2. Command Reference

• 2.1. cmd
  • 2.1.1. cmd banner
    • Input Parameters
  • 2.1.2. cmd reboot
    • Input Parameters
  • 2.1.3. cmd poweroff
    • Input Parameters
  • 2.1.4. cmd ping
    • Input Parameters
  • 2.1.5. cmd traceroute
    • Input Parameters
  • 2.1.6. cmd traffic-capture
    • Input Parameters
  • 2.1.7. cmd traffic-capture new
    • Input Parameters
  • 2.1.8. cmd traffic-capture list
  • 2.1.9. cmd traffic-capture read
    • Input Parameters
  • 2.1.10. cmd traffic-capture export
    • Input Parameters
  • 2.1.11. cmd traffic-capture flush
  • 2.1.12. cmd traffic-capture delete
    • Input Parameters
  • 2.1.13. cmd identify-port
    • Input Parameters
  • 2.1.14. cmd troubleshooting-report
    • Input Parameters
  • 2.1.15. cmd dns proxy clear-cache
    • Input Parameters
  • 2.1.16. cmd dhcp-client renew-lease
    • Input Parameters
  • 2.1.17. cmd bgp rpki ssh-key create
    • Input Parameters
  • 2.1.18. cmd bgp rpki ssh-key list
    • Input Parameters
  • 2.1.19. cmd bgp rpki ssh-key delete
    • Input Parameters
  • 2.1.20. cmd bgp rpki ssh-host add
    • Input Parameters
  • 2.1.21. cmd bgp rpki ssh-host delete
    • Input Parameters
  • 2.1.22. cmd certificate import
    • Input Parameters
  • 2.1.23. cmd certificate export
    • Input Parameters
  • 2.1.24. cmd certificate add
    • Input Parameters
  • 2.1.25. cmd certificate delete
    • Input Parameters
• 2.2. show
  • 2.2.1. show vrfs
    • Output Data
  • 2.2.2. show summary
  • 2.2.3. show interface
    • Input Parameters
  • 2.2.4. show interface throughput
    • Input Parameters
  • 2.2.5. show ipv4-routes
    • Input Parameters
  • 2.2.6. show ipv6-routes
    • Input Parameters
  • 2.2.7. show mpls fec table
    • Input Parameters
  • 2.2.8. show mpls table
    • Input Parameters
  • 2.2.9. show disk
    • Output Data
  • 2.2.10. show bgp
    • Input Parameters
  • 2.2.11. show bgp bmp
    • Input Parameters
    • Output Data
  • 2.2.12. show bgp rpki cache-connection
    • Input Parameters
  • 2.2.13. show bgp rpki cache-server
    • Input Parameters
  • 2.2.14. show bgp rpki prefix-table
    • Input Parameters
  • 2.2.15. show isis
    • Input Parameters
  • 2.2.16. show evpn
    • Input Parameters
  • 2.2.17. show ospf
    • Input Parameters
  • 2.2.18. show rip
    • Input Parameters
  • 2.2.19. show ospf6
    • Input Parameters
  • 2.2.20. show ripng
    • Input Parameters
  • 2.2.21. show mpls ldp
    • Input Parameters
  • 2.2.22. show bfd
    • Input Parameters
  • 2.2.23. show path-monitoring
    • Input Parameters
  • 2.2.24. show nhrp
    • Input Parameters
  • 2.2.25. show nhrp6
    • Input Parameters
  • 2.2.26. show pbr
    • Input Parameters
    • Output Data
  • 2.2.27. show log
    • Input Parameters
  • 2.2.28. show logins
    • Input Parameters
    • Output Data
  • 2.2.29. show ntp
    • Input Parameters
    • Output Data
  • 2.2.30. show ntp clients
    • Input Parameters
    • Output Data
  • 2.2.31. show dhcp-relay
    • Input Parameters
    • Output Data
  • 2.2.32. show dhcp-server
    • Input Parameters
  • 2.2.33. show neighbors
    • Input Parameters
    • Output Data
  • 2.2.34. show conntracks
    • Input Parameters
  • 2.2.35. show product
    • Input Parameters
  • 2.2.36. show fast-path cpu-usage
  • 2.2.37. show fast-path table-usage
  • 2.2.38. show fast-path arp parameters
    • Output Data
  • 2.2.39. show fast-path statistics
    • Input Parameters
    • Output Data
  • 2.2.40. show ike
    • Input Parameters
  • 2.2.41. show ha-neighbor
    • Input Parameters
  • 2.2.42. show ha-conntrack
    • Input Parameters
  • 2.2.43. show vxlan fdb
    • Input Parameters
    • Output Data
  • 2.2.44. show bridge fdb
    • Input Parameters
    • Output Data
  • 2.2.45. show dns-server
    • Input Parameters
    • Output Data
  • 2.2.46. show certificate list
  • 2.2.47. show certificate
    • Input Parameters
  • 2.2.48. show certificate key
    • Input Parameters
  • 2.2.49. show commit
    • Output Data
• 2.3. flush
  • 2.3.1. flush bgp
    • Input Parameters
  • 2.3.2. flush isis
    • Input Parameters
  • 2.3.3. flush ospf
    • Input Parameters
  • 2.3.4. flush ospf6
    • Input Parameters
  • 2.3.5. flush nhrp
    • Input Parameters
  • 2.3.6. flush nhrp6
    • Input Parameters
  • 2.3.7. flush ike ike-sa
    • Input Parameters
  • 2.3.8. flush ike child-sa
    • Input Parameters
  • 2.3.9. flush fast-path statistics
  • 2.3.10. flush vxlan fdb
    • Input Parameters
  • 2.3.11. flush bridge fdb
    • Input Parameters
• 2.4. system
  • 2.4.1. hostname
  • 2.4.2. cp-mask
  • 2.4.3. timezone
  • 2.4.4. date (state only)
  • 2.4.5. troubleshooting-report (state only)
  • 2.4.6. traffic-capture (state only)
  • 2.4.7. network-stack
    • bridge
      • call-ipv4-filtering
      • call-ipv6-filtering
    • icmp
      • ignore-icmp-echo-broadcast
      • rate-limit-icmp
      • rate-mask-icmp
    • ipv4
      • forwarding
      • send-redirects
      • accept-redirects
      • accept-source-route
      • arp-announce
      • arp-filter
      • arp-ignore
      • arp-proxy
      • log-invalid-addresses
    • ipv6
      • forwarding
      • max-cached-routes
      • autoconfiguration
      • accept-duplicate-address-detection
      • accept-router-advert
      • accept-redirects
      • accept-source-route
      • router-solicitations
      • use-temporary-addresses
    • neighbor
      • ipv4-max-entries
      • ipv6-max-entries
      • ipv4-base-reachable-time
      • ipv6-base-reachable-time
    • conntrack
      • max-entries
      • tcp-timeout-close
      • tcp-timeout-close-wait
      • tcp-timeout-established
      • tcp-timeout-fin-wait
      • tcp-timeout-last-ack
      • tcp-timeout-max-retrans
      • tcp-timeout-syn-recv
      • tcp-timeout-syn-sent
      • tcp-timeout-time-wait
      • tcp-timeout-unacknowledged
      • udp-timeout
      • udp-timeout-stream
• 2.5. auth
  • 2.5.1. user
    • role (mandatory)
    • password
    • authorized-key
• 2.6. aaa
  • 2.6.1. local-authentication
  • 2.6.2. tacacs
    • address (mandatory)
    • port
    • secret (mandatory)
    • timeout
    • vrf
  • 2.6.3. radius
    • address (mandatory)
    • port
    • secret (mandatory)
    • timeout
    • source
    • vrf
• 2.7. vrf
  • 2.7.1. l3vrf
    • table-id (mandatory)
• 2.8. ssh-server
  • 2.8.1. enabled (pushed)
  • 2.8.2. address
  • 2.8.3. port
  • 2.8.4. permit-root-login
• 2.9. netconf-server
  • 2.9.1. enabled (pushed)
  • 2.9.2. idle-timeout
  • 2.9.3. address
    • port
    • description
• 2.10. dns
  • 2.10.1. search
  • 2.10.2. server
  • 2.10.3. proxy
    • enabled
    • listen-to
    • forward
      • server
      • local
    • dns64
      • client
      • exclude
      • mapped
        • not
        • PREFIX
• 2.11. dns-server
  • 2.11.1. enabled (pushed)
  • 2.11.2. use-system-servers
  • 2.11.3. bind
  • 2.11.4. tls
    • certificate-name (mandatory)
    • dns-over-https
  • 2.11.5. forward-tls
    • use-system-certificates
    • certificates
  • 2.11.6. record
    • IP
  • 2.11.7. logging
    • enabled
  • 2.11.8. server
    • tls-authenticate-name
    • source
• 2.12. ipv6-autoconf
  • 2.12.1. enabled (pushed)
  • 2.12.2. interface
    • max-advertisement-interval
    • min-advertisement-interval
    • managed
    • other-config
    • link-mtu
    • reachable-time
    • retransmit-timer
    • default-lifetime
    • prefix
      • send-interface-address
      • on-link
      • valid-lifetime
      • preferred-lifetime
      • autonomous
      • base6-interface
      • base6to4-interface
• 2.13. lldp
  • 2.13.1. enabled (pushed)
  • 2.13.2. hello-timer
  • 2.13.3. system-name
  • 2.13.4. system-description
  • 2.13.5. management-address
  • 2.13.6. chassis-id (state only)
  • 2.13.7. chassis-id-type (state only)
  • 2.13.8. interface
    • enabled
    • counters (state only)
      • frame-in (state only)
      • frame-out (state only)
      • frame-discard (state only)
      • tlv-discard (state only)
    • neighbor (state only)
      • port-id (state only)
      • port-id-type (state only)
      • port-description (state only)
      • management-address (state only)
      • system-name (state only)
      • system-description (state only)
      • chassis-id (state only)
      • chassis-id-type (state only)
      • capability (state only)
        • enabled (state only)
  • 2.13.9. counters (state only)
    • frame-in (state only)
    • frame-out (state only)
    • frame-discard (state only)
    • tlv-discard (state only)
    • tlv-accepted (state only)
    • entries-aged-out (state only)
• 2.14. kpi
  • 2.14.1. interface
• 2.15. telegraf
  • 2.15.1. enabled (pushed)
  • 2.15.2. interval
  • 2.15.3. influxdb-output
    • database (mandatory)
    • username
    • password
    • insecure-skip-verify
  • 2.15.4. influxdbv2-output
    • token (mandatory)
    • organization (mandatory)
    • bucket (mandatory)
    • insecure-skip-verify
  • 2.15.5. kafka-output
    • topic
  • 2.15.6. prometheus-client-output
    • metric-version
    • basic-username
    • basic-password
    • expiration-interval
    • path
    • string-as-label
    • tls-certificate-name
    • tls-allowed-ca-certificate
    • export-timestamp
    • ip-range
• 2.16. tracker
  • 2.16.1. bfd
    • type
    • source (pushed)
    • address (mandatory) (pushed)
    • interface (pushed)
    • vrf (mandatory) (pushed)
    • l3vrf (pushed)
    • echo-mode
    • detection-multiplier
    • desired-transmission-interval
    • required-receive-interval
    • desired-echo-transmission-interval
    • discriminator (state only)
    • state (state only) (pushed)
    • diagnostic (state only) (pushed)
    • last-down-time (state only)
    • last-up-time (state only)
    • session-down-count (state only)
    • session-up-count (state only)
    • control-packet-input-count (state only)
    • control-packet-output-count (state only)
    • echo-packet-input-count (state only)
    • echo-packet-output-count (state only)
    • zebra-notification-count (state only)
    • remote (state only)
      • discriminator (state only)
      • diagnostic (state only) (pushed)
      • multiplier (state only)
    • negociated (state only)
      • transmission-interval (state only)
      • receive-interval (state only)
      • echo-transmission-interval (state only)
  • 2.16.2. icmp
    • address (pushed)
    • vrf (mandatory) (pushed)
    • source (pushed)
    • interface
    • dhcp-interface
    • gateway
    • period
    • threshold
    • total
    • packet-size
    • packet-tos
    • timeout (pushed)
    • state (state only) (pushed)
    • diagnostic (state only) (pushed)
• 2.17. nat
  • 2.17.1. source-rule
    • description
    • protocol
      • not
      • VALUE (mandatory)
    • destination
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
      • port-range
        • not
        • VALUE (mandatory)
      • group
        • not
        • <string> (mandatory)
    • source
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
      • port-range
        • not
        • VALUE (mandatory)
      • group
        • not
        • <string> (mandatory)
    • mark
      • not
      • <0x0-0xffffffff> (mandatory)
      • mask
    • outbound-interface
      • not
      • <string> (mandatory)
    • translate-to
      • map
      • output-address
      • address
        • VALUE (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
      • address-range
        • START (mandatory)
        • END (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
    • counters (state only)
      • packets (state only)
      • bytes (state only)
  • 2.17.2. destination-rule
    • description
    • protocol
      • not
      • VALUE (mandatory)
    • destination
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
      • port-range
        • not
        • VALUE (mandatory)
      • group
        • not
        • <string> (mandatory)
    • source
      • address
        • not
        • VALUE (mandatory)
      • port
        • not
        • VALUE (mandatory)
      • port-range
        • not
        • VALUE (mandatory)
      • group
        • not
        • <string> (mandatory)
    • mark
      • not
      • <0x0-0xffffffff> (mandatory)
      • mask
    • inbound-interface
      • not
      • <string> (mandatory)
    • translate-to
      • map
      • address
        • VALUE (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
      • address-range
        • START (mandatory)
        • END (mandatory)
        • port
        • port-range
          • START (mandatory)
          • END (mandatory)
    • counters (state only)
      • packets (state only)
      • bytes (state only)
• 2.18. ntp
  • 2.18.1. enabled (pushed)
  • 2.18.2. ntp-source-address
  • 2.18.3. auth-key
    • key-value
  • 2.18.4. server-subnet
    • allow
    • deny
  • 2.18.5. time-sources
    • makestep
      • threshold
      • limit
    • server
      • version
      • association-type
      • iburst
      • prefer
      • auth-key-id
      • stratum (state only)
      • root-delay (state only)
      • root-dispersion (state only)
      • offset (state only)
      • poll-interval (state only)
      • synchronized (state only)
      • state (state only)
  • 2.18.6. server (state only)
    • version (state only)
    • association-type (state only)
    • iburst (state only)
    • prefer (state only)
    • stratum (state only)
    • root-delay (state only)
    • root-dispersion (state only)
    • offset (state only)
    • poll-interval (state only)
    • synchronized (state only)
    • state (state only)
    • auth-key-id (state only)
• 2.19. firewall
  • 2.19.1. ipv4 filter
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • 2.19.2. ipv4 mangle
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • postrouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • rpfilter
          • invert
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • 2.19.3. ipv4 raw
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • notrack
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • notrack
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • ipv4
          • not
          • fragment (mandatory)
        • icmp-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • rpfilter
          • invert
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • 2.19.4. ipv6 filter
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • 2.19.5. ipv6 mangle
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • input
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • forward
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • dscp
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
          • tos
            • <0x0-0xff> (mandatory)
            • mask
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • postrouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • rpfilter
          • invert
        • counters (state only)
          • packets (state only)
          • bytes (state only)
  • 2.19.6. ipv6 raw
    • prerouting
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • rpfilter
          • invert
        • action
          • STANDARD
          • chain
          • notrack
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • output
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • notrack
          • set-priority
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • counters (state only)
          • packets (state only)
          • bytes (state only)
    • chain
      • policy
      • packets (state only)
      • bytes (state only)
      • rule
        • description
        • protocol
          • not
          • VALUE (mandatory)
        • destination
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • source
          • address
            • not
            • VALUE (mandatory)
          • port
            • not
            • VALUE (mandatory)
          • port-range
            • not
            • VALUE (mandatory)
          • group
            • not
            • <string> (mandatory)
        • icmpv6-type
          • not
          • VALUE (mandatory)
        • tcp-flags
          • not
          • set
          • examined
        • conntrack
          • status
            • not
            • VALUE
          • state
            • not
            • VALUE
        • connmark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • limit
          • burst
          • rate
            • <uint32> (mandatory)
            • UNIT
        • dscp
          • not
          • VALUE (mandatory)
        • tos
          • not
          • <0x0-0xff> (mandatory)
          • mask
        • mark
          • not
          • <0x0-0xffffffff> (mandatory)
          • mask
        • sctp-chunk-types
          • not
          • SCOPE (mandatory)
          • init
          • init-ack
          • sack
          • heartbeat
          • heartbeat-ack
          • shutdown
          • shutdown-ack
          • error
          • cookie-echo
          • cookie-ack
          • ecn-ecne
          • ecn-cwr
          • asconf
          • asconf-ack
          • forward-tsn
          • data
            • examined
            • set
          • abort
            • examined
            • set
          • shutdown-complete
            • examined
            • set
        • inbound-interface
          • not
          • <string> (mandatory)
        • outbound-interface
          • not
          • <string> (mandatory)
        • action
          • STANDARD
          • chain
          • reject
          • connmark
            • set-xmark
              • <0x0-0xffffffff> (mandatory)
              • mask
            • save-mark
              • nfmask
              • ctmask
            • restore-mark
              • nfmask
              • ctmask
          • log
            • level
            • prefix
            • additional-infos
          • mark
            • <0x0-0xffffffff> (mandatory)
            • mask
          • tcpmss
            • set-mss
            • clamp-mss-to-pmtu
        • rpfilter
          • invert
        • counters (state only)
          • packets (state only)
          • bytes (state only)
• 2.20. network-port (state only)
  • 2.20.1. bus-addr (state only)
  • 2.20.2. device-tree-alias (state only)
  • 2.20.3. device-tree-compatible (state only)
  • 2.20.4. vendor (state only)
  • 2.20.5. model (state only)
  • 2.20.6. device-port (state only)
  • 2.20.7. mac-address (state only)
  • 2.20.8. interface (state only)
• 2.21. interface
  • 2.21.1. bridge
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ageing-time
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • stp
      • enabled
      • priority
      • forward-delay
      • max-age
      • hello-time
    • link-interface
      • learning
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.2. gre
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ttl
    • tos
    • link-interface
    • link-vrf
    • local (mandatory)
    • remote
    • checksum
    • sequence-number
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • key
      • input
      • output
      • both
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.3. gretap
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ttl
    • tos
    • link-interface
    • link-vrf
    • local (mandatory)
    • remote
    • checksum
    • sequence-number
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • ethernet
      • mac-address (pushed)
    • key
      • input
      • output
      • both
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.4. qos-hub
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • core (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • xmit-packets (state only)
              • drop-queue-full (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • xmit-packets (state only)
                • drop-queue-full (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • xmit-packets (state only)
              • drop-queue-full (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • xmit-packets (state only)
                • drop-queue-full (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • xmit-packets (state only)
              • drop-queue-full (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • xmit-packets (state only)
                • drop-queue-full (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • xmit-packets (state only)
              • drop-queue-full (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.5. ipip
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • local (mandatory)
    • remote (mandatory)
    • ttl
    • tos
    • link-interface
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.6. lag
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • mode (mandatory)
    • xmit-hash-policy
    • lacp-rate
    • mii-link-monitoring
    • arp-interval
    • arp-ip-target
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • link-interface
      • state (state only)
      • link (state only)
      • failure-count (state only)
    • primary
      • interface (mandatory)
      • reselect-policy
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.7. loopback
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • ethernet
      • mac-address (pushed)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.8. physical
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • port (mandatory)
    • rx-cp-protection
    • rx-cp-protection-offload
    • tx-cp-protection
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • ethernet
      • mac-address (pushed)
      • auto-negotiate
      • duplex-mode
      • port-speed
      • flow-control-rx
      • flow-control-tx
    • qos
      • ingress
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
      • egress
        • scheduler (config only)
        • policy (config only)
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • shaper (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
          • shaper (state only)
            • bandwidth (state only)
            • burst (state only)
            • layer1-overhead (state only)
            • queue-size (state only)
            • stats (state only)
              • pass-packets (state only)
              • drop-packets (state only)
        • scheduler (state only)
          • is-root (state only)
          • template-name (state only)
          • core (state only)
          • pq (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • xmit-packets (state only)
              • drop-queue-full (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • xmit-packets (state only)
                • drop-queue-full (state only)
          • pb-dwrr (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • xmit-packets (state only)
              • drop-queue-full (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • quantum (state only)
              • priority (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • xmit-packets (state only)
                • drop-queue-full (state only)
          • htb (state only)
            • nb-queue (state only)
            • default-queue (state only)
            • divisor (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • xmit-packets (state only)
              • drop-queue-full (state only)
            • queue (state only)
              • size (state only)
              • child-scheduler-id (state only)
              • bandwidth (state only)
              • burst (state only)
              • ceiling (state only)
              • ceiling-burst (state only)
              • layer1-overhead (state only)
              • quantum (state only)
              • priority (state only)
              • child-queue (state only)
              • policer (state only)
                • bandwidth (state only)
                • burst (state only)
                • excess-bandwidth (state only)
                • excess-burst (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • pass-bytes (state only)
                  • pass-excess-packets (state only)
                  • pass-excess-bytes (state only)
                  • drop-packets (state only)
                  • drop-bytes (state only)
              • shaper (state only)
                • bandwidth (state only)
                • burst (state only)
                • layer1-overhead (state only)
                • queue-size (state only)
                • stats (state only)
                  • pass-packets (state only)
                  • drop-packets (state only)
              • class (state only)
                • stats (state only)
                  • match-packets (state only)
              • stats (state only)
                • enqueue-packets (state only)
                • xmit-packets (state only)
                • drop-queue-full (state only)
          • sfq (state only)
            • flows (state only)
            • quantum (state only)
            • limit (state only)
            • stats (state only)
              • enqueue-packets (state only)
              • xmit-packets (state only)
              • drop-queue-full (state only)
        • policy (state only)
          • priority (state only)
          • selector (state only)
            • match8bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match16bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • match32bits (state only)
              • value (state only)
              • mask (state only)
              • offset (state only)
            • ipv4 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • ipv6 (state only)
              • match-all (state only)
              • source (state only)
              • destination (state only)
              • protocol (state only)
                • value (state only)
                • mask (state only)
              • tos (state only)
                • value (state only)
                • mask (state only)
              • dscp (state only)
                • value (state only)
            • tcp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • udp (state only)
              • match-all (state only)
              • source-port (state only)
                • value (state only)
                • mask (state only)
              • destination-port (state only)
                • value (state only)
                • mask (state only)
            • icmp (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
            • icmpv6 (state only)
              • match-all (state only)
              • type (state only)
                • value (state only)
                • mask (state only)
              • code (state only)
                • value (state only)
                • mask (state only)
          • action (state only)
            • set-mark (state only)
            • restore-connmark (state only)
            • redirect (state only)
            • pass (state only)
            • set-priority (state only)
          • stats (state only)
            • match-packets (state only)
            • drop-packets (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.9. pimreg (state only)
    • mtu (state only)
    • promiscuous (state only)
    • enabled (state only) (pushed)
    • description (state only)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-lease-time (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • request (state only)
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
        • status (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • router (state only)
        • state (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
    • network-stack (state only)
      • ipv4 (state only)
        • send-redirects (state only)
        • accept-redirects (state only)
        • accept-source-route (state only)
        • arp-announce (state only)
        • arp-filter (state only)
        • arp-ignore (state only)
        • arp-proxy (state only)
        • log-invalid-addresses (state only)
      • ipv6 (state only)
        • autoconfiguration (state only)
        • accept-duplicate-address-detection (state only)
        • accept-router-advert (state only)
        • accept-redirects (state only)
        • accept-source-route (state only)
        • router-solicitations (state only)
        • use-temporary-addresses (state only)
  • 2.21.10. svti
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • svti-id (mandatory)
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • link-interface (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.11. svti-template (config only)
    • mtu (config only)
    • install-routes-to (config only)
  • 2.21.12. system-loopback (state only)
    • mtu (state only)
    • promiscuous (state only)
    • enabled (state only) (pushed)
    • description (state only)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-lease-time (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • request (state only)
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
        • status (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • router (state only)
        • state (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.13. veth
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • link-interface (mandatory)
    • link-vrf (mandatory)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • ethernet
      • mac-address (pushed)
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.14. vlan
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • vlan-id (mandatory)
    • link-interface (mandatory)
    • protocol
    • link-vrf
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • egress-priority-mapping
      • to
    • ingress-priority-mapping
      • to
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.15. vxlan
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • vni (mandatory)
    • group
    • remote
    • local
    • ttl
    • tos
    • link-interface
    • link-vrf
    • learning
    • gbp
    • dst
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • ipv4
      • enabled
      • address
        • peer
        • origin (state only)
      • neighbor
        • link-layer-address (mandatory)
        • state (state only)
      • dhcp
        • enabled
        • timeout
        • retry
        • select-timeout
        • reboot
        • initial-interval
        • dhcp-lease-time
        • dhcp-client-identifier-ascii
        • dhcp-client-identifier-hexa
        • host-name
        • request
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
      • fdb
        • link-interface
        • port
        • vni
        • state (state only)
    • ethernet
      • mac-address (pushed)
    • ipv6
      • enabled
      • address
        • peer
        • origin (state only)
        • status (state only)
      • neighbor
        • link-layer-address (mandatory)
        • router (state only)
        • state (state only)
      • fdb
        • link-interface
        • port
        • vni
        • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • src-range
      • <uint16>
      • <uint16>
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
  • 2.21.16. xvrf
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • link-interface (mandatory)
    • link-vrf (mandatory)
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • qos
      • ingress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
      • egress
        • rate-limit
          • policer (config only)
          • shared-policer (config only)
          • policer (state only)
            • bandwidth (state only)
            • burst (state only)
            • excess-bandwidth (state only)
            • excess-burst (state only)
            • shared-policer (state only)
            • stats (state only)
              • pass-packets (state only)
              • pass-bytes (state only)
              • pass-excess-packets (state only)
              • pass-excess-bytes (state only)
              • drop-packets (state only)
              • drop-bytes (state only)
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
• 2.22. qos
  • 2.22.1. class-mask (config only)
  • 2.22.2. policer (config only)
    • description (config only)
    • bandwidth (config only) (mandatory)
    • burst (config only)
    • excess-bandwidth (config only)
    • excess-burst (config only)
  • 2.22.3. shared-policer
    • description (config only)
    • policer (config only)
    • bandwidth (state only)
    • burst (state only)
    • excess-bandwidth (state only)
    • excess-burst (state only)
    • stats (state only)
      • pass-packets (state only)
      • pass-bytes (state only)
      • pass-excess-packets (state only)
      • pass-excess-bytes (state only)
      • drop-packets (state only)
      • drop-bytes (state only)
  • 2.22.4. shaper (config only)
    • description (config only)
    • bandwidth (config only) (mandatory)
    • burst (config only)
    • layer1-overhead (config only)
    • queue-size (config only)
  • 2.22.5. scheduler (config only)
    • description (config only)
    • core (config only)
    • pq (config only)
      • nb-queue (config only) (mandatory)
      • default-queue (config only)
      • queue (config only)
        • size (config only)
        • policer (config only)
        • shaper (config only)
        • child-scheduler (config only)
        • priority (config only)
        • class (config only)
    • pb-dwrr (config only)
      • nb-queue (config only) (mandatory)
      • default-queue (config only)
      • queue (config only)
        • size (config only)
        • policer (config only)
        • shaper (config only)
        • child-scheduler (config only)
        • quantum (config only)
        • priority (config only)
        • class (config only)
    • htb (config only)
      • description (config only)
      • divisor (config only)
      • default-queue (config only)
      • queue (config only)
        • description (config only)
        • bandwidth (config only) (mandatory)
        • burst (config only)
        • ceiling (config only)
        • ceiling-burst (config only)
        • layer1-overhead (config only)
        • quantum (config only)
        • size (config only)
        • priority (config only)
        • policer (config only)
        • child-queue (config only)
        • child-scheduler (config only)
        • class (config only)
    • sfq (config only)
      • description (config only)
      • flows (config only)
      • quantum (config only)
      • limit (config only)
  • 2.22.6. class (config only)
    • description (config only)
    • mark (config only)
    • cp (config only)
  • 2.22.7. selector (config only)
    • description (config only)
    • match8bits (config only)
      • value (config only) (mandatory)
      • mask (config only)
      • offset (config only) (mandatory)
    • match16bits (config only)
      • value (config only) (mandatory)
      • mask (config only)
      • offset (config only) (mandatory)
    • match32bits (config only)
      • value (config only) (mandatory)
      • mask (config only)
      • offset (config only) (mandatory)
    • ipv4 (config only)
      • match-all (config only)
      • source (config only)
      • destination (config only)
      • protocol (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • tos (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • dscp (config only)
        • value (config only) (mandatory)
    • ipv6 (config only)
      • match-all (config only)
      • source (config only)
      • destination (config only)
      • protocol (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • tos (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • dscp (config only)
        • value (config only) (mandatory)
    • tcp (config only)
      • match-all (config only)
      • source-port (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • destination-port (config only)
        • value (config only) (mandatory)
        • mask (config only)
    • udp (config only)
      • match-all (config only)
      • source-port (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • destination-port (config only)
        • value (config only) (mandatory)
        • mask (config only)
    • icmp (config only)
      • match-all (config only)
      • type (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • code (config only)
        • value (config only) (mandatory)
        • mask (config only)
    • icmpv6 (config only)
      • match-all (config only)
      • type (config only)
        • value (config only) (mandatory)
        • mask (config only)
      • code (config only)
        • value (config only) (mandatory)
        • mask (config only)
  • 2.22.8. policy (config only)
    • description (config only)
    • priority (config only) (mandatory)
    • selector (config only)
    • action (config only)
      • set-mark (config only)
      • restore-connmark (config only)
      • redirect (config only)
      • pass (config only)
      • set-priority (config only)
• 2.23. vrrp
  • 2.23.1. global
    • enabled (pushed)
    • router-id
    • traps-enabled
    • vrrp-startup-delay
    • drop-traffic-on-backup
    • group
      • instance
      • notify-ha-group
      • state (state only)
      • track-group
        • priority-penalty
  • 2.23.2. interface
    • mtu
    • promiscuous
    • enabled (pushed)
    • description
    • version
    • link-interface (mandatory)
    • garp-delay
    • use-vmac
    • vmac-xmit-base
    • vrid (mandatory)
    • priority
    • init-state
    • preempt
    • preempt-delay
    • advertisement-interval
    • track-link-interface
    • track-interface
    • track
    • track-fast-path
    • notify-ha-group
    • ifindex (state only)
    • admin-status (state only)
    • oper-status (state only)
    • last-change (state only)
    • state (state only)
    • network-stack
      • ipv4
        • send-redirects
        • accept-redirects
        • accept-source-route
        • arp-announce
        • arp-filter
        • arp-ignore
        • arp-proxy
        • log-invalid-addresses
      • ipv6
        • autoconfiguration
        • accept-duplicate-address-detection
        • accept-router-advert
        • accept-redirects
        • accept-source-route
        • router-solicitations
        • use-temporary-addresses
    • authentication
      • auth-type
      • auth-pass
    • unicast-peer
    • virtual-address
    • virtual-route
      • interface
      • gw
    • counters (state only)
      • in-octets (state only)
      • in-unicast-pkts (state only)
      • in-discards (state only)
      • in-errors (state only)
      • out-octets (state only)
      • out-unicast-pkts (state only)
      • out-discards (state only)
      • out-errors (state only)
    • ipv4 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • state (state only)
      • dhcp (state only)
        • enabled (state only)
        • timeout (state only)
        • retry (state only)
        • select-timeout (state only)
        • reboot (state only)
        • initial-interval (state only)
        • dhcp-lease-time (state only)
        • dhcp-client-identifier-ascii (state only)
        • dhcp-client-identifier-hexa (state only)
        • host-name (state only)
        • request (state only)
        • current-lease (state only)
          • fixed-address (state only)
          • renew (state only)
          • rebind (state only)
          • expire (state only)
    • ipv6 (state only)
      • enabled (state only)
      • address (state only)
        • peer (state only)
        • origin (state only)
        • status (state only)
      • neighbor (state only)
        • link-layer-address (state only)
        • router (state only)
        • state (state only)
    • ethernet (state only)
      • mac-address (state only) (pushed)
• 2.24. ike
  • 2.24.1. enabled (pushed)
  • 2.24.2. pool
    • address (mandatory)
    • dns
    • nbns
    • dhcp
    • subnet
    • netmask
  • 2.24.3. certificate
    • certificate (mandatory)
    • private-key (mandatory)
  • 2.24.4. certificate-authority
    • certificate (mandatory)
    • crl
    • crl-uri
  • 2.24.5. pre-shared-key
    • id
    • secret (mandatory)
  • 2.24.6. eap-key
    • id
    • secret (mandatory)
  • 2.24.7. eap-radius
    • nas-identifier
    • auth-port
    • sockets
    • retransmit-tries
    • retransmit-timeout
    • retransmit-base
    • server
      • address (mandatory)
      • vrf
      • secret (mandatory)
      • nas-identifier
      • auth-port
      • sockets
      • retransmit-tries
      • retransmit-timeout
      • retransmit-base
  • 2.24.8. logging
    • daemon
      • default
      • asn1
      • config
      • child
      • daemon
      • encoding
      • ipsec
      • ike
      • job
      • kernel
      • library
      • manager
      • network
    • authpriv
      • default
      • asn1
      • config
      • child
      • daemon
      • encoding
      • ipsec
      • ike
      • job
      • kernel
      • library
      • manager
      • network
  • 2.24.9. global-options
    • threads
    • acquire-timeout
    • half-open-timeout
    • sa-table-size
    • sa-table-segments
    • install-routes
    • routing-table
    • routing-table-prio
    • retransmit-tries
    • retransmit-timeout
    • retransmit-base
    • delete-rekeyed
    • delete-rekeyed-delay
    • make-before-break
    • interface-use
    • interface-ignore
    • snmp
    • mobike-prefer-best-path
    • install-vip
    • install-vip-on
    • retry-initiate-interval
    • dos-protection
      • cookie-threshold
      • block-threshold
      • init-limit-half-open
    • sp-hash-ipv4
      • local
      • remote
    • sp-hash-ipv6
      • local
      • remote
  • 2.24.10. ha
    • enabled
    • listen-ha-group (mandatory)
    • node-id (mandatory)
    • interface (mandatory)
    • local-address (mandatory)
    • remote-address (mandatory)
    • seqnum-sync
      • oseq-shift
      • sync-period-time
      • sync-period-packets
    • pool
      • address (mandatory)
      • dns
      • nbns
      • dhcp
      • subnet
      • netmask
  • 2.24.11. ike-policy-template (config only)
    • local-auth-method (config only)
    • remote-auth-method (config only)
    • keying-tries (config only)
    • unique-sa (config only)
    • reauth-time (config only)
    • rekey-time (config only)
    • dpd-delay (config only)
    • aggressive (config only)
    • udp-encap (config only)
    • mobike (config only)
    • ike-proposal (config only)
      • enc-alg (config only)
      • auth-alg (config only)
      • aead-alg (config only)
      • prf-alg (config only)
      • dh-group (config only)
  • 2.24.12. ipsec-policy-template (config only)
    • start-action (config only)
    • close-action (config only)
    • dpd-action (config only)
    • replay-window (config only)
    • rekey-time (config only)
    • inactivity (config only)
    • life-time (config only)
    • rand-time (config only)
    • rekey-bytes (config only)
    • life-bytes (config only)
    • rand-bytes (config only)
    • rekey-packets (config only)
    • life-packets (config only)
    • rand-packets (config only)
    • encap-copy-dscp (config only)
    • decap-copy-dscp (config only)
    • encap-copy-df (config only)
    • esp-proposal (config only)
      • enc-alg (config only)
      • auth-alg (config only)
      • aead-alg (config only)
      • dh-group (config only)
      • esn (config only)
    • ah-proposal (config only)
      • auth-alg (config only)
      • dh-group (config only)
      • esn (config only)
  • 2.24.13. vpn
    • enabled
    • description
    • version
    • local-address
    • remote-address
    • local-id
    • remote-id
    • local-eap-id
    • remote-eap-id
    • certificate
    • remote-ca-certificate
    • vip-request
    • vip-pool
    • dynamic-svti (config only)
      • svti-template (config only) (mandatory)
      • vrf (config only)
    • ike-policy
      • template (config only) (mandatory)
      • local-auth-method
      • remote-auth-method
      • keying-tries
      • unique-sa
      • reauth-time
      • rekey-time
      • dpd-delay
      • aggressive
      • udp-encap
      • mobike
      • ike-proposal
        • enc-alg
        • auth-alg
        • aead-alg
        • prf-alg
        • dh-group
    • ipsec-policy
      • template (config only) (mandatory)
      • start-action
      • close-action
      • dpd-action
      • replay-window
      • rekey-time
      • inactivity
      • life-time
      • rand-time
      • rekey-bytes
      • life-bytes
      • rand-bytes
      • rekey-packets
      • life-packets
      • rand-packets
      • encap-copy-dscp
      • decap-copy-dscp
      • encap-copy-df
      • esp-proposal
        • enc-alg
        • auth-alg
        • aead-alg
        • dh-group
        • esn
      • ah-proposal
        • auth-alg
        • dh-group
        • esn
    • security-policy
      • svti-id-in
      • svti-id-out
      • action
      • mode
      • priority
      • local-ts
        • subnet
        • protocol
        • port
      • remote-ts
        • subnet
        • protocol
        • port
      • inject-routes
        • next-hop (mandatory)
        • next-hop-backup
        • vrf
        • l3vrf
        • table
  • 2.24.14. ike-sas (state only)
    • total (state only)
    • half-open (state only)
  • 2.24.15. task-processing (state only)
    • worker-threads (state only)
      • total (state only)
      • idle (state only)
      • critical (state only)
      • high (state only)
      • medium (state only)
      • low (state only)
    • task-queues (state only)
      • critical (state only)
      • high (state only)
      • medium (state only)
      • low (state only)
      • scheduled (state only)
  • 2.24.16. counters (state only)
    • ike-rekey-init (state only)
    • ike-rekey-resp (state only)
    • child-rekey (state only)
    • invalid (state only)
    • invalid-spi (state only)
    • ike-init-in-req (state only)
    • ike-init-in-resp (state only)
    • ike-init-out-req (state only)
    • ike-init-out-resp (state only)
    • ike-auth-in-req (state only)
    • ike-auth-in-resp (state only)
    • ike-auth-out-req (state only)
    • ike-auth-out-resp (state only)
    • create-child-in-req (state only)
    • create-child-in-resp (state only)
    • create-child-out-req (state only)
    • create-child-out-resp (state only)
    • info-in-req (state only)
    • info-in-resp (state only)
    • info-out-req (state only)
    • info-out-resp (state only)
  • 2.24.17. vpn-counters (state only)
    • ike-rekey-init (state only)
    • ike-rekey-resp (state only)
    • child-rekey (state only)
    • invalid (state only)
    • invalid-spi (state only)
    • ike-init-in-req (state only)
    • ike-init-in-resp (state only)
    • ike-init-out-req (state only)
    • ike-init-out-resp (state only)
    • ike-auth-in-req (state only)
    • ike-auth-in-resp (state only)
    • ike-auth-out-req (state only)
    • ike-auth-out-resp (state only)
    • create-child-in-req (state only)
    • create-child-in-resp (state only)
    • create-child-out-req (state only)
    • create-child-out-resp (state only)
    • info-in-req (state only)
    • info-in-resp (state only)
    • info-out-req (state only)
    • info-out-resp (state only)
  • 2.24.18. ike-sa (state only)
    • name (state only)
    • version (state only)
    • state (state only)
    • local-address (state only)
    • remote-address (state only)
    • local-port (state only)
    • remote-port (state only)
    • local-id (state only)
    • remote-id (state only)
    • remote-eap-id (state only)
    • initiator-spi (state only)
    • responder-spi (state only)
    • enc-alg (state only)
    • auth-alg (state only)
    • aead-alg (state only)
    • prf-alg (state only)
    • dh-group (state only)
    • established-time (state only)
    • rekey-time (state only)
    • reauth-time (state only)
    • udp-encap (state only)
    • mobike (state only)
    • local-vip (state only)
    • remote-vip (state only)
    • child-sa (state only)
      • name (state only)
      • state (state only)
      • reqid (state only)
      • protocol (state only)
      • udp-encap (state only)
      • mobike (state only)
      • spi-in (state only)
      • spi-out (state only)
      • svti-id-in (state only)
      • svti-id-out (state only)
      • enc-alg (state only)
      • auth-alg (state only)
      • aead-alg (state only)
      • dh-group (state only)
      • esn (state only)
      • bytes-in (state only)
      • packets-in (state only)
      • bytes-out (state only)
      • packets-out (state only)
      • installed-time (state only)
      • rekey-time (state only)
      • life-time (state only)
      • mode (state only)
      • local-ts (state only)
        • subnet (state only)
        • protocol (state only)
        • port (state only)
        • unsupported (state only)
      • remote-ts (state only)
        • subnet (state only)
        • protocol (state only)
        • port (state only)
        • unsupported (state only)
  • 2.24.19. pool-lease (state only)
    • address (state only)
    • size (state only)
    • online (state only)
    • offline (state only)
• 2.25. snmp
  • 2.25.1. enabled (pushed)
  • 2.25.2. listen
    • protocols
    • port
  • 2.25.3. static-info
    • location
    • contact
    • name
    • services
    • description
    • object-id
  • 2.25.4. view
    • subtree
      • included
  • 2.25.5. community
    • authorization (mandatory)
    • source
    • view
  • 2.25.6. monitored-vrf
    • identifier
      • authorization (mandatory)
      • source
      • view
    • traps
      • destination
        • community
  • 2.25.7. access-control
    • user
      • auth-password (mandatory)
      • auth-method
      • priv-password
      • priv-protocol
      • engine-id
    • group
      • user
      • security-level (mandatory)
      • view
      • authorization
  • 2.25.8. traps
    • destination
      • source
      • port
      • protocol
      • notification-type (mandatory)
      • community
      • user
    • authfail-check
      • enabled
    • link-status-check
      • frequency
      • enabled
    • process-check
      • frequency
      • enabled
    • disk-space-check
      • threshold (mandatory)
      • frequency
      • enabled
    • load-check
      • threshold (mandatory)
      • enabled
• 2.26. routing
  • 2.26.1. global
    • ipv4-access-list
      • remark
      • seq
        • permit
          • exact-match
        • deny
          • exact-match
    • ipv6-access-list
      • remark
      • seq
        • permit
          • exact-match
        • deny
          • exact-match
    • logging
      • enabled
      • level
      • mpls
        • ldp
          • enabled
          • discovery-hello
          • errors
          • events
          • labels
          • zebra
          • message
            • direction
            • detail
      • base
        • enabled
        • events
          • enabled
        • kernel
          • enabled
          • msgdump-recv
          • msgdump-send
        • nexthop-tracking
          • enabled
          • details
        • rib
          • enabled
          • details
        • tracker
          • enabled
      • route-map
        • enabled
      • bgp
        • enabled
        • allow-martians
        • as-4bytes
        • as-4bytes-segment
        • bestpath
        • nexthop-tracking
        • flowspec
        • keepalives
        • neighbor-events
        • update-groups
        • zebra
        • rpki
        • pbr
          • detail
        • updates
          • enabled
          • in
          • out
          • prefix
        • vpn
          • label
          • leak-vrf
          • route-map-event
      • rip
        • enabled
        • events
        • packet
        • zebra
      • ripng
        • enabled
        • events
        • packet
        • zebra
      • ospf
        • enabled
        • events
        • ism
        • lsa
        • nsm
        • nssa
        • zebra
        • message
          • direction
          • detail
      • ospf6
        • enabled
        • abr
        • asbr
        • events
        • flooding
        • interface
        • neighbor
        • route
        • spf
        • zebra
        • border-routers
          • summary
          • area-id
          • router-id
        • lsa
          • level
        • message
          • direction
      • isis
        • enabled
        • adj-packets
        • bfd
        • events
        • flooding
        • ldp-sync
        • lfa
        • lsp-gen
        • lsp-sched
        • packet-dump
        • route-events
        • snp-packets
        • spf-events
        • sr-events
        • tx-queue
        • update-packets
    • traffic-engineering
      • affinity-map
        • bit-position (mandatory)
    • ipv4-prefix-list
      • seq
        • address
        • policy (mandatory)
        • ge
        • le
    • ipv6-prefix-list
      • seq
        • address
        • policy (mandatory)
        • ge
        • le
    • route-map
      • seq
        • policy (mandatory)
        • description
        • call
        • on-match
        • match
          • as-path
          • interface
          • local-preference
          • mac-address
          • metric
          • origin
          • peer
          • probability
          • source-instance
          • source-protocol
          • tag
          • extcommunity
          • rpki
          • evpn
            • default-route
            • route-type
            • vni
            • route-distinguisher
          • ip
            • address
              • access-list
              • prefix-list
              • prefix-len
            • next-hop
              • access-list
              • prefix-list
              • prefix-len
            • route-source
              • access-list
              • prefix-list
          • ipv6
            • address
              • access-list
              • prefix-list
              • prefix-len
            • next-hop
              • address
          • community
            • id (mandatory)
            • exact-match
          • large-community
            • id (mandatory)
            • exact-match
        • set
          • table
          • atomic-aggregate
          • label-index
          • local-preference
          • metric
          • metric-type
          • origin
          • originator-id
          • src
          • tag
          • weight
          • comm-list-delete
          • large-comm-list-delete
          • aggregator
            • as (mandatory)
            • address (mandatory)
          • as-path
            • exclude
            • prepend
              • last-as
              • asn
                • VALUE (mandatory)
          • ip
            • next-hop
          • ipv4
            • vpn
              • next-hop
          • ipv6
            • next-hop
              • global
              • local
              • peer-address
              • prefer-global
            • vpn
              • next-hop
          • l3vpn
            • next-hop
              • encapsulation
          • community
            • none
            • attribute
            • replace-by
              • ATTRIBUTE
            • add
              • ATTRIBUTE
          • large-community
            • none
            • attribute
            • replace-by
              • ATTRIBUTE
            • add
              • ATTRIBUTE
          • extcommunity
            • rt
            • soo
    • bgp
      • route-map-delay
      • rpki-ssh-key (state only)
      • community-list
        • policy
          • POLICY (mandatory)
          • COMMUNITY
      • community-list-expanded
        • policy
          • POLICY (mandatory)
          • COMMUNITY
      • extcommunity-list
        • policy
          • POLICY (mandatory)
          • rt
          • soo
      • extcommunity-list-expanded
        • policy
          • POLICY (mandatory)
          • <string>
      • large-community-list
        • policy
          • POLICY (mandatory)
          • LARGE-COMMUNITY
      • large-community-list-expanded
        • policy
          • POLICY (mandatory)
          • <string>
      • as-path-access-list
        • policy
          • POLICY (mandatory)
          • <string>
  • 2.26.2. static
    • ipv4-route
      • next-hop
        • dhcp-port
        • distance
        • label (deprecated)
        • mpls-label
        • nexthop-l3vrf
        • nexthop-vrf
        • tag
        • track
    • ipv6-route
      • next-hop
        • distance
        • label (deprecated)
        • mpls-label
        • nexthop-l3vrf
        • nexthop-vrf
        • tag
        • track
    • table
      • ipv4-route
        • next-hop
          • dhcp-port
          • distance
          • label (deprecated)
          • mpls-label
          • nexthop-l3vrf
          • nexthop-vrf
          • tag
          • track
      • ipv6-route
        • next-hop
          • distance
          • label (deprecated)
          • mpls-label
          • nexthop-l3vrf
          • nexthop-vrf
          • tag
          • track
    • l3vrf (state only)
      • ipv4-route (state only)
        • next-hop (state only)
          • dhcp-port (state only)
          • distance (state only)
          • label (deprecated) (state only)
          • mpls-label (state only)
          • nexthop-l3vrf (state only)
          • nexthop-vrf (state only)
          • tag (state only)
          • track (state only)
      • ipv6-route (state only)
        • next-hop (state only)
          • distance (state only)
          • label (deprecated) (state only)
          • mpls-label (state only)
          • nexthop-l3vrf (state only)
          • nexthop-vrf (state only)
          • tag (state only)
          • track (state only)
  • 2.26.3. interface
    • isis
      • area-tag (mandatory)
      • ipv4-routing
      • ipv6-routing
      • circuit-type
      • csnp-interval
      • psnp-interval
      • priority
      • disable-three-way-handshake
      • network-point-to-point
      • passive
      • password
        • password (mandatory)
        • password-type (mandatory)
      • hello
        • padding
        • interval
          • level-1
          • level-2
        • multiplier
          • level-1
          • level-2
      • fast-reroute
        • lfa
          • enabled
          • exclude-interface
        • ti-lfa
          • enabled
          • node-protection
          • link-fallback
      • metric
        • level-1
        • level-2
      • multi-topology
        • ipv4-unicast
        • ipv4-multicast
        • ipv4-management
        • ipv6-unicast
        • ipv6-multicast
        • ipv6-management
        • ipv6-dstsrc
    • ip nhrp
      • enabled
      • registration-no-unique
      • shortcut
      • redirect
      • shortcut-keep-sa
      • network-id
      • holdtime
      • ip-nhrp-mtu
      • nhrp-map
        • nbma
      • nhrp-nhs
        • nbma (mandatory)
    • ipv6 nhrp
      • enabled
      • registration-no-unique
      • shortcut
      • redirect
      • shortcut-keep-sa
      • network-id
      • holdtime
      • nhrp-map
        • nbma (mandatory)
      • nhrp-nhs
        • nbma (mandatory)
    • ip ospf
      • area
      • authentication
      • authentication-key
      • cost
      • hello-interval
      • mtu-ignore
      • priority
      • retransmit-interval
      • transmit-delay
      • network
      • message-digest-key
        • md5 (mandatory)
      • dead-interval
        • seconds
        • minimal
          • hello-multiplier (mandatory)
      • address
        • area
        • authentication
        • authentication-key
        • cost
        • hello-interval
        • mtu-ignore
        • priority
        • retransmit-interval
        • transmit-delay
        • message-digest-key
          • md5 (mandatory)
        • dead-interval
          • seconds
          • minimal
            • hello-multiplier (mandatory)
    • ipv6 ospf6
      • cost
      • dead-interval
      • hello-interval
      • ifmtu
      • instance-id
      • mtu-ignore
      • network
      • passive
      • priority
      • retransmit-interval
      • transmit-delay
      • advertise
        • prefix-list (mandatory)
    • ip rip
      • v2-broadcast
      • split-horizon
      • version
        • receive
        • send
      • authentication
        • mode
        • md5-auth-length
        • password
        • key-chain
    • ipv6 ripng
      • split-horizon
  • 2.26.4. evpn (state only)
    • vni (state only)
      • type (state only)
      • vxlan (state only)
      • num-mac (state only)
      • num-arp-nd (state only)
      • local-vtep-ip (state only)
      • advertise-gateway-mac-ip (state only)
      • state (state only)
      • router-mac (state only)
      • l2-vni (state only)
      • arp-neighbor-discovery (state only)
        • state (state only)
        • default-gateway (state only)
        • mac (state only)
        • type (state only)
        • remote-vtep-ip (state only)
      • mac (state only)
        • vlan-id (state only)
        • type (state only)
        • remote-vtep-ip (state only)
  • 2.26.5. bgp
    • enabled (pushed)
    • as (mandatory)
    • as-notation
    • always-compare-med
    • l3vni
    • cluster-id
    • coalesce-time
    • deterministic-med
    • ebgp-connected-route-check
    • fast-external-failover
    • graceful-shutdown
    • log-neighbor-changes
    • network-import-check
    • route-reflector-allow-outbound-policy
    • reject-as-sets
    • router-id
    • ebgp-requires-policy
    • neighbor-total-count (state only)
    • bestpath
      • compare-routerid
      • med
      • as-path
        • confederation
        • ignore
        • multipath-relax
    • client-to-client
      • reflection
    • confederation
      • identifier
      • peers
    • graceful-restart
      • preserve-fw-state
      • restart-time
      • stalepath-time
    • listen
      • limit
      • neighbor-range
        • neighbor-group (mandatory)
    • max-med
      • administrative
      • on-startup
        • period (mandatory)
        • max-med
    • packet-rw-quantum
      • read
      • write
    • tcp-keepalive
      • idle
      • keepalive
      • probes
    • update-delay
      • delay
      • established-wait
    • address-family
    • neighbor-group
      • remote-as
      • capability
      • capability-negotiate
      • ebgp-multihop
      • enforce-first-as
      • enforce-multihop
      • neighbor-description
      • override-capability
      • passive
      • password
      • solo
      • strict-capability-match
      • ttl-security-hops
      • update-source
      • sender-as-path-loop-detection
      • track
      • check-control-plane-failure
      • remote-neighbor-group (state only)
      • remote-router-id (state only)
      • state (state only)
      • min-time-btwn-advertisement (state only)
      • last-reset (state only)
      • bgp-connection (state only)
      • connect-retry-timer (state only)
      • estimated-rount-trip-time (state only)
      • local-as
        • as-number (mandatory)
        • no-prepend
        • replace-as
      • shutdown
        • message
      • timers
        • advertisement-interval
        • connect-retry
        • keepalive-interval
        • hold-time
      • address-family
        • ipv4-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-multicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-labeled-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-flowspec
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv4-vpn
          • enabled
          • unsuppress-map
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-unicast
          • enabled
          • nexthop-local-unchanged
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-multicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-labeled-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-flowspec
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-vpn
          • enabled
          • unsuppress-map
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • l2vpn-evpn
          • enabled
          • nexthop-self
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • allowas-in
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • route-map
            • route-map-name (mandatory)
        • link-state-non-vpn
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • allowas-in
          • send-community
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • route-map
            • route-map-name (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
      • connections (state only)
        • established (state only)
        • dropped (state only)
      • local-host (state only)
        • name (state only)
        • port (state only)
      • remote-host (state only)
        • name (state only)
        • port (state only)
      • nexthop (state only)
        • address (state only)
        • global-address (state only)
        • local-address (state only)
      • thread (state only)
        • read-enabled (state only)
        • write-enabled (state only)
      • message-statistics (state only)
        • packet-wait-process (state only)
        • packet-wait-written (state only)
        • open-sent (state only)
        • opens-received (state only)
        • notifications-sent (state only)
        • notifications-received (state only)
        • updates-sent (state only)
        • updates-received (state only)
        • keepalives-sent (state only)
        • keepalives-received (state only)
        • route-refresh-sent (state only)
        • route-refresh-received (state only)
        • capability-sent (state only)
        • capability-received (state only)
        • total-sent (state only)
        • total-received (state only)
    • neighbor
      • neighbor-group
      • interface
      • port
      • remote-as
      • capability
      • capability-negotiate
      • ebgp-multihop
      • enforce-first-as
      • enforce-multihop
      • neighbor-description
      • override-capability
      • passive
      • password
      • solo
      • strict-capability-match
      • ttl-security-hops
      • update-source
      • sender-as-path-loop-detection
      • track
      • check-control-plane-failure
      • remote-neighbor-group (state only)
      • remote-router-id (state only)
      • state (state only)
      • min-time-btwn-advertisement (state only)
      • last-reset (state only)
      • bgp-connection (state only)
      • connect-retry-timer (state only)
      • estimated-rount-trip-time (state only)
      • local-as
        • as-number (mandatory)
        • no-prepend
        • replace-as
      • shutdown
        • message
      • timers
        • advertisement-interval
        • connect-retry
        • keepalive-interval
        • hold-time
      • address-family
        • ipv4-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-multicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-labeled-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv4-flowspec
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv4-vpn
          • enabled
          • unsuppress-map
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-unicast
          • enabled
          • nexthop-local-unchanged
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-multicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-labeled-unicast
          • enabled
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • capability-orf-prefix-list
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
          • default-originate
            • route-map
        • ipv6-flowspec
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • ipv6-vpn
          • enabled
          • unsuppress-map
          • as-override
          • maximum-prefix-out
          • weight
          • send-community
          • allowas-in
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • addpath
            • tx-all-paths
            • tx-best-path-per-AS
          • distribute-list
            • access-list (mandatory)
          • as-outbound-update
            • action
            • as-type
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
          • filter-list
            • access-list (mandatory)
          • prefix-list
            • prefix-list-name (mandatory)
          • route-map
            • route-map-name (mandatory)
        • l2vpn-evpn
          • enabled
          • nexthop-self
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • allowas-in
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • route-map
            • route-map-name (mandatory)
        • link-state-non-vpn
          • enabled
          • route-reflector-client
          • route-server-client
          • soft-reconfiguration-inbound
          • attribute-unchanged
          • allowas-in
          • send-community
          • unsuppress-map
          • update-group-id (state only)
          • sub-group-id (state only)
          • packet-queue-length (state only)
          • accepted-prefix (state only)
          • inbound-ebgp-requires-policy (state only)
          • outbound-ebgp-requires-policy (state only)
          • route-map
            • route-map-name (mandatory)
          • maximum-prefix
            • maximum (mandatory)
            • threshold
            • restart
            • warning-only
          • nexthop-self
            • force
      • connections (state only)
        • established (state only)
        • dropped (state only)
      • local-host (state only)
        • name (state only)
        • port (state only)
      • remote-host (state only)
        • name (state only)
        • port (state only)
      • nexthop (state only)
        • address (state only)
        • global-address (state only)
        • local-address (state only)
      • thread (state only)
        • read-enabled (state only)
        • write-enabled (state only)
      • message-statistics (state only)
        • packet-wait-process (state only)
        • packet-wait-written (state only)
        • open-sent (state only)
        • opens-received (state only)
        • notifications-sent (state only)
        • notifications-received (state only)
        • updates-sent (state only)
        • updates-received (state only)
        • keepalives-sent (state only)
        • keepalives-received (state only)
        • route-refresh-sent (state only)
        • route-refresh-received (state only)
        • capability-sent (state only)
        • capability-received (state only)
        • total-sent (state only)
        • total-received (state only)
    • unnumbered-neighbor
      • neighbor-group
      • ipv6-only
    • rpki
      • enabled
      • expire-interval
      • polling-period
      • retry-interval
      • cache-server
        • address (mandatory)
        • status (state only)
        • ssh
          • port (mandatory)
          • user-name (mandatory)
          • key (mandatory)
        • tcp
          • port (mandatory)
    • bmp
      • enabled
      • mirror
        • buffer-limit (mandatory)
      • targets
        • ipv4-access-list
        • ipv6-access-list
        • mirror
        • stats-interval
        • connect
          • source-interface
          • min-retry
          • max-retry
        • listener
        • monitor
  • 2.26.6. isis
    • enabled (pushed)
    • instance
      • is-type
      • area-address
      • dynamic-hostname
      • log-adjacency-changes
      • metric-style
      • purge-originator
      • attach-send
      • attach-receive-ignore
      • overload
      • area-password
        • password (mandatory)
        • password-type (mandatory)
        • authenticate-snp
      • domain-password
        • password (mandatory)
        • password-type (mandatory)
        • authenticate-snp
      • traffic-engineering
        • ipv4-router-address
        • ipv6-router-address
      • fast-reroute
        • lfa
          • tiebreaker
            • is-type
            • backup-method (mandatory)
        • load-sharing
          • level-1
          • level-2
        • priority-limit
          • level-1
          • level-2
      • default-information-originate
        • ipv4
          • always
          • route-map
          • metric
        • ipv6
          • always
          • route-map
          • metric
      • redistribute
        • ipv4
          • route-map
          • metric
        • ipv6
          • route-map
          • metric
      • lsp
        • mtu
        • timers
          • level-1
            • refresh-interval
            • maximum-lifetime
            • generation-interval
          • level-2
            • refresh-interval
            • maximum-lifetime
            • generation-interval
      • spf
        • ietf-backoff-delay
          • init-delay (mandatory)
          • short-delay (mandatory)
          • long-delay (mandatory)
          • hold-down (mandatory)
          • time-to-learn (mandatory)
        • minimum-interval
          • level-1
          • level-2
        • prefixes-priorities
          • access-list-name (mandatory)
      • multi-topology
        • ipv4-multicast
          • overload
        • ipv4-management
          • overload
        • ipv6-unicast
          • overload
        • ipv6-multicast
          • overload
        • ipv6-management
          • overload
        • ipv6-dstsrc
          • overload
      • flex-algorithm
        • dataplane
        • definition
          • advertise
          • metric-type
          • prefix-metric
          • priority
          • affinity
            • exclude-any
            • include-any
            • include-all
        • segment-routing
          • prefix-sid-map
            • sid-value-type
            • sid-value (mandatory)
            • last-hop-behavior
            • n-flag-clear
      • segment-routing
        • enabled
        • label-blocks
          • srgb
            • lower-bound
            • upper-bound
          • srlb
            • lower-bound
            • upper-bound
        • msd
          • node-msd
        • prefix-sid-map
          • sid-value-type
          • sid-value (mandatory)
          • last-hop-behavior
          • n-flag-clear
      • neighbor (state only)
        • address-ipv4 (state only)
        • address-ipv6 (state only)
        • priority (state only)
  • 2.26.7. ldp
    • enabled (pushed)
    • router-id
    • discovery
      • hello
        • holdtime
        • interval
    • dual-stack
      • cisco-interop
      • transport-preference
    • neighbor
      • password
      • ttl-security
        • hops
        • disable
    • address-family
      • ipv4
        • session-holdtime
        • discovery
          • transport-address (mandatory)
          • hello
            • holdtime
            • interval
        • interface
        • label
          • local
            • advertise
              • for
              • to
              • explicit-null
                • for
            • allocate
              • for
              • host-routes
          • remote
            • accept
              • for
              • from
      • ipv6
        • session-holdtime
        • discovery
          • transport-address (mandatory)
          • hello
            • holdtime
            • interval
        • interface
        • label
          • local
            • advertise
              • for
              • to
              • explicit-null
                • for
            • allocate
              • for
              • host-routes
          • remote
            • accept
              • for
              • from
  • 2.26.8. nhrp
    • enabled (pushed)
    • hub-mode
    • nhrp4-cache (state only)
      • type (state only)
      • nbma (state only)
      • timeout (state only)
      • auth (state only)
      • used (state only)
      • identity (state only)
    • nhrp6-cache (state only)
      • type (state only)
      • nbma (state only)
      • timeout (state only)
      • auth (state only)
      • used (state only)
      • identity (state only)
    • nhrp4-nhs (state only)
      • fqdn (state only)
      • protocol (state only)
    • nhrp6-nhs (state only)
      • fqdn (state only)
      • protocol (state only)
    • connection (state only)
      • notifier-active (state only)
      • sa-count (state only)
      • identity (state only)
  • 2.26.9. ospf
    • enabled (pushed)
    • router-id
    • abr-type
    • write-multiplier
    • auto-cost
    • opaque-lsa
    • compatible-rfc1583
    • default-metric
    • log-adjacency-changes
    • refresh-timer
    • area
      • default-cost
      • export-list
      • import-list
      • shortcut
      • nssa
        • summary
        • translate
      • stub
        • summary
      • virtual-link
      • authentication
        • message-digest
      • filter-list
        • input
        • output
      • range
        • action
        • cost
    • default-information
      • always
      • metric
      • metric-type
      • route-map
    • distance
      • all
      • external
      • inter-area
      • intra-area
    • max-metric
      • administrative
      • on-shutdown
      • on-startup
    • neighbor
      • poll-interval
      • priority
    • network
      • area (mandatory)
    • passive-interface
      • address
    • timers
      • lsa
        • min-arrival
      • throttle
        • lsa
        • spf
          • delay (mandatory)
          • init-hold-time (mandatory)
          • max-hold-time (mandatory)
    • distribute-list
      • access-list (mandatory)
    • redistribute
      • metric
      • metric-type
      • route-map
      • id
  • 2.26.10. rip
    • neighbor
    • static-route
    • enabled (pushed)
    • allow-ecmp
    • default-information-originate
    • default-metric
    • network
    • interface
    • passive-interface
    • administrative-distance
      • default
      • source
        • distance (mandatory)
        • access-list
    • redistribute
      • metric
      • route-map
    • route-map
      • route-map-name (mandatory)
    • timers
      • flush-interval
      • holddown-interval
      • update-interval
    • version
      • receive
      • send
    • distribute-list
      • access-list
      • prefix-list
    • offset-list
      • metric (mandatory)
      • access-list (mandatory)
    • state (state only)
      • route (state only)
        • protocol (state only)
        • route-type (state only)
        • nexthop (state only)
        • interface (state only)
        • metric (state only)
      • neighbor (state only)
        • last-update (state only)
        • bad-packets-received (state only)
        • bad-routes-received (state only)
  • 2.26.11. ospf6
    • enabled (pushed)
    • router-id
    • auto-cost
    • log-adjacency-changes
    • area
      • export-list
      • import-list
      • stub
        • summary
      • filter-list
        • input
        • output
      • range
        • advertise
        • cost
    • default-information
      • always
      • metric
      • metric-type
      • route-map
    • distance
      • all
      • external
      • inter-area
      • intra-area
    • interface
      • area (mandatory)
    • redistribute
      • route-map
    • timers
      • lsa
        • min-arrival
      • throttle
        • lsa
        • spf
          • delay (mandatory)
          • init-hold-time (mandatory)
          • max-hold-time (mandatory)
  • 2.26.12. ripng
    • aggregate
    • static-route
    • enabled
    • allow-ecmp
    • default-information-originate
    • default-metric
    • network
    • interface
    • passive-interface
    • redistribute
      • metric
      • route-map
    • timers
      • flush-interval
      • holddown-interval
      • update-interval
    • distribute-list
      • access-list
      • prefix-list
    • offset-list
      • metric (mandatory)
      • access-list (mandatory)
    • state (state only)
      • route (state only)
        • protocol (state only)
        • route-type (state only)
        • nexthop (state only)
        • metric (state only)
      • neighbor (state only)
        • last-update (state only)
        • bad-packets-received (state only)
        • bad-routes-received (state only)
  • 2.26.13. policy-based-routing
    • ipv4-rule
      • not
      • match
        • inbound-interface
        • mark
        • source
        • destination
        • outbound-interface (state only)
        • tos (state only)
        • l3vrf (state only)
        • other (state only)
          • value (state only)
      • action
        • lookup (mandatory)
        • goto (state only)
        • other (state only)
    • ipv6-rule
      • not
      • match
        • inbound-interface
        • mark
        • source
        • destination
        • outbound-interface (state only)
        • tos (state only)
        • l3vrf (state only)
        • other (state only)
          • value (state only)
      • action
        • lookup (mandatory)
        • goto (state only)
        • other (state only)
  • 2.26.14. rib (state only)
    • ipv4-count (state only)
      • kernel (state only)
        • routes (state only)
        • installed-routes (state only)
      • connected (state only)
        • routes (state only)
        • installed-routes (state only)
      • static (state only)
        • routes (state only)
        • installed-routes (state only)
      • ospf (state only)
        • routes (state only)
        • installed-routes (state only)
      • ebgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • ibgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • nhrp (state only)
        • routes (state only)
        • installed-routes (state only)
      • total (state only)
        • routes (state only)
        • installed-routes (state only)
    • ipv6-count (state only)
      • kernel (state only)
        • routes (state only)
        • installed-routes (state only)
      • connected (state only)
        • routes (state only)
        • installed-routes (state only)
      • static (state only)
        • routes (state only)
        • installed-routes (state only)
      • ospf (state only)
        • routes (state only)
        • installed-routes (state only)
      • ebgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • ibgp (state only)
        • routes (state only)
        • installed-routes (state only)
      • nhrp (state only)
        • routes (state only)
        • installed-routes (state only)
      • total (state only)
        • routes (state only)
        • installed-routes (state only)
    • ipv4-route (state only)
      • next-hop (state only)
        • protocol (state only)
        • distance (state only)
        • metric (state only)
        • interface (state only)
        • selected (state only)
        • fib (state only)
        • directly-connected (state only)
        • duplicate (state only)
        • active (state only)
        • on-link (state only)
        • recursive (state only)
        • uptime (state only)
    • ipv6-route (state only)
      • next-hop (state only)
        • protocol (state only)
        • distance (state only)
        • metric (state only)
        • interface (state only)
        • selected (state only)
        • fib (state only)
        • directly-connected (state only)
        • duplicate (state only)
        • active (state only)
        • on-link (state only)
        • recursive (state only)
        • uptime (state only)
• 2.27. DHCP
  • 2.27.1. server
    • enabled (pushed)
    • default-lease-time
    • max-lease-time
    • dhcp-options
      • dhcp-server-identifier
      • domain-name
      • domain-name-server
      • ntp-server
      • interface-mtu
      • netbios-name-server
      • netbios-node-type
      • netbios-scope
      • subnet-mask
      • time-offset
      • option
        • name (mandatory)
        • boolean
        • int8
        • int16
        • int32
        • uint8
        • uint16
        • uint32
        • ipv4-address
        • text
        • hex
        • array
          • int8
          • int16
          • int32
          • uint8
          • uint16
          • uint32
          • ipv4-address
    • subnet
      • interface
      • default-gateway
      • default-lease-time
      • max-lease-time
      • state (state only)
      • range
      • host
        • MAC-ADDRESS (mandatory)
        • IP-ADDRESS (mandatory)
      • dhcp-options
        • dhcp-server-identifier
        • domain-name
        • domain-name-server
        • ntp-server
        • interface-mtu
        • netbios-name-server
        • netbios-node-type
        • netbios-scope
        • subnet-mask
        • time-offset
        • option
          • name (mandatory)
          • boolean
          • int8
          • int16
          • int32
          • uint8
          • uint16
          • uint32
          • ipv4-address
          • text
          • hex
          • array
            • int8
            • int16
            • int32
            • uint8
            • uint16
            • uint32
            • ipv4-address
    • dhcp-server-leases (state only)
      • starts (state only)
      • ends (state only)
      • hw-mac-address (state only)
      • uid (state only)
      • client-hostname (state only)
      • binding-state (state only)
      • next-binding-state (state only)
      • option-agent-circuit-id (state only)
      • option-agent-remote-id (state only)
      • vendor-class-identifier (state only)
  • 2.27.2. relay
    • enabled (pushed)
    • handle-option
    • drop-unmatched
    • hop-count
    • max-size
    • dhcp-server
      • enabled (pushed)
      • interface
      • server-interface
      • handle-option
      • drop-unmatched
      • hop-count
      • max-size
      • counters (state only)
        • discover (state only)
        • offer (state only)
        • request (state only)
        • decline (state only)
        • ack (state only)
        • nack (state only)
        • release (state only)
        • inform (state only)
        • boot-request (state only)
        • boot-reply (state only)
      • dhcp-server-leases (state only)
        • starts (state only)
        • ends (state only)
        • hw-mac-address (state only)
        • uid (state only)
        • client-hostname (state only)
        • binding-state (state only)
        • next-binding-state (state only)
        • option-agent-circuit-id (state only)
        • option-agent-remote-id (state only)
        • vendor-class-identifier (state only)
• 2.28. fast-path
  • 2.28.1. enabled (pushed)
  • 2.28.2. port
  • 2.28.3. core-mask
    • fast-path
    • exception
    • linux-to-fp
    • qos
    • port
  • 2.28.4. cp-protection
    • budget
  • 2.28.5. crypto
    • driver
    • offload-core-mask
    • nb-session
    • nb-buffer
  • 2.28.6. advanced
    • nb-mbuf
    • machine-memory
    • mainloop-sleep-delay
    • offload
    • vlan-strip
    • intercore-ring-size
    • software-txq
    • mask-irq
    • nb-rxd
    • nb-txd
    • reserve-hugepages
    • ipv4-netfilter-cache
    • ipv6-netfilter-cache
    • ipv4-pre-ipsec-fragmentation
    • ipv6-pre-ipsec-fragmentation
    • ipv6-lpm-long-prefix-optimization
    • hardware-queue-map
    • mpls-egress-priority-mapping
      • to (mandatory)
  • 2.28.7. limits
    • fp-max-if
    • fp-max-vrf
    • ip4-max-addr
    • ip4-max-route
    • ip4-max-neigh
    • ip6-max-addr
    • ip6-max-route
    • ip6-max-neigh
    • pbr-max-rule
    • filter4-max-rule
    • filter6-max-rule
    • filter4-max-ct
    • filter6-max-ct
    • filter-max-ipset
    • filter-max-ipset-entry
    • filter-bridge-max-rule
    • vxlan-max-port
    • vxlan-max-if
    • vxlan-max-fdb
    • reass4-max-queue
    • reass6-max-queue
    • ipsec-max-sp
    • ipsec-sp-hash-slots
    • ipsec-max-sa
    • ipsec-sa-hash-slots
    • ip-max-lpm-table
    • ip-max-lpm-memory
    • filter-max-cache
    • filter6-max-cache
    • vlan-max-if
    • macvlan-max-if
    • gre-max-if
    • svti-max-if
    • pppoe-max-channel
    • mpls-max-label
    • mpls-max-route
    • mpls-max-lwt
    • qos-max-schedulers
    • qos-max-filters
    • qos-max-classes
    • bridge-max-if
    • bridge-max-ports
    • bridge-max-fdb
    • fp-cur-if (state only)
    • fp-cur-vrf (state only)
    • ip4-cur-addr (state only)
    • ip4-cur-route (state only)
    • ip4-cur-neigh (state only)
    • ip6-cur-addr (state only)
    • ip6-cur-route (state only)
    • ip6-cur-neigh (state only)
    • pbr-cur-rule (state only)
    • filter4-cur-rule (state only)
    • filter6-cur-rule (state only)
    • filter4-cur-ct (state only)
    • filter6-cur-ct (state only)
    • filter-cur-ipset (state only)
    • vxlan-cur-port (state only)
    • vxlan-cur-if (state only)
    • vxlan-cur-fdb (state only)
    • ipsec-cur-sp (state only)
    • ipsec-cur-sa (state only)
    • ip-cur-lpm-table (state only)
    • ip-cur-lpm-memory (state only)
    • vlan-cur-if (state only)
    • macvlan-cur-if (state only)
    • gre-cur-if (state only)
    • svti-cur-if (state only)
    • pppoe-cur-channel (state only)
    • mpls-cur-route (state only)
    • mpls-cur-lwt (state only)
    • qos-cur-schedulers (state only)
    • qos-cur-filters (state only)
    • qos-cur-classes (state only)
    • bridge-cur-if (state only)
    • bridge-cur-ports (state only)
    • bridge-cur-fdb (state only)
  • 2.28.8. linux-sync
    • fpm-socket-size
    • nl-socket-size
    • ipset-dump-delay
    • disable
  • 2.28.9. mirror-traffic
    • from
      • to
        • interface (mandatory)
        • vrf (mandatory)
  • 2.28.10. cpu-usage (state only)
    • busy (state only)
• 2.29. logging
  • 2.29.1. Global Settings
    • disk-usage (state only)
    • rate-limit
      • interval
      • burst
  • 2.29.2. Per-VRF Settings
    • syslog
      • enabled (pushed)
      • tag
      • remote-server
        • protocol
        • port
        • log-filter
          • level
            • EQUAL
            • greater-or-equal
            • not
              • LEVEL
      • tls
        • enabled
        • ca-certificate (mandatory)
        • certificate
        • private-key
        • server-authentication
          • anonymous
          • certificate
          • name
            • <string>
          • fingerprint
            • <string>
• 2.30. high availability
  • 2.30.1. HA groups
    • group
      • state
  • 2.30.2. HA neighbor
    • enabled (pushed)
    • node-id (mandatory)
    • local-address (mandatory)
    • listen-ha-group (mandatory)
    • interface (mandatory)
    • state (state only)
  • 2.30.3. HA conntrack
    • enabled (pushed)
    • local-address (mandatory)
    • listen-ha-group (mandatory)
    • interface (mandatory)
    • state (state only)
    • protocol-list
      • accept (mandatory)
      • protocol
    • address-list
      • accept (mandatory)
      • address
• 2.31. group
  • 2.31.1. ipv4
    • address-group
      • address
      • used (state only)
    • network-group
      • network
      • used (state only)
  • 2.31.2. ipv6
    • address-group
      • address
      • used (state only)
    • network-group
      • network
      • used (state only)