      • local-vtep-ip (state only)
      • advertise-gateway-mac-ip (state only)
      • state (state only)
      • router-mac (state only)
      • l2-vni (state only)
      • arp-neighbor-discovery (state only)
        • state (state only)
        • default-gateway (state only)
        • mac (state only)
        • type (state only)
        • remote-vtep-ip (state only)
      • mac (state only)
        • vlan-id (state only)
        • type (state only)
        • remote-vtep-ip (state only)
  • bgp
    • enabled (pushed)
    • as (mandatory)
    • as-notation
    • always-compare-med
    • l3vni
    • cluster-id
    • coalesce-time
    • deterministic-med
    • ebgp-connected-route-check
    • fast-convergence
    • fast-external-failover
    • graceful-shutdown
    • log-neighbor-changes
    • network-import-check
    • route-reflector-allow-outbound-policy
    • reject-as-sets
    • router-id
    • ebgp-requires-policy
    • neighbor-total-count (state only)
    • bestpath
      • compare-routerid
      • med
      • as-path
        • confederation
        • ignore
        • multipath-relax
      • extcommunity-bandwidth
        • behavior
    • client-to-client
      • reflection
    • confederation
      • identifier
      • peers
    • graceful-restart
      • preserve-fw-state
      • restart-time
      • stalepath-time
    • listen
      • limit
      • neighbor-range
        • neighbor-group (mandatory)
    • max-med
      • administrative
      • on-startup
        • period (mandatory)
        • max-med
    • packet-rw-quantum
      • read
      • write
    • tcp-keepalive
      • idle
      • keepalive
      • probes
    • update-delay
      • delay
      • established-wait
    • segment-routing
      • ipv6
        • locator (mandatory)
    • address-family
    • neighbor-group
      • remote-as
      • capability (deprecated)
      • capability-negotiate
      • ebgp-multihop
      • enforce-first-as
      • enforce-multihop
      • neighbor-description
      • override-capability
      • passive
      • password (hidden)
      • solo
      • strict-capability-match
      • ttl-security-hops
      • update-source
      • sender-as-path-loop-detection
      • track
      • check-control-plane-failure
      • remote-neighbor-group (state only)
      • remote-router-id (state only)
      • state (state only)
      • min-time-btwn-advertisement (state only)
      • last-reset (state only)
      • bgp-connection (state only)
      • connect-retry-timer (state only)
      • estimated-rount-trip-time (state only)
      • capabilities
        • dynamic
        • extended-nexthop
        • fqdn
      • local-as
        • as-number (mandatory)
        • no-prepend
        • replace-as
      • shutdown
        • message
      • timers
        • advertisement-interval
        • connect-retry
        • keepalive-interval
        • hold-time
      • address-family
        • ipv4-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-multicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-labeled-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-flowspec
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv4-vpn
          • enabled
          • unsuppress-map
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-unicast
          • enabled
          • nexthop-local-unchanged
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-multicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-labeled-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-flowspec
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-vpn
          • enabled
          • unsuppress-map
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • l2vpn-evpn
          • enabled
          • nexthop-self
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • allowas-in
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • route-map
            • route-map-name (mandatory)
        • link-state-non-vpn
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • allowas-in
          • send-community
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • route-map
            • route-map-name (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
      • connections (state only)
        • established (state only)
        • dropped (state only)
      • local-host (state only)
        • name (state only)
        • port (state only)
      • remote-host (state only)
        • name (state only)
        • port (state only)
      • nexthop (state only)
        • address (state only)
        • global-address (state only)
        • local-address (state only)
      • thread (state only)
        • read-enabled (state only)
        • write-enabled (state only)
      • message-statistics (state only)
        • packet-wait-process (state only)
        • packet-wait-written (state only)
        • open-sent (state only)
        • opens-received (state only)
        • notifications-sent (state only)
        • notifications-received (state only)
        • updates-sent (state only)
        • updates-received (state only)
        • keepalives-sent (state only)
        • keepalives-received (state only)
        • route-refresh-sent (state only)
        • route-refresh-received (state only)
        • capability-sent (state only)
        • capability-received (state only)
        • total-sent (state only)
        • total-received (state only)
    • neighbor
      • neighbor-group
      • interface
      • port
      • remote-as
      • capability (deprecated)
      • capability-negotiate
      • ebgp-multihop
      • enforce-first-as
      • enforce-multihop
      • neighbor-description
      • override-capability
      • passive
      • password (hidden)
      • solo
      • strict-capability-match
      • ttl-security-hops
      • update-source
      • sender-as-path-loop-detection
      • track
      • check-control-plane-failure
      • remote-neighbor-group (state only)
      • remote-router-id (state only)
      • state (state only)
      • min-time-btwn-advertisement (state only)
      • last-reset (state only)
      • bgp-connection (state only)
      • connect-retry-timer (state only)
      • estimated-rount-trip-time (state only)
      • capabilities
        • dynamic
        • extended-nexthop
        • fqdn
      • local-as
        • as-number (mandatory)
        • no-prepend
        • replace-as
      • shutdown
        • message
      • timers
        • advertisement-interval
        • connect-retry
        • keepalive-interval
        • hold-time
      • address-family
        • ipv4-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-multicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-labeled-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-flowspec
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv4-vpn
          • enabled
          • unsuppress-map
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-unicast
          • enabled
          • nexthop-local-unchanged
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-multicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-labeled-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-flowspec
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-vpn
          • enabled
          • unsuppress-map
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • l2vpn-evpn
          • enabled
          • nexthop-self
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • allowas-in
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • route-map
            • route-map-name (mandatory)
        • link-state-non-vpn
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • allowas-in
          • send-community
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • route-map
            • route-map-name (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
      • connections (state only)
        • established (state only)
        • dropped (state only)
      • local-host (state only)
        • name (state only)
        • port (state only)
      • remote-host (state only)
        • name (state only)
        • port (state only)
      • nexthop (state only)
        • address (state only)
        • global-address (state only)
        • local-address (state only)
      • thread (state only)
        • read-enabled (state only)
        • write-enabled (state only)
      • message-statistics (state only)
        • packet-wait-process (state only)
        • packet-wait-written (state only)
        • open-sent (state only)
        • opens-received (state only)
        • notifications-sent (state only)
        • notifications-received (state only)
        • updates-sent (state only)
        • updates-received (state only)
        • keepalives-sent (state only)
        • keepalives-received (state only)
        • route-refresh-sent (state only)
        • route-refresh-received (state only)
        • capability-sent (state only)
        • capability-received (state only)
        • total-sent (state only)
        • total-received (state only)
    • unnumbered-neighbor
      • neighbor-group
      • ipv6-only
      • neighbor-description
    • rpki
      • enabled
      • expire-interval
      • polling-period
      • retry-interval
      • cache-server
        • address (mandatory)
        • source
        • status (state only)
        • ssh
          • port (mandatory)
          • user-name (mandatory)
          • key (mandatory) (hidden)
        • tcp
          • port (mandatory)
    • bmp
      • enabled
      • mirror
        • buffer-limit (mandatory)
      • targets
        • ipv4-access-list
        • ipv6-access-list
        • mirror
        • stats-interval
        • send-experimental-stats
        • connect
          • source-interface
          • min-retry
          • max-retry
        • listener
        • monitor
  • isis
    • enabled (pushed)
    • instance
      • is-type
      • area-address
      • dynamic-hostname
      • log-adjacency-changes
      • metric-style
      • purge-originator
      • attach-send
      • attach-receive-ignore
      • overload
      • area-password
        • password (mandatory) (hidden)
        • password-type (mandatory)
        • authenticate-snp
      • domain-password
        • password (mandatory) (hidden)
        • password-type (mandatory)
        • authenticate-snp
      • traffic-engineering
        • ipv4-router-address
        • ipv6-router-address
      • fast-reroute
        • lfa
          • tiebreaker
            • is-type
            • backup-method (mandatory)
        • load-sharing
          • level-1
          • level-2
        • priority-limit
          • level-1
          • level-2
      • default-information-originate
        • ipv4
          • always
          • route-map
          • metric
        • ipv6
          • always
          • route-map
          • metric
      • redistribute
        • ipv4
          • route-map
          • metric
        • ipv6
          • route-map
          • metric
      • lsp
        • mtu
        • timers
          • level-1
            • refresh-interval
            • maximum-lifetime
            • generation-interval
          • level-2
            • refresh-interval
            • maximum-lifetime
            • generation-interval
      • spf
        • ietf-backoff-delay
          • init-delay (mandatory)
          • short-delay (mandatory)
          • long-delay (mandatory)
          • hold-down (mandatory)
          • time-to-learn (mandatory)
        • minimum-interval
          • level-1
          • level-2
        • prefixes-priorities
          • access-list-name (mandatory)
      • multi-topology
        • ipv4-multicast
          • overload
        • ipv4-management
          • overload
        • ipv6-unicast
          • overload
        • ipv6-multicast
          • overload
        • ipv6-management
          • overload
        • ipv6-dstsrc
          • overload
      • flex-algorithm
        • dataplane
        • definition
          • advertise
          • metric-type
          • prefix-metric
          • priority
          • affinity
            • exclude-any
            • include-any
            • include-all
        • segment-routing
          • prefix-sid-map
            • sid-value-type
            • sid-value (mandatory)
            • last-hop-behavior
            • n-flag-clear
      • segment-routing
        • enabled
        • label-blocks
          • srgb
            • lower-bound
            • upper-bound
          • srlb
            • lower-bound
            • upper-bound
        • msd
          • node-msd
        • ipv6
          • locator (mandatory)
        • prefix-sid-map
          • sid-value-type
          • sid-value (mandatory)
          • last-hop-behavior
          • n-flag-clear
      • neighbor (state only)
        • address-ipv4 (state only)
        • address-ipv6 (state only)
        • priority (state only)
  • ldp
    • enabled (pushed)
    • router-id
    • discovery
      • hello
        • holdtime
        • interval
    • dual-stack
      • cisco-interop
      • transport-preference
    • neighbor
      • password (hidden)
      • ttl-security
        • hops
        • disable
    • address-family
      • ipv4
        • session-holdtime
        • discovery
          • transport-address (mandatory)
          • hello
            • holdtime
            • interval
        • interface
        • label
          • local
            • advertise
              • for
              • to
              • explicit-null
                • for
            • allocate
              • for
              • host-routes
          • remote
            • accept
              • for
              • from
      • ipv6
        • session-holdtime
        • discovery
          • transport-address (mandatory)
          • hello
            • holdtime
            • interval
        • interface
        • label
          • local
            • advertise
              • for
              • to
              • explicit-null
                • for
            • allocate
              • for
              • host-routes
          • remote
            • accept
              • for
              • from
  • nhrp
    • enabled (pushed)
    • hub-mode
    • nhrp4-cache (state only)
      • type (state only)
      • nbma (state only)
      • timeout (state only)
      • auth (state only)
      • used (state only)
      • identity (state only)
    • nhrp6-cache (state only)
      • type (state only)
      • nbma (state only)
      • timeout (state only)
      • auth (state only)
      • used (state only)
      • identity (state only)
    • nhrp4-nhs (state only)
      • fqdn (state only)
      • protocol (state only)
    • nhrp6-nhs (state only)
      • fqdn (state only)
      • protocol (state only)
    • connection (state only)
      • notifier-active (state only)
      • sa-count (state only)
      • identity (state only)
  • ospf
    • enabled (pushed)
    • router-id
    • abr-type
    • write-multiplier
    • auto-cost
    • opaque-lsa
    • compatible-rfc1583
    • default-metric
    • log-adjacency-changes
    • refresh-timer
    • area
      • default-cost
      • export-list
      • import-list
      • shortcut
      • nssa
        • summary
        • translate
      • stub
        • summary
      • virtual-link
      • authentication
        • message-digest
      • filter-list
        • input
        • output
      • range
        • action
        • cost
    • default-information
      • always
      • metric
      • metric-type
      • route-map
    • distance
      • all
      • external
      • inter-area
      • intra-area
    • max-metric
      • administrative
      • on-shutdown
      • on-startup
    • neighbor
      • poll-interval
      • priority
    • network
      • area (mandatory)
    • passive-interface
      • address
    • timers
      • lsa
        • min-arrival
      • throttle
        • lsa
        • spf
          • delay (mandatory)
          • init-hold-time (mandatory)
          • max-hold-time (mandatory)
    • distribute-list
      • access-list (mandatory)
    • redistribute
      • metric
      • metric-type
      • route-map
      • id
  • rip
    • neighbor
    • static-route
    • enabled (pushed)
    • allow-ecmp
    • default-information-originate
    • default-metric
    • network
    • interface
    • passive-interface
    • administrative-distance
      • default
      • source
        • distance (mandatory)
        • access-list
    • redistribute
      • metric
      • route-map
    • route-map
      • route-map-name (mandatory)
    • timers
      • flush-interval
      • holddown-interval
      • update-interval
    • version
      • receive
      • send
    • distribute-list
      • access-list
      • prefix-list
    • offset-list
      • metric (mandatory)
      • access-list (mandatory)
    • state (state only)
      • route (state only)
        • protocol (state only)
        • route-type (state only)
        • nexthop (state only)
        • interface (state only)
        • metric (state only)
      • neighbor (state only)
        • last-update (state only)
        • bad-packets-received (state only)
        • bad-routes-received (state only)
  • ospf6
    • enabled (pushed)
    • router-id
    • auto-cost
    • log-adjacency-changes
    • area
      • export-list
      • import-list
      • stub
        • summary
      • filter-list
        • input
        • output
      • range
        • advertise
        • cost
    • default-information
      • always
      • metric
      • metric-type
      • route-map
    • distance
      • all
      • external
      • inter-area
      • intra-area
    • interface
      • area (mandatory)
    • redistribute
      • route-map
    • timers
      • lsa
        • min-arrival
      • throttle
        • lsa
        • spf
          • delay (mandatory)
          • init-hold-time (mandatory)
          • max-hold-time (mandatory)
  • ripng
    • aggregate
    • static-route
    • enabled
    • allow-ecmp
    • default-information-originate
    • default-metric
    • network
    • interface
    • passive-interface
    • redistribute
      • metric
      • route-map
    • timers
      • flush-interval
      • holddown-interval
      • update-interval
    • distribute-list
      • access-list
      • prefix-list
    • offset-list
      • metric (mandatory)
      • access-list (mandatory)
    • state (state only)
      • route (state only)
        • protocol (state only)
        • route-type (state only)
        • nexthop (state only)
        • metric (state only)
      • neighbor (state only)
        • last-update (state only)
        • bad-packets-received (state only)
        • bad-routes-received (state only)
  • igmp
    • enabled
    • watermark-warn
  • pim
    • enabled
    • ecmp
    • ecmp-rebalance
    • keep-alive-timer
    • rp-keep-alive-timer
    • send-v6-secondary
    • ssm-prefix-list
    • register-accept-list
    • packets
    • join-prune-interval
    • register-suppress-time
    • static-rp
      • rp-list
        • group-list
        • prefix-list
    • spt-switchover
      • spt-action
      • spt-infinity-prefix-list
  • policy-based-routing
    • ipv4-rule
      • not
      • match
        • inbound-interface
        • mark
        • source
        • destination
        • outbound-interface (state only)
        • tos (state only)
        • l3vrf (state only)
        • other (state only)
          • value (state only)
      • action
        • lookup (mandatory)
        • goto (state only)
        • other (state only)
    • ipv6-rule
      • not
      • match
        • inbound-interface
        • mark
        • source
        • destination
        • outbound-interface (state only)
        • tos (state only)
        • l3vrf (state only)
        • other (state only)
          • value (state only)
      • action
        • lookup (mandatory)
        • goto (state only)
        • other (state only)
  • rib (state only)
    • ipv4-count (state only)
      • kernel (state only)
        • routes (state only)
        • installed-routes (state only)
      • connected (state only)
        • routes (state only)
        • installed-routes (state only)
      • static (state only)
        • routes (state only)
        • installed-routes (state only)
      • ospf (state only)
        • routes (state only)
        • installed-routes (state only)
      • ebgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • ibgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • nhrp (state only)
        • routes (state only)
        • installed-routes (state only)
      • total (state only)
        • routes (state only)
        • installed-routes (state only)
    • ipv6-count (state only)
      • kernel (state only)
        • routes (state only)
        • installed-routes (state only)
      • connected (state only)
        • routes (state only)
        • installed-routes (state only)
      • static (state only)
        • routes (state only)
        • installed-routes (state only)
      • ospf (state only)
        • routes (state only)
        • installed-routes (state only)
      • ebgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • ibgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • nhrp (state only)
        • routes (state only)
        • installed-routes (state only)
      • total (state only)
        • routes (state only)
        • installed-routes (state only)
    • ipv4-route (state only)
      • next-hop (state only)
        • protocol (state only)
        • distance (state only)
        • metric (state only)
        • interface (state only)
        • selected (state only)
        • fib (state only)
        • directly-connected (state only)
        • duplicate (state only)
        • active (state only)
        • on-link (state only)
        • recursive (state only)
        • uptime (state only)
    • ipv6-route (state only)
      • next-hop (state only)
        • protocol (state only)
        • distance (state only)
        • metric (state only)
        • interface (state only)
        • selected (state only)
        • fib (state only)
        • directly-connected (state only)
        • duplicate (state only)
        • active (state only)
        • on-link (state only)
        • recursive (state only)
        • uptime (state only)
  • segment-routing
    • enabled
    • traffic-engineering
      • te-database
        • enabled
        • import
      • mpls-te-database (deprecated)
        • enabled (deprecated)
        • import (deprecated)
      • flex-algorithm
        • import
          • instance
      • segment-list
        • segment
          • sid-label
          • ipv6-sid
          • nai
            • adjacency
              • source
              • destination
      • triggered-policies
        • binding-sid-range
          • lower-bound
          • upper-bound
        • policy-template
          • name
          • candidate-path
            • name (mandatory)
            • type (mandatory)
            • algorithm (mandatory)
      • policy
        • name
        • binding-sid
        • binding-ipv6-sid
        • status (state only)
        • candidate-path
          • name (mandatory)
          • type (mandatory)
          • algorithm (mandatory)
          • segment-list
          • objective-function
            • constraint
            • required
          • metric
            • value (mandatory)
            • required
            • bound
            • computed
  • ipv6
    • locator
      • prefix (mandatory)
      • block-length
      • node-length
      • function-length
• 3.2.37. DHCP
  • server
    • enabled (pushed)
    • default-lease-time
    • max-lease-time
    • ping-check
    • dhcp-options
      • dhcp-server-identifier
      • domain-name
      • domain-name-server
      • ntp-server
      • interface-mtu
      • netbios-name-server
      • netbios-node-type
      • netbios-scope
      • subnet-mask
      • time-offset
      • dns-search-domain-name
      • vendor-class-identifier
      • option
        • name (mandatory)
        • boolean
        • int8
        • int16
        • int32
        • uint8
        • uint16
        • uint32
        • ipv4-address
        • text
        • hex
        • array
          • int8
          • int16
          • int32
          • uint8
          • uint16
          • uint32
          • ipv4-address
    • subnet
      • interface
      • default-gateway
      • default-lease-time
      • max-lease-time
      • ping-check
      • state (state only)
      • range
      • host
        • MAC-ADDRESS (mandatory)
        • IP-ADDRESS (mandatory)
      • dhcp-options
        • dhcp-server-identifier
        • domain-name
        • domain-name-server
        • ntp-server
        • interface-mtu
        • netbios-name-server
        • netbios-node-type
        • netbios-scope
        • subnet-mask
        • time-offset
        • dns-search-domain-name
        • vendor-class-identifier
        • option
          • name (mandatory)
          • boolean
          • int8
          • int16
          • int32
          • uint8
          • uint16
          • uint32
          • ipv4-address
          • text
          • hex
          • array
            • int8
            • int16
            • int32
            • uint8
            • uint16
            • uint32
            • ipv4-address
    • dhcp-server-leases (state only)
      • starts (state only)
      • ends (state only)
      • hw-mac-address (state only)
      • uid (state only)
      • client-hostname (state only)
      • binding-state (state only)
      • next-binding-state (state only)
      • option-agent-circuit-id (state only)
      • option-agent-remote-id (state only)
      • vendor-class-identifier (state only)
  • relay
    • enabled (pushed)
    • handle-option
    • drop-unmatched
    • hop-count
    • max-size
    • dhcp-server (deprecated)
      • enabled (deprecated) (pushed)
      • interface (deprecated)
      • server-interface (deprecated)
      • handle-option (deprecated)
      • drop-unmatched (deprecated)
      • hop-count (deprecated)
      • max-size (deprecated)
      • counters (state only)
        • discover (state only)
        • offer (state only)
        • request (state only)
        • decline (state only)
        • ack (state only)
        • nack (state only)
        • release (state only)
        • inform (state only)
        • boot-request (state only)
        • boot-reply (state only)
      • dhcp-server-leases (state only)
        • starts (state only)
        • ends (state only)
        • hw-mac-address (state only)
        • uid (state only)
        • client-hostname (state only)
        • binding-state (state only)
        • next-binding-state (state only)
        • option-agent-circuit-id (state only)
        • option-agent-remote-id (state only)
        • vendor-class-identifier (state only)
    • interface
      • enabled
      • dhcp-server (mandatory)
      • handle-option
      • drop-unmatched
      • hop-count
      • max-size
      • agent-information
        • enabled
        • circuit-id
        • link-selection
        • remote-id
          • global
      • counters (state only)
        • discover (state only)
        • offer (state only)
        • request (state only)
        • decline (state only)
        • ack (state only)
        • nack (state only)
        • release (state only)
        • inform (state only)
        • boot-request (state only)
        • boot-reply (state only)
      • dhcp-server-leases (state only)
        • starts (state only)
        • ends (state only)
        • hw-mac-address (state only)
        • uid (state only)
        • client-hostname (state only)
        • binding-state (state only)
        • next-binding-state (state only)
        • option-agent-circuit-id (state only)
        • option-agent-remote-id (state only)
        • vendor-class-identifier (state only)
• 3.2.38. fast-path
  • enabled (pushed)
  • port
  • core-mask
    • fast-path
    • exception
    • linux-to-fp
    • port
  • cp-protection
    • budget
  • crypto
    • driver
    • offload-core-mask
    • nb-session
    • nb-buffer
  • advanced
    • nb-mbuf
    • fp-memory
    • machine-memory
    • mainloop-sleep-delay
    • offload
    • vlan-strip
    • power-mode
    • frequency-scaling
    • intercore-ring-size
    • software-txq
    • mask-irq
    • nb-rxd
    • nb-txd
    • fpvi-nb-rxd-txd
    • fpvi-queues
    • reserve-hugepages
    • arp
    • ndp
    • ipv4-netfilter-cache
    • ipv6-netfilter-cache
    • ipv4-pre-ipsec-fragmentation
    • ipv6-pre-ipsec-fragmentation
    • ipv6-lpm-long-prefix-optimization
    • hash-seed
    • hardware-queue-map
    • mpls-egress-priority-mapping
      • to (mandatory)
    • numa-aware
      • enabled
  • limits
    • fp-max-if
    • fp-max-vrf
    • ip-max-neigh
    • ip4-max-addr
    • ip4-max-route
    • ip4-max-neigh (deprecated)
    • ip6-max-addr
    • ip6-max-route
    • ip6-max-neigh (deprecated)
    • pbr-max-rule
    • filter4-max-rule
    • filter6-max-rule
    • filter4-max-ct
    • filter6-max-ct
    • filter-max-ipset
    • filter-max-ipset-entry
    • filter-bridge-max-rule
    • vxlan-max-port
    • vxlan-max-if
    • vxlan-max-fdb
    • reass4-max-queue
    • reass6-max-queue
    • ipsec-max-sp
    • ipsec-sp-hash-slots
    • ipsec-max-sa
    • ipsec-sa-hash-slots
    • ip-max-lpm-table
    • ip-max-lpm-memory
    • filter-max-cache
    • filter6-max-cache
    • vlan-max-if
    • vlan-lower-max-if
    • macvlan-max-if
    • gre-max-if
    • svti-max-if
    • pppoe-max-channel
    • ipoe-max-session
    • mpls-max-label
    • mpls-max-route
    • mpls-max-lwt
    • qos-max-schedulers
    • qos-max-filters
    • qos-max-classes
    • qos-max-policies
    • qos-max-selectors
    • bridge-max-if
    • bridge-max-ports
    • bridge-max-fdb
    • fp-max-conntracks
    • gtp-max-if
    • gtp-max-pdp
    • gtp-max-qos-flow
    • gtp-max-qos-policy
    • tc-max-policers
    • fp-cur-if (state only)
    • fp-cur-vrf (state only)
    • ip-cur-neigh (state only)
    • ip4-cur-addr (state only)
    • ip4-cur-route (state only)
    • ip4-cur-neigh (deprecated) (state only)
    • ip6-cur-addr (state only)
    • ip6-cur-route (state only)
    • ip6-cur-neigh (deprecated) (state only)
    • pbr-cur-rule (state only)
    • filter4-cur-rule (state only)
    • filter6-cur-rule (state only)
    • filter4-cur-ct (state only)
    • filter6-cur-ct (state only)
    • filter-cur-ipset (state only)
    • vxlan-cur-port (state only)
    • vxlan-cur-if (state only)
    • vxlan-cur-fdb (state only)
    • ipsec-cur-sp (state only)
    • ipsec-cur-sa (state only)
    • ip-cur-lpm-table (state only)
    • ip-cur-lpm-memory (state only)
    • vlan-cur-if (state only)
    • vlan-lower-cur-if (state only)
    • macvlan-cur-if (state only)
    • gre-cur-if (state only)
    • svti-cur-if (state only)
    • pppoe-cur-channel (state only)
    • ipoe-cur-session (state only)
    • mpls-cur-route (state only)
    • mpls-cur-lwt (state only)
    • qos-cur-schedulers (state only)
    • qos-cur-filters (state only)
    • qos-cur-classes (state only)
    • qos-cur-policies (state only)
    • qos-cur-selectors (state only)
    • bridge-cur-if (state only)
    • bridge-cur-ports (state only)
    • bridge-cur-fdb (state only)
    • fp-cur-conntracks (state only)
    • gtp-cur-if (state only)
    • gtp-cur-pdp (state only)
    • gtp-cur-qos-flow (state only)
    • gtp-cur-qos-policy (state only)
    • tc-cur-policers (state only)
    • cg-nat
      • max-conntracks (deprecated)
      • max-nat-entries (deprecated)
      • max-nat
      • max-users
      • max-blocks
      • min-block-size
      • max-block-size
      • max-pools
      • max-rules
      • max-block-translation-ips
      • max-port-translation-ips
      • max-port-overloading-factor
      • cur-nat (state only)
      • cur-users (state only)
      • cur-blocks (state only)
      • cur-pools (state only)
      • cur-rules (state only)
      • cur-block-translation-ips (state only)
      • cur-port-translation-ips (state only)
    • fp-firewall
      • max-rules
      • max-network-groups
      • max-networks
      • cur-rules (state only)
      • cur-network-groups (state only)
      • cur-networks (state only)
  • linux-sync
    • fpm-socket-size
    • nl-socket-size
    • ipset-dump-delay
    • disable
  • mirror-traffic
    • from
      • to
        • interface (mandatory)
        • vrf (mandatory)
  • cpu-usage (state only)
    • busy (state only) (pushed)
• 3.2.39. logging
  • Global Settings
    • log-level
    • disk-usage (state only)
    • rate-limit
      • interval
      • burst
  • Per-VRF Settings
    • syslog
      • enabled (pushed)
      • tag
      • remote-server
        • source
        • protocol
        • port
        • log-filter
          • level
            • EQUAL
            • greater-or-equal
            • not
              • LEVEL (mandatory)
      • tls
        • enabled
        • ca-certificate (mandatory)
        • certificate (hidden)
        • private-key (hidden)
        • server-authentication
          • anonymous
          • certificate
          • name
            • <string> (mandatory)
          • fingerprint
            • <string> (mandatory)
• 3.2.40. high availability
  • HA groups
    • group
      • state
  • HA neighbor
    • enabled (pushed)
    • node-id (mandatory)
    • local-address (mandatory)
    • listen-ha-group (mandatory)
    • interface (mandatory)
    • state (state only)
  • HA conntrack
    • enabled (pushed)
    • local-address (mandatory)
    • listen-ha-group (mandatory)
    • interface (mandatory)
    • state (state only)
    • protocol-list
      • accept (mandatory)
      • protocol (mandatory)
    • address-list
      • accept (mandatory)
      • address (mandatory)
• 3.2.41. group
  • ipv4
    • address-group
      • address
      • used (state only)
    • network-group
      • network
      • used (state only)
  • ipv6
    • address-group
      • address
      • used (state only)
    • network-group
      • network
      • used (state only)
  • application-group
    • application
• 3.2.42. twamp
  • server
    • enabled (pushed)
    • address (mandatory)
    • reflector-udp-port-range (mandatory)
  • client
    • enabled (pushed)
    • server (mandatory)
    • source
    • sender-udp-port-range (mandatory)
    • reflector-udp-port
    • packet-count
    • packet-interval
    • packet-tos
    • test-session (state only)
      • starts (state only)
      • clock-sync (state only)
      • send-hops-average (state only)
      • reflect-hops-average (state only)
      • packets-lost-average (state only)
      • round-trip-delay (state only)
        • minimum (state only)
        • median (state only)
        • average (state only)
        • maximum (state only)
      • send-delay (state only)
        • minimum (state only)
        • median (state only)
        • average (state only)
        • maximum (state only)
      • reflect-delay (state only)
        • minimum (state only)
        • median (state only)
        • average (state only)
        • maximum (state only)
      • round-trip-jitter (state only)
        • median (state only)
        • average (state only)
      • send-jitter (state only)
        • median (state only)
        • average (state only)
      • reflect-jitter (state only)
        • median (state only)
        • average (state only)
• 3.2.43. ipoe-server
  • enabled
  • log-level
  • dhcp-relay
    • server
    • offer-timeout
    • server-timeout
    • server-retransmit
    • router
    • interface
      • server
      • router
      • agent-information
        • relay-address (mandatory)
        • trusted-circuit
        • link-selection
        • remote-id
          • global
  • dhcpv6-relay
    • server
    • advertise-timeout
    • interface
      • server
      • agent-information
        • relay-address (mandatory)
        • link-address
  • limits
    • max-session
    • max-starting
    • offer-delay
      • delay (mandatory)
  • auth
    • username
    • password
    • radius
      • timeout
      • max-failure
      • enabled
      • source
      • vrf
      • server
        • secret (mandatory) (hidden)
      • backup-server
        • secret (mandatory) (hidden)
      • nas
        • ip-address
        • identifier
      • change-of-authorization-server
        • ip-address
        • port
        • secret (mandatory) (hidden)
      • accounting
        • interim-interval (mandatory)
        • interim-jitter
        • session-id-in-authentication
        • allow-unreachable
          • enabled
          • max-retry
          • timeout
  • dhcp-server
    • ip4-pool
    • ip-pools-setup
      • default-local-ip
      • pool
        • peer-pool
    • interface
      • router
    • dns
      • server (mandatory)
  • qos
    • enabled
    • default-template
    • template
      • base-scheduler (deprecated)
      • scheduler-interface
      • queue
        • description
        • static-parent
        • dynamic-parent
        • mark
        • bandwidth (mandatory)
        • burst
        • ceiling
        • ceiling-burst
        • ceiling-priority
        • layer1-overhead
        • quantum
        • size
        • priority (deprecated)
• 3.2.44. ppp-server
  • instance
    • enabled
    • single-session
    • max-sessions
    • max-starting
    • log-level
    • ppp
      • verbose
      • min-mtu
      • mtu
      • mru
      • ipcp
      • ipv6cp
      • ipv6cp-interface-id
        • peer-interface-id
        • local-interface-id
        • accept-peer-interface-id
      • lcp
        • echo-interval
        • echo-failure
    • pppoe
      • enabled
      • verbose
      • padi-limit
      • ac-name
      • service-name
      • ip-pool
      • ipv6-pool
      • ipv6-prefix-delegation
      • interface
        • padi-limit
      • pado-delay
        • delay (mandatory)
    • auth
      • enabled
      • timeout
      • max-failure
      • peer-auth-interval
      • peer-auth-mode
      • peer-secrets
        • enabled
        • secrets
          • password (hidden)
      • radius
        • default-local-ip
        • enabled
        • source
        • vrf
        • server
          • secret (mandatory) (hidden)
        • backup-server
          • secret (mandatory) (hidden)
        • nas
          • ip-address
          • identifier
        • change-of-authorization-server
          • ip-address
          • port
          • secret (mandatory) (hidden)
        • accounting
          • interim-interval (mandatory)
          • interim-jitter
          • session-id-in-authentication
          • allow-unreachable
            • enabled
            • max-retry
            • timeout
    • ip-pool
      • default-local-ip
      • pool
        • peer-pool
    • ipv6-pool
      • pool
        • prefix (mandatory)
        • prefix-len (mandatory)
      • prefix-delegation
        • prefix (mandatory)
        • prefix-len (mandatory)
    • dns
      • server
      • dns-search-list
    • ipv6-neighbor-discovery
      • enabled
      • verbose
      • dhcpv6
        • enabled
    • qos
      • enabled
      • default-template
      • template
        • base-scheduler (deprecated)
        • scheduler-interface
        • queue
          • description
          • static-parent
          • dynamic-parent
          • mark
          • bandwidth (mandatory)
          • burst
          • ceiling
          • ceiling-burst
          • ceiling-priority
          • layer1-overhead
          • quantum
          • size
          • priority (deprecated)
    • session-state (state only)
      • username (state only)
      • peer-ip (state only)
      • local-ip (state only)
      • type (state only)
      • state (state only)
      • uptime (state only)
      • rx-bytes (state only)
      • tx-bytes (state only)
    • ip-pool-state (state only)
      • peer-pool (state only)
      • used (state only)
• 3.2.45. pfcp
  • enabled (pushed)
  • verbose
  • address
  • network-instance
    • interface
    • vrf