[edit system]

[edit system]
access-line (Access-Line Rate Adjustment)	accounting (System)	allow-6pe-traceroute
allow-l3vpn-traceroute-src-select	allow-v4mapped-packets	archival
arp	arp-enhanced-scale	arp-system-cache-limit
authentication-order (System)	authentication-order (System)	auto-configuration (System)
auto-snapshot	auto-sw-sync	autoinstallation
autoinstallation (JNU Satellite Devices)	backup-router	boot-loader-authentication
commit (System)	commit activate	commit prepare
compress-configuration-files (System)	configuration-database	configuration-database (Enhanced Subscriber Management)
csds	ddos-protection	ddos-protection (DDoS)
default-address-selection	demux-options (All Demux Interfaces)	device-authentication
diag-port-authentication	domain-name (System)	domain-search
dual-phase-bootup	dynamic-profile-options	exceptions
export-format (JSON)	extended-echo	extensions
health-monitor (KHMS)	host-name (System)	icmp (System)
inet6-backup-router	internet-options	kernel-replication
license	location (System)	login
management-instance	master-password	max-configurations-on-flash (System)
mirror-flash-on-disk	name-server (System Services)	nd-maxucast-retry
nd-override-preferred-src	nd-retransmit-timer	nd-system-cache-limit
no-hidden-commands	no-multicast-echo	no-ping-record-route
no-ping-time-stamp	no-redirects (IPv4 Traffic)	node (System)
ntp	ntp (QFabric)	packet-forwarding-options
password-options	pic-console-authentication	ports (System)
processes	proxy (System)	radius-options (System)
radius-server (System)	regex-additive-logic	resiliency
rng	root-authentication	saved-core-context (System)
saved-core-files (System)	schema	scripts
security-profile	security-profile-resources	services (system services)
snapshot	static-host-mapping	store
switchover-on-routing-crash	syslog (QFabric System)	syslog (System)
tacplus-options	tacplus-server	time-zone
trace	traceoptions (Resiliency)	tracing
unattended-boot	use-imported-time-zones

[access-line]

[edit system access-line]
attributes (Access-Line Rate Adjustment)	dsl (Access-Line Rate Adjustment)	pon (Access-Line Rate Adjustment)

[accounting]

[edit system accounting]
destination (Accounting)	traceoptions (System Accounting)

[edit system accounting destination]
radius (System)	tacplus

[edit system accounting destination radius]
server (RADIUS Accounting)

[edit system accounting destination radius server {server-address}]
source-address (RADIUS, System Logging, or TACACS+)

[edit system accounting destination tacplus]
server (TACACS+ Accounting)

[edit system accounting destination tacplus server {server-address}]
source-address (RADIUS, System Logging, or TACACS+)

[arp]

[edit system arp]
non-subscriber-no-reply	proactive-arp-detection	purging

[autoinstallation]

[edit system autoinstallation]
configuration-servers	delete-after-commit (JNU Satellites)	interfaces (Autoinstallation)
usb

[commit]

[edit system commit]
commit-synchronize-server	notification (Commit)	peers (Commit)
peers-synchronize	server (Batch Commits)	synchronize

[edit system commit server]
traceoptions (Batch Commits)

[edit system commit synchronize server]
traceoptions (Batch Commits)

[configuration]

[edit system configuration input format]
json

[configuration-database]

[edit system configuration-database]
ephemeral	max-db-size (Enhanced Subscriber Management)

[edit system configuration-database ephemeral]
instance (Ephemeral Database)	resize-ephemeral-default

[edit system configuration-database ephemeral instance {instance-name}]
resize (Ephemeral Database)

[ddos-protection]

[edit system ddos-protection]
global (DDoS)	protocols	protocols (DDoS)
protocols (DDoS) (ACX Series, PTX Series, and QFX Series)	traceoptions (DDoS)

[edit system ddos-protection global]
disable-fpc (DDoS)	disable-logging (DDoS)	disable-routing-engine (DDoS)
flow-detection (DDoS Flow Detection)	flow-detection-mode (DDoS Global Flow Detection)	flow-level-control (DDoS Global Flow Detection)
flow-report-rate (DDoS Flow Detection)	violation-report-rate (DDoS Flow Detection)

[edit system ddos-protection protocols {protocol-group} {packet-type}]
flow-detection (DDoS Packet Level)	flow-detection-mode (DDoS Flow Detection)	flow-level-bandwidth (DDoS Flow Detection)
flow-level-control (DDoS Flow Detection)	flow-level-detection (DDoS Flow Detection)	flow-recover-time (DDoS Flow Detection)
flow-timeout-time (DDoS Flow Detection)	l2tp (DDoS Protection)	no-flow-logging (DDoS Flow Detection)
ppp	pppoe (DDoS Protection)	sample
timeout-active-flows (DDoS Flow Detection)

[edit system ddos-protection protocols {protocol-group} (aggregate \| {packet-type}) fpc {slot-number}]
bandwidth-scale (DDoS)	burst-scale (DDoS)	disable-fpc (DDoS)

[edit system ddos-protection protocols {protocol-group} (aggregate \| {packet-type})]
disable-fpc (DDoS)	disable-logging (DDoS)	disable-routing-engine (DDoS)
recover-time (DDoS)

[edit system ddos-protection protocols {protocol-group} aggregate]
disable-routing-engine (DDoS)

[edit system ddos-protection protocols {protocol-group} {packet-type} flow-detection]
flow-detect-time (DDoS Flow Detection)

[edit system ddos-protection protocols {protocol-group} {packet-type} flow-level-bandwidth]
logical-interface (DDoS Flow Detection)	physical-interface (DDoS Flow Detection)	subscriber (DDoS Flow Detection)

[edit system ddos-protection protocols {protocol-group} {packet-type} flow-level-control]
logical-interface (DDoS Flow Detection)	physical-interface (DDoS Flow Detection)	subscriber (DDoS Flow Detection)

[edit system ddos-protection protocols {protocol-group} {packet-type} flow-level-detection]
logical-interface (DDoS Flow Detection)	physical-interface (DDoS Flow Detection)	subscriber (DDoS Flow Detection)

[demux-options]

[edit system demux-options]
use-underlying-interface-mac

[dynamic-profile-options]

[edit system dynamic-profile-options]
versioning

[extension]

[edit system extension extension-service application]
max-datasize

[extensions]

[edit system extensions]
extension-service (System Extensions)	providers

[edit system extensions extension-service]
application (Extensions)

[edit system extensions extension-service application]
file (JET)	start (Scripts)	traceoptions (Extensions)

[edit system extensions extension-service application file {filename}]
cert-file (Scripts)	checksum (Scripts)	refresh (JET)
refresh-from (JET)	routing-instance (JET Scripts)	source (JET Scripts)
start (Scripts)	traceoptions (Extensions)

[fib-streaming]

[edit system fib-streaming]
prefix-list (Junos Telemetry Interface)

[firewall-profile]

[edit system firewall-profile]
egress-l2-extended-match

[internet-options]

[edit system internet-options]
tcp-mss (Internet Options)

[license]

[edit system license]
traceoptions (System License)

[login]

[edit system login]
class (Defining Login Classes)	idle-timeout (System)	password (Login)
retry-options	user (Access)

[edit system login class]
idle-timeout (System)

[edit system login user {username} authentication]
remote-debug-permission

[management-traffic]

[edit system management-traffic protocol {protocol-name}]
priority (Management Traffic)

[monitor]

[edit system monitor]
memory (System)	traceoptions (System Monitor)

[edit system monitor memory]
process (Memory)	system (Memory)

[edit system monitor memory process]
critical-event (Process)	major-event (Process)	minor-event (Process)

[edit system monitor memory system]
critical-event (System)	major-event (System)	minor-event (System)

[ntp]

[edit system ntp]
ntp threshold	server (NTP)

[edit system ntp nts]
local-certificate (System)	trusted-ca

[edit system ntp server {server-name} nts]
remote-identity

[packet-forwarding-options]

[edit system packet-forwarding-options]
eracl-ip6-match (packet-forwarding-options)	flow-export-timer	hw-db-profile
internal-forwarding-bandwidth	ipfix-sw-mode	mcast stats-enable
mpls (packet-forwarding-options)	multicast-statistics (packet-forwarding-options)	no-ip-tos-rewrite
overlay (Packet Forwarding Options)	packet-format-match	recycle-bandwidth-profiles
reserve ingress-egress-mcast

[edit system packet-forwarding-options firewall]
eracl-profile (packet-forwarding-options)	force-fbf-terms

[edit system packet-forwarding-options firewall eracl-profile eracl-scale]
eracl-profile (packet-forwarding-options)

[edit system packet-forwarding-options hw-resource-monitor]
monitor-profile	polling-interval (Network Management)	resource-list (Network Management)

[edit system packet-forwarding-options mcast-repl-type]
ingress-egress-recycle	ingress-only

[edit system packet-forwarding-options system-profile]
vxlan-stitching

[ports]

[edit system ports]
auxiliary	console (System Ports)

[edit system ports console]
authentication-order (System)

[processes]

[edit system processes]
auto-configuration	bootp (System Processes)	dhcp-service
failover (System Process)	firewall-authentication-service	peer-selection-service
pgcp-service	pic-services-logging	pppoe (System Processes)
process-monitor	profilerd	r2cp
redundancy-interface-process	resource-cleanup	routing (System Processes)
sampling	secure-neighbor-discovery	security-log
simple-mail-client-service	smg-service (Enhanced Subscriber Management)	static-subscribers
statistics-service	subscriber-management-helper	tcp-forwarding (Processes)
uac-service	usb-control	vrrp
watchdog	web-management (System Processes)

[edit system processes app-engine-virtual-machine-management-service]
traceoptions (App Engine Virtual Machine Management Service)

[edit system processes app-engine-virtual-machine-management-service traceoptions]
file (App Engine Virtual Machine Management Service)	flag (App Engine Virtual Machine Management Service)	level (App Engine Virtual Machine Management Service)

[edit system processes dhcp-service]
accept-max-tcp-connections (System Process)	dhcp-snooping-file	interface-traceoptions (DHCP)
log	ltv-syslog-interval (System Process)	request-max-tcp-connections (System Process)
traceoptions (DHCP)

[edit system processes diameter-service]
traceoptions (Diameter Base Protocol)

[edit system processes general-authentication-service]
traceoptions (Address-Assignment Pool)	traceoptions (General Authentication Service)

[edit system processes process-monitor]
traceoptions (Process Monitor)

[edit system processes resource-cleanup]
traceoptions (Resource Cleanup)

[edit system processes routing bgp]
rib-sharding	update-threading

[edit system processes sbc-configuration-process]
traceoptions (SBC Configuration Process)

[edit system processes smg-service]
traceoptions (Enhanced Subscriber Management)

[edit system processes static-subscribers]
traceoptions (Static Subscribers)

[edit system processes tcp-forwarding]
traceoptions (TCP Port Forwarding)

[radius-server]

[edit system radius-server {server-address}]
source-address (RADIUS, System Logging, or TACACS+)

[root-authentication]

[edit system root-authentication]
remote-debug-permission

[scripts]

[edit system scripts]
commit (Commit Scripts)	language (Scripts)	load-scripts-from-flash (Scripts)
op (Op Scripts)	snmp (SNMP Scripts)	synchronize (Scripts)
translation

[edit system scripts commit]
allow-transients	dampen	direct-access (Commit Scripts)
file (Commit Scripts)	max-datasize	refresh (Commit Scripts)
refresh-from (Commit Scripts)	traceoptions (Commit, Op, and SNMP Scripts)

[edit system scripts commit dampen]
dampen-options

[edit system scripts commit dampen dampen-options]
cpu-factor (Dampen Options)	line-interval (Dampen Options)	time-interval (Dampen Options)

[edit system scripts commit file {filename}]
allow-transients	cert-file (Scripts)	checksum (Scripts)
optional (Commit Scripts)	refresh (Commit Scripts)	refresh-from (Commit Scripts)
routing-instance (System Scripts)	source (Commit Scripts)

[edit system scripts commit traceoptions]
no-remote-trace (System)

[edit system scripts op]
allow-url-for-python (Op Scripts)	dampen	file (Op Scripts)
max-datasize	no-allow-url (Op Scripts)	refresh (Op Scripts)
refresh-from (Op Scripts)	start (Scripts)	traceoptions (Commit, Op, and SNMP Scripts)

[edit system scripts op dampen]
dampen-options

[edit system scripts op dampen dampen-options]
cpu-factor (Dampen Options)	line-interval (Dampen Options)	time-interval (Dampen Options)

[edit system scripts op file {filename}]
allow-commands (Op Scripts)	arguments (Op Scripts)	cert-file (Scripts)
checksum (Scripts)	command (Op Scripts)	dampen
description (Op Scripts)	refresh (Op Scripts)	refresh-from (Op Scripts)
routing-instance (System Scripts)	source (Op Scripts)	start (Scripts)

[edit system scripts op file {filename} arguments {argument-name}]
description (Op Scripts)

[edit system scripts op file {filename} dampen]
dampen-options

[edit system scripts op file {filename} dampen dampen-options]
cpu-factor (Dampen Options)	line-interval (Dampen Options)	time-interval (Dampen Options)

[edit system scripts snmp]
file (SNMP Scripts)	max-datasize	refresh (SNMP Scripts)
refresh-from (SNMP Scripts)	start (Scripts)	traceoptions (Commit, Op, and SNMP Scripts)

[edit system scripts snmp file {filename}]
cert-file (Scripts)	checksum (Scripts)	oid (SNMP Scripts)
python-script-user (Event and SNMP Scripts)	refresh (SNMP Scripts)	refresh-from (SNMP Scripts)
routing-instance (System Scripts)	source (SNMP Scripts)	start (Scripts)

[edit system scripts translation]
max-datasize

[security-profile]

[edit system security-profile {security-profile-name}]
address-book (System)	appfw-rule	appfw-rule-set
auth-entry	cpu	dslite-softwire-initiator
flow-gate	flow-session	idp-policy
logical-system (System Security Profile)	nat-cone-binding	nat-destination-pool
nat-destination-rule	nat-interface-port-ol (System)	nat-nopat-address
nat-pat-address	nat-pat-portnum	nat-port-ol-ipnumber
nat-rule-referenced-prefix (System)	nat-source-pool	nat-source-rule
nat-static-rule	policy (System Security Profile)	policy-with-count
root-logical-system	scheduler (System Security Profile)	secure-wire (System Security Profile)
zone (System Security Profile)

[services]

[edit system services]
connection-limit	database-replication (Subscriber Session Database)	dhcp
dhcp-local-server	dhcp-local-server (System Services)	dhcpv6 (System Services)
dns (System Services)	dtcp-only (System Services)	dynamic-dns
Extensible Subscriber Services	extension-service (System Services)	finger
flow-tap-dtcp	ftp	grpc-tunnel
inband-ztp	jeb	netconf
outbound-https	outbound-ssh	rate-limit
remote-device-management	resource-monitor	rest
reverse	service-deployment	ssh (System Services)
static-subscribers (Dynamic Service Provisioning)	subscriber-management	tcp-forwarding (Remote Device Management)
telnet (Services)	tftp-server	tls (NETCONF)
web-management (System Services)	webapi (System Services)	xnm-clear-text
xnm-ssl

[edit system services database-replication]
traceoptions (Subscriber Session Database Replication)

[edit system services dhcp]
boot-server (DHCP)	domain-name (DHCP Local Server)	domain-name (DHCP)
domain-search	domain-search	maximum-lease-time (DHCP)
name-server (System Services)	name-server (System Services)	next-server
option (DHCP server)	pool (System)	propagate-settings
server-identifier	sip-server	sip-server
static-binding	static-binding	traceoptions (DHCP Server)
wins-server (System)	wins-server (System)

[edit system services dhcp dhcp-local-server dual-stack-group {dual-stack-group-name}]
classification-key (DHCP Relay Agent)

[edit system services dhcp dhcp-local-server dual-stack-group {dual-stack-group-name} ],]
dual-stack-interface-client-limit (DHCP Local Server and Relay Agent)

[edit system services dhcp pool]
boot-server (DHCP)	domain-name (DHCP)	domain-search
name-server (System Services)	next-server	option (DHCP server)
propagate-settings	server-identifier	sip-server
wins-server (System)

[edit system services dhcp static-binding]
boot-server (DHCP)	domain-name (DHCP)	domain-search
name-server (System Services)	next-server	option (DHCP server)
server-identifier	sip-server	wins-server (System)

[edit system services dhcp-local-server]
active-leasequery (DHCP Local Server)	allow-active-leasequery (DHCP Local Server)	allow-bulk-leasequery (DHCP Local Server)
allow-leasequery (DHCP Local Server)	authentication (DHCP Local Server)	dhcpv6 (DHCP Local Server)
dual-stack-group (DHCP Local Server)	duplicate-clients-in-subnet (DHCP Local Server and DHCP Relay Agent)	dynamic-profile (DHCP Local Server)
forward-snooped-clients (DHCP Local Server)	group (DHCP Local Server)	interface-traceoptions (System Services DHCP)
lease-time-validation (DHCP Local Server and DHCP Relay Agent)	liveness-detection	no-snoop (DHCP Local Server and Relay Agent)
overrides (DHCP Local Server)	pool-match-order	reauthenticate (DHCP Local Server)
reconfigure (DHCP Local Server)	remote-id-mismatch (DHCP Local Server and DHCP Relay Agent)	requested-ip-network-match (DHCP Local Server)
route-suppression (DHCP Local Server and Relay Agent)	service-profile (DHCP Local Server)	short-cycle-protection (DHCP Local Server and Relay Agent)

[edit system services dhcp-local-server (dhcpv6) group {group-name} interface {interface-name} overrides]
include-option-82 (DHCP Local Server)

[edit system services dhcp-local-server (dhcpv6) group {group-name} overrides]
include-option-82 (DHCP Local Server)

[edit system services dhcp-local-server authentication]
password (DHCP Local Server)	username-include (DHCP Local Server)

[edit system services dhcp-local-server authentication username-include]
circuit-type (DHCP Local Server)	delimiter (DHCP Local Server)	domain-name (DHCP Local Server)
interface-description (DHCP Local Server)	interface-name (DHCP Local Server)	logical-system-name (DHCP Local Server)
mac-address (DHCP Local Server)	option-60 (DHCP Local Server)	option-82 (DHCP Local Server Authentication)
routing-instance-name (DHCP Local Server)	user-prefix (DHCP Local Server)

[edit system services dhcp-local-server dhcp authentication username-include]
client-id (DHCP Local Server)

[edit system services dhcp-local-server dhcp group {group-name} authentication username-include]
client-id (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6]
active-leasequery (DHCP Local Server)	allow-active-leasequery (DHCP Local Server)	allow-bulk-leasequery (DHCP Local Server)
allow-leasequery (DHCP Local Server)	authentication (DHCP Local Server)	duplicate-clients (DHCPv6 Local Server and Relay Agent)
dynamic-profile (DHCP Local Server)	dynamic-server	group (DHCP Local Server)
group (System Services DHCP)	lease-time-validation (DHCP Local Server and DHCP Relay Agent)	liveness-detection
no-snoop (DHCP Local Server and Relay Agent)	overrides (DHCP Local Server)	overrides (System Services DHCP)
password (DHCP Local Server)	reauthenticate (DHCP Local Server)	reconfigure (DHCP Local Server)
remote-id-mismatch (DHCP Local Server and DHCP Relay Agent)	requested-ip-network-match (DHCP Local Server)	route-suppression (DHCP Local Server and Relay Agent)
server-duid-type (DHCP Local Server)	service-profile (DHCP Local Server)	short-cycle-protection (DHCP Local Server and Relay Agent)

[edit system services dhcp-local-server dhcpv6 authentication]
username-include (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6 authentication username-include]
circuit-type (DHCP Local Server)	client-id (DHCP Local Server)	delimiter (DHCP Local Server)
domain-name (DHCP Local Server)	interface-description (DHCP Local Server)	interface-name (DHCP Local Server)
logical-system-name (DHCP Local Server)	mac-address (DHCP Local Server)	relay-agent-interface-id (DHCP Local Server)
relay-agent-remote-id (DHCP Local Server)	relay-agent-subscriber-id (DHCP Local Server)	routing-instance-name (DHCP Local Server)
user-prefix (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6 group {group-name}]
authentication (DHCP Local Server)	dynamic-profile (DHCP Local Server)	interface (DHCP Local Server)
interface (System Services DHCP)	lease-time-validation (DHCP Local Server and DHCP Relay Agent)	liveness-detection
overrides (DHCP Local Server)	overrides (System Services DHCP)	reconfigure (DHCP Local Server)
remote-id-mismatch (DHCP Local Server and DHCP Relay Agent)	route-suppression (DHCP Local Server and Relay Agent)	service-profile (DHCP Local Server)
short-cycle-protection (DHCP Local Server and Relay Agent)

[edit system services dhcp-local-server dhcpv6 group {group-name} authentication]
password (DHCP Local Server)	username-include (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6 group {group-name} authentication username-include]
circuit-type (DHCP Local Server)	client-id (DHCP Local Server)	delimiter (DHCP Local Server)
domain-name (DHCP Local Server)	interface-description (DHCP Local Server)	interface-name (DHCP Local Server)
logical-system-name (DHCP Local Server)	mac-address (DHCP Local Server)	relay-agent-interface-id (DHCP Local Server)
relay-agent-remote-id (DHCP Local Server)	relay-agent-subscriber-id (DHCP Local Server)	routing-instance-name (DHCP Local Server)
user-prefix (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6 group {group-name} interface {interface-name}]
dynamic-profile (DHCP Local Server)	overrides (DHCP Local Server)	overrides (System Services DHCP)
service-profile (DHCP Local Server)	short-cycle-protection (DHCP Local Server and Relay Agent)	trace (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6 group {group-name} interface {interface-name} overrides]
client-negotiation-match (DHCPv6 Local Server)	delay-advertise (DHCPv6)	delegated-pool (DHCP Local Server)
interface-client-limit (DHCP Local Server)	multi-address-embedded-option-response (DHCP Local Server)	process-inform
rapid-commit (DHCPv6 Local Server)

[edit system services dhcp-local-server dhcpv6 group {group-name} interface {interface-name} overrides process-inform]
pool (DHCP Local Server Overrides)

[edit system services dhcp-local-server dhcpv6 group {group-name} lease-time-validation]
lease-time-threshold (DHCP Local Server and DHCP Relay Agent)	violation-action (DHCP Local Server and DHCP Relay Agent)

[edit system services dhcp-local-server dhcpv6 group {group-name} liveness-detection]
failure-action	method

[edit system services dhcp-local-server dhcpv6 group {group-name} liveness-detection method]
bfd	layer2-liveness-detection (Send)

[edit system services dhcp-local-server dhcpv6 group {group-name} liveness-detection method bfd]
detection-time	holddown-interval	minimum-interval
minimum-receive-interval	multiplier	no-adaptation
session-mode	transmit-interval	version (BFD)

[edit system services dhcp-local-server dhcpv6 group {group-name} liveness-detection method bfd detection-time]
threshold (detection-time)

[edit system services dhcp-local-server dhcpv6 group {group-name} liveness-detection method bfd transmit-interval]
minimum-interval	threshold (transmit-interval)

[edit system services dhcp-local-server dhcpv6 group {group-name} overrides]
client-negotiation-match (DHCPv6 Local Server)	delay-advertise (DHCPv6)	delegated-pool (DHCP Local Server)
delete-binding-on-renegotiation (DHCP Local Server and Relay Agent)	interface-client-limit (DHCP Local Server)	multi-address-embedded-option-response (DHCP Local Server)
process-inform	rapid-commit (DHCPv6 Local Server)

[edit system services dhcp-local-server dhcpv6 group {group-name} overrides process-inform]
pool (DHCP Local Server Overrides)

[edit system services dhcp-local-server dhcpv6 group {group-name} reconfigure]
attempts (DHCP Local Server)	clear-on-abort (DHCP Local Server)	strict (DHCP Local Server)
timeout (DHCP Local Server)	token (DHCP Local Server)	trigger (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6 group {group-name} reconfigure trigger]
radius-disconnect (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6 lease-time-validation]
lease-time-threshold (DHCP Local Server and DHCP Relay Agent)	violation-action (DHCP Local Server and DHCP Relay Agent)

[edit system services dhcp-local-server dhcpv6 liveness-detection]
failure-action	method

[edit system services dhcp-local-server dhcpv6 liveness-detection method]
bfd	layer2-liveness-detection (Send)

[edit system services dhcp-local-server dhcpv6 liveness-detection method bfd]
detection-time	holddown-interval	minimum-interval
minimum-receive-interval	multiplier	no-adaptation
session-mode	transmit-interval	version (BFD)

[edit system services dhcp-local-server dhcpv6 liveness-detection method bfd detection-time]
threshold (detection-time)

[edit system services dhcp-local-server dhcpv6 liveness-detection method bfd transmit-interval]
minimum-interval	threshold (transmit-interval)

[edit system services dhcp-local-server dhcpv6 overrides]
client-negotiation-match (DHCPv6 Local Server)	delay-advertise (DHCPv6)	delegated-pool (DHCP Local Server)
delete-binding-on-renegotiation (DHCP Local Server and Relay Agent)	include-option-82 (DHCP Local Server)	interface-client-limit (DHCP Local Server)
multi-address-embedded-option-response (DHCP Local Server)	process-inform	rapid-commit (DHCPv6 Local Server)

[edit system services dhcp-local-server dhcpv6 overrides process-inform]
pool (DHCP Local Server Overrides)

[edit system services dhcp-local-server dhcpv6 reconfigure]
attempts (DHCP Local Server)	clear-on-abort (DHCP Local Server)	strict (DHCP Local Server)
timeout (DHCP Local Server)	token (DHCP Local Server)	trigger (DHCP Local Server)

[edit system services dhcp-local-server dhcpv6 reconfigure trigger]
radius-disconnect (DHCP Local Server)

[edit system services dhcp-local-server dual-stack-group {dual-stack-group-name}]
authentication (DHCP Local Server)	classification-key (DHCP Local Server)	dynamic-profile (DHCP Local Server)
liveness-detection	on-demand-address-allocation	protocol-master
reauthenticate (DHCP Local Server)	service-profile (DHCP Local Server)	short-cycle-protection (DHCP Local Server and Relay Agent)

[edit system services dhcp-local-server dual-stack-group <group-name> authentication username-include]
client-id (DHCP Local Server)

[edit system services dhcp-local-server dual-stack-group {group-name} authentication]
username-include (DHCP Local Server)

[edit system services dhcp-local-server dual-stack-group {dual-stack-group-name} liveness-detection]
method

[edit system services dhcp-local-server dual-stack-group {dual-stack-group-name} liveness-detection method]
layer2-liveness-detection (Send)

[edit system services dhcp-local-server dynamic-profile {profile-name}]
aggregate-clients (DHCP Local Server)	use-primary (DHCP Local Server)

[edit system services dhcp-local-server group {group-name}]
authentication (DHCP Local Server)	dynamic-profile (DHCP Local Server)	interface (DHCP Local Server)
interface-tag (DHCP Local Server)	lease-time-validation (DHCP Local Server and DHCP Relay Agent)	liveness-detection
overrides (DHCP Local Server)	reconfigure (DHCP Local Server)	remote-id-mismatch (DHCP Local Server and DHCP Relay Agent)
route-suppression (DHCP Local Server and Relay Agent)	service-profile (DHCP Local Server)	short-cycle-protection (DHCP Local Server and Relay Agent)

[edit system services dhcp-local-server group {group-name} authentication]
password (DHCP Local Server)	username-include (DHCP Local Server)

[edit system services dhcp-local-server group {group-name} authentication username-include]
circuit-type (DHCP Local Server)	delimiter (DHCP Local Server)	domain-name (DHCP Local Server)
interface-description (DHCP Local Server)	interface-name (DHCP Local Server)	logical-system-name (DHCP Local Server)
mac-address (DHCP Local Server)	option-60 (DHCP Local Server)	option-82 (DHCP Local Server Authentication)
routing-instance-name (DHCP Local Server)	user-prefix (DHCP Local Server)

[edit system services dhcp-local-server group {group-name} dynamic-profile {profile-name}]
aggregate-clients (DHCP Local Server)	use-primary (DHCP Local Server)

[edit system services dhcp-local-server group {group-name} interface {interface-name}]
dynamic-profile (DHCP Local Server)	overrides (DHCP Local Server)	service-profile (DHCP Local Server)
short-cycle-protection (DHCP Local Server and Relay Agent)	trace (DHCP Local Server)

[edit system services dhcp-local-server group {group-name} interface {interface-name} overrides]
client-discover-match (DHCP Local Server)	delay-offer (DHCPv4)	dual-stack (DHCP Local Server Overrides)
interface-client-limit (DHCP Local Server)	process-inform

[edit system services dhcp-local-server group {group-name} interface {interface-name} overrides process-inform]
pool (DHCP Local Server Overrides)

[edit system services dhcp-local-server group {group-name} lease-time-validation]
lease-time-threshold (DHCP Local Server and DHCP Relay Agent)	violation-action (DHCP Local Server and DHCP Relay Agent)

[edit system services dhcp-local-server group {group-name} liveness-detection]
failure-action	method

[edit system services dhcp-local-server group {group-name} liveness-detection method]
bfd	layer2-liveness-detection (Send)

[edit system services dhcp-local-server group {group-name} liveness-detection method bfd]
detection-time	holddown-interval	minimum-interval
minimum-receive-interval	multiplier	no-adaptation
session-mode	transmit-interval	version (BFD)

[edit system services dhcp-local-server group {group-name} liveness-detection method bfd detection-time]
threshold (detection-time)

[edit system services dhcp-local-server group {group-name} liveness-detection method bfd transmit-interval]
minimum-interval	threshold (transmit-interval)

[edit system services dhcp-local-server group {group-name} overrides]
client-discover-match (DHCP Local Server)	delay-offer (DHCPv4)	delete-binding-on-renegotiation (DHCP Local Server and Relay Agent)
dual-stack (DHCP Local Server Overrides)	interface-client-limit (DHCP Local Server)	process-inform

[edit system services dhcp-local-server group {group-name} overrides process-inform]
pool (DHCP Local Server Overrides)

[edit system services dhcp-local-server group {group-name} reconfigure]
attempts (DHCP Local Server)	clear-on-abort (DHCP Local Server)	timeout (DHCP Local Server)
token (DHCP Local Server)	trigger (DHCP Local Server)

[edit system services dhcp-local-server group {group-name} reconfigure trigger]
radius-disconnect (DHCP Local Server)

[edit system services dhcp-local-server lease-time-validation]
lease-time-threshold (DHCP Local Server and DHCP Relay Agent)	violation-action (DHCP Local Server and DHCP Relay Agent)

[edit system services dhcp-local-server liveness-detection]
failure-action	method

[edit system services dhcp-local-server liveness-detection method]
bfd

[edit system services dhcp-local-server liveness-detection method bfd]
detection-time	holddown-interval	minimum-interval
minimum-receive-interval	multiplier	no-adaptation
session-mode	transmit-interval	version (BFD)

[edit system services dhcp-local-server liveness-detection method bfd detection-time]
threshold (detection-time)

[edit system services dhcp-local-server liveness-detection method bfd transmit-interval]
minimum-interval	threshold (transmit-interval)

[edit system services dhcp-local-server liveness-detection method].]
layer2-liveness-detection (Send)

[edit system services dhcp-local-server overrides]
client-discover-match (DHCP Local Server)	delay-offer (DHCPv4)	delete-binding-on-renegotiation (DHCP Local Server and Relay Agent)
dual-stack (DHCP Local Server Overrides)	include-option-82 (DHCP Local Server)	interface-client-limit (DHCP Local Server)
process-inform

[edit system services dhcp-local-server overrides process-inform]
pool (DHCP Local Server Overrides)

[edit system services dhcp-local-server pool-match-order]
external-authority	ip-address-first	option-82 (DHCP Local Server Pool Matching)

[edit system services dhcp-local-server reconfigure]
attempts (DHCP Local Server)	clear-on-abort (DHCP Local Server)	timeout (DHCP Local Server)
token (DHCP Local Server)	trigger (DHCP Local Server)

[edit system services dhcp-local-server reconfigure trigger]
radius-disconnect (DHCP Local Server)

[edit system services dns]
dnssec	traceoptions (System Services DNS)

[edit system services dns dns-proxy]
dns-proxy

[edit system services dns dns-proxy view {view-name} domain {domain-name}]
forward-only (DNS)

[edit system services dns dnssec]
dlv	trusted-keys (DNSSEC)

[edit system services extension-service]
notification (System Services)	request-response	traceoptions (Services)

[edit system services extension-service request-response]
grpc

[edit system services extension-service request-response grpc]
max-connections	ssl

[edit system services finger]
connection-limit	rate-limit

[edit system services ftp]
authentication-order (System)	connection-limit	rate-limit

[edit system services grpc request-response grpc ssl]
local-certificate (System)

[edit system services local-policy-decision-function statistics]
aacl-statistics-profile

[edit system services local-policy-decision-function statistics aacl-statistics-profile {profile-name}]
aacl-fields

[edit system services netconf]
hello-message (NETCONF)	netconf-monitoring (NETCONF)	notification (NETCONF)
rfc-compliant (NETCONF)	ssh (NETCONF)	traceoptions (NETCONF and Junos XML Protocol)
yang-compliant (NETCONF)	yang-modules (NETCONF)

[edit system services netconf ssh]
connection-limit	port (NETCONF)	rate-limit

[edit system services netconf tls]
client-identity (NETCONF TLS)	default-client-identity (NETCONF TLS)	traceoptions (NETCONF TLS)

[edit system services outbound-ssh]
traceoptions (Outbound SSH)

[edit system services packet-triggered-subscribers]
subscriber-packet-idle-timeout

[edit system services remote-device-management]
service-device (Remote Device Management)

[edit system services remote-device-management service-device {device-name}]
access-domain (Remote Device Management)	provisioning-method (Remote Device Management)

[edit system services remote-device-management service-device {device-name} provisioning-method]
netconf (Remote Device Management)

[edit system services resource-monitor]
free-fw-memory-watermark (Resource Monitor)	free-heap-memory-watermark (Resource Monitor)	free-nh-memory-watermark (Resource Monitor)
high-cos-queue-threshold	high-threshold (Resource Monitor)	no-load-throttle (Resource Monitor)
no-logging (Resource Monitor)	no-throttle (Resource Monitor)	resource-category jtree (Resource Monitor)
subscribers-limit (Resource Monitor)	traceoptions (Resource Monitor)

[edit system services resource-monitor subscribers-limit]
client-type (Subscriber Limits)

[edit system services resource-monitor subscribers-limit client-type {name}]
chassis (Subscriber Limits)	fpc (Subscriber Limits)

[edit system services resource-monitor subscribers-limit client-type {name} fpc {slot-number}]
pic (Subscriber Limits)

[edit system services resource-monitor subscribers-limit client-type {name} fpc {slot-number} pic {number}]
port (Subscriber Limits)

[edit system services rest]
control (REST API)	enable-explorer (REST API)	http (REST API)
https (REST API)	traceoptions (REST API)

[edit system services rest control]
allowed-sources (REST API)	connection-limit (REST API)

[edit system services rest http]
port (REST API)

[edit system services rest http] , [edit system services rest https]
addresses (REST API)

[edit system services rest https]
ca-chain (REST API)	cipher-list (REST API)	mutual-authentication (REST API)
port (REST API)	server-certificate (REST API)

[edit system services rest https mutual-authentication]
certificate-authority (REST API)

[edit system services service-deployment]
local-certificate (System)	servers	source-address (SRC Software)

[edit system services service-deployment servers {server-address}]
port (SRC Server)

[edit system services ssh]
authentication-order (System)	connection-limit	hostkey-algorithm
hostkey-algorithm-list	key-exchange	max-sessions-per-connection
rate-limit	root-login (JDM)

[edit system services static-subscribers]
access-profile (Static Subscribers)	authentication (Static Subscribers)	group (Static Subscribers)
service-profile (Static Subscribers)

[edit system services static-subscribers authentication]
password (Static Subscribers)	username-include (Static Subscribers)

[edit system services static-subscribers authentication username-include]
domain-name (Static Subscribers)	interface (Static Subscriber Username)	logical-system-name (Static Subscribers)
routing-instance-name (Static Subscribers)	user-prefix (Static Subscribers)

[edit system services static-subscribers dynamic-profile {profile-name}]
aggregate-clients (Static Subscribers)

[edit system services static-subscribers group {group-name}]
access-profile (Static Subscribers)	authentication (Static Subscribers)	interface (Static Subscriber Group)
service-profile (Static Subscribers)

[edit system services static-subscribers group {group-name} authentication]
password (Static Subscribers)	username-include (Static Subscribers)

[edit system services static-subscribers group {group-name} authentication username-include]
domain-name (Static Subscribers)	interface (Static Subscriber Username)	logical-system-name (Static Subscribers)
routing-instance-name (Static Subscribers)	user-prefix (Static Subscribers)

[edit system services static-subscribers group {group-name} dynamic-profile {profile-name}]
aggregate-clients (Static Subscribers)

[edit system services subscriber-management]
enable (Enhanced Subscriber Management)	enforce-strict-scale-limit-license (Subscriber Management)	gres-route-flush-delay (Subscriber Management)
maintain-subscriber (Subscriber Management)	overrides (Enhanced Subscriber Management)	redundancy (M:N Subscriber Redundancy)
traceoptions (Subscriber Management)

[edit system services subscriber-management maintain-subscriber]
interface-delete (Subscriber Management or DHCP Client Management)

[edit system services subscriber-management overrides]
event (Enhanced Subscriber Management)	no-unsolicited-ra (Enhanced Subscriber Management)	shmlog (Shared Memory Log)

[edit system services subscriber-management overrides interfaces family (inet \| inet6)]
layer2-liveness-detection (Receive)

[edit system services telnet]
authentication-order (System)	connection-limit	rate-limit

[edit system services web-management]
http (Web Management)	https (Web Management)	session (System Services)
session (Web Management)

[edit system services web-management session]
idle-timeout (System Services)	session-limit (System Services)

[edit system services webapi (System Services)]
client (System Services)	debug-level (System Services)	debug-log (System Services)
http (System Services)	https (System Services)	user (System Services)

[edit system services xnm-clear-text]
connection-limit	rate-limit

[edit system services xnm-ssl]
connection-limit	rate-limit

[snapshot]

[edit system snapshot]
recovery

[syslog]

[edit system syslog]
allow-duplicates	console (System Logging)	file (QFabric System)
file (System Logging)	grpc-replay	host (System)
log-rotate-frequency	routing-instance (Syslog)	shell
source-address (RADIUS, System Logging, or TACACS+)	source-address (System Logging)	time-format
user (System Logging)

[edit system syslog archive]
files (syslog)	size (System)	world-readable (System Syslog)

[edit system syslog console]
application-status

[edit system syslog file {file-name}]
allow-duplicates	archive (All System Log Files)	archive (Individual System Log File)
archive (QFabric System)	explicit-priority	file (System Logging)
match (Syslog)	match-strings	structured-data

[edit system syslog file {filename} archive]
files (syslog)	size (System)	world-readable (System Syslog)

[edit system syslog host {host-name}]
allow-duplicates	exclude-hostname	explicit-priority
file (System Logging)	log-prefix (System)	match-strings
routing-instance (Syslog)	transport (System Syslog)

[edit system syslog host {hostname} \| other-routing-engine\| scc-master)]
match (Syslog)	port (Syslog)

[edit system syslog user {user-name}]
allow-duplicates	file (System Logging)	match-strings

[edit system syslog user ({username} \| *)]
match (Syslog)

[system-profile]

[edit system system-profile]
vxlan-extended

[tacplus-server]

[edit system tacplus-server {server-address}]
source-address (RADIUS, System Logging, or TACACS+)

[tracing]

[edit system tracing]
destination-override

ON THIS PAGE

[edit system]

Sub Hierarchies

[access-line]

[accounting]

[arp]

[autoinstallation]

[commit]

[configuration]

[configuration-database]

[ddos-protection]

[demux-options]

[dynamic-profile-options]

[extension]

[extensions]

[fib-streaming]

[firewall-profile]

[internet-options]

[license]

[login]

[management-traffic]

[monitor]

[ntp]

[packet-forwarding-options]

[ports]

[processes]

[radius-server]

[root-authentication]

[scripts]

[security-profile]

[services]

[snapshot]

[syslog]

[system-profile]

[tacplus-server]

[tracing]