Command Trees

clear Commands

The CLI clear commands are primarily used to set statistics in a specific area back to a value of zero, reset specific hardware assemblies (for example, cards), and delete temporary operational state data (for example, contents of a log in memory).

    clear
        aaa
            radius-server-policy
        card
        filter
            ip
            ip-exception
            ipv6
            ipv6-exception
            log
            — policer
                — filter-scope
                — system-scope
        group-encryption
            encryption-keygroup
        ip
            tunnel
        ipsec
            gateway
            lockout
            stats
                ike-stats
            transport-mode
            tunnel
        isa
            lns-group
        lag
        — ldap
        log
            event-handling
                handler
                information
            log-events
            log-id
        macsec
            mka-session
        — management-access-filter
            — ip-filter
            — ipv6-filter
            — mac-filter
        mda
        nat
            classic-lsn-sub
            isa
                nat-group
        oam-pm
        port
            ethernet
                dampening
            port-scheduler
        qos
            arbiter-stats
                card
                customer
                port
                sap
                subscriber
            scheduler-stats
                customer
                port
                sap
                subscriber
        reassembly-statistics
        redundancy
            multi-chassis
                mc-endpoint
                mc-lag
                mc-ring
                    debounce
                    ring-nodes
                    statistics
                        global
                        peer
                        ring
                        ring-node
                sync-database
        router
            arp
            authentication
                statistics
            autoconfigure
                dhcp-client
                dhcp6-client
                router-advertisement
                    statistics
            bfd
                session
                statistics
            bgp
                damping
                flap-statistics
                neighbor
                protocol
            dhcp
                local-dhcp-server
                    declined-addresses
                    failover-pool-stats
                    leases
                    pool-ext-stats
                    server-stats
                    sticky-leases
                    subnet-ext-stats
                statistics
            dhcp6
                local-dhcp-server
                    failover-pool-stats
                    leases
                    pool-ext-stats
                    pool-threshold-stats
                    prefix-ext-stats
                    prefix-threshold-stats
                    server-stats
                statistics
            forwarding-table
            grt-lookup
            icmp
            icmp-redirect-route
            icmp6
            icmp6-redirect-route
            igmp
                database
                mcast-reporting-statistics
                statistics
                version
            interface
            isis
                adjacency
                database
                export
                overload
                spf-log
                statistics
            ldp
                fec-egress-statistics
                instance
                interface
                peer
                resource-failures
                session
                statistics
                targeted-auto-rx
            mld
                database
                statistics
                version
            mpls
                forwarding-policies
                    binding-label
                    forwarding-policy
                interface
                lsp
                    auto-lsp
                        rsvp-te
                        sr-te
                    rsvp-te
                    sr-te
                lsp-history
            neighbor
            origin-validation
            ospf
                database
                export
                neighbor
                overload
                statistics
            ospf3
                database
                export
                neighbor
                overload
                statistics
            pcep
                pcc
                    peer
            pim
                database
                neighbor
                s-pmsi
                statistics
            rip
                database
                export
                statistics
            ripng
                database
                export
                statistics
            router-advertisement
            rsvp
                interface
                statistics
            segment-routing
                sr-policies
                    ingress-statistics
            vrrp
                interface
                statistics
        saa
        screen
        service
            id
                arp
                authentication
                    statistics
                dhcp
                    lease-state
                    statistics
                dhcp6
                    lease-state
                    statistics
                evpn
                fdb
                gsmp
                    statistics
                host-tracking
                igmp-snooping
                    port-db
                    querier
                    statistics
                mesh-sdp
                mfib
                    statistics
                mld-snooping
                    port-db
                    querier
                    statistics
                neighbor
                proxy-arp
                    duplicate
                    dynamic
                proxy-nd
                    duplicate
                    dynamic
                sap
                site
                spoke-sdp
                stp
                    detected-protocols
            statistics
                id
                    counters
                    l2pt
                    mesh-sdp
                    pip
                    spoke-sdp
                    stp
                sap
                sdp
                subscriber
        system
            management-interface
                remote-management
                    manager
                    statistics
            reboot-required
            script-control
                script-policy
                    completed
            statistics
        tacplus
        test-oam
            oam-perf
            twamp
                server
        vrrp
            statistics

monitor Commands

The CLI monitor commands are found in the monitor context of the operational root of the CLI tree. The monitor commands display specified statistical information related to the monitor subject (such as filter, port, QoS, router, service, and VRRP) at a configurable interval until a count is reached.

The monitor command output displays a snapshot of the current statistics. The output refreshes with subsequent statistical information at each configured interval and is displayed as a delta to the previous output.

The <Ctrl-C> keystroke interrupts a monitoring process. monitor command configurations cannot be saved. You must enter the command for each monitoring session. If the maximum limits are configured, you can monitor the statistical information for a maximum of 60 x 999 s (approximately 1000 minutes).

    monitor
        card
        filter
            ip
            ipv6
            — policer
                — filter-scope
                — system-scope
        lag
        management-access-filter
            ip
            ipv6
            mac
        oam-pm
            session
                twamp-light
        port
        port
            port-scheduler
            queue-group
        qos
            arbiter-stats
                card
                customer
                port
                sap
                subscriber
            scheduler-stats
                customer
                port
                sap
                subscriber
        router
            bgp
                neighbor
            isis
                statistics
            ldp
                fec-egress-stats
                session
                statistics
            mpls
                forwarding-policies
                    binding-label
                    forwarding-policy
                interface
                sr-te-lsp-egress-stats
            ospf
                interface
                neighbor
                virtual-link
                virtual-neighbor
            ospf3
                interface
                neighbor
                virtual-link
                virtual-neighbor
            pim
                group
            rip
                neighbor
            ripng
                neighbor
            rsvp
                interface
            segment-routing
                sr-policies
                    ingress-statistics
            vrrp
                instance
        service
            id
                sap
                sdp
        test-oam
            oam-perf

show Commands

The CLI show commands display useful information in the format of a human-readable report, with the ability to add or remove output based on additional parameters. The information in the output of the show commands consists of configuration and operational information, and may also perform calculations or additional processing to display some of the output.

The information in the output of the show commands can also be found in the state and configure branches of the MD-CLI (as well as via model-driven interfaces such as NETCONF and gRPC). The output of these branches is fully modeled in YANG with structured data that can be easily manipulated by tools and applications (including pySROS and NETCONF clients). The pySROS and MD-CLI command alias features can be used together to create custom show commands using the modeled data. See ‟Command aliases” in the 7705 SAR Gen 2 MD-CLI User Guide.

    — show
        aaa
            radius-server-policy
        alias
        bof
        boot-messages
        card
            virtual
                fp
        certificate
            — auto-cert-update
            ca-profile
            est-profile
            ocsp-cache
            statistics
        chassis
        config
        connection-profile-vlan
        datapath
        debug
        filter
            dhcp
            dhcp6
            ip
            ip-exception
            ipv6
            ipv6-exception
            log
            match-list
                ip-prefix-list
                ipv6-prefix-list
                port-list
                protocol-list
            md-auto-id
            — policer
            redirect-policy
            redirect-policy-binding
            system-filter
        group-encryption
            encryption-keygroup
            summary
        ip
            tunnel
        ipsec
            cert-profile
            certificate
            client-db
            gateway
            ike-policy
            ike-transform
            ipsec-transport-mode-profile
            lockout
            multi-chassis-shunt-interface
                — router
                — service
            — multi-chassis-shunting-profile
                — router
                — service
            radius-accounting-policy
            radius-authentication-policy
            security-policy
                router
                service
            service
            static-sa
            transform
            trust-anchor-profile
            ts-list
            tunnel
            tunnel-template
        isa
            nat-group
            nat-system-resources
            statistics
                ip-tunnel-stats
                    number-of-tunnels
                    throughput
                    traffic-forward
                ipsec-stats
                    ike-exchange-failure-rate
                    ikev2-msg-drop
                    number-of-tunnels
                    throughput
                    traffic-forward
                    tunnel-setup-rate
                tunnel-isa
                    cpu-usage
                    memory-allocation-failure-rate
            tunnel-group
            tunnel-member-pool
        lag
            associations
            flow-distribution
            lacp-partner
            lldp-member-template
            port-scheduler
        licensing
        log
            accounting-policy
            accounting-records
            applications
            cli
                all-subscriptions
            event-control
            event-handling
                handler
                information
                scripts
            event-parameters
            file-id
            filter-id
            log-collector
            log-id
            snmp-trap-group
            syslog
        macsec
            connectivity-association
            mka-session
        mda
        megapools
        mirror
        oam-pm
            bin-group
            bin-group-using
            session
            sessions
            statistics
                session
                    twamp-light
                        meas-interval
            tests
        ospf
            neighbor
        ospf3
            neighbor
        pcap
        pools
        port
            dist-cpu-protection
            ethernet
                lldp
            port-scheduler
            pxc
            queue-group
        port-tree
        — port-xc
        qos
            agg-rate
                customer
                port
                sap
                subscriber
            arbiter-stats
                card
                customer
                port
                sap
                subscriber
            bcg
            dscp-table
            match-list
                ip-prefix-list
                ipv6-prefix-list
            md-auto-id
            network
            network-queue
            policer
                card
                port
                sap
                subscriber
            policer-control-policy
            policer-hierarchy
                card
                customer
                port
                sap
                subscriber
            port-scheduler-policy
            post-policer-mapping
            queue
            queue-group
            sap-egress
            sap-ingress
            scheduler-hierarchy
                customer
                port
                sap
                subscriber
            scheduler-name
            scheduler-policy
            scheduler-stats
                customer
                port
                sap
                subscriber
        radius
        redundancy
            bgp-evpn-multi-homing
            bgp-multi-homing
            multi-chassis
                all
                ipsec-domain
                mc-endpoint
                mc-ipsec
                mc-lag
                mc-ring
                sync
            synchronization
        router
            aggregate
            arp
            authentication
                statistics
            autoconfigure
                dhcp-client
                dhcp6-client
                router-advertisement
            bfd
                bfd-template
                interface
                resources
                session
            bgp
                auth-keychain
                convergence
                damping
                group
                inter-as-label
                neighbor
                next-hop
                optimal-route-reflection
                    bgp-nh-info
                paths
                policy-test
                prefix-label
                routes
                    aspath-regex
                    bgp-ls
                        ipv4-prefix
                        — ipv6-prefix
                        link
                        node
                    brief
                    community
                    detail
                    evpn
                        auto-disc
                        eth-seg
                        incl-mcast
                        ip-prefix
                        ipv6-prefix
                        mac
                        mcast-join-synch
                        mcast-leave-synch
                        smet
                        spmsi-ad
                    flow-ipv6
                    — flow-vpn-ipv4
                    — flow-vpn-ipv6
                    hunt
                    ipv4
                    ipv6
                    l2-vpn
                    label-ipv4
                    label-ipv6
                    longer
                    mcast-ipv4
                    mcast-ipv6
                    mcast-vpn-ipv4
                    mcast-vpn-ipv6
                    mdt-safi
                    ms-pw
                    route-target
                    sr-policy-ipv4
                    sr-policy-ipv6
                    vpn-ipv4
                    vpn-ipv6
                sr-label
                summary
            dhcp
                local-dhcp-server
                    associations
                    declined-addresses
                    failover-pool-stats
                    failover-server-stats
                    free-addresses
                    leases
                    pool-ext-stats
                    server-stats
                    sticky-leases
                    subnet-ext-stats
                    subnet-stats
                    summary
                servers
                statistics
                summary
            dhcp6
                local-dhcp-server
                    associations
                    failover-pool-stats
                    failover-server-stats
                    interface-id-mapping
                    leases
                    pool-ext-stats
                    pool-stats
                    pool-threshold-stats
                    prefix-ext-stats
                    prefix-stats
                    prefix-threshold-stats
                    server-stats
                    summary
                servers
                statistics
                summary
            dns
            ecmp
            fib
            fib-telemetry
            flexible-algorithm-definitions
            fp-tunnel-table
            icmp
                interface
            icmp6
                interface
            if-attribute
                admin-group
                srlg-group
            igmp
                group
                interface
                mcast-reporting-statistics
                ssm-translate
                static
                statistics
                    group-interface
                status
            interface
                ipsec
            isis
                adjacency
                capabilities
                database
                flex-algo
                hostname
                interface
                lfa-coverage
                link-group-member-status
                link-group-status
                mapping-server
                prefix-sids
                routes
                spf-log
                sr-adj-sets
                sr-lfa-coverage
                sr-lfa-info
                statistics
                status
                summary-address
                topology
                unreachable-routes
            ldp
                bindings
                    active
                        detail
                        egress-if
                        egress-lsp
                        egress-nh
                        ipv4
                        ipv6
                        prefixes
                        summary
                    — detail
                    — ipv4
                    — ipv6
                    label-type
                    prefixes
                    services
                    session
                    summary
                discovery
                fec-egress-stats
                fec-originate
                interface
                parameters
                session
                session-parameters
                statistics
                statistics-summary
                status
                targ-peer
                targ-peer-template
                targ-peer-template-map
                tcp-session-parameters
            macsec
            mld
                group
                interface
                ipsec-interface
                ssm-translate
                static
                statistics
                status
            mpls
                bypass-tunnel
                forwarding-policies
                    binding-label
                    forwarding-policy
                    status
                interface
                lsp
                lsp-template
                path
                sr-te-lsp
                srlg-database
                static-lsp
                status
            mpls-labels
                label
                label-range
                summary
            mvpn
            mvpn-list
            nat
                lsn-blocks
                pool
                summary
            neighbor
            network-domains
            origin-validation
                database
                rpki-session
            ospf
                area
                capabilities
                database
                flex-algo
                hostname
                interface
                lfa-coverage
                mapping-server
                neighbor
                opaque-database
                prefix-sids
                range
                routes
                sham-link
                sham-link-neighbor
                spf
                sr-adj-sets
                sr-lfa-coverage
                statistics
                status
                virtual-link
                virtual-neighbor
            ospf3
                area
                capabilities
                database
                hostname
                interface
                lfa-coverage
                neighbor
                range
                routes
                spf
                sr-lfa-coverage
                statistics
                status
                virtual-link
                virtual-neighbor
            pcep
                pcc
                    detail
                    lsp-db
                    — p2mp-sr
                    path-request
                    pce-associations
                        diversity
                        policy
                    peer
                    status
            pim
                anycast
                crp
                extranet-interface
                group
                interface
                mc-ecmp-balance
                neighbor
                rp
                rp-hash
                s-pmsi
                statistics
                status
                tunnel-interface
            policy
            policy-edits
            radius-proxy-server
            radius-server
            rip
                database
                group
                neighbor
                peer
                statistics
            ripng
                database
                group
                neighbor
                peer
                statistics
            route-next-hop-policy
                template
            route-table
            rsvp
                interface
                neighbor
                session
                statistics
                status
            rtr-advertisement
            segment-routing
                — sr-mpls
                    prefix-sids
                sr-policies
                    all
                    bgp
                    static
                    static-policy
                    summary
            sgt-qos
                application
                dscp-map
            static-arp
            static-route
            status
            tunnel-interface
            tunnel-table
            twamp-light
            unreachable-route-table
            vrf-export-test
            vrrp
                instance
                statistics
        saa
        service
            customer
            egress-label
            — endpoint-using
            evpn-mpls
            fdb-info
            fdb-mac
            id
                all
                arp
                authentication
                    statistics
                base
                bgp
                — bgp-ad
                bgp-evpn
                    evpn-l2-oper-attrs
                bgp-ipvpn
                    — mpls
                — bgp-vpls
                bgp-vpws
                dhcp
                    lease-state
                    statistics
                    summary
                dhcp6
                    lease-state
                    statistics
                    — summary
                endpoint
                epipe
                etree
                evpn-mpls
                fdb
                gsmp
                    neighbors
                    sessions
                — host-tracking
                    — groups
                    — saps
                i-vpls
                igmp-snooping
                    all
                    — base
                    mrouters
                    port-db
                    proxy-db
                    querier
                    static
                    statistics
                interface
                l2-route-table
                l2pt
                labels
                log
                    filter-id
                    log-id
                    snmp-trap-group
                    — syslog
                mac-move
                mac-protect
                — macsec
                mfib
                mld-snooping
                    all
                    base
                    mrouters
                    port-db
                    proxy-db
                    querier
                    static
                    statistics
                mmrp
                mstp-configuration
                — mvrp
                proxy-arp
                proxy-nd
                sap
                sdp
                site
                — source-address
                split-horizon-group
                spoke-sdp-fec
                stp
                twamp-light
                — vpls-group
            ingress-label
            — ip-transport-using
            l2-route-table
            mac-list
            md-auto-id
            nat
                — lsn-subscribers
                nat-policy
                — overview
                port-forwarding-entries
                    — classic-lsn-sub
                — statistics
            oper-group
            provider-tunnel-using
            proxy-arp-nd
            — pw-routing
            pw-template
            — pw-template-using
            saii-type2-using
            sap-using
                aarp
                app-profile
                — ethernet-segment
                — interface
                mc-ring
            sdp
            sdp
            sdp
            sdp
            sdp
            sdp-group
            sdp-group-using
            sdp-using
                ethernet-segment
            service-name-using
            service-using
            site-using
            spoke-sdp-fec-using
            system
                bgp-auto-rd
                bgp-route-distinguisher
                fdb-usage
            taii-type2-using
            template
                vpls-sap-template
                vpls-sap-template-using
                vpls-template
                vpls-template-using
            vlan-aware-bundle
        snmp
            counters
            streaming
                counters
        subscriber-mgmt
            local-user-db
            rip-policy
        system
            alarms
            candidate
            connections
            cpu
            cpu
            cron
                schedule
            dhcp6
            file-transmission-profile
            grpc
            grpc-tunnel
                tunnel
            information
            ip
            license
            lldp
            load-balancing-alg
            management-interface
                commit-history
                configuration-sessions
                datastore-locks
                remote-management
            memory-pools
            netconf
                — call-home
                — connection
                — counters
                — schema-path
            ntp
            rollback
            script-control
                script
                script-policy
            security
                access-group
                access-group
                authentication
                cli-session-group
                dist-cpu-protection
                    policy
                dot1x
                hash-control
                    custom-hash
                keychain
                management
                management-access-filter
                    ip-filter
                    ipv6-filter
                    mac-filter
                password-options
                password-options
                profile
                profile
                snmp
                    community
                    src-access-list
                source-address
                ssh
                tls
                    cert-profile
                    client-tls-profile
                    server-tls-profile
                    trust-anchor-profile
                user
                view
            sntp
            telemetry
                grpc
                    subscription
                persistent
                    subscription
                sensor-group
            thresholds
            time
        test-oam
            oam-config-summary
            oam-perf
            twamp
                client
                server
                twamp-light
                    reflectors
        time
        uptime
        users
        version
        vrrp
            policy

tools Commands

The CLI tools commands provide two primary functions:
  • dump

  • perform

The tools dump commands provide additional detailed and enhanced information about the router.

The tools perform commands provide the ability to trigger a variety of actions in the router, such as a card power cycle ( tools perform card power-cycle), and APS switchovers.

    — tools
        dump
            auto-boot
            dhcp-rx-stats
            epipe-map-access-to-egress-port
            — epipe-map-to-network
            — esa
                — port-connectivity
            filter
                cam-utilization
                overload
                resources
                    cpm
                    dest-tracking
                        — ip
                        — ipv6
                    iom
                    ip
                    ipv6
                    mac
                    sticky-dest
            ipsec
                stats
                    ike-stats
                — transport-mode
                    — stats
                        — ike-stats
            lag
            log
                subscriptions
                subscriptions
            — mda
            mpls-resources
            nat
                — deterministic-mapping
                histogram
                isa
                    resources
                sessions
            — ospf-overview
            — persistence
                — ancp
                — dhcp-server
                — nat-port-forwarding
                — submgt
                — summary
            port
                — fp
                    — statistics
                pcs
                rs-fec
            qos
                match-criteria-overload
            — reassembly-resources
            redundancy
                multi-chassis
                    mc-endpoint
                    mc-endpoint
                    mc-ring
                    sync-database
            resource-usage
                card
                    fp
                    mda
                system
            router
                — autoconfigure
                    — dhcp-client
                    — dhcp6-client
                bfd
                — bgp
                    — routes
                — dhcp
                    — group-if-mapping
                    — group-if-stats
                — dhcp6
                    — group-if-mapping
                fib
                icmp-stats
                isis
                    — rlfa-backup-info
                    sr-adjacencies
                    sr-database
                ldp
                    fec
                    — import-pmsi-routes
                    instance
                    interface
                    memory-usage
                    peer
                    session
                    sockets
                    timers
                mpls
                    bypass-tunnel
                    — forwarding-policies
                    ftn
                    ilm
                    logger-event-bundling
                    lsp-history
                    lspinfo
                    memory-usage
                    te-lspinfo
                — mvpn
                    — provider-tunnels
                ospf
                    — abr
                    — area-range
                    — asbr
                    — bad-packet
                    — leaked-routes
                    — memory-usage
                    — request-list
                    — retransmission-list
                    — route-summary
                    — route-table
                    — sham-bad-packet
                    sr-adjacencies
                    sr-database
                ospf3
                    — abr
                    — area-range
                    — asbr
                    — bad-packet
                    — leaked-routes
                    — memory-usage
                    — request-list
                    — retransmission-list
                    — route-summary
                    — route-table
                pcep
                    pcc
                        lsp
                        — p2mp-sr
                — pim
                    — iom-failures
                rsvp
                    neighbor
                    psb
                    rsb
                    — tcsb
                segment-routing
                    tunnel
                static-route
                te-database
                    isis
                    ospf
                    ospf3
                web-rd
                    http-client
            security
                dist-cpu-protection
                    violators
            service
                — base-stats
                evpn
                id
                    evpn
                    — evpn-mpls
                    fdb
                        card-status
                        mac-status
                    — ignore-sap-port-state
                    interface
                        ignore-sap-port-state
                    loopback
                — ignore-sap-port-state
                — iom-stats
                — l2pt-diags
                loopback
                — mc-endpoint
                proxy-arp
                proxy-nd
                system
                vpls-fdb-stats
                — vpls-mfib-stats
            system
                — congestion-status
                nsp-proxy
                    history
                security
                    secure-boot
                        uefi-vars
                telemetry
                    expand-wildcard-path
                    on-change-paths
            test-oam
                twamp
                    server
                        error-counters
        perform
            auto-boot
            — card
                — power-cycle
            chassis
                check-bp-eprom
            filter
                ip-filter
                    entry
                        activate-primary-action
                ipv6-filter
                    entry
                        activate-primary-action
                redirect-policy
                    activate-best-dest
            ipsec
                client-db
                ike-initiate
                — transport-mode
                    — ike-initiate
            lag
                clear-force
                force
            log
                subscribe-to
                test-event
                unsubscribe-from
            — mda
            nat
                deterministic
                    calculate-maps
                port-forwarding-action
                    lsn
            persistence
                downgrade
            — port
            redundancy
                forced-single-sfm-overload
                issu-post-process
                multi-chassis
                    mc-ipsec
                        force-switchover
                            domain
                            — tunnel-group
                    sync-database-reconcile
            router
                — autoconfigure
                    — dhcp-client
                    — dhcp6-client
                — bgp
                    — next-hop-reprogram
                dhcp
                    local-dhcp-server
                        failover
                            abort-startup-wait
                            force-partner-down
                        pool
                            create-sticky-lease
                            failover
                                abort-startup-wait
                                force-partner-down
                        send-force-renew
                dhcp6
                    local-dhcp-server
                        failover
                            abort-startup-wait
                            force-partner-down
                        pool
                            failover
                                abort-startup-wait
                                force-partner-down
                isis
                    ldp-sync-exit
                    — overload
                    run-manual-spf
                — mcac
                    — recalc
                mpls
                    cspf
                    force-switch-path
                    manual-switch-path
                    resignal
                    resignal-bypass
                    revert
                    sr-te-cspf
                    switch-path
                    trap-suppress
                    update-path
                ospf
                    ldp-sync-exit
                    — overload
                    refresh-lsas
                    run-manual-spf
                ospf3
                    ldp-sync-exit
                    — overload
                    refresh-lsas
                    run-manual-spf
                pim
                    mc-ecmp-rebalance
            security
                authentication-server-check
                dist-cpu-protection
                    release-hold-down
            service
                — eval-pw-template
                — eval-vpls-sap-template
                — eval-vpls-template
                id
                    admin-lock
                        pw
                            sdp
                    — endpoint
                        — force-switchover
                    — eval-pw-template
                    — eval-vpls-sap-template
                    — eval-vpls-template
                    — instantiate-data-saps
                    interface
                        ignore-sap-port-state
                    loopback
                        eth
                            sap
                            sdp
                        pw
                            sdp
                    — mcac
                    proxy-arp
                        dynamic-resolve
                    proxy-nd
                        dynamic-resolve
                — pw-routing
                    — eval-expired-fec
                    — spoke-sdp-fec-release
            subscriber-mgmt
                local-user-db
                    ipoe
                        host-lookup
            system
                auto-node-provisioning
                    file
                    ipv4
                    ipv6
                management-interface
                    configuration-mode
                    — snmp
                        change-key
                        generate-key
                nsp-proxy
                    clear-history
                script-control
                    script-policy
                        stop
                — ssh
                    — gen-keypair