[edit services]
access-line-information (L2TP)	adaptive-services-pics	agf
alarm-mode	alarms (Video Monitoring)	alg
amf	analytics	anti-virus (Services)
application-identification (Application Identification)	application-identification (Services)	captive-portal
delay-factor	dns-filtering	dynamic-flow-capture
evpn (Easy EVPN LAG Configuration)	fiveqi-map	flow-collector (Flow Collection)
flow-monitoring	flow-monitoring (Services)	flow-tap
generate-snmp-traps	hcm (HTTP Header Enrichment)	hosted-services
icap-redirect	inband-flow-telemetry	inline-monitoring
ip-monitoring (Services)	ip-reassembly	jdaf
jflow-log (Services)	l2tp	local-endpoint
logging (Services)	logical-domain-identity-management	media-loss-rate
media-rate-variation	monitoring (Services)	network-slicing
no-syslog-generation	plmn	profile (icap-redirect)
radius-flow-tap	redundancy-set	rtlog (Next Gen Services Global System Logging)
security-intelligence (Services)	security-intelligence(services)	security-metadata-streaming
service-device-pools (Service Interfaces)	service-interface-pools	service-set (Application-Aware Control Policy)
service-set (Services)	service-set (Subscriber-Aware)	soft-gre
softwires	softwires (Next Gen Services)	ssl (Services)
storm-control (Video Monitoring)	trace (EVPN-VXLAN)	tracking-area
traffic-load-balance (Traffic Load Balancer)	unified-access-control (Services)	upstream-rewrite
url-filter	user-identification (Services)	user-planes
video-monitoring	web-filter

[(CoS)]

[edit services (CoS) cos application-profile {profile-name} sip]
video	voice

[(IPsec VPN)]

[edit services (IPsec VPN) ipsec-vpn ike proposal {proposal-name}]
authentication-method (services)

[edit services (IPsec VPN) ipsec-vpn rule {rule-name} term {term-name} then manual direction {direction}]
authentication (services)	auxiliary-spi

[(Stateful Firewall)]

[edit services (Stateful Firewall) stateful-firewall rule (Services Stateful Firewall) {rule-name} term (Services Stateful Firewall) {term-name} from (Services Stateful Firewall) ]
applications (Services Stateful Firewall)

[edit services (Stateful Firewall) stateful-firewall rule (Services Stateful Firewall) {rule-name} term (Services Stateful Firewall) {term-name} then (Services Stateful Firewall) ]
allow-ip-options (Services Stateful Firewall)

[aacl]

[edit services aacl]
rule (AACL Rule Set)	rule-set (Services AACL)

[edit services aacl rule {rule-name} {term-name} ]
application-group-any (AACL)	application-unknown	log (aacl)
match-direction	nested-application-unknown	nested-applications
term (Application Aware Access List)

[edit services aacl rule {rule-name} term {term-name}]
from (Application Aware Access List)

[edit services aacl rule {rule-name} term {term-name} from]
application-group-any (AACL)	application-groups (Services AACL)	applications (Services AACL)
destination-address	destination-address-range	destination-prefix-list (Services AACL)
source-address (AACL)	source-address-range	source-prefix-list (Services AACL)

[edit services aacl rule-set {rule-set-name}]
rule (AACL Rule Set)

[adaptive-services-pics]

[edit services adaptive-services-pics]
traceoptions (Services Logging)

[address-book]

[edit services address-book global]
address (Address Book Next Gen Services)

[advanced-anti-malware]

[edit services advanced-anti-malware]
advanced-anti-malware policy

[alg]

[edit services alg]
alg-support-lib	dns	ftp (Security ALG)
ike-esp-nat	mgcp	msrpc
pptp	rsh	rtsp
sccp	sunrpc	talk
tftp (Security ALG)	traceoptions (Security ALG)

[edit services alg dns]
maximum-message-length	oversize-message-drop

[edit services alg h323]
application-screen (Security H323)	endpoint-registration-timeout	media-source-port-any
traceoptions (Security H323 ALG)

[edit services alg h323 application-screen]
message-flood (Security H323)	unknown-message (Security H323 ALG)

[edit services alg h323 application-screen message-flood]
gatekeeper

[edit services alg mgcp]
application-screen (Security MGCP)	inactive-media-timeout (Security MGCP)	traceoptions (Security MGCP ALG)
transaction-timeout

[edit services alg mgcp application-screen]
connection-flood	message-flood (Security MGCP)	unknown-message (Security MGCP ALG)

[edit services alg sccp]
application-screen (Security SCCP)	inactive-media-timeout (Security SCCP)	traceoptions (Security SCCP ALG)

[edit services alg sccp application-screen]
call-flood	unknown-message (Security SCCP ALG)

[edit services alg sip]
application-screen (Security SIP)	c-timeout	t1-interval
t4-interval	traceoptions (Security SIP ALG)

[edit services alg sip (Security)]
inactive-media-timeout (Security SIP)	retain-hold-resource

[edit services alg sip (Security) application-screen (Security SIP)]
unknown-message (Security SIP ALG)

[edit services alg sip application-screen protect]
deny (Security SIP)

[analytics]

[edit services analytics]
agent (Analytics)	collector (Analytics)	export-profile (Junos Telemetry Interface)
export-profiles	interfaces (Analytics)	queue-statistics
resource (Analytics)	resource-profiles (Analytics)	sensor (Junos Telemetry Interface)
streaming-server (Junos Telemetry Interface)	streaming-servers	traceoptions (Analytics)
traffic-statistics (Services Analytics)

[edit services analytics agent]
service-agents (Analytics)	traceoptions (Analytics Agent)

[edit services analytics agent service-agents {agent-name}]
inputs (Analytics)	outputs (Analytics)

[edit services analytics collector]
address (Analytics Collector)	local (Analytics Collector)

[edit services analytics collector local]
file (Analytics)

[edit services analytics export-profile {export-profile-name}]
local-address (Junos Telemetry Interface)	routing-instance (Junos Telemetry Interface)

[edit services analytics export-profiles]
interface (Export Profiles)	system (Export Profiles)

[edit services analytics interfaces]
depth-threshold	latency-threshold

[edit services analytics queue-statistics]
file (Analytics)

[edit services analytics resource]
interfaces (Analytics Resource)	system (Analytics Resource)

[edit services analytics resource-profiles]
depth-threshold	latency-threshold

[edit services analytics traffic-statistics]
file (Analytics)

[edit services analytics zero-suppression]
no-zero-suppression

[app-engine]

[edit services app-engine compute-cluster {compute-cluster-name} local-management]
routing-instance (Services)

[edit services app-engine virtual-machines instance {instance-name} local-management]
routing-instance (Services)

[application-identification]

[edit services application-identification]
application (Application Identification)	application (Application Identification)	application-group
application-group (Services)	application-system-cache-timeout (Services)	download (Services)
enable-performance-mode	enable-performance-mode (Application Identification)	maximum-transactions
no-application-identification (Services)	no-application-system-cache	no-application-system-cache (Services)
packet-capture	profile (Application Identification)	profile (Services Application Identification)
statistics (Services)	traceoptions (Services Application Identification)

[edit services application-identification application {application-name}]
alt-name (Application Identification)	cacheable (Application Identification)	compatibility (Application Identification)
description (Application Identification)	icmp-mapping (Application Identification)	ip-protocol-mapping (Application Identification)
order (Application Identification)	over (Application Identification)	priority (Application Identification With Next Gen Services)
tags (Application Identification)	type (Application Identification)

[edit services application-identification application {application-name} address-mapping]
destination (Application Identification)	order (Application Identification)	order-priority (Application Identification)
source (Application Identification)

[edit services application-identification application {application-name} icmp-mapping]
code (Application Identification)	order (Application Identification)	order-priority (Application Identification)
type (ICMP Mapping for Application Identification)

[edit services application-identification application {application-name} ip-protocol-mapping]
order (Application Identification)	order-priority (Application Identification)

[edit services application-identification application {application-name} over {protocol-type}]
signature	signature (Application Identification)

[edit services application-identification application {application-name} over {protocol-type} signature {l4-l7-signature-name}]
chain-order (Application Identification)	member (Application Identification)	order (Application Identification)
order-priority (Application Identification)	port-range (Application Identification)	protocol (Application Identification)

[edit services application-identification application {application-name} over {protocol-type} signature {l4-l7-signature-name} member {member-name}]
check-bytes (Application Identification)	pattern (Application Identification)

[edit services application-identification application-group {group-name}]
applications (Services Application Identification)	tag-group

[edit services application-identification download]
ignore-server-validation (Application Identification)

[edit services application-identification nested-application-settings]
no-application-system-cache

[captive-portal]

[edit services captive-portal]
custom-options	interface (Captive Portal)

[captive-portal-content-delivery]

[edit services captive-portal-content-delivery]
profile (Captive Portal Content Delivery)	rule (Captive Portal Content Delivery)	rule-set (Captive Portal Content Delivery)
traceoptions (Captive Portal Content Delivery)

[edit services captive-portal-content-delivery rule {rule-name}]
term (Captive Portal Content Delivery)

[edit services captive-portal-content-delivery rule {rule-name} term {term-name}]
from (Captive Portal Content Delivery Tags)	then (Captive Portal Content Delivery)

[cos]

[edit services cos]
application-profile	application-profile (Services CoS Next Gen Services)	rule (Services CoS Next Gen Services)
rule (Services CoS)	rule-set (Services CoS Next Gen Services)	rule-set (Services CoS)

[edit services cos application-profile {profile-name}]
ftp (Services CoS Next Gen Services)	sip	sip (Application Profile)
sip (Services CoS Next Gen Services)

[edit services cos application-profile {profile-name} (ftp \| sip) (data \| video \| voice)]
dscp (Services CoS)	forwarding-class (Services PIC Classifiers)

[edit services cos application-profile {profile-name} ftp]
data (FTP)	ftp (Services CoS)

[edit services cos application-profile{profile-name} sip]
video (Application Profile)	voice (Application Profile)

[edit services cos rule {rule-name}]
match-direction (Services CoS)	policy (Services CoS Next Gen Services)	term (Services CoS)

[edit services cos rule {rule-name} policy {policy-name}]
match (Services CoS Next Gen Services)	then (Services CoS Next Gen Services)

[edit services cos rule {rule-name} term {term-name}]
from (Services CoS)	then (Services CoS)

[edit services cos rule {rule-name} term {term-name} from]
application-sets (Services CoS)	applications (Services CoS)	destination-address (Services CoS)
destination-prefix-list (Services CoS)	source-address (Services CoS)	source-prefix-list (Services CoS)

[edit services cos rule {rule-name} term {term-name} then]
application-profile	dscp (Services CoS)	forwarding-class (Services PIC Classifiers)
reflexive \| revert \| reverse	syslog (Services CoS)

[edit services cos rule {rule-name} term {term-name} then reflexive \| revert \| reverse]
forwarding-class (Services PIC Classifiers)

[edit services cos rule {rule-name} term {term-name} then reverse]
application-profile	dscp (Services CoS)	syslog (Services CoS)

[edit services cos rule-set {rule-set-name}]
rule (Services CoS)

[dynamic-flow-capture]

[edit services dynamic-flow-capture]
capture-group	g-duplicates-dropped-periodicity	g-max-duplicates
traceoptions (Dynamic Flow Capture)

[edit services dynamic-flow-capture capture-group {client-name}]
content-destination	control-source	duplicates-dropped-periodicity
input-packet-rate-threshold	interfaces (Services Dynamic Flow Capture)	max-duplicates
pic-memory-threshold

[edit services dynamic-flow-capture capture-group {client-name} content-destination {identifier}]
address (Services Dynamic Flow Capture)	hard-limit	hard-limit-target
soft-limit	soft-limit-clear	ttl (Dynamic Flow Capture)

[edit services dynamic-flow-capture capture-group {client-name} control-source {identifier}]
allowed-destinations	minimum-priority	no-syslog
notification-targets	service-port (UDP, Dynamic Flow Capture)	shared-key
source-addresses

[evpn]

[edit services evpn]
device-attribute (Easy EVPN LAG Configuration)	evpn-vxlan (Easy EVPN LAG Configuration)	global-parameters (Easy EVPN LAG Configuration)

[edit services evpn device-attribute]
peer-to-peer (Easy EVPN LAG Configuration)

[edit services evpn device-attribute peer-to-peer]
peer-subnet (Easy EVPN LAG Configuration)

[edit services evpn evpn-vxlan]
dhcp-relay (Easy EVPN LAG Configuration)	irb (Easy EVPN LAG Configuration)	server (Easy EVPN LAG Configuration)

[edit services evpn evpn-vxlan irb {irb-instance}]
subnet-address (Easy EVPN LAG Configuration)

[flow-collector]

[edit services flow-collector]
analyzer-address	analyzer-id	destinations
file-specification (File Format)	interface-map	retry (Services Flow Collector)
retry-delay	transfer-log-archive

[edit services flow-collector destination]
ftp (Flow Collector Files)

[edit services flow-collector destination ftp:{url}]
password (Flow Collector File Servers)

[edit services flow-collector file-specification]
variant

[edit services flow-collector file-specification variant {variant-number}]
data-format	name-format (Flow Collection)	transfer

[edit services flow-collector interface-map]
collector (Flow Collection)	file-specification (Interface Mapping)

[edit services flow-collector transfer-log-archive]
archive-sites (Flow Monitoring)	filename-prefix	maximum-age

[edit services flow-collector transfer-log-archive archive-sites]
ftp (Transfer Log Files)	password (Transfer Log File Servers)	username (Services)

[flow-monitoring]

[edit services flow-monitoring]
version-ipfix (Services)	version9 (Flow Monitoring)

[edit services flow-monitoring (version-ipfix \|version9) template {template-name}]
nexthop-learning

[edit services flow-monitoring version-ipfix]
template (Flow Monitoring IPFIX Version)

[edit services flow-monitoring version-ipfix template {template-name}]
data-record-fields	flow-active-timeout (Flow Monitoring)	flow-active-timeout (Flow Monitoring)
flow-key (Flow Monitoring)	ipv4-template	ipv6-template
mpls-ipv4-template	mpls-ipvx-template	mpls-template
multi-bgp-path	observation-domain-id	options-template-id
template-id	tunnel-observation	vpls-template

[edit services flow-monitoring version-ipfix template {template-name}],]
flow-inactive-timeout (Flow Monitoring)	option-refresh-rate	template-refresh-rate

[edit services flow-monitoring version-ipfix \|version9 template {template-name}]
bridge-template

[edit services flow-monitoring version9]
template (Flow Monitoring Version 9)

[edit services flow-monitoring version9 template {template-name}]
flow-active-timeout (Flow Monitoring)	flow-active-timeout (Flow Monitoring)	flow-inactive-timeout (Flow Monitoring)
flow-key (Flow Monitoring)	ipv4-template	ipv4-template (Services)
ipv6-template	ipv6-template (Services)	mpls-ipv4-template
mpls-ipvx-template	mpls-template	multi-bgp-path
option-refresh-rate	option-refresh-rate (Services)	options-template-id
peer-as-billing-template	source-id	template-id
template-refresh-rate	template-refresh-rate (Services)	tunnel-observation

[edit services flow-monitoring version9 template {template-name} mpls-ipv4-template]
label-position

[edit services flow-monitoring version9 template {template-name} mpls-template]
label-position

[flow-tap]

[edit services flow-tap]
interface (Services Flow Tap)

[hcm]

[edit services hcm]
profile (HTTP Header Enrichment)	tag-attribute (HTTP Header Enrichment)	tag-rule (HTTP Header Enrichment)
tag-rule-set (HTTP Header Enrichment)

[edit services hcm profile {profile-name}]
tag-rule (Profiles for HTTP Header Enrichment)

[edit services hcm tag-rule {rule-name}]
term (HTTP Header Enrichment)

[edit services hcm tag-rule {rule-name} term {term-number}]
from (HTTP Header Enrichment)	then (HTTP Header Enrichment)

[edit services hcm tag-rule {rule-name} term {term-number} from]
destination-address (HTTP Header Enrichment)	destination-address-range (HTTP Header Enrichment)	destination-port-range (HTTP Header Enrichment)
destination-ports (HTTP Header Enrichment)	destination-prefix-list (HTTP Header Enrichment)

[edit services hcm tag-rule {rule-name} term {term-number} then]
count (HTTP Header Enrichment)	tag (HTTP Header Enrichment)

[edit services hcm tag-rule {rule-name} term {term-number} then tag {tag-name}]
encrypt (HTTP Header Enrichment)	ipv4-mask (HTTP Header Enrichment)	ipv4-or-value (HTTP Header Enrichment)
ipv6-mask (HTTP Header Enrichment)	ipv6-or-value (HTTP Header Enrichment)	tag-attribute (HTTP Header Enrichment Tag Rule)
tag-header (HTTP Header Enrichment)	tag-operation (HTTP Header Enrichment)	tag-separator (HTTP Header Enrichment)

[edit services hcm tag-rule then tag]
tag-value (HTTP Header Enrichment)

[edit services hcm tag-rule-set]
rule (HTTP Header Enrichment for Tag Rule Set)

[hosted-services]

[edit services hosted-services]
server-profile

[edit services hosted-services server-profile {server-profile-name}]
client-address	hosted-service-identifier	server-address (Hosted Services)
transport-type

[icap-redirect]

[edit services icap-redirect]
traceoptions (Services Application Identification)

[edit services icap-redirect profile {name}]
fallback-option (ICAP Redirect Service)	http (icap-redirect profile)	server (icap-redirect profile)

[edit services icap-redirect profile {name} server {name}]
authorization (icap-redirect profile)

[ids]

[edit services ids]
rule (IDS MS-DPC)	rule (IDS MS-MPC)	rule-set (Services IDS)

[edit services ids rule {rule-name}]
match-direction (IDS)	term (IDS MS-DPC)	term (IDS MS-MPC)

[edit services ids rule {rule-name} term {term-name}]
from (IDS MS-DPC)	then (IDS MS-DPC)	then (IDS MS-MPC)

[edit services ids rule {rule-name} term {term-name} from]
application-sets (IDS MS-DPC)	applications (IDS MS-DPC)	destination-address (IDS MS-DPC)
destination-address-range (IDS MS-DPC))	destination-prefix-list (Services IDS)	source-address (IDS MS-DPC)
source-address-range (IDS MS-DPC)	source-prefix-list (Services IDS)

[edit services ids rule {rule-name} term {term-name} then]
aggregation (IDS)	allow-ip-options (IDS MS-MPC)	allow-ipv6-extension-header (IDS MS-MPC)
force-entry (IDS MS-DPC)	icmp-fragment-check (IDS MS-MPC)	icmp-large-packet-check (IDS MS-MPC)
land-attack-check (IDS MS-MPC)	logging (IDS MS-DPC)	session-limit (IDS MS-DPC)
session-limit (IDS MS-MPC)	syn-cookie (IDS MS-DPC)	tcp-syn-defense (IDS MS-MPC)
tcp-syn-fragment-check (IDS MS-MPC)	tcp-winnuke-check (IDS MS-MPC)

[edit services ids rule {rule-name} term {term-name} then aggregation]
destination-prefix (IDS)	destination-prefix-ipv6 (IDS)	source-prefix (IDS)
source-prefix-ipv6 (IDS)

[edit services ids rule {rule-name} term {term-name} then logging]
syslog (IDS MS-DPC)	threshold (Services Logging and SYN-Cookie Defenses)

[edit services ids rule {rule-name} term {term-name} then session-limit]
by-destination (IDS MS-DPC)	by-destination (IDS MS-MPC)	by-pair (IDS MS-DPC)
by-source (IDS MS-MPC)

[edit services ids rule {rule-name} term {term-name} then session-limit (IDS MS-DPC)]
by-source (IDS MS-DPC)

[edit services ids rule {rule-name} term {term-name} then session-limit by-destination]
by-protocol (IDS MS-MPC)

[edit services ids rule {rule-name} term {term-name} then session-limit by-source]
by-protocol (IDS MS-MPC)

[edit services ids rule {rule-name} term {term-name} then syn-cookie]
mss (IDS MS-DPC)	threshold (Services Logging and SYN-Cookie Defenses)

[edit services ids rule-set {rule-set-name}]
rule (IDS MS-DPC)

[ike]

[edit services ike policy {policy-name}]
pre-shared-key (Services IKE)

[inline-monitoring]

[edit services inline-monitoring]
instance (Inline Monitoring)	template (Inline Monitoring)	traceoptions (Inline Monitoring)

[edit services inline-monitoring feature-profile]
features

[edit services inline-monitoring instance {instance-name}]
collector (Inline Monitoring)	controller

[edit services inline-monitoring template {template-name}]
flow-monitoring (Inline Monitoring Services)	primary-data-record-fields

[ip-reassembly]

[edit services ip-reassembly]
rule (IP Reassembly)

[ip-reassemblyrule]

[edit services ip-reassemblyrule{rule-name}]
match-direction (IP Reassembly Rule)

[ipsec-vpn]

[edit services ipsec-vpn]
clear-ike-sas-on-pic-restart	clear-ipsec-sas-on-pic-restart	disable-natt (Services IPsec VPN)
establish-tunnels	ike	ipsec
no-ipsec-tunnel-in-traceroute	rule	rule-set
traceoptions (Security)	traceoptions (Services IPsec VPN)

[edit services ipsec-vpn ike]
policy (Services IKE)	proposal (Services IKE)

[edit services ipsec-vpn ike policy {policy-name}]
description (Services IPsec VPN)	local-certificate	local-id
mode (ike)	peer-certificate-type	proposals (Services)
respond-bad-spi (Services IKE Policy)	version (IKE)

[edit services ipsec-vpn ike policy {policy-name} certificate]
policy-oids

[edit services ipsec-vpn ike proposal {proposal-name}]
authentication-algorithm (Services IKE)	description (Services IPsec VPN)	dh-group (services)
encryption-algorithm	lifetime-seconds

[edit services ipsec-vpn ikepolicy {policy-name}]
remote-id (Services)

[edit services ipsec-vpn ikepolicy {policy-name} local-id\|remote-id]
distinguished-name

[edit services ipsec-vpn ipsec]
policy (IPsec)	proposal (Services IPsec VPN)

[edit services ipsec-vpn ipsec policy {policy-name}]
description (Services IPsec VPN)	perfect-forward-secrecy (Services)	proposals (Services)

[edit services ipsec-vpn ipsec proposal {ipsec-proposal-name}]
authentication-algorithm (Services IPsec)	description (Services IPsec VPN)	encryption-algorithm
lifetime-seconds	protocol (IPsec)

[edit services ipsec-vpn rule {rule-name}]
match-direction (ipsec-vpn)	term (IP Security VPN)

[edit services ipsec-vpn rule {rule-name} term {term-name}]
from (services-ipsec-vpn)	then (IP Security VPN)

[edit services ipsec-vpn rule {rule-name} term {term-name} from]
destination-address (IPsec-VPN)	ipsec-inside-interface	source-address (Services IPSec VPN)

[edit services ipsec-vpn rule {rule-name} term {term-name} then]
anti-replay-window-size (Services IPsec VPN)	backup-remote-gateway	clear-dont-fragment-bit (Services IPsec VPN)
copy-dont-fragment-bit (Services IPsec VPN)	dynamic (services)	initiate-dead-peer-detection
manual	no-anti-replay	remote-gateway
set-dont-fragment-bit (Services IPsec VPN)	syslog (Services IPsec VPN)	tunnel-mtu (Services IPsec VPN)

[edit services ipsec-vpn rule {rule-name} term {term-name} then dead-peer-detection]
interval (services)	threshold (Services IPsec)

[edit services ipsec-vpn rule {rule-name} term {term-name} then dynamic]
natt-install-interval

[edit services ipsec-vpn rule {rule-name} term {term-name} then manual]
direction (services)

[edit services ipsec-vpn rule {rule-name} term {term-name} then manual direction {direction}]
encryption	protocol (IPsec)	spi

[edit services ipsec-vpn rule-set {rule-set-name}]
rule

[edit services ipsec-vpn {rule-name }term {term-name} then]
dead-peer-detection (Services IPsec VPN)

[jdaf]

[edit services jdaf]
routing-instances (JDAF)

[jflow-log]

[edit services jflow-log]
collector (Flow Monitoring Logs for NAT)	collector-group (Flow Monitoring Logs for NAT)	template-profile (Flow Monitoring Logs for NAT)

[edit services jflow-log collector {collector-name}]
destination-address (Flow Monitoring Logs for NAT)	destination-port (Flow Monitoring Logs for NAT)	source-ip (Flow Monitoring Logs for NAT)

[edit services jflow-log template-profile {template–profile-name}]
collector (Flow Template Profiles for NAT)	collector-group (Flow Template Profiles for NAT)	refresh-rate (Flow Monitoring Logs for NAT)
template-type (Flow Monitoring Logs for NAT)	version (Flow Monitoring Logs for NAT)

[l2tp]

[edit services l2tp]
destination (L2TP)	destination-equal-load-balancing (L2TP LAC)	destruct-timeout (L2TP)
disable-calling-number-avp (L2TP LAC)	disable-failover-protocol (L2TP)	drain
enable-ipv6-services-for-lac (L2TP)	enable-snmp-tunnel-statistics (L2TP)	failover-within-preference (L2TP LAC)
ip-reassembly (L2TP)	maximum-sessions (L2TP)	rx-connect-speed-when-equal (L2TP LAC)
sessions-limit-group (L2TP)	traceoptions (Services L2TP)	tunnel (L2TP)
tunnel-group	tunnel-switch-profile (L2TP Tunnel Switching, Application)	tx-connect-speed-method (L2TP LAC)
weighted-load-balancing (L2TP LAC)

[edit services l2tp destination {ip-address}]
access-line-information (L2TP)	address (L2TP Destination)	name (L2TP Destination)

[edit services l2tp destination address {ip-address}]
drain	routing-instance (L2TP Destination)

[edit services l2tp destination address {ip-address} routing-instance {routing-instance-name}]
drain

[edit services l2tp destination lockout-result-code {lockout-result-code-name} lockout-error-code {lockout-error-code- name}]
lockout-timeout (L2TP Destination Lockout)

[edit services l2tp destination name {destination-name}]
drain

[edit services l2tp sessions-limit-group]
maximum-sessions (L2TP)

[edit services l2tp tunnel]
assignment-id-format (L2TP LAC)	failover-resync	idle-timeout (L2TP)
maximum-sessions (L2TP)	minimum-retransmission-timeout (L2TP Tunnel)	name (L2TP Tunnel Destination)
nas-port-method (L2TP LAC)	retransmission-count-established (L2TP)	retransmission-count-not-established (L2TP)
rx-window-size (L2TP)	tx-address-change (L2TP LAC)

[edit services l2tp tunnel name {name} ]
address (L2TP Tunnel Destination)	drain

[edit services l2tp tunnel name {name} address {ip-address}]
drain	routing-instance (L2TP Tunnel Destination)

[edit services l2tp tunnel name {name} address {ip-address} routing-instance {routing-instance-name}]
drain

[edit services l2tp tunnel-group {name}]
aaa-access-profile (L2TP LNS)	dynamic-profile (L2TP)	hello-interval (L2TP)
hide-avps	l2tp-access-profile	local-gateway (L2TP LNS)
maximum-send-window	ppp-access-profile	receive-window
retransmit-interval (Services)	service-device-pool (L2TP)	service-interface (L2TP Processing)
service-profile (L2TP)	syslog (Services L2TP)	tos-reflect (L2TP)
tunnel-switch-profile (L2TP Tunnel Switching, Application)	tunnel-timeout

[edit services l2tp tunnel-group {name} local-gateway]
address (LNS Local Gateway)	gateway-name (LNS Local Gateway)

[edit services l2tp tunnel-group {group-name} syslog]
host (L2TP)

[edit services l2tp tunnel-group {group-name} syslog host {hostname}]
facility-override (System Log Reporting)	log-prefix (L2TP)	services (L2TP System Logging)

[edit services l2tp tunnel-group {group-name}],]
maximum-sessions (L2TP)

[logging]

[edit services logging]
traceoptions (Services Logging)

[lrf]

[edit services lrf]
profile (LRF)

[edit services lrf profile {profile-name}]
collector (LRF Profile)	http-log-multiple-transactions (LRF Profile)	policy-based-logging (LRF Profile)
rule (LRF)	template (LRF Profile)	vendor-support

[edit services lrf profile {profile-name} collector {collector-name}]
destination (LRF Profile)	source-address (LRF Profile)

[edit services lrf profile {profile-name} collector {collector-name} destination]
address (LRF Profile)	port (LRF Profile)

[edit services lrf profile {profile-name} rule {lrf-rule-name}]
then (LRF rule)

[edit services lrf profile {profile-name} rule {lrf-rule-name} then]
report (LRF Rule)

[edit services lrf profile {profile-name} rule {lrf-rule-name} then report]
collector (LRF Rule)	template (LRF Rule)	time-limit (LRF Rule)
volume-limit (LRF Rule)

[edit services lrf profile {profile-name} template {template-name}]
format (LRF Profile)	template-tx-interval (LRF Profile)	template-type (LRF Profile)
trigger-type (LRF Profile)

[mobile-edge]

[edit services mobile-edge gateways]
saegw

[edit services mobile-edge gateways saegw]
saegw access-network-peers	saegw control-plane-peers	saegw system
saegw-core-network-peers

[edit services mobile-edge gateways saegw {name} access-network-peers]
peer-groups (access network peers)

[edit services mobile-edge gateways saegw {name} control-plane-peers]
apn-services (control plane services)	peer-groups (control plane peers)

[edit services mobile-edge gateways saegw {name} core-network-peers]
peer-groups (core network peers)

[edit services mobile-edge gateways saegw system]
class-of-service (saegw system)	destination (saegw system)	service-mode (mobile-edge SAEGW)

[edit services mobile-edge gateways saegw system class-of-service]
downlink-dscp-to-egress-forwarding-class	downlink-dscp-to-forwarding-class	reserved-bandwidth

[edit services mobile-edge session-scale {scale-option}]
mobile-edge session-scale

[monitoring]

[edit services monitoring]
rfc2544	twamp

[edit services monitoring rpm]
owner

[edit services monitoring rpm owner {name} test {test-name}]
offload-type	thresholds (Junos OS Evolved)

[edit services monitoring twamp]
server (Junos OS Evolved)

[edit services monitoring twamp client]
control-connection (Junos OS Evolved)

[edit services monitoring twamp client control-connection {name}]
test-session (Junos OS Evolved)

[edit services monitoring twamp client control-connection {name} test-session {name}]
../ref/statement/source-routing-edit-services-monitoring-twamp.html	thresholds (Junos OS Evolved)

[edit services monitoring twamp server]
managed

[nat]

[edit services nat {destination pool}]
address (Security Destination NAT)	address-persistent (Security Source NAT)	allow-overlapping-nat-pools
allow-overlapping-pools (NAT Next Gen Services)	ipv6-multicast-interfaces	pool (NAT)
port-forwarding	rule (Services NAT)	rule-set (Services NAT)

[edit services nat destination]
pool (Destination NAT Next Gen Services)	port-forwarding (Destination NAT Next Gen Services)

[edit services nat destination pool {nat-pool-name}]
address (NAT Pool Next Gen Services)

[edit services nat destination rule-set {rule-set}]
match-direction (NAT Next Gen Services)	rule (Destination NAT Next Gen Services)

[edit services nat destination rule-set name rule name then destination-nat]
xlat-source-rule

[edit services nat destination rule-set {rule-set} rule {rule-name} match]
application (NAT Next Gen Services)	application (Security Destination NAT)	destination-address (NAT Next Gen Services)
destination-address-name (NAT Next Gen Services)	source-address (NAT Next Gen Services)	source-address-name (NAT Next Gen Services)

[edit services nat destination rule-set {rule-set-name} rule {rule-name} then]
port-forwarding-mappings (Destination NAT Rule Next Gen Services)

[edit services nat destination rule-set {rule-set} rule {rule-name} then destination-nat]
destination-prefix (Destination NAT Next Gen Services)	off (Destination NAT Next Gen Services)

[edit services nat destination rule-set {rule-set} rule {rule-name} then source-nat]
pool (NAT Rule Next Gen Services)

[edit services nat natv6v4]
clear-dont-fragment-bit (NAT Next Gen Services)

[edit services nat pool {nat-pool-name}]
address (Services NAT Pool)	address-allocation	address-range
app-mapping-timeout	ei-mapping-timeout	limit-ports-per-address
mapping-timeout	pgcp	port (Services NAT)

[edit services nat pool {nat-pool-name} pgcp]
hint	ports-per-session	remotely-controlled
transport (Services)

[edit services nat pool {pool-name} port]
deterministic-port-block-allocation	secured-port-block-allocation

[edit services nat port-forwarding {map-name}]
destined-port	translated-port

[edit services nat proxy-arp interface]
address (Security ARP Proxy)

[edit services nat proxy-ndp interface]
address (Security NDP Proxy)

[edit services nat rule {rule-name}]
match-direction (Services NAT)	term (Services NAT)

[edit services nat rule (Services NAT) {rule-name} term (Services NAT) {term-name} then (Services NAT) translated]
address-pooling	filtering-type	mapping-type

[edit services nat rule {rule-name} term {term-name}]
from (Services NAT)	then (Services NAT)

[edit services nat rule {rule-name} term {term-name} from]
application-sets (Services NAT)	applications (Services NAT)	destination-address (Services NAT)
destination-address-range (Services NAT)	destination-port range	destination-prefix-list (Services NAT)
source-address (Services NAT)	source-address-range (Services NAT)	source-prefix-list (Services NAT)

[edit services nat rule {rule-name} term {term-name} then]
no-translation	port-forwarding-mappings	syslog (Services NAT)
translated

[edit services nat rule {name} term {name} then translated]
clat-ipv6-prefix-length	clat-prefix	destination-pool
destination-prefix (Services NAT)	overload-pool	overload-prefix
secure-nat-mapping	source-pool	source-prefix (Services NAT)
translation-type

[edit services nat rule {rule-name} term {term-name} then translated secure-nat-mapping]
eif-flow-limit	mapping-refresh

[edit services nat rule-set {rule-set-name}]
rule (Services NAT)

[edit services nat rule{ rule-name} term{ term-name} then translated]
dns-alg-pool	dns-alg-prefix

[edit services nat source]
pool (Source NAT Next Gen Services)	pool-default-port-range (Source NAT Next Gen Services)	port-round-robin (Source NAT Next Gen Services)

[edit services nat source pool {nat-pool-name}]
address (NAT Pool Next Gen Services)	address-pooling (Source NAT Next Gen Services)	address-shared (Security Source NAT)
ei-mapping-timeout (Source NAT Next Gen Services)	host-address-base (Source NAT Next Gen Services)	mapping-timeout (Source NAT Next Gen Services)
pool-utilization-alarm (Source NAT Next Gen Services)	port (Source NAT Next Gen Services)

[edit services nat source pool {name} address-persistent subscriber]
address-persistent (Security Source NAT Pool)

[edit services nat source pool {name} address-pooling]
address-pooling (Security Source NAT)

[edit services nat source pool {name} pool-utilization-alarm]
clear-threshold

[edit services nat source pool {nat-pool-name} port]
automatic (Source NAT Next Gen Services)	block-allocation (Source NAT Next Gen Services)	deterministic (Source NAT Next Gen Services)
deterministic-nat-configuration-log-interval (Source NAT Next Gen Services)	no-translation (Source NAT Next Gen Services)	preserve-parity (Source NAT Next Gen Services)
preserve-range (Source NAT Next Gen Services)	range (Source NAT Next Gen Services)

[edit services nat source pool-utilization-alarm]
clear-threshold

[edit services nat source rule-set {rule-set}]
match-direction (NAT Next Gen Services)	rule (Source NAT Next Gen Services)

[edit services nat source rule-set {rule-set} rule {rule-name} match]
application (NAT Next Gen Services)	application (Security Source NAT)	destination-address (NAT Next Gen Services)
destination-address-name (NAT Next Gen Services)	source-address (NAT Next Gen Services)	source-address-name (NAT Next Gen Services)

[edit services nat source rule-set {rule-set} rule {rule-name} then source-nat]
clat-prefix (Source NAT Next Gen Services)	filtering-type (Source NAT Next Gen Services)	mapping-type (Source NAT Next Gen Services)
pool (NAT Rule Next Gen Services)	secure-nat-mapping (Source NAT Next Gen Services)

[edit services nat source],]
subscriber-pool-utilization-alarm

[network-monitoring]

[edit services network-monitoring]
profile (Traffic Load Balancer)	traceoptions (Health Check Monitoring)

[paa]

[edit services paa]
test-agent (Paragon Active Assurance)

[pcef]

[edit services pcef]
flow-descriptions	pcc-action-profiles	pcc-rulebases (PCEF)
pcc-rules (PCEF)	profile (Services PCEF)	profiles (PCEF)

[edit services pcef flow-description {flow-identifier}]
local-ports	protocol (Flow Descriptions)	remote-ports

[edit services pcef flow-descriptions {flow-identifier}]
direction (Service Data Flow Filters)	local-port-range	remote-address
remote-port-range

[edit services pcef pcc-action-profiles {profile-name}]
forwarding-class (PCC Action Profiles)	gate-status	ipv4-address (Steering Path)
ipv6-address (Steering Path)	keep-existing-steering	logging-rule (PCC Action Profile)
maximum-bit-rate (PCC Action Profiles)	path (Steering)	redirect (PCC Action Profiles)
steering

[edit services pcef pcc-action-profiles {profile-name} redirect]
url

[edit services pcef pcc-action-profiles {profile-name} steering]
routing-instance (PCC Action Profiles)

[edit services pcef pcc-rule-bases {rulebase-name}]
pcc-rule

[edit services pcef pcc-rules {rule-name}]
from (PCC Rules)	then (PCC Rules)

[edit services pcef pcc-rules {rule-name} from]
application-groups (PCC Rules)	applications (PCC Rules)	flows (PCC Rules)

[edit services pcef pcc-rules {rules-name} then]
pcc-action-profile (PCC Rules)

[edit services pcef profiles {profile-name}]
static-policy-control

[edit services pcef profiles {profile-name} dynamic-policy-control]
diameter-profile (PCEF Profile)	pcc-rulebases (PCEF Profile)	pcc-rules (PCEF Profile)

[edit services pcef profiles {profile-name} static-policy-control]
pcc-rulebases (PCEF Profile)	pcc-rules (PCEF Profile)

[pcp]

[edit services pcp]
rule (PCP)	server (pcp)

[edit services pcp rule {rule-name}]
match-direction (PCP)	term (PCP)

[edit services pcp rule {rule-name} term {term-name}]
from (PCP)	then (PCP)

[edit services pcp rule {rule-name} term {term-name} from]
application-sets (PCP)	applications (PCP)	destination-address (PCP)
destination-address-range (PCP)	destination-port (PCP)	destination-prefix-list (PCP)
source-address (PCP)	source-address-range (PCP)	source-prefix-list (PCP)

[edit services pcp rule {rule-name} term {term-name} then]
pcp-server

[pfe]

[edit services pfe traffic]
monitor-timer

[edit services pfe traffic traceoptions]
file (Packet Forwarding Engine Traffic Traceoptions)

[plmn]

[edit services {name} plmn]
s-nssai

[policies]

[edit services policies]
file-serialization	stateful-firewall-rule-set (Next Gen Services)

[edit services policies stateful-firewall-rule {rule-name}]
policy (Stateful Firewall Rules Next Gen Services)

[edit services policies stateful-firewall-rule {rule-name} policy {policy-name}]
match (Stateful Firewall Rule Next Gen Services)	then (Stateful Firewall Rule Next Gen Services)

[proxy]

[edit services proxy]
profile (Services Proxy)	protocol (Services Proxy)

[radius-flow-tap]

[edit services radius-flow-tap]
policy (Subscriber Secure Policy)

[edit services radius-flow-tap policy {policy-name}]
inet (Subscriber Secure Policy)	inet6 (Subscriber Secure Policy)

[edit services radius-flow-tap policy{ policy-name }inet6 drop-policy{ rule-name} from]
protocol (Subscriber Secure Policy)	source-port (Subscriber Secure Policy)

[edit services radius-flow-tap policy{ policy-name } inet drop-policy{ rule-name} from]
apply-groups (Subscriber Secure Policy)	apply-groups-except (Subscriber Secure Policy)	destination-port (Subscriber Secure Policy)
source-address (Subscriber Secure Policy)

[edit services radius-flow-tap policy{ policy-name} inet drop-policy{ rule-name }from]
destination-address (Subscriber Secure Policy)	dscp (Subscriber Secure Policy)	protocol (Subscriber Secure Policy)

[edit services radius-flow-tap policy{ policy-name} inet6 drop-policy{ rule-name} from]
apply-groups (Subscriber Secure Policy)	apply-groups-except (Subscriber Secure Policy)	destination-address (Subscriber Secure Policy)
destination-port (Subscriber Secure Policy)	dscp (Subscriber Secure Policy)	source-address (Subscriber Secure Policy)
source-port (Subscriber Secure Policy)

[edit services radius-flow-tap policy{ policy-name} inet\| inet6]
drop-policy (Subscriber Secure Policy)

[radius-flow-tappolicy{]

[edit services radius-flow-tappolicy{ policy-name }inet\| inet6]
from (Subscriber Secure Policy)

[redundancy-set]

[edit services redundancy-set]
traceoptions (Services Redundancy Daemon)

[rpm]

[edit services rpm]
probe	probe-limit	rfc2544-benchmarking
traceoptions (RPM)	twamp

[edit services rpm bgp]
bgp (RPM)	logical-system	routing-instances (RPM)

[edit services rpm bgp logical-system {logical-system-name}]
routing-instances (RPM)

[edit services rpm probe {owner}]
delegate-probes

[edit services rpm probe {owner} test {test-name}]
destination-interface	hardware-timestamp	inet6-options (Services)
next-hop (RPM)	one-way-hardware-timestamp	rpm-scale
thresholds (Junos OS)

[edit services rpm probe-server (tcp \| udp)]
destination-interface

[edit services rpm rfc2544-benchmarking]
profiles (RFC 2544 Benchmarking)

[edit services rpm rfc2544-benchmarking profilestest-profile {profile-name}]
bandwidth-kbps

[edit services rpm rfc2544-benchmarking tests test-name {test-name}]
ivlan-priority (RFC 2544 Benchmarking)

[edit services rpm rfc2544-benchmarkingtests test-name {test-name}]
forwarding-class (RFC 2544 Benchmarking)	ivlan-cfi (RFC 2544 Benchmarking)	ivlan-id (RFC 2544 Benchmarking)
outer-tag-protocol-id (RFC 2544 Benchmarking)	ovlan-cfi (RFC 2544 Benchmarking)	ovlan-id (RFC 2544 Benchmarking)
packet-loss-priority (RFC 2544 Benchmarking)	receive-failure-threshold (RFC 2544 Benchmarking)	service-type (RFC 2544 Benchmarking Tests)
test-finish-wait-duration (RFC 2544 Benchmarking)	test-iterator-pass-threshold (RFC 2544 Benchmarking)	timestamp-format (RFC 2544 Benchmarking)
transmit-failure-threshold (RFC 2544 Benchmarking)

[edit services rpm twamp]
post-cli-implicit-firewall	server (Junos OS)

[edit services rpm twamp (client control-connection {control-client-name} \|server)]
tcp-keepcnt	tcp-keepidle	tcp-keepintvl

[edit services rpm twamp client]
control-connection (Junos OS)

[edit services rpm twamp client control-connection {control-client-name}]
authentication-mode	destination-interface	persistent-results
test-count	test-session (Junos OS)	thresholds (Junos OS)

[edit services rpm twamp client control-connection {control-client-name} test-session {session-name}]
data-fill-with zeros	source-address (TWAMP)

[edit services rpm twamp server]
authentication-key-chain (TWAMP)	authentication-mode	inactivity-timeout (Services RPM)
max-connection-duration	maximum-connections	maximum-connections-per-client
maximum-sessions	maximum-sessions-per-connection	routing-instance-list (TWAMP)
server-inactivity-timeout

[rtlog]

[edit services rtlog]
traceoptions (Next Gen Services Global System Logging)

[edit services rtlog traceoptions]
file (Next Gen Services Global System Logging)	flag (Next Gen Services Global System Logging)	no-remote-trace (Next Gen Services Global System Logging)

[edit services rtlog traceoptions file]
filename (Next Gen Services Global System Logging)	match (Next Gen Services Global System Logging)	no-world-readable (Next Gen Services Global System Logging)
size (Next Gen Services Global System Logging)	world-readable (Next Gen Services Global System Logging)

[edit services rtlog traceoptions file filename]
files (Next Gen Services Global System Logging)

[edit services rtlog traceoptions flag]
name (Next Gen Services Global System Logging)

[screen]

[edit services screen]
cpu-throttle (Next Gen Services)

[edit services screen ids-option {screen-name}]
aggregations (IDS Screen Next Gen Services)	alarm-without-drop (IDS Screen Next Gen Services)	icmp (IDS Screen Next Gen Services)
ip (IDS Screen Next Gen Services)	limit-session (IDS Screen Next Gen Services)

[edit services screen ids-option {screen-name} icmp]
fragment (IDS Screen Next Gen Services)	icmpv6-malformed (IDS Screen Next Gen Services)	large (IDS Screen Next Gen Services)
ping-death (IDS Screen Next Gen Services)

[edit services screen ids-option {screen-name} ip]
bad-option (IDS Screen Next Gen Services)	block-frag (IDS Screen Next Gen Services)	ipv6-extension-header (IDS Screen Next Gen Services)
loose-source-route-option (IDS Screen Next Gen Services)	record-route-option (IDS Screen Next Gen Services)	security-option (IDS Screen Next Gen Services)
source-route-option (IDS Screen Next Gen Services)	stream-option (IDS Screen Next Gen Services)	strict-source-route-option (IDS Screen Next Gen Services)
tear-drop (IDS Screen Next Gen Services)	timestamp-option (IDS Screen Next Gen Services)	unknown-protocol (IDS Screen Next Gen Services)

[edit services screen ids-option {screen-name} limit-session]
by-destination (IDS Screen Next Gen Services)	by-source (IDS Screen Next Gen Services)

[edit services screen ids-option {screen-name} limit-session by-destination]
by-protocol (IDS Screen Next Gen Services)

[edit services screen ids-option {screen-name} limit-session by-source]
by-protocol (IDS Screen Next Gen Services)

[edit services screen ids-option {screen-name} tcp]
fin-no-ack (IDS Screen Next Gen Services)	land (IDS Screen Next Gen Services)	syn-ack-ack-proxy (IDS Screen Next Gen Services)
syn-fin (IDS Screen Next Gen Services)	syn-frag (IDS Screen Next Gen Services)	tcp-no-flag (IDS Screen Next Gen Services)
winnuke (IDS Screen Next Gen Services)

[security-metadata-streaming]

[edit services security-metadata-streaming policy]
dynamic-filter

[service-device-pools]

[edit services service-device-pools]
pool (Service Interfaces)

[edit services service-device-pools pool {pool-name}]
interface (Service Interfaces)

[service-interface-pools]

[edit services service-interface-pools]
pool (Service Interface)

[edit services service-interface-pools pool {pool-name}]
interface (services)

[service-set]

[edit services service-set {service-set-name}]
aacl-statistics-profile	allow-multicast	application-identification-profile (Service Set)
captive-portal-content-delivery-profile (Services)	cos-rule-sets (Service Set Next Gen Services)	cos-rules (Service Set Next Gen Services)
cos-rules (Service Set)	hcm-profile (HTTP Header Enrichment)	ids-rule-sets
ids-rules	interface-service (Services Interfaces)	ip-reassembly-rules (Service Set)
ipsec-vpn-options	ipsec-vpn-rules	lrf-profile (Service Set)
max-drop-flows	max-flows	max-session-setup-rate (Service Set)
nat-options	nat-options (Next Gen Services)	nat-rule-sets (Service Set Next Gen Services)
nat-rule-sets (Service Set)	nat-rules	next-hop-service
pcef-profile (Service Set)	pcp-rules	pgcp-rules
ptsp-rules	redundancy-set-id (Service Set)	service-order
service-set-options	service-set-options (Next Gen Services Services)	snmp-trap-thresholds
snmp-trap-thresholds (Next Gen Services)	softwire-options	softwire-rules
softwires-rule-set (Service Set Next Gen Services)	stateful-firewall-rule-sets (Service Set Next Gen Services)	stateful-firewall-rules
stateful-firewall-rules (Service Set Next Gen Services)	subscriber-profile	syslog (Next Gen Services Service-Set System Logging)
syslog (Services Service Set)	tag-rule-sets (Service Set)	tag-rules (Service Set)
tcp-log	tcp-mss (Services)	url-filter-profile
web-filter-profile

[edit services service-set {service-set-name} cos-options]
match-rules-on-reverse-flow	match-rules-on-reverse-flow (Next Gen Services)

[edit services service-set {service-set-name} interface-service]
load-balancing-options (Service Set)	service-interface (Services Interfaces)

[edit services service-set {service-set-name} interface-service load-balancing-options]
hash-keys (Aggregated Multiservices)

[edit services service-set {service-set-name} ipsec-vpn-options]
anti-replay-window-size (Services Service Set)	clear-dont-fragment-bit (Services Service Set)	copy-dont-fragment-bit (Services Set)
ike-access-profile	local-gateway (IPSec)	nat-keepalive (Services IPsec VPN)
no-anti-replay (Services Service Set)	no-certificate-chain-in-ike	no-nat-traversal (Services IPsec VPN)
passive-mode-tunneling	set-dont-fragment-bit (Services Set)	trusted-ca
tunnel-mtu (Services Service Set)	udp-encapsulation

[edit services service-set {service-set-name} ipsec-vpn-options local-gateway {address}]
gw-interface

[edit services service-set {service-set-name} jflow-log]
template-profile (Flow Monitoring Logs for NAT)

[edit services service-set name flow]
traceoptions (Next Gen Services Service-Set Flow)

[edit services service-set {service-set-name} nat-options]
land-attack-check	max-sessions-per-subscriber	snmp-value-match-msmic (Services NAT Options)
stateful-nat64

[edit services service-set {service-set-name} nat-options stateful-nat64]
clear-dont-fragment-bit (Services NAT Options)

[edit services service-set {service-set-name} service-set-options]
bypass-traffic-on-exceeding-flow-limits	bypass-traffic-on-pic-failure	disable-global-timeout-override
enable-asymmetric-traffic-processing (Service Set Next Gen Services)	header-integrity-check	header-integrity-check (Next Gen Services)
max-sessions-per-subscriber (Service Set Next Gen Services)	routing-engine-services	session-limit (Service Set Next Gen Services)
session-timeout (Service Set Next Gen Services)	static-subscriber-application	subscriber-awareness (Service Set Options)
tcp-fast-open	tcp-non-syn	tcp-session (Service Set Next Gen Services)

[edit services service-set {service-set-name} service-set-options tcp-session]
close-timeout	inactivity-asymm-tcp-timeout (Service Set Next Gen Services)	open-timeout

[edit services service-set {services-set-name} subscriber-profile {profile-name}]
disable	enable	max-data-sessions-per-subscriber

[edit services service-set {services-set-name} subscriber-profile {profile-name} enable {service-name}]
concurrent-data-sessions

[edit services service-set {services-set-name} subscriber-profile {profile-name} max-data-sessions-per-subscriber]
exceed-action	limit

[edit services service-set {service-set-name} syslog]
host (service-set)	local-category (Next Gen Services Service-Set Local System Logging)	transport (Next Gen Services Syslog Message Security)
utc-timestamp

[edit services service-set {name } syslog edit services service-set {name} syslog stream {stream-name}]
local-log-tag (Next Gen Services Service-Set System Logging)

[edit services service-set {service-set-name} syslog host {hostname}]
class	facility-override (Service Sets)	log-prefix (Services)
services (System Logging)	source-address (Service Sets)

[edit services service-set {service-set-name} syslog stream]
category (System Logging)

[edit services service-set {service-set-name} web-filter]
multi-tenant-support

[service-set-options]

[edit services {service-set-name} service-set-options]
inactivity-timeout (services)

[services-set]

[edit services services-set {name} syslog]
event-rate (Next Gen Services Service-Set Local System Logging)	mode (Next Gen Services Service-Set System Logging)

[softwire]

[edit services softwire]
ipv6-multicast-interfaces	rule (Softwire)	rule-set (Softwire)
softwire-concentrator

[edit services softwire rule-set {rule-set-name}]
rule (Softwire)

[edit services softwire softwire-concentrator]
ds-lite	map-e	map-t
v6rd

[softwires]

[edit services softwires]
rule-set (Softwires Next Gen Services)	softwire-name (Next Gen Services)	softwire-types (Next Gen Services)

[edit services softwires softwire-types]
ds-lite	map-e	v6rd

[source]

[edit services {nat} source {rule-set} {name} {rule} {name} then source-nat]
address-mapping

[ssl]

[edit services ssl]
initiation (Services)	proxy (Services)	termination (Services)
traceoptions (Services SSL)

[edit services ssl initiation]
profile (SSL Initiation)

[edit services ssl initiation profile {profile-name}]
actions (Services SSL Initiation)	custom-ciphers	enable-flow-tracing (Services)
enable-session-cache	preferred-ciphers	protocol-version
trusted-ca (Services)

[edit services ssl initiation profile {profile-name } actions]
crl

[edit services ssl proxy]
global-config (Services)	profile (Services SSL Proxy)

[edit services ssl proxy (Services) profile (Services SSL Proxy)]
actions

[edit services ssl proxy profile {profile-name}]
custom-ciphers	enable-flow-tracing (Services)	mirror-decrypt-traffic
preferred-ciphers	root-ca (Services)	trusted-ca (Services)
whitelist	whitelist-url-categories

[edit services ssl proxy profile {profile-name} actions]
crl	log (Services)	renegotiation (Services)

[edit services ssl termination]
profile (SSL Termination)

[edit services ssl termination profile {profile-name}]
custom-ciphers	enable-flow-tracing (Services)	enable-session-cache
preferred-ciphers	protocol-version	root-ca (Services)
server-certificate (Services)	trusted-ca (Services)	whitelist

[edit services ssl traceoptions]
flag (Services)	level (Services)

[edit services ssl traceoptions file {file-name}]
size (Services)

[stateful-firewall]

[edit services stateful-firewall]
rule (Services Stateful Firewall)	rule-set (Services Stateful Firewall)

[edit services stateful-firewall rule {rule-name}]
match-direction (Services Stateful Firewall)	term (Services Stateful Firewall)

[edit services stateful-firewall rule {rule-name} term {term-name}]
from (Services Stateful Firewall)	then (Services Stateful Firewall)

[edit services stateful-firewall rule {rule-name} term {term-name} from]
application-sets (Services Stateful Firewall)	destination-address (Services Stateful Firewall)	destination-address-range (Services Stateful Firewall)
destination-prefix-list (Services Stateful Firewall)	source-address (Services Stateful Firewall)	source-address-range (Services Stateful Firewall)
source-prefix-list (Services Stateful Firewall)

[edit services stateful-firewall rule {rule-name} term {term-name} then]
syslog (Services Stateful Firewall)

[edit services stateful-firewall rule-set {rule-set-name}]
rule (Services Stateful Firewall)

[traffic-load-balance]

[edit services traffic-load-balance]
instance (Traffic Load Balancer)	routing-engine-mode (TLB)	traceoptions (Traffic Load Balancer)

[edit services traffic-load-balance instance {instance-name}]
group (Traffic Load Balancer)	real-service (Traffic Load Balancer)	virtual-service (Traffic Load Balancer)

[unified-access-control]

[edit services unified-access-control]
captive-portal (Services UAC)	certificate-verification	infranet-controller
interval (Services)	test-only-mode	timeout (Services)
timeout-action	traceoptions (Services UAC)

[edit services unified-access-control captive-portal {policy}]
redirect-traffic	redirect-url

[edit services unified-access-control infranet-controller {hostname}]
address (Services)	ca-profile (Services)	interface (Services)
password (Services)	port (Services)	server-certificate-subject

[url-filter]

[edit services url-filter]
profile (Web Filter)

[edit services url-filter profile {profile-name}]
template (Services URL Filter)

[edit services url-filter profile {profile-name} template {template-name}]
term (URL Filter)

[user-identification]

[edit services user-identification]
active-directory-access	authentication-source (Services User Identification ClearPass)	identity-management

[edit services user-identification active-directory domain]
ip-user-mapping

[edit services user-identification active-directory-access]
firewall-authentication-forced-timeout	invalid-authentication-entry-timeout (Services User Identification Active Directory and ClearPass)	traceoptions (Active Directory Access)

[edit services user-identification active-directory-access domain]
user-group-mapping

[edit services user-identification authentication-source (Services User Identification ClearPass) aruba-clearpass]
authentication-entry-timeout (Services User Identification)	invalid-authentication-entry-timeout (Services User Identification Active Directory and ClearPass)	no-user-query (Services User Identification)
traceoptions (Services User Identification)	user-query (Services User Identification)

[edit services user-identification authentication-source (Services User Identification ClearPass) aruba-clearpass user-query (Services User Identification)]
web-server (Services)

[edit services user-identification device-information]
authentication-source (Services User Identification Device Identity)	end-user-profile	identity-context-profile

[edit services user-identification identity-management]
authentication-entry-timeout (Identity Management Advanced Query)	batch query	connection (Identity Management Advanced Query)
filter (Identity Management Advanced Query)	ip-query (Identity Management Advanced Query)

[edit services user-identification identity-management connection]
primary connection (Identity Management Advanced Query)	secondary connection (Identity Management Advanced Query)

[video-monitoring]

[edit services video-monitoring]
generate-snmp-traps	interfaces (Video Monitoring)	templates

[web-filter]

[edit services web-filter]
multi-tenant-hash	profile (Web Filter)

[edit services web-filter profile {profile-name}]
dns-filter	dns-filter-template	feed-name
global-dns-stats-log-timer	security-intelligence-policy	url-filter-template

[edit services web-filter profile {profile-name} dns-filter-template {template-name}]
dns-filter	feed-name

[edit services web-filter profile {profile-name} dns-filter-template {template-name} term {term-name}]
feed-name

[edit services web-filter profile {profile-name} security-intelligence-policy]
black-list	geo-ip (global-filter)	white-list

[edit services web-filter profile {name} url-filter-template]
disable-https-filtering	security-intelligence-policy	term (URL Filter)

[edit services web-filter profile {profile-name} url-filter-template {template-name} security-intelligence-policy]
geo-ip (group-filter)

[web-proxy]

[edit services web-proxy]
secure-proxy

ON THIS PAGE

[edit services]

Sub Hierarchies

[(CoS)]

[(IPsec VPN)]

[(Stateful Firewall)]

[aacl]

[adaptive-services-pics]

[address-book]

[advanced-anti-malware]

[alg]

[analytics]

[app-engine]

[application-identification]

[captive-portal]

[captive-portal-content-delivery]

[cos]

[dynamic-flow-capture]

[evpn]

[flow-collector]

[flow-monitoring]

[flow-tap]

[hcm]

[hosted-services]

[icap-redirect]

[ids]

[ike]

[inline-monitoring]

[ip-reassembly]

[ip-reassemblyrule]

[ipsec-vpn]

[jdaf]

[jflow-log]

[l2tp]

[logging]

[lrf]

[mobile-edge]

[monitoring]

[nat]

[network-monitoring]

[paa]

[pcef]

[pcp]

[pfe]

[plmn]

[policies]

[proxy]

[radius-flow-tap]

[radius-flow-tappolicy{]

[redundancy-set]

[rpm]

[rtlog]

[screen]

[security-metadata-streaming]

[service-device-pools]

[service-interface-pools]

[service-set]

[service-set-options]

[services-set]

[softwire]

[softwires]

[source]

[ssl]

[stateful-firewall]

[traffic-load-balance]

[unified-access-control]

[url-filter]

[user-identification]

[video-monitoring]

[web-filter]

[web-proxy]